mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-04 00:00:14 -04:00
6f7fdcadd1
By default, rsyslog is not installed anymore to avoid storing everything twice (since journald is the default). If this becomes an issue, we could delete /var/log/journal to only log via rsyslog.
172 lines
5.0 KiB
Bash
Executable File
172 lines
5.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
echo "Building base image"
|
|
|
|
DIR=$(dirname `readlink -f $0`)
|
|
. $DIR/../testing.conf
|
|
. $DIR/function.sh
|
|
|
|
[ `id -u` -eq 0 ] || die "You must be root to run $0"
|
|
running_any $STRONGSWANHOSTS && die "Please stop test environment before running $0"
|
|
|
|
check_commands debootstrap mkfs.ext3 partprobe qemu-img qemu-nbd sfdisk
|
|
|
|
# package includes/excludes
|
|
INC=automake,autoconf,libtool,bison,flex,gperf,pkg-config,gettext,less,locales
|
|
INC=$INC,build-essential,libgmp-dev,libldap2-dev,libcurl4-openssl-dev,ethtool
|
|
INC=$INC,libxml2-dev,libtspi-dev,libsqlite3-dev,openssh-server,tcpdump,psmisc
|
|
INC=$INC,openssl,vim,sqlite3,conntrack,gdb,cmake,libltdl-dev,wget,gnupg,man-db
|
|
INC=$INC,libboost-thread-dev,libboost-system-dev,git,iperf,htop,valgrind,strace
|
|
INC=$INC,gnat,gprbuild,acpid,acpi-support-base,libldns-dev,libunbound-dev
|
|
INC=$INC,dnsutils,libsoup2.4-dev,ca-certificates,unzip,libsystemd-dev
|
|
INC=$INC,python3,python3-setuptools,python3-dev,python3-daemon,python3-venv,
|
|
INC=$INC,apt-transport-https,libjson-c-dev,libxslt1-dev,libapache2-mod-wsgi-py3
|
|
INC=$INC,libxerces-c-dev,rsyslog
|
|
case "$BASEIMGSUITE" in
|
|
buster)
|
|
INC=$INC,iptables-dev
|
|
;;
|
|
*)
|
|
INC=$INC,libiptc-dev
|
|
;;
|
|
esac
|
|
case "$BASEIMGSUITE" in
|
|
buster)
|
|
INC=$INC,libahven7-dev,libxmlada-schema8-dev,libgmpada8-dev
|
|
INC=$INC,libalog4-dev,dbus-user-session
|
|
;;
|
|
bullseye)
|
|
INC=$INC,libahven9-dev,libxmlada-schema10-dev,libgmpada10-dev
|
|
INC=$INC,libalog6-dev,dbus-user-session
|
|
# workaround for dependency issue gdb -> libsource-highlight4v5 -> virtual
|
|
# package (libboost-regex1.74.0-icu67), which debootstrap can't resolve (#878961)
|
|
INC=$INC,libboost-regex1.74.0
|
|
;;
|
|
bookworm)
|
|
INC=$INC,libahven11-dev,libxmlada-schema12-dev,libgmpada12-dev
|
|
INC=$INC,libalog8-dev,dbus-user-session
|
|
# workaround for dependency issue gdb -> libsource-highlight4v5 -> virtual
|
|
# package (libboost-regex1.74.0-icu67), which debootstrap can't resolve (#878961)
|
|
INC=$INC,libboost-regex1.74.0
|
|
;;
|
|
*)
|
|
echo_warn "Package list for '$BASEIMGSUITE' might has to be updated"
|
|
;;
|
|
esac
|
|
SERVICES="apache2 dbus isc-dhcp-server slapd bind9 freeradius"
|
|
INC=$INC,${SERVICES// /,}
|
|
# packages to install via APT, for SWIMA tests
|
|
APT1="libgcrypt20-dev traceroute iptables"
|
|
APT="tmux"
|
|
# additional services to disable
|
|
case "$BASEIMGSUITE" in
|
|
bookworm)
|
|
;;
|
|
*)
|
|
SERVICES="$SERVICES systemd-timesyncd"
|
|
;;
|
|
esac
|
|
|
|
CACHEDIR=$BUILDDIR/cache
|
|
APTCACHE=$LOOPDIR/var/cache/apt/archives
|
|
|
|
mkdir -p $LOOPDIR
|
|
mkdir -p $CACHEDIR
|
|
mkdir -p $IMGDIR
|
|
rm -f $BASEIMG
|
|
|
|
echo "`date`, building $BASEIMG" >>$LOGFILE
|
|
|
|
load_qemu_nbd
|
|
|
|
log_action "Creating base image $BASEIMG"
|
|
execute "qemu-img create -f $IMGEXT $BASEIMG ${BASEIMGSIZE}M"
|
|
|
|
log_action "Connecting image to NBD device $NBDEV"
|
|
execute "qemu-nbd -c $NBDEV $BASEIMG"
|
|
do_on_exit qemu-nbd -d $NBDEV
|
|
|
|
log_action "Partitioning disk"
|
|
sfdisk /dev/nbd0 >>$LOGFILE 2>&1 << EOF
|
|
;
|
|
EOF
|
|
if [ $? != 0 ]
|
|
then
|
|
log_status 1
|
|
exit 1
|
|
else
|
|
log_status 0
|
|
fi
|
|
partprobe $NBDEV
|
|
|
|
log_action "Creating ext3 filesystem"
|
|
execute "mkfs.ext3 $NBDPARTITION"
|
|
|
|
log_action "Mounting $NBDPARTITION to $LOOPDIR"
|
|
execute "mount $NBDPARTITION $LOOPDIR"
|
|
do_on_exit graceful_umount $LOOPDIR
|
|
|
|
log_action "Using $CACHEDIR as archive for apt"
|
|
mkdir -p $APTCACHE
|
|
execute "mount -o bind $CACHEDIR $APTCACHE"
|
|
do_on_exit graceful_umount $APTCACHE
|
|
|
|
log_action "Running debootstrap ($BASEIMGSUITE, $BASEIMGARCH)"
|
|
execute "debootstrap --arch=$BASEIMGARCH --include=$INC $BASEIMGSUITE $LOOPDIR $BASEIMGMIRROR"
|
|
|
|
execute "mount -t proc none $LOOPDIR/proc" 0
|
|
do_on_exit graceful_umount $LOOPDIR/proc
|
|
|
|
log_action "Generating locales"
|
|
cat > $LOOPDIR/etc/locale.gen << EOF
|
|
de_CH.UTF-8 UTF-8
|
|
en_US.UTF-8 UTF-8
|
|
EOF
|
|
execute_chroot "locale-gen"
|
|
|
|
log_action "Downloading signing key for custom apt repo"
|
|
execute_chroot "wget -q $BASEIMGEXTKEY -O /tmp/key"
|
|
log_action "Installing signing key for custom apt repo"
|
|
execute_chroot "apt-key add /tmp/key"
|
|
|
|
log_action "Enabling custom apt repo"
|
|
cat > $LOOPDIR/etc/apt/sources.list.d/strongswan.list << EOF
|
|
deb $BASEIMGEXTREPO $BASEIMGSUITE main
|
|
EOF
|
|
log_status $?
|
|
|
|
log_action "Prioritize custom apt repo"
|
|
cat > $LOOPDIR/etc/apt/preferences.d/strongswan.pref << EOF
|
|
Package: *
|
|
Pin: origin "$BASEIMGEXTREPOHOST"
|
|
Pin-Priority: 1001
|
|
EOF
|
|
log_status $?
|
|
|
|
log_action "Update package sources"
|
|
execute_chroot "apt-get update"
|
|
log_action "Install packages via APT"
|
|
execute_chroot "apt-get -y install $APT1"
|
|
log_action "Move history.log to history.log.1"
|
|
execute_chroot "mv /var/log/apt/history.log /var/log/apt/history.log.1"
|
|
log_action "Compress history.log.1 to history.log.1.gz"
|
|
execute_chroot "gzip /var/log/apt/history.log.1"
|
|
log_action "Install more packages via APT"
|
|
execute_chroot "apt-get -y install $APT"
|
|
log_action "Install packages from custom repo"
|
|
execute_chroot "apt-get -y upgrade"
|
|
|
|
for service in $SERVICES
|
|
do
|
|
log_action "Disabling service $service"
|
|
execute_chroot "systemctl disable $service"
|
|
done
|
|
|
|
log_action "Switching from iptables-nft to iptables-legacy"
|
|
execute_chroot "update-alternatives --set iptables /usr/sbin/iptables-legacy" 0
|
|
execute_chroot "update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy" 0
|
|
log_status 0
|
|
|
|
log_action "Disabling root password"
|
|
execute_chroot "passwd -d root"
|