penguins-eggs 25.9.24 → 25.10.3

package/conf/distros/trixie/calamares/calamares-modules/sources-yolk/sources-yolk.sh

@@ -0,0 +1,50 @@
+#!/bin/sh
+
+#
+# We use just yolk during installation
+#
+# sources-yolk.sh
+# add yolk
+#
+# sources-yolk.sh -u
+# remove yolk
+
+#
+#
+#
+main() {
+    if [ "$1" = "-u" ]; then
+        remove
+    else
+        add
+    fi
+    sync
+    exit 0
+}
+
+
+#
+#
+#
+remove() {
+    if [ -f "$YOLK_LIST" ]; then
+        rm -f "$YOLK_LIST"
+    fi
+}
+
+#
+#
+#
+add() {
+    echo "deb [trusted=yes] file:/var/local/yolk ./" > "$YOLK_LIST"
+    chroot "$CHROOT" apt-get --yes update
+}
+
+#
+# WE START HERE
+#
+CHROOT=$(mount | grep proc | grep calamares | awk '{print $3}' | sed -e "s#/proc##g")
+YOLK_LIST="$CHROOT/etc/apt/sources.list.d/yolk.list"
+
+main "$1"
+

package/conf/distros/trixie/calamares/calamares-modules/sources-yolk-undo/module.yml

@@ -0,0 +1,8 @@
+# Debian Buster
+# sources-yolk-undo
+---
+type: "job"
+name: "sources-yolk-undo"
+interface: "process"
+command: "/usr/sbin/sources-yolk.sh -u"
+timeout: 600

package/conf/distros/trixie/calamares/libexec/README.md

@@ -0,0 +1,5 @@
+# penguins-eggs
+
+Contains scripts for calamares, which are copied to `/usr/libexec/calamares`.
+
+The creation of `/usr/libexec/calamares` and its population should be done by `eggs calamares --install`, while `eggs calamares --remove` should ensure its removal.

package/conf/distros/{openmamba → trixie}/calamares/modules/bootloader.yml

@@ -81,3 +81,6 @@ efiBootMgr: "efibootmgr"
 # to add another module to optionally install the fallback on those
 # boards that need it.
 installEFIFallback: true
+
+# Optionally install both BIOS and UEFI GRUB bootloaders.
+installHybridGRUB: false

package/conf/distros/trixie/calamares/modules/displaymanager.yml

@@ -0,0 +1,12 @@
+---
+displaymanagers:
+  - lightdm
+  - gdm
+  - mdm
+  - sddm
+  - lxdm
+  - slim
+
+basicSetup: false
+sddm:
+  configuration_file: "/etc/sddm.conf"

package/conf/distros/trixie/calamares/modules/finished.yml

@@ -0,0 +1,5 @@
+# Debian/Bookworm
+---
+restartNowEnabled: true
+restartNowChecked: true
+restartNowCommand: none

package/conf/distros/trixie/calamares/modules/fstab.yml

@@ -0,0 +1,12 @@
+# Debian/Bookworm
+---
+mountOptions:
+  default: defaults,noatime
+  btrfs: defaults   #,noatime,space_cache,autodefrag
+ssdExtraMountOptions:
+  ext4: discard
+  jfs: discard
+  xfs: discard
+  swap: discard
+  btrfs: discard,compress=lzo
+crypttabOptions: luks,keyscript=/bin/cat

package/conf/distros/{rolling → trixie}/calamares/modules/locale.yml

@@ -1,8 +1,5 @@
-# Arch
-# Calamares 3.3.
-#
 ---
-# These settings are used to set your default system time zone.
+# This settings are used to set your default system time zone.
 # Time zones are usually located under /usr/share/zoneinfo and
 # provided by the 'tzdata' package of your Distribution.
 #
@@ -14,58 +11,33 @@
 # the locale page can be set through keys *region* and *zone*.
 # If either is not set, defaults to America/New_York.
 #
-# Note that useSystemTimezone and GeoIP settings can change the
-# starting time zone.
-#
 region:                     "Europe"
 zone:                       "Rome"
 
-# Instead of using *region* and *zone* specified above,
-# you can use the system's notion of the timezone, instead.
-# This can help if your system is automatically configured with
-# a sensible TZ rather than chasing a fixed default.
-#
-# The default is false.
-#
-# useSystemTimezone: true
-
-# Should changing the system location (e.g. clicking around on the timezone
-# map) immediately reflect the changed timezone in the live system?
-# By default, installers (with a target system) do, and setup (e.g. OEM
-# configuration) does not, but you can switch it on here (or off, if
-# you think it's annoying in the installer).
-#
-# Note that not all systems support live adjustment.
-#
-# adjustLiveTimezone:   true
 
 # System locales are detected in the following order:
 #
 #  - /usr/share/i18n/SUPPORTED
-#  - localeGenPath (defaults to /etc/locale.gen if not set)
-#  - `locale -a` output
+#  - localeGenPath (defaults to /etc/ if not set)
+#  - 'locale -a' output
 #
-# Enable only when your Distribution is using a
-# custom path for locale.gen
+# Enable only when your Distribution is using an
+# custom path for 
 #
-#localeGenPath:             "/etc/locale.gen"
+#localeGenPath:             "PATH_TO/"
 
 # GeoIP based Language settings: Leave commented out to disable GeoIP.
 #
 # GeoIP needs a working Internet connection.
 # This can be managed from `welcome.conf` by adding
-# internet to the list of required conditions. (The welcome
-# module can also do its own GeoIP lookups, independently
-# of the lookup done here. The lookup in the welcome module
-# is used to establish language; this one is for timezone).
-#
-# The configuration is in three parts:
-# - a *style*, which can be "json" or "xml" depending on the
-#   kind of data returned by the service, and
-# - a *url* where the data is retrieved, and
-# - an optional *selector*
-#   to pick the right field out of the returned data (e.g. field
-#   name in JSON or element name in XML).
+# internet to the list of required conditions.
+#
+# The configuration
+# is in three parts: a *style*, which can be "json" or "xml"
+# depending on the kind of data returned by the service, and
+# a *url* where the data is retrieved, and an optional *selector*
+# to pick the right field out of the returned data (e.g. field
+# name in JSON or element name in XML).
 #
 # The default selector (when the setting is blank) is picked to
 # work with existing JSON providers (which use "time_zone") and
@@ -73,8 +45,8 @@ zone:                       "Rome"
 #
 # If the service configured via *url* uses
 # a different attribute name (e.g. "timezone") in JSON or a
-# different element tag (e.g. "<Time_Zone>") in XML, set the
-# selector to the name or tag to be used.
+# different element tag (e.g. "<Time_Zone>") in XML, set this
+# string to the name or tag to be used.
 #
 # In JSON:
 #  - if the string contains "." characters, this is used as a
@@ -86,10 +58,7 @@ zone:                       "Rome"
 #  - all elements with the named tag (e.g. all TimeZone) elements
 #    from the document are checked; the first one with non-empty
 #    text value is used.
-# Special case:
-#  - the *style* "fixed" is also supported. This ignores the data
-#    returned from the URL (but the URL must still be valid!)
-#    and just returns the value of the *selector*.
+#
 #
 # An HTTP(S) request is made to *url*. The request should return
 # valid data in a suitable format, depending on *style*;
@@ -98,6 +67,9 @@ zone:                       "Rome"
 # does not follow the conventions of "suitable data" described
 # below, *selector* may be used to pick different data.
 #
+# Note that this example URL works, but the service is shutting
+# down in June 2018.
+#
 # Suitable JSON data looks like
 # ```
 #    {"time_zone":"America/New_York"}
@@ -112,6 +84,9 @@ zone:                       "Rome"
 #  - backslashes are removed
 #  - spaces are replaced with _
 #
+# Legacy settings "geoipStyle", "geoipUrl" and "geoipSelector"
+# in the top-level are still supported, but I'd advise against.
+#
 # To disable GeoIP checking, either comment-out the entire geoip section,
 # or set the *style* key to an unsupported format (e.g. `none`).
 # Also, note the analogous feature in src/modules/welcome/welcome.conf.
@@ -120,12 +95,3 @@ geoip:
     style:    "json"
     url:      "https://geoip.kde.org/v1/calamares"
     selector: ""  # leave blank for the default
-
-# For testing purposes, you could use *fixed* style, to see how Calamares
-# behaves in a particular zone:
-#
-# geoip:
-#     style:    "fixed"
-#     url:      "https://geoip.kde.org/v1/calamares"  # Still needs to be valid!
-#     selector: "America/Vancouver"  # this is the selected zone
-#

package/conf/distros/{openmamba → trixie}/calamares/modules/luksopenswaphookcfg.yml

@@ -1,6 +1,4 @@
-# SPDX-FileCopyrightText: no
-# SPDX-License-Identifier: CC0-1.0
-#
+# Debian/Bookworm
 # Writes an openswap configuration with LUKS settings to the given path
 ---
 # Path of the configuration file to write (in the target system)

package/conf/distros/trixie/calamares/modules/machineid.yml

@@ -0,0 +1,17 @@
+# Debian/bookworm
+# added Whether to copy entropy from the host
+---
+# Whether to create /etc/machine-id for systemd.
+systemd: true
+# Whether to create /var/lib/dbus/machine-id for D-Bus.
+dbus: true
+# Whether /var/lib/dbus/machine-id should be a symlink to /etc/machine-id
+# (ignored if dbus is false, or if there is no /etc/machine-id to point to).
+symlink: true
+# Whether to copy entropy from the host
+entropy-copy: true
+# Which files to write (paths in the target)
+entropy-files:
+    - /var/lib/urandom/random-seed
+    - /var/lib/systemd/random-seed
+

package/conf/distros/{openmamba → trixie}/calamares/modules/mount.yml

@@ -28,9 +28,9 @@ extraMounts:
     - device: /dev
       mountPoint: /dev
       options: [ bind ]
-    - device: /run
+    - device: tmpfs
+      fs: tmpfs
       mountPoint: /run
-      options: [ bind ]
     - device: /run/udev
       mountPoint: /run/udev
       options: [ bind ]

package/conf/distros/trixie/calamares/modules/packages.mustache

@@ -0,0 +1,5 @@
+# A mustache template for module: packages.conf
+---
+backend: {{{backend}}}
+
+{{{operations}}}

package/conf/distros/{openmamba → trixie}/calamares/modules/partition.yml

@@ -154,7 +154,7 @@ initialPartitioningChoice: none
 #
 # The default is "none" (no swap) if that is one of the enabled options, otherwise
 # one of the items from the options.
-initialSwapChoice: file
+initialSwapChoice: none
 
 # armInstall
 #
@@ -170,11 +170,12 @@ initialSwapChoice: file
 # manual partitioning, this partition table exists already on disk
 # and it is left unmodified.
 #
-# Suggested values: gpt, msdos
+# Possible values: gpt, msdos (or other names defined by KPMcore).
+# Names are case-sensitive.
+#
 # If nothing is specified, Calamares defaults to "gpt" if system is
-# efi or "msdos".
+# efi or "msdos" otherwise.
 #
-# Names are case-sensitive and defined by KPMCore.
 # defaultPartitionTableType: msdos
 
 # Requirement for partition table type
@@ -182,7 +183,8 @@ initialSwapChoice: file
 # Restrict the installation on disks that match the type of partition
 # tables that are specified.
 #
-# Possible values: msdos, gpt. Names are case-sensitive and defined by KPMCore.
+# Possible values: msdos, gpt (or other names defined by KPMcore).
+# Names are case-sensitive.
 #
 # If nothing is specified, Calamares defaults to both "msdos" and "gpt".
 #
@@ -193,7 +195,7 @@ initialSwapChoice: file
 
 # Default filesystem type, used when a "new" partition is made.
 #
-# When replacing a partition, the new filesystem type will be from the 
+# When replacing a partition, the new filesystem type will be from the
 # defaultFileSystemType value. In other cases, e.g. Erase and Alongside,
 # as well as when using manual partitioning and creating a new
 # partition, this filesystem type is pre-selected. Note that
@@ -221,6 +223,49 @@ defaultFileSystemType:  "ext4"
 # warning (this matches traditional no-choice-available behavior best).
 # availableFileSystemTypes:  ["ext4","f2fs"]
 
+# Per-directory filesystem restrictions.
+#
+# This optional setting specifies what filesystems the user can and cannot use
+# for various directories and mountpoints when using manual partitioning.
+#
+# If nothing is specified, the only restriction enforced by default is that
+# the EFI system partition must use the fat32 filesystem.
+#
+# Otherwise, the filesystem restrictions are defined as follow:
+#
+# directoryFilesystemRestrictions:
+#     - directory: "any"
+#       allowedFilesystemTypes: ["all"]
+#     - directory: "/"
+#       allowedFilesystemTypes: ["ext4","xfs","btrfs","jfs","f2fs"]
+#     - mountpoint: "efi"
+#       allowedFilesystemTypes: ["fat32"]
+#       onlyWhenMountpoint: true
+#
+# There can be any number of mountpoints listed, each entry having the
+# following attributes:
+#   - mountpoint: mountpoint's full path
+#                 or
+#                 "any" to specify a global whitelist that applies to all
+#                 mountpoints
+#                 or
+#                 "efi" to specify a whitelist specific to the EFI system
+#                 partition, wherever that partition is located
+#   - allowedFilesystemTypes: the list of all filesystems valid for this
+#                             mountpoint. If the list contains exactly one
+#                             element, and that element is the special value
+#                             "any", all filesystem types recognized by
+#                             Calamares will be allowed.
+#   - onlyWhenMountpoint: Whether the restriction should apply only when the
+#                         specified directory is a mountpoint. When set to
+#                         true, Calamares will only enforce the listed
+#                         restrictions when the user makes a separate partition
+#                         for this directory and assigns the mountpoint
+#                         accordingly. When set to false, Calamares will
+#                         ensure this directory uses the specified filesystem
+#                         even if the directory is part of a filesystem on a
+#                         different mountpoint. Defaults to false.
+
 # Show/hide LUKS related functionality in automated partitioning modes.
 # Disable this if you choose not to deploy early unlocking support in GRUB2
 # and/or your distribution's initramfs solution.
@@ -240,6 +285,18 @@ defaultFileSystemType:  "ext4"
 # If nothing is specified, LUKS is enabled in automated modes.
 #enableLuksAutomatedPartitioning:    true
 
+# When enableLuksAutomatedPartitioning is true, this option will pre-check
+# encryption checkbox. This option is only usefull to help people to not forget
+# to cypher their disk when installing in enterprise (for exemple).
+#preCheckEncryption:    false
+
+# LVM support
+#
+# There is only one sub-key available, *enable* (defaults to true)
+# which can be used to show (default) or hide the LVM buttons in the partitioning module.
+lvm:
+    enable: true
+
 # Partition layout.
 #
 # This optional setting specifies a custom partition layout.
@@ -248,9 +305,9 @@ defaultFileSystemType:  "ext4"
 # for root that uses 100% of the space and uses the filesystem defined by
 # defaultFileSystemType.
 #
-# Note: the EFI system partition is prepend automatically to the layout if
-# needed; the swap partition is appended to the layout if enabled (small of
-# suspend).
+# Note: the EFI system partition is prepended automatically to the layout if
+# needed; the swap partition is appended to the layout if enabled (selections
+# "small" or "suspend" in *userSwapChoices*).
 #
 # Otherwise, the partition layout is defined as follow:
 #
@@ -258,6 +315,7 @@ defaultFileSystemType:  "ext4"
 #     - name: "rootfs"
 #       type: "4f68bce3-e8cd-4db1-96e7-fbcaf984b709"
 #       filesystem: "ext4"
+#       noEncrypt: false
 #       mountPoint: "/"
 #       size: 20%
 #       minSize: 500M
@@ -266,6 +324,7 @@ defaultFileSystemType:  "ext4"
 #     - name: "home"
 #       type: "933ac7e1-2eb4-4f13-b844-0e14e2aef915"
 #       filesystem: "ext4"
+#       noEncrypt: false
 #       mountPoint: "/home"
 #       size: 3G
 #       minSize: 1.5G
@@ -293,6 +352,7 @@ defaultFileSystemType:  "ext4"
 #       - if "unknown" (or an unknown FS name, like "elephant") then the
 #         default filesystem type, or the user's choice, will be applied instead
 #         of "unknown" (e.g. the user might pick ext4, or xfs).
+#   - noEncrypt: whether this partition is exempt from encryption if enabled (optional parameter; default is false)
 #   - mountPoint: partition mount point (optional parameter; not mounted if unset)
 #   - size: partition size in bytes (append 'K', 'M' or 'G' for KiB, MiB or GiB)
 #           or
@@ -315,4 +375,4 @@ defaultFileSystemType:  "ext4"
 # BIG FAT WARNING: except for OEM-phase-0 use, you should be using
 #                  the welcome module, **and** configure this value in
 #                  `welcome.conf`, not here.
-requiredStorage: 10
+# requiredStorage: 3.5

package/conf/distros/trixie/calamares/modules/removeuser.mustache

@@ -0,0 +1,3 @@
+# A mustache template for module: removeuser.conf
+---
+username: {{{username}}}

package/conf/distros/trixie/calamares/modules/shellprocess@boot_deploy.yml

@@ -0,0 +1,24 @@
+# SPDX-FileCopyrightText: 2020 Harald Sitter <sitter@kde.org>
+# SPDX-License-Identifier: GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL
+#
+# This is run outside the chroot!
+# As per at least 20.04+ /boot on the squashfs no longer contains the initrd
+# or vmlinuz, instead we'll first fish the kernel out of the ISO.
+#
+# NB: initrd is handled by the initramfs module.
+---
+message: "Preparing the boot environment..."
+dontChroot: true
+timeout: 300
+script:
+    # Si tratta di una soluzione un po' improvvisata, ma sufficiente per la versione 20.04+, poiché non è più necessario
+    # considerare la differenza tra firmato e non firmato, quindi quanto riportato di seguito è praticamente
+    # sufficiente. La gestione degli errori è però un po' carente.
+    # Riconfigureremo il kernel nel modulo boot_reconfigure per garantire che gli hook
+    # vengano eseguiti secondo necessità.
+
+    # ubuntu
+    # cp --preserve=timestamps /lib/live/mount/medium/live/vmlinuz-`uname -r` ${ROOT}/boot/vmlinuz-`uname -r`
+
+    # debian
+    - cp --preserve=timestamps /run/live/medium/live/vmlinuz-`uname -r` ${ROOT}/boot/vmlinuz-`uname -r`

package/conf/distros/trixie/calamares/modules/shellprocess@boot_reconfigure.yml

@@ -0,0 +1,15 @@
+# SPDX-FileCopyrightText: 2020 Harald Sitter <sitter@kde.org>
+# SPDX-License-Identifier: GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL
+#
+# Follow up to boot_deploy. This is inside chroot!
+# Make sure everything is configured properly by reconfiguring the package.
+---
+message: "Final reconfiguration of the kernel and bootloader..."
+dontChroot: false
+timeout: 300
+script:
+    - chmod 644 /boot/vmlinuz-`uname -r`
+    - chown 0:0 /boot/vmlinuz-`uname -r`
+    # Reconfigure to ensure hooks are run as necessary. But disable initrd
+    # updating, it happens in initramfs module controlled by cala.
+    - INITRD=No dpkg-reconfigure -fnoninteractive linux-image-`uname -r`

package/conf/distros/trixie/calamares/modules/shellprocess@mkinitramfs.yml

@@ -0,0 +1,6 @@
+# shellprocess_mkinitramfs.conf
+message: "Creating the boot image (initramfs)..."
+dontChroot: false
+timeout: 300
+script:
+    - "mkinitramfs -o /boot/initrd.img-$(uname -r)"

package/conf/distros/trixie/calamares/modules/unpackfs.mustache

@@ -0,0 +1,6 @@
+# A mustache template for module: unpackfs.conf
+---
+unpack:
+    -   source: {{{source}}}
+        sourcefs: "squashfs"
+        destination: ""

package/conf/distros/{bionic → trixie}/calamares/modules/users.yml

@@ -1,5 +1,4 @@
-# Ubuntu bionic
-# users
+# Debian/bookworm
 ---
 userGroup: users
 defaultGroups:
@@ -11,9 +10,11 @@ defaultGroups:
   - video
   - plugdev
   - netdev
+  # www-data
   # lpadmin
   # scanner
   # bluetooth
 autologinGroup: autologin
 sudoersGroup: sudo
-setRootPassword: false
+setRootPassword: true
+doReusePassword: false

package/conf/distros/{rolling → trixie}/calamares/modules/welcome.yml

@@ -1,4 +1,4 @@
-# Debian Buster
+# Debian/bookworm
 # welcome
 ---
 showSupportUrl: true

package/conf/distros/{stretch/krill → trixie/calamares}/settings.yml

@@ -1,7 +1,7 @@
-# Debian jessie, stretch
+# Debian/bullseye e successivi
 ---
 # "local" is LIBDIR/calamares/modules with settings in SHARE/calamares/modules
-modules-search: [ local, /usr/lib/calamares/modules ]
+modules-search: [ local ]
 
 # If this is set to true, Calamares refers to itself as a "setup program"
 # rather than an "installer". Defaults to the value of dont-chroot, but
@@ -38,10 +38,21 @@ disable-cancel-during-exec: false
 quit-at-end: false
 
 instances:
-- id:       cleanup
+- id:       mkinitramfs
   module:   shellprocess
-  config:   shellprocess-cleanup.conf
+  config:   shellprocess@mkinitramfs.conf
 
+- id: boot_deploy
+  module: shellprocess
+  config: shellprocess@boot_deploy.conf
+
+- id: boot_reconfigure
+  module: shellprocess
+  config: shellprocess@boot_reconfigure.conf
+
+#
+# SEQUENCE
+#
 sequence:
   # Phase 1 - prepare.
   # View modules are shown as UI pages, jobs from job modules
@@ -65,7 +76,7 @@ sequence:
       - partition
       - mount
       - unpackfs
-      # dpkg-unsafe-io
+      - dpkg-unsafe-io
       - sources-yolk
       - machineid
       - fstab
@@ -73,19 +84,21 @@ sequence:
       - keyboard
       - localecfg
       - users
-      - displaymanager 
+      - displaymanager
       - networkcfg
       - hwclock
-      - services-systemd 
+      - services-systemd
+      - luksbootkeyfile
+      - shellprocess@boot_deploy      
+      - initramfscfg
+      - shellprocess@mkinitramfs
       - bootloader-config
       - grubcfg
       - bootloader
-      - packages
-      - luksbootkeyfile
+      - shellprocess@boot_reconfigure
       - plymouthcfg
-      - initramfscfg
-      - initramfs
-      # dpkg-unsafe-io-undo
+      - packages
+      - dpkg-unsafe-io-undo
       - removeuser
       - sources-yolk-undo
       - cleanup