aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Add changelog for 74 and update AUTHORS.rstnl67202023-12-212-6/+20
|
* mkarchiso: place prepared systemd-boot configuration in work directorynl67202023-12-211-18/+27
| | | | | | | | | | Keep the prepared `.conf` files in `work_dir` to avoid having to run them through `sed` twice. This makes sure the FAT image size calculation is more correct and also simplifies copying the files m to both ISO 9660 and the FAT image since the the whole `loader` directory can copied instead of copying individual files.
* mkarchiso: add missing replacement for ARCHISO_UUID in ↵nl67202023-12-212-0/+3
| | | | | | /loader/entries/*.conf on ISO 9660 Fixes: 094afd169a0ff871eb7a6b37d68a9b9bcb7195e4 ("mkarchiso: support %ARCHISO_UUID% variable in boot loader configuration")
* configs/*/airootfs/etc/systemd/network/: add RequiredForOnline=routablenl67202023-12-095-0/+15
| | | | | | | | | | | By default systemd-networkd-wait-online.service considers a network connection to be "online" when it has reached the "degraded" state (see networkctl(1) for the definitions). Since "degraded" does not ensure there's a routable address, let's change the connection's requirement to "routable" instead. This gives a better chance that the network really is online when network-online.target is reached.
* Merge remote-tracking branch 'origin/merge-requests/355'nl67202023-12-082-1/+2
|\ | | | | | | | | | | | | | | | | By John Lane * origin/merge-requests/355: update changelog Allow download automated script using TFTP See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/355
| * update changelogJohn Lane2023-12-071-0/+1
| |
| * Allow download automated script using TFTPJohn Lane2023-12-071-1/+1
|/
* Merge remote-tracking branch 'origin/merge-requests/353'nl67202023-12-071-1/+2
|\ | | | | | | | | | | | | | | By Anton Hvornum * origin/merge-requests/353: Ensured the correct CA key and CA certificate is used during signing process. It's been working based on default assumptions from the openssl configuration, but it's worth being explicit when doing these operations. Also removed a redundant -sha256 See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/353
| * Ensured the correct CA key and CA certificate is used during signing ↵Anton Hvornum2023-12-071-1/+2
|/ | | | process. It's been working based on default assumptions from the openssl configuration, but it's worth being explicit when doing these operations. Also removed a redundant -sha256
* .gitlab/ci/build_archiso.sh: do not use "default" as the gpg Key-Typenl67202023-12-071-2/+2
| | | | | | | | GnuPG changed their default from RSA to ECC, so Key-Length not a thing it supports. Instead it asks for the Key-Curve. Avoid using the default and hardcode ed25519 (which is the current GnuPG default).
* Merge remote-tracking branch 'origin/merge-requests/351'nl67202023-12-012-0/+3
|\ | | | | | | | | | | | | | | By kojq su * origin/merge-requests/351: add bcachefs-tools See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/351
| * add bcachefs-toolskojq su2023-12-012-0/+3
|/
* Add changelog for 73nl67202023-09-291-9/+18
|
* Add configs/baseline/airootfs/etc/localtimenl67202023-09-292-0/+4
| | | | | | | Make sure the ISO can be booted successfully without triggering questions from systemd-firstboot. Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/205 Fixes: 6e1be91961967a6485901ac431f6f6b06675b750 ("archiso/mkarchiso: write "uninitialized" to /etc/machine-id")
* mkarchiso: always create /boot/grub/grubenv and /boot/grub/loopback.cfgnl67202023-09-281-2/+41
| | | | | | | | | | Even if GRUB is not used as a boot loader for the ISO, create a `/boot/grub/grubenv` file in the ISO 9660 file system. If a `loopback.cfg` file exists in the profile's `grub` directory, copy it to `/boot/grub/loopback.cfg` on the ISO. This ensures the funtionality will not be lost if the used boot loaders are changed.
* Add configs/*/grub/loopback.cfgnl67202023-09-283-0/+155
| | | | | | | | | See https://www.supergrubdisk.org/wiki/Loopback.cfg for details. Only `${iso_path}` is guaranteed, so we need to search for the volume, on which the ISO file resides, ourselves. Implements https://gitlab.archlinux.org/archlinux/archiso/-/issues/165
* configs/*/grub/grub.cfg: do not hardcode the architecture and platformnl67202023-09-282-22/+101
| | | | | | | | | | Construct a human readable platform identifier from GRUB's built-in variables and use it in menu item descriptions. Only add the menu entries for the additional tools (UEFI shell, Memtest86+) if the files exist. Modify baseline's `grub.cfg` to closer match releng.
* configs/releng/grub/grub.cfg: play init tune at the endnl67202023-09-281-2/+4
| | | | | Move the `play` command to the end of the file so it plays after the menu entries are shown and ready.
* configs/*/grub/grub.cfg: rearrange module loadingnl67202023-09-282-6/+12
| | | | | | * Do not manually load modules that will get loaded by invoking a command. * Explicitly load serial modules. * Move `insmod all_video` after the font is loaded.
* mkarchiso: add uefi-ia32.systemd-boot.esp and ↵nl67202023-09-243-31/+135
| | | | | | | | | | | | uefi-ia32.systemd-boot.eltorito boot modes The systemd 254.2-1 package ships with IA32 systemd-boot, so it is possible to use for booting on IA32 UEFI. Perhaps they will be useful in the future. At least for now, the baseline and releng profiles are not changed to use them. When the issues and headaches caused with GRUB reach a critical point, then we will switch.
* configs/releng/packages.x86_64: add boltnl67202023-09-242-0/+3
| | | | | | | bolt can be used to list and authorize Thunderbolt and USB4 devices. Inspired by https://bbs.archlinux.org/viewtopic.php?id=288731 where a user needed to install the package in the live environment.
* Add changelog for 72nl67202023-08-291-6/+18
|
* Use pcsclite for communicating with OpenPGP smartcardsDavid Runge2023-08-294-0/+7
| | | | | As opgpcard uses pcsclite and gnupg is able to use it as well, switch away from using gnupg's internal ccid driver.
* Add sequoia-sq and openpgp-card-tools to releng profileDavid Runge2023-08-292-0/+3
|
* /etc/ssh/sshd_config.d/10-archiso.conf: keep only the modified optionsnl67202023-08-262-230/+4
| | | | | | | | The only changes we make to the default are to enable root login via a password. While `PasswordAuthentication yes` is the default, let's set it explicitly to avoid potential issues in the future.
* Move custom sshd_config to /etc/ssh/sshd_config.d/nl67202023-08-263-0/+1
| | | | | | | | openssh 9.4p1-2 changed /etc/ssh/sshd_config to add support for drop-in files in /etc/ssh/sshd_config.d/. Using drop-in files avoids needing to keep up with changes to the default /etc/ssh/sshd_config.
* configs/releng/packages.x86_64: add tpm2-toolsnl67202023-08-262-0/+3
| | | | | The tools are useful for clearing, creating and reading keys and etc. on the TPM.
* Remove qemu-headless from list of dependencies in GitLab CIDavid Runge2023-08-211-1/+1
| | | | | Remove qemu-headless since it is no longer needed to build the project and is also no longer provided by qemu-base.
* Set IPv6PrivacyExtensions=yes in global systemd-netorkd configurationnl67202023-08-117-4/+5
| | | | | | Since systemd 245, IPv6PrivacyExtensions can be set not just per connection, but also globally for all connection with a configuration file in /etc/systemd/network.conf.d/.
* configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ↵nl67202023-08-052-3/+5
| | | | | | | | | tmpfs with noswap option Since tmpfs has a `noswap` option, use it instead of ramfs. Unlike ramfs, tmpfs has a limit to its size. This reverts commit 09b0428128700f37bd465eb54c6e45f69c17617d ("configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfs").
* .gitlab/ci/build_archiso.sh: create a valid code signing certificatenl67202023-08-021-15/+6
| | | | | | | Make sure the certificate has a extendedKeyUsage section with codeSigning per the iPXE requirements. Fixes #195
* .gitlab/ci/build_archiso.sh: improve CI codesigning certificatenl67202023-08-021-3/+4
| | | | | | | | | Adjust subject name to more closely match what's used in create_ephemeral_pgp_key. Reduce the certificate validity to two days. These are just temporary certificates, they will not be used anywhere. Fixes #196
* configs/*/airootfs/etc/mkinitcpio.conf.d/archiso.conf: remove comments and ↵nl67202023-06-212-131/+0
| | | | | | unused options Set only the custom values for HOOKS and COMPRESSION.
* configs/: move custom mkinitcpio.conf files to /etc/mkinitcpio.conf.d/nl67202023-06-215-2/+4
| | | | This allows to retain a pristine /etc/mkinitcpio.conf in the rootfs.
* Fix optional shellcheck warningsnl67202023-06-157-351/+352
| | | | Additionally fix a few code style issues found with shfmt.
* .shellcheckrc: enable optional checksnl67202023-06-151-0/+11
| | | | | | | * Suggest explicitly using -n in `[ $var ]`. https://www.shellcheck.net/wiki/SC2243 & https://www.shellcheck.net/wiki/SC2244 * Suggest 'command -v' instead of 'which'. https://www.shellcheck.net/wiki/SC2230 * Suggest quoting variables without metacharacters. https://www.shellcheck.net/wiki/SC2248 * Require [[ and warn about [ in Bash/Ksh. https://www.shellcheck.net/wiki/SC2292
* mkarchiso: prevent interference from xorriso startup filesnl67202023-06-152-1/+7
| | | | | | | | | Options set in xorriso startup files (~/.xorrisorc) could interfere with the xorriso command run by mkarchiso. For example, if ~root/.xorrisorc contains -dummy on, then the ISO file will be empty. Pass -no_rc as the first option to xorriso to prevent interference and unintended behavior. Fixes #153.
* mkarchiso: run _cms_sign_artifact only oncenl67202023-06-012-1/+2
| | | | | | | | Since `_build_buildmode_netboot` runs `_build_iso_base` which runs `_prepare_airootfs_image`, the call to `_cms_sign_artifact` in `_build_buildmode_netboot` can be removed. Fixes #197
* Add changelog for 71 and update AUTHORS.rstnl67202023-05-282-10/+45
|
* Update configs/{baseline,releng}/pacman.confnl67202023-05-253-12/+7
| | | | | | | Update pacman.conf to match the one shipped with pacman 6.0.2-7. The community repository is gone. See https://archlinux.org/news/git-migration-completed/
* Merge remote-tracking branch 'origin/merge-requests/330'nl67202023-05-256-0/+12
|\ | | | | | | | | | | | | | | By Sorin Pânca * origin/merge-requests/330: Add support for mDNS. See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/330
| * Add support for mDNS.Sorin Pânca2023-05-226-0/+12
|/
* mkarchiso: add a -r option to delete the working directorynl67202023-05-172-2/+24
| | | | | | | | | | `-r` will instruct to delete the working directory at the end of a `mkarchiso` run. If the specified directory already exists, then it will not be deleted and instead produce a warning. Implements #211
* Merge remote-tracking branch 'origin/merge-requests/327'nl67202023-05-171-1/+1
|\ | | | | | | | | | | | | | | | | By 2hexed * origin/merge-requests/327: Update mkarchiso Fixed a little typo in install_dir's description See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/327
| * Update mkarchiso2hexed2023-05-171-1/+1
|/
* CHANGELOG.rst: remove stray git conflict markernl67202023-05-171-1/+0
| | | | Fixes 8cc0e9e5b09d504a50701a825f0ab9992ed73b6f
* configs/releng/packages.x86_64: add more terminfo packagesnl67202023-05-172-0/+4
| | | | | Add foot-terminfo and wezterm-terminfo packages to allow using their terminfo entries for installations via SSH.
* README.profile.rst: document %ARCHISO_UUID% and %ARCHISO_SEARCH_FILENAME%nl67202023-05-171-0/+6
| | | | | While their values are not affected by `profiledef.sh` variables, there is no other place to document these *identifiers*.
* mkarchiso: read SOURCE_DATE_EPOCH from file earlynl67202023-05-172-6/+12
| | | | | | | When restarting an interrupted build, SOURCE_DATE_EPOCH needs to be available before `profiledef.sh` is read, since it may reference it. Fixes 7c6f266ec94e3eff23466ed8d0c45e4bee0ddae4
* Use UUIDs in all boot loader configuration filesnl67202023-05-177-7/+8
| | | | | | | Relying on the volume UUID instead of its LABEL avoids collisions of multiple ISOs created in the same month. Fixes #202
generated by cgit v1.2.3-70-g09d2 (git 2.51.0) at 2025-12-29 20:25:29 +0000