6 |
7 | 
8 |
9 |
10 |
11 |
30 |
31 |
32 | > [!IMPORTANT]
33 | > I need feedbacks! i cannot improve AxOS without it!
34 |
35 |
36 |
37 |
38 | ## Contributing
39 |
40 | Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions (or feedbacks) you make are **VERY appreciated**.
41 |
42 | If you have a suggestion that would make AxOS better, please create a discussion. You can also simply open an issue.
43 | Don't forget to give the project a star! Thanks again!
44 |
45 |
46 |
47 | ## License
48 |
49 | Distributed under the GNU Public License. See `LICENSE.txt` for more information.
50 |
51 |
52 |
53 | ## Versioning
54 |
55 | AxOS uses **Calendar Versioning (CalVer)** in the format `YY.MM` (e.g. `25.06` for June 2025).
56 |
57 |
58 | ## Contact
59 |
60 | Ardox (me) - ardox@axos-project.com
61 |
62 | Project Link: You are at
63 | Project Website: https://axos-project.com/
64 |
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/axos-version:
--------------------------------------------------------------------------------
1 | 25.05
2 |
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/hostname:
--------------------------------------------------------------------------------
1 | archiso
2 |
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/hosts:
--------------------------------------------------------------------------------
1 | 127.0.0.1 localhost.localdomain localhost
2 | 127.0.1.1 archiso
3 |
4 | ::1 ip6-localhost ip6-loopback
5 | fe00::0 ip6-localnet
6 | ff00::0 ip6-mcastprefix
7 | ff02::1 ip6-allnodes
8 | ff02::2 ip6-allrouters
9 | ff02::3 ip6-allhosts
10 |
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/initcpio/hooks/archiso:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ash
2 | #
3 | # SPDX-License-Identifier: GPL-3.0-or-later
4 |
5 | # args: source, newroot, mountpoint
6 | _mnt_dmsnapshot() {
7 | local img="${1}"
8 | local newroot="${2}"
9 | local mnt="${3}"
10 | local img_fullname="${img##*/}"
11 | local img_name="${img_fullname%%.*}"
12 | local dm_snap_name="${dm_snap_prefix}_${img_name}"
13 | local ro_dev ro_dev_size rw_dev
14 |
15 | ro_dev="$(losetup --find --show --read-only -- "${img}")"
16 | ro_dev_size="$(blockdev --getsz "${ro_dev}")"
17 |
18 | if [ "${cow_persistent}" = "P" ]; then
19 | if [ -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow" ]; then
20 | msg ":: Found '/run/archiso/cowspace/${cow_directory}/${img_name}.cow', using as persistent."
21 | else
22 | msg ":: Creating '/run/archiso/cowspace/${cow_directory}/${img_name}.cow' as persistent."
23 | truncate -s "${cow_spacesize}" "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
24 | fi
25 | else
26 | if [ -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow" ]; then
27 | msg ":: Found '/run/archiso/cowspace/${cow_directory}/${img_name}.cow' but non-persistent requested, removing."
28 | rm -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
29 | fi
30 | msg ":: Creating '/run/archiso/cowspace/${cow_directory}/${img_name}.cow' as non-persistent."
31 | truncate -s "${cow_spacesize}" "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
32 | fi
33 |
34 | rw_dev="$(losetup --find --show "/run/archiso/cowspace/${cow_directory}/${img_name}.cow")"
35 |
36 | dmsetup create "${dm_snap_name}" --table \
37 | "0 ${ro_dev_size} snapshot ${ro_dev} ${rw_dev} ${cow_persistent} ${cow_chunksize}"
38 |
39 | if [ "${cow_persistent}" != "P" ]; then
40 | rm -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
41 | fi
42 |
43 | _mnt_dev "/dev/mapper/${dm_snap_name}" "${newroot}${mnt}" "-w" "defaults"
44 | }
45 |
46 | # args: source, newroot, mountpoint
47 | _mnt_overlayfs() {
48 | local src="${1}"
49 | local newroot="${2}"
50 | local mnt="${3}"
51 | mkdir -p "/run/archiso/cowspace/${cow_directory}/upperdir" "/run/archiso/cowspace/${cow_directory}/workdir"
52 | mount -t overlay -o \
53 | "lowerdir=${src},upperdir=/run/archiso/cowspace/${cow_directory}/upperdir,workdir=/run/archiso/cowspace/${cow_directory}/workdir" \
54 | airootfs "${newroot}${mnt}"
55 | }
56 |
57 | # args: /path/to/image_file, mountpoint
58 | _mnt_fs() {
59 | local img="${1}"
60 | local mnt="${2}"
61 | local img_fullname="${img##*/}"
62 | local img_loopdev
63 |
64 | # shellcheck disable=SC2154
65 | # defined via initcpio's parse_cmdline()
66 | if [ "${copytoram}" = "y" ]; then
67 | msg -n ":: Copying rootfs image to RAM..."
68 |
69 | # in case we have pv use it to display copy progress feedback otherwise
70 | # fallback to using plain cp
71 | if command -v pv >/dev/null 2>&1; then
72 | echo ""
73 | (pv "${img}" >"/run/archiso/copytoram/${img_fullname}")
74 | local rc=$?
75 | else
76 | (cp -- "${img}" "/run/archiso/copytoram/${img_fullname}")
77 | local rc=$?
78 | fi
79 |
80 | if [ "$rc" != 0 ]; then
81 | echo "ERROR: while copy '${img}' to '/run/archiso/copytoram/${img_fullname}'"
82 | launch_interactive_shell
83 | fi
84 |
85 | img="/run/archiso/copytoram/${img_fullname}"
86 | msg "done."
87 | fi
88 | img_loopdev="$(losetup --find --show --read-only -- "${img}")"
89 | _mnt_dev "${img_loopdev}" "${mnt}" "-r" "defaults"
90 | }
91 |
92 | # args: device, mountpoint, flags, opts
93 | _mnt_dev() {
94 | local dev="${1}"
95 | local mnt="${2}"
96 | local flg="${3}"
97 | local opts="${4}"
98 | local resolved_dev
99 |
100 | msg ":: Mounting '${dev}' to '${mnt}'"
101 |
102 | while ! resolved_dev="$(rootdelay="${rootdelay:-30}" resolve_device "${dev}")"; do
103 | echo "ERROR: '${dev}' device did not show up after ${rootdelay:-30} seconds..."
104 | echo " Falling back to interactive prompt"
105 | echo " You can try to fix the problem manually, log out when you are finished"
106 | launch_interactive_shell
107 | done
108 |
109 | # If the tag is supported by mount, pass it as is. Otherwise, use the resolved device path.
110 | case "${dev}" in
111 | 'UUID='* | 'LABEL='* | 'PARTUUID='* | 'PARTLABEL='*) : ;;
112 | *) dev="${resolved_dev}" ;;
113 | esac
114 | if mount --mkdir -o "${opts}" "${flg}" "${dev}" "${mnt}"; then
115 | msg ":: Device '${dev}' mounted successfully."
116 | else
117 | echo "ERROR; Failed to mount '${dev}'"
118 | echo " Falling back to interactive prompt"
119 | echo " You can try to fix the problem manually, log out when you are finished"
120 | launch_interactive_shell
121 | fi
122 | }
123 |
124 | _verify_checksum() {
125 | local _status
126 | cd "/run/archiso/bootmnt/${archisobasedir}/${arch}" || exit 1
127 | sha512sum -c airootfs.sha512 >/tmp/checksum.log 2>&1
128 | _status=$?
129 | cd -- "${OLDPWD}" || exit 1
130 | return "${_status}"
131 | }
132 |
133 | _verify_signature() {
134 | local _status
135 | local sigfile="${1}"
136 | cd "/run/archiso/bootmnt/${archisobasedir}/${arch}" || exit 1
137 | gpg --homedir /gpg --status-fd 1 --verify "${sigfile}" 2>/dev/null | grep -E '^\[GNUPG:\] GOODSIG'
138 | _status=$?
139 | cd -- "${OLDPWD}" || exit 1
140 | return "${_status}"
141 | }
142 |
143 | _verify_cms_signature() {
144 | # Note: There is an "issue" with openssl.
145 | # Which requires emailProtection in extended key usage on the code signing certificate.
146 | # See: https://github.com/openssl/openssl/issues/17134
147 | local _status
148 | local cms_sigfile="${1}"
149 | local bootfile="${2}"
150 | local certfile="/codesign.crt"
151 | local cafile="/codesign_CA.crt"
152 |
153 | # Use the signer certificate as the CA certificate to allow validating with self-signed certificates.
154 | if [ ! -e "$cafile" ]; then
155 | cafile="$certfile"
156 | fi
157 |
158 | cd "/run/archiso/bootmnt/${archisobasedir}/${arch}" || exit 1
159 | # "-purpose any" can be removed once the issue mentioned above is fixed.
160 | openssl cms \
161 | -verify \
162 | -binary \
163 | -noattr \
164 | -nointern \
165 | -purpose any \
166 | -in "${cms_sigfile}" \
167 | -content "${bootfile}" \
168 | -inform DER \
169 | -out /dev/null \
170 | -certfile "$certfile" \
171 | -CAfile "$cafile"
172 | _status=$?
173 | cd -- "${OLDPWD}" || exit 1
174 | return "${_status}"
175 | }
176 |
177 | run_hook() {
178 | [ -z "${arch}" ] && arch="$(uname -m)"
179 | [ -z "${copytoram}" ] && copytoram="auto"
180 | [ -z "${copytoram_size}" ] && copytoram_size="75%"
181 | [ -z "${archisobasedir}" ] && archisobasedir="arch"
182 | [ -z "${dm_snap_prefix}" ] && dm_snap_prefix="arch"
183 | # shellcheck disable=SC2154
184 | # defined via initcpio's parse_cmdline()
185 | [ -z "${archisodevice}" ] && archisodevice="/dev/disk/by-label/${archisolabel}"
186 | [ -z "${cow_spacesize}" ] && cow_spacesize="256M"
187 | # shellcheck disable=SC2154
188 | # defined via initcpio's parse_cmdline()
189 | if [ -n "${cow_label}" ]; then
190 | cow_device="/dev/disk/by-label/${cow_label}"
191 | [ -z "${cow_persistent}" ] && cow_persistent="P"
192 | elif [ -n "${cow_device}" ]; then
193 | [ -z "${cow_persistent}" ] && cow_persistent="P"
194 | else
195 | cow_persistent="N"
196 | fi
197 |
198 | [ -z "${cow_flags}" ] && cow_flags="defaults"
199 | [ -z "${cow_directory}" ] && cow_directory="persistent_${archisolabel}/${arch}"
200 | [ -z "${cow_chunksize}" ] && cow_chunksize="8"
201 |
202 | # set mount handler for archiso
203 | export mount_handler="archiso_mount_handler"
204 | }
205 |
206 | # This function is called normally from init script, but it can be called
207 | # as chain from other mount handlers.
208 | # args: /path/to/newroot
209 | archiso_mount_handler() {
210 | local newroot="${1}"
211 | local sigfile cms_sigfile fs_img fs_img_size iso_blockdev
212 |
213 | if ! mountpoint -q "/run/archiso/bootmnt"; then
214 | _mnt_dev "${archisodevice}" "/run/archiso/bootmnt" "-r" "defaults"
215 | fi
216 |
217 | # We need this block at the top for early failure
218 | # but also to be able to give the fs_img to CMS verification.
219 | # (sha512sum files contain the image, CMS files does not)
220 | if [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.sfs" ]; then
221 | fs_img="/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.sfs"
222 | elif [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.erofs" ]; then
223 | fs_img="/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.erofs"
224 | else
225 | echo "ERROR: no root file system image found"
226 | launch_interactive_shell
227 | fi
228 |
229 | # shellcheck disable=SC2154
230 | # defined via initcpio's parse_cmdline()
231 | if [ "${checksum}" = "y" ]; then
232 | if [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.sha512" ]; then
233 | msg ":: Self-test requested, please wait..."
234 | if _verify_checksum; then
235 | msg "Checksum is OK, continue booting."
236 | else
237 | echo "ERROR: one or more files are corrupted"
238 | echo "see /tmp/checksum.log for details"
239 | launch_interactive_shell
240 | fi
241 | else
242 | echo "ERROR: checksum=y option specified but ${archisobasedir}/${arch}/airootfs.sha512 not found"
243 | launch_interactive_shell
244 | fi
245 | fi
246 |
247 | # shellcheck disable=SC2154
248 | # defined via initcpio's parse_cmdline()
249 | if [ "${verify}" = "y" ]; then
250 | if ! command -v gpg >/dev/null 2>&1; then
251 | echo 'ERROR: verify=y option specified but the gpg binary is not available in initramfs'
252 | launch_interactive_shell
253 | fi
254 |
255 | if [ -f "${fs_img}.sig" ]; then
256 | sigfile="${fs_img##*/}.sig"
257 |
258 | msg ":: Signature verification requested, please wait..."
259 | if _verify_signature "${sigfile}"; then
260 | msg "Signature is OK, continue booting."
261 | else
262 | echo "ERROR: one or more files are corrupted"
263 | launch_interactive_shell
264 | fi
265 | else
266 | echo "ERROR: verify=y option specified but GPG signature not found in ${archisobasedir}/${arch}/"
267 | launch_interactive_shell
268 | fi
269 | fi
270 |
271 | # shellcheck disable=SC2154
272 | # defined via initcpio's parse_cmdline()
273 | if [ "${cms_verify}" = "y" ]; then
274 | if [ -f "${fs_img}.cms.sig" ]; then
275 | cms_sigfile="${fs_img##*/}.cms.sig"
276 |
277 | msg ":: Signature verification requested, please wait..."
278 | if _verify_cms_signature "${cms_sigfile}" "${fs_img}"; then
279 | msg "Signature is OK, continue booting."
280 | else
281 | echo "ERROR: one or more files are corrupted"
282 | launch_interactive_shell
283 | fi
284 | else
285 | echo "ERROR: cms_verify=y option specified but CMS signature not found in ${archisobasedir}/${arch}/"
286 | launch_interactive_shell
287 | fi
288 | fi
289 |
290 | # Enable copytoram if the following conditions apply:
291 | # * the root file system image is not on an optical disc drive,
292 | # * the root file system image size is less than 4 GiB,
293 | # * the estimated available memory is more than the root file system image size + 2 GiB.
294 | if [ "${copytoram}" = "auto" ]; then
295 | iso_blockdev="$(realpath "$(resolve_device "$archisodevice")")"
296 | if [ "$iso_blockdev" = "${iso_blockdev##/dev/sr}" ]; then
297 | fs_img_size="$(du -bsk "$fs_img" | cut -f 1)"
298 | if [ "$fs_img_size" -lt 4194304 ] && [ "$(awk '$1 == "MemAvailable:" { print $2 }' /proc/meminfo)" -gt $((fs_img_size + 2097152)) ]; then
299 | copytoram="y"
300 | fi
301 | fi
302 | fi
303 | if [ "${copytoram}" = "y" ]; then
304 | msg ":: Mounting /run/archiso/copytoram (tmpfs) filesystem, size=${copytoram_size}"
305 | mount --mkdir -t tmpfs -o "size=${copytoram_size}",mode=0755 copytoram /run/archiso/copytoram
306 | fi
307 |
308 | if [ -n "${cow_device}" ]; then
309 | # Mount cow_device read-only at first and remount it read-write right after. This prevents errors when the
310 | # device is already mounted read-only somewhere else (e.g. if cow_device and archisodevice are the same).
311 | _mnt_dev "${cow_device}" "/run/archiso/cowspace" "-r" "${cow_flags}"
312 | mount -o remount,rw "/run/archiso/cowspace"
313 | else
314 | msg ":: Mounting /run/archiso/cowspace (tmpfs) filesystem, size=${cow_spacesize}..."
315 | mount --mkdir -t tmpfs -o "size=${cow_spacesize}",mode=0755 cowspace /run/archiso/cowspace
316 | fi
317 | mkdir -p "/run/archiso/cowspace/${cow_directory}"
318 | chmod 0700 "/run/archiso/cowspace/${cow_directory}"
319 |
320 | _mnt_fs "${fs_img}" "/run/archiso/airootfs"
321 | if [ -f "/run/archiso/airootfs/airootfs.img" ]; then
322 | _mnt_dmsnapshot "/run/archiso/airootfs/airootfs.img" "${newroot}" "/"
323 | else
324 | _mnt_overlayfs "/run/archiso/airootfs" "${newroot}" "/"
325 | fi
326 |
327 | if [ "${copytoram}" = "y" ]; then
328 | umount -d /run/archiso/bootmnt
329 | rmdir /run/archiso/bootmnt
330 | fi
331 | }
332 |
333 | # vim: set ft=sh:
334 |
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/locale.conf:
--------------------------------------------------------------------------------
1 | LANG=en_US.UTF-8
2 |
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/localtime:
--------------------------------------------------------------------------------
1 | /usr/share/zoneinfo/UTC
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/machine-id:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AxOS-project/AxOS/d66d8ef36a91cd126a56b97c4d71453a011f7e39/axos-iso/airootfs/etc/machine-id
--------------------------------------------------------------------------------
/axos-iso/airootfs/etc/mkinitcpio.conf:
--------------------------------------------------------------------------------
1 | # vim:set ft=sh
2 | # MODULES
3 | # The following modules are loaded before any boot hooks are
4 | # run. Advanced users may wish to specify all system modules
5 | # in this array. For instance:
6 | # MODULES=(piix ide_disk reiserfs)
7 | MODULES=()
8 |
9 | # BINARIES
10 | # This setting includes any additional binaries a given user may
11 | # wish into the CPIO image. This is run last, so it may be used to
12 | # override the actual binaries included by a given hook
13 | # BINARIES are dependency parsed, so you may safely ignore libraries
14 | BINARIES=()
15 |
16 | # FILES
17 | # This setting is similar to BINARIES above, however, files are added
18 | # as-is and are not parsed in any way. This is useful for config files.
19 | FILES=()
20 |
21 | # HOOKS
22 | # This is the most important setting in this file. The HOOKS control the
23 | # modules and scripts added to the image, and what happens at boot time.
24 | # Order is important, and it is recommended that you do not change the
25 | # order in which HOOKS are added. Run 'mkinitcpio -H AxOS
12 | 13 |
14 | The Linux experience, enhanced.
15 |
16 | Website
17 |
18 |
19 | Report Bug
20 | ·
21 | Request Feature
22 | ·
23 | Download
24 | ·
25 | Wiki
26 |
27 |
28 |