a38f130126
This reverts commit 066758758e7c0768ff8da51d208cdae0f33b368c because it breaks NixOS VM tests.
187 lines
4.7 KiB
Bash
187 lines
4.7 KiB
Bash
#! @shell@
|
|
|
|
systemConfig=@systemConfig@
|
|
|
|
export HOME=/root
|
|
|
|
|
|
# Print a greeting.
|
|
echo
|
|
echo -e "\e[1;32m<<< NixOS Stage 2 >>>\e[0m"
|
|
echo
|
|
|
|
|
|
# Set the PATH.
|
|
setPath() {
|
|
local dirs="$1"
|
|
export PATH=/empty
|
|
for i in $dirs; do
|
|
PATH=$PATH:$i/bin
|
|
if test -e $i/sbin; then
|
|
PATH=$PATH:$i/sbin
|
|
fi
|
|
done
|
|
}
|
|
|
|
setPath "@path@"
|
|
|
|
|
|
# Normally, stage 1 mounts the root filesystem read/writable.
|
|
# However, in some environments, stage 2 is executed directly, and the
|
|
# root is read-only. So make it writable here.
|
|
if [ "$container" != systemd-nspawn ]; then
|
|
mount -n -o remount,rw none /
|
|
fi
|
|
|
|
|
|
# Likewise, stage 1 mounts /proc, /dev and /sys, so if we don't have a
|
|
# stage 1, we need to do that here.
|
|
if [ ! -e /proc/1 ]; then
|
|
mkdir -m 0755 -p /proc
|
|
mount -n -t proc proc /proc
|
|
mkdir -m 0755 -p /dev
|
|
mount -t devtmpfs devtmpfs /dev
|
|
fi
|
|
|
|
|
|
echo "booting system configuration $systemConfig" > /dev/kmsg
|
|
|
|
|
|
# Make /nix/store a read-only bind mount to enforce immutability of
|
|
# the Nix store. Note that we can't use "chown root:nixbld" here
|
|
# because users/groups might not exist yet.
|
|
# Silence chown/chmod to fail gracefully on a readonly filesystem
|
|
# like squashfs.
|
|
chown -f 0:30000 /nix/store
|
|
chmod -f 1775 /nix/store
|
|
if [ -n "@readOnlyStore@" ]; then
|
|
if ! readonly-mountpoint /nix/store; then
|
|
mount --bind /nix/store /nix/store
|
|
mount -o remount,ro,bind /nix/store
|
|
fi
|
|
fi
|
|
|
|
|
|
# Provide a /etc/mtab.
|
|
mkdir -m 0755 -p /etc
|
|
test -e /etc/fstab || touch /etc/fstab # to shut up mount
|
|
rm -f /etc/mtab* # not that we care about stale locks
|
|
ln -s /proc/mounts /etc/mtab
|
|
|
|
|
|
# Process the kernel command line.
|
|
for o in $(cat /proc/cmdline); do
|
|
case $o in
|
|
boot.debugtrace)
|
|
# Show each command.
|
|
set -x
|
|
;;
|
|
resume=*)
|
|
set -- $(IFS==; echo $o)
|
|
resumeDevice=$2
|
|
;;
|
|
esac
|
|
done
|
|
|
|
|
|
# More special file systems, initialise required directories.
|
|
mkdir -m 0755 /dev/shm
|
|
mount -t tmpfs -o "rw,nosuid,nodev,size=@devShmSize@" tmpfs /dev/shm
|
|
mkdir -m 0755 -p /dev/pts
|
|
[ -e /proc/bus/usb ] && mount -t usbfs usbfs /proc/bus/usb # UML doesn't have USB by default
|
|
mkdir -m 01777 -p /tmp
|
|
mkdir -m 0755 -p /var /var/log /var/lib /var/db
|
|
mkdir -m 0755 -p /nix/var
|
|
mkdir -m 0700 -p /root
|
|
chmod 0700 /root
|
|
mkdir -m 0755 -p /bin # for the /bin/sh symlink
|
|
mkdir -m 0755 -p /home
|
|
mkdir -m 0755 -p /etc/nixos
|
|
|
|
|
|
# Miscellaneous boot time cleanup.
|
|
rm -rf /var/run /var/lock
|
|
rm -f /etc/{group,passwd,shadow}.lock
|
|
|
|
|
|
# Also get rid of temporary GC roots.
|
|
rm -rf /nix/var/nix/gcroots/tmp /nix/var/nix/temproots
|
|
|
|
|
|
# Create a tmpfs on /run to hold runtime state for programs such as
|
|
# udev (if stage 1 hasn't already done so).
|
|
if ! mountpoint -q /run; then
|
|
rm -rf /run
|
|
mkdir -m 0755 -p /run
|
|
mount -t tmpfs -o "mode=0755,size=@runSize@" tmpfs /run
|
|
fi
|
|
|
|
# Create a ramfs on /run/keys to hold secrets that shouldn't be
|
|
# written to disk (generally used for NixOps, harmless elsewhere).
|
|
if ! mountpoint -q /run/keys; then
|
|
rm -rf /run/keys
|
|
mkdir /run/keys
|
|
mount -t ramfs ramfs /run/keys
|
|
chown 0:96 /run/keys
|
|
chmod 0750 /run/keys
|
|
fi
|
|
|
|
mkdir -m 0755 -p /run/lock
|
|
|
|
|
|
# For backwards compatibility, symlink /var/run to /run, and /var/lock
|
|
# to /run/lock.
|
|
ln -s /run /var/run
|
|
ln -s /run/lock /var/lock
|
|
|
|
|
|
# Clear the resume device.
|
|
if test -n "$resumeDevice"; then
|
|
mkswap "$resumeDevice" || echo 'Failed to clear saved image.'
|
|
fi
|
|
|
|
|
|
# Use /etc/resolv.conf supplied by systemd-nspawn, if applicable.
|
|
if [ -n "@useHostResolvConf@" -a -e /etc/resolv.conf ]; then
|
|
cat /etc/resolv.conf | resolvconf -m 1000 -a host
|
|
fi
|
|
|
|
|
|
# Create /var/setuid-wrappers as a tmpfs.
|
|
rm -rf /var/setuid-wrappers
|
|
mkdir -m 0755 -p /var/setuid-wrappers
|
|
mount -t tmpfs -o "mode=0755" tmpfs /var/setuid-wrappers
|
|
|
|
|
|
# Run the script that performs all configuration activation that does
|
|
# not have to be done at boot time.
|
|
echo "running activation script..."
|
|
$systemConfig/activate
|
|
|
|
|
|
# Restore the system time from the hardware clock. We do this after
|
|
# running the activation script to be sure that /etc/localtime points
|
|
# at the current time zone.
|
|
hwclock --hctosys
|
|
|
|
|
|
# Record the boot configuration.
|
|
ln -sfn "$systemConfig" /run/booted-system
|
|
|
|
# Prevent the booted system form being garbage-collected If it weren't
|
|
# a gcroot, if we were running a different kernel, switched system,
|
|
# and garbage collected all, we could not load kernel modules anymore.
|
|
ln -sfn /run/booted-system /nix/var/nix/gcroots/booted-system
|
|
|
|
|
|
# Run any user-specified commands.
|
|
@shell@ @postBootCommands@
|
|
|
|
|
|
# Start systemd.
|
|
echo "starting systemd..."
|
|
PATH=/run/current-system/systemd/lib/systemd \
|
|
MODULE_DIR=/run/booted-system/kernel-modules/lib/modules \
|
|
LOCALE_ARCHIVE=/run/current-system/sw/lib/locale/locale-archive \
|
|
exec systemd
|