source: hybrid/branches/releng-10/nanobsd/cfg/nanobsd.wleiden.apu@ 12995

Last change on this file since 12995 was 12995, checked in by ed, 10 years ago

Changes in the buildfiles

File size: 11.6 KB
Line 
1## Dit is een NanoBSD configuratie-template voor WirelessLeiden.
2## Instellingen weergegeven binnen dit bestand gelden als
3## standaard binnen de organisatie.
4## Tweaked for use with 2Gb SDcard, more VAR and TMP space in Alix.APU1C
5
6# Little hack to allow proper secify of KERNL/PKG location
7if [ -n "$NANO_CFG_FILE" ]; then
8 NANO_CONF_DIR=$(cd $(dirname $NANO_CFG_FILE); pwd -P)
9else
10 NANO_CONF_DIR=$(cd $(dirname $2); pwd -P)
11fi
12
13# object naam in /usr/obj/nanobsd.{obj}
14NANO_NAME=wleiden-hybrid
15NANO_SRC=/usr/src # nanobsd source tree
16NANO_KERNEL=$NANO_CONF_DIR/kernel.wleiden.apu # naam van het kernel configuratiebestand
17NANO_IMAGES=2 # aantal nanobsd code slices/installs (1/2)
18
19NANO_CONFSIZE=8192 # volume van de config slice, default 2048 (512bs)
20NANO_DATASIZE=0 # volume van de data slice, 0 = not configured
21NANO_CODESIZE=889200 # 434Mb voor / (889200*1024*1024/512)
22NANO_RAM_TMPVARSIZE=81920 # 40Mb Voor /Var en /Tmp(40*1024*1024/512)
23
24NANO_DRIVE=da0 # Naam van de SD card
25
26#XXX: Eeks, fixed packages, needs building a hook to allow building the package
27# of the shelfs if needed, copy to right directory, done. With only input needed
28# a list of ports in the format like net/net-snmp
29NANO_PACKAGE_DIR=$NANO_CONF_DIR/../pkg/All
30NANO_PACKAGE_LIST="*"
31
32
33# Wireless Leiden ports from $WL_PORTSDIR are copied OVER $PORTSDIR
34PORTSDIR='/usr/ports'
35WL_PORTSDIR="$NANO_CONF_DIR/../ports/"
36
37# Dirty quirk to allow comments in part below
38PACKAGE_LIST=`cat <<EOF | sed -e 's/#.*$//g' | xargs
39benchmarks/iperf
40devel/py-yaml
41dns/dnsmasq
42ftp/curl
43lang/python2
44lang/python
45net/ladvd
46net-mgmt/iftop
47net-mgmt/net-snmp
48net/mtr
49net/isc-dhcp42-server
50net/pen
51ports-mgmt/pkg
52security/sudo
53security/ca_root_nss
54sysutils/screen
55sysutils/ucspi-tcp
56www/apache24
57www/tinyproxy
58
59# Extra WL ports
60net/lvrouted
61`
62# Package target
63PKG_MAKE_ARGS="PACKAGES=$(dirname $NANO_PACKAGE_DIR) BATCH=yes PACKAGE_BUILDING=yes"
64
65PKG_MAKE_CONF="
66# www/py-cherrypy - include apache templating
67# net-mgmt/net-snmp - no perl please (size)
68# net-mgmt/nagios-plugins - no threading (single CPU)
69# shells/bash-static - logging via syslog
70# net/mtr - no X11 (no screen)
71OPTIONS_SET= APACHE FPING SYSLOG
72OPTIONS_UNSET= PERL PERL_EMBEDDED X11
73"
74
75##NANO_PACKAGE_LIST=
76
77# Warning: set to 1 to debug make build errors
78# Number of recurrent parrallel make builds
79if `grep -q 'acpi0: <PRLS PRLS_OEM> on motherboard' /var/run/dmesg.boot`; then
80 # Mac OS X Parallels virtual machine
81 NANO_PMAKE="make -B"
82else
83 # Default 2 times number of CPU's inside machine
84 NANO_PARALLEL_MAKE=`expr $(sysctl -n hw.ncpu) \* 2`
85 NANO_PMAKE="make -j ${NANO_PARALLEL_MAKE}"
86fi
87
88# Starting from soekris bios version 1.31 upwards boot0sio does not seems work
89# anymore, but boot0 does (weird)
90NANO_BOOTLOADER="boot/boot0"
91
92# Strip down to a more acceptable size
93# hints from http://people.freebsd.org/~phk/nanobsd/soekris_4x26/make.soekris_4x26.conf (46MB)
94NANO_PRUNE="$NANO_PRUNE usr/share/examples"
95NANO_PRUNE="$NANO_PRUNE usr/share/syscons"
96NANO_PRUNE="$NANO_PRUNE usr/share/calendar"
97# NB! usr/share/misc contains termcap, vi(1) etc fails to work without it.
98# NANOBSD_PRUNE += usr/share/misc
99NANO_PRUNE="$NANO_PRUNE usr/share/pcvt"
100NANO_PRUNE="$NANO_PRUNE usr/share/me"
101NANO_PRUNE="$NANO_PRUNE usr/share/doc"
102
103
104
105
106
107# Opties parsed gedurende build & install world
108# Also check man 3 src.conf for details
109# Some flags are misleading, e.g. could only be installworld (e.g.), for details:
110# http://phk.freebsd.dk/misc/build_options/
111# For details on make options also check:
112# /usr/src/share/mk/bsd.own.mk
113CONF_COMMON='
114# Specific enabled options
115#WITHOUT_ACPI=YES # geen advanced configuration power interface
116#WITHOUT_BIND=YES # geen bind tools, dns/named geinstalleerd
117#WITHOUT_CXX=YES # Set to not build g++(1) and related libraries.
118#WITHOUT_GROFF=YES # Set to not build groff(1).
119#WITHOUT_INET6=YES # geen ondersteuning inet versie 6 architectuur
120#WITHOUT_INFO=YES # geen info bestanden, readable online docs
121#WITHOUT_IPFILTER=YES # geen ip filtering geinstalleerd
122#WITHOUT_KLDLOAD=YES # do not allow loading of kernel modules
123#WITHOUT_MAILWRAPPER=YES # geen mailwrapper bij gebruik sendmail
124#WITHOUT_MAN=YES # geen handleidingen gecompileerd
125#WITHOUT_MISC=YES # geen misc sub directory
126#WITHOUT_MODULES=YES # geen ondersteuning toevoegen modules
127#WITHOUT_PAM=YES # geen ondersteuning pa modules
128#WITHOUT_PF=YES # geen packet filtering geinstalleerd
129#WITHOUT_SHARE=YES # geen share sub directory
130#WITHOUT_USB=YES # geen ondersteuning usb modules
131# Specific disabled options
132WITHOUT_ATM=YES # geen ondersteuning Asynchronous Transfer Mode
133WITHOUT_AUDIT=YES # geen event auditing / audit trails
134WITHOUT_AUTHPF=YES # geen authenticating gateway user shell
135WITHOUT_BLUETOOTH=YES # geen ondersteuning Bluetooth modules
136WITHOUT_CALENDAR=YES # geen calendar reminder service gecompileerd
137WITHOUT_CDDL=YES # Set to not build code licensed under Sun CDDL. (also ZFS)
138WITHOUT_CPP=YES # Set to not build cpp(1).
139WITHOUT_CVS=YES # geen cvs tools geinstalleerd
140WITHOUT_DICT=YES # geen dictionary ondersteuning
141WITHOUT_EXAMPLES=YES # geen voorbeeld configuratiebestanden
142WITHOUT_FORTRAN=YES # geen ondersteuning fortran compilers
143WITHOUT_GAMES=YES # geen games gecompileerd
144WITHOUT_GCOV=YES # geen gcov test coverage program
145WITHOUT_GDB=YES # geen gnu debugger gecompileerd
146WITHOUT_GPIB=YES # geen ondersteuning gpib kaarten
147WITHOUT_HTML=YES # geen html help bestanden gecompileerd
148WITHOUT_I4B=YES # geen ondersteuning voor isdn
149WITHOUT_IPX=YES # geen ondersteuning ipx protocols
150WITHOUT_KERBEROS=YES # geen ondersteuning Kerberos authenticatie
151WITHOUT_LOCALES=YES # geen ondersteuning lokalisatie
152WITHOUT_LPR=YES # geen ondersteuning print services
153WITHOUT_NIS=YES # geen ondersteuning network information system
154WITHOUT_PROFILE=YES # Set to avoid compiling profiled libraries.
155WITHOUT_RCMDS=YES # geen ondersteuning rcmds,
156WITHOUT_RESCUE=YES # geen rescue bestanden gecompileerd
157WITHOUT_SENDMAIL=YES # geen sendmail geinstalleerd
158WITHOUT_SHAREDOCS=YES # geen share/docs directories
159WITHOUT_SYSCONS=YES # geen syscon devices gecompileerd
160'
161
162CONF_BUILD="
163${CONF_COMMON}
164"
165
166CONF_INSTALL="
167${CONF_COMMON}
168WITHOUT_TOOLCHAIN=YES # geen freebsd toolchain
169"
170
171
172# Flash disks arrived, sandisk 1g seems to match the geometry of the (blanc) cards
173#FlashDevice sandisk 1g # nanobsd flashdevice entry
174#FlashDevice sandisk 512mb # nanobsd flashdevice entry
175#FlashDevice transcend 2g # nanobsd flashdevice entry
176# Calculated value of PEAK hardware 1GB CF card
177# C/H/S phys 1954/16/63, logical 977/32/63
178# Mediasize is calculated as C*H*S*512
179
180# Using logical values reported by Alix APU board
181# values for PCEngines blanc 2 GB cards
182# C/H/S phys 945/64/63, logical 983/32/63
183# drive 0x000f2ab0: PCHS=0/0/0 translation=lba LCHS=945/64/63 s=3813376
184NANO_MEDIASIZE=`expr 1952448512 / 512`
185NANO_HEADS=64
186NANO_SECTS=63
187
188
189# Version tagging
190cust_version_tag() (
191 VERSION_FILE="${NANO_WORLDDIR}/tools/wl-release.txt"
192 (
193 echo "Generated by `id -un`@`hostname -f` at `date`"
194 echo ""
195 echo "=== CONFIG specifics ==="
196 svn info ${NANO_CONF_DIR}/../ || exit 0
197 svn diff ${NANO_CONF_DIR}/../ || exit 0
198 echo "=== BEGIN CONFIG specifics ==="
199 ) > $VERSION_FILE
200)
201
202# Takes a very long time (10+) minutes to generate this file on an ALIX board,
203# not practical for quick debugging and configuration.
204cust_openvpn_dhparam() (
205 DHFILE=${NANO_WORLDDIR}/etc/easy-rsa-keys/dh1024.pem
206 mkdir -p `dirname $DHFILE`
207 openssl dhparam -out $DHFILE 1024
208)
209
210
211
212# Assuming we are running a safe envirionment where snooping could occur during or after the build
213cust_set_root_password() (
214 if [ -n "${CFG_ROOT_PASSWORD}" ]; then
215 pprint 2 "Set root password using CFG_ROOT_PASSWORD variable"
216 chroot ${NANO_WORLDDIR} sh -c "echo '${CFG_ROOT_PASSWORD}' | pw usermod -h 0 -u root"
217 else
218 pprint 2 "Root password is <blank>, no password provided at variable CFG_ROOT_PASSWORD"
219 fi
220)
221
222
223
224# EXPERIMENTAL patch like envirionment
225# Using '*-nanobsd.patch' files to only specify the bare differences between the base/default file to
226# keep us as close as possible to the base OS
227# Patches are applied to the directory they live in
228#cust_apply_nanobsd_patches() (
229# for PATCHFILE in `find ${NANO_WORLDDIR} -regex '.*-nanobsd\.patch$'`; do
230# cd `dirname ${PATCHFILE}`
231# patch -t -N -p0 -i `basename ${PATCHFILE}`
232# #XX: What to with installed patch files? Delete them for the time beeing
233# rm -v ${PATCHFILE}
234#done
235
236
237
238#)
239
240
241
242# Customize ntpd
243cust_ntpd() (
244 chroot ${NANO_WORLDDIR} sh -c "ln -fs /usr/local/etc/ntp.drift /var/db/ntp.drift"
245)
246
247
248# Enable Serial TTYs
249cust_serial_ttys() (
250 chroot ${NANO_WORLDDIR} sed -i '' -e '/ttyv[0-9]/s/on /off/' -e '/ttyu0/s/off/on/' -e '/ttyu0/s/dialup/ansi/' /etc/ttys
251)
252
253
254
255# Install files from specific relative location
256cust_install_files () (
257 cd ${NANO_CONF_DIR}/../files
258 find . -print | grep -v -e /CVS -e .svn | cpio -dumpv ${NANO_WORLDDIR}
259)
260
261
262# Make tools available for root by default
263cust_root_bin_to_tools() {
264 ln -s /tools ${NANO_WORLDDIR}/root/bin
265}
266
267
268# Prune no needed directories of image
269cust_nano_prune () (
270 cd ${NANO_WORLDDIR}
271 for ENTRY in ${NANO_PRUNE}; do
272 rm -vfR ${ENTRY}
273 done
274)
275
276# We actually do need an seperate /tmp, so undo the symlinking done in
277# setup_nanobsd()
278late_cust_unset_common_var_and_tmp() (
279 cd ${NANO_WORLDDIR}
280 rm tmp
281 mkdir -m 1777 tmp
282)
283
284
285# Fill /cfg wmth custom files, based on 'create_i386_diskimage ( )'
286last_nano_fill_cfg () (
287 # Variables to be used
288 IMG=${NANO_DISKIMGDIR}/${NANO_IMGNAME}
289 MNT=${MAKEOBJDIRPREFIX}/_.mnt
290
291 # Mount '/cfg' slize in image
292 MD=`mdconfig -a -t vnode -f ${IMG}`
293 mount /dev/${MD}s3 ${MNT}
294
295 # Location of '/cfg' directory
296 cd ${NANO_CONF_DIR}/../cfg-files
297 find . -print | grep -v -e /CVS -e .svn | cpio -dumpv ${MNT}
298
299
300 # Leave in nice end state
301 umount ${MNT}
302 mdconfig -d -u ${MD}
303) > ${MAKEOBJDIRPREFIX}/_.fc 2>&1
304
305last_nano_disk_usage () (
306 # Variables to be used
307 IMG=${NANO_DISKIMGDIR}/${NANO_IMGNAME}
308 MNT=${MAKEOBJDIRPREFIX}/_.mnt
309
310 # Mount root slize
311 MD=`mdconfig -a -t vnode -f ${IMG}`
312 mount /dev/${MD}s1a ${MNT}
313
314 # Show disk usage (percent free) inc header
315 pprint 2 $(df -h | head -1)
316 pprint 2 "$(df -h | grep /dev/${MD})"
317
318 # Leave in nice end state
319 umount ${MNT}
320 mdconfig -d -u ${MD}
321)
322
323last_orders () (
324 last_nano_fill_cfg
325 last_nano_disk_usage
326)
327
328# Ugly hack to 'escaping' pprint from inside a customize_cmd to output
329# instead of a file
330exec 3>/dev/stdout
331# Progress Print
332# Print $2 at level $1
333pprint() {
334 if [ "$1" -le $PPLEVEL ]; then
335 printf "%.${1}s %s\n" "#####" "$2" 1>&3
336 fi
337}
338
339# Cust macro`s gestart in onderstaande volgorde
340# XXX: Determine size before installing all find of additions to see how much
341# base we are actually using ## du -h -d 0
342customize_cmd cust_pkgng
343customize_cmd cust_install_files
344customize_cmd cust_ntpd
345customize_cmd cust_serial_ttys
346customize_cmd cust_version_tag
347customize_cmd cust_root_bin_to_tools
348customize_cmd cust_allow_ssh_root
349customize_cmd cust_openvpn_dhparam
350customize_cmd cust_nano_prune
351customize_cmd cust_set_root_password
352#customize_cmd cust_apply_nanobsd_patches
353late_customize_cmd late_cust_unset_common_var_and_tmp
354
355# Standard overwrite
356if [ -r "$NANO_CONF_DIR/nanobsd.local" ]; then
357 . $NANO_CONF_DIR/nanobsd.local
358fi
359
360# Extra config if existing is not suffient
361if [ -n "$EXTRA_NANOBSD_CONFIG" ]; then
362 for FILE in $EXTRA_NANOBSD_CONFIG; do
363 # File relative to config directory
364 if [ "`echo $FILE | cut -c1`" != "/" ]; then
365 FILE=$NANO_CONF_DIR/$FILE
366 fi
367 pprint 1 "Loading $FILE"
368 . $FILE || exit 1
369 done
370fi
Note: See TracBrowser for help on using the repository browser.