108 lines
3.7 KiB
Markdown
108 lines
3.7 KiB
Markdown
Perfect! Here’s a **container-friendly build script outline** for creating your `asl-auth-host` bootable ISO on Linux Mint using a Debian container. It **prepares the filesystem, overlays your binaries and scripts, sets up directories**, and skips actual ZFS pool creation (you can mount ZFS later when booted).
|
||
|
||
---
|
||
|
||
```bash
|
||
#!/bin/bash
|
||
# build_asl_auth_host_iso.sh
|
||
# Container-friendly ASL-AUTH-HOST ISO builder
|
||
# Assumes running in Debian container
|
||
|
||
set -e
|
||
WORKDIR=/work
|
||
ISO_ROOT=$WORKDIR/iso_root
|
||
OVERLAY=$WORKDIR/overlay
|
||
OUTPUT=$WORKDIR/asl-auth-host.iso
|
||
|
||
# 1. Clean previous build
|
||
rm -rf $ISO_ROOT $OVERLAY $OUTPUT
|
||
mkdir -p $ISO_ROOT $OVERLAY
|
||
|
||
# 2. Bootstrap minimal Debian filesystem
|
||
echo "Bootstrapping minimal Debian filesystem..."
|
||
debootstrap --arch=amd64 bullseye $ISO_ROOT http://deb.debian.org/debian/
|
||
chroot $ISO_ROOT /bin/bash << 'EOF'
|
||
touch /etc/asl-bootstrap
|
||
apt-get update
|
||
apt-get install -y linux-image-amd64 initramfs-tools systemd-sysv \
|
||
ca-certificates curl xorriso isolinux syslinux-common
|
||
EOF
|
||
|
||
# 3. Set up overlay directory structure
|
||
echo "Setting up overlay structure..."
|
||
mkdir -p $OVERLAY/{bin,etc,var/lib/asl,var/log}
|
||
mkdir -p $OVERLAY/{usr/local/bin,run/asl}
|
||
8
|
||
# Place your binaries and scripts here
|
||
cp $WORKDIR/binaries/asl-auth-host $OVERLAY/bin/
|
||
cp $WORKDIR/binaries/asl-rescue $OVERLAY/bin/
|
||
cp $WORKDIR/scripts/* $OVERLAY/bin/
|
||
|
||
# 4. Copy overlay into ISO root
|
||
echo "Merging overlay into ISO root..."
|
||
cp -a $OVERLAY/* $ISO_ROOT/
|
||
chroot $ISO_ROOT /bin/bash << 'EOF'
|
||
dpkg -i /usr/local/debs/libasl-capture0_0.1.0-1_amd64.deb \
|
||
/usr/local/debs/libasl-capture-dev_0.1.0-1_amd64.deb \
|
||
/usr/local/debs/asl-tools_0.1.0-1_amd64.deb || true
|
||
apt-get install -f -y # fix dependencies if needed
|
||
EOF
|
||
|
||
# 5. Create expected dataset structure for ASL (to mount ZFS later)
|
||
mkdir -p $ISO_ROOT/var/lib/asl/{common,personal}
|
||
mkdir -p $ISO_ROOT/var/lib/asl/pools
|
||
|
||
# 6. Optional: add bootloader configs (isolinux/syslinux)
|
||
echo "Setting up bootloader (minimal)..."
|
||
mkdir -p $ISO_ROOT/boot/isolinux
|
||
# Place isolinux.bin and isolinux.cfg here
|
||
# cp $WORKDIR/bootloader/isolinux.bin $ISO_ROOT/boot/isolinux/
|
||
# cp $WORKDIR/bootloader/isolinux.cfg $ISO_ROOT/boot/isolinux/
|
||
|
||
# 7. Build ISO
|
||
echo "Generating ISO..."
|
||
xorriso -as mkisofs \
|
||
-iso-level 3 \
|
||
-o $OUTPUT \
|
||
-full-iso9660-filenames \
|
||
-volid "ASL-AUTH-HOST" \
|
||
-eltorito-boot boot/isolinux/isolinux.bin \
|
||
-eltorito-catalog boot/isolinux/boot.cat \
|
||
-no-emul-boot -boot-load-size 4 -boot-info-table \
|
||
$ISO_ROOT
|
||
|
||
echo "ASL-AUTH-HOST ISO built successfully: $OUTPUT"
|
||
```
|
||
|
||
---
|
||
|
||
### ✅ Key Points
|
||
|
||
* **Container-friendly**: No ZFS creation inside the container. ZFS datasets (`common`, `personal`) are just directories; they can be mounted when booted.
|
||
* **Overlay**: Your binaries (`asl-auth-host`, `asl-rescue`) and helper scripts go into `/bin` in the overlay.
|
||
* **Bootloader**: Minimal setup; you can extend with isolinux/syslinux or GRUB.
|
||
* **ISO Output**: Reproducible in a container, can copy to USB or VM for testing.
|
||
|
||
---
|
||
|
||
### Next Steps
|
||
|
||
1. Populate `$WORKDIR/binaries/` with your compiled `asl-auth-host` and `asl-rescue`.
|
||
2. Populate `$WORKDIR/scripts/` with any helpers (like init scripts, mounting helpers).
|
||
3. Add your `isolinux.cfg` or GRUB config to `$WORKDIR/bootloader/`.
|
||
4. Run the container build. ISO will appear in `/work/asl-auth-host.iso`.
|
||
|
||
---
|
||
|
||
I can also **draft a ready-to-use directory layout** for the ISO and overlay, including placeholders for:
|
||
|
||
* `common` and `personal` datasets
|
||
* `/var/lib/asl/index`
|
||
* `/var/lib/asl/certs`
|
||
* `/etc/asl-auth-host/config.yaml`
|
||
|
||
…so you have a concrete blueprint to start placing your certificates and DAM/SOPS bundles.
|
||
|
||
Do you want me to draft that layout next?
|
||
|