livecd-rootfs

Commit Graph

Author	SHA1	Message	Date
Gauthier Jolly	eef7feef4a	ubuntu-cpc: secure esp mountpoint (LP: #1881006 ) Change mount option for ubuntu-cpc images from "defaults" to "umask=0077". ESP partitions might contain sensitive data and non-root users shouldn't have read access on it.	4 years ago
Dimitri John Ledkov	bf6e4d35a3	Revert "esp: install grub in ubuntu bootloader id path, instead of removable." This reverts commit `8e99257295`.	4 years ago
Dimitri John Ledkov	d2e70ab48e	Perform fsck on all rootfs. LP: #1912835 (cherry picked from commit `33b7272a23`)	4 years ago
Dimitri John Ledkov	ef43f0cf21	esp: perform fsck. LP: #1912835 (cherry picked from commit `53b28d5f58`)	4 years ago
Dimitri John Ledkov	8e99257295	esp: install grub in ubuntu bootloader id path, instead of removable. Do not use removable uefi bootloader path in the cloud-images by default, as that prevents upgrades of the bootloader. LP: #1912830 (cherry picked from commit `7c760864fd`)	4 years ago
Joshua Powers	a9249b1773	amd64: revert all grub changes for xenial For LP: #1901906, on other releases we ensured that grub-pc is always installed with shim-signed. However, xenial has different behavior that does not work the same. This reverts those changes back to what livecd-rootfs was before any of those changes were made, keeping only the autoremove packages work. LP: #1901906	4 years ago
Joshua Powers	e196306173	amd64: always install grub-efi-amd64-signed shim-signed does not depend on grub-efi-amd64-signed in Xenial. Historically, Xenial did not always ship with signatures. This is different than LTSes after Xenial where this is the case. A future SRU for grub should change this, but for now ensure to install the signed package so that secure boot systems can actually boot. LP: #1901906	4 years ago
Robert C Jennings	98238df82a	Merge xenial-sru-grub into ubuntu/xenial [a=powersj] [r=patviafore,rcj] SRU always install grub-pc with shim-signed (LP: #1901906), and ensure to autoremove packages MP: https://code.launchpad.net/~powersj/livecd-rootfs/+git/livecd-rootfs-1/+merge/393733	4 years ago
Robert C Jennings	4144105767	Merge vagrant_40_gb_xenial into ubuntu/xenial [a=patviafore] [r=rcj] Make Ubuntu Vagrant box 40G. (LP: #1580596) Vagrant images were previously put at 10G, but this was a regression from Trusty, in which they were 40G. This made it a tough sell for users to upgrade if they were using a Ubuntu desktop experience. This change does not impact disk usage as Vagrant with the virtualbox provider dynamically allocates space with the VMDK. On a test system, the VMDK took up 1.1G of disk space according to df, and after creating a 2G file in Vagrant, the VMDK grew to 3.1G. Therefore, users who are running on a system with little free space will not see adverse effects if they upgrade to a new vagrant image MP: https://code.launchpad.net/~patviafore/livecd-rootfs/+git/livecd-rootfs/+merge/384636	4 years ago
Joshua Powers	370db20757	amd64: always install grub-pc with shim-signed shim-signed depends on grub-efi-amd64-signed, which in turn has alternative depends on either `grub-efi-amd64 \| grub-pc`. However to support booting with either via shim&signed-grub and BIOS, the choice must be made to install grub-pc, not grub-efi-amd64. This makes images consistent with Ubuntu Deskop, Live Server, buildd bootable images; all of which already do install grub-pc and shim-signed. Additionally, this will ensure that autoremove is run after installing anything in the CPC build hooks. This is done to avoid shipping images that include packages that are autoremovable. This will clean-up as packages are installed and detect any breakage at build time. LP: #1901906	4 years ago
Cody Shepherd	c279a93b1b	Omit --no-install-recommends flag and ubuntu-server from install	4 years ago
Cody Shepherd	78fe4394c1	Install grub-legacy-ec2 for all ubuntu-cpc (LP #1888575 )	4 years ago
Pat Viafore	4e18eab233	Make Ubuntu Vagrant box 40G. (LP: #1580596 ) Vagrant images were previously put at 10G, but this was a regression from Trusty, in which they were 40G. This made it a tough sell for users to upgrade if they were using a Ubuntu desktop experience. This change does not impact disk usage as Vagrant with the virtualbox provider dynamically allocates space with the VMDK. On a test system, the VMDK took up 1.1G of disk space according to df, and after creating a 2G file in Vagrant, the VMDK grew to 3.1G. Therefore, users who are running on a system with little free space will not see adverse effects if they upgrade to a new vagrant image	5 years ago
Michael Hudson-Doyle	d70309b7e0	Preserve apt preferences created by any package we install (i.e. ubuntu-advantage-tools) against live-build's attempt to delete them. (LP: #1855354 )	5 years ago
Robert C Jennings	ae9b91d124	ubuntu-cpc: use sys.exit() rather than quit()	5 years ago
Robert C Jennings	c3d1a92933	ubuntu-cpc: remove unused final.binary hook support Right now this is a solution looking for a problem as the implementation no longer relies on it.	5 years ago
Robert C Jennings	8f8ea8922e	ubuntu-cpc: rework image artifact cleanup The livecd.ubuntu-cpc.ext4 that is present in each build (plus kernel and initrd) are not renamed from /build/binary/boot/filsystem.ext4 and friends until after the binary hooks are run, so this patch moves from trying to perform this cleanup in a binary hook. Now the cleanup will be run at the end of live-build/binary for the ubuntu-cpc project.	5 years ago
Robert C Jennings	9bea8296ee	ubuntu-cpc: Only produce explicitly named artifacts (LP: #1837254 ) In parallel builds where a list of image targets are provided the build may produce binaries that are not part of the named set of targets but are created by series dependencies. These implicitly created binaries may be generated by multiple builds but are unused as our convention for the ubuntu-cpc project is to only consume binaries from the explicitly named image targets; this avoid overwriting the same object by multiple parallel builds. This patch adds support for a 'provides' keyword for series files. It can be specified multiple times per series file. The field is used by the make-hooks script to generate a list of output files created explicitly by the named image targets. The list is saved to the "explicit_provides" file in the hooks output directory. In the case of the "all" target this list would be empty. This list is consumed by the "final.binary" hook file. This patch adds support for optional final.binary hooks in hooks.d/base and/or hooks.d/extra. These final.binary hooks are always included as the last hook(s) if either exist with the hook in "extra" running last. The base/final.binary hook includes logic to parse the "explicit_provides" file generated by the make-hooks script and remove any binary output not explicitly specified. Some series files named unnecessary dependencies, specifically disk-image, to keep output of implicit artifacts consistent between parallel builds. These unnecessary dependencies are removed in this patch.	5 years ago
Robert C Jennings	c10042acb0	ubuntu-cpc: Fixup comment references to file names post-parallelization	6 years ago
Robert C Jennings	996d7e20d5	ubuntu-cpc: Ensure base disk image is the same between all build targets The following targets have livecd.ubuntu-cpc.manifest (and livecd.ubuntu-cpc.ext4) which differ in some way from the 'all' target. They are all missing grub-efi and other modifications: root-dir squashfs tarball These targets do not depend on the 'disk-image' target. This means that the ext4 produced will lack the uefi modifications (and any from the disk-image target binary hooks). Since the ext4 file is common to all builds there is a chance that a parallel build from one of these targets could overwrite this artifact. This patch ensures that all targets will produce consistent base output.	6 years ago
Robert C Jennings	75a3b3e6ae	ubuntu-cpc: Allow comments in series files An upcoming addition of the disk-image target to several series files will required some explanation. Without comment support in series files that is not possible. This patch adds support for comments in series files.	6 years ago
Robert C Jennings	77ae8d704f	ubuntu-cpc: parallel builds * Replace "snap download" with tool that uses snap store's coherence feature This is important for parallel image builds to ensure all pre-seeded snaps have the same versions across image variants. * Inject a proxy into the build providing a snapshot view of the package repo. When the REPO_SNAPSHOT_STAMP variable is set, the auto/build script will attempt to launch a transparent HTTP proxy on port 8080, and insert an iptables rule to redirect all outgoing HTTP requests to this proxy. The proxy, contained in the `magic-proxy` Python script, examines each request and silently overrides those pointing to InRelease files or files that are listed in InRelease files. It will instead provide the contents of the requested file as it was at REPO_SNAPSHOT_STAMP, by downloading the corresponding asset "by hash". * Use series files with dependency handling to generate hook symlinks dynamically This patch currently only applies to the "ubuntu-cpc" project. More and more logic has been going into the hook scripts to decide under which conditions they should run or not. As we are moving to parallelized builds of image sets, this will get even more complicated. Base hooks will have to know which image sets they belong to and modification of the dependency chain between scripts will become more complicated and prone to errors, as the number of image sets grows. This patch introduces explicit ordering and dependency handling for scripts through the use of `series` files and an explicit syntax for dependency specification.	6 years ago

22 Commits (41ecdf5c749915a2feb4ccb7ceca09a517fab5d7)