ci: Add CAP_CHROOT to build container

This is needed in order to run `passwd -R` to clear the root password in the target filesystem.
ci: Use persistent volumes for portage, binpkgs
2024-12-30 17:18:24 -06:00 · 2024-12-30 13:33:02 -06:00 · 2024-12-22 17:57:46 -06:00 · 2024-12-22 14:34:48 -06:00 · 2024-12-13 19:46:09 -06:00 · 2024-12-13 19:44:30 -06:00
14 changed files with 67 additions and 6 deletions
--- a/2
+++ b/2
@ -1 +1 @@
-Subproject commit 79e69cf70df3586bd4ef4b15f577b42719380f38
+Subproject commit 554063e1f4e316a6d3087a27076e0c6d5a34fca1
--- a/ci/Jenkinsfile
+++ b/ci/Jenkinsfile
@ -11,7 +11,7 @@ pipeline {
    stages {
        stage('Build') {
            steps {
-                sh 'make -C aimee-os CONFIGDIR=${PWD} O=/build'
+                sh 'env -i PATH="${PATH}" make -C aimee-os CONFIGDIR=${PWD} O=/build'
            }
        }
    }
--- a/ci/podTemplate.yaml
+++ b/ci/podTemplate.yaml
@ -13,6 +13,7 @@ spec:
      capabilities:
        add:
        - CAP_SETFCAP
+        - CAP_SYS_CHROOT
    volumeMounts:
    - mountPath: /build
      name: workspace-volume
@ -21,12 +22,21 @@ spec:
      name: workspace-volume
      subPath: gentoo
    - mountPath: /usr/aarch64-unknown-linux-gnu/var/cache/binpkgs
-      name: workspace-volume
-      subPath: binpkgs
+      name: binpkgs
+      subPath: photoframe2
    - mountPath: /var/cache/binpkgs
-      name: workspace-volume
-      subPath: binpkgs
+      name: binpkgs
+      subPath: photoframe2
    - mountPath: /var/cache/distfiles
      name: workspace-volume
      subPath: distfiles
+    - mountPath: /var/db/repos/gentoo
+      name: portage
  hostUsers: false
+  volumes:
+  - name: binpkgs
+    persistentVolumeClaim:
+      claimName: binpkgs
+  - name: portage
+    persistentVolumeClaim:
+      claimName: portage
--- a/1
+++ b/1
@ -3,3 +3,4 @@ profile=default/linux/arm64/23.0/systemd
 kernel_pkg=sys-kernel/raspberrypi-sources
 kernel_defconfig=bcm2835
 device_tree=broadcom/bcm2711-rpi-4-b.dtb
+rootflags='ro rootwait=4'
--- a/customize.sh
+++ b/customize.sh
@ -0,0 +1,6 @@
+#!/bin/sh
+# vim: set sw=4 ts=4 sts=4 et :
+
+passwd -R /mnt/gentoo -d root
+
+systemctl --root=/mnt/gentoo enable wpa_supplicant@wlan0
--- a/install.packages
+++ b/install.packages
@ -0,0 +1 @@
+net-wireless/wpa_supplicant
--- a/installonly.packages
+++ b/installonly.packages
@ -0,0 +1 @@
+sys-kernel/linux-firmware
--- a/linux.config
+++ b/linux.config
@ -14,6 +14,9 @@ CONFIG_PCI=y
 CONFIG_PCIE_BRCMSTB=y
 CONFIG_BLK_DEV_NVME=y

+CONFIG_MMC_BCM2835_SDHOST=y
+CONFIG_MMC_BCM2835_MMC=y
+
 CONFIG_FW_LOADER_COMPRESS=y

 CONFIG_I2C=y
--- a/overlay/etc/aimee-os/writable-etc
+++ b/overlay/etc/aimee-os/writable-etc
@ -0,0 +1 @@
+d wpa_supplicant
--- a/overlay/etc/systemd/network/95-default.network
+++ b/overlay/etc/systemd/network/95-default.network
@ -0,0 +1,11 @@
+[Match]
+Type=ether wlan
+
+[Network]
+DHCP=yes
+
+[DHCPv4]
+UseDomains=yes
+
+[DHCPv6]
+UseDomains=yes
--- a/portage/make.conf/systemd.conf
+++ b/portage/make.conf/systemd.conf
@ -0,0 +1 @@
+INSTALL_MASK="${INSTALL_MASK} /usr/lib/systemd/systemd-nsresourced* /usr/lib/systemd/system/systemd-nsresourced.*"
--- a/portage/package.license/linux-firmware
+++ b/portage/package.license/linux-firmware
@ -0,0 +1 @@
+sys-kernel/linux-firmware linux-fw-redistributable
--- a/portage/savedconfig/sys-kernel/linux-firmware
+++ b/portage/savedconfig/sys-kernel/linux-firmware
@ -0,0 +1,17 @@
+# symlink targets have to be specified explicity
+../cypress/cyfmac43455-sdio.bin
+../cypress/cyfmac43455-sdio.clm_blob
+
+brcm/brcmfmac43455-sdio.AW-CM256SM.txt
+brcm/brcmfmac43455-sdio.MINIX-NEO Z83-4.txt
+brcm/brcmfmac43455-sdio.Raspberry Pi Foundation-Raspberry Pi 4 Model B.txt
+brcm/brcmfmac43455-sdio.Raspberry Pi Foundation-Raspberry Pi Compute Module 4.txt
+brcm/brcmfmac43455-sdio.acepc-t8.txt
+brcm/brcmfmac43455-sdio.beagle,am5729-beagleboneai.txt
+brcm/brcmfmac43455-sdio.bin
+brcm/brcmfmac43455-sdio.clm_blob
+brcm/brcmfmac43455-sdio.raspberrypi,3-model-a-plus.txt
+brcm/brcmfmac43455-sdio.raspberrypi,3-model-b-plus.txt
+brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.txt
+cypress/cyfmac43455-sdio.bin
+cypress/cyfmac43455-sdio.clm_blob
--- a/prepare.sh
+++ b/prepare.sh
@ -0,0 +1,8 @@
+#!/bin/sh
+
+if [ ! -f /var/db/repos/gentoo/metadata/timestamp ]; then
+    emerge-webrsync
+fi
+if [ "$(find /var/db/repos/gentoo/metadata -newermt '-24 hours' | wc -l)" -eq 0 ]; then
+    emaint sync
+fi
Author	SHA1	Message	Date
Dustin	346c88a179	ci: Add CAP_CHROOT to build container dustin/photoframe2/pipeline/head This commit looks good Details This is needed in order to run `passwd -R` to clear the root password in the target filesystem.	2024-12-30 17:18:24 -06:00
Dustin	5726d2b76f	ci: Use persistent volumes for portage, binpkgs Recompiling the entire OS for every build takes way too long for development purposes. Since we build binary packages anyway, let's keep them around between builds by storing them on a Kubernetes persistent volume. Eventually, I want add a build parameter to wipe out the binary package storage to force a from-scratch build. We'll use that option for robust periodic builds, once development has slowed down.	2024-12-30 13:33:02 -06:00
Dustin	fd925c3da0	Update Aimee OS dustin/photoframe2/pipeline/head This commit looks good Details	2024-12-22 17:57:46 -06:00
Dustin	428e30c01d	ci: Clear env to run build dustin/photoframe2/pipeline/head There was a failure building this commit Details We don't need any of the environment variables Jenkins sets, and some of them (like `GIT_COMMIT`) interfere with building packages.	2024-12-22 14:34:48 -06:00
Dustin	f560d965cf	Update aimee-os dustin/photoframe2/pipeline/head There was a failure building this commit Details	2024-12-13 19:46:09 -06:00
Dustin	4161d20de2	portage: Install-mask systemd-nsresourced I don't know what this is for; I think it has something to do with containers, possibly for `systemd-npsawn`? It spawns a bunch of processes and wastes several megabytes of RAM.	2024-12-13 19:44:30 -06:00
Dustin	5871260128	customize: Add script Deleting the initial password for `root` so we can log in to the serial console for debugging. Enabling _wpa_supplicant_ to connect to WiFi automatically.	2024-12-13 19:43:33 -06:00
Dustin	a9e01d36e8	Add Rasperry Pi WiFi support We need the Broadcom firmware from the _linux-firmware_ package (and nothing else). We also need _wpa_supplicant_, to configure the WiFi connection. Finally, we need to configure _systemd-networkd_ to manage the network device.	2024-12-13 19:41:03 -06:00
Dustin	26d83bd68b	config: Set rootflags Need to add `rootwait` because the Raspberry Pi SD card reader is really slow and does not initialize in time for the kernel to load the root filesystem from it.	2024-12-13 19:37:21 -06:00
Dustin	3de06660b0	wip: Enable BCM2835_MMC dustin/photoframe2/pipeline/head This commit looks good Details Trying to get the kernel to find the root filesystem on the SD card...	2024-12-10 14:43:10 -06:00
				`@ -0,0 +1 @@`
				`INSTALL_MASK="${INSTALL_MASK} /usr/lib/systemd/systemd-nsresourced* /usr/lib/systemd/system/systemd-nsresourced.*"`
				`@ -0,0 +1 @@`
				`sys-kernel/linux-firmware linux-fw-redistributable`