heads.blend

#!/usr/bin/env zsh
# Copyright (c) 2016-2018 Dyne.org Foundation
#
# heads.blend is written and maintained by Ivan J. <parazyd@dyne.org>
#
# This source code is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This software is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this source code. If not, see <http://www.gnu.org/licenses/>.

## libdevuansdk build script for heads

source "$R/../config"

blend_preinst() {
	fn blend_preinst
	req=(strapdir blend)
	ckreq || return 1

	notice "executing $blend_name preinst"

	add-user luther luther
	cat <<EOF | sudo tee ${strapdir}/preinst >/dev/null
#!/bin/sh
apt --yes --force-yes purge initramfs-tools
apt --yes --force-yes --purge autoremove
rm -rf /var/lib/initramfs-tools
rm -rf /usr/share/initramfs-tools
EOF
	chroot-script -d preinst || zerr
}

blend_postinst() {
	fn blend_postinst
	req=(strapdir)
	ckreq || return 1

	notice "executing $blend_name postinst"

	nopackage=(tomb tbb ttdnsd wmutils)
	for app in $nopackage; do
		blend_install_${app} || zerr
	done || zerr

	notice "grabbing rootfs-overlay"
	pushd "$strapdir"
	sudo git clone "$rootfs_overlay"   || zerr
	sudo mv -v   rootfs-overlay/.git . || zerr
	sudo cp -rv  rootfs-overlay/* .    || zerr
	sudo rm -rf  rootfs-overlay
	popd

	blend_fixpax   || zerr
	blend_finalize || zerr
}

build_kernel_${arch}() {
	fn build_kernel_${arch}
	req=(R arch strapdir)
	req+=(kernel_heads_git kernel_heads_version kernel_heads_flavor)
	ckreq || return 1

	func "override libdevuansdk's build_kernel_${arch}"

	[[ -d $strapdir/usr/src/linux-heads ]] || {
		notice "cloning linux-heads..."
		sudo mkdir -p "$strapdir/usr/src/linux-heads"
		sudo git clone -b "$kernel_heads_branch" "$kernel_heads_git" \
			"$strapdir/usr/src/linux-heads" || zerr
	}

	notice "compiling linux-heads"
	pushd "$strapdir/usr/src/linux-heads" || zerr
	#sudo git pull origin master
	sudo cp -f "$R/../extra/heads-${arch}.config" .config
	popd

	cat <<EOF | sudo tee ${strapdir}/install-linux-heads >/dev/null
#!/bin/sh
cd /usr/src/linux-heads
make oldconfig       || exit 1
make ${MAKEOPTS}     || exit 1
make modules_install || exit 1
make install         || exit 1

## here we setup only what's needed to build kernel modules without the entire
## kernel sources. inspired by alpine linux once again <3
_abi_release="${kernel_heads_version}-${kernel_heads_flavor}"
dir="/usr/src/linux-headers-\${_abi_release}"

mkdir "\$dir" || exit 1
cp .config "\$dir"/.config || exit 1
cp localversion-unofficial_grsec "\$dir"/localversion-unofficial_grsec || exit 1

make -j1 O="\$dir" scripts

rm -f "\$dir"/Makefile "\$dir"/source

## copy the needed stuff from real sources
find . -path './include/*' -prune \
	-o -path './scripts/*' -prune -o -type f \
	\( -name 'Makefile*' -o -name 'Kconfig*' \
	-o -name 'Kbuild*' -o -name '*.sh' \
	-o -name '*.pl' -o -name '*.lds' \) \
	-print | cpio -pdm "\$dir" || exit 1

cp -a scripts include "\$dir" || exit 1
find \$(find arch -name include -type d -print) -type f \
	| cpio -pdm "\$dir"

install -Dm644 Module.symvers "\$dir"/Module.symvers

mkdir -p "/lib/modules/\${_abi_release}"
rm -f \
	/lib/modules/\${_abi_release}/build \
	/lib/modules/\${_abi_release}/source
ln -sv \
	/usr/src/linux-headers-\${_abi_release} \
	/lib/modules/\${_abi_release}/build
ln -sv \
	/usr/src/linux-headers-\${_abi_release} \
	/lib/modules/\${_abi_release}/source

cd ..
rm -rf linux-heads

## this cuts the barebone sources to 42MB
## which is somewhat acceptable
cd "\$dir"
find arch -mindepth 1 -maxdepth 1 -type d | grep -E -v 'x86|arm' | xargs rm -rf
find include -mindepth 1 -maxdepth 1 -type d \
	| grep -E 'scsi|net|dt-bindings|sound|media|drm|trace|video' | xargs rm -rf
rm -rf include/linux/mfd
rm -rf drivers Documentation fs sound net tools firmware
EOF
	chroot-script -d install-linux-heads || zerr
	sudo chmod 755 "$strapdir/boot"
}

##{{{ iso_prepare_strap()
iso_prepare_strap() {
	# noop because we don't need live-boot anymore.
	fn iso_prepare_strap "(override)"
	return
}
##}}}
##{{{ iso_setup_isolinux()
iso_setup_isolinux() {
	fn iso_setup_isolinux "(override)"
	req=(workdir strapdir)
	ckreq || return 1

	notice "setting up isolinux"
	pushd "$workdir"
	sudo mkdir -p binary/{live,isolinux}
	sudo cp $strapdir/boot/vmlinuz* binary/live/vmlinuz

	pushd "$R/../initramfs"
	sudo su -c "make ARCH=$arch" || zerr
	popd

	sudo cp "$R/../initramfs/initramfs.cpio.gz" binary/live/initramfs.cpio.gz || zerr

	sudo cp "$R"/extra/syslinux/isolinux.bin binary/isolinux || zerr
	sudo cp "$R"/extra/syslinux/*.c32        binary/isolinux || zerr
}
##}}}
##{{{ iso_write_isolinux_cfg()
iso_write_isolinux_cfg() {
	fn iso_write_isolinux_cfg "(override)"
	req=(workdir arch)
	ckreq || return 1

	## shamelessly stolen from katolaz minimal live :p
	## hope you don't mind

	notice "writing isolinux configuration"
	sudo cp -f "$R/../extra/splash.png" "$workdir/binary/isolinux/splash.png"
	cat <<EOF | sudo tee ${workdir}/binary/isolinux/isolinux.cfg >/dev/null
default /isolinux/vesamenu.c32
prompt 0
timeout 30

menu hshift 6
menu width 64

menu title heads boot menu
menu background /isolinux/splash.png
menu color title    * #00ffffff #ff000000 none
menu color border   * #00000000 #00000000 none
menu color sel      1;7;37;30 #ff000000 #ffffffff none
menu color unsel    1;30;37 #ffffffff #ff000000 none
menu color hotsel   1;7;37;40 #ffffffff #76a1d0ff *
menu color tabmsg   1;30;37 #ffffffff #ff000000 none
menu color cmdline  1;30;37 #ffffffff #ff000000 none
menu color help     37;40 #ffdddd00 #00000000 none
menu vshift 16
menu rows 4
#menu helpmsgrow 15
#menu cmdlinerow 25
#menu timeoutrow 26
#menu tabmsgrow 14
menu tabmsg Press ENTER to boot or TAB to edit a menu entry

label live-${arch}
	menu label heads live (${arch}/openbox)
	linux /live/vmlinuz
	append initrd=/live/initramfs.cpio.gz verbose net.ifnames=0 

label live-${arch}
	menu label heads live (${arch}/awesomewm)
	linux /live/vmlinuz
	append initrd=/live/initramfs.cpio.gz verbose net.ifnames=0 awesome 

endtext
EOF
}
##}}}
##{{{ conf_print_sourceslist()
conf_print_sourceslist() {
	fn conf_print_sourceslist "(override)"

	cat <<EOF
## package repositories
deb http://pkgmaster.devuan.org/merged beowulf main
deb http://pkgmaster.devuan.org/merged beowulf-updates main
deb http://pkgmaster.devuan.org/merged beowulf-security main
deb http://pkgmaster.devuan.org/devuan experimental main

#deb-src http://pkgmaster.devuan.org/merged beowulf main
#deb-src http://pkgmaster.devuan.org/merged beowulf-updates main
#deb-src http://pkgmaster.devuan.org/merged beowulf-security main
#deb-src http://pkgmaster.devuan.org/devuan experimental main
EOF
}
##}}}

## {{{ blend_fixpax()
blend_fixpax() {
	fn blend_fixpax
	req=(strapdir)
	ckreq || return 1

	## XXX: not really a fix, rather a hack

	notice "fixing up pax markings"

	cat <<EOF | sudo tee ${strapdir}/fixpax >/dev/null
#!/bin/sh

bins="
	/usr/lib/thunderbird/thunderbird
	/usr/lib/thunderbird/thunderbird-bin
	/usr/local/lib/tor-browser/firefox
	/usr/local/lib/tor-browser/plugin-container
	/usr/bin/surf
	/usr/bin/python2.7
	/usr/bin/python3.5
	/usr/bin/python3.5m
"
for i in \${bins}; do
	test -f "\${i}" && {
		paxctl -c "\${i}"
		paxctl -m "\${i}"
	}
done  || return 0
EOF
	chroot-script fixpax
}
## }}}
## {{{ blend_install_tomb()
blend_install_tomb() {
	fn blend_install_tomb
	req=(strapdir tomb_version tomb_url)
	req+=(gtomb_version gtomb_url)
	ckreq || return 1

	notice "cloning tomb gits"
	sudo git clone "$tomb_url"  "$strapdir/root/tomb"  || zerr
	sudo git clone "$gtomb_url" "$strapdir/root/gtomb" || zerr

	notice "installing tomb in $strapdir"

	cat <<EOF | sudo tee ${strapdir}/install-tomb >/dev/null
#!/bin/sh
cd /root/tomb
git checkout ${tomb_version}
make install

cd extras/kdf-keys
make
make install

cd /root/gtomb
cp gtomb /usr/local/bin/gtomb
chmod 755 /usr/local/bin/gtomb
cd ..

rm -rf tomb
rm -rf gtomb
EOF
	chroot-script install-tomb || zerr
}
## }}}
## {{{ blend_install_wmutils()
blend_install_wmutils() {
	fn blend_install_wmutils
	req=(strapdir wmutils_version wmutils_url)
	ckreq || return 1

	notice "cloning wmutils..."
	sudo git clone "$wmutils_url" "$strapdir/root/wmutils"  || zerr

	notice "installing tomb in $strapdir"

	cat <<EOF | sudo tee ${strapdir}/install-wmutils >/dev/null
#!/bin/sh
cd /root/wmutils
git checkout ${tomb_version}
make
make install
cd ..
rm -rf wmutils
EOF
	chroot-script install-wmutils || zerr
}
## }}}
## {{{ blend_install_musl()
blend_install_musl() {
	fn blend_install_musl
	req=(strapdir musl_version musl_url)
	ckreq || return 1

	notice "cloning musl gits"
	sudo git clone "$musl_url" "$strapdir/root/musl" || zerr

	notice "installing musl in $strapdir"

	cat <<EOF | sudo tee ${strapdir}/install-musl >/dev/null
#!/bin/sh
cd /root/musl
git checkout ${musl_version}
./configure && \
make ${MAKEOPTS} && make install || exit 1
cd ..
rm -rf musl
EOF
	chroot-script install-musl || zerr
}
## }}}
## {{{ blend_install_ttdnsd()
blend_install_ttdnsd() {
	fn blend_install_ttndsd
	req=(strapdir ttdnsd_version ttdnsd_url)
	ckreq || return 1

	notice "installing ttdnsd in $strapdir"

	notice "cloning ttdnsd"
	sudo mkdir -p "$strapdir/root/ttdnsd"
	sudo git clone "$ttdnsd_url" "$strapdir/root/ttdnsd/ttdnsd"

	notice "installing ttdnsd in $strapdir"
	cat <<EOF | sudo tee ${strapdir}/install-ttdnsd >/dev/null
#!/bin/sh
cd /root/ttdnsd/ttdnsd
dpkg-buildpackage || return 1
cd ..
dpkg -i *.deb || return 1
cd /root
rm -rf ttdnsd
EOF
	chroot-script -d install-ttdnsd || zerr
}
## }}}
## {{{ blend_install_tbb()
blend_install_tbb() {
	fn blend_install_tbb
	req=(strapdir tbb_version tbb_url)
	ckreq || return 1

	notice "downloading Tor Browser Bundle..."
	sudo curl -L -o "$strapdir/root/tbb.txz" "$tbb_url" || zerr

	notice "installing Tor Browser Bundle in $strapdir"

	cat <<EOF | sudo tee ${strapdir}/install-tbb
#!/bin/sh
cd /root
tar xvf tbb.txz
cd tor-browser_en-US/Browser
	execs="\$(find . -executable)"
	find . -type f | xargs chmod 644
	echo "\${execs}" | xargs chmod 755

	cp -fv TorBrowser/Tor/libstdc++.so.6 .
	rm -rv TorBrowser/Tor TorBrowser/Docs
	rm -fv TorBrowser/Data/Browser/profile.default/extensions/tor-launcher@torproject.org.xpi
	mkdir -p TorBrowser/Data/Browser/Caches
	TBBVER="\$(sed -n 's/^Version=\(.*\)$/\1/p' application.ini)"
cd - >/dev/null

LOCALLIB=/usr/local/lib
TBBLOCAL="\${LOCALLIB}/tor-browser"
TBBEXT=/usr/local/share/tor-browser-extensions
TBBETC=/etc/tor-browser/profile

mkdir -p "\${LOCALLIB}" "\${TBBEXT}" "\${TBBETC}"

mv -v tor-browser_en-US/Browser "\${TBBLOCAL}"
chmod 755 \${TBBLOCAL}
rm -rf tor-browser_en-US tbb.txz

mv -v \${TBBLOCAL}/TorBrowser/Data/Browser/profile.default/extensions/* \${TBBEXT}
rm -r \${TBBLOCAL}/TorBrowser/Data/Browser/profile.default/extensions

rsync -a --exclude extensions \${TBBLOCAL}/TorBrowser/Data/Browser/profile.default/ \
	\${TBBETC}/
sed -i '/extensions\.torlauncher\.default_bridge\./d' \${TBBETC}/preferences/extension-overrides.js
mkdir -p \${TBBETC}/extensions
for ext in \${TBBEXT}/*; do
	ln -vs "\$ext" \${TBBETC}/extensions/
done
find \${TBBETC} -type d | xargs chmod 755
EOF
	chroot-script install-tbb || zerr
}
## }}}
## {{{ blend_finalize()
blend_finalize() {
	fn blend_finalize
	req=(strapdir)
	ckreq || return 1

	## XXX: torbirdy like this until we run an amprolla instance
	sudo cp "$R/../extra/torbirdy_0.1.4.deb" "$strapdir/torbirdy.deb"

	cat <<EOF | sudo tee ${strapdir}/finalize >/dev/null
#!/bin/sh
## rootless xorg # XXX: not anymore; investigate
groupadd wheel
#apt install --no-install-recommends xserver-xorg-legacy
chown -v :input /usr/bin/Xorg
chmod -v g+s /usr/bin/Xorg
for i in input video audio users netdev plugdev wheel; do
	gpasswd -a luther \${i}
done
sed 's/^allowed_users=.*/allowed_users=anybody/' -i /etc/X11/Xwrapper.config
echo "needs_root_rights=yes" >> /etc/X11/Xwrapper.config

## shells
chsh -s /bin/zsh luther
chsh -s /bin/zsh root

## perms
chown -R 1000:1000 /home/luther
chmod 0440 /etc/sudoers.d/heads
sed -i -e 's/02755/02750/g' /etc/init.d/tor  # Fix permissions for ControlSocket

## torbirdy (XXX: amp)
ar x torbirdy.deb
tar xvf data.tar.gz
rm -f control.tar.gz data.tar.gz debian-binary torbirdy.deb
ln -s /usr/share/xul-ext/torbirdy /usr/lib/thunderbird/extensions/castironthunderbirdclub@torproject.org

## misc
rm -rf /usr/local/share/zsh/site-functions
#adduser --system --quiet --group clearnet # for a clearnet browser
sed -i -e 's/devuan/heads/' /etc/hosts
update-alternatives --install /usr/bin/x-www-browser x-www-browser /usr/local/bin/tor-browser 99
sed -e 's/#LID_SLEEP=.*/LID_SLEEP=true/' -i /etc/default/acpi-support

rc-update add wicd default
rc-udpate add acpid default
rc-update add ferm default
rc-update add tor default
rc-update add ttdnsd default
rc-update del htpdate default

## cleanup
apt-get --yes --force-yes purge ${finalize_purge_packages}
apt-get --yes --force-yes --purge autoremove
apt-get clean
rm -f /var/log/bootstrap.log
rm -f /var/log/dpkg.log
rm -f /var/log/alternatives.log
rm -f /var/log/fontconfig.log
rm -rf /var/log/apt
rm -rf /var/log/fsck
rm -rf /var/log/ConsoleKit
rm -rf /var/lib/polkit-1

updatedb
EOF
	chroot-script -d finalize || zerr
}
## }}}