Adding nvme-cli to package list

configs/releng/packages.x86_64:
Adding nvme-cli to the list of packages for working with NVME drives in
a live environment (as discussed in FS#63769).

Closes #20

Removing wget in favor of curl

configs/releng/airootfs/root/.automated_script.sh:
Replacing wget with curl for the use-case of downloading a
pre-specified remote startup script (changing flags where needed).

configs/releng/packages.x86_64:
Removing wget from the list of installed packages, as
.automated_script.sh was the only reason for it being installed.

Closes #16

Numerical prefix for systemd-networkd configuration

Adding a numerical prefix ('20-') to the ethernet.network and
wireless.network configuration files for systemd-networkd.
This way overriding them can become more predictable e.g. by providing
files with a '30-' prefix.

Closes #13

Removing custom UEFI shell boot loader configs

configs/releng/build.sh:
Copying the edk2-shell based Shell_Full.efi to the root of the iso/ efi
image as 'shellx64.efi' is automatically picked up by certain hardware
and by systemd-boot.
This makes all custom UEFI shell configuration obsolete.

configs/releng/efiboot/loader/entries/uefi-shell-*.conf:
Removing obsolete custom UEFI shell boot loader configuration.

Closes #14

Removing efitools

configs/releng/build.sh:
Removing the efitools based PreLoader.efi and HashTool.efi, as they are
dead weight due to not allowing secure boot (FS#59487).
Future secure boot functionality (most probably based on shim) is being
discussed in FS#53864.

Closes #17

Removing dist target

Makefile:
Removing the dist target. It requires to increment a number on each
release.
This workflow can be entirely circumvented by signed commit tags and
using those for packaging.

Replacing dhcpcd with systemd-networkd and systemd-resolved

configs/releng/airootfs/etc/udev/rules.d/81-dhcpcd.rules:
Removing the udev rule for starting dhcpcd@.service on interfaces of the
form eth* and en*.

configs/releng/airootfs/etc/systemd/network/{ethernet,wireless}.network:
Adding default DHCP configurations for en*, eth*, wlp* and wlan*
interfaces.

configs/releng/airootfs/etc/resolv.conf:
Adding a symlink from /run/systemd/resolve/stub-resolv.conf to
/etc/resolv.conf (in airootfs).

configs/releng/airootfs/root/customize_airootfs.sh:
Adding systemd-networkd and systemd-resolved to the list of services
that are being enabled during airootfs customization.

Unsetting the root password

Due to changes in the filesystem package [1] the current /etc/passwd
does not allow login without an empty root password anymore.
This becomes apparent, when switching to another TTY than the one
autologin is activated for.

By running passwd -d root we unset the password.
In the future this should go to a custom /etc/passwd file.

[1] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/filesystem&id=0320c909f3867d47576083e853543bab1705185b

Fixing default bootloader menu selection.

configs/releng/efiboot/loader/loader.conf:
The 'default' bootloader selection of systemd-boot is based on a glob
pattern. The previous pattern was not sufficient to select anything,
which is why it is now made explicit (pointing to archiso-x86_64.conf).

Simplifying regex for script download

configs/releng/airootfs/root/.automated_script.sh:
Using only one regex to match http://, https:// or ftp:// endpoints.

Using edk2-shell for UEFI shell

configs/releng/build.sh:
Instead of downloading UDK2018 based edk2 UEFI shell, use the Shell
binaries from the edk2-shell package.
This effectively makes the use of EFI shell v1 obsolete.

configs/releng/efiboot/loader/entries/uefi-shell-v*:
Renaming UEFI shell entries to match the packaged edk2-shell based UEFI
shell binaries.

configs/releng/build.sh:
Renaming the systemd-boot bootloader entries for UEFI shell (normal and
full version) to reflect their file names, which are derived from the
binary names in the edk2-shell package.
Copying the edk2-shell based UEFI shell binaries for normal efiboot and
.iso based "el-torito" efiboot mode.

docs/README.build:
Adding edk2-shell to the requirements in the documentation, as the
package is now used to provide UEFI shell.

Renaming refind-efi to refind

configs/releng/packages.x86_64:
As the refind-efi package has been renamed to refind, the package
required for the releng image needs to be renamed as well.

Revert "Renaming refind package"

This reverts commit c16612401e2db36ae5437df2c77999d45f47d39f.

Renaming refind package

configs/releng/packages.x86_64:
refind-efi has been renamed to refind

Prepare release

FS#64049: Re-add missing packages reflecting the base group to package transition

add zstd in supported squashfs compression list

Signed-off-by: Christian Hesse <mail@eworm.de>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Re-add wpa_supplicant

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

update download url for Shell.efi

Signed-off-by: Christian Hesse <mail@eworm.de>

[configs/releng] Add iwd

Requested at FS#62087

Update packages.x86_64

wpa_actiond

404 file no found

make sure the root filesystem is owned by root

Signed-off-by: Christian Hesse <mail@eworm.de>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

update download url for Shell_Full.efi

https://bugzilla.tianocore.org/show_bug.cgi?id=1108
Signed-off-by: Christian Hesse <mail@eworm.de>

[configs/releng] Update amd-ucode license path

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

use package amd-ucode for amd microcode

The package linux-firmware has a new split package amd-ucode. Do not
build the image manually but use the package.

Signed-off-by: Christian Hesse <mail@eworm.de>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Make and use amd_ucode.bin for initrd.

Requested at FS#59694

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

make detection of kernel modules dir more robust

extract `uname -r` from the contents of vmlinuz-linux rather than make
assumptions about the kernel EXTRAVERSION.

This is trivially customizable by changing the chosen kernel image.

Fixes FS#59496

Signed-off-by: Eli Schwartz <eschwartz@archlinux.org>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

generate pkglist with query (not sync) operation

Using the sync operation with list option fails with --sysroot when
signed database files are around. Instead use the query operation, which
uses the local databases of installed pakages only.

The only downside is that we do no longer record the originating
repository.

Signed-off-by: Christian Hesse <mail@eworm.de>

[configs/releng] add wireless-regdb to airootfs

Requested at FS#59434

Remove cow file early for non-persistent systems

The kernel has an open file handle after setting up the mapping. We can
remove it early to make sure it is gone on shutdown.

This helps to keep the cow_device clean for non-persistent systems where
cow_directory contains a version specific string.

Signed-off-by: Christian Hesse <mail@eworm.de>

[releng] Copy custom pacman.conf to airootfs

[releng] upgrade custom pacman.conf

[archiso] Drop --config when using --sysroot

https://lists.archlinux.org/pipermail/arch-releng/2018-June/003834.html

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[archiso] Use --sysroot when list installed packages.

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[releng] support for -P iso_publisher and -A iso_application in build.sh

Implement FS#54126

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[releng] bye pcmcia initcpio

[releng] bye zd1211-firmware

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[releng] Cleanup remain dual-arch stuff

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

Ensure correct umask for scripts

Fix for FS#58473

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

Drop the '-d' from pacstrap calls

The '-d' in pacstrap is a noop nowadays, keeping it may cause confusion

Signed-off-by: Sean Enck <enckse@gmail.com>

Remove speedtouch from packages.both

Since 2018-06-05:
speedtouch 1.3.1-6 has been removed from the [extra] repository.
https://www.archlinux.org/packages/extra/x86_64/speedtouch/

Signed-off-by: Li-Yu Yu <afg984@gmail.com>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

Install broadcom-wl to the release ISO

Fixes FS#58239

Signed-off-by: Eli Schwartz <eschwartz@archlinux.org>

configs/*: convert to new array-based mkinitcpio vars

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

rfkill is part of util-linux now

use a stronger hashing algorithm

Nobody wants to use md5 these days...

Signed-off-by: Christian Hesse <mail@eworm.de>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[archiso] Add ca-certificates.crt

Fix FS#54275

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

Handle case where ip=dhcp

Signed-off-by: David Thurstenson <thurstylark@gmail.com>

Add timeout to ipconfig call

Signed-off-by: David Thurstenson <thurstylark@gmail.com>

[archiso] Fix docs -dual -> x86_64

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Oops, rename -dual.iso -> -x86_64.iso

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[archiso] Update docs

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Remove i686 syslinux files

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Do not build i686

Only avoid build i686. The syslinux config files for i686 are still
present. This implies that a i686 entry will be present but not working.
In another patch, this can be removed if desired.

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Increse efiboot.img again

We reached the upper limit again [#1], increasing sufficiently
to do not touch again in long time.

[#1] 526be1579e515beb7bfb04b154b23450eb6589cb

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Add exfat-utils to live-environment

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

pxe-common: not only search, but also domain entry in resolv.conf

Signed-off-by: Christian Hesse <mail@eworm.de>

pxe-common: add dns domain name in resolv.conf

Signed-off-by: Christian Hesse <mail@eworm.de>

pxe-common: add a comment what added settings to resolv.conf

Signed-off-by: Christian Hesse <mail@eworm.de>

always set copytoram for pxe boot via http

Signed-off-by: Christian Hesse <mail@eworm.de>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Add ndisc6

Requested at FS#49526

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

fix indention and add EditorConfig configuration

Signed-off-by: Christian Hesse <mail@eworm.de>

flush and set down only if boot interface is known

Signed-off-by: Christian Hesse <mail@eworm.de>

do not declare bootif_dev local

Signed-off-by: Christian Hesse <mail@eworm.de>

use ip syntax according to ip-address(8)

According to ip-address(8) flushing an interface requires the
keyword 'dev'.
Also add proper quoting.

Signed-off-by: Christian Hesse <mail@eworm.de>

move modprobe to run_earlyhook()

Signed-off-by: Christian Hesse <mail@eworm.de>

only run pxe late hook if $ip is given

Signed-off-by: Christian Hesse <mail@eworm.de>

fix NBD boot without copy-to-ram

Signed-off-by: Christian Hesse <mail@eworm.de>

[configs/releng] Fix efitools path #2

Thanks Daniel Hillenbrand.

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Oops, fix efitools path

Thanks Philip Müller.

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] prebootloader -> efitools

Should be fixed FS#49314 first

update to match upstream binary name mkfs.fat

Starting with dosfstools 4.0-1 the mkfs executable is called 'mkfs.fat'.

Signed-off-by: Christian Hesse <mail@eworm.de>

[archiso] Set net iface down if copytoram=y (default)

This should fix FS#36749

Also flush address on specified device (default)

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[configs/releng] Add some SCSI tools

Requested at FS#48591

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

[archiso] Increase EFI image size for El Torito boot method

Current build leaves ~800K free of 31M in the FAT filesystem, adding 9M.

Going beyond 65535 sectors of 512-byte is a bit special,
but works for EFI. Image size is reported a zero in boot catalog,
but xorriso does a good job, and writes right value in hybrid-partition.

Tested booting in qemu in both modes (cd-rom and hybrid) and works fine.

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

Fix non-signed builds

FS#48382

prepare release

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>

Optionally sign the squashfs files with gpg and add the gpg key to the initramfs

A new option -g <keyid> is added to build.sh set the key id. If it is set, the squashfs files will be signed
by gpg and the gpg key will be added to archiso.img. In order to use this option, a gpg agent must be running.
Since build.sh is executed as root, it may be necessary to set the GNUPGHOME environment variable, for
example

$ su -c "GNUPGHOME=/home/youruser/.gnupg /path/to/build.sh -g yourkeyid"

Optionally sign the squashfs files with gpg

A new option -g <keyid> is added to set the key id. The squashfs files are only signed if
this option is set.

Add the verify=y option to verify the squashfs signature with gpg

Add gpg to the image and optionally create a keyring

If the ARCHISO_GNUPG_FD environment variable is set, its contents will be interpreted as an open file
descriptor and its contents will be used to create a keyring in the initramfs in /gpg.

fix boot parameters for mount options

Fixes: 03c296cb4f031148f657b8924460a30c5c9dfecc
Signed-off-by: Christian Hesse <mail@eworm.de>

add boot params archisoflags= and cow_flags= for mount options

Having files on btrfs subvolumes requires to give mount options. Add
boot params archisoflags= and cow_flags= for this purpose. Boot
parameters could look like this:

... archisodevice=/dev/sdaX archisoflags=subvolume=isos
cow_device=/dev/sdaX cow_flags=subvolume=persist ...

Signed-off-by: Christian Hesse <mail@eworm.de>