1656 lines
36 KiB
Bash
Executable file
1656 lines
36 KiB
Bash
Executable file
#!/bin/sh
|
|
|
|
#set -e
|
|
|
|
is_live_path()
|
|
{
|
|
DIRECTORY="${1}/${LIVE_MEDIA_PATH}"
|
|
for FILESYSTEM in squashfs ext2 ext3 ext4 xfs dir jffs
|
|
do
|
|
if ls "${DIRECTORY}/"*.${FILESYSTEM} > /dev/null 2>&1
|
|
then
|
|
return 0
|
|
fi
|
|
done
|
|
return 1
|
|
}
|
|
|
|
matches_uuid ()
|
|
{
|
|
if [ "${IGNORE_UUID}" ] || [ ! -e /conf/uuid.conf ]
|
|
then
|
|
return 0
|
|
fi
|
|
|
|
path="${1}"
|
|
uuid="$(cat /conf/uuid.conf)"
|
|
|
|
for try_uuid_file in "${path}/.disk/live-uuid"*
|
|
do
|
|
[ -e "${try_uuid_file}" ] || continue
|
|
|
|
try_uuid="$(cat "${try_uuid_file}")"
|
|
|
|
if [ "${uuid}" = "${try_uuid}" ]
|
|
then
|
|
return 0
|
|
fi
|
|
done
|
|
|
|
return 1
|
|
}
|
|
|
|
get_backing_device ()
|
|
{
|
|
case "${1}" in
|
|
*.squashfs|*.ext2|*.ext3|*.ext4|*.jffs2)
|
|
echo $(setup_loop "${1}" "loop" "/sys/block/loop*" '0' "${LIVE_MEDIA_ENCRYPTION}" "${2}")
|
|
;;
|
|
|
|
*.dir)
|
|
echo "directory"
|
|
;;
|
|
|
|
*)
|
|
panic "Unrecognized live filesystem: ${1}"
|
|
;;
|
|
esac
|
|
}
|
|
|
|
mount_images_in_directory ()
|
|
{
|
|
directory="${1}"
|
|
rootmnt="${2}"
|
|
mac="${3}"
|
|
|
|
if is_live_path "${directory}"
|
|
then
|
|
[ -n "${mac}" ] && adddirectory="${directory}/${LIVE_MEDIA_PATH}/${mac}"
|
|
setup_unionfs "${directory}/${LIVE_MEDIA_PATH}" "${rootmnt}" "${adddirectory}"
|
|
else
|
|
panic "No supported filesystem images found at /${LIVE_MEDIA_PATH}."
|
|
fi
|
|
}
|
|
|
|
is_nice_device ()
|
|
{
|
|
sysfs_path="${1#/sys}"
|
|
|
|
if udevadm info --query=all --path="${sysfs_path}" | egrep -q "DEVTYPE=disk"
|
|
then
|
|
return 0
|
|
elif echo "${sysfs_path}" | grep -q '^/block/vd[a-z]$'
|
|
then
|
|
return 0
|
|
elif echo ${sysfs_path} | grep -q "^/block/dm-"
|
|
then
|
|
return 0
|
|
elif echo ${sysfs_path} | grep -q "^/block/mtdblock"
|
|
then
|
|
return 0
|
|
fi
|
|
|
|
return 1
|
|
}
|
|
|
|
check_dev ()
|
|
{
|
|
sysdev="${1}"
|
|
devname="${2}"
|
|
skip_uuid_check="${3}"
|
|
|
|
# support for fromiso=.../isofrom=....
|
|
if [ -n "$FROMISO" ]
|
|
then
|
|
ISO_DEVICE=$(dirname $FROMISO)
|
|
if ! [ -b $ISO_DEVICE ]
|
|
then
|
|
# to support unusual device names like /dev/cciss/c0d0p1
|
|
# as well we have to identify the block device name, let's
|
|
# do that for up to 15 levels
|
|
i=15
|
|
while [ -n "$ISO_DEVICE" ] && [ "$i" -gt 0 ]
|
|
do
|
|
ISO_DEVICE=$(dirname ${ISO_DEVICE})
|
|
[ -b "$ISO_DEVICE" ] && break
|
|
i=$(($i -1))
|
|
done
|
|
fi
|
|
|
|
if [ "$ISO_DEVICE" = "/" ]
|
|
then
|
|
echo "Warning: device for bootoption fromiso= ($FROMISO) not found.">>/boot.log
|
|
else
|
|
fs_type=$(get_fstype "${ISO_DEVICE}")
|
|
if is_supported_fs ${fs_type}
|
|
then
|
|
mkdir /live/fromiso
|
|
mount -t $fs_type "$ISO_DEVICE" /live/fromiso
|
|
ISO_NAME="$(echo $FROMISO | sed "s|$ISO_DEVICE||")"
|
|
loopdevname=$(setup_loop "/live/fromiso/${ISO_NAME}" "loop" "/sys/block/loop*" "" '')
|
|
devname="${loopdevname}"
|
|
else
|
|
echo "Warning: unable to mount $ISO_DEVICE." >>/boot.log
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ -z "${devname}" ]
|
|
then
|
|
devname=$(sys2dev "${sysdev}")
|
|
fi
|
|
|
|
if [ -d "${devname}" ]
|
|
then
|
|
mount -o bind "${devname}" $mountpoint || continue
|
|
|
|
if is_live_path $mountpoint
|
|
then
|
|
echo $mountpoint
|
|
return 0
|
|
else
|
|
umount $mountpoint
|
|
fi
|
|
fi
|
|
|
|
IFS=","
|
|
for device in ${devname}
|
|
do
|
|
case "$device" in
|
|
*mapper*)
|
|
# Adding lvm support
|
|
if [ -x /scripts/local-top/lvm2 ]
|
|
then
|
|
ROOT="$device" resume="" /scripts/local-top/lvm2 >>/boot.log
|
|
fi
|
|
;;
|
|
|
|
/dev/md*)
|
|
# Adding raid support
|
|
if [ -x /scripts/local-top/mdadm ]
|
|
then
|
|
[ -r /conf/conf.d/md ] && cp /conf/conf.d/md /conf/conf.d/md.orig
|
|
echo "MD_DEVS=$device " >> /conf/conf.d/md
|
|
/scripts/local-top/mdadm >>/boot.log
|
|
[ -r /conf/conf.d/md.orig ] && mv /conf/conf.d/md.orig /conf/conf.d/md
|
|
fi
|
|
;;
|
|
esac
|
|
done
|
|
unset IFS
|
|
|
|
[ -n "$device" ] && devname="$device"
|
|
|
|
[ -e "$devname" ] || continue
|
|
|
|
if [ -n "${LIVE_MEDIA_OFFSET}" ]
|
|
then
|
|
loopdevname=$(setup_loop "${devname}" "loop" "/sys/block/loop*" "${LIVE_MEDIA_OFFSET}" '')
|
|
devname="${loopdevname}"
|
|
fi
|
|
|
|
fstype=$(get_fstype "${devname}")
|
|
|
|
if is_supported_fs ${fstype}
|
|
then
|
|
devuid=$(blkid -o value -s UUID "$devname")
|
|
[ -n "$devuid" ] && grep -qs "\<$devuid\>" /var/lib/live/boot/devices-already-tried-to-mount && continue
|
|
case "${fstype}" in
|
|
vfat)
|
|
mount -t ${fstype} -o ro,noatime,umask=0000 "${devname}" ${mountpoint} || continue
|
|
;;
|
|
*)
|
|
mount -t ${fstype} -o ro,noatime "${devname}" ${mountpoint} || continue
|
|
;;
|
|
esac
|
|
[ -n "$devuid" ] && echo "$devuid" >> /var/lib/live/boot/devices-already-tried-to-mount
|
|
|
|
if [ -n "${FINDISO}" ]
|
|
then
|
|
if [ -f ${mountpoint}/${FINDISO} ]
|
|
then
|
|
umount ${mountpoint}
|
|
mkdir -p /live/findiso
|
|
mount -t ${fstype} -o ro,noatime "${devname}" /live/findiso
|
|
loopdevname=$(setup_loop "/live/findiso/${FINDISO}" "loop" "/sys/block/loop*" 0 "")
|
|
devname="${loopdevname}"
|
|
mount -t iso9660 -o ro,noatime "${devname}" ${mountpoint}
|
|
else
|
|
umount ${mountpoint}
|
|
fi
|
|
fi
|
|
|
|
if is_live_path ${mountpoint} && \
|
|
([ "${skip_uuid_check}" ] || matches_uuid ${mountpoint})
|
|
then
|
|
echo ${mountpoint}
|
|
return 0
|
|
else
|
|
umount ${mountpoint} 2>/dev/null
|
|
fi
|
|
fi
|
|
|
|
if [ -n "${LIVE_MEDIA_OFFSET}" ]
|
|
then
|
|
losetup -d "${loopdevname}"
|
|
fi
|
|
|
|
return 1
|
|
}
|
|
|
|
find_livefs ()
|
|
{
|
|
timeout="${1}"
|
|
|
|
# don't start autodetection before timeout has expired
|
|
if [ -n "${LIVE_MEDIA_TIMEOUT}" ]
|
|
then
|
|
if [ "${timeout}" -lt "${LIVE_MEDIA_TIMEOUT}" ]
|
|
then
|
|
return 1
|
|
fi
|
|
fi
|
|
|
|
# first look at the one specified in the command line
|
|
case "${LIVE_MEDIA}" in
|
|
removable-usb)
|
|
for sysblock in $(removable_usb_dev "sys")
|
|
do
|
|
for dev in $(subdevices "${sysblock}")
|
|
do
|
|
if check_dev "${dev}"
|
|
then
|
|
return 0
|
|
fi
|
|
done
|
|
done
|
|
return 1
|
|
;;
|
|
|
|
removable)
|
|
for sysblock in $(removable_dev "sys")
|
|
do
|
|
for dev in $(subdevices "${sysblock}")
|
|
do
|
|
if check_dev "${dev}"
|
|
then
|
|
return 0
|
|
fi
|
|
done
|
|
done
|
|
return 1
|
|
;;
|
|
|
|
*)
|
|
if [ ! -z "${LIVE_MEDIA}" ]
|
|
then
|
|
if check_dev "null" "${LIVE_MEDIA}" "skip_uuid_check"
|
|
then
|
|
return 0
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
|
|
# or do the scan of block devices
|
|
# prefer removable devices over non-removable devices, so scan them first
|
|
devices_to_scan="$(removable_dev 'sys') $(non_removable_dev 'sys')"
|
|
|
|
for sysblock in $devices_to_scan
|
|
do
|
|
devname=$(sys2dev "${sysblock}")
|
|
[ -e "$devname" ] || continue
|
|
fstype=$(get_fstype "${devname}")
|
|
|
|
if /lib/udev/cdrom_id ${devname} > /dev/null
|
|
then
|
|
if check_dev "null" "${devname}"
|
|
then
|
|
return 0
|
|
fi
|
|
elif is_nice_device "${sysblock}"
|
|
then
|
|
for dev in $(subdevices "${sysblock}")
|
|
do
|
|
if check_dev "${dev}"
|
|
then
|
|
return 0
|
|
fi
|
|
done
|
|
elif [ "${fstype}" = "squashfs" -o \
|
|
"${fstype}" = "btrfs" -o \
|
|
"${fstype}" = "ext2" -o \
|
|
"${fstype}" = "ext3" -o \
|
|
"${fstype}" = "ext4" -o \
|
|
"${fstype}" = "jffs2" ]
|
|
then
|
|
# This is an ugly hack situation, the block device has
|
|
# an image directly on it. It's hopefully
|
|
# live-boot, so take it and run with it.
|
|
ln -s "${devname}" "${devname}.${fstype}"
|
|
echo "${devname}.${fstype}"
|
|
return 0
|
|
fi
|
|
done
|
|
|
|
return 1
|
|
}
|
|
|
|
is_in_list_separator_helper ()
|
|
{
|
|
local sep element list
|
|
sep=${1}
|
|
shift
|
|
element=${1}
|
|
shift
|
|
list=${*}
|
|
echo ${list} | grep -qe "^\(.*${sep}\)\?${element}\(${sep}.*\)\?$"
|
|
}
|
|
|
|
is_in_space_sep_list ()
|
|
{
|
|
local element
|
|
element=${1}
|
|
shift
|
|
is_in_list_separator_helper "[[:space:]]" "${element}" "${*}"
|
|
}
|
|
|
|
is_in_comma_sep_list ()
|
|
{
|
|
local element
|
|
element=${1}
|
|
shift
|
|
is_in_list_separator_helper "," "${element}" "${*}"
|
|
}
|
|
|
|
sys2dev ()
|
|
{
|
|
sysdev=${1#/sys}
|
|
echo "/dev/$(udevadm info -q name -p ${sysdev} 2>/dev/null|| echo ${sysdev##*/})"
|
|
}
|
|
|
|
subdevices ()
|
|
{
|
|
sysblock=${1}
|
|
r=""
|
|
|
|
for dev in "${sysblock}"/* "${sysblock}"
|
|
do
|
|
if [ -e "${dev}/dev" ]
|
|
then
|
|
r="${r} ${dev}"
|
|
fi
|
|
done
|
|
|
|
echo ${r}
|
|
}
|
|
|
|
storage_devices()
|
|
{
|
|
black_listed_devices="${1}"
|
|
white_listed_devices="${2}"
|
|
|
|
for sysblock in $(echo /sys/block/* | tr ' ' '\n' | grep -vE "loop|ram|fd")
|
|
do
|
|
fulldevname=$(sys2dev "${sysblock}")
|
|
|
|
if is_in_space_sep_list ${fulldevname} ${black_listed_devices} || \
|
|
[ -n "${white_listed_devices}" ] && \
|
|
! is_in_space_sep_list ${fulldevname} ${white_listed_devices}
|
|
then
|
|
# skip this device entirely
|
|
continue
|
|
fi
|
|
|
|
for dev in $(subdevices "${sysblock}")
|
|
do
|
|
devname=$(sys2dev "${dev}")
|
|
|
|
if is_in_space_sep_list ${devname} ${black_listed_devices}
|
|
then
|
|
# skip this subdevice
|
|
continue
|
|
else
|
|
echo "${devname}"
|
|
fi
|
|
done
|
|
done
|
|
}
|
|
|
|
is_supported_fs ()
|
|
{
|
|
fstype="${1}"
|
|
|
|
# Validate input first
|
|
if [ -z "${fstype}" ]
|
|
then
|
|
return 1
|
|
fi
|
|
|
|
# Try to look if it is already supported by the kernel
|
|
if grep -q ${fstype} /proc/filesystems
|
|
then
|
|
return 0
|
|
else
|
|
# Then try to add support for it the gentle way using the initramfs capabilities
|
|
modprobe -q -b ${fstype}
|
|
if grep -q ${fstype} /proc/filesystems
|
|
then
|
|
return 0
|
|
# Then try the hard way if /root is already reachable
|
|
else
|
|
kmodule="/root/lib/modules/`uname -r`/${fstype}/${fstype}.ko"
|
|
if [ -e "${kmodule}" ]
|
|
then
|
|
insmod "${kmodule}"
|
|
if grep -q ${fstype} /proc/filesystems
|
|
then
|
|
return 0
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
return 1
|
|
}
|
|
|
|
get_fstype ()
|
|
{
|
|
/sbin/blkid -s TYPE -o value $1 2>/dev/null
|
|
}
|
|
|
|
where_is_mounted ()
|
|
{
|
|
device=${1}
|
|
# return first found
|
|
grep -m1 "^${device} " /proc/mounts | cut -f2 -d ' '
|
|
}
|
|
|
|
trim_path ()
|
|
{
|
|
# remove all unnecessary /:s in the path, including last one (except
|
|
# if path is just "/")
|
|
echo ${1} | sed 's|//\+|/|g' | sed 's|^\(.*[^/]\)/$|\1|'
|
|
}
|
|
|
|
what_is_mounted_on ()
|
|
{
|
|
local dir
|
|
dir="$(trim_path ${1})"
|
|
grep -m1 "^[^ ]\+ ${dir} " /proc/mounts | cut -d' ' -f1
|
|
}
|
|
|
|
chown_ref ()
|
|
{
|
|
local reference targets owner
|
|
reference="${1}"
|
|
shift
|
|
targets=${@}
|
|
owner=$(stat -c %u:%g "${reference}")
|
|
chown -h ${owner} ${targets}
|
|
}
|
|
|
|
chmod_ref ()
|
|
{
|
|
local reference targets rights
|
|
reference="${1}"
|
|
shift
|
|
targets=${@}
|
|
rights=$(stat -c %a "${reference}")
|
|
chmod ${rights} ${targets}
|
|
}
|
|
|
|
lastline ()
|
|
{
|
|
while read lines
|
|
do
|
|
line=${lines}
|
|
done
|
|
|
|
echo "${line}"
|
|
}
|
|
|
|
base_path ()
|
|
{
|
|
testpath="${1}"
|
|
mounts="$(awk '{print $2}' /proc/mounts)"
|
|
testpath="$(busybox realpath ${testpath})"
|
|
|
|
while true
|
|
do
|
|
if echo "${mounts}" | grep -qs "^${testpath}"
|
|
then
|
|
set -- $(echo "${mounts}" | grep "^${testpath}" | lastline)
|
|
echo ${1}
|
|
break
|
|
else
|
|
testpath=$(dirname $testpath)
|
|
fi
|
|
done
|
|
}
|
|
|
|
fs_size ()
|
|
{
|
|
# Returns used/free fs kbytes + 5% more
|
|
# You could pass a block device as ${1} or the mount point as ${2}
|
|
|
|
dev="${1}"
|
|
mountp="${2}"
|
|
used="${3}"
|
|
|
|
if [ -z "${mountp}" ]
|
|
then
|
|
mountp="$(where_is_mounted ${dev})"
|
|
|
|
if [ -z "${mountp}" ]
|
|
then
|
|
mountp="/mnt/tmp_fs_size"
|
|
|
|
mkdir -p "${mountp}"
|
|
mount -t $(get_fstype "${dev}") -o ro "${dev}" "${mountp}" || log_warning_msg "cannot mount -t $(get_fstype ${dev}) -o ro ${dev} ${mountp}"
|
|
|
|
doumount=1
|
|
fi
|
|
fi
|
|
|
|
if [ "${used}" = "used" ]
|
|
then
|
|
size=$(du -ks ${mountp} | cut -f1)
|
|
size=$(expr ${size} + ${size} / 20 ) # FIXME: 5% more to be sure
|
|
else
|
|
# free space
|
|
size="$(df -kP | grep -s ${mountp} | awk '{print $4}')"
|
|
fi
|
|
|
|
if [ -n "${doumount}" ]
|
|
then
|
|
umount "${mountp}" || log_warning_msg "cannot umount ${mountp}"
|
|
rmdir "${mountp}"
|
|
fi
|
|
|
|
echo "${size}"
|
|
}
|
|
|
|
load_keymap ()
|
|
{
|
|
# Load custom keymap
|
|
if [ -x /bin/loadkeys -a -r /etc/boottime.kmap.gz ]
|
|
then
|
|
loadkeys --quiet /etc/boottime.kmap.gz
|
|
fi
|
|
}
|
|
|
|
setup_loop ()
|
|
{
|
|
local fspath module pattern offset encryption readonly
|
|
fspath=${1}
|
|
module=${2}
|
|
pattern=${3}
|
|
offset=${4}
|
|
encryption=${5}
|
|
readonly=${6}
|
|
|
|
# the output of setup_loop is evaluated in other functions,
|
|
# modprobe leaks kernel options like "libata.dma=0"
|
|
# as "options libata dma=0" on stdout, causing serious
|
|
# problems therefor, so instead always avoid output to stdout
|
|
modprobe -q -b "${module}" 1>/dev/null
|
|
|
|
udevadm settle
|
|
|
|
for loopdev in ${pattern}
|
|
do
|
|
if [ "$(cat ${loopdev}/size)" -eq 0 ]
|
|
then
|
|
dev=$(sys2dev "${loopdev}")
|
|
options=''
|
|
|
|
if [ -n "${readonly}" ]
|
|
then
|
|
if losetup --help 2>&1 | grep -q -- "-r\b"
|
|
then
|
|
options="${options} -r"
|
|
fi
|
|
fi
|
|
|
|
if [ -n "${offset}" ] && [ 0 -lt "${offset}" ]
|
|
then
|
|
options="${options} -o ${offset}"
|
|
fi
|
|
|
|
if [ -z "${encryption}" ]
|
|
then
|
|
losetup ${options} "${dev}" "${fspath}"
|
|
else
|
|
# Loop AES encryption
|
|
while true
|
|
do
|
|
load_keymap
|
|
|
|
echo -n "Enter passphrase for root filesystem: " >&6
|
|
read -s passphrase
|
|
echo "${passphrase}" > /tmp/passphrase
|
|
unset passphrase
|
|
exec 9</tmp/passphrase
|
|
/sbin/losetup ${options} -e "${encryption}" -p 9 "${dev}" "${fspath}"
|
|
error=${?}
|
|
exec 9<&-
|
|
rm -f /tmp/passphrase
|
|
|
|
if [ 0 -eq ${error} ]
|
|
then
|
|
unset error
|
|
break
|
|
fi
|
|
|
|
echo
|
|
echo -n "There was an error decrypting the root filesystem ... Retry? [Y/n] " >&6
|
|
read answer
|
|
|
|
if [ "$(echo "${answer}" | cut -b1 | tr A-Z a-z)" = "n" ]
|
|
then
|
|
unset answer
|
|
break
|
|
fi
|
|
done
|
|
fi
|
|
|
|
echo "${dev}"
|
|
return 0
|
|
fi
|
|
done
|
|
|
|
panic "No loop devices available"
|
|
}
|
|
|
|
try_mount ()
|
|
{
|
|
dev="${1}"
|
|
mountp="${2}"
|
|
opts="${3}"
|
|
fstype="${4}"
|
|
|
|
old_mountp="$(where_is_mounted ${dev})"
|
|
|
|
if [ -n "${old_mountp}" ]
|
|
then
|
|
if [ "${opts}" != "ro" ]
|
|
then
|
|
mount -o remount,"${opts}" "${dev}" "${old_mountp}" || panic "Remounting ${dev} ${opts} on ${old_mountp} failed"
|
|
fi
|
|
|
|
mount -o bind "${old_mountp}" "${mountp}" || panic "Cannot bind-mount ${old_mountp} on ${mountp}"
|
|
else
|
|
if [ -z "${fstype}" ]
|
|
then
|
|
fstype=$(get_fstype "${dev}")
|
|
fi
|
|
mount -t "${fstype}" -o "${opts}" "${dev}" "${mountp}" || \
|
|
( echo "SKIPPING: Cannot mount ${dev} on ${mountp}, fstype=${fstype}, options=${opts}" > boot.log && return 0 )
|
|
fi
|
|
}
|
|
|
|
# Try to mount $device to the place expected by live-boot. If $device
|
|
# is already mounted somewhere, move it to the expected place. If $device
|
|
# ends with a "/" this is a directory path.
|
|
# If we're only probing $device (to check if it has custom persistence)
|
|
# $probe should be set, which suppresses warnings upon failure. On
|
|
# success, print the mount point for $device.
|
|
mount_persistence_media ()
|
|
{
|
|
local device probe backing old_backing fstype mount_opts
|
|
device=${1}
|
|
probe=${2}
|
|
|
|
# get_custom_mounts() might call this with a directory path instead
|
|
# of a block device path. This means we have found sub-directory path
|
|
# underneath /lib/live/mounts/persistence, so we're done
|
|
if [ -d "${device}" ]
|
|
then
|
|
echo "${device}"
|
|
return 0
|
|
fi
|
|
|
|
if [ ! -b "${device}" ]
|
|
then
|
|
return 1
|
|
fi
|
|
|
|
backing="/live/persistence/$(basename ${device})"
|
|
|
|
mkdir -p "${backing}"
|
|
old_backing="$(where_is_mounted ${device})"
|
|
if [ -z "${old_backing}" ]
|
|
then
|
|
fstype="$(get_fstype ${device})"
|
|
mount_opts="rw,noatime"
|
|
if [ -n "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
mount_opts="ro,noatime"
|
|
fi
|
|
if mount -t "${fstype}" -o "${mount_opts}" "${device}" "${backing}" >/dev/null
|
|
then
|
|
echo ${backing}
|
|
return 0
|
|
else
|
|
[ -z "${probe}" ] && log_warning_msg "Failed to mount persistence media ${device}"
|
|
rmdir "${backing}"
|
|
return 1
|
|
fi
|
|
elif [ "${backing}" != "${old_backing}" ]
|
|
then
|
|
if ! mount --move ${old_backing} ${backing} >/dev/null
|
|
then
|
|
[ -z "${probe}" ] && log_warning_msg "Failed to move persistence media ${device}"
|
|
rmdir "${backing}"
|
|
return 1
|
|
fi
|
|
mount_opts="rw,noatime,umask=000"
|
|
if [ -n "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
mount_opts="ro,noatime"
|
|
fi
|
|
if ! mount -o "remount,${mount_opts}" "${backing}" >/dev/null
|
|
then
|
|
log_warning_msg "Failed to remount persistence media ${device} writable"
|
|
# Don't unmount or rmdir the new mountpoint in this case
|
|
fi
|
|
echo ${backing}
|
|
return 0
|
|
else
|
|
# This means that $device has already been mounted on
|
|
# the place expected by live-boot, so we're done.
|
|
echo ${backing}
|
|
return 0
|
|
fi
|
|
}
|
|
|
|
close_persistence_media ()
|
|
{
|
|
local device backing
|
|
device=${1}
|
|
backing="$(where_is_mounted ${device})"
|
|
|
|
if [ -d "${backing}" ]
|
|
then
|
|
umount "${backing}" >/dev/null 2>&1
|
|
rmdir "${backing}" >/dev/null 2>&1
|
|
fi
|
|
|
|
if is_active_luks_mapping ${device}
|
|
then
|
|
/sbin/cryptsetup luksClose ${device}
|
|
fi
|
|
}
|
|
|
|
open_luks_device ()
|
|
{
|
|
dev="${1}"
|
|
name="$(basename ${dev})"
|
|
opts="--key-file=-"
|
|
if [ -n "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
opts="${opts} --readonly"
|
|
fi
|
|
|
|
if /sbin/cryptsetup status "${name}" >/dev/null 2>&1
|
|
then
|
|
re="^[[:space:]]*device:[[:space:]]*\([^[:space:]]*\)$"
|
|
opened_dev=$(cryptsetup status ${name} 2>/dev/null | grep "${re}" | sed "s|${re}|\1|")
|
|
if [ "${opened_dev}" = "${dev}" ]
|
|
then
|
|
luks_device="/dev/mapper/${name}"
|
|
echo ${luks_device}
|
|
return 0
|
|
else
|
|
log_warning_msg "Cannot open luks device ${dev} since ${opened_dev} already is opened with its name"
|
|
return 1
|
|
fi
|
|
fi
|
|
|
|
load_keymap
|
|
|
|
# check for plymouth
|
|
if [ -x /bin/plymouth ]
|
|
then
|
|
_PLYMOUTH="true"
|
|
fi
|
|
|
|
case "${_PLYMOUTH}" in
|
|
true)
|
|
plymouth --ping
|
|
|
|
cryptkeyscript="plymouth ask-for-password --prompt"
|
|
# Plymouth will add a : if it is a non-graphical prompt
|
|
cryptkeyprompt="Please unlock disk ${dev}"
|
|
;;
|
|
|
|
*)
|
|
cryptkeyscript="/lib/cryptsetup/askpass"
|
|
cryptkeyprompt="Please unlock disk ${dev}: "
|
|
;;
|
|
esac
|
|
|
|
while true
|
|
do
|
|
$cryptkeyscript "$cryptkeyprompt" | \
|
|
/sbin/cryptsetup -T 1 luksOpen ${dev} ${name} ${opts}
|
|
|
|
if [ 0 -eq ${?} ]
|
|
then
|
|
luks_device="/dev/mapper/${name}"
|
|
echo ${luks_device}
|
|
return 0
|
|
fi
|
|
|
|
echo >&6
|
|
retryprompt="There was an error decrypting ${dev} ... Retry? [Y/n]"
|
|
|
|
case "${_PLYMOUTH}" in
|
|
true)
|
|
plymouth display-message --text "${retryprompt}"
|
|
answer=$(plymouth watch-keystroke --keys="YNyn")
|
|
;;
|
|
|
|
*)
|
|
echo -n "${retryprompt} " >&6
|
|
read answer
|
|
;;
|
|
esac
|
|
|
|
if [ "$(echo "${answer}" | cut -b1 | tr A-Z a-z)" = "n" ]
|
|
then
|
|
case "${_PLYMOUTH}" in
|
|
true)
|
|
plymouth display-message --text ""
|
|
;;
|
|
esac
|
|
|
|
return 2
|
|
fi
|
|
done
|
|
}
|
|
|
|
get_gpt_name ()
|
|
{
|
|
local dev
|
|
dev="${1}"
|
|
/sbin/blkid -s PART_ENTRY_NAME -p -o value ${dev} 2>/dev/null
|
|
}
|
|
|
|
is_gpt_device ()
|
|
{
|
|
local dev
|
|
dev="${1}"
|
|
[ "$(/sbin/blkid -s PART_ENTRY_SCHEME -p -o value ${dev} 2>/dev/null)" = "gpt" ]
|
|
}
|
|
|
|
probe_for_gpt_name ()
|
|
{
|
|
local overlays dev gpt_dev gpt_name
|
|
overlays="${1}"
|
|
dev="${2}"
|
|
|
|
gpt_dev="${dev}"
|
|
if is_active_luks_mapping ${dev}
|
|
then
|
|
# if $dev is an opened luks device, we need to check
|
|
# GPT stuff on the backing device
|
|
gpt_dev=$(get_luks_backing_device "${dev}")
|
|
fi
|
|
|
|
if ! is_gpt_device ${gpt_dev}
|
|
then
|
|
return
|
|
fi
|
|
|
|
gpt_name=$(get_gpt_name ${gpt_dev})
|
|
for label in ${overlays}
|
|
do
|
|
if [ "${gpt_name}" = "${label}" ]
|
|
then
|
|
echo "${label}=${dev}"
|
|
fi
|
|
done
|
|
}
|
|
|
|
probe_for_fs_label ()
|
|
{
|
|
local overlays dev
|
|
overlays="${1}"
|
|
dev="${2}"
|
|
|
|
for label in ${overlays}
|
|
do
|
|
if [ "$(/sbin/blkid -s LABEL -o value $dev 2>/dev/null)" = "${label}" ]
|
|
then
|
|
echo "${label}=${dev}"
|
|
fi
|
|
done
|
|
}
|
|
|
|
probe_for_file_name ()
|
|
{
|
|
local overlays dev ret backing
|
|
overlays="${1}"
|
|
dev="${2}"
|
|
|
|
ret=""
|
|
backing="$(mount_persistence_media ${dev} probe)"
|
|
if [ -z "${backing}" ]
|
|
then
|
|
return
|
|
fi
|
|
|
|
for label in ${overlays}
|
|
do
|
|
path=${backing}/${PERSISTENCE_PATH}/${label}
|
|
if [ -f "${path}" ]
|
|
then
|
|
local loopdev
|
|
loopdev=$(setup_loop "${path}" "loop" "/sys/block/loop*")
|
|
ret="${ret} ${label}=${loopdev}"
|
|
fi
|
|
done
|
|
|
|
if [ -n "${ret}" ]
|
|
then
|
|
echo ${ret}
|
|
else
|
|
# unmount and remove mountpoint
|
|
umount ${backing} > /dev/null 2>&1 || true
|
|
rmdir ${backing} > /dev/null 2>&1 || true
|
|
fi
|
|
}
|
|
|
|
probe_for_directory_name ()
|
|
{
|
|
local overlays dev ret backing
|
|
overlays="${1}"
|
|
dev="${2}"
|
|
|
|
ret=""
|
|
backing="$(mount_persistence_media ${dev} probe)"
|
|
if [ -z "${backing}" ]
|
|
then
|
|
return
|
|
fi
|
|
|
|
for label in ${overlays}
|
|
do
|
|
path=${backing}/${PERSISTENCE_PATH}/${label}
|
|
if [ -d "${path}" ]
|
|
then
|
|
# in this case the "device" ends with a "/"
|
|
ret="${ret} ${label}=${backing}/${PERSISTENCE_PATH}/${label%%/}/"
|
|
fi
|
|
done
|
|
|
|
if [ -n "${ret}" ]
|
|
then
|
|
echo ${ret}
|
|
else
|
|
# unmount and remove mountpoint
|
|
umount ${backing} > /dev/null 2>&1 || true
|
|
rmdir ${backing} > /dev/null 2>&1 || true
|
|
fi
|
|
}
|
|
|
|
find_persistence_media ()
|
|
{
|
|
# Scans devices for overlays, and returns a whitespace
|
|
# separated list of how to use them. Only overlays with a partition
|
|
# label or file name in ${overlays} are returned.
|
|
#
|
|
# When scanning a LUKS device, the user will be asked to enter the
|
|
# passphrase; on failure to enter it, or if no persistence partitions
|
|
# or files were found, the LUKS device is closed.
|
|
#
|
|
# For all other cases (overlay partition and overlay file) the
|
|
# return value is "${label}=${device}", where ${device} a device that
|
|
# can mount the content. In the case of an overlay file, the device
|
|
# containing the file will remain mounted as a side-effect.
|
|
#
|
|
# No devices in ${black_listed_devices} will be scanned, and if
|
|
# ${white_list_devices} is non-empty, only devices in it will be
|
|
# scanned.
|
|
|
|
local overlays white_listed_devices ret black_listed_devices
|
|
overlays="${1}"
|
|
white_listed_devices="${2}"
|
|
ret=""
|
|
|
|
#
|
|
# The devices that are hosting the actual live rootfs should not be
|
|
# used for persistence storage since otherwise you might mount a
|
|
# parent directory on top of a sub-directory of the same filesystem
|
|
# in one union together.
|
|
#
|
|
black_listed_devices=""
|
|
for d in /live/rootfs/* /live/findiso /live/fromiso
|
|
do
|
|
black_listed_devices="${black_listed_devices} $(what_is_mounted_on d)"
|
|
done
|
|
|
|
for dev in $(storage_devices "${black_listed_devices}" "${white_listed_devices}")
|
|
do
|
|
local result luks_device
|
|
result=""
|
|
|
|
luks_device=""
|
|
# Check if it's a luks device; we'll have to open the device
|
|
# in order to probe any filesystem it contains, like we do
|
|
# below. activate_custom_mounts() also depends on that any luks
|
|
# device already has been opened.
|
|
if is_in_comma_sep_list luks ${PERSISTENCE_ENCRYPTION} && is_luks_partition ${dev}
|
|
then
|
|
if luks_device=$(open_luks_device "${dev}")
|
|
then
|
|
dev="${luks_device}"
|
|
else
|
|
# skip $dev since we failed/chose not to open it
|
|
continue
|
|
fi
|
|
elif ! is_in_comma_sep_list none ${PERSISTENCE_ENCRYPTION}
|
|
then
|
|
# skip $dev since we don't allow unencrypted storage
|
|
continue
|
|
fi
|
|
|
|
# Probe for matching GPT partition names or filesystem labels
|
|
if is_in_comma_sep_list filesystem ${PERSISTENCE_STORAGE}
|
|
then
|
|
result=$(probe_for_gpt_name "${overlays}" ${dev})
|
|
if [ -n "${result}" ]
|
|
then
|
|
ret="${ret} ${result}"
|
|
continue
|
|
fi
|
|
|
|
result=$(probe_for_fs_label "${overlays}" ${dev})
|
|
if [ -n "${result}" ]
|
|
then
|
|
ret="${ret} ${result}"
|
|
continue
|
|
fi
|
|
fi
|
|
|
|
# Probe for files with matching name on mounted partition
|
|
if is_in_comma_sep_list file ${PERSISTENCE_STORAGE}
|
|
then
|
|
result=$(probe_for_file_name "${overlays}" ${dev})
|
|
if [ -n "${result}" ]
|
|
then
|
|
local loopdevice
|
|
loopdevice=${result##*=}
|
|
if is_in_comma_sep_list luks ${PERSISTENCE_ENCRYPTION} && is_luks_partition ${loopdevice}
|
|
then
|
|
local luksfile
|
|
luksfile=""
|
|
if luksfile=$(open_luks_device "${loopdevice}")
|
|
then
|
|
result=${result%%=*}
|
|
result="${result}=${luksfile}"
|
|
else
|
|
losetup -d $loopdevice
|
|
result=""
|
|
fi
|
|
fi
|
|
ret="${ret} ${result}"
|
|
continue
|
|
fi
|
|
fi
|
|
|
|
# Probe for directory with matching name on mounted partition
|
|
if is_in_comma_sep_list directory ${PERSISTENCE_STORAGE}
|
|
then
|
|
result=$(probe_for_directory_name "${overlays}" ${dev})
|
|
if [ -n "${result}" ]
|
|
then
|
|
ret="${ret} ${result}"
|
|
continue
|
|
fi
|
|
fi
|
|
|
|
# Close luks device if it isn't used
|
|
if [ -z "${result}" ] && [ -n "${luks_device}" ] && is_active_luks_mapping "${luks_device}"
|
|
then
|
|
/sbin/cryptsetup luksClose "${luks_device}"
|
|
fi
|
|
done
|
|
|
|
if [ -n "${ret}" ]
|
|
then
|
|
echo ${ret}
|
|
fi
|
|
}
|
|
|
|
get_mac ()
|
|
{
|
|
mac=""
|
|
|
|
for adaptor in /sys/class/net/*
|
|
do
|
|
status="$(cat ${adaptor}/iflink)"
|
|
|
|
if [ "${status}" -eq 2 ]
|
|
then
|
|
mac="$(cat ${adaptor}/address)"
|
|
mac="$(echo ${mac} | sed 's/:/-/g' | tr '[a-z]' '[A-Z]')"
|
|
fi
|
|
done
|
|
|
|
echo ${mac}
|
|
}
|
|
|
|
is_luks_partition ()
|
|
{
|
|
device="${1}"
|
|
/sbin/cryptsetup isLuks "${device}" 1>/dev/null 2>&1
|
|
}
|
|
|
|
is_active_luks_mapping ()
|
|
{
|
|
device="${1}"
|
|
/sbin/cryptsetup status "${device}" 1>/dev/null 2>&1
|
|
}
|
|
|
|
get_luks_backing_device ()
|
|
{
|
|
device=${1}
|
|
cryptsetup status ${device} 2> /dev/null | \
|
|
awk '{if ($1 == "device:") print $2}'
|
|
}
|
|
|
|
removable_dev ()
|
|
{
|
|
output_format="${1}"
|
|
want_usb="${2}"
|
|
ret=
|
|
|
|
for sysblock in $(echo /sys/block/* | tr ' ' '\n' | grep -vE "/(loop|ram|dm-|fd)")
|
|
do
|
|
dev_ok=
|
|
if [ "$(cat ${sysblock}/removable)" = "1" ]
|
|
then
|
|
if [ -z "${want_usb}" ]
|
|
then
|
|
dev_ok="true"
|
|
else
|
|
if readlink ${sysblock} | grep -q usb
|
|
then
|
|
dev_ok="true"
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ "${dev_ok}" = "true" ]
|
|
then
|
|
case "${output_format}" in
|
|
sys)
|
|
ret="${ret} ${sysblock}"
|
|
;;
|
|
*)
|
|
devname=$(sys2dev "${sysblock}")
|
|
ret="${ret} ${devname}"
|
|
;;
|
|
esac
|
|
fi
|
|
done
|
|
|
|
echo "${ret}"
|
|
}
|
|
|
|
removable_usb_dev ()
|
|
{
|
|
output_format="${1}"
|
|
|
|
removable_dev "${output_format}" "want_usb"
|
|
}
|
|
|
|
non_removable_dev ()
|
|
{
|
|
output_format="${1}"
|
|
ret=
|
|
|
|
for sysblock in $(echo /sys/block/* | tr ' ' '\n' | grep -vE "/(loop|ram|dm-|fd)")
|
|
do
|
|
if [ "$(cat ${sysblock}/removable)" = "0" ]
|
|
then
|
|
case "${output_format}" in
|
|
sys)
|
|
ret="${ret} ${sysblock}"
|
|
;;
|
|
*)
|
|
devname=$(sys2dev "${sysblock}")
|
|
ret="${ret} ${devname}"
|
|
;;
|
|
esac
|
|
fi
|
|
done
|
|
|
|
echo "${ret}"
|
|
}
|
|
|
|
link_files ()
|
|
{
|
|
# create source's directory structure in dest, and recursively
|
|
# create symlinks in dest to to all files in source. if mask
|
|
# is non-empty, remove mask from all source paths when
|
|
# creating links (will be necessary if we change root, which
|
|
# live-boot normally does (into $rootmnt)).
|
|
local src_dir dest_dir src_transform
|
|
|
|
# remove multiple /:s and ensure ending on /
|
|
src_dir="$(trim_path ${1})/"
|
|
dest_dir="$(trim_path ${2})/"
|
|
src_transform="${3}"
|
|
|
|
# This check can only trigger on the inital, non-recursive call since
|
|
# we create the destination before recursive calls
|
|
if [ ! -d "${dest_dir}" ]
|
|
then
|
|
log_warning_msg "Must link_files into a directory"
|
|
return
|
|
fi
|
|
|
|
find "${src_dir}" -mindepth 1 -maxdepth 1 | \
|
|
while read src
|
|
do
|
|
local dest final_src
|
|
dest="${dest_dir}$(basename "${src}")"
|
|
if [ -d "${src}" ]
|
|
then
|
|
if [ -z "$(ls -A "${src}")" ]
|
|
then
|
|
continue
|
|
fi
|
|
if [ ! -d "${dest}" ]
|
|
then
|
|
mkdir -p "${dest}"
|
|
chown_ref "${src}" "${dest}"
|
|
chmod_ref "${src}" "${dest}"
|
|
fi
|
|
link_files "${src}" "${dest}" "${src_transform}"
|
|
else
|
|
final_src=${src}
|
|
if [ -n "${src_transform}" ]
|
|
then
|
|
final_src="$(echo ${final_src} | sed "${src_transform}")"
|
|
fi
|
|
rm -rf "${dest}" 2> /dev/null
|
|
ln -s "${final_src}" "${dest}"
|
|
chown_ref "${src}" "${dest}"
|
|
fi
|
|
done
|
|
}
|
|
|
|
do_union ()
|
|
{
|
|
local unionmountpoint unionrw unionro
|
|
unionmountpoint="${1}" # directory where the union is mounted
|
|
shift
|
|
unionrw="${1}" # branch where the union changes are stored
|
|
shift
|
|
unionro="${*}" # space separated list of read-only branches (optional)
|
|
|
|
case "${UNIONTYPE}" in
|
|
aufs)
|
|
rw_opt="rw"
|
|
ro_opt="rr+wh"
|
|
noxino_opt="noxino"
|
|
;;
|
|
|
|
unionfs-fuse)
|
|
rw_opt="RW"
|
|
ro_opt="RO"
|
|
;;
|
|
|
|
*)
|
|
rw_opt="rw"
|
|
ro_opt="ro"
|
|
;;
|
|
esac
|
|
|
|
case "${UNIONTYPE}" in
|
|
unionfs-fuse)
|
|
unionmountopts="-o cow -o noinitgroups -o default_permissions -o allow_other -o use_ino -o suid"
|
|
unionmountopts="${unionmountopts} ${unionrw}=${rw_opt}"
|
|
if [ -n "${unionro}" ]
|
|
then
|
|
for rofs in ${unionro}
|
|
do
|
|
unionmountopts="${unionmountopts}:${rofs}=${ro_opt}"
|
|
done
|
|
fi
|
|
( sysctl -w fs.file-max=391524 ; ulimit -HSn 16384
|
|
unionfs-fuse ${unionmountopts} "${unionmountpoint}" ) && \
|
|
( mkdir -p /run/sendsigs.omit.d
|
|
pidof unionfs-fuse >> /run/sendsigs.omit.d/unionfs-fuse || true )
|
|
;;
|
|
|
|
overlayfs)
|
|
# XXX: can multiple unionro be used? (overlayfs only handles two dirs, but perhaps they can be chained?)
|
|
# XXX: and can unionro be optional? i.e. can overlayfs skip lowerdir?
|
|
if echo ${unionro} | grep -q " "
|
|
then
|
|
panic "Multiple lower filesystems are currently not supported with overlayfs (unionro = ${unionro})."
|
|
elif [ -z "${unionro}" ]
|
|
then
|
|
panic "Overlayfs needs at least one lower filesystem (read-only branch)."
|
|
fi
|
|
unionmountopts="-o noatime,lowerdir=${unionro},upperdir=${unionrw}"
|
|
mount -t ${UNIONTYPE} ${unionmountopts} ${UNIONTYPE} "${unionmountpoint}"
|
|
;;
|
|
|
|
*)
|
|
unionmountopts="-o noatime,${noxino_opt},dirs=${unionrw}=${rw_opt}"
|
|
if [ -n "${unionro}" ]
|
|
then
|
|
for rofs in ${unionro}
|
|
do
|
|
unionmountopts="${unionmountopts}:${rofs}=${ro_opt}"
|
|
done
|
|
fi
|
|
mount -t ${UNIONTYPE} ${unionmountopts} ${UNIONTYPE} "${unionmountpoint}"
|
|
;;
|
|
esac
|
|
}
|
|
|
|
get_custom_mounts ()
|
|
{
|
|
# Side-effect: leaves $devices with persistence.conf mounted in /live/persistence
|
|
# Side-effect: prints info to file $custom_mounts
|
|
|
|
local custom_mounts devices bindings links
|
|
custom_mounts=${1}
|
|
shift
|
|
devices=${@}
|
|
|
|
bindings="/tmp/bindings.list"
|
|
links="/tmp/links.list"
|
|
rm -rf ${bindings} ${links} 2> /dev/null
|
|
|
|
for device in ${devices}
|
|
do
|
|
local device_name backing include_list
|
|
device_name="$(basename ${device})"
|
|
backing=$(mount_persistence_media ${device})
|
|
if [ -z "${backing}" ]
|
|
then
|
|
continue
|
|
fi
|
|
|
|
if [ -r "${backing}/${persistence_list}" ]
|
|
then
|
|
include_list="${backing}/${persistence_list}"
|
|
else
|
|
continue
|
|
fi
|
|
|
|
if [ -n "${LIVE_BOOT_DEBUG}" ] && [ -e "${include_list}" ]
|
|
then
|
|
cp ${include_list} /live/persistence/${persistence_list}.${device_name}
|
|
fi
|
|
|
|
while read dir options # < ${include_list}
|
|
do
|
|
if echo ${dir} | grep -qe "^[[:space:]]*\(#.*\)\?$"
|
|
then
|
|
# skipping empty or commented lines
|
|
continue
|
|
fi
|
|
|
|
if trim_path ${dir} | grep -q -e "^[^/]" -e "^/lib" -e "^/lib/live\(/.*\)\?$" -e "^/\(.*/\)\?\.\.\?\(/.*\)\?$"
|
|
then
|
|
log_warning_msg "Skipping unsafe custom mount ${dir}: must be an absolute path containing neither the \".\" nor \"..\" special dirs, and cannot be \"/lib\", or \"/lib/live\" or any of its sub-directories."
|
|
continue
|
|
fi
|
|
|
|
local opt_source opt_link source full_source full_dest
|
|
opt_source=""
|
|
opt_link=""
|
|
for opt in $(echo ${options} | tr ',' ' ');
|
|
do
|
|
case "${opt}" in
|
|
source=*)
|
|
opt_source=${opt#source=}
|
|
;;
|
|
link)
|
|
opt_link="true"
|
|
;;
|
|
union|bind)
|
|
;;
|
|
*)
|
|
log_warning_msg "Skipping custom mount with unknown option: ${opt}"
|
|
continue 2
|
|
;;
|
|
esac
|
|
done
|
|
|
|
source="${dir}"
|
|
if [ -n "${opt_source}" ]
|
|
then
|
|
if echo ${opt_source} | grep -q -e "^/" -e "^\(.*/\)\?\.\.\?\(/.*\)\?$" && [ "${opt_source}" != "." ]
|
|
then
|
|
log_warning_msg "Skipping unsafe custom mount with option source=${opt_source}: must be either \".\" (the media root) or a relative path w.r.t. the media root that contains neither comas, nor the special \".\" and \"..\" path components"
|
|
continue
|
|
else
|
|
source="${opt_source}"
|
|
fi
|
|
fi
|
|
|
|
full_source="$(trim_path ${backing}/${source})"
|
|
full_dest="$(trim_path ${rootmnt}/${dir})"
|
|
if [ -n "${opt_link}" ]
|
|
then
|
|
echo "${device} ${full_source} ${full_dest} ${options}" >> ${links}
|
|
else
|
|
echo "${device} ${full_source} ${full_dest} ${options}" >> ${bindings}
|
|
fi
|
|
done < ${include_list}
|
|
done
|
|
|
|
# We sort the list according to destination so we're sure that
|
|
# we won't hide a previous mount. We also ignore duplicate
|
|
# destinations in a more or less arbitrary way.
|
|
[ -e "${bindings}" ] && sort -k3 -sbu ${bindings} >> ${custom_mounts} && rm ${bindings}
|
|
|
|
# After all mounts are considered we add symlinks so they
|
|
# won't be hidden by some mount.
|
|
[ -e "${links}" ] && cat ${links} >> ${custom_mounts} && rm ${links}
|
|
|
|
# We need to make sure that no two custom mounts have the same sources
|
|
# or are nested; if that is the case, too much weird stuff can happen.
|
|
local prev_source prev_dest
|
|
prev_source="impossible source" # first iteration must not match
|
|
prev_dest=""
|
|
# This sort will ensure that a source /a comes right before a source
|
|
# /a/b so we only need to look at the previous source
|
|
[ -e ${custom_mounts} ] && sort -k2 -b ${custom_mounts} |
|
|
while read device source dest options
|
|
do
|
|
if echo ${source} | grep -qe "^${prev_source}\(/.*\)\?$"
|
|
then
|
|
panic "Two persistence mounts have the same or nested sources: ${source} on ${dest}, and ${prev_source} on ${prev_dest}"
|
|
fi
|
|
prev_source=${source}
|
|
prev_dest=${dest}
|
|
done
|
|
}
|
|
|
|
activate_custom_mounts ()
|
|
{
|
|
local custom_mounts used_devices
|
|
custom_mounts="${1}" # the ouput from get_custom_mounts()
|
|
used_devices=""
|
|
|
|
while read device source dest options # < ${custom_mounts}
|
|
do
|
|
local opt_bind opt_link opt_union
|
|
opt_bind="true"
|
|
opt_link=""
|
|
opt_union=""
|
|
for opt in $(echo ${options} | tr ',' ' ');
|
|
do
|
|
case "${opt}" in
|
|
bind)
|
|
opt_bind="true"
|
|
unset opt_link opt_union
|
|
;;
|
|
link)
|
|
opt_link="true"
|
|
unset opt_bind opt_union
|
|
;;
|
|
union)
|
|
opt_union="true"
|
|
unset opt_bind opt_link
|
|
;;
|
|
esac
|
|
done
|
|
|
|
if [ -n "$(what_is_mounted_on "${dest}")" ]
|
|
then
|
|
if [ "${dest}" = "${rootmnt}" ]
|
|
then
|
|
umount "${dest}"
|
|
else
|
|
log_warning_msg "Skipping custom mount ${dest}: $(what_is_mounted_on "${dest}") is already mounted there"
|
|
continue
|
|
fi
|
|
fi
|
|
|
|
if [ ! -d "${dest}" ]
|
|
then
|
|
# create the destination and delete existing files in
|
|
# its path that are in the way
|
|
path="/"
|
|
for dir in $(echo ${dest} | sed -e 's|/\+| |g')
|
|
do
|
|
path=$(trim_path ${path}/${dir})
|
|
if [ -f ${path} ]
|
|
then
|
|
rm -f ${path}
|
|
fi
|
|
if [ ! -e ${path} ]
|
|
then
|
|
mkdir -p ${path}
|
|
if echo ${path} | grep -qe "^${rootmnt}/*home/[^/]\+"
|
|
then
|
|
# if ${dest} is in /home try fixing proper ownership by assuming that the intended user is the first, which is usually the case
|
|
# FIXME: this should really be handled by live-config since we don't know for sure which uid a certain user has until then
|
|
chown 1000:1000 ${path}
|
|
fi
|
|
fi
|
|
done
|
|
fi
|
|
|
|
# if ${source} doesn't exist on our persistence media
|
|
# we bootstrap it with $dest from the live filesystem.
|
|
# this both makes sense and is critical if we're
|
|
# dealing with /etc or other system dir.
|
|
if [ ! -d "${source}" ]
|
|
then
|
|
if [ -n "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
continue
|
|
elif [ -n "${opt_union}" ] || [ -n "${opt_link}" ]
|
|
then
|
|
# unions and don't need to be bootstrapped
|
|
# link dirs can't be bootstrapped in a sensible way
|
|
mkdir -p "${source}"
|
|
chown_ref "${dest}" "${source}"
|
|
chmod_ref "${dest}" "${source}"
|
|
elif [ -n "${opt_bind}" ]
|
|
then
|
|
# ensure that $dest is not copied *into* $source
|
|
mkdir -p "$(dirname ${source})"
|
|
cp -a "${dest}" "${source}"
|
|
fi
|
|
fi
|
|
|
|
# XXX: If CONFIG_AUFS_ROBR is added to the Debian kernel we can
|
|
# ignore the loop below and set rootfs_dest_backing=$dest
|
|
local rootfs_dest_backing
|
|
rootfs_dest_backing=""
|
|
if [ -n "${opt_link}" ] || [ -n "${opt_union}" ]
|
|
then
|
|
for d in /live/rootfs/*
|
|
do
|
|
if [ -n "${rootmnt}" ]
|
|
then
|
|
fs="${d}/$(echo ${dest} | sed -e "s|${rootmnt}||")"
|
|
else
|
|
fs="${d}/${dest}"
|
|
fi
|
|
if [ -d "${fs}" ]
|
|
then
|
|
rootfs_dest_backing="${rootfs_dest_backing} ${fs}"
|
|
fi
|
|
done
|
|
fi
|
|
|
|
local cow_dir links_source
|
|
if [ -n "${opt_link}" ] && [ -z "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
link_files ${source} ${dest} "s|^/live/|/lib/live/mount/|"
|
|
elif [ -n "${opt_link}" ] && [ -n "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
mkdir -p ${rootmnt}/lib/live/mount/persistence
|
|
links_source=$(mktemp -d ${rootmnt}/lib/live/mount/persistence/links-source-XXXXXX)
|
|
chown_ref ${source} ${links_source}
|
|
chmod_ref ${source} ${links_source}
|
|
# We put the cow dir in the below strange place to
|
|
# make it absolutely certain that the link source
|
|
# has its own directory and isn't nested with some
|
|
# other custom mount (if so that mount's files would
|
|
# be linked, causing breakage.
|
|
cow_dir="/live/overlay/lib/live/mount/persistence/$(basename ${links_source})"
|
|
mkdir -p ${cow_dir}
|
|
chown_ref "${source}" "${cow_dir}"
|
|
chmod_ref "${source}" "${cow_dir}"
|
|
do_union ${links_source} ${cow_dir} ${source} ${rootfs_dest_backing}
|
|
link_files ${links_source} ${dest} "s|^${rootmnt}||"
|
|
elif [ -n "${opt_union}" ] && [ -z "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
do_union ${dest} ${source} ${rootfs_dest_backing}
|
|
elif [ -n "${opt_bind}" ] && [ -z "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
mount --bind "${source}" "${dest}"
|
|
elif [ -n "${opt_bind}" -o -n "${opt_union}" ] && [ -n "${PERSISTENCE_READONLY}" ]
|
|
then
|
|
# bind-mount and union mount are handled the same
|
|
# in read-only mode, but note that rootfs_dest_backing
|
|
# is non-empty (and necessary) only for unions
|
|
cow_dir="/live/overlay/${dest}"
|
|
if [ -e "${cow_dir}" ] && [ -z "${opt_link}" ]
|
|
then
|
|
# If an earlier custom mount has files here
|
|
# it will "block" the current mount's files
|
|
# which is undesirable
|
|
rm -rf "${cow_dir}"
|
|
fi
|
|
mkdir -p ${cow_dir}
|
|
chown_ref "${source}" "${cow_dir}"
|
|
chmod_ref "${source}" "${cow_dir}"
|
|
do_union ${dest} ${cow_dir} ${source} ${rootfs_dest_backing}
|
|
fi
|
|
|
|
PERSISTENCE_IS_ON="1"
|
|
export PERSISTENCE_IS_ON
|
|
|
|
if echo ${used_devices} | grep -qve "^\(.* \)\?${device}\( .*\)\?$"
|
|
then
|
|
used_devices="${used_devices} ${device}"
|
|
fi
|
|
done < ${custom_mounts}
|
|
|
|
echo ${used_devices}
|
|
}
|
|
|
|
is_mountpoint ()
|
|
{
|
|
directory="$1"
|
|
|
|
[ $(stat -fc%d:%D "${directory}") != $(stat -fc%d:%D "${directory}/..") ]
|
|
}
|