frc971/rockpi/build_rootfs.sh

#!/bin/bash

set -eux
set -o pipefail

UBOOT_VERSION=v2022.10

IMAGE="arm64_bullseye_debian.img"
KERNEL_VERSION=6.0.8-rt14-rockpi4b
PARTITION="${IMAGE}.partition"

# TODO(austin): Make sure flex, bison, gcc-aarch64-linux-gnu,
# gcc-arm-none-eabi, device-tree-compiler, swig are installed
# rather than let the user figure this out on their own the hard way.
export CC=aarch64-linux-gnu-

# Reset any existing mounts.
if mount | grep "${PARTITION}/boot" >/dev/null; then
  sudo umount "${PARTITION}/boot"
fi

if mount | grep "${PARTITION}" >/dev/null; then
  sudo umount "${PARTITION}"
fi

LOOPBACK="$(sudo losetup --list | grep "${IMAGE}" | awk '{print $1}')"
if [[ -n "${LOOPBACK}" ]]; then
  echo "Loop still exists..."
  sudo losetup -d "${LOOPBACK}"
fi

# Build bl31.elf.
if [[ ! -e arm-trusted-firmware ]]; then
  git clone https://github.com/ARM-software/arm-trusted-firmware --depth=1
fi

pushd arm-trusted-firmware/
git pull --ff-only
#make CROSS_COMPILE="${CC}" realclean -j "$(nproc)"
make CROSS_COMPILE="${CC}" PLAT=rk3399 -j "$(nproc)"
popd

export BL31="$(pwd)/arm-trusted-firmware/build/rk3399/release/bl31/bl31.elf"

ls -lah "${BL31}"

# Now, build uboot.
if [[ ! -e u-boot ]]; then
  git clone -b "${UBOOT_VERSION} https://github.com/u-boot/u-boot" --depth=1
fi

pushd u-boot/
git fetch origin "${UBOOT_VERSION}"
git reset --hard "${UBOOT_VERSION}"

#make ARCH=arm CROSS_COMPILE="${CC}" distclean -j $(nproc)
make ARCH=arm CROSS_COMPILE="${CC}" rock-pi-4-rk3399_defconfig -j "$(nproc)"
make ARCH=arm CROSS_COMPILE="${CC}" -j "$(nproc)"
echo "Made uboot"
popd


# Now build the base set of partitions.
NEW_IMAGE=0
if [[ ! -e "${IMAGE}" ]]; then
  NEW_IMAGE=1
  dd if=/dev/zero of="${IMAGE}" bs=1 count=0 seek=3G
  dd if=./u-boot/idbloader.img of="${IMAGE}" seek=64 conv=notrunc
  dd if=./u-boot/u-boot.itb of="${IMAGE}" seek=16384 conv=notrunc

  sfdisk "${IMAGE}" <<-__EOF__
16M,64M,L,*
80M,,L,*
__EOF__

  sudo losetup -P -f "${IMAGE}"
  LOOPBACK="$(sudo losetup --list | grep "${IMAGE}" | awk '{print $1}')"

  sudo mkfs.fat "${LOOPBACK}p1"
  sudo mkfs.ext4 -L rootfs "${LOOPBACK}p2"

  sudo losetup -d "${LOOPBACK}"
fi


# Mount them
mkdir -p "${PARTITION}"

sudo losetup -P -f "${IMAGE}"
LOOPBACK="$(sudo losetup --list | grep "${IMAGE}" | awk '{print $1}')"
sudo mount "${LOOPBACK}p2" "${PARTITION}"
if [[ ! -e "${PARTITION}/boot" ]]; then
  sudo mkdir "${PARTITION}/boot"
fi
sudo mount "${LOOPBACK}p1" "${PARTITION}/boot"

# Run the string command as root inside the target.
function target() {
  sudo chroot --userspec=root.root "${PARTITION}" qemu-aarch64-static \
    /bin/bash -c "$1"
}

# Run the string command as the pi user inside the target.
function pi_target() {
  sudo chroot --userspec=pi.pi "${PARTITION}" qemu-aarch64-static \
    /bin/bash -c "$1"
}

# And, if we made a new image, debootstrap to get things going.
if (( NEW_IMAGE == 1 )); then
  sudo debootstrap --arch=arm64 --no-check-gpg --foreign bullseye \
    "${PARTITION}" http://deb.debian.org/debian/
  sudo cp /usr/bin/qemu-aarch64-static "${PARTITION}/usr/bin/"

  target "/debootstrap/debootstrap --second-stage"

  target "useradd -m -p '\$y\$j9T\$85lzhdky63CTj.two7Zj20\$pVY53UR0VebErMlm8peyrEjmxeiRw/rfXfx..9.xet1' -s /bin/bash pi"

else
  sudo cp /usr/bin/qemu-aarch64-static "${PARTITION}/usr/bin/"
fi

# Install the kernel.
sudo rm -rf "${PARTITION}/boot/dtbs/${KERNEL_VERSION}/"
sudo rm -rf "${PARTITION}/lib/modules/${KERNEL_VERSION}/"
sudo mkdir -p "${PARTITION}/lib/modules/"
sudo tar --owner=0 --group=0 --no-same-owner --no-same-permissions -xvf \
  "linux-kernel-${KERNEL_VERSION}.tar.xz" -C "${PARTITION}/boot/" \
  --strip-components=2 ./boot/
sudo tar --strip-components=3 -xvf "linux-kernel-${KERNEL_VERSION}.tar.xz" \
  -C "${PARTITION}/lib/modules/" ./lib/modules

# Now, configure it to start automatically.
sudo mkdir -p ${PARTITION}/boot/extlinux/
cat << __EOF__ | sudo tee "${PARTITION}/boot/extlinux/extlinux.conf"
label Linux ${KERNEL_VERSION}
    kernel /vmlinuz-${KERNEL_VERSION}
    append earlycon=uart8250,mmio32,0xff1a0000 earlyprintk console=ttyS2,1500000n8 root=/dev/mmcblk0p2 ro rootfstype=ext4 rootwait
    fdtdir /dtbs/${KERNEL_VERSION}/
__EOF__

copyfile root.root 644 etc/apt/sources.list.d/bullseye-backports.list
copyfile root.root 644 etc/apt/sources.list.d/frc971.list

target "apt-get update"
target "apt-get -y install -t bullseye-backports systemd"

target "apt-get install -y sudo openssh-server python3 bash-completion git v4l-utils cpufrequtils pmount rsync vim-nox chrony libopencv-calib3d4.5 libopencv-contrib4.5 libopencv-core4.5 libopencv-features2d4.5 libopencv-flann4.5 libopencv-highgui4.5 libopencv-imgcodecs4.5 libopencv-imgproc4.5 libopencv-ml4.5 libopencv-objdetect4.5 libopencv-photo4.5 libopencv-shape4.5 libopencv-stitching4.5 libopencv-superres4.5 libopencv-video4.5 libopencv-videoio4.5 libopencv-videostab4.5 libopencv-viz4.5 libnice10 pmount libnice-dev feh libgstreamer1.0-0 libgstreamer-plugins-base1.0-0 libgstreamer-plugins-bad1.0-0 gstreamer1.0-plugins-base gstreamer1.0-plugins-good gstreamer1.0-plugins-bad gstreamer1.0-plugins-ugly gstreamer1.0-nice usbutils"

target "usermod -a -G sudo pi"
target "usermod -a -G video pi"

function target_mkdir() {
  target "install -d -m $2 -o $(echo $1 | sed 's/\.[^.]*//') -g $(echo $1 | sed 's/[^.]*\.//') $3"
}

function copyfile() {
  sudo cp contents/$3 ${PARTITION}/$3
  sudo chmod $2 ${PARTITION}/$3
  target "chown $1 /$3"
}

copyfile root.root 644 etc/fstab
copyfile root.root 440 etc/sudoers
copyfile root.root 444 etc/default/cpufrequtils
target_mkdir root.root 755 etc/systemd/network
copyfile root.root 644 etc/systemd/network/eth0.network
target_mkdir pi.pi 755 home/pi/.ssh
copyfile pi.pi 600 home/pi/.ssh/authorized_keys
target_mkdir root.root 700 root/bin
copyfile root.root 500 root/bin/grow.sh
copyfile root.root 500 root/bin/change_hostname.sh
copyfile root.root 500 root/bin/deploy_kernel.sh
copyfile root.root 644 etc/systemd/system/grow-rootfs.service
copyfile root.root 644 etc/sysctl.d/sctp.conf
copyfile root.root 644 etc/systemd/logind.conf
copyfile root.root 644 etc/security/limits.d/rt.conf
copyfile root.root 644 etc/systemd/system/frc971.service
copyfile root.root 644 etc/systemd/system/frc971chrt.service
copyfile root.root 644 etc/systemd/system/usb-mount@.service
copyfile root.root 644 etc/udev/rules.d/99-usb-mount.rules

target "apt-get update"
target "apt-get -y install -t bullseye-backports systemd"

target "systemctl enable systemd-networkd"
target "systemctl enable systemd-resolved"
target "systemctl enable grow-rootfs"
target "systemctl enable frc971"
target "systemctl enable frc971chrt"
target "/root/bin/change_hostname.sh pi-971-1"


if [[ ! -e "${PARTITION}/home/pi/.dotfiles" ]]; then
  pi_target "cd /home/pi/ && \
    git clone --separate-git-dir=/home/pi/.dotfiles https://github.com/AustinSchuh/.dotfiles.git tmpdotfiles && \
    rsync --recursive --verbose --exclude .git tmpdotfiles/ /home/pi/ && \
    rm -r tmpdotfiles && \
    git --git-dir=/home/pi/.dotfiles/ --work-tree=/home/pi/ config --local status.showUntrackedFiles no && \
    vim -c \":qa!\""

  target "cd /root/ && \
    git clone --separate-git-dir=/root/.dotfiles https://github.com/AustinSchuh/.dotfiles.git tmpdotfiles && \
    rsync --recursive --verbose --exclude .git tmpdotfiles/ /root/ && rm -r tmpdotfiles && \
    git --git-dir=/root/.dotfiles/ --work-tree=/root/ config --local status.showUntrackedFiles no && \
    vim -c \":qa!\""
fi

target "apt-get clean"

sudo chroot ${PARTITION} qemu-aarch64-static /bin/bash

# TODO(austin): This appears to not be working...  pi_target doesn't apper to be happy
sudo chroot --userspec=pi.pi ${PARTITION} qemu-aarch64-static /bin/bash

# TODO(austin): everything else we were doing to the pi's.
sudo rm ${PARTITION}/usr/bin/qemu-aarch64-static
sudo umount ${PARTITION}/boot
sudo umount ${PARTITION}
rmdir ${PARTITION}