close Warning: Can't use blame annotator: 
No changeset 7608 in the repository

source: hybrid/branches/releng-10/nanobsd/cfg/nanobsd.wleiden@ 13426

Last change on this file since 13426 was 13426, checked in by rick, 10 years ago

Not required when no openvpn is installed

Some customisations should be conditional.
File size: 12.2 KB
RevLine 
1## Dit is een NanoBSD configuratie-template voor WirelessLeiden.
2## Instellingen weergegeven binnen dit bestand gelden als
3## standaard binnen de organisatie.
4
5# Little hack to allow proper secify of KERNL/PKG location
6if [ -n "$NANO_CFG_FILE" ]; then
7 NANO_CONF_DIR=$(cd $(dirname $NANO_CFG_FILE); pwd -P)
8else
9 NANO_CONF_DIR=$(cd $(dirname $2); pwd -P)
10fi
11
12# object naam in /usr/obj/nanobsd.{obj}
13NANO_NAME=wleiden-hybrid
14NANO_SRC=/usr/src # nanobsd source tree
15NANO_TOOLS=$(pwd)
16NANO_KERNEL=$NANO_CONF_DIR/kernel.wleiden # naam van het kernel configuratiebestand
17NANO_IMAGES=2 # aantal nanobsd code slices/installs (1/2)
18
19NANO_CONFSIZE=20480 # Volume van de config slice (10MB) in 512bs
20NANO_DATASIZE=0 # volume van de data slice, 0 = not configured
21NANO_CODESIZE=0 # Let buildscript the operating system slice as large as posible
22NANO_RAM_TMPVARSIZE=102400 # Volume of combined var & tmp slice (50MB) in 512bs
23
24NANO_LABEL=WLIMG
25NANO_NEWFS="-b 4096 -f 512 -i 8192" # Overwrite the default stettings to disable Soft-updates
26
27
28#XXX: Eeks, fixed packages, needs building a hook to allow building the package
29# of the shelfs if needed, copy to right directory, done. With only input needed
30# a list of ports in the format like net/net-snmp
31NANO_PACKAGE_DIR=$NANO_CONF_DIR/../pkg/All
32NANO_PACKAGE_LIST="*"
33
34
35# Wireless Leiden ports from $WL_PORTSDIR are copied OVER $PORTSDIR
36PORTSDIR='/usr/ports'
37WL_PORTSDIR="$NANO_CONF_DIR/../ports/"
38
39# Dirty quirk to allow comments in part below
40PACKAGE_LIST=`cat <<EOF | sed -e 's/#.*$//g' | xargs
41benchmarks/iperf
42devel/py-yaml
43editors/vim-lite
44dns/dnsmasq
45dns/nsd
46dns/unbound
47ftp/curl
48lang/python2
49lang/python
50net/ladvd
51net-mgmt/iftop
52net-mgmt/net-snmp
53net/mtr
54net/isc-dhcp42-server
55net/pen
56ports-mgmt/pkg
57security/sudo
58security/ca_root_nss
59sysutils/screen
60sysutils/ucspi-tcp
61www/apache24
62www/tinyproxy
63
64# Extra WL ports
65net/lvrouted
66`
67# Package target
68PKG_MAKE_ARGS="PACKAGES=$(dirname $NANO_PACKAGE_DIR) BATCH=yes PACKAGE_BUILDING=yes"
69
70PKG_MAKE_CONF="
71# www/py-cherrypy - include apache templating
72# net-mgmt/net-snmp - no perl please (size)
73# net-mgmt/nagios-plugins - no threading (single CPU)
74# shells/bash-static - logging via syslog
75# net/mtr - no X11 (no screen)
76# lang/ocaml - no TK support (requires X11)
77# devel/ocaml-findlib - no TOOLBOX support (requires ocaml with TK support)
78OPTIONS_SET= APACHE FPING SYSLOG
79OPTIONS_UNSET= PERL PERL_EMBEDDED X11 TK TOOLBOX
80"
81
82##NANO_PACKAGE_LIST=
83
84# Warning: set to 1 to debug make build errors
85# Number of recurrent parrallel make builds
86if `grep -q 'acpi0: <PRLS PRLS_OEM> on motherboard' /var/run/dmesg.boot`; then
87 # Mac OS X Parallels virtual machine
88 NANO_PMAKE="make -B"
89else
90 # Default 2 times number of CPU's inside machine
91 NANO_PARALLEL_MAKE=`expr $(sysctl -n hw.ncpu) \* 2`
92 NANO_PMAKE="make -j ${NANO_PARALLEL_MAKE}"
93fi
94
95# Starting from soekris bios version 1.31 upwards boot0sio does not seems work
96# anymore, but boot0 does (weird)
97NANO_BOOTLOADER="boot/boot0"
98
99# Strip down to a more acceptable size
100# hints from http://people.freebsd.org/~phk/nanobsd/soekris_4x26/make.soekris_4x26.conf (46MB)
101NANO_PRUNE="$NANO_PRUNE usr/share/examples"
102NANO_PRUNE="$NANO_PRUNE usr/share/syscons"
103NANO_PRUNE="$NANO_PRUNE usr/share/calendar"
104# NB! usr/share/misc contains termcap, vi(1) etc fails to work without it.
105# NANOBSD_PRUNE += usr/share/misc
106NANO_PRUNE="$NANO_PRUNE usr/share/pcvt"
107NANO_PRUNE="$NANO_PRUNE usr/share/me"
108NANO_PRUNE="$NANO_PRUNE usr/share/doc"
109
110
111
112
113
114# Opties parsed gedurende build & install world
115# Also check man 3 src.conf for details
116# Some flags are misleading, e.g. could only be installworld (e.g.), for details:
117# http://phk.freebsd.dk/misc/build_options/
118# For details on make options also check:
119# /usr/src/share/mk/bsd.own.mk
120CONF_COMMON='
121# Specific enabled options
122#WITHOUT_ACPI=YES # geen advanced configuration power interface
123#WITHOUT_BIND=YES # geen bind tools, dns/named geinstalleerd
124#WITHOUT_CXX=YES # Set to not build g++(1) and related libraries.
125#WITHOUT_GROFF=YES # Set to not build groff(1).
126#WITHOUT_INET6=YES # geen ondersteuning inet versie 6 architectuur
127#WITHOUT_INFO=YES # geen info bestanden, readable online docs
128#WITHOUT_IPFILTER=YES # geen ip filtering geinstalleerd
129#WITHOUT_KLDLOAD=YES # do not allow loading of kernel modules
130#WITHOUT_MAILWRAPPER=YES # geen mailwrapper bij gebruik sendmail
131#WITHOUT_MAN=YES # geen handleidingen gecompileerd
132#WITHOUT_MISC=YES # geen misc sub directory
133#WITHOUT_MODULES=YES # geen ondersteuning toevoegen modules
134#WITHOUT_PAM=YES # geen ondersteuning pa modules
135#WITHOUT_PF=YES # geen packet filtering geinstalleerd
136#WITHOUT_SHARE=YES # geen share sub directory
137#WITHOUT_USB=YES # geen ondersteuning usb modules
138# Specific disabled options
139WITHOUT_ATM=YES # geen ondersteuning Asynchronous Transfer Mode
140WITHOUT_AUDIT=YES # geen event auditing / audit trails
141WITHOUT_AUTHPF=YES # geen authenticating gateway user shell
142WITHOUT_BLUETOOTH=YES # geen ondersteuning Bluetooth modules
143WITHOUT_CALENDAR=YES # geen calendar reminder service gecompileerd
144WITHOUT_CDDL=YES # Set to not build code licensed under Sun CDDL. (also ZFS)
145WITHOUT_CPP=YES # Set to not build cpp(1).
146WITHOUT_CVS=YES # geen cvs tools geinstalleerd
147WITHOUT_DICT=YES # geen dictionary ondersteuning
148WITHOUT_EXAMPLES=YES # geen voorbeeld configuratiebestanden
149WITHOUT_FORTRAN=YES # geen ondersteuning fortran compilers
150WITHOUT_GAMES=YES # geen games gecompileerd
151WITHOUT_GCOV=YES # geen gcov test coverage program
152WITHOUT_GDB=YES # geen gnu debugger gecompileerd
153WITHOUT_GPIB=YES # geen ondersteuning gpib kaarten
154WITHOUT_HTML=YES # geen html help bestanden gecompileerd
155WITHOUT_I4B=YES # geen ondersteuning voor isdn
156WITHOUT_IPX=YES # geen ondersteuning ipx protocols
157WITHOUT_KERBEROS=YES # geen ondersteuning Kerberos authenticatie
158WITHOUT_LOCALES=YES # geen ondersteuning lokalisatie
159WITHOUT_LPR=YES # geen ondersteuning print services
160WITHOUT_NIS=YES # geen ondersteuning network information system
161WITHOUT_PROFILE=YES # Set to avoid compiling profiled libraries.
162WITHOUT_RCMDS=YES # geen ondersteuning rcmds,
163WITHOUT_RESCUE=YES # geen rescue bestanden gecompileerd
164WITHOUT_SENDMAIL=YES # geen sendmail geinstalleerd
165WITHOUT_SHAREDOCS=YES # geen share/docs directories
166WITHOUT_SYSCONS=YES # geen syscon devices gecompileerd
167WITHOUT_UNBOUND=YES # Port version will be used if any is used
168'
169
170CONF_BUILD="
171${CONF_COMMON}
172"
173
174CONF_INSTALL="
175${CONF_COMMON}
176WITHOUT_TOOLCHAIN=YES # geen freebsd toolchain
177"
178
179
180# Flash disks arrived, sandisk 1g seems to match the geometry of the (blanc) cards
181#FlashDevice sandisk 1g # nanobsd flashdevice entry
182#FlashDevice sandisk 512mb # nanobsd flashdevice entry
183#FlashDevice transcend 2g # nanobsd flashdevice entry
184# Calculated value of PEAK hardware 1GB CF card
185# C/H/S phys 1954/16/63, logical 977/32/63
186# Mediasize is calculated as C*H*S*512
187
188# Using logical values reported by ALIX board
189# values for PCEngines blanc 1 GB cards
190# C/H/S phys 1966/16/63, logical 983/32/63
191NANO_MEDIASIZE=`expr 1008451584 / 512`
192NANO_HEADS=32
193NANO_SECTS=63
194
195
196# Version tagging
197cust_version_tag() (
198 VERSION_FILE="${NANO_WORLDDIR}/tools/wl-release.txt"
199 (
200 echo "Generated by `id -un`@`hostname -f` at `date`"
201 echo ""
202 echo "=== CONFIG specifics ==="
203 svn info ${NANO_CONF_DIR}/../ || exit 0
204 svn diff ${NANO_CONF_DIR}/../ || exit 0
205 echo "=== BEGIN CONFIG specifics ==="
206 ) > $VERSION_FILE
207)
208
209# Takes a very long time (10+) minutes to generate this file on an ALIX board,
210# not practical for quick debugging and configuration.
211cust_openvpn_dhparam() (
212 if [ -r ${NANO_CONF_DIR}/usr/local/bin/openvpn ]; then
213 DHFILE=${NANO_WORLDDIR}/etc/easy-rsa-keys/dh1024.pem
214 mkdir -p `dirname $DHFILE`
215 openssl dhparam -out $DHFILE 1024
216 fi
217)
218
219
220
221# Assuming we are running a safe envirionment where snooping could occur during or after the build
222cust_set_root_password() (
223 if [ -n "${CFG_ROOT_PASSWORD}" ]; then
224 pprint 2 "Set root password using CFG_ROOT_PASSWORD variable"
225 chroot ${NANO_WORLDDIR} sh -c "echo '${CFG_ROOT_PASSWORD}' | pw usermod -h 0 -n root"
226 else
227 pprint 2 "Root password is <blank>, no password provided at variable CFG_ROOT_PASSWORD"
228 fi
229)
230
231
232
233# EXPERIMENTAL patch like envirionment
234# Using '*-nanobsd.patch' files to only specify the bare differences between the base/default file to
235# keep us as close as possible to the base OS
236# Patches are applied to the directory they live in
237#cust_apply_nanobsd_patches() (
238# for PATCHFILE in `find ${NANO_WORLDDIR} -regex '.*-nanobsd\.patch$'`; do
239# cd `dirname ${PATCHFILE}`
240# patch -t -N -p0 -i `basename ${PATCHFILE}`
241# #XX: What to with installed patch files? Delete them for the time beeing
242# rm -v ${PATCHFILE}
243#done
244
245
246
247#)
248
249
250
251# Customize ntpd
252cust_ntpd() (
253 chroot ${NANO_WORLDDIR} sh -c "ln -fs /usr/local/etc/ntp.drift /var/db/ntp.drift"
254)
255
256
257# Enable Serial TTYs
258cust_serial_ttys() (
259 chroot ${NANO_WORLDDIR} sed -i '' -e '/ttyv[0-9]/s/on /off/' -e '/ttyu0/s/off/on/' -e '/ttyu0/s/dialup/ansi/' /etc/ttys
260
261 # Serial login is consided to be phycically secured, so no credentials are required
262 chroot ${NANO_WORLDDIR} sed -i '' -e '/ttyu0/s/std.9600/al.9600/' /etc/ttys
263)
264
265# Customize sudoers files
266cust_sudo_rules() {
267 chroot ${NANO_WORLDDIR} find /usr/local/etc/sudoers.d/ -type f -exec chmod 0640 {} \+
268}
269
270
271
272# Install files from specific relative location
273cust_install_files () (
274 cd ${NANO_CONF_DIR}/../files
275 find . -print | grep -v -e /CVS -e .svn | cpio -dumpv ${NANO_WORLDDIR}
276)
277
278
279# Make tools available for root by default
280cust_root_bin_to_tools() {
281 ln -s /tools ${NANO_WORLDDIR}/root/bin
282}
283
284
285# Prune no needed directories of image
286cust_nano_prune () (
287 cd ${NANO_WORLDDIR}
288 for ENTRY in ${NANO_PRUNE}; do
289 rm -vfR ${ENTRY}
290 done
291)
292
293# We actually do need an seperate /tmp, so undo the symlinking done in
294# setup_nanobsd()
295late_cust_unset_common_var_and_tmp() (
296 cd ${NANO_WORLDDIR}
297 rm tmp
298 mkdir -m 1777 tmp
299)
300
301
302# Fill /cfg wmth custom files, based on 'create_i386_diskimage ( )'
303last_nano_fill_cfg () (
304 # Variables to be used
305 IMG=${NANO_DISKIMGDIR}/${NANO_IMGNAME}
306 MNT=${MAKEOBJDIRPREFIX}/_.mnt
307
308 # Mount '/cfg' slize in image
309 MD=`mdconfig -a -t vnode -f ${IMG}`
310 mount /dev/${MD}s3 ${MNT}
311
312 # Location of '/cfg' directory
313 cd ${NANO_CONF_DIR}/../cfg-files
314 find . -print | grep -v -e /CVS -e .svn | cpio -dumpv ${MNT}
315
316
317 # Leave in nice end state
318 umount ${MNT}
319 mdconfig -d -u ${MD}
320) > ${MAKEOBJDIRPREFIX}/_.fc 2>&1
321
322last_nano_disk_usage () (
323 # Variables to be used
324 IMG=${NANO_DISKIMGDIR}/${NANO_IMGNAME}
325 MNT=${MAKEOBJDIRPREFIX}/_.mnt
326
327 # Mount root slize
328 MD=`mdconfig -a -t vnode -f ${IMG}`
329 mount /dev/${MD}s1a ${MNT}
330
331 # Show disk usage (percent free) inc header
332 pprint 2 $(df -h | head -1)
333 pprint 2 "$(df -h | grep /dev/${MD})"
334
335 # Leave in nice end state
336 umount ${MNT}
337 mdconfig -d -u ${MD}
338)
339
340last_orders () (
341 last_nano_fill_cfg
342 last_nano_disk_usage
343)
344
345# Ugly hack to 'escaping' pprint from inside a customize_cmd to output
346# instead of a file
347exec 3>/dev/stdout
348# Progress Print
349# Print $2 at level $1
350pprint() {
351 if [ "$1" -le $PPLEVEL ]; then
352 printf "%.${1}s %s\n" "#####" "$2" 1>&3
353 fi
354}
355
356# Cust macro`s gestart in onderstaande volgorde
357# XXX: Determine size before installing all find of additions to see how much
358# base we are actually using ## du -h -d 0
359customize_cmd cust_pkgng
360customize_cmd cust_install_files
361customize_cmd cust_ntpd
362customize_cmd cust_serial_ttys
363customize_cmd cust_version_tag
364customize_cmd cust_root_bin_to_tools
365customize_cmd cust_allow_ssh_root
366customize_cmd cust_openvpn_dhparam
367customize_cmd cust_nano_prune
368customize_cmd cust_set_root_password
369customize_cmd cust_sudo_rules
370#customize_cmd cust_apply_nanobsd_patches
371late_customize_cmd late_cust_unset_common_var_and_tmp
372
373# Standard overwrite
374if [ -r "$NANO_CONF_DIR/nanobsd.local" ]; then
375 . $NANO_CONF_DIR/nanobsd.local
376fi
377
378# Extra config if existing is not suffient
379if [ -n "$EXTRA_NANOBSD_CONFIG" ]; then
380 for FILE in $EXTRA_NANOBSD_CONFIG; do
381 # File relative to config directory
382 if [ "`echo $FILE | cut -c1`" != "/" ]; then
383 FILE=$NANO_CONF_DIR/$FILE
384 fi
385 pprint 1 "Loading $FILE"
386 . $FILE || exit 1
387 done
388fi
Note: See TracBrowser for help on using the repository browser.