create projects

.github/workflows/build.yml

@@ -0,0 +1,11 @@
+name: build
+on:
+  schedule: [{ cron: "0 21 * * sun" }] # Every Monday at 6am Asia/Tokyo UTC+9
+jobs:
+  main:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - run: docker login docker.pkg.github.com -u "${GITHUB_ACTOR}" -p "${{ github.token }}"
+      - run: bin/build
+      - run: docker-compose push

.gitignore

@@ -0,0 +1,3 @@
+/apkovl/
+/cache/
+/dist/

README.md

@@ -0,0 +1,47 @@
+# Yama
+
+Raspberry Pi 向け OS のビルドするためのツール群
+
+- Alpine Linux ベース (armhf)
+- WiFi 対応
+- その他オレオレカスタマイズ
+
+## ビルド
+
+```sh
+bin/build
+```
+
+### SD カードのフォーマット
+
+- FAT32 (LBA)
+- boot フラグ付ける
+- ボリュームラベル付けない
+
+### SD カードに書き込み
+
+```sh
+rsync -a dist/ /path/to/sd/
+```
+
+### 前提条件
+
+- Docker Compose
+- curl
+- grep
+- jq
+- ruby
+- ssh-keygen
+- bash
+
+### WiFi の設定
+
+`apkovl/etc/wpa_supplicant/wpa_supplicant.conf` 配置後ビルド
+
+```sh
+bin/conf-gen | tee apkovl/etc/wpa_supplicant/wpa_supplicant.conf
+```
+
+### ssh の設定
+
+`apkovl/root/.ssh/authorized_keys` をパーミッション 600 で配置後ビルド

apkovl/etc/apk/cache

@@ -0,0 +1 @@
+/media/mmcblk0p1/cache

apkovl/etc/apk/repositories

@@ -0,0 +1,3 @@
+/media/mmcblk0p1/apks
+http://dl-cdn.alpinelinux.org/alpine/v3.12/main
+http://dl-cdn.alpinelinux.org/alpine/v3.12/community

apkovl/etc/apk/world

@@ -0,0 +1,3 @@
+alpine-base
+openssh
+wpa_supplicant

apkovl/etc/network/interfaces

@@ -0,0 +1,6 @@
+auto lo
+iface lo inet loopback
+
+auto wlan0
+iface wlan0 inet dhcp
+        hostname localhost

apkovl/etc/runlevels/boot/networking

@@ -0,0 +1 @@
+/etc/init.d/networking

apkovl/etc/runlevels/boot/wpa_supplicant

@@ -0,0 +1 @@
+/etc/init.d/wpa_supplicant

apkovl/etc/runlevels/default/ntpd

@@ -0,0 +1 @@
+/etc/init.d/ntpd

apkovl/etc/runlevels/default/sshd

@@ -0,0 +1 @@
+/etc/init.d/sshd

apkovl/etc/ssh/sshd_config

@@ -0,0 +1,4 @@
+AuthorizedKeysFile .ssh/authorized_keys
+PasswordAuthentication no
+ChallengeResponseAuthentication no
+Subsystem sftp /usr/lib/ssh/sftp-server

bin/build

@@ -0,0 +1,15 @@
+#!/bin/sh
+# ビルド
+# Usage: bin/build
+# Required: docker-compose
+cd -- "$(dirname -- "$0")/.."
+set -eux
+version="$(bin/version)"
+bin/import "${version}" docker.pkg.github.com/kou029w/yama/minirootfs
+rm -rf dist
+mkdir dist
+bin/download "${version}" dist
+docker-compose run --rm minirootfs sh -c 'apk update && apk add'
+ssh-keygen -A -f apkovl
+cp -a cache dist
+tar czf dist/localhost.apkovl.tar.gz --owner=0 --group=0 -C apkovl .

bin/conf-gen

@@ -0,0 +1,9 @@
+#!/bin/bash
+# wpa_supplicant.conf の生成
+# Usage: bin/conf-gen
+# Required: wpa_supplicant grep
+set -euo pipefail
+read -p 'Please enter ssid: ' ssid
+read -p 'Please enter passphrase: ' -s passphrase
+wpa_passphrase "$ssid" "$passphrase" \
+  | grep -v '#psk='

bin/download

@@ -0,0 +1,8 @@
+#!/bin/sh
+# ベースのイメージをダウンロード
+# Usage: bin/download version dist
+# Required: curl
+set -eu
+base="http://dl-cdn.alpinelinux.org/alpine/latest-stable/releases/armhf"
+curl "${base}/alpine-rpi-${1}-armhf.tar.gz" \
+  | tar xzf - -C "${2}"

bin/import

@@ -0,0 +1,7 @@
+#!/bin/sh
+# イメージを取得
+# Usage: bin/import version my-image-name
+# Required: docker
+set -eux
+base="http://dl-cdn.alpinelinux.org/alpine/latest-stable/releases/armhf"
+docker import "${base}/alpine-minirootfs-${1}-armhf.tar.gz" "${2}"

bin/version

@@ -0,0 +1,10 @@
+#!/bin/sh
+# 最新のバージョンを取得
+# Usage: bin/version
+# Required: curl grep jq ruby
+set -eu
+base="http://dl-cdn.alpinelinux.org/alpine/latest-stable/releases/armhf"
+curl -s "${base}/latest-releases.yaml" \
+  | ruby -ryaml -rjson -e 'puts(YAML.load($<).to_json)' \
+  | jq -r '.[] | select(.title == "Raspberry Pi").file' \
+  | grep -Eo '[0-9]+\.[0-9]+\.[0-9]+'

docker-compose.yml

@@ -0,0 +1,8 @@
+version: "3"
+services:
+  minirootfs:
+    image: docker.pkg.github.com/kou029w/yama/minirootfs
+    volumes:
+      - ./cache:/etc/apk/cache
+      - ./apkovl/etc/apk/repositories:/etc/apk/repositories
+      - ./apkovl/etc/apk/world:/etc/apk/world