#!/bin/sh # Pick up console port and speed from install enviroment if not defined yet. # Console port and speed setting in cmdline is like "console=ttyS0,9600n", # so we can use pattern 'console=ttyS[0-9]+,[0-9]+' to match it. # If failed to get the speed and ttyS from cmdline then set them to default: ttyS0 and 9600 if [ -z "$CONSOLE_PORT" ]; then console_ttys=$(cat /proc/cmdline | grep -Eo 'console=ttyS[0-9]+' | cut -d "=" -f2) if [ -z "$console_ttys" -o "$console_ttys" = "ttyS0" ]; then CONSOLE_PORT=0x3f8 CONSOLE_DEV=0 elif [ "$console_ttys" = "ttyS1" ]; then CONSOLE_PORT=0x2f8 CONSOLE_DEV=1 elif [ "$console_ttys" = "ttyS2" ]; then CONSOLE_PORT=0x3e8 CONSOLE_DEV=2 elif [ "$console_ttys" = "ttyS3" ]; then CONSOLE_PORT=0x2e8 CONSOLE_DEV=3 fi fi if [ -z "$CONSOLE_SPEED" ]; then speed=$(cat /proc/cmdline | grep -Eo 'console=ttyS[0-9]+,[0-9]+' | cut -d "," -f2) if [ -z "$speed" ]; then CONSOLE_SPEED=9600 else CONSOLE_SPEED=$speed fi fi create_partition() { # Install demo on same block device as ONIE if [ "$install_env" != "build" ]; then onie_dev=$(blkid | grep ONIE-BOOT | head -n 1 | awk '{print $1}' | sed -e 's/:.*$//') blk_dev=$(echo $onie_dev | sed -e 's/[1-9][0-9]*$//' | sed -e 's/\([0-9]\)\(p\)/\1/') # check if we have an nvme device blk_suffix= echo $blk_dev | grep -q nvme0 && blk_suffix="p" # Note: ONIE has no mount setting for / with device node, so below will be empty string cur_part=$(cat /proc/mounts | awk "{ if(\$2==\"/\") print \$1 }" | grep $blk_dev || true) [ -b "$blk_dev" ] || { echo "Error: Unable to determine block device of ONIE install" exit 1 } fi # auto-detect whether BIOS or UEFI if [ -d "/sys/firmware/efi/efivars" ] ; then firmware="uefi" else firmware="bios" fi if [ "$install_env" = "onie" ]; then # determine ONIE partition type onie_partition_type=$(${onie_bin} onie-sysinfo -t) # demo partition size in MB if [ "$firmware" = "uefi" ] ; then create_demo_uefi_partition $blk_dev elif [ "$onie_partition_type" = "gpt" ] ; then create_demo_gpt_partition $blk_dev elif [ "$onie_partition_type" = "msdos" ] ; then create_demo_msdos_partition $blk_dev else echo "ERROR: Unsupported partition type: $onie_partition_type" exit 1 fi fi } mount_partition() { demo_dev=$(echo $blk_dev | sed -e 's/\(mmcblk[0-9]\)/\1p/')$demo_part echo $blk_dev | grep -q nvme0 && demo_dev=$(echo $blk_dev | sed -e 's/\(nvme[0-9]n[0-9]\)/\1p/')$demo_part # Make filesystem mkfs.ext4 -L $demo_volume_label $demo_dev # Mount demo filesystem demo_mnt=$(${onie_bin} mktemp -d) || { echo "Error: Unable to create file system mount point" exit 1 } trap_push "${onie_bin} fuser -km $demo_mnt || ${onie_bin} umount $demo_mnt || ${onie_bin} rmdir $demo_mnt || true" ${onie_bin} mount -t ext4 -o defaults,rw $demo_dev $demo_mnt || { echo "Error: Unable to mount $demo_dev on $demo_mnt" exit 1 } } # Creates a new partition for the DEMO OS. # # arg $1 -- base block device # # Returns the created partition number in $demo_part demo_part="" # TODO: remove reference to "ACS-OS" after all baseimages are upgraded legacy_volume_label="ACS-OS" create_demo_gpt_partition() { blk_dev="$1" # Create a temp fifo and store string in variable tmpfifo=$(mktemp -u) trap_push "rm $tmpfifo || true" mkfifo -m 600 "$tmpfifo" # See if demo partition already exists demo_part=$(sgdisk -p $blk_dev | grep -e "$demo_volume_label" -e "$legacy_volume_label" | awk '{print $1}') if [ -n "$demo_part" ] ; then # delete existing partitions # if there are multiple partitions matched, we should delete each one, except the current OS's # Note: You can use any character as a separator for sed, not just '/' echo "$demo_part" > $tmpfifo & while read -r part_index; do if [ "$blk_dev$part_index" = "$cur_part" ]; then continue; fi echo "deleting partition $part_index ..." # if the partition is already mounted, umount first df $blk_dev$part_index 2>/dev/null && { umount $blk_dev$part_index || { echo "Error: Unable to umount $blk_dev$part_index" exit 1 } } sgdisk -d $part_index $blk_dev || { echo "Error: Unable to delete partition $part_index on $blk_dev" exit 1 } partprobe || { echo "Error: Unable to partprobe" exit 1 } done < $tmpfifo fi # ASSUME: there are no more than 99999 partitions in a block device all_part=$(sgdisk -p $blk_dev | awk "{if (\$1 > 0 && \$1 <= 99999) print \$1}") # Get the index of last partition # Note: the double quotation marks for echo argument are necessary, otherwise the unquoted version replaces each sequence of # one or more blanks, tabs and newlines with a single space. # Ref: http://stackoverflow.com/questions/613572/capturing-multiple-line-output-to-a-bash-variable last_part=$(echo "$all_part" | tail -n 1 | awk '{print $1}') # Find next available partition demo_part=1 echo "$all_part" > $tmpfifo & # Find the first available partition number while read -r used_part; do echo "Partition #$used_part is in use." if [ "$used_part" -ne "$demo_part" ]; then break; fi demo_part=`expr $demo_part + 1` done < $tmpfifo echo "Partition #$demo_part is available" # Create new partition echo "Creating new $demo_volume_label partition ${blk_dev}${blk_suffix}$demo_part ..." if [ "$demo_type" = "DIAG" ] ; then # set the GPT 'system partition' attribute bit for the DIAG # partition. attr_bitmask="0x1" else attr_bitmask="0x0" fi sgdisk --new=${demo_part}::+${demo_part_size}MB \ --attributes=${demo_part}:=:$attr_bitmask \ --change-name=${demo_part}:$demo_volume_label $blk_dev \ || { echo "Warning: The first trial of creating partition failed, trying the largest aligned available block of sectors on the disk" begin=$(sgdisk -F $blk_dev) end=$(sgdisk -E $blk_dev) sgdisk --new=${demo_part}:$begin:$end \ --attributes=${demo_part}:=:$attr_bitmask \ --change-name=${demo_part}:$demo_volume_label $blk_dev } || { echo "Error: Unable to create partition $demo_part on $blk_dev" exit 1 } ## If running in normal Linux, partprobe will complain as below and return non-zero ## Error: Partition(s) 4 on /dev/sda have been written, but we have been unable to inform the kernel of the change, ## probably because it/they are in use. As a result, the old partition(s) will remain in use. You should reboot now ## before making further changes. partprobe || true } create_demo_msdos_partition() { blk_dev="$1" # See if demo partition already exists -- look for the filesystem # label. part_info="$(blkid | grep -e "$demo_volume_label" -e "$legacy_volume_label" | awk -F: '{print $1}')" if [ -n "$part_info" ] ; then # delete existing partition demo_part="$(echo -n $part_info | sed -e s#${blk_dev}##)" parted -s $blk_dev rm $demo_part || { echo "Error: Unable to delete partition $demo_part on $blk_dev" exit 1 } partprobe fi # Find next available partition last_part_info="$(parted -s -m $blk_dev unit s print | tail -n 1)" last_part_num="$(echo -n $last_part_info | awk -F: '{print $1}')" last_part_end="$(echo -n $last_part_info | awk -F: '{print $3}')" # Remove trailing 's' last_part_end=${last_part_end%s} demo_part=$(( $last_part_num + 1 )) demo_part_start=$(( $last_part_end + 1 )) # sectors_per_mb = (1024 * 1024) / 512 = 2048 sectors_per_mb=2048 demo_part_end=$(( $demo_part_start + ( $demo_part_size * $sectors_per_mb ) - 1 )) # Create new partition echo "Creating new partition ${blk_dev}$demo_part ..." parted -s --align optimal $blk_dev unit s \ mkpart primary $demo_part_start $demo_part_end set $demo_part boot on || { echo "ERROR: Problems creating msdos partition $demo_part on: $blk_dev" exit 1 } partprobe } # For UEFI systems, create a new partition for the DEMO OS. # # arg $1 -- base block device # # Returns the created partition number in $demo_part create_demo_uefi_partition() { create_demo_gpt_partition "$1" # erase any related EFI BootOrder variables from NVRAM. for b in $(efibootmgr | grep -e "$demo_volume_label" -e "$legacy_volume_label" | awk '{ print $1 }') ; do local num=${b#Boot} # Remove trailing '*' num=${num%\*} efibootmgr -b $num -B > /dev/null 2>&1 done } # Install legacy BIOS GRUB for DEMO OS demo_install_grub() { local demo_mnt="$1" local blk_dev="$2" # Pretend we are a major distro and install GRUB into the MBR of # $blk_dev. grub-install --boot-directory="$onie_initrd_tmp/$demo_mnt" --recheck "$blk_dev" || { echo "ERROR: grub-install failed on: $blk_dev" exit 1 } if [ "$demo_type" = "DIAG" ] ; then # Install GRUB in the partition also. This allows for # chainloading the DIAG image from another OS. # # We are installing GRUB in a partition, as opposed to the # MBR. With this method block lists are used to refer to the # the core.img file. The sector locations of core.img may # change whenever the file system in the partition is being # altered (files copied, deleted etc.). For more info, see # https://bugzilla.redhat.com/show_bug.cgi?id=728742 and # https://bugzilla.redhat.com/show_bug.cgi?id=730915. # # The workaround for this is to set the immutable flag on # /boot/grub/i386-pc/core.img using the chattr command so that # the sector locations of the core.img file in the disk is not # altered. The immutable flag on /boot/grub/i386-pc/core.img # needs to be set only if GRUB is installed to a partition # boot sector or a partitionless disk, not in case of # installation to MBR. core_img="$demo_mnt/grub/i386-pc/core.img" # remove immutable flag if file exists during the update. [ -f "$core_img" ] && chattr -i $core_img grub_install_log=$(mktemp) grub-install --force --boot-directory="$onie_initrd_tmp/$demo_mnt" \ --recheck "$demo_dev" > /$grub_install_log 2>&1 || { echo "ERROR: grub-install failed on: $demo_dev" cat $grub_install_log && rm -f $grub_install_log exit 1 } rm -f $grub_install_log # restore immutable flag on the core.img file as discussed # above. [ -f "$core_img" ] && chattr +i $core_img fi } # Install UEFI BIOS GRUB for DEMO OS demo_install_uefi_grub() { local demo_mnt="$1" local blk_dev="$2" # make sure /boot/efi is mounted if ! mount | grep -q "/boot/efi"; then mount /boot/efi fi # Look for the EFI system partition UUID on the same block device as # the ONIE-BOOT partition. local uefi_part=0 for p in $(seq 8) ; do if sgdisk -i $p $blk_dev | grep -q C12A7328-F81F-11D2-BA4B-00A0C93EC93B ; then uefi_part=$p break fi done [ $uefi_part -eq 0 ] && { echo "ERROR: Unable to determine UEFI system partition" exit 1 } grub_install_log=$(mktemp) grub-install \ --no-nvram \ --bootloader-id="$demo_volume_label" \ --efi-directory="/boot/efi" \ --boot-directory="$demo_mnt" \ --recheck \ "$blk_dev" > /$grub_install_log 2>&1 || { echo "ERROR: grub-install failed on: $blk_dev" cat $grub_install_log && rm -f $grub_install_log exit 1 } rm -f $grub_install_log # Configure EFI NVRAM Boot variables. --create also sets the # new boot number as active. grub=$(find /boot/efi/EFI/$demo_volume_label/ -name grub*.efi -exec basename {} \;) efibootmgr --quiet --create \ --label "$demo_volume_label" \ --disk $blk_dev --part $uefi_part \ --loader "/EFI/$demo_volume_label/$grub" || { echo "ERROR: efibootmgr failed to create new boot variable on: $blk_dev" exit 1 } } # Install UEFI BIOS SHIM for DEMO OS demo_install_uefi_shim() { echo "demo_install_uefi_shim(): Installing Secure Boot components" local demo_mnt="$1" local blk_dev="$2" # make sure /boot/efi is mounted if ! mount | grep -q "/boot/efi"; then mount /boot/efi || { echo "Error: Unable to mount /boot/efi" exit 1 } fi # Look for the EFI system partition UUID on the same block device as # the ONIE-BOOT partition. local uefi_part=0 for p in $(seq 8) ; do if sgdisk -i $p $blk_dev | grep -q C12A7328-F81F-11D2-BA4B-00A0C93EC93B ; then uefi_part=$p break fi done [ $uefi_part -eq 0 ] && { echo "ERROR: Unable to determine UEFI system partition" exit 1 } echo "creating demo_volume_label=$demo_volume_label in dir: /boot/efi/EFI/ ." mkdir -p /boot/efi/EFI/$demo_volume_label if [ ! -f $demo_mnt/$image_dir/boot/mmx64.efi ]; then echo "ERROR: $demo_mnt/$image_dir/boot/mmx64.efi file does not exist" exit 1 fi if [ ! -f $demo_mnt/$image_dir/boot/shimx64.efi ]; then echo "ERROR: $demo_mnt/$image_dir/boot/shimx64.efi file does not exist" exit 1 fi if [ ! -f $demo_mnt/$image_dir/boot/grubx64.efi ]; then echo "ERROR: $demo_mnt/$image_dir/boot/grubx64.efi file does not exist" exit 1 fi echo "copying signed shim, mm, grub, grub.cfg from $demo_mnt/$image_dir/boot/ to /boot/efi/EFI/$demo_volume_label directory" cp $demo_mnt/$image_dir/boot/mmx64.efi /boot/efi/EFI/$demo_volume_label/mmx64.efi cp $demo_mnt/$image_dir/boot/shimx64.efi /boot/efi/EFI/$demo_volume_label/shimx64.efi cp $demo_mnt/$image_dir/boot/grubx64.efi /boot/efi/EFI/$demo_volume_label/grubx64.efi # Configure EFI NVRAM Boot variables. --create also sets the # new boot number as active. efibootmgr --quiet --create \ --label "$demo_volume_label" \ --disk $blk_dev --part $uefi_part \ --loader "/EFI/$demo_volume_label/shimx64.efi" || { echo "ERROR: efibootmgr failed to create new boot variable on: $blk_dev" exit 1 } echo "demo_install_uefi_shim(): Secure Boot components installed successfully" } bootloader_menu_config() { if [ "$install_env" = "onie" ]; then # Store installation log in target file system rm -f $onie_initrd_tmp/tmp/onie-support*.tar.bz2 ${onie_bin} onie-support /tmp mv $onie_initrd_tmp/tmp/onie-support*.tar.bz2 $demo_mnt/$image_dir/ if [ "$firmware" = "uefi" ] ; then secure_boot_state=$(mokutil --sb-state) echo secure_boot_state=$secure_boot_state if [ "$secure_boot_state" = "SecureBoot enabled" ]; then echo "UEFI Secure Boot is enabled" demo_install_uefi_shim "$demo_mnt" "$blk_dev" else echo "UEFI Secure Boot is disabled" demo_install_uefi_grub "$demo_mnt" "$blk_dev" fi else demo_install_grub "$demo_mnt" "$blk_dev" fi fi # Create a minimal grub.cfg that allows for: # - configure the serial console # - allows for grub-reboot to work # - a menu entry for the DEMO OS # - menu entries for ONIE grub_cfg=$(mktemp) trap_push "rm $grub_cfg || true" # Set a few GRUB_xxx environment variables that will be picked up and # used by the 50_onie_grub script. This is similiar to what an OS # would specify in /etc/default/grub. # # GRUB_SERIAL_COMMAND # GRUB_CMDLINE_LINUX [ -r ./platform.conf ] && . ./platform.conf # Check if the CPU vendor is 'Intel' and disable c-states if True CPUVENDOR="$(cat /proc/cpuinfo | grep -m 1 vendor_id | awk '{print $3}')" echo "Switch CPU vendor is: $CPUVENDOR" if echo "$CPUVENDOR" | grep -i 'Intel' >/dev/null 2>&1; then echo "Switch CPU cstates are: disabled" CSTATES="intel_idle.max_cstate=0" else CSTATES="" fi DEFAULT_GRUB_SERIAL_COMMAND="serial --port=${CONSOLE_PORT} --speed=${CONSOLE_SPEED} --word=8 --parity=no --stop=1" DEFAULT_GRUB_CMDLINE_LINUX="console=tty0 console=ttyS${CONSOLE_DEV},${CONSOLE_SPEED}n8 quiet $CSTATES" GRUB_SERIAL_COMMAND=${GRUB_SERIAL_COMMAND:-"$DEFAULT_GRUB_SERIAL_COMMAND"} GRUB_CMDLINE_LINUX=${GRUB_CMDLINE_LINUX:-"$DEFAULT_GRUB_CMDLINE_LINUX"} export GRUB_SERIAL_COMMAND export GRUB_CMDLINE_LINUX # Add common configuration, like the timeout and serial console. cat < $grub_cfg $GRUB_SERIAL_COMMAND terminal_input console serial terminal_output console serial set timeout=5 EOF # Add the logic to support grub-reboot and grub-set-default cat <> $grub_cfg if [ -s \$prefix/grubenv ]; then load_env fi if [ "\${saved_entry}" ]; then set default="\${saved_entry}" fi if [ "\${next_entry}" ]; then set default="\${next_entry}" unset next_entry save_env next_entry fi if [ "\${onie_entry}" ]; then set next_entry="\${default}" set default="\${onie_entry}" unset onie_entry save_env onie_entry next_entry fi EOF if [ "$demo_type" = "DIAG" ] ; then # Make sure ONIE install mode is the default boot mode for the # diag partition. cat <> $grub_cfg set default=ONIE EOF $onie_root_dir/tools/bin/onie-boot-mode -q -o install fi # Add a menu entry for the SONiC OS # Note: assume that apparmor is supported in the kernel demo_grub_entry="$demo_volume_revision_label" if [ "$install_env" = "sonic" ]; then old_sonic_menuentry=$(cat /host/grub/grub.cfg | sed "/^menuentry '${demo_volume_label}-${running_sonic_revision}'/,/}/!d") grub_cfg_root=$(echo $old_sonic_menuentry | sed -e "s/.*root\=\(.*\)rw.*/\1/") onie_menuentry=$(cat /host/grub/grub.cfg | sed "/menuentry ONIE/,/}/!d") elif [ "$install_env" = "build" ]; then grub_cfg_root=%%SONIC_ROOT%% else # install_env = "onie" uuid=$(blkid "$demo_dev" | sed -ne 's/.* UUID=\"\([^"]*\)\".*/\1/p') if [ -z "$uuid" ]; then grub_cfg_root=$demo_dev else grub_cfg_root=UUID=$uuid fi fi # Make a first grub config file that located in default debian path:/boot/efi/EFI/debian/ # this first grub.cfg will call the complete grub.cfg created below with sonic configuration tmp_config=$(mktemp) cat < $tmp_config search --no-floppy --label --set=root $demo_volume_label set prefix=(\$root)'/grub' configfile \$prefix/grub.cfg EOF # Copy first grub.cfg as entrypoint to default debian path where grubx64.efi expected it. mkdir -p /boot/efi/EFI/debian/ echo "cp $tmp_config /boot/efi/EFI/debian/grub.cfg" cp $tmp_config /boot/efi/EFI/debian/grub.cfg # Add extra linux command line echo "EXTRA_CMDLINE_LINUX=$extra_cmdline_linux" GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX $extra_cmdline_linux" GRUB_CFG_LINUX_CMD="" GRUB_CFG_INITRD_CMD="" if [ "$firmware" = "uefi" ] ; then # grub.cfg when BIOS is UEFI and support Secure Boot GRUB_CFG_LINUX_CMD="linuxefi" GRUB_CFG_INITRD_CMD="initrdefi" else # grub.cfg when BIOS is Legacy GRUB_CFG_LINUX_CMD="linux" GRUB_CFG_INITRD_CMD="initrd" fi cat <> $grub_cfg menuentry '$demo_grub_entry' { search --no-floppy --label --set=root $demo_volume_label echo 'Loading $demo_volume_label $demo_type kernel ...' insmod gzio if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi insmod part_msdos insmod ext2 $GRUB_CFG_LINUX_CMD /$image_dir/boot/vmlinuz-5.10.0-18-2-amd64 root=$grub_cfg_root rw $GRUB_CMDLINE_LINUX \ net.ifnames=0 biosdevname=0 \ loop=$image_dir/$FILESYSTEM_SQUASHFS loopfstype=squashfs \ systemd.unified_cgroup_hierarchy=0 \ apparmor=1 security=apparmor varlog_size=$VAR_LOG_SIZE usbcore.autosuspend=-1 $ONIE_PLATFORM_EXTRA_CMDLINE_LINUX echo 'Loading $demo_volume_label $demo_type initial ramdisk ...' $GRUB_CFG_INITRD_CMD /$image_dir/boot/initrd.img-5.10.0-18-2-amd64 } EOF if [ "$install_env" = "onie" ]; then # Add menu entries for ONIE -- use the grub fragment provided by the # ONIE distribution. $onie_root_dir/grub.d/50_onie_grub >> $grub_cfg mkdir -p $onie_initrd_tmp/$demo_mnt/grub else cat <> $grub_cfg $old_sonic_menuentry $onie_menuentry EOF fi if [ "$install_env" = "build" ]; then cp $grub_cfg $demo_mnt/grub.cfg umount $demo_mnt else cp $grub_cfg $onie_initrd_tmp/$demo_mnt/grub/grub.cfg fi if [ "$secure_boot_state" = "SecureBoot enabled" ]; then # Secure Boot grub.cfg support # Saving grub_cfg in the same place where is grubx64.efi, # this grub_cfg file will be called by first grub.cfg file from: /boot/efi/EFI/debian/grub.cfg if [ -f $NVOS_BOOT_DIR/grub.cfg ]; then rm $NVOS_BOOT_DIR/grub.cfg fi cp $grub_cfg $NVOS_BOOT_DIR/grub.cfg fi cd / echo "Installed SONiC base image $demo_volume_label successfully" }