aboutsummaryrefslogtreecommitdiff
path: root/configs
Commit message (Collapse)AuthorAgeFilesLines
* Allow download automated script using TFTPJohn Lane2023-12-071-1/+1
|
* add bcachefs-toolskojq su2023-12-011-0/+1
|
* Add configs/baseline/airootfs/etc/localtimenl67202023-09-291-0/+1
| | | | | | | Make sure the ISO can be booted successfully without triggering questions from systemd-firstboot. Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/205 Fixes: 6e1be91961967a6485901ac431f6f6b06675b750 ("archiso/mkarchiso: write "uninitialized" to /etc/machine-id")
* Add configs/*/grub/loopback.cfgnl67202023-09-282-0/+153
| | | | | | | | | See https://www.supergrubdisk.org/wiki/Loopback.cfg for details. Only `${iso_path}` is guaranteed, so we need to search for the volume, on which the ISO file resides, ourselves. Implements https://gitlab.archlinux.org/archlinux/archiso/-/issues/165
* configs/*/grub/grub.cfg: do not hardcode the architecture and platformnl67202023-09-282-22/+101
| | | | | | | | | | Construct a human readable platform identifier from GRUB's built-in variables and use it in menu item descriptions. Only add the menu entries for the additional tools (UEFI shell, Memtest86+) if the files exist. Modify baseline's `grub.cfg` to closer match releng.
* configs/releng/grub/grub.cfg: play init tune at the endnl67202023-09-281-2/+4
| | | | | Move the `play` command to the end of the file so it plays after the menu entries are shown and ready.
* configs/*/grub/grub.cfg: rearrange module loadingnl67202023-09-282-6/+12
| | | | | | * Do not manually load modules that will get loaded by invoking a command. * Explicitly load serial modules. * Move `insmod all_video` after the font is loaded.
* configs/releng/packages.x86_64: add boltnl67202023-09-241-0/+1
| | | | | | | bolt can be used to list and authorize Thunderbolt and USB4 devices. Inspired by https://bbs.archlinux.org/viewtopic.php?id=288731 where a user needed to install the package in the live environment.
* Use pcsclite for communicating with OpenPGP smartcardsDavid Runge2023-08-293-0/+6
| | | | | As opgpcard uses pcsclite and gnupg is able to use it as well, switch away from using gnupg's internal ccid driver.
* Add sequoia-sq and openpgp-card-tools to releng profileDavid Runge2023-08-291-0/+2
|
* /etc/ssh/sshd_config.d/10-archiso.conf: keep only the modified optionsnl67202023-08-262-230/+4
| | | | | | | | The only changes we make to the default are to enable root login via a password. While `PasswordAuthentication yes` is the default, let's set it explicitly to avoid potential issues in the future.
* Move custom sshd_config to /etc/ssh/sshd_config.d/nl67202023-08-262-0/+0
| | | | | | | | openssh 9.4p1-2 changed /etc/ssh/sshd_config to add support for drop-in files in /etc/ssh/sshd_config.d/. Using drop-in files avoids needing to keep up with changes to the default /etc/ssh/sshd_config.
* configs/releng/packages.x86_64: add tpm2-toolsnl67202023-08-261-0/+1
| | | | | The tools are useful for clearing, creating and reading keys and etc. on the TPM.
* Set IPv6PrivacyExtensions=yes in global systemd-netorkd configurationnl67202023-08-116-4/+4
| | | | | | Since systemd 245, IPv6PrivacyExtensions can be set not just per connection, but also globally for all connection with a configuration file in /etc/systemd/network.conf.d/.
* configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ↵nl67202023-08-051-3/+3
| | | | | | | | | tmpfs with noswap option Since tmpfs has a `noswap` option, use it instead of ramfs. Unlike ramfs, tmpfs has a limit to its size. This reverts commit 09b0428128700f37bd465eb54c6e45f69c17617d ("configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfs").
* configs/*/airootfs/etc/mkinitcpio.conf.d/archiso.conf: remove comments and ↵nl67202023-06-212-131/+0
| | | | | | unused options Set only the custom values for HOOKS and COMPRESSION.
* configs/: move custom mkinitcpio.conf files to /etc/mkinitcpio.conf.d/nl67202023-06-214-2/+2
| | | | This allows to retain a pristine /etc/mkinitcpio.conf in the rootfs.
* Fix optional shellcheck warningsnl67202023-06-153-67/+60
| | | | Additionally fix a few code style issues found with shfmt.
* Update configs/{baseline,releng}/pacman.confnl67202023-05-252-12/+6
| | | | | | | Update pacman.conf to match the one shipped with pacman 6.0.2-7. The community repository is gone. See https://archlinux.org/news/git-migration-completed/
* Add support for mDNS.Sorin Pânca2023-05-225-0/+11
|
* configs/releng/packages.x86_64: add more terminfo packagesnl67202023-05-171-0/+2
| | | | | Add foot-terminfo and wezterm-terminfo packages to allow using their terminfo entries for installations via SSH.
* Use UUIDs in all boot loader configuration filesnl67202023-05-176-7/+7
| | | | | | | Relying on the volume UUID instead of its LABEL avoids collisions of multiple ISOs created in the same month. Fixes #202
* Added classes for Memtest86+ and UEFI Shell menuentriesAntonio V2023-05-141-3/+3
|
* Merge remote-tracking branch 'origin/merge-requests/235'nl67202023-05-131-1/+10
|\ | | | | | | | | | | | | | | By Zig Globulin * origin/merge-requests/235: wait for networkd online before curl invocation See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/235
| * wait for networkd online before curl invocationZig Globulin2023-03-021-1/+10
| | | | | | | | | | | | | | 1) wait for network-online.target before invoking curl as there's no synchronization with network setup for this script 2) don't hide curl errors - it may be easier to debug the issues 3) add log and comments
* | configs/baseline/profiledef.sh: compress morenl67202023-03-171-1/+1
|/ | | | | | | | * Use LZMA extreme compression level, * enable experimental compressed fragments feature to create a smaller image, * enable experimental data deduplication. This decreases the baseline profile's `airootfs.erofs` size by about ~16 MiB.
* Use console as grub's terminal_outputDavid Runge2023-02-272-4/+2
| | | | | | | configs/{baseline,releng}/grub/grub.cfg: Use `console` as grub's `terminal_output`, as with `gfxterm` only a blank screen is shown on some hardware. Fixes #212
* configs/*/grub/grub.cfg: replace /dev/disk/by-uuid/ with UUID=nl67202023-02-242-3/+3
| | | | | | | | | Use the shorter and more nicer looking `UUID=` *tags* instead of the `/dev/disk/by-uuid/` paths. This requires mkinitcpio-archiso v68. Related to #202
* Move the .uuid file to /boot/grub/YYYY-mm-dd-HH-MM-SS-00.uuidnl67202023-02-242-2/+2
| | | | | | | | | | | | | | To prevent the file from being accidentally missed when someone copies the ISO's contents, let's not place it in a directory that starts with a dot. Since all GRUB related files are in /boot/grub/, put it there too. Instead of using a more unique UUID for the file name, use `YYYY-mm-dd-HH-MM-SS-00.uuid` which matches the ISO's modification date in UTC,i.e. its "UUID". If multiple ISOs would be generated in the exact same second, the ISO 9660 modification date (i.e. its "UUID") would be the same, so there would be not way to distinguish between the volumes anyway. This also makes the file look less suspicious to the casual glance.
* configs/*/grub/grub.cfg: reuse ARCHISO_HINT and ARCHISO_UUID passed from the ↵nl67202023-02-222-6/+14
| | | | | | | | embedded grub.cfg The `grub.cfg` embedded in the GRUB binaries already sets `ARCHISO_HINT` and `ARCHISO_UUID` in most cases. To avoid performing the same searches multiple times, use the existing variables.
* configs/*/profiledef.sh: honor SOURCE_DATE_EPOCHnl67202023-02-222-4/+4
| | | | Ensure the **correct** date is used in `iso_label` and `iso_version`.
* mkarchiso: do not place memtest86+ in netboot artifactsnl67202023-02-102-2/+2
| | | | | | | | | Move memtest86+ to `/boot/memtest86+/` on ISO 9660. That directory is not copied to netboot artifact output. Netboot boot menu https://ipxe.archlinux.org/releng/netboot/archlinux.ipxe does not have entries for memtest and archiso-manager removes these files (not the EFI one, though) before uploading the release files anyway.
* configs/*/airootfs/etc/ssh/sshd_config: update to match 9.2p1-1nl67202023-02-072-6/+6
| | | | | | | | Update /etc/ssh/sshd_config to match changes made in https://github.com/archlinux/svntogit-packages/commit/42aa04744e96c5805b7aa3904636f8cbd781f682 and https://github.com/archlinux/svntogit-packages/commit/7166713c55002dac3c2b306fdc63e89a412083a6 The only modification remains `PermitRootLogin yes`.
* Preload GRUB's NTFS, exFAT and UDF modulesnl67202023-02-022-0/+8
| | | | | | | | There are claims that some UEFI allegedly natively support NTFS. Preload the required GRUB modules to support booting from NTFS on such systems. Additionally preload the exFAT and UEF modules, because, why not?
* configs/*/grub/grub.cfg: search for a .uuid file in /.disk/ and use the ↵nl67202023-02-022-9/+13
| | | | | | | | | | | | | | | | | volume it's on Search for `/.disk/%UUID_SEARCH_FILENAME%.uuid` and pass the UUID of the volume it's on as `archisodevice`. mkarchiso will replace `%UUID_SEARCH_FILENAME%` with a hardcoded value generated using `SOURCE_DATE_EPOCH` durring ISO build. This allows to prepare an UEFI bootable installation medium by simply copying the directory structure without having to touch `grub.cfg`. Relying on the volume UUID instead of its LABEL also avoids collisions of multiple ISOs created in the same month. Fixes #202
* Update URLsnl67202023-01-292-3/+3
| | | | | | | | * Update mkinitcpio-archiso project link, * Update code of conduct link, * Update arch-releng mailing list link, * Use HTTPS where possible, * Replace dead link.
* configs/baseline/profiledef.sh: use LZMA compression for the EROFS imagenl67202022-12-171-1/+1
| | | | | | | | | Now that xz 5.4 is out and erofs-utils is built with LZMA support, it is possible to compress the EROFS image with LZMA for higher compression. `mkfs.erofs` trows a few warnings about using experimental features, but they should not be an issue. Nothing changes for the releng profile, for now at least.
* configs/releng/syslinux/archiso_pxe-linux.cfg: replace checksum and verify ↵nl67202022-12-101-3/+3
| | | | | | | | | | | | | | | with cms_verify=y Specify `cms_verify=y` in SYSLINUX/PXELINUX configuration to use OpenSSL CMS based method for verifying the root file system image against the code signing certificates in the initramfs. `checksum` and `verify` are removed since they essentially serve the same purpose and performing all the checks just needlessly delays boot. Additionally, the removal of `verify` allows to build the ISO without gpg, i.e. without using `mkarchiso`'s `-g` and `-G` options. Fixes #200
* Add Memtest86+ to x86_64 UEFI GRUB boot menuJonathan Liu2022-12-032-0/+6
| | | | Implements #203.
* configs/releng/airootfs/root/.zlogin: use grep -a to ensure /proc/cmdline is ↵nl67202022-11-121-1/+1
| | | | | | | treated as text This protects against the case where /proc/cmdline contains garbage triggering grep to think it is a binary. See e.g. https://bugs.archlinux.org/task/76468 for an example.
* configs/releng/airootfs/etc/mkinitcpio.conf: replace the deprecated ↵nl67202022-10-251-1/+1
| | | | | | | | archiso_kms hook with kms The archiso_kms hook was moved from mkinitcpio-archiso to the mkinitcpio project. See https://github.com/archlinux/mkinitcpio/commit/7bfe4861eacb3bf6cb70d9a17a0262542733a8ed and https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/commit/dec17db5324285118e2faee296cc990ff1281bd8
* configs/: remove "Copy to RAM" boot entries since it is automatic nownl67202022-10-226-42/+0
| | | | | | | | The default is now copytoram=auto which enables copying to RAM when the rootfs image size is less than 4 GiB and free RAM exceeds the rootfs image size + 2 GiB. See https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/issues/13 and https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/merge_requests/26. Implements #177.
* configs/: Do not explicitly enable qemu-guest-agent.servicenl67202022-10-062-2/+0
| | | | | | qemu-guest-agent.service will be started by the /usr/lib/udev/rules.d/99-qemu-guest-agent.rules udev rule. Fixes #199
* Order pacman-init.service after time-sync.targetDavid Runge2022-09-251-1/+1
| | | | | configs/releng/airootfs/etc/systemd/system/pacman-init.service: Order pacman-init.service after time-sync.target, so that time on the host is synchronized before initializing pacman.
* Enable systemd-timesyncd and systemd-time-wait-syncDavid Runge2022-09-253-0/+3
| | | | | | | | configs/releng/airootfs/etc/systemd/system/{dbus-org.freedesktop.timesync1},sysinit.target.wants/systemd-timesyncd}.service: Enable systemd-timesyncd which aliases to dbus-org.freedesktop.timesync1 to ensure time gets synced on the host. configs/releng/airootfs/etc/systemd/system/sysinit.target.wants/systemd-time-wait-sync.service: Enable systemd-time-wait-sync to ensure time is finished syncing when time-sync.target is finished.
* remove ipw2100-fw and ipw2200-fw, cleanup of [core]Tobias Powalowski2022-09-221-2/+0
|
* Order pacman-init.service before archlinux-keyring-wkd-sync.servicenl67202022-09-011-0/+2
| | | | | | archlinux-keyring-wkd-sync.service needs an initialized pacman keyring to work. Add BindsTo=etc-pacman.d-gnupg.mount to stop pacman-init.service if the mount unit suddenly enters inactive state.
* configs/*/grub/grub.cfg: enable serial input and outputnl67202022-06-262-5/+23
| | | | | | | | Try to initialize a serial device and use it for input and output. Add more comments to grub.cfg to explain what is done. Related to #75
* configs/*/grub/grub.cfg: auto-boot after 15 secondsnl67202022-06-232-12/+20
| | | | | | | * Set the default boot entry and its timeout. * Add classes to menu entries to allow theming them. Fixes #179
* change grub init tuneAlexander Epaneshnikov2022-06-181-9/+2
| | | | yes it was descriptive but too large. this fixes #180