| #!/bin/bash |
| # |
| # Copyright (C) 2021 The Android Open Source Project |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| # |
| |
| set -e |
| set -u |
| |
| # Complete the debootstrap process |
| /debootstrap/debootstrap --second-stage |
| |
| # We are done with apt; clean up apt and debootstrap intermediaries |
| apt-get clean |
| rm -rf /debootstrap /var/lib/apt/lists/* |
| |
| # Read-only root breaks booting via init |
| cat >/etc/fstab << EOF |
| LABEL=ROOT / ext4 defaults 0 1 |
| tmpfs /tmp tmpfs defaults 0 0 |
| tmpfs /var/log tmpfs defaults 0 0 |
| tmpfs /var/tmp tmpfs defaults 0 0 |
| EOF |
| |
| # systemd will attempt to re-create this symlink if it does not exist, |
| # which fails if it is booting from a read-only root filesystem (which |
| # is normally the case). The syslink must be relative, not absolute, |
| # and it must point to /proc/self/mounts, not /proc/mounts. |
| ln -sf ../proc/self/mounts /etc/mtab |
| |
| # Set up the virtual device image hostname |
| echo "127.0.1.1 debian" >>/etc/hosts |
| echo debian >/etc/hostname |
| |
| # Support chroot jailing with minijail |
| cat >/etc/sysctl.d/80-nsjail.conf <<EOF |
| kernel.unprivileged_userns_clone=1 |
| EOF |
| mkdir -p /var/empty |
| |
| # Clean up any other junk created by the imaging process |
| rm -rf /root/stage2.sh /tmp/* |
| find /var/log -type f -exec rm -f '{}' ';' |
| find /var/tmp -type f -exec rm -f '{}' ';' |
