summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2019-06-18avoid hard-coded IP address for nbd serverAndrew Cady
2019-06-18initrd.sh: improve kernel package selection logicAndrew Cady
2019-06-18selfstrap: include backports in sources.listAndrew Cady
2019-06-18Change version selection logic for vmlinuz/initrdAndrew Cady
We now choose the installed version of linux-image-rt-amd64 This will surely break if linux-image-rt-amd64 is not installed.
2019-06-18Comments explaining changes in apt outputAndrew Cady
2019-06-18selfstrap: better debug outputAndrew Cady
2019-06-18bugfix for new output from apt that looks like this:Andrew Cady
line=Inst base-files [9.9+deb9u6] (9.9+deb9u9 Debian:9.9/stable [amd64]) It appears the third arg, the version inside the square brackets, was added. The code is now compatible with both the old output and the new output.
2019-06-17make-total-destroyAndrew Cady
This tool is a convenience for testing. Run it in the initrd shell and it will erase the hard drive so that you can install Samizdat fresh.
2019-06-17selfstrapAndrew Cady
2018-07-09eliminate warning (don't numerically compare the empty string)Andrew Cady
2018-07-09bugfix: new installs were never finalizedAndrew Cady
Because a non-local shell variable was accidentally overwritten, the partitions containing a fresh install to an empty disk were never relabeled to indicate finalization. They would have to be relabeled manually to boot the installed system.
2018-06-16Move unknown mountpoints before bootingAndrew Cady
If there are mountpoints outside of /root, which `run-init` does not have in its whitelist, then `run-init` will refuse to boot and will crash the kernel instead (process 1 will exit).
2018-06-13making btrfs subvolumes should be idempotentAndrew Cady
2018-06-13use current running kernel versionAndrew Cady
2018-06-13Update for newer versions of qemuAndrew Cady
(The new qemu warns about opening a file as a raw disk image unless `raw` is specified explicitly.)
2018-06-13Update for newer versions of nbd-clientAndrew Cady
The kernel commandline syntax for `nbdroot=...` changed.
2018-02-07rename some variablesAndrew Cady
2018-02-07parameterize $NBD_FILENAMEAndrew Cady
2018-02-07avoid cutesy tar --to-command; instead extract to tempdirAndrew Cady
2017-09-04selfstrap: set up /var/lib/dpkg/tmp.ci before running inst scriptsAndrew Cady
2017-09-04selfstrap: fixesAndrew Cady
create symlink awk -> mawk use dpkg --extract when '--real-apt' is used
2017-09-03selfstrap: getopt-based CLIAndrew Cady
2017-08-30rename fileAndrew Cady
2017-04-02remove obsolete commentAndrew Cady
2017-04-02xorriso-usb: changes that should not affect behaviorAndrew Cady
2017-03-31xorriso-usb: cleanup/reorg that should not affect behaviorAndrew Cady
2017-03-30xorriso-usb: slight reorg; no behavior should have changedAndrew Cady
2017-03-30fixup! split btrfs-shrink out of btarfsAndrew Cady
2017-03-29move functions to top of file; no other changesAndrew Cady
2017-03-29split btrfs-shrink out of btarfsAndrew Cady
2017-03-29add more options to with-btrfs-seedAndrew Cady
2017-03-29new util: with-btrfs-seedAndrew Cady
2017-03-28verify that we can decrypt rootfs before offering it as menu itemAndrew Cady
2017-03-28Use pxelinux "ipappend" option to choose rootfs sourceAndrew Cady
This fixes the issue described in the first 'netkeys' commit, where the network would need to be available even when it was not used. The "ipappend" option results in a $BOOTIF variable in the initrd environment. This variable is now used to determine whether to wait on the network for a rootfs & keys, or to wait on the boot device becoming available to determine whether it has the keys. That is, there may or may not be a boot device which may or may not have keys and/or rootfs, but we will always know for sure whether it does, therefore there are no races and no waiting on the network unnecessarily. The qemu.sh script was updated to provide the BOOTIF variable when PXE boot is emulated.
2017-03-28change some log locationsAndrew Cady
2017-03-28xorriso-usb will install initrd even with --bootloader flagAndrew Cady
This is more useful. The flag might be renamed "--skip-rootfs" or such.
2017-03-28Support for reusing a generated set of child keysAndrew Cady
2017-03-28Wait for nbd-client before using /dev/nbd0Andrew Cady
For explanation, see: https://lists.freedesktop.org/archives/systemd-devel/2014-March/018053.html But for the proper solution, see: https://lists.freedesktop.org/archives/systemd-devel/2014-March/018054.html Another option would just be to use a partitioned nbd device. The nbd device _partitions_ do not have this issue at all.
2017-03-28Implement boot parameter "netkeys"Andrew Cady
This allows the keys to be loaded from the boot medium even when the root filesystem is loaded over the network. I.e., specifying nbdroot= no longer implies that the keys will be loaded over the network. The ISO images generated by xorriso-usb.sh will not specify 'netkeys' so the keys on the USB stick will be used. The idea is that after install, the network should not be needed at all; but that requires using a new mechanism instead of the nbdroot= parameter, to determine dynamically whether to use a network root fs device. Currently, the network is still needed to boot a device that has its root fs on the local disk and the keys on the boot medium, even though no data is fetched from the NBD server. You can force the machine to boot by going to the initramfs shell and running: for n in $(seq 1 20); do killall ipconfig; done Otherwise it blocks waiting for the network.
2017-03-28use mountpoint /plaintext for samizdat-plaintext partitionAndrew Cady
2017-03-28Ensure we can decrypt the luks key before attempting to use itAndrew Cady
This just fails earlier when the wrong GPG key is used. The correct solution is to avoid the failure by testing for GPG keys before offering disks to boot.
2017-03-26fully enable booting from installed native partitionAndrew Cady
2017-03-26Implement booting already-installed native installAndrew Cady
This option is only available if the partitions have been renamed to indicate finalization of the install. The code that finalizes the install by renaming the partitions is available, but not yet run after the install.
2017-03-26create and boot the encrypted root filesystemAndrew Cady
2017-03-26bump kernel version to 4.9.0Andrew Cady
2017-03-25Initial support for installing to an empty disk deviceAndrew Cady
Right now, this just installs a new GPT partition table on the disk, with the partitions samizdat needs. Then nothing happens because nothing else is implemented. It will only allow a disk to be wiped like this if there are no partitions on the disk (or if the only partitions on the disk are partially-installed samizdat partitions).
2017-03-25publish-ip script will work on systems without kikiAndrew Cady
Instead of just looking for host keys where kiki leaves them, publish-ip will (after not finding kiki keys) try to access the system keys, and even use the user's keys. Thus it is now appropriate to run stand-alone on any Debian machine.
2017-03-25qemu script will use built-in linux loader by defaultAndrew Cady
The script was modified so that it would still use PXE to load the other things that are loaded during network boot. The network style booting is also now the default This is the fastest way to boot, though it does not permit testing the bootloader on the CDROM or the PXE boot setup. To test the bootloader, you must now export SLOW_BOOT=y To boot from CDROM image, you must export USE_ISO=y
2017-03-25Bump installed linux kernel version to 4.6Andrew Cady
2017-03-25dnsmasq dhcp-script handles missing gnupghome.tar by generating itAndrew Cady
Previously, this condition would cause the client to poll forever.