1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
| | # SPDX-License-Identifier: EUPL-1.2+
# SPDX-FileCopyrightText: 2021-2024 Alyssa Ross <hi@alyssa.is>
.POSIX:
include ../../lib/common.mk
-include ../../lib/kcmdline-utils.mk
include file-list.mk
dest = build/rootfs.erofs
DIRS = \
dev \
etc/s6-linux-init/env \
etc/s6-linux-init/run-image/configs \
etc/s6-linux-init/run-image/sd-notify-wrapper \
etc/s6-linux-init/run-image/service/dbus/instance \
etc/s6-linux-init/run-image/service/dbus/instances \
etc/s6-linux-init/run-image/service/dbus/template/data \
etc/s6-linux-init/run-image/service/dbus/template/env \
etc/s6-linux-init/run-image/service/serial-getty/instance \
etc/s6-linux-init/run-image/service/serial-getty/instances \
etc/s6-linux-init/run-image/service/vhost-user-fs/instance \
etc/s6-linux-init/run-image/service/vhost-user-fs/instances \
etc/s6-linux-init/run-image/service/vhost-user-fs/template/data \
etc/s6-linux-init/run-image/service/vhost-user-fs/template/env \
etc/s6-linux-init/run-image/service/vhost-user-gpu/instance \
etc/s6-linux-init/run-image/service/vhost-user-gpu/instances \
etc/s6-linux-init/run-image/service/vhost-user-gpu/template/env \
etc/s6-linux-init/run-image/service/vmm/instance \
etc/s6-linux-init/run-image/service/vmm/instances \
etc/s6-linux-init/run-image/service/vmm/template/data \
etc/s6-linux-init/run-image/service/vmm/template/env \
etc/s6-linux-init/run-image/service/xdg-desktop-portal-spectrum-host/instance \
etc/s6-linux-init/run-image/service/xdg-desktop-portal-spectrum-host/instances \
etc/s6-linux-init/run-image/service/xdg-desktop-portal-spectrum-host/template/data \
etc/s6-linux-init/run-image/service/xdg-desktop-portal-spectrum-host/template/env \
etc/s6-linux-init/run-image/user \
etc/s6-linux-init/run-image/vm/by-id \
etc/s6-linux-init/run-image/vm/by-name \
ext \
home \
proc \
run \
sys \
tmp
FIFOS = etc/s6-linux-init/run-image/service/s6-svscan-log/fifo
BUILD_FILES = build/etc/s6-rc
$(dest): ../../scripts/make-erofs.sh $(PACKAGES_FILE) $(FILES) $(BUILD_FILES) build/empty build/fifo file-list.mk
{ \
cat $(PACKAGES_FILE) ;\
for file in $(FILES) $(LINKS); do printf '%s\n%s\n' $$file "$${file#image/}"; done ;\
for file in $(BUILD_FILES); do printf '%s\n%s\n' $$file $${file#build/}; done ;\
printf 'build/empty\n%s\n' $(DIRS) ;\
printf 'build/fifo\n%s\n' $(FIFOS) ;\
} | ../../scripts/make-erofs.sh $@
build/fifo:
mkdir -p build
mkfifo -m 0600 $@
build/empty:
mkdir -p $@
build/etc:
mkdir -p $@
# s6-rc-compile's input is a directory, but that doesn't play nice
# with Make, because it won't know to update if some file in the
# directory is changed, or a file is created or removed in a
# subdirectory. Using the whole source directory could also end up
# including files that aren't intended to be part of the input, like
# temporary editor files or .license files. So for all these reasons,
# only explicitly listed files are made available to s6-rc-compile.
build/etc/s6-rc: $(S6_RC_FILES) file-list.mk build/etc
rm -rf $@
set -uo pipefail && dir=$$(mktemp -d) && \
{ tar -c $(S6_RC_FILES) | tar -C $$dir -x --strip-components 3; } && \
s6-rc-compile $@ $$dir; \
exit=$$?; rm -r $$dir; exit $$exit
clean:
-chmod -Rf +w build
rm -rf build
.PHONY: clean
include ../../lib/verity.mk
build/live.img: $(LIVE_IMAGE_DEPS) $(dest)
../../scripts/make-live-image.sh live $@ $(dest)
debug:
$(GDB) -q \
-ex 'set substitute-path .. $(LINUX_SRC)' \
-ex 'target remote build/gdb.sock' \
$(VMLINUX)
.PHONY: debug
run: build/live.img $(EXT_FS) build/rootfs.verity.roothash ../../lib/kcmdline-utils.mk
@set -x && \
ext="$$(mktemp build/spectrum-rootfs-extfs.XXXXXXXXXX.img)" && \
truncate -s 10G "$$ext" && \
dir=$$(mktemp -d) && \
mkdir -- "$$dir/tmp" "$$dir/home" && \
mkfs.btrfs --rootdir "$$dir" --subvol tmp --subvol home -- "$$ext" && \
rm -rf -- "$$dir" && \
exec 3<>"$$ext" && \
rm -f "$$ext" && \
set -x && $(READ_ROOTHASH) && \
exec ../../scripts/run-qemu.sh -cpu max -m 4G \
-machine virtualization=on \
-kernel $(KERNEL) \
-initrd $(INITRAMFS) \
-gdb unix:build/gdb.sock,server,nowait \
-qmp unix:build/vmm.sock,server,nowait \
-monitor vc \
-parallel none \
-chardev vc,id=virtiocon0 \
-device virtio-serial \
-device virtconsole,chardev=virtiocon0 \
-drive file=build/live.img,if=virtio,format=raw,readonly=on \
-drive file=/proc/self/fd/3,if=virtio,format=raw \
-append "earlycon console=hvc0 intel_iommu=on nokaslr x-spectrum-roothash=$$roothash x-spectrum-version=$$VERSION" \
-device virtio-keyboard \
-device virtio-mouse \
-device virtio-gpu \
-netdev user,id=net0 \
-device e1000e,netdev=net0 \
-vga none \
-device vhost-vsock-pci,guest-cid=3
.PHONY: run
|