]>
git.proxmox.com Git - aab.git/log
summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Thomas Lamprecht [Fri, 11 Nov 2022 15:39:40 +0000 (16:39 +0100)]
mask systemd-journald-audit.socket
won't work in unpriv CTs and mark the systemctl status as failed.
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Thu, 10 Nov 2022 14:09:16 +0000 (15:09 +0100)]
always add enabled mirror
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Thu, 10 Nov 2022 14:08:54 +0000 (15:08 +0100)]
buildsys: remove all archlinux*.tar* files on dist-clean
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Thu, 2 Dec 2021 13:50:07 +0000 (14:50 +0100)]
typo & whitespace fixes
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Thu, 2 Dec 2021 13:46:08 +0000 (14:46 +0100)]
caching: cache signatures but ignore outer verify errors
new pacman (6.0) doesn't downloads the <pkg>.sig files if SigLevel is
set to `Never`, an understandable optimization in general but for our
use case an issue.
We cache packages on the host, where we have internet but do not have
an archlinux trusted keyring setup, we then verify the non-bootstrap
packages (i.e., all but pacman and the keyring) in the bootstrapping
container itself
This is somewhat ugly, but one of the simpler options, an possible
alternative on the long run could be to package archlinux-keyring for
debian and have that as dependency for aab, then we could populate a
local directory (pacman gas a `--gpgdir` option) and fully verify all
that..
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Thu, 2 Dec 2021 13:43:57 +0000 (14:43 +0100)]
pacman: allow overriding config file and siglevel
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Thu, 2 Dec 2021 13:42:38 +0000 (14:42 +0100)]
run_command: allow to opt-out dying on non-zero exit code
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Thu, 2 Dec 2021 12:15:47 +0000 (13:15 +0100)]
split out writing (host-side) pacman.conf
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Wed, 1 Dec 2021 18:47:31 +0000 (19:47 +0100)]
finalize: allow to choose gzip or zstd and default to latter
zstd shaves of >50 MiB of the final archive and is (in general)
faster on decompression too
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Wed, 1 Dec 2021 18:46:20 +0000 (19:46 +0100)]
update copyright years
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Oguz Bektas [Fri, 8 May 2020 14:40:57 +0000 (16:40 +0200)]
add vi and nano to base template
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
Thomas Lamprecht [Sat, 25 Apr 2020 15:55:21 +0000 (17:55 +0200)]
mask sys-kernel-*.mount units, no use in CT by default
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Sat, 25 Apr 2020 15:54:31 +0000 (17:54 +0200)]
aab: add use local lib
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Tue, 24 Sep 2019 15:29:49 +0000 (17:29 +0200)]
print out fianl commpressed archive size and format better
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Mon, 23 Sep 2019 08:52:13 +0000 (10:52 +0200)]
print out available commands and short description
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Mon, 23 Sep 2019 08:28:13 +0000 (10:28 +0200)]
followup: fix indentation and missing single quote
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Thomas Lamprecht [Fri, 20 Sep 2019 12:35:39 +0000 (14:35 +0200)]
followup: separate newline to new line
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Oguz Bektas [Fri, 20 Sep 2019 10:59:52 +0000 (12:59 +0200)]
added description to aab.conf for aplinfo
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
Stoiko Ivanov [Thu, 25 Apr 2019 17:53:58 +0000 (19:53 +0200)]
bsys: Drop i686 support
ArchLinux has stopped supporting i686 1.5 years ago [0].
[0] https://www.archlinux.org/news/the-end-of-i686-support/
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Stoiko Ivanov [Thu, 25 Apr 2019 17:53:57 +0000 (19:53 +0200)]
refactor initial device creation for pacman
`aab` installs `archlinux-keyring`, which in turn invokes `dirmngr` during
installation. `dirmngr` needs access (at least) to '/dev/null' (see [0]), which
`aab` only created afterwards (before populating the keyring). This lead to
`dirmngr` spinning (and filling the filesystem with a regular file
'${rootfs}/dev/null' containing error messages.
This patch changes the behavior of aab: it now creates the devices before
installing 'archlinux-keyring' and removes them after the keyring is populated.
In order to save one further `mkdir` call for the 'dev' directory, this was
appended to the `mkpath` invocation in ve_init.
[0] https://bbs.archlinux.org/viewtopic.php?id=222002
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Stoiko Ivanov [Thu, 25 Apr 2019 17:53:56 +0000 (19:53 +0200)]
remove extra mkdir $self->{rootfs} in initialize
The mkdir in intialize is not too helpful since, ve_init, which usually gets
called soon after (`aab init` is followed by `aab bootstrap` in the Makefile)
has a `rmtree $self->{rootfs}` and recreates it directly afterwards again.
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Stoiko Ivanov [Thu, 25 Apr 2019 17:53:55 +0000 (19:53 +0200)]
exclude linux-firmware from installed packages
This reduces a fresh containers' size by ~220M (170M for the gziped template)
and additionally prevents one spurious errormessage from
`systemd-tmpfiles --create` occuring during bootup and other invocations
(e.g. `pacman -S $package`)
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Stoiko Ivanov [Thu, 25 Apr 2019 17:53:54 +0000 (19:53 +0200)]
remove container config during finalize
Since the container config for the build is created with O_EXCL, multiple
consecutive invocations of `make default` fail, if the config file exists.
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Oguz Bektas [Fri, 23 Nov 2018 11:16:52 +0000 (12:16 +0100)]
change `pacman -Sy` to `-Syy`, cleanup whitespace
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
Thomas Lamprecht [Thu, 5 Apr 2018 07:53:22 +0000 (09:53 +0200)]
use new config properties for sample lxc config
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Wolfgang Bumiller [Thu, 14 Dec 2017 08:02:58 +0000 (09:02 +0100)]
Use %m (month) not %M (minute) for today's date...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Wolfgang Bumiller [Fri, 17 Mar 2017 14:18:13 +0000 (15:18 +0100)]
x86_64 -> amd64 for consistency
Wolfgang Bumiller [Fri, 17 Mar 2017 14:13:02 +0000 (15:13 +0100)]
stretch updates
Wolfgang Bumiller [Fri, 17 Mar 2017 14:12:55 +0000 (15:12 +0100)]
update version formatting
Wolfgang Bumiller [Thu, 18 Aug 2016 09:51:24 +0000 (11:51 +0200)]
import missing open2
Wolfgang Bumiller [Thu, 18 Aug 2016 09:48:52 +0000 (11:48 +0200)]
use --rcfile to work with newer lxc
Wolfgang Bumiller [Mon, 31 Aug 2015 08:39:41 +0000 (10:39 +0200)]
remove keyring in finalize()
Wolfgang Bumiller [Mon, 31 Aug 2015 08:37:40 +0000 (10:37 +0200)]
using a weak key for pacman-key --init
Dietmar Maurer [Sat, 29 Aug 2015 09:23:59 +0000 (11:23 +0200)]
set Section to 'system'
Dietmar Maurer [Sat, 29 Aug 2015 09:12:44 +0000 (11:12 +0200)]
add infopage to appliance.info
Dietmar Maurer [Sat, 29 Aug 2015 09:12:02 +0000 (11:12 +0200)]
rename template to archlinux-base
Wolfgang Bumiller [Thu, 27 Aug 2015 08:50:25 +0000 (10:50 +0200)]
there's no [multilib] repo for i686
Wolfgang Bumiller [Thu, 27 Aug 2015 08:45:15 +0000 (10:45 +0200)]
actually use the pacman config
Wolfgang Bumiller [Thu, 27 Aug 2015 08:37:11 +0000 (10:37 +0200)]
Makefile to build archlinux-base image
Wolfgang Bumiller [Mon, 24 Aug 2015 06:01:11 +0000 (08:01 +0200)]
added README and COPYING files
Wolfgang Bumiller [Fri, 21 Aug 2015 08:02:48 +0000 (10:02 +0200)]
move AAB.pm to PVE/
Wolfgang Bumiller [Wed, 19 Aug 2015 09:47:57 +0000 (11:47 +0200)]
initial import