#!/bin/sh

#-

# Copyright (c) 2015-2017 The FreeBSD Foundation

#

# Portions of this software were developed by Glen Barber

# under sponsorship from the FreeBSD Foundation.

#

# Common subroutines used to build arm, arm64, or RISC-V SD card images.

#

#

cleanup() {

umount_loop ${DESTDIR}/dev 2>/dev/null

fi

umount_loop ${DESTDIR}

mdconfig -d -u ${mddev}

fi

}

arm_create_disk() {

# Create the target raw file and temporary work directory.

chroot ${CHROOTDIR} gpart create -s ${PART_SCHEME} ${mddev}

if [ "${PART_SCHEME}" = "GPT" ]; then

chroot ${CHROOTDIR} gpart add -t efi -l efi -a 512k -s ${FAT_SIZE} ${mddev}

chroot ${CHROOTDIR} gpart add -t freebsd-ufs -l rootfs -a 64k ${mddev}

fi

if [ "${PART_SCHEME}" = "MBR" ]; then

chroot ${CHROOTDIR} gpart add -t '!12' -a 512k -s ${FAT_SIZE} ${mddev}

chroot ${CHROOTDIR} gpart set -a active -i 1 ${mddev}

chroot ${CHROOTDIR} gpart add -t freebsd ${mddev}

fi

return 0

}

}

arm_install_base() {

_OSVERSION=$(chroot ${CHROOTDIR} /usr/bin/uname -U)

REVISION=$(chroot ${CHROOTDIR} make -C /usr/src/release -V REVISION)

BRANCH=$(chroot ${CHROOTDIR} make -C /usr/src/release -V BRANCH)

DESTDIR=${DESTDIR} KERNCONF=${KERNEL} \

${CONF_FILES} installworld installkernel distribution

chroot ${CHROOTDIR} mkdir -p ${DESTDIR}/boot/efi

arm_create_user

arm_setup_usb_otg

echo '# Custom /etc/fstab for FreeBSD embedded images' \

> ${CHROOTDIR}/${DESTDIR}/etc/fstab

echo "tmpfs /tmp tmpfs rw,mode=1777 0 0" \

>> ${CHROOTDIR}/${DESTDIR}/etc/fstab

local hostname

hostname="$(echo ${KERNEL} | tr '[:upper:]' '[:lower:]')"

echo "hostname=\"${hostname}\"" > ${CHROOTDIR}/${DESTDIR}/etc/rc.conf

echo 'sshd_enable="YES"' >> ${CHROOTDIR}/${DESTDIR}/etc/rc.conf

echo 'sendmail_enable="NONE"' >> ${CHROOTDIR}/${DESTDIR}/etc/rc.conf

echo 'sendmail_submit_enable="NO"' >> ${CHROOTDIR}/${DESTDIR}/etc/rc.conf

echo 'sendmail_outbound_enable="NO"' >> ${CHROOTDIR}/${DESTDIR}/etc/rc.conf

echo 'sendmail_msp_queue_enable="NO"' >> ${CHROOTDIR}/${DESTDIR}/etc/rc.conf

echo 'growfs_enable="YES"' >> ${CHROOTDIR}/${DESTDIR}/etc/rc.conf

sync

umount_loop ${CHROOTDIR}/${DESTDIR}

FATMOUNT="${DESTDIR%${KERNEL}}/fat"

UFSMOUNT="${DESTDIR%${KERNEL}}/ufs"

chroot ${CHROOTDIR} mkdir -p "${FATMOUNT}" "${UFSMOUNT}"

chroot ${CHROOTDIR} mount_msdosfs ${dospart} ${FATMOUNT}

chroot ${CHROOTDIR} mount ${ufspart} ${UFSMOUNT}

BOOTFILES="$(chroot ${CHROOTDIR} \

env TARGET=${EMBEDDED_TARGET} TARGET_ARCH=${EMBEDDED_TARGET_ARCH} \

WITH_UNIFIED_OBJDIR=yes \

arm_do_quirk() {

# Override in the ${EMBEDDED_TARGET}/${BOARDNAME}.conf file.

}

#!/bin/sh

#

#

# Convention of Linux type VM on Azure is 30G

# See ResourceDisk.EnableSwap and ResourceDisk.SwapSizeMB in waagent.conf

export NOSWAP=YES

export VM_BOOTPARTSOFFSET=1M

vm_extra_pre_umount() {

# The firstboot_pkgs rc.d script will download the repository

# catalogue and install or update pkg when the instance first

# launches, so these files would just be replaced anyway; removing

# them from the image allows it to boot faster.

chroot ${DESTDIR} ${EMULATOR} env ASSUME_ALWAYS_YES=yes \

/usr/sbin/pkg delete -f -y pkg

cat << EOF >> ${DESTDIR}/etc/rc.conf

ifconfig_hn0="SYNCDHCP"

touch ${DESTDIR}/firstboot

return 0

}

#!/bin/sh

#

#

# Should be enough for base image, image can be resized in needed

loader_logo="none"

console="comconsole,vidconsole"

EOF

cat <<EOF >> ${DESTDIR}/etc/ssh/sshd_config

PermitRootLogin yes

PasswordAuthentication yes

UsePAM no

EOF

return 0

}

#!/bin/sh

# the partition to fill the root disk after the EC2 instance is launched.

# Note that if this is set to <N>G, we will end up with an <N+1> GB disk

export NOSWAP=YES

mount -t devfs devfs ${DESTDIR}/dev

chroot ${DESTDIR} ${EMULATOR} env ASSUME_ALWAYS_YES=yes \

/usr/sbin/pkg delete -f -y pkg

umount ${DESTDIR}/dev

# Turn off IPv6 Duplicate Address Detection; the EC2 networking

# configuration makes it unnecessary.

echo 'net.inet6.ip6.dad_count=0' >> ${DESTDIR}/etc/sysctl.conf

echo 'autoboot_delay="-1"' >> ${DESTDIR}/boot/loader.conf

echo 'beastie_disable="YES"' >> ${DESTDIR}/boot/loader.conf

printf -- "-n\n" > ${DESTDIR}/boot.config

# The emulated keyboard attached to EC2 instances is inaccessible to

echo 'hint.atkbd.0.disabled=1' >> ${DESTDIR}/boot/loader.conf

echo 'hint.atkbdc.0.disabled=1' >> ${DESTDIR}/boot/loader.conf

# EC2 has two consoles: An emulated serial port ("system log"),

# which has been present since 2006; and a VGA console ("instance

# screenshot") which was introduced in 2016.

echo 'boot_multicons="YES"' >> ${DESTDIR}/boot/loader.conf

# Load the kernel module for the Amazon "Elastic Network Adapter"

echo 'if_ena_load="YES"' >> ${DESTDIR}/boot/loader.conf

# historical "nvd" driver.

echo 'hw.nvme.use_nvd="0"' >> ${DESTDIR}/boot/loader.conf

sed -i '' -e \

${DESTDIR}/etc/ssh/sshd_config

sed -i '' -e 's/update.FreeBSD.org/aws.update.FreeBSD.org/' \

${DESTDIR}/etc/freebsd-update.conf

# Use the NTP service provided by Amazon

sed -i '' -e 's/^pool/#pool/' \

EOF

chmod 755 ${DESTDIR}/etc/autofs/special_efs

touch ${DESTDIR}/firstboot

return 0

}

#!/bin/sh

#

#

# The default of 3GB is too small for GCE, so override the size here.

# Set to a list of packages to install.

export VM_EXTRA_PACKAGES="${VM_EXTRA_PACKAGES} firstboot-freebsd-update \

lang/python3"

# Set to a list of third-party software to enable in rc.conf(5).

EOF

cat << EOF >> ${DESTDIR}/etc/ssh/sshd_config

X11Forwarding no

AcceptEnv LANG

AllowAgentForwarding no

cat << EOF >> ${DESTDIR}/etc/sysctl.conf

net.inet.icmp.drop_redirect=1

net.inet.ip.redirect=0

debug.trace_on_panic=1

debug.debugger_on_panic=0

EOF

touch ${DESTDIR}/firstboot

return 0

}

#!/bin/sh

#

#

# Set to a list of packages to install.

echo 'ALL ALL=(ALL) NOPASSWD:ALL' >> \

${DESTDIR}/usr/local/etc/sudoers.d/cloud-init

# The console is not interactive, so we might as well boot quickly.

echo 'autoboot_delay="-1"' >> ${DESTDIR}/boot/loader.conf

echo 'beastie_disable="YES"' >> ${DESTDIR}/boot/loader.conf

#!/bin/sh

#

#

. ${WORLDDIR}/release/tools/vagrant.conf

# Setup the Vagrant common items

vagrant_common

}

#!/bin/sh

#

#

. ${WORLDDIR}/release/tools/vagrant.conf

# Setup the Vagrant common items

vagrant_common

}

#!/bin/sh

#

#

# The default of 3GB is too small for Vagrant, so override the size here.

# them from the image allows it to boot faster.

env ASSUME_ALWAYS_YES=yes pkg -c ${DESTDIR} clean -y -a

env ASSUME_ALWAYS_YES=yes pkg -c ${DESTDIR} delete -f -y pkg

# Vagrant instances use DHCP to get their network configuration.

echo 'ifconfig_DEFAULT="SYNCDHCP"' >> ${DESTDIR}/etc/rc.conf

usermod root -h 0

# Configure sudo to allow the vagrant user

mkdir ${DESTDIR}/home/vagrant/.ssh

chmod 700 ${DESTDIR}/home/vagrant/.ssh

echo "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key" > ${DESTDIR}/home/vagrant/.ssh/authorized_keys

chown -R 1001 ${DESTDIR}/home/vagrant/.ssh

chmod 600 ${DESTDIR}/home/vagrant/.ssh/authorized_keys

#!/bin/sh

#

#

#

# Common functions for virtual machine image build scripts.

return 0

}

vm_create_base() {

mkdir -p ${DESTDIR}

vm_copy_base() {

# Defunct

}

vm_install_base() {

# Installs the FreeBSD userland/kernel to the virtual machine disk.

cd ${WORLDDIR} && \

installworld installkernel distribution || \

err "\n\nCannot install the base system to ${DESTDIR}."

mkdir -p ${DESTDIR}/var/db/etcupdate

etcupdate extract -B \

-M "TARGET=${TARGET} TARGET_ARCH=${TARGET_ARCH}" \

echo '# Custom /etc/fstab for FreeBSD VM images' \

> ${DESTDIR}/etc/fstab

if [ -z "${NOSWAP}" ]; then

echo '/dev/gpt/swapfs none swap sw 0 0' \

>> ${DESTDIR}/etc/fstab

fi

local hostname

hostname="$(echo $(uname -o) | tr '[:upper:]' '[:lower:]')"

echo "hostname=\"${hostname}\"" >> ${DESTDIR}/etc/rc.conf

export EMULATOR=/qemu

cp ${QEMUSTATIC} ${DESTDIR}/${EMULATOR}

fi

mount -t devfs devfs ${DESTDIR}/dev

chroot ${DESTDIR} ${EMULATOR} /usr/bin/newaliases

chroot ${DESTDIR} ${EMULATOR} /bin/sh /etc/rc.d/ldconfig forcestart

cp /etc/resolv.conf ${DESTDIR}/etc/resolv.conf

return 0

}

vm_extra_enable_services() {

for _rcvar in ${VM_RC_LIST}; do

echo ${_rcvar}_enable="YES" >> ${DESTDIR}/etc/rc.conf

done

}

vm_extra_install_packages() {

if [ -z "${VM_EXTRA_PACKAGES}" ]; then

return 0

fi

chroot ${DESTDIR} ${EMULATOR} env ASSUME_ALWAYS_YES=yes \

/usr/sbin/pkg bootstrap -y

for p in ${VM_EXTRA_PACKAGES}; do

chroot ${DESTDIR} ${EMULATOR} env ASSUME_ALWAYS_YES=yes \

/usr/sbin/pkg install -y ${p}

done

return 0

}

vm_extra_pre_umount() {

# Prototype. When overridden, performs additional tasks within the

# virtual machine environment prior to unmounting the filesystem.

if ! [ -z "${QEMUSTATIC}" ]; then

rm -f ${DESTDIR}/${EMULATOR}

fi

rm -f ${DESTDIR}/etc/resolv.conf

return 0

}

return 0

}

umount_loop() {

DIR=$1

i=0

}

vm_create_disk() {

if [ -z "${NOSWAP}" ]; then

SWAPOPT="-p freebsd-swap/swapfs::${SWAPSIZE}"

BOOTPARTSOFFSET=":${VM_BOOTPARTSOFFSET}"

fi

BOOTFILES="$(env TARGET=${TARGET} TARGET_ARCH=${TARGET_ARCH} \

WITH_UNIFIED_OBJDIR=yes \

make -C ${WORLDDIR}/stand -V .OBJDIR)"

BOOTFILES="$(realpath ${BOOTFILES})"

case "${TARGET}:${TARGET_ARCH}" in

amd64:amd64 | i386:i386)

ESP=yes

BOOTPARTS="-b ${BOOTFILES}/i386/pmbr/pmbr \

;;

ESP=yes

BOOTPARTS=

;;

powerpc:powerpc*)

ESP=no

BOOTPARTS="-p prepboot:=${BOOTFILES}/powerpc/boot1.chrp/boot1.elf -a 1"

ROOTFSPART="-p freebsd:=${VMBASE}"

if [ ${TARGET_ARCH} = powerpc64le ]; then

else

fi

;;

*)

# Create an ESP

espfilename=$(mktemp /tmp/efiboot.XXXXXX)

make_esp_file ${espfilename} ${fat32min} ${BOOTFILES}/efi/loader_lua/loader_lua.efi

# Add this to fstab

mkdir -p ${DESTDIR}/boot/efi

>> ${DESTDIR}/etc/fstab

fi

echo "Building filesystem... Please wait."

echo "Building final disk image... Please wait."

mkimg -s ${PARTSCHEME} -f ${VMFORMAT} \

${BOOTPARTS} \

${SWAPOPT} \

${ROOTFSPART} \

-o ${VMIMAGE}

if [ ${ESP} = "yes" ]; then

rm ${espfilename}

fi

return 0

}