luzifer-docker/archlinux
2
0
Fork 0
mirror of https://github.com/luzifer-docker/archlinux.git synced 2024-11-09 16:00:11 +00:00
Code Issues Releases Wiki Activity

Apply bind-mount, kill gpg-agent

Browse source 
to not to afflict side-effects on host system and not to block
unmounting of /dev

Signed-off-by: Knut Ahlers <knut@ahlers.me>
This commit is contained in:
Knut Ahlers 2022-07-17 13:53:42 +02:00
parent 7827f18895
commit e3b5d09829
Signed by: luzifer
GPG key ID: 0066F03ED215AD7D
1 changed files with 25 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

37
mkroots.sh
View file

@ -4,31 +4,35 @@ set -euxo pipefail
[ $(id -u) -eq 0 ] || exec sudo bash $0 "$@" [ $(id -u) -eq 0 ] || exec sudo bash $0 "$@"
[ -e /usr/share/devtools/pacman-extra.conf ] || { [ -e /usr/share/devtools/pacman-extra.conf ] || {
echo "Missing 'devtools' on this system. Please 'pacman -S devtools'." echo "Missing 'devtools' on this system. Please 'pacman -S devtools'."
exit 1 exit 1
} }
# Packages required for the minimal system # Packages required for the minimal system
packages=( packages=(
awk awk
gzip gzip
pacman pacman
sed sed
systemd systemd
) )
# In case more packages were passed add them to the package list # In case more packages were passed add them to the package list
if [ $# -gt 0 ]; then if [ $# -gt 0 ]; then
packages+=("$@") packages+=("$@")
fi fi
# Build in a tempdir # Build in a tempdir
tmpdir=$(mktemp -d) tmpdir=$(mktemp -d)
function rm_temp() { function rm_temp() {
rm -rf ${tmpdir} umount ${tmpdir}
rm -rf ${tmpdir}
} }
trap rm_temp EXIT trap rm_temp EXIT
# Create a bind-mount to avoid side-effects on the host system
mount --bind ${tmpdir} ${tmpdir}
# Pacstrap the requested packages # Pacstrap the requested packages
env -i pacstrap -C /usr/share/devtools/pacman-extra.conf -c -d -G -M ${tmpdir} "${packages[@]}" env -i pacstrap -C /usr/share/devtools/pacman-extra.conf -c -d -G -M ${tmpdir} "${packages[@]}"
@ -36,9 +40,18 @@ env -i pacstrap -C /usr/share/devtools/pacman-extra.conf -c -d -G -M ${tmpdir} "
cp --recursive --preserve=timestamps --backup --suffix=.pacnew rootfs/* ${tmpdir}/ cp --recursive --preserve=timestamps --backup --suffix=.pacnew rootfs/* ${tmpdir}/
# Initialize locales and pacman-keys # Initialize locales and pacman-keys
arch-chroot ${tmpdir} locale-gen arch-chroot ${tmpdir} bash -ex <<EOF
arch-chroot ${tmpdir} pacman-key --init # Generate locales
arch-chroot ${tmpdir} pacman-key --populate archlinux locale-gen
# Initialize pacman-key keyring
pacman-key --init
pacman-key --populate archlinux
# Stop agent to free /dev mount
export GNUPGHOME=/etc/pacman.d/gnupg
gpgconf --kill gpg-agent
EOF
# Pack rootfs # Pack rootfs
tar --numeric-owner --xattrs --acls --exclude-from=exclude -C ${tmpdir} -c . -f archlinux.tar tar --numeric-owner --xattrs --acls --exclude-from=exclude -C ${tmpdir} -c . -f archlinux.tar