Build native FreeBSD world and kernel artifacts
This commit is contained in:
@@ -0,0 +1,71 @@
|
||||
(use-modules (fruix system freebsd)
|
||||
(fruix packages freebsd))
|
||||
|
||||
(define phase13-operating-system
|
||||
(operating-system
|
||||
#:host-name "fruix-freebsd"
|
||||
#:kernel freebsd-native-kernel
|
||||
#:bootloader freebsd-bootloader
|
||||
#:base-packages (list freebsd-native-world)
|
||||
#:groups (list (user-group #:name "wheel" #:gid 0 #:system? #t)
|
||||
(user-group #:name "sshd" #:gid 22 #:system? #t)
|
||||
(user-group #:name "_dhcp" #:gid 65 #:system? #t)
|
||||
(user-group #:name "operator" #:gid 1000 #:system? #f))
|
||||
#:users (list (user-account #:name "root"
|
||||
#:uid 0
|
||||
#:group "wheel"
|
||||
#:comment "Charlie &"
|
||||
#:home "/root"
|
||||
#:shell "/bin/sh"
|
||||
#:system? #t)
|
||||
(user-account #:name "sshd"
|
||||
#:uid 22
|
||||
#:group "sshd"
|
||||
#:comment "Secure Shell Daemon"
|
||||
#:home "/var/empty"
|
||||
#:shell "/usr/sbin/nologin"
|
||||
#:system? #t)
|
||||
(user-account #:name "_dhcp"
|
||||
#:uid 65
|
||||
#:group "_dhcp"
|
||||
#:comment "dhcp programs"
|
||||
#:home "/var/empty"
|
||||
#:shell "/usr/sbin/nologin"
|
||||
#:system? #t)
|
||||
(user-account #:name "operator"
|
||||
#:uid 1000
|
||||
#:group "operator"
|
||||
#:supplementary-groups '("wheel")
|
||||
#:comment "Fruix Operator"
|
||||
#:home "/home/operator"
|
||||
#:shell "/bin/sh"
|
||||
#:system? #f))
|
||||
#:file-systems (list (file-system #:device "/dev/gpt/fruix-root"
|
||||
#:mount-point "/"
|
||||
#:type "ufs"
|
||||
#:options "rw"
|
||||
#:needed-for-boot? #t)
|
||||
(file-system #:device "devfs"
|
||||
#:mount-point "/dev"
|
||||
#:type "devfs"
|
||||
#:options "rw"
|
||||
#:needed-for-boot? #t)
|
||||
(file-system #:device "tmpfs"
|
||||
#:mount-point "/tmp"
|
||||
#:type "tmpfs"
|
||||
#:options "rw,size=64m"))
|
||||
#:services '(shepherd ready-marker sshd)
|
||||
#:loader-entries '(("autoboot_delay" . "1")
|
||||
("boot_multicons" . "YES")
|
||||
("boot_serial" . "YES")
|
||||
("console" . "comconsole,vidconsole"))
|
||||
#:rc-conf-entries '(("clear_tmp_enable" . "NO")
|
||||
("hostid_enable" . "NO")
|
||||
("sendmail_enable" . "NONE")
|
||||
("sshd_enable" . "YES")
|
||||
("ifconfig_xn0" . "SYNCDHCP")
|
||||
("ifconfig_em0" . "SYNCDHCP")
|
||||
("ifconfig_vtnet0" . "SYNCDHCP"))
|
||||
#:init-mode 'shepherd-pid1
|
||||
#:ready-marker "/var/lib/fruix/ready"
|
||||
#:root-authorized-keys '("__ROOT_AUTHORIZED_KEY__")))
|
||||
224
tests/system/run-phase13-native-base-build.sh
Executable file
224
tests/system/run-phase13-native-base-build.sh
Executable file
@@ -0,0 +1,224 @@
|
||||
#!/bin/sh
|
||||
set -eu
|
||||
|
||||
project_root=${PROJECT_ROOT:-$(pwd)}
|
||||
script_dir=$(CDPATH= cd -- "$(dirname "$0")" && pwd)
|
||||
fruix_cmd=$project_root/bin/fruix
|
||||
os_template=${OS_TEMPLATE:-$script_dir/phase13-native-base-pid1-operating-system.scm.in}
|
||||
system_name=${SYSTEM_NAME:-phase13-operating-system}
|
||||
store_dir=${STORE_DIR:-/frx/store}
|
||||
metadata_target=${METADATA_OUT:-}
|
||||
root_authorized_key_file=${ROOT_AUTHORIZED_KEY_FILE:-$HOME/.ssh/id_ed25519.pub}
|
||||
|
||||
[ -x "$fruix_cmd" ] || {
|
||||
echo "fruix command is not executable: $fruix_cmd" >&2
|
||||
exit 1
|
||||
}
|
||||
[ -f "$os_template" ] || {
|
||||
echo "missing operating-system template: $os_template" >&2
|
||||
exit 1
|
||||
}
|
||||
[ -f "$root_authorized_key_file" ] || {
|
||||
echo "missing root authorized key file: $root_authorized_key_file" >&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
cleanup=0
|
||||
if [ -n "${WORKDIR:-}" ]; then
|
||||
workdir=$WORKDIR
|
||||
mkdir -p "$workdir"
|
||||
else
|
||||
workdir=$(mktemp -d /tmp/fruix-phase13-native-build.XXXXXX)
|
||||
cleanup=1
|
||||
fi
|
||||
if [ "${KEEP_WORKDIR:-0}" -eq 1 ]; then
|
||||
cleanup=0
|
||||
fi
|
||||
|
||||
cleanup_workdir() {
|
||||
if [ "$cleanup" -eq 1 ]; then
|
||||
rm -rf "$workdir" 2>/dev/null || sudo rm -rf "$workdir"
|
||||
fi
|
||||
}
|
||||
trap cleanup_workdir EXIT INT TERM
|
||||
|
||||
phase13_os_file=$workdir/phase13-native-base-operating-system.scm
|
||||
build_out_a=$workdir/build-a.txt
|
||||
build_out_b=$workdir/build-b.txt
|
||||
metadata_file=$workdir/phase13-native-base-build-metadata.txt
|
||||
root_authorized_key=$(tr -d '\n' < "$root_authorized_key_file")
|
||||
sed "s|__ROOT_AUTHORIZED_KEY__|$root_authorized_key|g" "$os_template" > "$phase13_os_file"
|
||||
|
||||
action_env() {
|
||||
sudo env \
|
||||
HOME="$HOME" \
|
||||
GUILE_AUTO_COMPILE=0 \
|
||||
FRUIX_FREEBSD_BUILD_JOBS="${FRUIX_FREEBSD_BUILD_JOBS:-8}" \
|
||||
GUIX_SOURCE_DIR="${GUIX_SOURCE_DIR:-$HOME/repos/guix}" \
|
||||
GUILE_BIN="${GUILE_BIN:-/tmp/guile-freebsd-validate-install/bin/guile}" \
|
||||
GUILE_EXTRA_PREFIX="${GUILE_EXTRA_PREFIX:-/tmp/guile-gnutls-freebsd-validate-install}" \
|
||||
SHEPHERD_PREFIX="${SHEPHERD_PREFIX:-/tmp/shepherd-freebsd-validate-install}" \
|
||||
"$@"
|
||||
}
|
||||
|
||||
printf 'Using fruix command: %s\n' "$fruix_cmd"
|
||||
printf 'Working directory: %s\n' "$workdir"
|
||||
printf 'Store directory: %s\n' "$store_dir"
|
||||
printf 'OS template: %s\n' "$os_template"
|
||||
|
||||
action_env "$fruix_cmd" system build "$phase13_os_file" --system "$system_name" --store "$store_dir" >"$build_out_a"
|
||||
action_env "$fruix_cmd" system build "$phase13_os_file" --system "$system_name" --store "$store_dir" >"$build_out_b"
|
||||
|
||||
closure_path=$(sed -n 's/^closure_path=//p' "$build_out_a")
|
||||
closure_rebuild_path=$(sed -n 's/^closure_path=//p' "$build_out_b")
|
||||
kernel_store=$(sed -n 's/^kernel_store=//p' "$build_out_a")
|
||||
bootloader_store=$(sed -n 's/^bootloader_store=//p' "$build_out_a")
|
||||
host_base_store_count=$(sed -n 's/^host_base_store_count=//p' "$build_out_a")
|
||||
host_base_stores=$(sed -n 's/^host_base_stores=//p' "$build_out_a")
|
||||
native_base_store_count=$(sed -n 's/^native_base_store_count=//p' "$build_out_a")
|
||||
native_base_stores=$(sed -n 's/^native_base_stores=//p' "$build_out_a")
|
||||
fruix_runtime_store_count=$(sed -n 's/^fruix_runtime_store_count=//p' "$build_out_a")
|
||||
fruix_runtime_stores=$(sed -n 's/^fruix_runtime_stores=//p' "$build_out_a")
|
||||
host_base_provenance_file=$(sed -n 's/^host_base_provenance_file=//p' "$build_out_a")
|
||||
store_layout_file=$(sed -n 's/^store_layout_file=//p' "$build_out_a")
|
||||
reference_count=$(sed -n 's/^reference_count=//p' "$build_out_a")
|
||||
generated_file_count=$(sed -n 's/^generated_file_count=//p' "$build_out_a")
|
||||
|
||||
[ -n "$closure_path" ] || { echo "missing closure path" >&2; exit 1; }
|
||||
[ "$closure_path" = "$closure_rebuild_path" ] || {
|
||||
echo "native-base closure path was not reproducible: $closure_path != $closure_rebuild_path" >&2
|
||||
exit 1
|
||||
}
|
||||
case "$kernel_store" in
|
||||
/frx/store/*-freebsd-native-kernel-15.0-STABLE) : ;;
|
||||
*) echo "unexpected native kernel store path: $kernel_store" >&2; exit 1 ;;
|
||||
esac
|
||||
case "$bootloader_store" in
|
||||
/frx/store/*-freebsd-bootloader-15.0-STABLE) : ;;
|
||||
*) echo "unexpected bootloader store path: $bootloader_store" >&2; exit 1 ;;
|
||||
esac
|
||||
[ "$host_base_store_count" = 1 ] || { echo "expected exactly one host-staged base store, got: $host_base_store_count" >&2; exit 1; }
|
||||
[ "$native_base_store_count" = 2 ] || { echo "expected exactly two native base stores, got: $native_base_store_count" >&2; exit 1; }
|
||||
[ -n "$fruix_runtime_store_count" ] || { echo "missing Fruix runtime store count" >&2; exit 1; }
|
||||
[ -n "$reference_count" ] || { echo "missing reference count" >&2; exit 1; }
|
||||
[ -n "$generated_file_count" ] || { echo "missing generated file count" >&2; exit 1; }
|
||||
|
||||
world_store=$(printf '%s\n' "$native_base_stores" | tr ',' '\n' | grep 'freebsd-native-world-15.0-STABLE$' | head -n 1)
|
||||
[ -n "$world_store" ] || { echo "failed to recover native world store from metadata" >&2; exit 1; }
|
||||
|
||||
world_build_info=$world_store/.freebsd-native-build-info.scm
|
||||
kernel_build_info=$kernel_store/.freebsd-native-build-info.scm
|
||||
[ -f "$world_build_info" ] || { echo "missing world build info: $world_build_info" >&2; exit 1; }
|
||||
[ -f "$kernel_build_info" ] || { echo "missing kernel build info: $kernel_build_info" >&2; exit 1; }
|
||||
[ -f "$host_base_provenance_file" ] || { echo "missing host base provenance file: $host_base_provenance_file" >&2; exit 1; }
|
||||
[ -f "$store_layout_file" ] || { echo "missing store layout file: $store_layout_file" >&2; exit 1; }
|
||||
|
||||
for path in \
|
||||
"$kernel_store/boot/kernel/kernel" \
|
||||
"$kernel_store/boot/kernel/linker.hints" \
|
||||
"$world_store/bin/sh" \
|
||||
"$world_store/sbin/init" \
|
||||
"$world_store/etc/rc" \
|
||||
"$world_store/usr/sbin/sshd" \
|
||||
"$world_store/sbin/dhclient" \
|
||||
"$world_store/usr/bin/cap_mkdb" \
|
||||
"$world_store/usr/sbin/pwd_mkdb" \
|
||||
"$world_store/usr/share/locale/C.UTF-8/LC_CTYPE"
|
||||
do
|
||||
[ -e "$path" ] || {
|
||||
echo "required native world/kernel path missing: $path" >&2
|
||||
exit 1
|
||||
}
|
||||
done
|
||||
|
||||
[ ! -e "$world_store/usr/share/man" ] || { echo "native world still contains pruned man pages" >&2; exit 1; }
|
||||
[ ! -e "$world_store/usr/tests" ] || { echo "native world still contains pruned tests" >&2; exit 1; }
|
||||
|
||||
grep -F 'native-base-stores' "$store_layout_file" >/dev/null || {
|
||||
echo "store layout metadata is missing native-base-stores" >&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
grep -F 'source-root . "/usr/src"' "$world_build_info" >/dev/null || {
|
||||
echo "world build info is missing /usr/src provenance" >&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
grep -F 'source-root . "/usr/src"' "$kernel_build_info" >/dev/null || {
|
||||
echo "kernel build info is missing /usr/src provenance" >&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
world_source_tree_sha256=$(grep -o 'source-tree-sha256 . "[^"]*"' "$world_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
kernel_source_tree_sha256=$(grep -o 'source-tree-sha256 . "[^"]*"' "$kernel_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
world_build_root=$(grep -o 'build-root . "[^"]*"' "$world_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
kernel_build_root=$(grep -o 'build-root . "[^"]*"' "$kernel_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
world_build_log=$(grep -o 'buildworld-log . "[^"]*"' "$world_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
kernel_build_log=$(grep -o 'buildkernel-log . "[^"]*"' "$kernel_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
world_install_log=$(grep -o 'install-log . "[^"]*"' "$world_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
kernel_install_log=$(grep -o 'install-log . "[^"]*"' "$kernel_build_info" | head -n 1 | cut -d'"' -f2)
|
||||
|
||||
[ -n "$world_source_tree_sha256" ] || { echo "missing world source-tree hash" >&2; exit 1; }
|
||||
[ -n "$kernel_source_tree_sha256" ] || { echo "missing kernel source-tree hash" >&2; exit 1; }
|
||||
[ "$world_source_tree_sha256" = "$kernel_source_tree_sha256" ] || {
|
||||
echo "native world/kernel source-tree hashes differ: $world_source_tree_sha256 != $kernel_source_tree_sha256" >&2
|
||||
exit 1
|
||||
}
|
||||
[ "$world_build_root" = "$kernel_build_root" ] || {
|
||||
echo "native world/kernel build roots differ: $world_build_root != $kernel_build_root" >&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
for path in "$world_build_log" "$kernel_build_log" "$world_install_log" "$kernel_install_log"; do
|
||||
[ -f "$path" ] || {
|
||||
echo "expected native build log missing: $path" >&2
|
||||
exit 1
|
||||
}
|
||||
done
|
||||
|
||||
closure_base=$(basename "$closure_path")
|
||||
cat >"$metadata_file" <<EOF
|
||||
workdir=$workdir
|
||||
phase13_os_file=$phase13_os_file
|
||||
closure_path=$closure_path
|
||||
closure_rebuild_path=$closure_rebuild_path
|
||||
closure_base=$closure_base
|
||||
kernel_store=$kernel_store
|
||||
world_store=$world_store
|
||||
bootloader_store=$bootloader_store
|
||||
host_base_store_count=$host_base_store_count
|
||||
host_base_stores=$host_base_stores
|
||||
native_base_store_count=$native_base_store_count
|
||||
native_base_stores=$native_base_stores
|
||||
fruix_runtime_store_count=$fruix_runtime_store_count
|
||||
fruix_runtime_stores=$fruix_runtime_stores
|
||||
host_base_provenance_file=$host_base_provenance_file
|
||||
store_layout_file=$store_layout_file
|
||||
reference_count=$reference_count
|
||||
generated_file_count=$generated_file_count
|
||||
world_source_tree_sha256=$world_source_tree_sha256
|
||||
kernel_source_tree_sha256=$kernel_source_tree_sha256
|
||||
world_build_root=$world_build_root
|
||||
kernel_build_root=$kernel_build_root
|
||||
world_build_log=$world_build_log
|
||||
kernel_build_log=$kernel_build_log
|
||||
world_install_log=$world_install_log
|
||||
kernel_install_log=$kernel_install_log
|
||||
frontend_invocation=$fruix_cmd system build
|
||||
native_base_model=freebsd-world+freebsd-kernel-from-usr-src
|
||||
init_mode=shepherd-pid1
|
||||
EOF
|
||||
|
||||
if [ -n "$metadata_target" ]; then
|
||||
mkdir -p "$(dirname "$metadata_target")"
|
||||
cp "$metadata_file" "$metadata_target"
|
||||
fi
|
||||
|
||||
printf 'PASS phase13-native-base-build\n'
|
||||
printf 'Work directory: %s\n' "$workdir"
|
||||
printf 'Metadata file: %s\n' "$metadata_file"
|
||||
if [ -n "$metadata_target" ]; then
|
||||
printf 'Copied metadata to: %s\n' "$metadata_target"
|
||||
fi
|
||||
printf '%s\n' '--- metadata ---'
|
||||
cat "$metadata_file"
|
||||
Reference in New Issue
Block a user