forked from mirrors/nixpkgs
05c13a03e2
On some filesystems, `du` without `--apparent-size` will not give the actual size for a file. Using `--apparent-size` will give us the actual file size. Though, this is not actually correct still. 1000 × 1 bytes is not 1000 bytes. It is 1000 × ceil(filesize/blockSize)*blockSize. So instead of adding up the actual file sizes. We are adding up the block sizes. Note that this also changes the builder to work with *bytes*, rather than with any other units. Doing maths on bytes is less likely to go awry than doing it on other units.
358 lines
12 KiB
Nix
358 lines
12 KiB
Nix
{ pkgs
|
|
, lib
|
|
|
|
, # The NixOS configuration to be installed onto the disk image.
|
|
config
|
|
|
|
, # The size of the disk, in megabytes.
|
|
# if "auto" size is calculated based on the contents copied to it and
|
|
# additionalSpace is taken into account.
|
|
diskSize ? "auto"
|
|
|
|
, # additional disk space to be added to the image if diskSize "auto"
|
|
# is used
|
|
additionalSpace ? "512M"
|
|
|
|
, # size of the boot partition, is only used if partitionTableType is
|
|
# either "efi" or "hybrid"
|
|
bootSize ? "256M"
|
|
|
|
, # The files and directories to be placed in the target file system.
|
|
# This is a list of attribute sets {source, target, mode, user, group} where
|
|
# `source' is the file system object (regular file or directory) to be
|
|
# grafted in the file system at path `target', `mode' is a string containing
|
|
# the permissions that will be set (ex. "755"), `user' and `group' are the
|
|
# user and group name that will be set as owner of the files.
|
|
# `mode', `user', and `group' are optional.
|
|
# When setting one of `user' or `group', the other needs to be set too.
|
|
contents ? []
|
|
|
|
, # Type of partition table to use; either "legacy", "efi", or "none".
|
|
# For "efi" images, the GPT partition table is used and a mandatory ESP
|
|
# partition of reasonable size is created in addition to the root partition.
|
|
# For "legacy", the msdos partition table is used and a single large root
|
|
# partition is created.
|
|
# For "legacy+gpt", the GPT partition table is used, a 1MiB no-fs partition for
|
|
# use by the bootloader is created, and a single large root partition is
|
|
# created.
|
|
# For "hybrid", the GPT partition table is used and a mandatory ESP
|
|
# partition of reasonable size is created in addition to the root partition.
|
|
# Also a legacy MBR will be present.
|
|
# For "none", no partition table is created. Enabling `installBootLoader`
|
|
# most likely fails as GRUB will probably refuse to install.
|
|
partitionTableType ? "legacy"
|
|
|
|
, # The root file system type.
|
|
fsType ? "ext4"
|
|
|
|
, # Filesystem label
|
|
label ? "nixos"
|
|
|
|
, # The initial NixOS configuration file to be copied to
|
|
# /etc/nixos/configuration.nix.
|
|
configFile ? null
|
|
|
|
, # Shell code executed after the VM has finished.
|
|
postVM ? ""
|
|
|
|
, name ? "nixos-disk-image"
|
|
|
|
, # Disk image format, one of qcow2, qcow2-compressed, vdi, vpc, raw.
|
|
format ? "raw"
|
|
}:
|
|
|
|
assert partitionTableType == "legacy" || partitionTableType == "legacy+gpt" || partitionTableType == "efi" || partitionTableType == "hybrid" || partitionTableType == "none";
|
|
# We use -E offset=X below, which is only supported by e2fsprogs
|
|
assert partitionTableType != "none" -> fsType == "ext4";
|
|
# Either both or none of {user,group} need to be set
|
|
assert lib.all
|
|
(attrs: ((attrs.user or null) == null)
|
|
== ((attrs.group or null) == null))
|
|
contents;
|
|
|
|
with lib;
|
|
|
|
let format' = format; in let
|
|
|
|
format = if format' == "qcow2-compressed" then "qcow2" else format';
|
|
|
|
compress = optionalString (format' == "qcow2-compressed") "-c";
|
|
|
|
filename = "nixos." + {
|
|
qcow2 = "qcow2";
|
|
vdi = "vdi";
|
|
vpc = "vhd";
|
|
raw = "img";
|
|
}.${format} or format;
|
|
|
|
rootPartition = { # switch-case
|
|
legacy = "1";
|
|
"legacy+gpt" = "2";
|
|
efi = "2";
|
|
hybrid = "3";
|
|
}.${partitionTableType};
|
|
|
|
partitionDiskScript = { # switch-case
|
|
legacy = ''
|
|
parted --script $diskImage -- \
|
|
mklabel msdos \
|
|
mkpart primary ext4 1MiB -1
|
|
'';
|
|
"legacy+gpt" = ''
|
|
parted --script $diskImage -- \
|
|
mklabel gpt \
|
|
mkpart no-fs 1MB 2MB \
|
|
set 1 bios_grub on \
|
|
align-check optimal 1 \
|
|
mkpart primary ext4 2MB -1 \
|
|
align-check optimal 2 \
|
|
print
|
|
'';
|
|
efi = ''
|
|
parted --script $diskImage -- \
|
|
mklabel gpt \
|
|
mkpart ESP fat32 8MiB ${bootSize} \
|
|
set 1 boot on \
|
|
mkpart primary ext4 ${bootSize} -1
|
|
'';
|
|
hybrid = ''
|
|
parted --script $diskImage -- \
|
|
mklabel gpt \
|
|
mkpart ESP fat32 8MiB ${bootSize} \
|
|
set 1 boot on \
|
|
mkpart no-fs 0 1024KiB \
|
|
set 2 bios_grub on \
|
|
mkpart primary ext4 ${bootSize} -1
|
|
'';
|
|
none = "";
|
|
}.${partitionTableType};
|
|
|
|
nixpkgs = cleanSource pkgs.path;
|
|
|
|
# FIXME: merge with channel.nix / make-channel.nix.
|
|
channelSources = pkgs.runCommand "nixos-${config.system.nixos.version}" {} ''
|
|
mkdir -p $out
|
|
cp -prd ${nixpkgs.outPath} $out/nixos
|
|
chmod -R u+w $out/nixos
|
|
if [ ! -e $out/nixos/nixpkgs ]; then
|
|
ln -s . $out/nixos/nixpkgs
|
|
fi
|
|
rm -rf $out/nixos/.git
|
|
echo -n ${config.system.nixos.versionSuffix} > $out/nixos/.version-suffix
|
|
'';
|
|
|
|
binPath = with pkgs; makeBinPath (
|
|
[ rsync
|
|
util-linux
|
|
parted
|
|
e2fsprogs
|
|
lkl
|
|
config.system.build.nixos-install
|
|
config.system.build.nixos-enter
|
|
nix
|
|
] ++ stdenv.initialPath);
|
|
|
|
# I'm preserving the line below because I'm going to search for it across nixpkgs to consolidate
|
|
# image building logic. The comment right below this now appears in 4 different places in nixpkgs :)
|
|
# !!! should use XML.
|
|
sources = map (x: x.source) contents;
|
|
targets = map (x: x.target) contents;
|
|
modes = map (x: x.mode or "''") contents;
|
|
users = map (x: x.user or "''") contents;
|
|
groups = map (x: x.group or "''") contents;
|
|
|
|
closureInfo = pkgs.closureInfo { rootPaths = [ config.system.build.toplevel channelSources ]; };
|
|
|
|
blockSize = toString (4 * 1024); # ext4fs block size (not block device sector size)
|
|
|
|
prepareImage = ''
|
|
export PATH=${binPath}
|
|
|
|
# Yes, mkfs.ext4 takes different units in different contexts. Fun.
|
|
sectorsToKilobytes() {
|
|
echo $(( ( "$1" * 512 ) / 1024 ))
|
|
}
|
|
|
|
sectorsToBytes() {
|
|
echo $(( "$1" * 512 ))
|
|
}
|
|
|
|
# Given lines of numbers, adds them together
|
|
sum_lines() {
|
|
local acc=0
|
|
while read -r number; do
|
|
acc=$((acc+number))
|
|
done
|
|
echo "$acc"
|
|
}
|
|
|
|
mkdir $out
|
|
|
|
root="$PWD/root"
|
|
mkdir -p $root
|
|
|
|
# Copy arbitrary other files into the image
|
|
# Semi-shamelessly copied from make-etc.sh. I (@copumpkin) shall factor this stuff out as part of
|
|
# https://github.com/NixOS/nixpkgs/issues/23052.
|
|
set -f
|
|
sources_=(${concatStringsSep " " sources})
|
|
targets_=(${concatStringsSep " " targets})
|
|
modes_=(${concatStringsSep " " modes})
|
|
set +f
|
|
|
|
for ((i = 0; i < ''${#targets_[@]}; i++)); do
|
|
source="''${sources_[$i]}"
|
|
target="''${targets_[$i]}"
|
|
mode="''${modes_[$i]}"
|
|
|
|
if [ -n "$mode" ]; then
|
|
rsync_chmod_flags="--chmod=$mode"
|
|
else
|
|
rsync_chmod_flags=""
|
|
fi
|
|
# Unfortunately cptofs only supports modes, not ownership, so we can't use
|
|
# rsync's --chown option. Instead, we change the ownerships in the
|
|
# VM script with chown.
|
|
rsync_flags="-a --no-o --no-g $rsync_chmod_flags"
|
|
if [[ "$source" =~ '*' ]]; then
|
|
# If the source name contains '*', perform globbing.
|
|
mkdir -p $root/$target
|
|
for fn in $source; do
|
|
rsync $rsync_flags "$fn" $root/$target/
|
|
done
|
|
else
|
|
mkdir -p $root/$(dirname $target)
|
|
if ! [ -e $root/$target ]; then
|
|
rsync $rsync_flags $source $root/$target
|
|
else
|
|
echo "duplicate entry $target -> $source"
|
|
exit 1
|
|
fi
|
|
fi
|
|
done
|
|
|
|
export HOME=$TMPDIR
|
|
|
|
# Provide a Nix database so that nixos-install can copy closures.
|
|
export NIX_STATE_DIR=$TMPDIR/state
|
|
nix-store --load-db < ${closureInfo}/registration
|
|
|
|
chmod 755 "$TMPDIR"
|
|
echo "running nixos-install..."
|
|
nixos-install --root $root --no-bootloader --no-root-passwd \
|
|
--system ${config.system.build.toplevel} --channel ${channelSources} --substituters ""
|
|
|
|
diskImage=nixos.raw
|
|
|
|
${if diskSize == "auto" then ''
|
|
${if partitionTableType == "efi" || partitionTableType == "hybrid" then ''
|
|
additionalSpace=$(( ($(numfmt --from=iec '${additionalSpace}') + $(numfmt --from=iec '${bootSize}')) ))
|
|
'' else ''
|
|
additionalSpace=$(( $(numfmt --from=iec '${additionalSpace}') ))
|
|
''}
|
|
|
|
# Compute required space in filesystem blocks
|
|
requiredSpace=$(find . ! -type d -exec 'du' '--apparent-size' '--block-size' "${blockSize}" '{}' ';' | cut -f1 | sum_lines)
|
|
# Convert to bytes
|
|
requiredSpace=$(( requiredSpace * ${blockSize} ))
|
|
|
|
diskSize=$(( requiredSpace + additionalSpace ))
|
|
truncate -s "$diskSize" $diskImage
|
|
|
|
printf "Automatic disk size...\n"
|
|
printf " Space needed: %d bytes\n" $requiredSpace
|
|
printf " Additional space: %d bytes\n" $additionalSpace
|
|
printf " Disk image size: %d bytes\n" $diskSize
|
|
'' else ''
|
|
truncate -s ${toString diskSize}M $diskImage
|
|
''}
|
|
|
|
${partitionDiskScript}
|
|
|
|
${if partitionTableType != "none" then ''
|
|
# Get start & length of the root partition in sectors to $START and $SECTORS.
|
|
eval $(partx $diskImage -o START,SECTORS --nr ${rootPartition} --pairs)
|
|
|
|
mkfs.${fsType} -b ${blockSize} -F -L ${label} $diskImage -E offset=$(sectorsToBytes $START) $(sectorsToKilobytes $SECTORS)K
|
|
'' else ''
|
|
mkfs.${fsType} -b ${blockSize} -F -L ${label} $diskImage
|
|
''}
|
|
|
|
echo "copying staging root to image..."
|
|
cptofs -p ${optionalString (partitionTableType != "none") "-P ${rootPartition}"} -t ${fsType} -i $diskImage $root/* / ||
|
|
(echo >&2 "ERROR: cptofs failed. diskSize might be too small for closure."; exit 1)
|
|
'';
|
|
in pkgs.vmTools.runInLinuxVM (
|
|
pkgs.runCommand name
|
|
{ preVM = prepareImage;
|
|
buildInputs = with pkgs; [ util-linux e2fsprogs dosfstools ];
|
|
postVM = ''
|
|
${if format == "raw" then ''
|
|
mv $diskImage $out/${filename}
|
|
'' else ''
|
|
${pkgs.qemu}/bin/qemu-img convert -f raw -O ${format} ${compress} $diskImage $out/${filename}
|
|
''}
|
|
diskImage=$out/${filename}
|
|
${postVM}
|
|
'';
|
|
memSize = 1024;
|
|
}
|
|
''
|
|
export PATH=${binPath}:$PATH
|
|
|
|
rootDisk=${if partitionTableType != "none" then "/dev/vda${rootPartition}" else "/dev/vda"}
|
|
|
|
# Some tools assume these exist
|
|
ln -s vda /dev/xvda
|
|
ln -s vda /dev/sda
|
|
|
|
mountPoint=/mnt
|
|
mkdir $mountPoint
|
|
mount $rootDisk $mountPoint
|
|
|
|
# Create the ESP and mount it. Unlike e2fsprogs, mkfs.vfat doesn't support an
|
|
# '-E offset=X' option, so we can't do this outside the VM.
|
|
${optionalString (partitionTableType == "efi" || partitionTableType == "hybrid") ''
|
|
mkdir -p /mnt/boot
|
|
mkfs.vfat -n ESP /dev/vda1
|
|
mount /dev/vda1 /mnt/boot
|
|
''}
|
|
|
|
# Install a configuration.nix
|
|
mkdir -p /mnt/etc/nixos
|
|
${optionalString (configFile != null) ''
|
|
cp ${configFile} /mnt/etc/nixos/configuration.nix
|
|
''}
|
|
|
|
# Set up core system link, GRUB, etc.
|
|
NIXOS_INSTALL_BOOTLOADER=1 nixos-enter --root $mountPoint -- /nix/var/nix/profiles/system/bin/switch-to-configuration boot
|
|
|
|
# The above scripts will generate a random machine-id and we don't want to bake a single ID into all our images
|
|
rm -f $mountPoint/etc/machine-id
|
|
|
|
# Set the ownerships of the contents. The modes are set in preVM.
|
|
# No globbing on targets, so no need to set -f
|
|
targets_=(${concatStringsSep " " targets})
|
|
users_=(${concatStringsSep " " users})
|
|
groups_=(${concatStringsSep " " groups})
|
|
for ((i = 0; i < ''${#targets_[@]}; i++)); do
|
|
target="''${targets_[$i]}"
|
|
user="''${users_[$i]}"
|
|
group="''${groups_[$i]}"
|
|
if [ -n "$user$group" ]; then
|
|
# We have to nixos-enter since we need to use the user and group of the VM
|
|
nixos-enter --root $mountPoint -- chown -R "$user:$group" "$target"
|
|
fi
|
|
done
|
|
|
|
umount -R /mnt
|
|
|
|
# Make sure resize2fs works. Note that resize2fs has stricter criteria for resizing than a normal
|
|
# mount, so the `-c 0` and `-i 0` don't affect it. Setting it to `now` doesn't produce deterministic
|
|
# output, of course, but we can fix that when/if we start making images deterministic.
|
|
${optionalString (fsType == "ext4") ''
|
|
tune2fs -T now -c 0 -i 0 $rootDisk
|
|
''}
|
|
''
|
|
)
|