build-SD-rpi.sh

#!/bin/bash

# Batch creation of NextCloudPi image
#
# Copyleft 2017 by Ignacio Nunez Hernanz <nacho _a_t_ ownyourbits _d_o_t_ com>
# GPL licensed (see end of file) * Use at your own risk!
#
# Usage: ./batch.sh <DHCP QEMU image IP>
#

set -e
source buildlib.sh

SIZE=3G                     # Raspbian image size
#CLEAN=0                    # Pass this envvar to skip cleaning download cache
IMG="NextCloudPi_RPi_$( date  "+%m-%d-%y" ).img"
TAR=output/"$( basename "$IMG" .img ).tar.bz2"

##############################################################################

test -f "$TAR" && { echo "$TAR already exists. Skipping... "; exit 0; }
pgrep -f qemu-arm-static &>/dev/null && { echo "qemu-arm-static already running. Abort"; exit 1; }

## preparations

IMG=tmp/"$IMG"

trap clean_chroot_raspbian EXIT
prepare_dirs                   # tmp cache output
download_raspbian "$IMG"
resize_image      "$IMG" "$SIZE"
update_boot_uuid  "$IMG"       # PARTUUID has changed after resize

# make sure we don't accidentally disable first run wizard
rm -f ncp-web/{wizard.cfg,ncp-web.cfg}

## BUILD NCP

echo -e "\e[1m\n[ Build NCP ]\e[0m"
prepare_chroot_raspbian "$IMG"

mkdir raspbian_root/tmp/ncp-build
rsync -Aax --exclude-from .gitignore --exclude *.img --exclude *.bz2 . raspbian_root/tmp/ncp-build

PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
  sudo chroot raspbian_root /bin/bash <<'EOFCHROOT'
    set -e

    # avoid constant annoying spam due to qemu bug - ERROR: ld.so: object '/usr/lib/arm-linux-gnueabihf/libarmmem-${PLATFORM}.so' from /etc/ld.so.preload
    mv /etc/ld.so.preload /

    # mark the image as an image build
    touch /.ncp-image

    # As of 10-2018 this upgrades raspi-kernel and messes up wifi and BTRFS
    #apt-get upgrade -y
    #apt-get dist-upgrade -y

    # As of 03-2018, you dont get a big kernel update by doing
    # this, so better be safe. Might uncomment again in the future
    #$APTINSTALL rpi-update
    #echo -e "y\n" | PRUNE_MODULES=1 rpi-update

    # install everything
    cd /tmp/ncp-build || exit 1
    mkdir -p /usr/local/etc/ncp-config.d
    cp etc/ncp-config.d/nc-nextcloud.cfg /usr/local/etc/ncp-config.d/
    cp etc/ncp.cfg /usr/local/etc/
    cp etc/library.sh /usr/local/etc/
    source etc/library.sh
    install_app    lamp.sh
    install_app    bin/ncp/CONFIG/nc-nextcloud.sh
    run_app_unsafe bin/ncp/CONFIG/nc-nextcloud.sh
    install_app    ncp.sh
    run_app_unsafe bin/ncp/CONFIG/nc-init.sh
    run_app_unsafe post-inst.sh

    # work around dhcpcd Raspbian bug
    # https://lb.raspberrypi.org/forums/viewtopic.php?t=230779
    # https://github.com/nextcloud/nextcloudpi/issues/938
    apt-get update
    apt-get install -y --no-install-recommends haveged
    systemctl enable haveged.service

    # harden SSH further for Raspbian
    sed -i 's|^#PermitRootLogin .*|PermitRootLogin no|' /etc/ssh/sshd_config

    # default user 'pi' for SSH
    cfg="$(jq '.' etc/ncp-config.d/SSH.cfg)"
    cfg="$(jq '.params[1].value = "pi"'        <<<"$cfg")"
    cfg="$(jq '.params[2].value = "raspberry"' <<<"$cfg")"
    cfg="$(jq '.params[3].value = "raspberry"' <<<"$cfg")"
    echo "$cfg" > /usr/local/etc/ncp-config.d/SSH.cfg

    rm -rf /tmp/ncp-build

    mv /ld.so.preload /etc
EOFCHROOT

trap '' EXIT
clean_chroot_raspbian

## pack
pack_image "$IMG" "$TAR"

## test

#set_static_IP "$IMG" "$IP"
#test_image    "$IMG" "$IP" # TODO fix tests

# upload
create_torrent "$TAR"
upload_ftp "$( basename "$TAR" .tar.bz2 )"


# License
#
# This script is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This script is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this script; if not, write to the
# Free Software Foundation, Inc., 59 Temple Place, Suite 330,
# Boston, MA  02111-1307  USA