mirror of
https://github.com/rancher/os.git
synced 2025-07-23 11:19:59 +00:00
Initial commit
This commit is contained in:
Darren Shepherd
commit
2b90d55b0d
107
Dockerfile
Normal file
107
Dockerfile
Normal file
@ -0,0 +1,107 @@
|
|||||||
|
FROM opensuse/leap:15.3 as rancherd
|
||||||
|
RUN zypper in -y curl docker squashfs xorriso go1.16 git
|
||||||
|
RUN zypper in -y upx
|
||||||
|
RUN git clone --depth=1 https://github.com/rancher/rancherd && \
|
||||||
|
cd ./rancherd && \
|
||||||
|
./scripts/build && \
|
||||||
|
upx bin/rancherd && \
|
||||||
|
cp bin/rancherd /usr/bin/
|
||||||
|
|
||||||
|
FROM opensuse/leap:15.3 as tools
|
||||||
|
RUN zypper in -y curl docker squashfs xorriso go1.16 git
|
||||||
|
RUN curl https://get.mocaccino.org/luet/get_luet_root.sh | sh
|
||||||
|
RUN luet install -y extension/makeiso
|
||||||
|
COPY tools /
|
||||||
|
|
||||||
|
|
||||||
|
FROM opensuse/leap:15.3
|
||||||
|
ARG ARCH=amd64
|
||||||
|
ENV ARCH=${ARCH}
|
||||||
|
RUN zypper in -y \
|
||||||
|
bash-completion \
|
||||||
|
conntrack-tools \
|
||||||
|
coreutils \
|
||||||
|
curl \
|
||||||
|
device-mapper \
|
||||||
|
dosfstools \
|
||||||
|
dracut \
|
||||||
|
e2fsprogs \
|
||||||
|
findutils \
|
||||||
|
gawk \
|
||||||
|
grub2-i386-pc \
|
||||||
|
grub2-x86_64-efi \
|
||||||
|
haveged \
|
||||||
|
iproute2 \
|
||||||
|
iptables \
|
||||||
|
jq \
|
||||||
|
kernel-default \
|
||||||
|
kernel-firmware-bnx2 \
|
||||||
|
kernel-firmware-i915 \
|
||||||
|
kernel-firmware-intel \
|
||||||
|
kernel-firmware-iwlwifi \
|
||||||
|
kernel-firmware-mellanox \
|
||||||
|
kernel-firmware-network \
|
||||||
|
kernel-firmware-platform \
|
||||||
|
kernel-firmware-realtek \
|
||||||
|
less \
|
||||||
|
lsscsi \
|
||||||
|
lvm2 \
|
||||||
|
mdadm \
|
||||||
|
multipath-tools \
|
||||||
|
nano \
|
||||||
|
nfs-utils \
|
||||||
|
open-iscsi \
|
||||||
|
open-vm-tools \
|
||||||
|
parted \
|
||||||
|
python-azure-agent \
|
||||||
|
qemu-guest-agent \
|
||||||
|
rng-tools \
|
||||||
|
rsync \
|
||||||
|
squashfs \
|
||||||
|
strace \
|
||||||
|
systemd \
|
||||||
|
systemd-sysvinit \
|
||||||
|
tar \
|
||||||
|
timezone \
|
||||||
|
vim \
|
||||||
|
which
|
||||||
|
|
||||||
|
RUN curl -L https://github.com/containerd/nerdctl/releases/download/v0.8.3/nerdctl-0.8.3-linux-${ARCH}.tar.gz | tar xvzf - -C /usr/bin nerdctl
|
||||||
|
RUN if [ "$ARCH" = "amd64" ]; then ARCH=x86_64; fi && \
|
||||||
|
curl -L https://github.com/derailed/k9s/releases/download/v0.24.10/k9s_v0.24.10_Linux_${ARCH}.tar.gz | tar xvzf - -C /usr/bin k9s
|
||||||
|
COPY --from=rancherd /usr/bin/rancherd /usr/bin/rancherd
|
||||||
|
|
||||||
|
RUN zypper ar https://download.opensuse.org/repositories/security:/SELinux/openSUSE_Leap_15.3/security:SELinux.repo
|
||||||
|
RUN zypper --gpg-auto-import-keys in -y --allow-vendor-change --allow-downgrade container-selinux -libsemanage1
|
||||||
|
|
||||||
|
RUN mkdir /tmp/rpm && \
|
||||||
|
cd /tmp/rpm && \
|
||||||
|
curl -L -O https://github.com/k3s-io/k3s-selinux/releases/download/v0.3.testing.0/k3s-selinux-0.3-0.el7.noarch.rpm && \
|
||||||
|
curl -L -O https://github.com/rancher/rancher-selinux/releases/download/v0.2-rc1.testing.1/rancher-selinux-0.2.rc1-1.el7.noarch.rpm && \
|
||||||
|
mv /var/lib/selinux/targeted/active /var/lib/selinux/targeted/bkp && \
|
||||||
|
mv /var/lib/selinux/targeted/bkp /var/lib/selinux/targeted/active && \
|
||||||
|
rpm -ivh --nodeps *.rpm && \
|
||||||
|
cd / && \
|
||||||
|
rm -rf /tmp/rpm
|
||||||
|
|
||||||
|
|
||||||
|
COPY files/etc/luet/luet.yaml /etc/luet/luet.yaml
|
||||||
|
ENV LUET_VERSION 0.16.6
|
||||||
|
RUN curl -sfL -o /usr/bin/luet https://github.com/mudler/luet/releases/download/${LUET_VERSION}/luet-${LUET_VERSION}-linux-${ARCH} && \
|
||||||
|
chmod +x /usr/bin/luet
|
||||||
|
|
||||||
|
RUN luet install -y \
|
||||||
|
toolchain/yip \
|
||||||
|
utils/installer \
|
||||||
|
system/cos-setup \
|
||||||
|
system/immutable-rootfs \
|
||||||
|
system/grub-config
|
||||||
|
|
||||||
|
COPY files/ /
|
||||||
|
RUN mkinitrd
|
||||||
|
|
||||||
|
ARG OS_NAME=RancherOS
|
||||||
|
ARG OS_VERSION=999
|
||||||
|
ARG OS_GIT=dirty
|
||||||
|
ARG FINALIZE=false
|
||||||
|
RUN if [ "${FINALIZE}" = "true" ]; then OS_NAME=${OS_NAME} OS_VERSION=${OS_VERSION} OS_GIT=${OS_GIT} /usr/bin/finalize; fi
|
||||||
28
Makefile
Normal file
28
Makefile
Normal file
@ -0,0 +1,28 @@
|
|||||||
|
.DEFAULT_GOAL := iso
|
||||||
|
IMAGE=ibuildthecloud/test
|
||||||
|
TOOLS=${IMAGE}-tools
|
||||||
|
|
||||||
|
.PHONY: build
|
||||||
|
build:
|
||||||
|
docker build -t ${IMAGE} .
|
||||||
|
|
||||||
|
.PHONY: final-build
|
||||||
|
final-build:
|
||||||
|
docker build --build-arg FINALIZE=true -t ${IMAGE} .
|
||||||
|
|
||||||
|
.PHONY: push
|
||||||
|
push: build
|
||||||
|
docker push ${IMAGE}
|
||||||
|
|
||||||
|
.PHONY: tools
|
||||||
|
tools:
|
||||||
|
docker build -t ${TOOLS} --target tools .
|
||||||
|
|
||||||
|
.PHONY: iso
|
||||||
|
iso: tools final-build
|
||||||
|
mkdir -p build
|
||||||
|
rm -f build/iso-container
|
||||||
|
docker run -v /var/run:/var/run -it --cidfile=build/iso-container ${TOOLS} makeiso ${IMAGE}
|
||||||
|
docker cp $$(cat build/iso-container):/output.iso build/output.iso
|
||||||
|
docker rm -fv $$(cat build/iso-container)
|
||||||
|
rm -f build/iso-container
|
||||||
14
files/etc/bash.bashrc.local
Normal file
14
files/etc/bash.bashrc.local
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
if [ -e /etc/rancher/rke2 ]; then
|
||||||
|
if [ -z "$KUBECONFIG" ]; then
|
||||||
|
export KUBECONFIG=/etc/rancher/rke2/rke2.yaml
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
if [ -d /var/lib/rancher/rke2/bin ]; then
|
||||||
|
export PATH="${PATH}:/var/lib/rancher/rke2/bin"
|
||||||
|
fi
|
||||||
|
if [ -z "$CONTAINER_RUNTIME_ENDPOINT" ]; then
|
||||||
|
export CONTAINER_RUNTIME_ENDPOINT=unix:///var/run/k3s/containerd/containerd.sock
|
||||||
|
fi
|
||||||
|
if [ -z "$IMAGE_SERVICE_ENDPOINT" ]; then
|
||||||
|
export IMAGE_SERVICE_ENDPOINT=unix:///var/run/k3s/containerd/containerd.sock
|
||||||
|
fi
|
||||||
3
files/etc/cos/bootargs.cfg
Normal file
3
files/etc/cos/bootargs.cfg
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
set kernel=/boot/vmlinuz
|
||||||
|
set kernelcmd="console=tty1 console=ttyS0 root=LABEL=$label iso-scan/filename=$img panic=5 security=selinux selinux=1"
|
||||||
|
set initramfs=/boot/initrd
|
||||||
5
files/etc/dracut.conf.d/50-immutable-rootfs.conf
Normal file
5
files/etc/dracut.conf.d/50-immutable-rootfs.conf
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
hostonly_cmdline="no"
|
||||||
|
hostonly="no"
|
||||||
|
compress="xz"
|
||||||
|
omit_dracutmodules+=" multipath "
|
||||||
|
add_dracutmodules+=" dmsquash-live cos-immutable-rootfs "
|
||||||
17
files/etc/luet/luet.yaml
Normal file
17
files/etc/luet/luet.yaml
Normal file
@ -0,0 +1,17 @@
|
|||||||
|
logging:
|
||||||
|
color: false
|
||||||
|
enable_emoji: false
|
||||||
|
general:
|
||||||
|
debug: false
|
||||||
|
spinner_charset: 9
|
||||||
|
repositories:
|
||||||
|
- name: "cos"
|
||||||
|
description: "cOS official"
|
||||||
|
type: "docker"
|
||||||
|
enable: true
|
||||||
|
cached: true
|
||||||
|
priority: 1
|
||||||
|
verify: false
|
||||||
|
urls:
|
||||||
|
- "quay.io/costoolkit/releases-opensuse"
|
||||||
|
|
||||||
14
files/etc/selinux/config.enforcing
Normal file
14
files/etc/selinux/config.enforcing
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
# This file controls the state of SELinux on the system.
|
||||||
|
# SELinux can be completly disabled with the "selinux=0" kernel
|
||||||
|
# commandline option.
|
||||||
|
#
|
||||||
|
# SELINUX= can take one of these three values:
|
||||||
|
# enforcing - SELinux security policy is enforced.
|
||||||
|
# permissive - SELinux prints warnings instead of enforcing.
|
||||||
|
SELINUX=enforcing
|
||||||
|
# SELINUXTYPE= can take one of these three values:
|
||||||
|
# targeted - Targeted processes are protected,
|
||||||
|
# minimum - Modification of targeted policy. Only selected processes are protected.
|
||||||
|
# mls - Multi Level Security protection.
|
||||||
|
SELINUXTYPE=targeted
|
||||||
|
|
||||||
63
files/system/oem/00_rootfs.yaml
Normal file
63
files/system/oem/00_rootfs.yaml
Normal file
@ -0,0 +1,63 @@
|
|||||||
|
name: "Rootfs Layout Settings"
|
||||||
|
stages:
|
||||||
|
rootfs:
|
||||||
|
- environment_file: /run/cos/cos-layout.env
|
||||||
|
environment:
|
||||||
|
VOLUMES: "LABEL=COS_OEM:/oem LABEL=COS_PERSISTENT:/usr/local"
|
||||||
|
OVERLAY: "tmpfs:25%"
|
||||||
|
# DEBUG_RW: "true"
|
||||||
|
initramfs:
|
||||||
|
- if: '[ -z "$(blkid -L COS_SYSTEM || true)" ]'
|
||||||
|
commands:
|
||||||
|
- |
|
||||||
|
target=/usr/local/.ros-state
|
||||||
|
|
||||||
|
# Always want the latest update of systemd conf from the image
|
||||||
|
mkdir -p ${target}/etc/systemd/
|
||||||
|
rsync -av /etc/systemd/ ${target}/etc/systemd/
|
||||||
|
|
||||||
|
# Only populate ssh conf once
|
||||||
|
if [ ! -e ${target}/etc/ssh ]; then
|
||||||
|
mkdir -p ${target}/etc/ssh/
|
||||||
|
rsync -av /etc/ssh/ ${target}/etc/ssh/
|
||||||
|
fi
|
||||||
|
|
||||||
|
# make /tmp tmpfs
|
||||||
|
cp -f /usr/share/systemd/tmp.mount ${target}/etc/systemd/system/
|
||||||
|
|
||||||
|
# undo /home /opt mount from cos immutable-rootfs module
|
||||||
|
sed -i '/overlay \/home /d' /etc/fstab
|
||||||
|
sed -i '/overlay \/opt /d' /etc/fstab
|
||||||
|
umount /home
|
||||||
|
umount /opt
|
||||||
|
|
||||||
|
# setup directories as persistent
|
||||||
|
for i in root opt home var/lib/rancher var/lib/kubelet etc/systemd etc/rancher etc/ssh usr/libexec; do
|
||||||
|
mkdir -p ${target}/$i /$i
|
||||||
|
mount ${target}/$i /$i -t none -o bind
|
||||||
|
done
|
||||||
|
|
||||||
|
# This is hidden so that if you run some selinux label checking or relabeling the bind
|
||||||
|
# mount won't screw up things. If you have two files at different paths they will get
|
||||||
|
# labeled with two different labels.
|
||||||
|
mkdir -p ${target}/empty
|
||||||
|
mount ${target}/empty ${target} -o bind,ro
|
||||||
|
|
||||||
|
# persist machine-id
|
||||||
|
if [ -s /usr/local/etc/machine-id ]; then
|
||||||
|
cat /usr/local/etc/machine-id > /etc/machine-id
|
||||||
|
else
|
||||||
|
mkdir -p /usr/local/etc
|
||||||
|
cp /etc/machine-id /usr/local/etc
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ensure /var/log/journal exists so it's labeled correctly
|
||||||
|
mkdir -p /var/log/journal
|
||||||
|
initramfs.after:
|
||||||
|
- if: '[ -z "$(blkid -L COS_SYSTEM || true)" ]'
|
||||||
|
commands:
|
||||||
|
- restorecon -R -v /etc /home /opt /var /usr/local /tmp /srv /root
|
||||||
|
fs.before:
|
||||||
|
- if: '[ -z "$(blkid -L COS_SYSTEM || true)" ]'
|
||||||
|
commands:
|
||||||
|
- restorecon -R -v /etc /home /opt /var /usr/local /tmp /srv /root
|
||||||
11
files/system/oem/01_defaults.yaml
Normal file
11
files/system/oem/01_defaults.yaml
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
name: "General settings"
|
||||||
|
stages:
|
||||||
|
initramfs:
|
||||||
|
- name: "Setup distro"
|
||||||
|
#systemd_firstboot:
|
||||||
|
#keymap: us
|
||||||
|
#locale: en_US.UTF-8
|
||||||
|
#timezone: UTC
|
||||||
|
- name: "Remove install default"
|
||||||
|
commands:
|
||||||
|
- rm -f /usr/local/cloud-config/90_after_install.yaml
|
||||||
22
files/system/oem/03_branding.yaml
Normal file
22
files/system/oem/03_branding.yaml
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
name: "Branding"
|
||||||
|
stages:
|
||||||
|
initramfs:
|
||||||
|
- name: "Branding"
|
||||||
|
hostname: "rancher"
|
||||||
|
Xfiles:
|
||||||
|
- path: /etc/issue
|
||||||
|
content: |
|
||||||
|
.-----.
|
||||||
|
| .-. |
|
||||||
|
| |.| |
|
||||||
|
| `-' |
|
||||||
|
`-----'
|
||||||
|
|
||||||
|
Welcome to \S !
|
||||||
|
IP address \4
|
||||||
|
Login with user: root, password: cos
|
||||||
|
Start the installer with "cos-installer <device>" to install it in the local system
|
||||||
|
permissions: 0644
|
||||||
|
owner: 0
|
||||||
|
group: 0
|
||||||
|
|
||||||
46
files/system/oem/04_accounting.yaml
Normal file
46
files/system/oem/04_accounting.yaml
Normal file
@ -0,0 +1,46 @@
|
|||||||
|
name: "Default user"
|
||||||
|
stages:
|
||||||
|
initramfs:
|
||||||
|
- name: "Setup groups"
|
||||||
|
ensure_entities:
|
||||||
|
- entity: |
|
||||||
|
kind: "group"
|
||||||
|
group_name: "admin"
|
||||||
|
password: "x"
|
||||||
|
gid: 900
|
||||||
|
- entity: |
|
||||||
|
kind: "group"
|
||||||
|
group_name: "rancher"
|
||||||
|
password: "x"
|
||||||
|
gid: 1000
|
||||||
|
- name: "Setup users"
|
||||||
|
users:
|
||||||
|
rancher:
|
||||||
|
name: "rancher"
|
||||||
|
passwd: "$6$mL4eOZ/wHV4MtjaZ$ASiwT66Yj9I/61cc7/vzdl6I8p5xK11Yn1EtSEO1CytZszfmP3R5iA05g0voxfZ5Dkj5BYdicE8lLnf3atbzE/"
|
||||||
|
groups:
|
||||||
|
- "admin"
|
||||||
|
- "systemd-journal"
|
||||||
|
primary_group: "rancher"
|
||||||
|
shell: /bin/bash
|
||||||
|
homedir: "/home/rancher"
|
||||||
|
#ensure_entities:
|
||||||
|
#- entity: |
|
||||||
|
# kind: "shadow"
|
||||||
|
# username: "root"
|
||||||
|
# password: "$6$g9DDJRDNRS8MEzhH$w6Cn6PNzFnUVnatwRbNoLk6etanvAbcxUzfYlQcj6y/JLGq3Yrl7wXi6SkMzp1/tEM3NheMr5fH8.92NdiaB/0"
|
||||||
|
- name: "Setup sudo"
|
||||||
|
files:
|
||||||
|
- path: "/etc/sudoers"
|
||||||
|
owner: 0
|
||||||
|
group: 0
|
||||||
|
permsisions: 0600
|
||||||
|
content: |
|
||||||
|
Defaults always_set_home
|
||||||
|
Defaults secure_path="/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin:/usr/local/sbin"
|
||||||
|
Defaults env_reset
|
||||||
|
Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_ATIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE"
|
||||||
|
Defaults !insults
|
||||||
|
root ALL=(ALL) ALL
|
||||||
|
%admin ALL=(ALL) NOPASSWD: ALL
|
||||||
|
@includedir /etc/sudoers.d
|
||||||
17
files/system/oem/05_network.yaml
Normal file
17
files/system/oem/05_network.yaml
Normal file
@ -0,0 +1,17 @@
|
|||||||
|
name: "Default network configuration"
|
||||||
|
stages:
|
||||||
|
initramfs:
|
||||||
|
- name: "Setup network"
|
||||||
|
dns:
|
||||||
|
path: /etc/resolv.conf
|
||||||
|
nameservers:
|
||||||
|
- 8.8.8.8
|
||||||
|
- 1.1.1.1
|
||||||
|
files:
|
||||||
|
- path: /etc/sysconfig/network/ifcfg-eth0
|
||||||
|
content: |
|
||||||
|
BOOTPROTO='dhcp'
|
||||||
|
STARTMODE='onboot'
|
||||||
|
permissions: 0600
|
||||||
|
owner: 0
|
||||||
|
group: 0
|
||||||
12
files/system/oem/06_recovery.yaml
Normal file
12
files/system/oem/06_recovery.yaml
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
name: "Recovery partition boot setup"
|
||||||
|
stages:
|
||||||
|
boot:
|
||||||
|
- name: "Recovery"
|
||||||
|
commands:
|
||||||
|
- |
|
||||||
|
source /etc/os-release
|
||||||
|
if [ -n "$(blkid -L COS_SYSTEM || true)" ]; then
|
||||||
|
echo >> /etc/issue
|
||||||
|
echo "You are booting from recovery mode. Run 'cos-reset' to reset the system to $VERSION" >> /etc/issue
|
||||||
|
echo >> /etc/issue
|
||||||
|
fi
|
||||||
8
files/system/oem/07_cdrom_ds.yaml
Normal file
8
files/system/oem/07_cdrom_ds.yaml
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
name: "Cloud-init cdrom"
|
||||||
|
stages:
|
||||||
|
fs:
|
||||||
|
- name: "cdrom datasource"
|
||||||
|
datasource:
|
||||||
|
providers:
|
||||||
|
- cdrom
|
||||||
|
path: /oem
|
||||||
11
files/system/oem/08_rancherd.yaml
Normal file
11
files/system/oem/08_rancherd.yaml
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
name: "Rancherd"
|
||||||
|
stages:
|
||||||
|
initramfs:
|
||||||
|
- name: "Rancherd"
|
||||||
|
commands:
|
||||||
|
- |
|
||||||
|
if grep -q root=live:CDLABEL=COS_LIVE /proc/cmdline || [ -n "$(blkid -L COS_SYSTEM)" ]; then
|
||||||
|
systemctl disable rancherd.service
|
||||||
|
else
|
||||||
|
systemctl enable rancherd.service
|
||||||
|
fi
|
||||||
50
files/usr/bin/finalize
Executable file
50
files/usr/bin/finalize
Executable file
@ -0,0 +1,50 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -e -o pipefail
|
||||||
|
|
||||||
|
packages="openSUSE-release-appliance-docker
|
||||||
|
systemd-presets-branding-MicroOS
|
||||||
|
dracut
|
||||||
|
rpm-config-SUSE
|
||||||
|
openSUSE-release-15.3
|
||||||
|
openSUSE-build-key"
|
||||||
|
|
||||||
|
packages="$packages $(zypper rm --details -D -u -y zypper | grep '^[a-z]' | grep -v procps)"
|
||||||
|
|
||||||
|
echo Removing $packages
|
||||||
|
rpm --nodeps -v -e $packages 2>&1 | grep -v LC_MESSAGES
|
||||||
|
|
||||||
|
echo Removing zypper data
|
||||||
|
rm -rf /etc/zypp \
|
||||||
|
/var/cache/zypp \
|
||||||
|
/var/log/zypp \
|
||||||
|
/var/lib/zypp
|
||||||
|
|
||||||
|
echo Removing luet metadata
|
||||||
|
rm -rf /var/cache/luet \
|
||||||
|
/var/luet \
|
||||||
|
/etc/luet
|
||||||
|
|
||||||
|
echo Removing rpm
|
||||||
|
rpm --nodeps -v -e rpm 2>&1 | grep -v LC_MESSAGES
|
||||||
|
rm -rf /usr/lib/rpm \
|
||||||
|
/usr/lib/sysimage/rpm \
|
||||||
|
/etc/rpm
|
||||||
|
|
||||||
|
echo Removing extra kernel weight
|
||||||
|
rm -rf /boot/vmlinux*
|
||||||
|
|
||||||
|
if ! command -v man >/dev/null; then
|
||||||
|
echo Removing man pages
|
||||||
|
find /usr/share/man -type f -exec rm {} \;
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -e /usr/lib/os-release.tmpl ]; then
|
||||||
|
echo Setting up /etc/os-release
|
||||||
|
export OS_NAME=${OS_NAME:-NoNameOS} OS_VERSION="${OS_VERSION:-0.0.0}" OS_GIT="${OS_GIT:-HEAD}"
|
||||||
|
cat /usr/lib/os-release.tmpl | envsubst > /usr/lib/os-release
|
||||||
|
rm /usr/lib/os-release.tmpl
|
||||||
|
ln -sf ../usr/lib/os-release /etc/os-release
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo Removing self
|
||||||
|
rm /usr/bin/finalize
|
||||||
2
files/usr/bin/test-upgrade
Executable file
2
files/usr/bin/test-upgrade
Executable file
@ -0,0 +1,2 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
cos-upgrade --no-verify --docker-image ibuildthecloud/test
|
||||||
2
files/usr/lib/issue.d/10-rancheros.conf
Normal file
2
files/usr/lib/issue.d/10-rancheros.conf
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
Welcome to \S - Kernel \r (\l).
|
||||||
|
|
||||||
9
files/usr/lib/os-release.tmpl
Normal file
9
files/usr/lib/os-release.tmpl
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
NAME="${OS_NAME}"
|
||||||
|
VERSION="v${OS_VERSION} (${OS_GIT})"
|
||||||
|
ID="rancheros"
|
||||||
|
ID_LIKE="suse opensuse"
|
||||||
|
VERSION_ID="${OS_VERSION}"
|
||||||
|
PRETTY_NAME="${OS_NAME} v${OS_VERSION} (${OS_GIT})"
|
||||||
|
ANSI_COLOR="0;32"
|
||||||
|
BUG_REPORT_URL="https://github.com/rancher/os/issues"
|
||||||
|
HOME_URL="https://github.com/rancher/os"
|
||||||
22
files/usr/lib/systemd/system/rancherd.service
Normal file
22
files/usr/lib/systemd/system/rancherd.service
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Rancher Bootstrap
|
||||||
|
Documentation=https://github.com/rancher/rancherd
|
||||||
|
Wants=network-online.target
|
||||||
|
After=network-online.target
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
EnvironmentFile=-/etc/default/%N
|
||||||
|
EnvironmentFile=-/etc/sysconfig/%N
|
||||||
|
KillMode=process
|
||||||
|
# Having non-zero Limit*s causes performance problems due to accounting overhead
|
||||||
|
# in the kernel. We recommend using cgroups to do container-local accounting.
|
||||||
|
LimitNOFILE=1048576
|
||||||
|
LimitNPROC=infinity
|
||||||
|
LimitCORE=infinity
|
||||||
|
TasksMax=infinity
|
||||||
|
TimeoutStartSec=0
|
||||||
|
ExecStart=/usr/bin/rancherd bootstrap
|
||||||
0
files/usr/libexec/.placeholder
Normal file
0
files/usr/libexec/.placeholder
Normal file
355
files/usr/sbin/cos-upgrade
Executable file
355
files/usr/sbin/cos-upgrade
Executable file
@ -0,0 +1,355 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -e
|
||||||
|
|
||||||
|
CHANNEL_UPGRADES="${CHANNEL_UPGRADES:-true}"
|
||||||
|
|
||||||
|
# 1. Identify active/passive partition
|
||||||
|
# 2. Install upgrade in passive partition
|
||||||
|
# 3. Invert partition labels
|
||||||
|
|
||||||
|
find_partitions() {
|
||||||
|
STATE=$(blkid -L COS_STATE || true)
|
||||||
|
if [ -z "$STATE" ]; then
|
||||||
|
echo "State partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
PERSISTENT=$(blkid -L COS_PERSISTENT || true)
|
||||||
|
if [ -z "$PERSISTENT" ]; then
|
||||||
|
echo "Persistent partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
OEM=$(blkid -L COS_OEM || true)
|
||||||
|
if [ -z "$OEM" ]; then
|
||||||
|
echo "OEM partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
COS_ACTIVE=$(blkid -L COS_ACTIVE || true)
|
||||||
|
if [ -n "$COS_ACTIVE" ]; then
|
||||||
|
CURRENT=active.img
|
||||||
|
fi
|
||||||
|
|
||||||
|
COS_PASSIVE=$(blkid -L COS_PASSIVE || true)
|
||||||
|
if [ -n "$COS_PASSIVE" ]; then
|
||||||
|
CURRENT=passive.img
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$CURRENT" ]; then
|
||||||
|
# We booted from an ISO or some else medium. We assume we want to fixup the current label
|
||||||
|
read -p "Could not determine current partition. Do you want to overwrite your current active partition? (CURRENT=active.img) [y/N] : " -n 1 -r
|
||||||
|
if [[ ! $REPLY =~ ^[Yy]$ ]]
|
||||||
|
then
|
||||||
|
[[ "$0" = "$BASH_SOURCE" ]] && exit 1 || return 1 # handle exits from shell or function but don't exit interactive shell
|
||||||
|
fi
|
||||||
|
CURRENT=active.img
|
||||||
|
echo
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "-> Upgrade target: $CURRENT"
|
||||||
|
}
|
||||||
|
|
||||||
|
find_recovery() {
|
||||||
|
RECOVERY=$(blkid -L COS_RECOVERY || true)
|
||||||
|
if [ -z "$RECOVERY" ]; then
|
||||||
|
echo "COS_RECOVERY partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# cos-upgrade-image: system/cos
|
||||||
|
find_upgrade_channel() {
|
||||||
|
if [ -e "/etc/cos-upgrade-image" ]; then
|
||||||
|
source /etc/cos-upgrade-image
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "$IMAGE" ]; then
|
||||||
|
UPGRADE_IMAGE=$IMAGE
|
||||||
|
echo "Upgrading to image $UPGRADE_IMAGE"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$UPGRADE_IMAGE" ]; then
|
||||||
|
UPGRADE_IMAGE="system/cos"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "$UPGRADE_RECOVERY" ] && [ $UPGRADE_RECOVERY == true ] && [ -n "$RECOVERY_IMAGE" ]; then
|
||||||
|
UPGRADE_IMAGE=$RECOVERY_IMAGE
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
is_squashfs() {
|
||||||
|
if [ -e "${STATEDIR}/cOS/recovery.squashfs" ]; then
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
recovery_boot() {
|
||||||
|
cmdline="$(cat /proc/cmdline)"
|
||||||
|
if echo $cmdline | grep -q "COS_RECOVERY" || echo $cmdline | grep -q "COS_SYSTEM"; then
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
prepare_target() {
|
||||||
|
mkdir -p ${STATEDIR}/cOS || true
|
||||||
|
rm -rf ${STATEDIR}/cOS/transition.img || true
|
||||||
|
dd if=/dev/zero of=${STATEDIR}/cOS/transition.img bs=1M count=3240
|
||||||
|
mkfs.ext2 ${STATEDIR}/cOS/transition.img
|
||||||
|
mount -t ext2 -o loop ${STATEDIR}/cOS/transition.img $TARGET
|
||||||
|
}
|
||||||
|
|
||||||
|
prepare_squashfs_target() {
|
||||||
|
rm -rf $TARGET || true
|
||||||
|
TARGET=${STATEDIR}/tmp/target
|
||||||
|
mkdir -p $TARGET
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_state() {
|
||||||
|
STATEDIR=/run/initramfs/state
|
||||||
|
mkdir -p $STATEDIR
|
||||||
|
mount ${STATE} ${STATEDIR}
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_image() {
|
||||||
|
STATEDIR=/run/initramfs/isoscan
|
||||||
|
TARGET=/tmp/upgrade
|
||||||
|
|
||||||
|
mkdir -p $TARGET || true
|
||||||
|
|
||||||
|
if [ -d "$STATEDIR" ]; then
|
||||||
|
if recovery_boot; then
|
||||||
|
mount_state
|
||||||
|
else
|
||||||
|
mount -o remount,rw ${STATE} ${STATEDIR}
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
mount_state
|
||||||
|
fi
|
||||||
|
|
||||||
|
prepare_target
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_recovery() {
|
||||||
|
STATEDIR=/tmp/recovery
|
||||||
|
TARGET=/tmp/upgrade
|
||||||
|
|
||||||
|
mkdir -p $TARGET || true
|
||||||
|
mkdir -p $STATEDIR || true
|
||||||
|
mount $RECOVERY $STATEDIR
|
||||||
|
if is_squashfs; then
|
||||||
|
echo "Preparing squashfs target"
|
||||||
|
prepare_squashfs_target
|
||||||
|
else
|
||||||
|
echo "Preparing image target"
|
||||||
|
prepare_target
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_persistent() {
|
||||||
|
mkdir -p ${TARGET}/oem || true
|
||||||
|
mount ${OEM} ${TARGET}/oem
|
||||||
|
mkdir -p ${TARGET}/usr/local || true
|
||||||
|
mount ${PERSISTENT} ${TARGET}/usr/local
|
||||||
|
}
|
||||||
|
|
||||||
|
upgrade() {
|
||||||
|
mount_persistent
|
||||||
|
ensure_dir_structure
|
||||||
|
|
||||||
|
temp_upgrade=$STATEDIR/tmp/upgrade
|
||||||
|
rm -rf $temp_upgrade || true
|
||||||
|
mkdir -p $temp_upgrade
|
||||||
|
|
||||||
|
# FIXME: XDG_RUNTIME_DIR is for containerd, by default that points to /run/user/<uid>
|
||||||
|
# which might not be sufficient to unpack images. Use /usr/local/tmp until we get a separate partition
|
||||||
|
# for the state
|
||||||
|
# FIXME: Define default /var/tmp as tmpdir_base in default luet config file
|
||||||
|
export XDG_RUNTIME_DIR=$temp_upgrade
|
||||||
|
export TMPDIR=$temp_upgrade
|
||||||
|
|
||||||
|
if [ -n "$CHANNEL_UPGRADES" ] && [ "$CHANNEL_UPGRADES" == true ]; then
|
||||||
|
if [ -z "$VERIFY" ]; then
|
||||||
|
args="--plugin image-mtree-check"
|
||||||
|
fi
|
||||||
|
luet install $args --system-target $TARGET --system-engine memory -y $UPGRADE_IMAGE
|
||||||
|
luet cleanup
|
||||||
|
else
|
||||||
|
if [ "$DIRECTORY" != true ]; then
|
||||||
|
args=""
|
||||||
|
if [ -z "$VERIFY" ]; then
|
||||||
|
args="--plugin image-mtree-check"
|
||||||
|
fi
|
||||||
|
rm -rf /usr/local/tmp/rootfs
|
||||||
|
luet util unpack $args $UPGRADE_IMAGE /usr/local/tmp/rootfs
|
||||||
|
rsync -axq --exclude='host' --exclude='mnt' --exclude='proc' --exclude='sys' --exclude='dev' --exclude='tmp' /usr/local/tmp/rootfs/ /tmp/upgrade
|
||||||
|
else
|
||||||
|
rsync -axq --exclude='host' --exclude='mnt' --exclude='proc' --exclude='sys' --exclude='dev' --exclude='tmp' ${UPGRADE_IMAGE}/ /tmp/upgrade
|
||||||
|
fi
|
||||||
|
rm -rf /usr/local/tmp/rootfs
|
||||||
|
fi
|
||||||
|
|
||||||
|
SELinux_relabel
|
||||||
|
chmod 755 /tmp/upgrade
|
||||||
|
|
||||||
|
rm -rf $temp_upgrade
|
||||||
|
umount $TARGET/oem || true
|
||||||
|
umount $TARGET/usr/local || true
|
||||||
|
umount $TARGET || true
|
||||||
|
}
|
||||||
|
|
||||||
|
SELinux_relabel()
|
||||||
|
{
|
||||||
|
if which setfiles > /dev/null && [ -e ${TARGET}/etc/selinux/targeted/contexts/files/file_contexts ]; then
|
||||||
|
setfiles -r ${TARGET} ${TARGET}/etc/selinux/targeted/contexts/files/file_contexts ${TARGET}
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
switch_active() {
|
||||||
|
if [[ "$CURRENT" == "active.img" ]]; then
|
||||||
|
mv -f ${STATEDIR}/cOS/$CURRENT ${STATEDIR}/cOS/passive.img
|
||||||
|
tune2fs -L COS_PASSIVE ${STATEDIR}/cOS/passive.img
|
||||||
|
fi
|
||||||
|
|
||||||
|
mv -f ${STATEDIR}/cOS/transition.img ${STATEDIR}/cOS/active.img
|
||||||
|
tune2fs -L COS_ACTIVE ${STATEDIR}/cOS/active.img
|
||||||
|
}
|
||||||
|
|
||||||
|
switch_recovery() {
|
||||||
|
if is_squashfs; then
|
||||||
|
mksquashfs $TARGET ${STATEDIR}/cOS/transition.squashfs -b 1024k -comp xz -Xbcj x86
|
||||||
|
mv ${STATEDIR}/cOS/transition.squashfs ${STATEDIR}/cOS/recovery.squashfs
|
||||||
|
rm -rf $TARGET
|
||||||
|
else
|
||||||
|
mv -f ${STATEDIR}/cOS/transition.img ${STATEDIR}/cOS/recovery.img
|
||||||
|
tune2fs -L COS_SYSTEM ${STATEDIR}/cOS/recovery.img
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
ensure_dir_structure() {
|
||||||
|
mkdir ${TARGET}/proc || true
|
||||||
|
mkdir ${TARGET}/boot || true
|
||||||
|
mkdir ${TARGET}/dev || true
|
||||||
|
mkdir ${TARGET}/sys || true
|
||||||
|
mkdir ${TARGET}/tmp || true
|
||||||
|
}
|
||||||
|
|
||||||
|
cleanup2()
|
||||||
|
{
|
||||||
|
rm -rf /usr/local/tmp/upgrade || true
|
||||||
|
mount -o remount,ro ${STATE} ${STATEDIR} || true
|
||||||
|
if [ -n "${TARGET}" ]; then
|
||||||
|
umount ${TARGET}/boot/efi || true
|
||||||
|
umount ${TARGET}/oem || true
|
||||||
|
umount ${TARGET}/usr/local || true
|
||||||
|
umount ${TARGET}/ || true
|
||||||
|
rm -rf ${TARGET}
|
||||||
|
fi
|
||||||
|
if [ -n "$UPGRADE_RECOVERY" ] && [ $UPGRADE_RECOVERY == true ]; then
|
||||||
|
umount ${STATEDIR} || true
|
||||||
|
fi
|
||||||
|
if [ "$STATEDIR" == "/run/initramfs/state" ]; then
|
||||||
|
umount ${STATEDIR}
|
||||||
|
rm -rf $STATEDIR
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
cleanup()
|
||||||
|
{
|
||||||
|
EXIT=$?
|
||||||
|
cleanup2 2>/dev/null || true
|
||||||
|
return $EXIT
|
||||||
|
}
|
||||||
|
|
||||||
|
usage()
|
||||||
|
{
|
||||||
|
echo "Usage: cos-upgrade [--no-verify] [--recovery] [--docker-image] IMAGE"
|
||||||
|
echo ""
|
||||||
|
echo "Example: cos-upgrade"
|
||||||
|
echo ""
|
||||||
|
echo "IMAGE is optional, and upgrades the system to the given specified docker image."
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
find_upgrade_channel
|
||||||
|
|
||||||
|
while [ "$#" -gt 0 ]; do
|
||||||
|
case $1 in
|
||||||
|
--docker-image)
|
||||||
|
CHANNEL_UPGRADES=false
|
||||||
|
;;
|
||||||
|
--directory)
|
||||||
|
CHANNEL_UPGRADES=false
|
||||||
|
DIRECTORY=true
|
||||||
|
;;
|
||||||
|
--recovery)
|
||||||
|
UPGRADE_RECOVERY=true
|
||||||
|
;;
|
||||||
|
--no-verify)
|
||||||
|
VERIFY=false
|
||||||
|
;;
|
||||||
|
-h)
|
||||||
|
usage
|
||||||
|
;;
|
||||||
|
--help)
|
||||||
|
usage
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
if [ "$#" -gt 2 ]; then
|
||||||
|
usage
|
||||||
|
fi
|
||||||
|
INTERACTIVE=true
|
||||||
|
UPGRADE_IMAGE=$1
|
||||||
|
break
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
shift 1
|
||||||
|
done
|
||||||
|
|
||||||
|
trap cleanup exit
|
||||||
|
|
||||||
|
if [ -n "$UPGRADE_RECOVERY" ] && [ $UPGRADE_RECOVERY == true ]; then
|
||||||
|
echo "Upgrading recovery partition.."
|
||||||
|
|
||||||
|
find_partitions
|
||||||
|
|
||||||
|
find_recovery
|
||||||
|
|
||||||
|
mount_recovery
|
||||||
|
|
||||||
|
upgrade
|
||||||
|
|
||||||
|
switch_recovery
|
||||||
|
else
|
||||||
|
echo "Upgrading system.."
|
||||||
|
|
||||||
|
find_partitions
|
||||||
|
|
||||||
|
mount_image
|
||||||
|
|
||||||
|
upgrade
|
||||||
|
|
||||||
|
switch_active
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Flush changes to disk"
|
||||||
|
sync
|
||||||
|
sync
|
||||||
|
|
||||||
|
if [ -n "$INTERACTIVE" ] && [ $INTERACTIVE == false ]; then
|
||||||
|
if grep -q 'cos.upgrade.power_off=true' /proc/cmdline; then
|
||||||
|
poweroff -f
|
||||||
|
else
|
||||||
|
echo " * Rebooting system in 5 seconds (CTRL+C to cancel)"
|
||||||
|
sleep 5
|
||||||
|
reboot -f
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Upgrade done, now you might want to reboot"
|
||||||
|
fi
|
||||||
295
files/usr/sbin/cos-upgrade.save
Executable file
295
files/usr/sbin/cos-upgrade.save
Executable file
@ -0,0 +1,295 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -e
|
||||||
|
|
||||||
|
CHANNEL_UPGRADES="${CHANNEL_UPGRADES:-true}"
|
||||||
|
|
||||||
|
# 1. Identify active/passive partition
|
||||||
|
# 2. Install upgrade in passive partition
|
||||||
|
# 3. Invert partition labels
|
||||||
|
|
||||||
|
find_partitions() {
|
||||||
|
STATE=$(blkid -L COS_STATE || true)
|
||||||
|
if [ -z "$STATE" ]; then
|
||||||
|
echo "State partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
PERSISTENT=$(blkid -L COS_PERSISTENT || true)
|
||||||
|
if [ -z "$PERSISTENT" ]; then
|
||||||
|
echo "Persistent partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
OEM=$(blkid -L COS_OEM || true)
|
||||||
|
if [ -z "$OEM" ]; then
|
||||||
|
echo "OEM partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
COS_ACTIVE=$(blkid -L COS_ACTIVE || true)
|
||||||
|
if [ -n "$COS_ACTIVE" ]; then
|
||||||
|
CURRENT=active.img
|
||||||
|
fi
|
||||||
|
|
||||||
|
COS_PASSIVE=$(blkid -L COS_PASSIVE || true)
|
||||||
|
if [ -n "$COS_PASSIVE" ]; then
|
||||||
|
CURRENT=passive.img
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$CURRENT" ]; then
|
||||||
|
# We booted from an ISO or some else medium. We assume we want to fixup the current label
|
||||||
|
read -p "Could not determine current partition. Do you want to overwrite your current active partition? [y/N] : " -n 1 -r
|
||||||
|
if [[ ! $REPLY =~ ^[Yy]$ ]]
|
||||||
|
then
|
||||||
|
[[ "$0" = "$BASH_SOURCE" ]] && exit 1 || return 1 # handle exits from shell or function but don't exit interactive shell
|
||||||
|
fi
|
||||||
|
CURRENT=active.img
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "-> Booting from: $CURRENT"
|
||||||
|
}
|
||||||
|
|
||||||
|
find_recovery() {
|
||||||
|
RECOVERY=$(blkid -L COS_RECOVERY || true)
|
||||||
|
if [ -z "$RECOVERY" ]; then
|
||||||
|
echo "COS_RECOVERY partition cannot be found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# cos-upgrade-image: system/cos
|
||||||
|
find_upgrade_channel() {
|
||||||
|
if [ -e "/etc/cos-upgrade-image" ]; then
|
||||||
|
source /etc/cos-upgrade-image
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "$IMAGE" ]; then
|
||||||
|
UPGRADE_IMAGE=$IMAGE
|
||||||
|
echo "Upgrading to image $UPGRADE_IMAGE"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$UPGRADE_IMAGE" ]; then
|
||||||
|
UPGRADE_IMAGE="system/cos"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
prepare_target() {
|
||||||
|
mkdir -p ${STATEDIR}/cOS || true
|
||||||
|
rm -rf ${STATEDIR}/cOS/transition.img || true
|
||||||
|
dd if=/dev/zero of=${STATEDIR}/cOS/transition.img bs=1M count=3240
|
||||||
|
mkfs.ext2 ${STATEDIR}/cOS/transition.img
|
||||||
|
mount -t ext2 -o loop ${STATEDIR}/cOS/transition.img $TARGET
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_image() {
|
||||||
|
STATEDIR=/run/initramfs/isoscan
|
||||||
|
TARGET=/tmp/upgrade
|
||||||
|
|
||||||
|
mkdir -p $TARGET || true
|
||||||
|
mount -o remount,rw ${STATE} ${STATEDIR}
|
||||||
|
|
||||||
|
prepare_target
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_recovery() {
|
||||||
|
STATEDIR=/tmp/recovery
|
||||||
|
TARGET=/tmp/upgrade
|
||||||
|
|
||||||
|
mkdir -p $TARGET || true
|
||||||
|
mkdir -p $STATEDIR || true
|
||||||
|
mount $RECOVERY $STATEDIR
|
||||||
|
|
||||||
|
prepare_target
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_persistent() {
|
||||||
|
mkdir -p ${TARGET}/oem || true
|
||||||
|
mount ${OEM} ${TARGET}/oem
|
||||||
|
mkdir -p ${TARGET}/usr/local || true
|
||||||
|
mount ${PERSISTENT} ${TARGET}/usr/local
|
||||||
|
}
|
||||||
|
|
||||||
|
upgrade() {
|
||||||
|
mount_persistent
|
||||||
|
ensure_dir_structure
|
||||||
|
|
||||||
|
mkdir -p /usr/local/tmp/upgrade
|
||||||
|
|
||||||
|
# FIXME: XDG_RUNTIME_DIR is for containerd, by default that points to /run/user/<uid>
|
||||||
|
# which might not be sufficient to unpack images. Use /usr/local/tmp until we get a separate partition
|
||||||
|
# for the state
|
||||||
|
# FIXME: Define default /var/tmp as tmpdir_base in default luet config file
|
||||||
|
export XDG_RUNTIME_DIR=/usr/local/tmp/upgrade
|
||||||
|
export TMPDIR=/usr/local/tmp/upgrade
|
||||||
|
export HOME=/tmp # Docker Content Trust data is stored in $HOME/.docker. We don't need those to persist
|
||||||
|
|
||||||
|
if [ -n "$CHANNEL_UPGRADES" ] && [ "$CHANNEL_UPGRADES" == true ]; then
|
||||||
|
if [ -z "$VERIFY" ]; then
|
||||||
|
args="--plugin image-mtree-check"
|
||||||
|
fi
|
||||||
|
luet install $args --system-target /tmp/upgrade --system-engine memory -y $UPGRADE_IMAGE
|
||||||
|
luet cleanup
|
||||||
|
else
|
||||||
|
if [ "$DIRECTORY" != true ]; then
|
||||||
|
args=""
|
||||||
|
if [ -z "$VERIFY" ]; then
|
||||||
|
args="--verify"
|
||||||
|
fi
|
||||||
|
rm -rf /usr/local/tmp/rootfs
|
||||||
|
luet util unpack $args $UPGRADE_IMAGE /usr/local/tmp/rootfs
|
||||||
|
rsync -axq --exclude='host' --exclude='mnt' --exclude='proc' --exclude='sys' --exclude='dev' --exclude='tmp' /usr/local/tmp/rootfs/ /tmp/upgrade
|
||||||
|
else
|
||||||
|
rsync -axq --exclude='host' --exclude='mnt' --exclude='proc' --exclude='sys' --exclude='dev' --exclude='tmp' ${UPGRADE_IMAGE}/ /tmp/upgrade
|
||||||
|
fi
|
||||||
|
rm -rf /usr/local/tmp/rootfs
|
||||||
|
fi
|
||||||
|
|
||||||
|
SELinux_relabel
|
||||||
|
chmod 755 /tmp/upgrade
|
||||||
|
|
||||||
|
rm -rf /usr/local/tmp/upgrade
|
||||||
|
umount $TARGET/oem
|
||||||
|
umount $TARGET/usr/local
|
||||||
|
umount $TARGET
|
||||||
|
}
|
||||||
|
|
||||||
|
SELinux_relabel()
|
||||||
|
{
|
||||||
|
if which setfiles > /dev/null && [ -e ${TARGET}/etc/selinux/targeted/contexts/files/file_contexts ]; then
|
||||||
|
setfiles -r ${TARGET} ${TARGET}/etc/selinux/targeted/contexts/files/file_contexts ${TARGET}
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
switch_active() {
|
||||||
|
if [[ "$CURRENT" == "active.img" ]]; then
|
||||||
|
mv -f ${STATEDIR}/cOS/$CURRENT ${STATEDIR}/cOS/passive.img
|
||||||
|
tune2fs -L COS_PASSIVE ${STATEDIR}/cOS/passive.img
|
||||||
|
fi
|
||||||
|
|
||||||
|
mv -f ${STATEDIR}/cOS/transition.img ${STATEDIR}/cOS/active.img
|
||||||
|
tune2fs -L COS_ACTIVE ${STATEDIR}/cOS/active.img
|
||||||
|
}
|
||||||
|
|
||||||
|
switch_recovery() {
|
||||||
|
mv -f ${STATEDIR}/cOS/transition.img ${STATEDIR}/cOS/recovery.img
|
||||||
|
tune2fs -L COS_SYSTEM ${STATEDIR}/cOS/recovery.img
|
||||||
|
}
|
||||||
|
|
||||||
|
ensure_dir_structure() {
|
||||||
|
mkdir ${TARGET}/proc || true
|
||||||
|
mkdir ${TARGET}/boot || true
|
||||||
|
mkdir ${TARGET}/dev || true
|
||||||
|
mkdir ${TARGET}/sys || true
|
||||||
|
mkdir ${TARGET}/tmp || true
|
||||||
|
}
|
||||||
|
|
||||||
|
cleanup2()
|
||||||
|
{
|
||||||
|
rm -rf /usr/local/tmp/upgrade || true
|
||||||
|
mount -o remount,ro ${STATE} ${STATEDIR} || true
|
||||||
|
if [ -n "${TARGET}" ]; then
|
||||||
|
umount ${TARGET}/boot/efi || true
|
||||||
|
umount ${TARGET}/oem || true
|
||||||
|
umount ${TARGET}/usr/local || true
|
||||||
|
umount ${TARGET}/ || true
|
||||||
|
fi
|
||||||
|
if [ -n "$UPGRADE_RECOVERY" ] && [ $UPGRADE_RECOVERY == true ]; then
|
||||||
|
umount ${STATEDIR} || true
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
cleanup()
|
||||||
|
{
|
||||||
|
EXIT=$?
|
||||||
|
cleanup2 2>/dev/null || true
|
||||||
|
return $EXIT
|
||||||
|
}
|
||||||
|
|
||||||
|
usage()
|
||||||
|
{
|
||||||
|
echo "Usage: cos-upgrade [--verify] [--recovery] [--docker-image] IMAGE"
|
||||||
|
echo ""
|
||||||
|
echo "Example: cos-upgrade"
|
||||||
|
echo ""
|
||||||
|
echo "IMAGE is optional, and upgrades the system to the given specified docker image."
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
find_upgrade_channel
|
||||||
|
|
||||||
|
while [ "$#" -gt 0 ]; do
|
||||||
|
case $1 in
|
||||||
|
--docker-image)
|
||||||
|
CHANNEL_UPGRADES=false
|
||||||
|
;;
|
||||||
|
--directory)
|
||||||
|
CHANNEL_UPGRADES=false
|
||||||
|
DIRECTORY=true
|
||||||
|
;;
|
||||||
|
--recovery)
|
||||||
|
UPGRADE_RECOVERY=true
|
||||||
|
;;
|
||||||
|
--no-verify)
|
||||||
|
VERIFY=false
|
||||||
|
;;
|
||||||
|
-h)
|
||||||
|
usage
|
||||||
|
;;
|
||||||
|
--help)
|
||||||
|
usage
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
if [ "$#" -gt 2 ]; then
|
||||||
|
usage
|
||||||
|
fi
|
||||||
|
INTERACTIVE=true
|
||||||
|
UPGRADE_IMAGE=$1
|
||||||
|
break
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
shift 1
|
||||||
|
done
|
||||||
|
|
||||||
|
trap cleanup exit
|
||||||
|
|
||||||
|
if [ -n "$UPGRADE_RECOVERY" ] && [ $UPGRADE_RECOVERY == true ]; then
|
||||||
|
echo "Upgrading recovery partition.."
|
||||||
|
|
||||||
|
find_partitions
|
||||||
|
|
||||||
|
find_recovery
|
||||||
|
|
||||||
|
mount_recovery
|
||||||
|
|
||||||
|
upgrade
|
||||||
|
|
||||||
|
switch_recovery
|
||||||
|
else
|
||||||
|
echo "Upgrading system.."
|
||||||
|
|
||||||
|
find_partitions
|
||||||
|
|
||||||
|
mount_image
|
||||||
|
|
||||||
|
upgrade
|
||||||
|
|
||||||
|
switch_active
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Flush changes to disk"
|
||||||
|
sync
|
||||||
|
sync
|
||||||
|
|
||||||
|
if [ -n "$INTERACTIVE" ] && [ $INTERACTIVE == false ]; then
|
||||||
|
if grep -q 'cos.upgrade.power_off=true' /proc/cmdline; then
|
||||||
|
poweroff -f
|
||||||
|
else
|
||||||
|
echo " * Rebooting system in 5 seconds (CTRL+C to cancel)"
|
||||||
|
sleep 5
|
||||||
|
reboot -f
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Upgrade done, now you might want to reboot"
|
||||||
|
fi
|
||||||
15
files/usr/sbin/suc-upgrade
Executable file
15
files/usr/sbin/suc-upgrade
Executable file
@ -0,0 +1,15 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -x -e
|
||||||
|
|
||||||
|
if [ "$FORCE" != "true" ]; then
|
||||||
|
if diff /etc/os-release /host/etc/os-release >/dev/null; then
|
||||||
|
echo Update to date with
|
||||||
|
cat /etc/os-release
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
mount --rbind /host/dev /dev
|
||||||
|
mount --rbind /host/run /run
|
||||||
|
bash -x cos-upgrade --directory /
|
||||||
|
nsenter -i -m -t 1 -- reboot
|
||||||
|
exit 1
|
||||||
@ -0,0 +1,21 @@
|
|||||||
|
rancherValues:
|
||||||
|
rancherImagePullPolicy: Always
|
||||||
|
rancherImage: ibuildthecloud/rancher
|
||||||
|
rancherImageTag: dev
|
||||||
|
extraEnv:
|
||||||
|
- name: CATTLE_SYSTEM_AGENT_UPGRADE_IMAGE
|
||||||
|
value: ibuildthecloud/suc
|
||||||
|
rancherInstallerImage: ibuildthecloud/system-agent-installer-rancher:dev
|
||||||
|
bootstrapResources:
|
||||||
|
- kind: Deployment
|
||||||
|
apiVersion: apps/v1
|
||||||
|
metadata:
|
||||||
|
name: rancher-webhook
|
||||||
|
namespace: cattle-system
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: rancher-webhook
|
||||||
|
image: ibuildthecloud/rancher-webhook:dev
|
||||||
|
imagePullPolicy: Always
|
||||||
26
tools/iso/iso.yaml
Normal file
26
tools/iso/iso.yaml
Normal file
@ -0,0 +1,26 @@
|
|||||||
|
packages:
|
||||||
|
rootfs:
|
||||||
|
- iso/rootfs
|
||||||
|
uefi:
|
||||||
|
- live/systemd-boot
|
||||||
|
- live/boot
|
||||||
|
isoimage:
|
||||||
|
- live/syslinux
|
||||||
|
- live/boot
|
||||||
|
|
||||||
|
initramfs:
|
||||||
|
kernel_file: "vmlinuz"
|
||||||
|
rootfs_file: "initrd"
|
||||||
|
|
||||||
|
overlay: true
|
||||||
|
image_prefix: "distro"
|
||||||
|
image_date: true
|
||||||
|
label: "COS_LIVE"
|
||||||
|
|
||||||
|
luet:
|
||||||
|
repositories:
|
||||||
|
- name: cOS
|
||||||
|
enable: true
|
||||||
|
urls:
|
||||||
|
- quay.io/costoolkit/releases-opensuse
|
||||||
|
type: docker
|
||||||
2
tools/iso/package/build.yaml
Normal file
2
tools/iso/package/build.yaml
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
image: "{{.Values.image}}"
|
||||||
|
unpack: true
|
||||||
3
tools/iso/package/definition.yaml
Normal file
3
tools/iso/package/definition.yaml
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
name: "rootfs"
|
||||||
|
category: "iso"
|
||||||
|
version: "0"
|
||||||
1
tools/iso/values.yaml.tmpl
Normal file
1
tools/iso/values.yaml.tmpl
Normal file
@ -0,0 +1 @@
|
|||||||
|
image: "${IMAGE}"
|
||||||
20
tools/usr/bin/makeiso
Executable file
20
tools/usr/bin/makeiso
Executable file
@ -0,0 +1,20 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
IMAGE=$1
|
||||||
|
|
||||||
|
if [ -z "$IMAGE" ]; then
|
||||||
|
echo "Image name is required as the first argument"
|
||||||
|
echo
|
||||||
|
echo Usage: $0 [DOCKER_IMAGE]
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
cd /iso
|
||||||
|
cat > values.yaml << EOF
|
||||||
|
image: "$IMAGE"
|
||||||
|
EOF
|
||||||
|
|
||||||
|
luet build --values values.yaml iso/rootfs
|
||||||
|
luet create-repo
|
||||||
|
luet-makeiso iso.yaml --local /iso/build
|
||||||
|
cp distro*iso /output.iso
|
||||||
Loading…
Reference in New Issue
Block a user