0064db95fe
The original image-builder approach had an entirely containerized approach for building target images. This approach was flawed because: 1. There are a number of debian packages which will not install without /sys, /proc, /dev, or /dev/pts mountpoints, and 2. Container build process does not support building with privileges needed to bind-mount these directories into the chroot build space 3. It is a requirement for all packages to be installed in the container image in order to avoid deployment risk of missing mirror resources This patchset addresses this problem by performing necessary privileged steps outside of a containerized build process. At the end of this process, the root filesystem is packaged into a docker container when elevated permissions are no longer required. Change-Id: I5f8dc972f67c5649bf5f9403a5a512d06c948720
71 lines
2.2 KiB
YAML
71 lines
2.2 KiB
YAML
- name: "Including any user-defined vars"
|
|
include_vars:
|
|
file: main.yaml
|
|
name: user-vars
|
|
|
|
- name: "Append any user-defined repos to multistrap list"
|
|
set_fact:
|
|
repos: "{{ repos + repos_append }}"
|
|
when: repos_append is defined
|
|
|
|
- name: "Append any user-defined pkgs to be installed from default Ubuntu mirrors"
|
|
set_fact:
|
|
ubuntu_packages: "{{ ubuntu_packages + ubuntu_packages_append }}"
|
|
when: ubuntu_packages_append is defined
|
|
|
|
- name: "ensuring directory {{ rootfs_root }} exists for rootfs"
|
|
file:
|
|
path: "{{ rootfs_root }}"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: "create temporary directory for multistrap config"
|
|
tempfile:
|
|
state: directory
|
|
suffix: multistrap
|
|
register: multistrap_tempdir
|
|
|
|
- name: "write out multistrap config"
|
|
template:
|
|
src: multistrap.conf.j2
|
|
dest: "{{ multistrap_tempdir.path }}/multistrap.conf"
|
|
validate: multistrap --simulate -f %s
|
|
|
|
- name: "install required apt keys manually"
|
|
include_tasks: apt-key-install.yaml
|
|
loop: "{{ repos }}"
|
|
|
|
# kdump-tools does not install properly in multistrap environment. This fix allows kdump-tools
|
|
# installation to succeed.
|
|
- name: "kdump-tools fix - create directory"
|
|
shell: |
|
|
set -e
|
|
mkdir -p "{{ rootfs_root }}/etc/kernel/postinst.d"
|
|
- name: "kdump-tools fix - deploy build script"
|
|
template:
|
|
src: kdump-tools.j2
|
|
dest: "{{ rootfs_root }}/etc/kernel/postinst.d/kdump-tools"
|
|
mode: '0755'
|
|
# kdump-tools deb package will overwrite script without write protection enabled
|
|
- name: "kdump-tools fix - lock build script"
|
|
shell: |
|
|
set -e
|
|
chattr +i "{{ rootfs_root }}/etc/kernel/postinst.d/kdump-tools"
|
|
|
|
- name: "Running multistrap"
|
|
shell:
|
|
cmd: "multistrap -f {{ multistrap_tempdir.path }}/multistrap.conf"
|
|
|
|
#- name: "create grub.cfg"
|
|
# shell:
|
|
# cmd: |
|
|
# chroot {{ rootfs_root }} update-grub
|
|
|
|
- name: "Lock sources.list to prevent conflict and duplicates with multistrap repo list"
|
|
shell: |
|
|
set -e
|
|
if [ -f {{ rootfs_root }}/etc/apt/sources.list ] && [ ! -h {{ rootfs_root }}/etc/apt/sources.list ]; then
|
|
rm {{ rootfs_root }}/etc/apt/sources.list
|
|
ln -s /dev/null {{ rootfs_root }}/etc/apt/sources.list
|
|
fi
|