diff --git a/.gitignore b/.gitignore index 1e0a55d..8e41205 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ out/ **/**.iso -/*.txt \ No newline at end of file +/*.txt +**/**.qcow2 diff --git a/README.md b/README.md index ee8f4fc..ea7d9ed 100644 --- a/README.md +++ b/README.md @@ -24,7 +24,10 @@ $ docker run --rm \ -v "./efi-autoboot.patch:/efi-autoboot.patch:ro" \ -v "./permissions.patch:/permissions.patch:ro" \ -v "./aur-mirror.patch:/aur-mirror.patch:ro" \ + -v "./offline-mirror.patch:/offline-mirror.patch:ro" \ -v "./check_connectivity.sh:/check_connectivity.sh:ro" \ + -v "./omarchy.packages:/omarchy.packages:ro" \ + -v "./archinstall.packages:/archinstall.packages:ro" \ archlinux/archlinux:latest /build_iso.sh ``` diff --git a/archinstall.packages b/archinstall.packages new file mode 100644 index 0000000..d9c4a9a --- /dev/null +++ b/archinstall.packages @@ -0,0 +1,30 @@ +nano +vim +openssh +htop +wireless_tools +wpa_supplicant +smartmontools +xdg-utils +dunst +kitty +dolphin +wofi +qt5-wayland +qt6-wayland +polkit-kde-agent +grim +xorg-server +xorg-xinit +mesa +xf86-video-amdgpu +xf86-video-ati +xf86-video-nouveau +libva-mesa-driver +libva-intel-driver +vulkan-radeon +vulkan-intel +vulkan-nouveau +sddm +efibootmgr +intel-media-driver diff --git a/aur-mirror.patch b/aur-mirror.patch index 6a33d78..fc0478e 100644 --- a/aur-mirror.patch +++ b/aur-mirror.patch @@ -1,10 +1,10 @@ --- a/pacman.conf +++ b/pacman.conf -@@ -98,3 +98,7 @@ +@@ -98,3 +98,7 @@ Include = /etc/pacman.d/mirrorlist #[custom] #SigLevel = Optional TrustAll #Server = file:///home/custompkgs + +[aur] +SigLevel = Optional TrustAll -+Server = file:///var/cache/omarchy/mirror/aur/ ++Server = https://omarchy.blyg.se/$repo/os/$arch/ diff --git a/build_iso.sh b/build_iso.sh index ab360ad..3e49107 100755 --- a/build_iso.sh +++ b/build_iso.sh @@ -6,10 +6,10 @@ set -e # used to build the ISO. pacman-key --init pacman --noconfirm -Sy archlinux-keyring -pacman --noconfirm -Sy archiso git python-pip sudo base-devel +pacman --noconfirm -Sy archiso git python-pip sudo base-devel jq wget cache_dir=$(realpath --canonicalize-missing ~/.cache/omarchy/iso_$(date +%Y-%m-%d)) -aur_cache_dir="/var/cache/omarchy/mirror/aur" +offline_mirror_dir="$cache_dir/airootfs/var/cache/omarchy/mirror/offline" # We need to fiddle with pip settings # in order to install to the correct place @@ -19,58 +19,89 @@ export PIP_ROOT_USER_ACTION="ignore" export PIP_NO_WARN_SCRIPT_LOCATION=1 export PIP_BREAK_SYSTEM_PACKAGES=1 -# Arch packages to add to the archiso profile packages -# As a base example (the TUI packages needs to be here) +# These packages will be installed **into** the ISO, and +# won't be available to either archinstall or omarchy installer. +python_packages=( + terminaltexteffects +) arch_packages=( git impala gum openssl wget -) -# These are Python specific packages that will get installed -# onto the ISO -python_packages=( - terminaltexteffects -) -aur_packages=( - tzupdate + tzupdate # This is technically an AUR package ) -build_aur() { - PACKAGE=$1 - BUILDDEST=$2 +prepare_offline_mirror() { + # Certain packages in omarchy.packages are AUR packages. + # These needs to be pre-built and placed in https://omarchy.blyg.se/aur/os/x86_64/ + echo "Reading and combining packages from all package files..." + + # Combine all packages from both files into one array + all_packages=() + for package_file in omarchy.packages archinstall.packages; do + if [ -f "$package_file" ]; then + echo "Reading $package_file..." + while IFS= read -r package; do + # Skip empty lines and comments + [[ -z "$package" || "$package" =~ ^[[:space:]]*# ]] && continue + all_packages+=("$package") + done < "$package_file" + fi + done - mkdir -p /etc/sudoers.d/ - useradd --create-home --shell /bin/bash aurbuilder - echo "aurbuilder ALL=(ALL:ALL) NOPASSWD: ALL" > /etc/sudoers.d/aurbuilder + if [ ${#all_packages[@]} -gt 0 ]; then + # This assume we've manually built all the AUR packages + # and made them accessible "online" during the build process: + (cd $cache_dir/ && git apply /aur-mirror.patch) - sudo -H -u aurbuilder git clone "https://aur.archlinux.org/$1.git" "/home/aurbuilder/$1" + mkdir -p /tmp/offlinedb + + # Change DownloadUser from alpm to root to fix permission issues when downloading to cache dir + # TODO: We should move the build root from /root/.cache/omarchy/ into /var/cache instead. + # That way alpm:alpm will have access, which is the default pacman download user now days. + sed -i 's/^#*DownloadUser = alpm/DownloadUser = root/' /etc/pacman.conf - # TODO: We should add --sign here, to sign these packages - # with a key that we trust and want to use. It's only used internally in the ISO. - # but it would make sure we don't install unsigned packages even during our build process. - (cd "/home/aurbuilder/$1" && sudo -H -u aurbuilder makepkg --clean --cleanbuild --force --noconfirm --needed --syncdeps --rmdeps) - mv "/home/aurbuilder/$1/"*.pkg.tar.zst "$BUILDDEST/" + # Download all the packages to the offline mirror inside the ISO + pacman --config $cache_dir/pacman.conf \ + --noconfirm -Syw "${all_packages[@]}" \ + --cachedir $offline_mirror_dir/ \ + --dbpath /tmp/offlinedb + + repo-add --new "$offline_mirror_dir/offline.db.tar.gz" "$offline_mirror_dir/"*.pkg.tar.zst - rm -rf "/home/aurbuilder/$1" - - rm /etc/sudoers.d/aurbuilder - USERGROUPS_ENAB=yes userdel aurbuilder + rm "$cache_dir/airootfs/etc/pacman.d/hooks/uncomment-mirrors.hook" + + # Revert the "online" AUR patch, as we'll replace it with the proper + # offline patched mirror for the ISO later. + (cd $cache_dir && git apply -R /aur-mirror.patch) + fi } -set_geo_mirror() { - # https://geo.mirror.pkgbuild.com/ - rm "$cache_dir/airootfs/etc/pacman.d/hooks/uncomment-mirrors.hook" - echo "Server = $1" > "$cache_dir/airootfs/etc/pacman.d/mirrorlist" +make_archiso_offline() { + # This function will simply disable any online activity we have. + # for instance the reflector.service which tries to optimize + # mirror order by fetching the latest mirror list by default. + # + # We'll leave some things online, like NTP as that won't + # interfere with anything, on the flip side it will help if we do + # have internet connectivity. + + rm "$cache_dir/airootfs/etc/systemd/system/multi-user.target.wants/reflector.service" + rm -rf "$cache_dir/airootfs/etc/systemd/system/reflector.service.d" + rm -rf "$cache_dir/airootfs/etc/xdg/reflector" } mkdir -p $cache_dir/ -mkdir -p $aur_cache_dir/ +mkdir -p $offline_mirror_dir/ # We base our ISO on the official arch ISO (releng) config cp -r archiso/configs/releng/* $cache_dir/ +prepare_offline_mirror +make_archiso_offline + # We clone the installer, and move it to the root users home folder # since this is the default user in the official releng ISO profile. git clone https://github.com/omacom-io/omarchy-installer "$cache_dir/airootfs/root/omarchy-installer" @@ -78,6 +109,8 @@ mv "$cache_dir/airootfs/root/omarchy-installer/installer" "$cache_dir/airootfs/r mv "$cache_dir/airootfs/root/omarchy-installer/logo.txt" "$cache_dir/airootfs/root/logo.txt" rm -rf "$cache_dir/airootfs/root/omarchy-installer" +git clone -b dev --single-branch https://github.com/basecamp/omarchy.git "$cache_dir/airootfs/root/omarchy" + # Copy in the connectivity check script cp /check_connectivity.sh "$cache_dir/airootfs/root/check_connectivity.sh" @@ -94,32 +127,47 @@ cat <<- _EOF_ | tee $cache_dir/airootfs/root/.automated_script.sh --config user_configuration.json \ --creds user_credentials.json \ --silent && \ - wget -qO- https://omarchy.org/install | bash + export OMARCHY_USER=\`ls /mnt/home/\` && \ + + mkdir -p /mnt/home/\$OMARCHY_USER/.local/share/ && \ + cp -r /root/omarchy "/mnt/home/\$OMARCHY_USER/.local/share/" && \ + chown -R 1000:1000 "/mnt/home/\$OMARCHY_USER/.local/" && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/apps/mimetypes.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/apps/webapps.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/apps/xtras.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/detect-keyboard-layout.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/fix-fkeys.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/network.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/nvidia.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/power.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/timezones.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/config.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/identification.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/increase-sudo-tries.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/config/login.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/desktop/asdcontrol.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/desktop/bluetooth.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/desktop/fonts.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/desktop/hyprlandia.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/desktop/printer.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/desktop/theme.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/desktop/desktop.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/development/development.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/development/nvim.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/development/ruby.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/development/docker.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/development/firewall.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/development/terminal.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/preflight/migrations.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/preflight/aur.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/preflight/guard.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/preflight/gum.sh && \ + chmod +x /mnt/home/\$OMARCHY_USER/.local/share/omarchy/install/preflight/tte.sh && \ + HOME=/home/\$OMARCHY_USER arch-chroot -u \$OMARCHY_USER /mnt/ /bin/bash -c "source /home/\$OMARCHY_USER/.local/share/omarchy/install.sh" fi _EOF_ -# Add Arch packages to the archiso profile packages -for package in "${arch_packages[@]}"; do - echo "$package" >> "$cache_dir/packages.x86_64" -done - -# We have to build the AUR packages one by one -# and place them in a local mirror for the ISO build process. -# Otherwise the ISO won't be able to source them -if [ ${#aur_packages[@]} -gt 0 ]; then - for package in "${aur_packages[@]}"; do - if build_aur "$package" "$aur_cache_dir/"; then - echo "$package" >> "$cache_dir/packages.x86_64" - fi - done - - ls -l "$aur_cache_dir/" - repo-add --new "$aur_cache_dir/aur.db.tar.gz" "$aur_cache_dir/"*.pkg.tar.zst - - # And patch in the mirror to the pacman.conf to include our AUR repo - (cd $cache_dir/ && git apply /aur-mirror.patch) -fi - # We patch permissions, grub and efi loaders to our liking: (cd $cache_dir/ && git apply /permissions.patch) (cd $cache_dir/ && git apply /grub-autoboot.patch) @@ -137,6 +185,38 @@ rm "$cache_dir/airootfs/etc/motd" # file system. pip install "${python_packages[@]}" -set_geo_mirror "https://geo.mirror.pkgbuild.com/" +# Add our needed packages to packages.x86_64 +printf '%s\n' "${arch_packages[@]}" >> "$cache_dir/packages.x86_64" +# We have to do this, because `mkarchiso` copies in the pacman.conf +# in use during the build process - so it needs to be made offline. +(cd "$cache_dir" && git apply /offline-mirror.patch) +cp $cache_dir/pacman.conf "$cache_dir/airootfs/etc/pacman.conf" + +# And we also need to duplicate the offline mirror. +# Because inside the ISO it will look for packages in /var/cache/omarchy/mirror/offline +# but that means the build of the ISO itself will also look at this location +# but in the container. +mkdir -p /var/cache/omarchy/mirror +cp -r "$offline_mirror_dir" "/var/cache/omarchy/mirror/" + +# Because this weird glitch with archiso, we also need to sync down +# all the packages we need to build the ISO, but we'll do that in the +# "host" mirror location, as we don't want them inside the ISO taking up space. +# We'll also remove tzupdate as it won't be found in upstream mirrors. +iso_packages=($(cat "$cache_dir/packages.x86_64")) + +mkdir -p /tmp/cleandb + +echo "Populating host offline mirror with ISO packages: ${iso_packages[@]}" +# And we have to use the hosts pacman.conf since all other pacman.conf +# files are prepped for offline use by this point. +pacman --config /etc/pacman.conf \ + --noconfirm -Syw $(echo "${iso_packages[@]}" | sed 's/tzupdate//g') \ + --cachedir "/var/cache/omarchy/mirror/offline/" \ + --dbpath /tmp/cleandb + +repo-add --new "/var/cache/omarchy/mirror/offline/offline.db.tar.gz" "/var/cache/omarchy/mirror/offline/"*.pkg.tar.zst + +# Finally, we assemble the entire ISO mkarchiso -v -w "$cache_dir/work/" -o "/out/" "$cache_dir/" \ No newline at end of file diff --git a/offline-mirror.patch b/offline-mirror.patch new file mode 100644 index 0000000..c0d1941 --- /dev/null +++ b/offline-mirror.patch @@ -0,0 +1,29 @@ +--- a/pacman.conf ++++ b/pacman.conf +@@ -75,14 +75,14 @@ LocalFileSigLevel = Optional + #[core-testing] + #Include = /etc/pacman.d/mirrorlist + +-[core] +-Include = /etc/pacman.d/mirrorlist ++# [core] ++# Include = /etc/pacman.d/mirrorlist + + #[extra-testing] + #Include = /etc/pacman.d/mirrorlist + +-[extra] +-Include = /etc/pacman.d/mirrorlist ++# [extra] ++# Include = /etc/pacman.d/mirrorlist + + # If you want to run 32 bit applications on your x86_64 system, + # enable the multilib repositories as required here. +@@ -98,3 +98,7 @@ Include = /etc/pacman.d/mirrorlist + #[custom] + #SigLevel = Optional TrustAll + #Server = file:///home/custompkgs ++ ++[offline] ++SigLevel = Optional TrustAll ++Server = file:///var/cache/omarchy/mirror/offline/ diff --git a/omarchy.packages b/omarchy.packages new file mode 100644 index 0000000..0166cf1 --- /dev/null +++ b/omarchy.packages @@ -0,0 +1,140 @@ +1password-beta +1password-cli +alacritty +base +base-devel +bash-completion +bat +blueberry +brightnessctl +btop +btrfs-progs +chromium +clang +cups +cups-browsed +cups-filters +cups-pdf +docker +docker-buildx +docker-compose +evince +eza +fastfetch +fcitx5 +fcitx5-gtk +fcitx5-qt +fd +ffmpegthumbnailer +fzf +gcc14 +git +github-cli +gnome-calculator +gnome-keyring +gnome-themes-extra +grub +gst-plugin-pipewire +gum +gvfs-mtp +hypridle +hyprland +hyprland-qtutils +hyprlock +hyprpicker +hyprshot +hyprsunset +imagemagick +impala +imv +inetutils +iwd +jq +kdenlive +kvantum-qt5 +lazydocker +lazygit +less +libpulse +libqalculate +libreoffice-fresh +linux +linux-firmware +llvm +localsend +luarocks +mako +man-db +mariadb-libs +mise +mpv +nautilus +neovim +noto-fonts +noto-fonts-cjk +noto-fonts-emoji +noto-fonts-extra +nss-mdns +obs-studio +obsidian +pamixer +# pinta +pipewire +pipewire-alsa +pipewire-jack +pipewire-pulse +playerctl +plocate +plymouth +polkit-gnome +postgresql-libs +power-profiles-daemon +python-terminaltexteffects +ripgrep +satty +signal-desktop +slurp +spotify +sushi +swaybg +swayosd +system-config-printer +tldr +tree-sitter-cli +ttf-cascadia-mono-nerd +ttf-ia-writer +ttf-jetbrains-mono +typora +tzupdate +ufw +ufw-docker +unzip +uwsm +walker +waybar +wget +whois +wiremix +wireplumber +wl-clip-persist +wl-clipboard +wl-screenrec +woff2-font-awesome +xdg-desktop-portal-gtk +xdg-desktop-portal-hyprland +xmlstarlet +xournalpp +yaru-icon-theme +yay +yay-debug +zoom +zoxide +zram-generator +webp-pixbuf-loader +autoconf-archive +intltool +gtk4-layer-shell +sassc +libsass +dart +qt5-remoteobjects diff --git a/permissions.patch b/permissions.patch index 43104db..c032fa2 100644 --- a/permissions.patch +++ b/permissions.patch @@ -1,13 +1,15 @@ --- a/profiledef.sh +++ b/profiledef.sh -@@ -21,7 +21,8 @@ +@@ -21,7 +21,10 @@ file_permissions=( ["/root"]="0:0:750" ["/root/.automated_script.sh"]="0:0:755" ["/root/.gnupg"]="0:0:700" + ["/root/installer"]="0:0:755" ++ ["/var/cache/omarchy/mirror/offline/"]="0:0:775" + ["/root/check_connectivity.sh"]="0:0:755" ["/usr/local/bin/choose-mirror"]="0:0:755" - ["/usr/local/bin/Installation_guide"]="0:0:755" - ["/usr/local/bin/livecd-sound"]="0:0:755" + ["/usr/bin/tte"]="0:0:755" ++ ["/usr/lib/omarchy-installer"]="0:0:755" )