churn/vmdb2-recipes/amd64_trixie.yaml

180 lines
4.3 KiB
YAML
Raw Normal View History

2026-01-23 15:14:05 +00:00
---
# See https://wiki.debian.org/RaspberryPi3 for known issues and more details.
# image.yml based on revision: ff7fdbf (Switch from qemu-debootstrap to debootstrap., 2024-01-01)
steps:
- mkimg: "{{ output }}"
size: 3100M
- mklabel: gpt
device: "{{ output }}"
############ efi
- mkpart: primary
fs-type: 'fat32'
device: "{{ output }}"
start: 1MiB
end: 132MiB
tag: efi
- set_part_flag: "{{ output }}"
tag: efi
flag: boot
state: enabled
- set_part_flag: "{{ output }}"
tag: efi
flag: esp
state: enabled
############ bios grub
- mkpart: primary
device: "{{ output }}"
start: 132MiB
end: 133MiB
tag: bios_grub
- set_part_flag: "{{ output }}"
tag: bios_grub
flag: bios_grub
state: enabled
############ live
- mkpart: primary
device: "{{ output }}"
start: 133MiB
end: 100%
tag: tag-root
- set_part_flag: "{{ output }}"
tag: tag-root
flag: legacy_boot
state: enabled
- kpartx: "{{ output }}"
- mkfs: vfat
partition: efi
label: EFI
options: -F32
- mkfs: ext4
partition: tag-root
label: boot
- mount: tag-root
- shell: |
dd bs=440 count=1 conv=notrunc if=/usr/lib/syslinux/mbr/gptmbr.bin of="{{ output }}"
root-fs: tag-root
- unpack-rootfs: tag-root
- debootstrap: trixie
require_empty_target: false
mirror: http://deb.debian.org/debian
target: tag-root
components:
- main
- non-free-firmware
- non-free
unless: rootfs_unpacked
- create-file: /etc/apt/sources.list
contents: |+
deb http://deb.debian.org/debian trixie main non-free-firmware non-free
deb http://deb.debian.org/debian trixie-updates main non-free-firmware non-free
deb http://security.debian.org/debian-security trixie-security main non-free-firmware non-free
unless: rootfs_unpacked
- apt: install
packages:
- avahi-daemon
- curl
- udisks2
- wget
- dhcpcd
- python3
- lighttpd
- unzip
- sudo
- systemd-timesyncd
- ca-certificates
- dosfstools
- iw
- parted
- ssh
- wpasupplicant
- systemd
- systemd-sysv
- init-system-helpers
- syslinux
- linux-image-amd64
tag: tag-root
unless: rootfs_unpacked
- cache-rootfs: tag-root
unless: rootfs_unpacked
- shell: |
echo "butterbox" > "${ROOT?}/etc/hostname"
# Allow root logins locally with no password
sed -i 's,root:[^:]*:,root::,' "${ROOT?}/etc/shadow"
install -m 644 -o root -g root image-specs/rootfs/etc/fstab "${ROOT?}/etc/fstab"
install -m 644 -o root -g root image-specs/rootfs/etc/network/interfaces.d/eth0 "${ROOT?}/etc/network/interfaces.d/eth0"
install -m 600 -o root -g root image-specs/rootfs/etc/network/interfaces.d/wlan0 "${ROOT?}/etc/network/interfaces.d/wlan0"
root-fs: tag-root
# Clean up archive cache (likely not useful) and lists (likely outdated) to
# reduce image size by several hundred megabytes.
- chroot: tag-root
shell: |
apt-get clean
rm -rf /var/lib/apt/lists
- grub: bios
tag: tag-root
console: serial
#
- grub: uefi
tag: tag-root
efi: efi
console: serial
- shell: |
rm "${ROOT?}/etc/resolv.conf"
root-fs: tag-root
# Clear /etc/machine-id and /var/lib/dbus/machine-id, as both should
# be auto-generated upon first boot. From the manpage
# (machine-id(5)):
#
# For normal operating system installations, where a custom image is
# created for a specific machine, /etc/machine-id should be
# populated during installation.
#
# Note this will also trigger ConditionFirstBoot=yes for systemd.
# On Buster, /etc/machine-id should be an emtpy file, not an absent file
# On Bullseye, /etc/machine-id should not exist in an image
- chroot: tag-root
shell: |
rm -f /etc/machine-id /var/lib/dbus/machine-id
echo "uninitialized" > /etc/machine-id
echo "LABEL=BOOT / ext4 rw 0 1" > /etc/fstab
- virtual-filesystems: tag-root
- ansible: tag-root
playbook: ../ansible/main.yml
config_file: ../ansible/ansible.cfg
extra_vars:
butter_language: en
butter_name: butterbox
tags: base,usb,matrix,keanu,website
butter_user: "amd"
ap_mode_supported: "false"