228ccb1ce5
# Conflicts: # .gitignore # banana-pi.sh # banana-pro.sh # beaglebone-black.sh # chromebook-exynos.sh # chromebook-nyan.sh # common.d/builder.txt.example # common.d/compress_img.sh # common.d/variables.sh # cubieboard2.sh # cubietruck.sh # cubox-i4pro.sh # cubox.sh # gateworks-newport.sh # gateworks-ventana.sh # mini-x.sh # nanopc-t.sh # nanopi-neo-plus2-minimal.sh # nanopi-neo-plus2.sh # nanopi2.sh # odroid-c.sh # odroid-c2.sh # odroid-u2.sh # odroid-xu3.sh # pinebook-pro.sh # pinebook.sh # riotboard.sh # rpi-64bit-minimal.sh # rpi-64bit.sh # rpi.sh # rpi0w-minimal.sh # rpi0w-p4wnp1-aloa.sh # rpi0w-pitail.sh # rpi0w.sh # rpi1.sh # trimslice.sh # usb-armory-mki.sh # usb-armory-mkii.sh # utilite-pro.sh
417 lines
15 KiB
Bash
Executable File
417 lines
15 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# Kali Linux ARM build-script for NanoPi NEO Plus2
|
|
# https://gitlab.com/kalilinux/build-scripts/kali-arm
|
|
#
|
|
# This is a supported device - which you can find pre-generated images for
|
|
# More information: https://www.kali.org/docs/arm/nanopi-neo-plus2/
|
|
#
|
|
|
|
# Stop on error
|
|
set -e
|
|
|
|
# shellcheck disable=SC2154
|
|
# Load general functions
|
|
# shellcheck source=/dev/null
|
|
source ./common.d/functions.sh
|
|
|
|
# Hardware model
|
|
hw_model=${hw_model:-"nanopi-neo-plus2"}
|
|
# Architecture
|
|
architecture=${architecture:-"arm64"}
|
|
# Variant name for image and dir build
|
|
variant=${variant:-"${architecture}"}
|
|
# Desktop manager (xfce, gnome, i3, kde, lxde, mate, e17 or none)
|
|
desktop=${desktop:-"xfce"}
|
|
|
|
# Load common variables
|
|
include variables
|
|
# Checks script environment
|
|
include check
|
|
# Packages build list
|
|
include packages
|
|
# Load automatic proxy configuration
|
|
include proxy_apt
|
|
# Execute initial debootstrap
|
|
debootstrap_exec http://http.kali.org/kali
|
|
# Enable eatmydata in compilation
|
|
include eatmydata
|
|
# debootstrap second stage
|
|
systemd-nspawn_exec eatmydata /debootstrap/debootstrap --second-stage
|
|
# Define sources.list
|
|
include sources.list
|
|
# APT options
|
|
include apt_options
|
|
# So X doesn't complain, we add kali to hosts
|
|
include hosts
|
|
# Set hostname
|
|
set_hostname "${hostname}"
|
|
# Network configs
|
|
include network
|
|
add_interface eth0
|
|
|
|
# Copy directory bsp into build dir
|
|
log "Copy directory bsp into build dir" green
|
|
cp -rp bsp "${work_dir}"
|
|
|
|
# Eventually this should become a systemd service, but for now, we use the same
|
|
# init.d file that they provide and we let systemd handle the conversion
|
|
mkdir -p ${work_dir}/etc/init.d/
|
|
cat << EOF > ${work_dir}/etc/init.d/brcm_patchram_plus
|
|
#!/bin/bash
|
|
|
|
### BEGIN INIT INFO
|
|
# Provides: brcm_patchram_plus
|
|
# Required-Start: $remote_fs $syslog
|
|
# Required-Stop: $remote_fs $syslog
|
|
# Default-Start: 2 3 4 5
|
|
# Default-Stop:
|
|
# Short-Description: brcm_patchram_plus
|
|
### END INIT INFO
|
|
|
|
function reset_bt()
|
|
{
|
|
BTWAKE=/proc/bluetooth/sleep/btwake
|
|
if [ -f ${BTWAKE} ]; then
|
|
echo 0 > ${BTWAKE}
|
|
fi
|
|
index=`rfkill list | grep $1 | cut -f 1 -d":"`
|
|
if [[ -n ${index} ]]; then
|
|
rfkill block ${index}
|
|
sleep 1
|
|
rfkill unblock ${index}
|
|
sleep 1
|
|
fi
|
|
}
|
|
|
|
case "$1" in
|
|
start|"")
|
|
index=`rfkill list | grep "sunxi-bt" | cut -f 1 -d":"`
|
|
brcm_try_log=/var/log/brcm/brcm_try.log
|
|
brcm_log=/var/log/brcm/brcm.log
|
|
brcm_err_log=/var/log/brcm/brcm_err.log
|
|
if [ -d /sys/class/rfkill/rfkill${index} ]; then
|
|
rm -rf ${brcm_log}
|
|
reset_bt "sunxi-bt"
|
|
[ -d /var/log/brcm ] || mkdir -p /var/log/brcm
|
|
chmod 0660 /sys/class/rfkill/rfkill${index}/state
|
|
chmod 0660 /sys/class/rfkill/rfkill${index}/type
|
|
chgrp dialout /sys/class/rfkill/rfkill${index}/state
|
|
chgrp dialout /sys/class/rfkill/rfkill${index}/type
|
|
MACADDRESS=`md5sum /sys/class/sunxi_info/sys_info | cut -b 1-12 | sed -r ':1;s/(.*[^:])([^:]{2})/\1:\2/;t1'`
|
|
let TIMEOUT=150
|
|
while [ ${TIMEOUT} -gt 0 ]; do
|
|
killall -9 /bin/brcm_patchram_plus
|
|
/bin/brcm_patchram_plus -d --patchram /lib/firmware/ap6212/ --enable_hci --bd_addr ${MACADDRESS} --no2bytes --tosleep 5000 /dev/ttyS3 >${brcm_log} 2>&1 &
|
|
sleep 30
|
|
TIMEOUT=$((TIMEOUT-30))
|
|
cur_time=`date "+%H-%M-%S"`
|
|
if grep "Done setting line discpline" ${brcm_log}; then
|
|
echo "${cur_time}: bt firmware download ok(${TIMEOUT})" >> ${brcm_try_log}
|
|
if ! grep "fail" ${brcm_try_log}; then
|
|
reset_bt "hci0"
|
|
hciconfig hci0 up
|
|
hciconfig >> ${brcm_try_log}
|
|
#reboot
|
|
fi
|
|
break
|
|
else
|
|
echo "${cur_time}: bt firmware download fail(${TIMEOUT})" >> ${brcm_try_log}
|
|
cp ${brcm_log} ${brcm_err_log}
|
|
reset_bt "sunxi-bt"
|
|
fi
|
|
done
|
|
fi
|
|
;;
|
|
|
|
stop)
|
|
kill `ps --no-headers -C brcm_patchram_plus -o pid`
|
|
;;
|
|
*)
|
|
echo "Usage: brcm_patchram_plus start|stop" >&2
|
|
exit 3
|
|
;;
|
|
esac
|
|
EOF
|
|
chmod 0755 ${work_dir}/etc/init.d/brcm_patchram_plus
|
|
|
|
# Third stage
|
|
cat <<EOF >"${work_dir}"/third-stage
|
|
#!/usr/bin/env bash
|
|
set -e
|
|
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
eatmydata apt-get update
|
|
eatmydata apt-get -y install ${third_stage_pkgs}
|
|
|
|
eatmydata apt-get install -y ${packages} || eatmydata apt-get install -y --fix-broken
|
|
eatmydata apt-get install -y ${desktop_pkgs} ${extra} || eatmydata apt-get install -y --fix-broken
|
|
|
|
eatmydata apt-get -y --purge autoremove
|
|
|
|
# Linux console/Keyboard configuration
|
|
echo 'console-common console-data/keymap/policy select Select keymap from full list' | debconf-set-selections
|
|
echo 'console-common console-data/keymap/full select en-latin1-nodeadkeys' | debconf-set-selections
|
|
|
|
# Copy all services
|
|
cp -p /bsp/services/all/*.service /etc/systemd/system/
|
|
|
|
|
|
# Copy script rpi-resizerootfs
|
|
install -m755 /bsp/scripts/rpi-resizerootfs /usr/sbin/
|
|
|
|
# Enable rpi-resizerootfs first boot
|
|
systemctl enable rpi-resizerootfs
|
|
|
|
# Generate SSH host keys on first run
|
|
systemctl enable regenerate_ssh_host_keys
|
|
|
|
# Required to kick the bluetooth chip
|
|
install -m755 /bsp/firmware/veyron/brcm_patchram_plus /bin/brcm_patchram_plus
|
|
|
|
# There's no graphical output on this device so
|
|
systemctl set-default multi-user
|
|
|
|
# Enable bluetooth - we do this way because we haven't written a systemd service
|
|
# file for it yet
|
|
update-rc.d brcm_patchram_plus defaults
|
|
|
|
# Allow users to use NM over ssh
|
|
install -m644 /bsp/polkit/10-NetworkManager.pkla /var/lib/polkit-1/localauthority/50-local.d
|
|
|
|
cd /root
|
|
apt download -o APT::Sandbox::User=root ca-certificates 2>/dev/null
|
|
|
|
# Set a REGDOMAIN. This needs to be done or wireless doesn't work correctly on the RPi 3B+
|
|
sed -i -e 's/REGDOM.*/REGDOMAIN=00/g' /etc/default/crda
|
|
|
|
# Enable login over serial
|
|
echo "T0:23:respawn:/sbin/agetty -L ttyAMA0 115200 vt100" >> /etc/inittab
|
|
|
|
# Try and make the console a bit nicer
|
|
# Set the terminus font for a bit nicer display
|
|
sed -i -e 's/FONTFACE=.*/FONTFACE="Terminus"/' /etc/default/console-setup
|
|
sed -i -e 's/FONTSIZE=.*/FONTSIZE="6x12"/' /etc/default/console-setup
|
|
|
|
# Fix startup time from 5 minutes to 15 secs on raise interface wlan0
|
|
sed -i 's/^TimeoutStartSec=5min/TimeoutStartSec=15/g' "/usr/lib/systemd/system/networking.service"
|
|
|
|
# Enable runonce
|
|
install -m755 /bsp/scripts/runonce /usr/sbin/
|
|
cp -rf /bsp/runonce.d /etc
|
|
systemctl enable runonce
|
|
|
|
# Clean up dpkg.eatmydata
|
|
rm -f /usr/bin/dpkg
|
|
dpkg-divert --remove --rename /usr/bin/dpkg
|
|
EOF
|
|
|
|
# Run third stage
|
|
chmod 0755 "${work_dir}"/third-stage
|
|
log "Run third stage" green
|
|
systemd-nspawn_exec /third-stage
|
|
|
|
# Choose a locale
|
|
set_locale "$locale"
|
|
# Clean system
|
|
include clean_system
|
|
trap clean_build ERR SIGTERM SIGINT
|
|
# Define DNS server after last running systemd-nspawn
|
|
echo "nameserver ${nameserver}" > "${work_dir}"/etc/resolv.conf
|
|
# Disable the use of http proxy in case it is enabled
|
|
disable_proxy
|
|
# Mirror & suite replacement
|
|
restore_mirror
|
|
# Reload sources.list
|
|
#include sources.list
|
|
|
|
# Kernel section. If you want to use a custom kernel, or configuration, replace
|
|
# them in this section
|
|
log "Kernel stuff" green
|
|
git clone --depth 1 -b sunxi-4.x.y https://github.com/friendlyarm/linux ${work_dir}/usr/src/kernel
|
|
cd ${work_dir}/usr/src/kernel
|
|
git rev-parse HEAD > ${work_dir}/usr/src/kernel-at-commit
|
|
touch .scmversion
|
|
export ARCH=arm64
|
|
export CROSS_COMPILE=aarch64-linux-gnu-
|
|
cp ${current_dir}/kernel-configs/neoplus2.config ${work_dir}/usr/src/kernel/.config
|
|
cp ${current_dir}/kernel-configs/neoplus2.config ${work_dir}/usr/src/
|
|
patch -p1 --no-backup-if-mismatch < ${current_dir}/patches/kali-wifi-injection-4.14.patch
|
|
patch -p1 --no-backup-if-mismatch < ${current_dir}/patches/0001-wireless-carl9170-Enable-sniffer-mode-promisc-flag-t.patch
|
|
# Remove the duplicate yylloc define
|
|
patch -p1 --no-backup-if-mismatch < ${current_dir}/patches/11647f99b4de6bc460e106e876f72fc7af3e54a6.patch
|
|
# Use the kernel socket.h instead of host so that we can build on systems with newer headers
|
|
patch -p1 --no-backup-if-mismatch < ${current_dir}/patches/selinux-use-kernel-socket-definitions.patch
|
|
make -j $(grep -c processor /proc/cpuinfo)
|
|
make modules
|
|
make modules_install INSTALL_MOD_PATH=${work_dir}
|
|
cp arch/arm64/boot/Image ${work_dir}/boot
|
|
cp arch/arm64/boot/dts/allwinner/*.dtb ${work_dir}/boot/
|
|
mkdir -p ${work_dir}/boot/overlays/
|
|
cp arch/arm64/boot/dts/allwinner/overlays/*.dtb ${work_dir}/boot/overlays/
|
|
make mrproper
|
|
cd "${current_dir}/"
|
|
|
|
# Copy over the firmware for the ap6212 wifi
|
|
# On the neo plus2 default install there are other firmware files installed for
|
|
# p2p and apsta but I can't find them publicly posted to friendlyarm's GitHub
|
|
# At some point, nexmon could work for the device, but the support would need to
|
|
# be added to nexmon
|
|
log "WiFi firmware" green
|
|
mkdir -p ${work_dir}/lib/firmware/ap6212/
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/nvram_ap6212.txt -O ${work_dir}/lib/firmware/ap6212/nvram.txt
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/nvram_ap6212a.txt -O ${work_dir}/lib/firmware/ap6212/nvram_ap6212.txt
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/fw_bcm43438a0.bin -O ${work_dir}/lib/firmware/ap6212/fw_bcm43438a0.bin
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/fw_bcm43438a1.bin -O ${work_dir}/lib/firmware/ap6212/fw_bcm43438a1.bin
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/fw_bcm43438a0_apsta.bin -O ${work_dir}/lib/firmware/ap6212/fw_bcm43438a0_apsta.bin
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/bcm43438a0.hcd -O ${work_dir}/lib/firmware/ap6212/bcm43438a0.hcd
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/bcm43438a1.hcd -O ${work_dir}/lib/firmware/ap6212/bcm43438a1.hcd
|
|
wget https://raw.githubusercontent.com/friendlyarm/android_vendor_broadcom_nanopi2/nanopi2-lollipop-mr1/proprietary/config_ap6212.txt -O ${work_dir}/lib/firmware/ap6212/config.txt
|
|
|
|
# The way the base system comes, the firmware seems to be a symlink into the
|
|
# ap6212 directory so let's do the same here
|
|
# NOTE: This means we can't install firmware-brcm80211 firmware package because
|
|
# the firmware will conflict, and based on testing the firmware in the package
|
|
# *will not* work with this device
|
|
mkdir -p ${work_dir}/lib/firmware/brcm
|
|
cd ${work_dir}/lib/firmware/brcm
|
|
ln -s /lib/firmware/ap6212/fw_bcm43438a1.bin brcmfmac43430a1-sdio.bin
|
|
ln -s /lib/firmware/ap6212/nvram_ap6212.txt brcmfmac43430a1-sdio.txt
|
|
ln -s /lib/firmware/ap6212/fw_bcm43438a0.bin brcmfmac43430-sdio.bin
|
|
ln -s /lib/firmware/ap6212/nvram.txt brcmfmac43430-sdio.txt
|
|
cd "${current_dir}/"
|
|
|
|
# Fix up the symlink for building external modules
|
|
# kernver is used so we don't need to keep track of what the current compiled
|
|
# version is
|
|
log "building external modules" green
|
|
kernver=$(ls ${work_dir}/lib/modules/)
|
|
cd ${work_dir}/lib/modules/${kernver}
|
|
rm build
|
|
rm source
|
|
ln -s /usr/src/kernel build
|
|
ln -s /usr/src/kernel source
|
|
cd "${current_dir}/"
|
|
|
|
log "/boot/boot.cmd" green
|
|
cat << EOF > ${work_dir}/boot/boot.cmd
|
|
# Recompile with:
|
|
# mkimage -C none -A arm -T script -d boot.cmd boot.scr
|
|
|
|
setenv fsck.repair yes
|
|
setenv ramdisk rootfs.cpio.gz
|
|
setenv kernel Image
|
|
|
|
setenv env_addr 0x45000000
|
|
setenv kernel_addr 0x46000000
|
|
setenv ramdisk_addr 0x47000000
|
|
setenv dtb_addr 0x48000000
|
|
setenv fdtovaddr 0x49000000
|
|
|
|
fatload mmc 0 \${kernel_addr} \${kernel}
|
|
fatload mmc 0 \${ramdisk_addr} \${ramdisk}
|
|
if test \$board = nanopi-neo2-v1.1; then
|
|
fatload mmc 0 \${dtb_addr} sun50i-h5-nanopi-neo2.dtb
|
|
else
|
|
fatload mmc 0 \${dtb_addr} sun50i-h5-\${board}.dtb
|
|
fi
|
|
fdt addr \${dtb_addr}
|
|
|
|
# setup NEO2-V1.1 with gpio-dvfs overlay
|
|
if test \$board = nanopi-neo2-v1.1; then
|
|
fatload mmc 0 \${fdtovaddr} overlays/sun50i-h5-gpio-dvfs-overlay.dtb
|
|
fdt resize 8192
|
|
fdt apply \${fdtovaddr}
|
|
fi
|
|
|
|
# setup MAC address
|
|
fdt set ethernet0 local-mac-address \${mac_node}
|
|
|
|
# setup boot_device
|
|
fdt set mmc\${boot_mmc} boot_device <1>
|
|
|
|
setenv fbcon map:0
|
|
setenv bootargs console=ttyS0,115200 earlyprintk root=/dev/mmcblk0p2 rootfstype=$fstype rw rootwait fsck.repair=\${fsck.repair} panic=10 \${extra} fbcon=\${fbcon} ipv6.disable=1
|
|
#booti \${kernel_addr} \${ramdisk_addr}:500000 \${dtb_addr}
|
|
booti \${kernel_addr} - \${dtb_addr}
|
|
EOF
|
|
mkimage -C none -A arm -T script -d ${work_dir}/boot/boot.cmd ${work_dir}/boot/boot.scr
|
|
|
|
cd "${current_dir}/"
|
|
|
|
# Calculate the space to create the image and create
|
|
make_image
|
|
|
|
# Create the disk partitions
|
|
log "Create the disk partitions" green
|
|
parted -s ${current_dir}/${imagename}.img mklabel msdos
|
|
parted -s -a minimal ${current_dir}/${imagename}.img mkpart primary $fstype 32MiB 100%
|
|
|
|
# Set the partition variables
|
|
loopdevice=$(losetup --show -fP "${current_dir}/${imagename}.img")
|
|
rootp="${loopdevice}p1"
|
|
|
|
# Create file systems
|
|
log "Formatting partitions" green
|
|
if [[ "$fstype" == "ext4" ]]; then
|
|
features="^64bit,^metadata_csum"
|
|
elif [[ "$fstype" == "ext3" ]]; then
|
|
features="^64bit"
|
|
fi
|
|
mkfs -O "$features" -t "$fstype" -L ROOTFS "${rootp}"
|
|
|
|
# Create the dirs for the partitions and mount them
|
|
log "Create the dirs for the partitions and mount them" green
|
|
mkdir -p "${basedir}"/root/
|
|
mount "${rootp}" "${basedir}"/root
|
|
|
|
# We do this here because we don't want to hardcode the UUID for the partition during creation
|
|
# systemd doesn't seem to be generating the fstab properly for some people, so let's create one
|
|
log "/etc/fstab" green
|
|
cat <<EOF >"${work_dir}"/etc/fstab
|
|
# <file system> <mount point> <type> <options> <dump> <pass>
|
|
proc /proc proc defaults 0 0
|
|
UUID=$(blkid -s UUID -o value ${rootp}) / $fstype defaults,noatime 0 1
|
|
EOF
|
|
|
|
log "Rsyncing rootfs into image file" green
|
|
rsync -HPavz -q "${work_dir}"/ "${basedir}"/root/
|
|
sync
|
|
|
|
log "u-Boot" green
|
|
cd "${basedir}"
|
|
git clone --depth 1 https://github.com/friendlyarm/u-boot.git
|
|
cd u-boot/
|
|
git checkout sunxi-v2017.x
|
|
make nanopi_h5_defconfig
|
|
make
|
|
dd if=spl/sunxi-spl.bin of=${loopdevice} bs=1024 seek=8
|
|
dd if=u-boot.itb of=${loopdevice} bs=1024 seek=40
|
|
sync
|
|
|
|
cd "${current_dir}/"
|
|
|
|
# Flush buffers and bytes - this is nicked from the Devuan arm-sdk.
|
|
blockdev --flushbufs "${loopdevice}"
|
|
python -c 'import os; os.fsync(open("'${loopdevice}'", "r+b"))'
|
|
|
|
# Umount filesystem
|
|
log "Umount filesystem" green
|
|
umount -l "${rootp}"
|
|
|
|
# Check filesystem
|
|
log "Check filesystem" green
|
|
e2fsck -y -f "$rootp"
|
|
|
|
# Remove loop devices
|
|
log "Remove loop devices" green
|
|
kpartx -dv "${loopdevice}"
|
|
losetup -d "${loopdevice}"
|
|
|
|
# Compress image compilation
|
|
include compress_img
|
|
|
|
# Clean up all the temporary build stuff and remove the directories
|
|
# Comment this out to keep things around if you want to see what may have gone wrong
|
|
clean_build
|