├── .editorconfig
├── .travis.yml
├── LICENSE
├── Makefile
├── README.adoc
├── alpine-make-vm-image
└── kvm
    ├── configure.sh
    ├── packages
    └── repositories


/.editorconfig:
--------------------------------------------------------------------------------
 1 | # http://editorconfig.org
 2 | root = true
 3 | 
 4 | [*]
 5 | charset = utf-8
 6 | end_of_line = lf
 7 | indent_size = 4
 8 | indent_style = tab
 9 | insert_final_newline = true
10 | trim_trailing_whitespace = true
11 | 
12 | [*.{adoc,yml}]
13 | indent_size = 2
14 | indent_style = space
15 | 


--------------------------------------------------------------------------------
/.travis.yml:
--------------------------------------------------------------------------------
 1 | dist: bionic
 2 | sudo: required
 3 | language: minimal
 4 | addons:
 5 |   apt:
 6 |     packages:
 7 |       - qemu-utils
 8 | script:
 9 |   - sudo ./alpine-make-vm-image
10 |         --image-format qcow2
11 |         --image-size 2G
12 |         --repositories-file example/repositories
13 |         --packages "$(cat example/packages)"
14 |         --script-chroot
15 |         alpine-virthardened-$(date +%Y-%m-%d).qcow2 -- ./example/configure.sh
16 | #deploy:
17 | #  provider: releases
18 | #  api_key:
19 | #    secure: <Encrypted GitHub Personal Token>
20 | #  file: "*.qcow2"
21 | #  file_glob: true
22 | #  skip_cleanup: true
23 | #  on:
24 | #    tags: true
25 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License
 2 | 
 3 | Copyright 2017-2020 Jakub Jirutka <jakub@jirutka.cz>.
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in
13 | all copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
21 | THE SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/Makefile:
--------------------------------------------------------------------------------
 1 | SCRIPT_NAME := alpine-make-vm-image
 2 | 
 3 | DESTDIR := /
 4 | PREFIX := /usr/local
 5 | 
 6 | SED := sed
 7 | SHA1SUM := sha1sum
 8 | 
 9 | ifeq ($(shell uname -s),Darwin)
10 | 	SED := gsed
11 | 	SHA1SUM := shasum -a 1
12 | endif
13 | 
14 | #: Update version in the script and README.adoc to $VERSION.
15 | bump-version:
16 | 	test -n "$(VERSION)"  # $$VERSION
17 | 	$(SED) -E -i "s/^(readonly VERSION)=.*/\1='$(VERSION)'/" $(SCRIPT_NAME)
18 | 	$(SED) -E -i "s/^(:version:).*/\1 $(VERSION)/" README.adoc
19 | 
20 | #: Install the script into $DESTDIR.
21 | install:
22 | 	mkdir -p $(DESTDIR)$(PREFIX)/bin
23 | 	install -m 755 $(SCRIPT_NAME) $(DESTDIR)$(PREFIX)/bin/$(SCRIPT_NAME)
24 | 
25 | #: Update variable :script-sha1: in README.adoc with SHA1 checksum of the script.
26 | readme-update-checksum:
27 | 	$(SED) -E -i \
28 | 		-e "s/^(:script-sha1:).*/\1 $(shell $(SHA1SUM) $(SCRIPT_NAME) | cut -d ' ' -f 1)/" \
29 | 		README.adoc
30 | 
31 | #: Bump version to $VERSION, create release commit and tag.
32 | release: .check-git-clean | bump-version readme-update-checksum
33 | 	test -n "$(VERSION)"  # $$VERSION
34 | 	git add .
35 | 	git commit -m "Release version $(VERSION)"
36 | 	git tag -s v$(VERSION) -m v$(VERSION)
37 | 
38 | #: Print list of targets.
39 | help:
40 | 	@printf '%s\n\n' 'List of targets:'
41 | 	@$(SED) -En '/^#:.*/{ N; s/^#: (.*)\n([A-Za-z0-9_-]+).*/\2 \1/p }' $(MAKEFILE_LIST) \
42 | 		| while read label desc; do printf '%-30s %s\n' "$$label" "$$desc"; done
43 | 
44 | .check-git-clean:
45 | 	@test -z "$(shell git status --porcelain)" \
46 | 		|| { echo 'You have uncommitted changes!' >&2; exit 1; }
47 | 
48 | .PHONY: bump-version install readme-update-checksum release help .check-git-clean
49 | 


--------------------------------------------------------------------------------
/README.adoc:
--------------------------------------------------------------------------------
 1 | = Make Alpine Linux VM Image
 2 | :script-name: alpine-make-vm-image
 3 | :script-sha1: a0fc0b4886b541bb4dd7b91b4e1e99719a1700da
 4 | :gh-name: alpinelinux/{script-name}
 5 | :version: 0.6.0
 6 | 
 7 | ifdef::env-github[]
 8 | image:https://travis-ci.org/{gh-name}.svg?branch=master["Build Status", link="https://travis-ci.org/{gh-name}"]
 9 | endif::env-github[]
10 | 
11 | This project provides a script for making customized https://alpinelinux.org/[Alpine Linux] disk images for virtual machines.
12 | It’s quite simple (300 LoC of shell), fast (~22 seconds on Travis CI, without Travis VM initialization) and requires minimum dependencies (QEMU and filesystem tools).
13 | 
14 | TIP: Don’t need VM, just want to chroot into Alpine Linux (e.g. on CI)?
15 |      Try https://github.com/alpinelinux/alpine-chroot-install[alpine-chroot-install]!
16 | 
17 | 
18 | == Requirements
19 | 
20 | * Linux system with common userland (Busybox or GNU coreutils)
21 | * POSIX-sh compatible shell (e.g. Busybox ash, dash, Bash, ZSH)
22 | * qemu-img and qemu-nbd (automatically installed by the script if running on Alpine)
23 | * e2fsprogs (for ext4), btrfs-progs (for Btrfs), or xfsprogs (for XFS) (automatically installed by the script if running on Alpine)
24 | 
25 | 
26 | == Usage
27 | 
28 | Read documentation in link:{script-name}[{script-name}].
29 | See link:.travis.yml[.travis.yml] for Travis example.
30 | 
31 | You can copy link:{script-name}[{script-name}] into your repository or download it on demand, e.g.:
32 | 
33 | [source, sh, subs="+attributes"]
34 | wget https://raw.githubusercontent.com/{gh-name}/v{version}/{script-name} \
35 |     && echo '{script-sha1}  {script-name}' | sha1sum -c \
36 |     || exit 1
37 | 
38 | 
39 | == Pitfalls
40 | 
41 | === Creating Image for VMware (ESXi)
42 | 
43 | VMware and disk images (virtual disks) is one big mess.
44 | You can find that VMware uses the VMDK format, but the problem is that this is not a single format.
45 | Actually it has many subformats with very different structure and various (in)compatibility with VMware hypervisors.
46 | 
47 | When I’ve created a disk image using `qemu-img create -f vmdk` or converted Qcow2 to VMDK using `qemu-img convert -O vmdk`, vSphere client loaded this image without any problem, but the data was corrupted.
48 | Eventually I found in some old documentation that ESXi does not support “sparse” disks…
49 | 
50 | So after many trials I found out that the least bad and functional solution is to create Qcow2 image and then convert it to VMDK using:
51 | 
52 | [source, sh]
53 | qemu-img convert -f qcow2 -O vmdk -o adapter_type=lsilogic,subformat=monolithicFlat alpine.qcow2 alpine.vmdk
54 | 
55 | Unfortunately, this creates a “thick” image, i.e. its size equals the “provisioned space”, not actually used space as in Qcow2.
56 | However, you can compress it with gzip to avoid transferring multiple gigabytes of zeros over network.
57 | 
58 | 
59 | == License
60 | 
61 | This project is licensed under http://opensource.org/licenses/MIT/[MIT License].
62 | For the full text of the license, see the link:LICENSE[LICENSE] file.
63 | 


--------------------------------------------------------------------------------
/alpine-make-vm-image:
--------------------------------------------------------------------------------
  1 | #!/bin/sh
  2 | # vim: set ts=4:
  3 | #---help---
  4 | # Usage: alpine-make-vm-image [options] [--] <image> [<script> [<script-opts...>]]
  5 | #
  6 | # This script creates a bootable Alpine Linux disk image for virtual machines.
  7 | # If running on Alpine system (detected by file /etc/alpine-release), then it
  8 | # also installs needed packages on the host system. On other systems you must
  9 | # install them yourself: qemu-img, qemu-nbd, and mkfs utility for the chosen
 10 | # ROOTFS. If $APK is not available on the host system, then static apk-tools
 11 | # specified by $APK_TOOLS_URI is downloaded and used.
 12 | #
 13 | # Note that it does not create any partitions (it's really not needed),
 14 | # filesystem is created directly on the image.
 15 | #
 16 | # Arguments:
 17 | #   <image>                               Path of disk image to use or create if not exists.
 18 | #
 19 | #   <script>                              Path of script to execute after installing base system in
 20 | #                                         the mounted image and before umounting it.
 21 | #
 22 | #   <script-opts>                         Arguments to pass to the script.
 23 | #
 24 | # Options and Environment Variables:
 25 | #   -b --branch ALPINE_BRANCH             Alpine branch to install; used only when
 26 | #                                         --repositories-file is not specified. Default is
 27 | #                                         latest-stable.
 28 | #
 29 | #   -f --image-format IMAGE_FORMAT        Format of the disk image (see qemu-img --help).
 30 | #
 31 | #   -s --image-size IMAGE_SIZE            Size of the disk image to create in bytes or with suffix
 32 | #                                         (e.g. 1G, 1024M). Default is 2G.
 33 | #
 34 | #   -i --initfs-features INITFS_FEATURES  List of additional mkinitfs features (basically modules)
 35 | #                                         to be included in initramfs (see mkinitfs -L). "base" and
 36 | #                                         $ROOTFS is always included, don't specify them here.
 37 | #                                         Default is "scsi virtio".
 38 | #
 39 | #   -k --kernel-flavor KERNEL_FLAVOR      The kernel flavour to install; virt (default), lts
 40 | #                                         (Alpine >=3.11), or vanilla (Alpine <3.11).
 41 | #
 42 | #      --keys-dir KEYS_DIR                Path of directory with Alpine keys to copy into the image.
 43 | #                                         Default is /etc/apk/keys. If does not exist, keys for
 44 | #                                         x86_64 embedded in this script will be used.
 45 | #
 46 | #   -m --mirror-uri ALPINE_MIRROR         URI of the Aports mirror to fetch packages; used only
 47 | #                                         when --repositories-file is not specified. Default is
 48 | #                                         https://nl.alpinelinux.org/alpine.
 49 | #
 50 | #   -C --no-cleanup (CLEANUP)             Don't umount and disconnect image when done.
 51 | #
 52 | #   -p --packages PACKAGES                Additional packages to install into the image.
 53 | #
 54 | #   -r --repositories-file REPOS_FILE     Path of repositories file to copy into the rootfs.
 55 | #                                         Default is /etc/apk/repositories. If does not exist,
 56 | #                                         repositories file with Alpine's main and community
 57 | #                                         repositories on --mirror-uri is created.
 58 | #
 59 | #      --rootfs ROOTFS                    Filesystem to create on the image. Default is ext4.
 60 | #
 61 | #   -c --script-chroot (SCRIPT_CHROOT)    Bind <script>'s directory at /mnt inside image and chroot
 62 | #                                         into the image before executing <script>.
 63 | #
 64 | #   -t --serial-console (SERIAL_CONSOLE)  Add configuration for a serial console on ttyS0.
 65 | #
 66 | #   -h --help                             Show this help message and exit.
 67 | #
 68 | #   -v --version                          Print version and exit.
 69 | #
 70 | #   APK                                   APK command to use. Default is "apk".
 71 | #
 72 | #   APK_OPTS                              Options to pass into apk on each execution.
 73 | #                                         Default is "--no-progress".
 74 | #
 75 | #   APK_TOOLS_URI                         URL of static apk-tools tarball to download if $APK is
 76 | #                                         not found on the host system. Default is x86_64 apk-tools
 77 | #                                         from https://github.com/alpinelinux/apk-tools/releases.
 78 | #
 79 | #   APK_TOOLS_SHA256                      SHA-256 checksum of $APK_TOOLS_URI.
 80 | #
 81 | # Each option can be also provided by environment variable. If both option and
 82 | # variable is specified and the option accepts only one argument, then the
 83 | # option takes precedence.
 84 | #
 85 | # https://github.com/alpinelinux/alpine-make-vm-image
 86 | #---help---
 87 | set -eu
 88 | 
 89 | # Some distros (e.g. Arch Linux) does not have /bin or /sbin in PATH.
 90 | PATH="$PATH:/usr/sbin:/usr/bin:/sbin:/bin"
 91 | 
 92 | readonly PROGNAME='alpine-make-vm-image'
 93 | readonly VERSION='0.6.0'
 94 | readonly VIRTUAL_PKG=".make-$PROGNAME"
 95 | 
 96 | # Alpine APK keys for verification of packages for x86_64.
 97 | readonly ALPINE_KEYS='
 98 | alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub:MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yHJxQgsHQREclQu4Ohe\nqxTxd1tHcNnvnQTu/UrTky8wWvgXT+jpveroeWWnzmsYlDI93eLI2ORakxb3gA2O\nQ0Ry4ws8vhaxLQGC74uQR5+/yYrLuTKydFzuPaS1dK19qJPXB8GMdmFOijnXX4SA\njixuHLe1WW7kZVtjL7nufvpXkWBGjsfrvskdNA/5MfxAeBbqPgaq0QMEfxMAn6/R\nL5kNepi/Vr4S39Xvf2DzWkTLEK8pcnjNkt9/aafhWqFVW7m3HCAII6h/qlQNQKSo\nGuH34Q8GsFG30izUENV9avY7hSLq7nggsvknlNBZtFUcmGoQrtx3FmyYsIC8/R+B\nywIDAQAB
 99 | alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub:MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlzMkl7b5PBdfMzGdCT0\ncGloRr5xGgVmsdq5EtJvFkFAiN8Ac9MCFy/vAFmS8/7ZaGOXoCDWbYVLTLOO2qtX\nyHRl+7fJVh2N6qrDDFPmdgCi8NaE+3rITWXGrrQ1spJ0B6HIzTDNEjRKnD4xyg4j\ng01FMcJTU6E+V2JBY45CKN9dWr1JDM/nei/Pf0byBJlMp/mSSfjodykmz4Oe13xB\nCa1WTwgFykKYthoLGYrmo+LKIGpMoeEbY1kuUe04UiDe47l6Oggwnl+8XD1MeRWY\nsWgj8sF4dTcSfCMavK4zHRFFQbGp/YFJ/Ww6U9lA3Vq0wyEI6MCMQnoSMFwrbgZw\nwwIDAQAB
100 | '
101 | 
102 | : ${APK_TOOLS_URI:="https://github.com/alpinelinux/apk-tools/releases/download/v2.10.4/apk-tools-2.10.4-x86_64-linux.tar.gz"}
103 | : ${APK_TOOLS_SHA256:="efe948160317fe78058e207554d0d9195a3dfcc35f77df278d30448d7b3eb892"}
104 | 
105 | : ${APK:="apk"}
106 | : ${APK_OPTS:="--no-progress"}
107 | 
108 | 
109 | # For compatibility with systems that does not have "realpath" command.
110 | if ! command -v realpath >/dev/null; then
111 | 	alias realpath='readlink -f'
112 | fi
113 | 
114 | die() {
115 | 	printf '\033[1;31mERROR:\033[0m %s\n' "$@" >&2  # bold red
116 | 	exit 1
117 | }
118 | 
119 | einfo() {
120 | 	printf '\n\033[1;36m> %s\033[0m\n' "$@" >&2  # bold cyan
121 | }
122 | 
123 | # Prints help and exists with the specified status.
124 | help() {
125 | 	sed -En '/^#---help---/,/^#---help---/p' "$0" | sed -E 's/^# ?//; 1d;$d;'
126 | 	exit ${1:-0}
127 | }
128 | 
129 | # Cleans the host system. This function is executed before exiting the script.
130 | cleanup() {
131 | 	set +eu
132 | 	trap '' EXIT HUP INT TERM  # unset trap to avoid loop
133 | 
134 | 	cd /
135 | 	if [ -d "$temp_dir" ]; then
136 | 		rm -Rf "$temp_dir"
137 | 	fi
138 | 	if [ "$mount_dir" ]; then
139 | 		umount_recursively "$mount_dir" \
140 | 			|| die "Failed to unmount $mount_dir; unmount it and disconnect $nbd_dev manually"
141 | 		rm -Rf "$mount_dir"
142 | 	fi
143 | 	if [ "$nbd_dev" ]; then
144 | 		qemu-nbd --disconnect "$nbd_dev" \
145 | 			|| die "Failed to disconnect $nbd_dev; disconnect it manually"
146 | 	fi
147 | 	if [ "$INSTALL_HOST_PKGS" = yes ]; then
148 | 		_apk del $VIRTUAL_PKG
149 | 	fi
150 | }
151 | 
152 | _apk() {
153 | 	"$APK" $APK_OPTS "$@"
154 | }
155 | 
156 | # Attaches the specified image as a NBD block device and prints its path.
157 | attach_image() {
158 | 	local image="$1"
159 | 	local format="${2:-}"
160 | 	local nbd_dev
161 | 
162 | 	nbd_dev=$(get_available_nbd) || {
163 | 		modprobe nbd max_part=0
164 | 		sleep 1
165 | 		nbd_dev=$(get_available_nbd)
166 | 	} || die 'No available nbd device found!'
167 | 
168 | 	qemu-nbd --connect="$nbd_dev" --cache=writeback \
169 | 		${format:+--format=$format} "$image" \
170 | 		&& echo "$nbd_dev"
171 | }
172 | 
173 | # Prints UUID of filesystem on the specified block device.
174 | blk_uuid() {
175 | 	local dev="$1"
176 | 	blkid "$dev" | sed -En 's/.*UUID="([^"]+)".*/\1/p'
177 | }
178 | 
179 | # Writes Alpine APK keys embedded in this script into directory $1.
180 | dump_alpine_keys() {
181 | 	local dest_dir="$1"
182 | 	local content file line
183 | 
184 | 	mkdir -p "$dest_dir"
185 | 	for line in $ALPINE_KEYS; do
186 | 		file=${line%%:*}
187 | 		content=${line#*:}
188 | 
189 | 		printf -- "-----BEGIN PUBLIC KEY-----\n$content\n-----END PUBLIC KEY-----\n" \
190 | 			> "$dest_dir/$file"
191 | 	done
192 | }
193 | 
194 | # Prints path of available nbdX device, or returns 1 if not any.
195 | get_available_nbd() {
196 | 	local dev; for dev in $(find /dev -maxdepth 2 -name 'nbd[0-9]*'); do
197 | 		if [ "$(blockdev --getsize64 "$dev")" -eq 0 ]; then
198 | 			echo "$dev"; return 0
199 | 		fi
200 | 	done
201 | 	return 1
202 | }
203 | 
204 | # Prints name of the package needed for creating the specified filesystem.
205 | fs_progs_pkg() {
206 | 	local fs="$1"  # filesystem name
207 | 
208 | 	case "$fs" in
209 | 		ext4) echo 'e2fsprogs';;
210 | 		btrfs) echo 'btrfs-progs';;
211 | 		xfs) echo 'xfsprogs';;
212 | 	esac
213 | }
214 | 
215 | # Binds the directory $1 at the mountpoint $2 and sets propagation to private.
216 | mount_bind() {
217 | 	mkdir -p "$2"
218 | 	mount --bind "$1" "$2"
219 | 	mount --make-private "$2"
220 | }
221 | 
222 | # Prepares chroot at the specified path.
223 | prepare_chroot() {
224 | 	local dest="$1"
225 | 
226 | 	mkdir -p "$dest"/proc
227 | 	mount -t proc none "$dest"/proc
228 | 	mount_bind /dev "$dest"/dev
229 | 	mount_bind /sys "$dest"/sys
230 | 
231 | 	install -D -m 644 /etc/resolv.conf "$dest"/etc/resolv.conf
232 | }
233 | 
234 | # Adds specified services to the runlevel. Current working directory must be
235 | # root of the image.
236 | rc_add() {
237 | 	local runlevel="$1"; shift  # runlevel name
238 | 	local services="$*"  # names of services
239 | 
240 | 	local svc; for svc in $services; do
241 | 		mkdir -p etc/runlevels/$runlevel
242 | 		ln -s /etc/init.d/$svc etc/runlevels/$runlevel/$svc
243 | 		echo " * service $svc added to runlevel $runlevel"
244 | 	done
245 | }
246 | 
247 | # Installs and configures extlinux.
248 | setup_extlinux() {
249 | 	local mnt="$1"  # path of directory where is root device currently mounted
250 | 	local root_dev="$2"  # root device
251 | 	local modules="$3"  # modules which should be loaded before pivot_root
252 | 	local kernel_flavor="$4"  # name of default kernel to boot
253 | 	local serial_port="$5"  # serial port number for serial console
254 | 	local default_kernel="$kernel_flavor"
255 | 	local kernel_opts=''
256 | 
257 | 	[ -z "$serial_port" ] || kernel_opts="console=$serial_port"
258 | 
259 | 	if [ "$kernel_flavor" = 'virt' ]; then
260 | 		_apk search --root . --exact --quiet linux-lts | grep -q . \
261 | 			&& default_kernel='lts' \
262 | 			|| default_kernel='vanilla'
263 | 	fi
264 | 
265 | 	sed -Ei \
266 | 		-e "s|^[# ]*(root)=.*|\1=$root_dev|" \
267 | 		-e "s|^[# ]*(default_kernel_opts)=.*|\1=\"$kernel_opts\"|" \
268 | 		-e "s|^[# ]*(modules)=.*|\1=\"$modules\"|" \
269 | 		-e "s|^[# ]*(default)=.*|\1=$default_kernel|" \
270 | 		-e "s|^[# ]*(serial_port)=.*|\1=$serial_port|" \
271 | 		"$mnt"/etc/update-extlinux.conf
272 | 
273 | 	chroot "$mnt" extlinux --install /boot
274 | 	chroot "$mnt" update-extlinux --warn-only 2>&1 \
275 | 		| grep -Fv 'extlinux: cannot open device /dev' >&2
276 | }
277 | 
278 | # Configures mkinitfs.
279 | setup_mkinitfs() {
280 | 	local mnt="$1"  # path of directory where is root device currently mounted
281 | 	local features="$2"  # list of mkinitfs features
282 | 
283 | 	features=$(printf '%s\n' $features | sort | uniq | xargs)
284 | 
285 | 	sed -Ei "s|^[# ]*(features)=.*|\1=\"$features\"|" \
286 | 		"$mnt"/etc/mkinitfs/mkinitfs.conf
287 | }
288 | 
289 | # Unmounts all filesystem under the specified directory tree.
290 | umount_recursively() {
291 | 	local mount_point="$1"
292 | 	test -n "$mount_point" || return 1
293 | 
294 | 	cat /proc/mounts \
295 | 		| cut -d ' ' -f 2 \
296 | 		| grep "^$mount_point" \
297 | 		| sort -r \
298 | 		| xargs umount -rn
299 | }
300 | 
301 | # Downloads the specified file using wget and checks checksum.
302 | wgets() (
303 | 	local url="$1"
304 | 	local sha256="$2"
305 | 	local dest="${3:-.}"
306 | 
307 | 	cd "$dest" \
308 | 		&& wget -T 10 --no-verbose "$url" \
309 | 		&& echo "$sha256  ${url##*/}" | sha256sum -c
310 | )
311 | 
312 | 
313 | #=============================  M a i n  ==============================#
314 | 
315 | opts=$(getopt -n $PROGNAME -o b:cCf:hi:k:p:r:s:tv \
316 | 	-l branch:,image-format:,image-size:,initfs-features:,kernel-flavor:,keys-dir:,mirror-uri:,no-cleanup,packages:,repositories-file:,rootfs:,script-chroot,serial-console,help,version \
317 | 	-- "$@") || help 1 >&2
318 | 
319 | eval set -- "$opts"
320 | while [ $# -gt 0 ]; do
321 | 	n=2
322 | 	case "$1" in
323 | 		-b | --branch) ALPINE_BRANCH="$2";;
324 | 		-f | --image-format) IMAGE_FORMAT="$2";;
325 | 		-s | --image-size) IMAGE_SIZE="$2";;
326 | 		-i | --initfs-features) INITFS_FEATURES="${INITFS_FEATURES:-} $2";;
327 | 		-k | --kernel-flavor) KERNEL_FLAVOR="$2";;
328 | 		     --keys-dir) KEYS_DIR="$(realpath "$2")";;
329 | 		-m | --mirror-uri) ALPINE_MIRROR="$2";;
330 | 		-C | --no-cleanup) CLEANUP='no'; n=1;;
331 | 		-p | --packages) PACKAGES="${PACKAGES:-} $2";;
332 | 		-r | --repositories-file) REPOS_FILE="$(realpath "$2")";;
333 | 		     --rootfs) ROOTFS="$2";;
334 | 		-t | --serial-console) SERIAL_CONSOLE='yes'; n=1;;
335 | 		-c | --script-chroot) SCRIPT_CHROOT='yes'; n=1;;
336 | 		-h | --help) help 0;;
337 | 		-V | --version) echo "$PROGNAME $VERSION"; exit 0;;
338 | 		--) shift; break;;
339 | 	esac
340 | 	shift $n
341 | done
342 | 
343 | : ${ALPINE_BRANCH:="latest-stable"}
344 | : ${ALPINE_MIRROR:="https://nl.alpinelinux.org/alpine"}
345 | : ${CLEANUP:="yes"}
346 | : ${IMAGE_FORMAT:=}
347 | : ${IMAGE_SIZE:="2G"}
348 | : ${INITFS_FEATURES:="scsi virtio"}
349 | : ${KERNEL_FLAVOR:="virt"}
350 | : ${KEYS_DIR:="/etc/apk/keys"}
351 | : ${PACKAGES:=}
352 | : ${REPOS_FILE:="/etc/apk/repositories"}
353 | : ${ROOTFS:="ext4"}
354 | : ${SCRIPT_CHROOT:="no"}
355 | : ${SERIAL_CONSOLE:="no"}
356 | 
357 | case "$ALPINE_BRANCH" in
358 | 	[0-9]*) ALPINE_BRANCH="v$ALPINE_BRANCH";;
359 | esac
360 | 
361 | if [ -f /etc/alpine-release ]; then
362 | 	: ${INSTALL_HOST_PKGS:="yes"}
363 | else
364 | 	: ${INSTALL_HOST_PKGS:="no"}
365 | fi
366 | 
367 | SERIAL_PORT=
368 | [ "$SERIAL_CONSOLE" = 'no' ] || SERIAL_PORT='ttyS0'
369 | 
370 | [ $# -ne 0 ] || help 1 >&2
371 | 
372 | IMAGE_FILE="$1"; shift
373 | SCRIPT=
374 | [ $# -eq 0 ] || { SCRIPT=$(realpath "$1"); shift; }
375 | 
376 | [ "$CLEANUP" = no ] || trap cleanup EXIT HUP INT TERM
377 | 
378 | #-----------------------------------------------------------------------
379 | if [ "$INSTALL_HOST_PKGS" = yes ]; then
380 | 	einfo 'Installing needed packages on host system'
381 | 
382 | 	# We need load btrfs module to avoid the error message:
383 | 	# 'failed to open /dev/btrfs-control'
384 | 	if ! grep -q -w "$ROOTFS" /proc/filesystems; then
385 | 		modprobe $ROOTFS
386 | 	fi
387 | 	_apk add -t $VIRTUAL_PKG qemu-img $(fs_progs_pkg "$ROOTFS")
388 | fi
389 | 
390 | #-----------------------------------------------------------------------
391 | temp_dir=''
392 | if ! command -v "$APK" >/dev/null; then
393 | 	einfo "$APK not found, downloading static apk-tools"
394 | 
395 | 	temp_dir="$(mktemp -d /tmp/$PROGNAME.XXXXXX)"
396 | 	wgets "$APK_TOOLS_URI" "$APK_TOOLS_SHA256" "$temp_dir"
397 | 	tar -C "$temp_dir" -xzf "$temp_dir/${APK_TOOLS_URI##*/}"
398 | 	APK="$(ls "$temp_dir"/apk-tools-*/apk)"
399 | fi
400 | 
401 | #-----------------------------------------------------------------------
402 | if [ ! -f "$IMAGE_FILE" ]; then
403 | 	einfo "Creating $IMAGE_FORMAT image of size $IMAGE_SIZE"
404 | 	qemu-img create ${IMAGE_FORMAT:+-f $IMAGE_FORMAT} "$IMAGE_FILE" "$IMAGE_SIZE"
405 | fi
406 | 
407 | #-----------------------------------------------------------------------
408 | einfo "Attaching image $IMAGE_FILE as a NBD device"
409 | 
410 | nbd_dev=$(attach_image "$IMAGE_FILE" "$IMAGE_FORMAT")
411 | 
412 | #-----------------------------------------------------------------------
413 | einfo "Formatting image to $ROOTFS"
414 | 
415 | # syslinux 6.0.3 cannot boot from ext4 w/ 64bit feature enabled.
416 | # -E nodiscard / -K - do not attempt to discard blocks at mkfs time (it's
417 | # useless for NBD image and prints confusing error).
418 | [ "$ROOTFS" = ext4 ] && mkfs_args='-O ^64bit -E nodiscard' || mkfs_args='-K'
419 | 
420 | mkfs.$ROOTFS -L root $mkfs_args "$nbd_dev"
421 | 
422 | root_uuid=$(blk_uuid "$nbd_dev")
423 | mount_dir=$(mktemp -d /tmp/$PROGNAME.XXXXXX)
424 | 
425 | #-----------------------------------------------------------------------
426 | einfo "Mounting image at $mount_dir"
427 | 
428 | mount "$nbd_dev" "$mount_dir"
429 | 
430 | #-----------------------------------------------------------------------
431 | einfo 'Installing base system'
432 | 
433 | cd "$mount_dir"
434 | 
435 | mkdir -p etc/apk/keys
436 | if [ -f "$REPOS_FILE" ]; then
437 | 	install -m 644 "$REPOS_FILE" etc/apk/repositories
438 | else
439 | 	cat > etc/apk/repositories <<-EOF
440 | 		$ALPINE_MIRROR/$ALPINE_BRANCH/main
441 | 		$ALPINE_MIRROR/$ALPINE_BRANCH/community
442 | 	EOF
443 | fi
444 | if [ -d "$KEYS_DIR" ]; then
445 | 	cp "$KEYS_DIR"/* etc/apk/keys/
446 | else
447 | 	dump_alpine_keys etc/apk/keys/
448 | fi
449 | 
450 | _apk add --root . --update-cache --initdb alpine-base
451 | prepare_chroot .
452 | 
453 | #-----------------------------------------------------------------------
454 | einfo "Installing and configuring mkinitfs"
455 | 
456 | _apk add --root . mkinitfs
457 | setup_mkinitfs . "base $ROOTFS $INITFS_FEATURES"
458 | 
459 | #-----------------------------------------------------------------------
460 | einfo "Installing kernel linux-$KERNEL_FLAVOR"
461 | 
462 | _apk add --root . linux-$KERNEL_FLAVOR
463 | 
464 | #-----------------------------------------------------------------------
465 | einfo 'Setting up extlinux bootloader'
466 | 
467 | _apk add --root . --no-scripts syslinux
468 | setup_extlinux . "UUID=$root_uuid" "$ROOTFS" "$KERNEL_FLAVOR" "$SERIAL_PORT"
469 | 
470 | cat > etc/fstab <<-EOF
471 | 	# <fs>		<mountpoint>	<type>	<opts>		<dump/pass>
472 | 	UUID=$root_uuid	/		$ROOTFS	noatime		0 1
473 | EOF
474 | 
475 | #-----------------------------------------------------------------------
476 | if [ "$SERIAL_PORT" ]; then
477 | 	echo "$SERIAL_PORT" >> "$mount_dir"/etc/securetty
478 | 	sed -Ei "s|^[# ]*($SERIAL_PORT:.*)|\1|" "$mount_dir"/etc/inittab
479 | fi
480 | 
481 | #-----------------------------------------------------------------------
482 | einfo 'Enabling base system services'
483 | 
484 | rc_add sysinit devfs dmesg mdev hwdrivers
485 | [ -e etc/init.d/cgroups ] && rc_add sysinit cgroups ||:  # since v3.8
486 | 
487 | rc_add boot modules hwclock swap hostname sysctl bootmisc syslog
488 | rc_add shutdown killprocs savecache mount-ro
489 | 
490 | #-----------------------------------------------------------------------
491 | if [ "$PACKAGES" ]; then
492 | 	einfo 'Installing additional packages'
493 | 	_apk add --root . $PACKAGES
494 | fi
495 | 
496 | #-----------------------------------------------------------------------
497 | if [ "$SCRIPT" ]; then
498 | 	script_name="${SCRIPT##*/}"
499 | 
500 | 	if [ "$SCRIPT_CHROOT" = 'no' ]; then
501 | 		einfo "Executing script: $script_name $*"
502 | 		"$SCRIPT" "$@" || die 'Script failed'
503 | 	else
504 | 		einfo "Executing script in chroot: $script_name $*"
505 | 		mount_bind "${SCRIPT%/*}" mnt/
506 | 		chroot . /bin/sh -c "cd /mnt && ./$script_name \"\$@\"" -- "$@" \
507 | 			|| die 'Script failed'
508 | 	fi
509 | fi
510 | 
511 | #-----------------------------------------------------------------------
512 | einfo 'Completed'
513 | 
514 | cd - >/dev/null
515 | ls -lh "$IMAGE_FILE"
516 | 


--------------------------------------------------------------------------------
/kvm/configure.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | _step_counter=0
 4 | step() {
 5 | 	_step_counter=$(( _step_counter + 1 ))
 6 | 	printf '\n\033[1;36m%d) %s\033[0m\n' $_step_counter "$@" >&2  # bold cyan
 7 | }
 8 | 
 9 | 
10 | step 'Set up timezone'
11 | setup-timezone -z Europe/Paris
12 | 
13 | step 'Set up networking'
14 | cat > /etc/network/interfaces <<-EOF
15 | 	iface lo inet loopback
16 | 	iface eth0 inet dhcp
17 | EOF
18 | ln -s networking /etc/init.d/net.lo
19 | ln -s networking /etc/init.d/net.eth0
20 | 
21 | step 'Adjust rc.conf'
22 | sed -Ei \
23 | 	-e 's/^[# ](rc_depend_strict)=.*/\1=NO/' \
24 | 	-e 's/^[# ](rc_logger)=.*/\1=YES/' \
25 | 	-e 's/^[# ](unicode)=.*/\1=YES/' \
26 | 	/etc/rc.conf
27 | 
28 | step 'Enable services'
29 | rc-update add acpid default
30 | rc-update add chronyd default
31 | rc-update add crond default
32 | rc-update add net.eth0 default
33 | rc-update add net.lo boot
34 | rc-update add termencoding boot
35 | 
36 | step 'Create KVM default user'
37 | adduser --home /home/kvm --shell /bin/bash --ingroup libvirt
38 | 
39 | step 'Enable KVM services'
40 | rc-update add libvirt default
41 | rc-update add libvirt default
42 | 
43 | step 'Adding KVM kernel modules'
44 | echo "tun bridge" | tee -a /etc/modules
45 | 
46 | step 'Enable KVM remote access'
47 | cat > /etc/polkit-1/localauthority/50-local.d/50-libvirt-ssh-remote-access-policy.pkla <<-EOF
48 | [Remote libvirt SSH access]
49 |  Identity=unix-group:libvirt
50 |  Action=org.libvirt.unix.manage
51 |  ResultAny=yes
52 |  ResultInactive=yes
53 |  ResultActive=yes
54 | EOF
55 | 


--------------------------------------------------------------------------------
/kvm/packages:
--------------------------------------------------------------------------------
1 | chrony
2 | less
3 | logrotate
4 | dropbear
5 | libvirt-daemon
6 | qemu-img
7 | qemu-system-x86_64
8 | sudo
9 | 


--------------------------------------------------------------------------------
/kvm/repositories:
--------------------------------------------------------------------------------
1 | https://nl.alpinelinux.org/alpine/v3.11/main
2 | https://nl.alpinelinux.org/alpine/v3.11/community
3 | 


--------------------------------------------------------------------------------