Newer
Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
#!/bin/bash
# Copyright © 2016-2017 Simon McVittie
# Copyright © 2017-2018 Collabora Ltd.
#
# SPDX-License-Identifier: MIT
#
# Permission is hereby granted, free of charge, to any person obtaining
# a copy of this software and associated documentation files (the
# "Software"), to deal in the Software without restriction, including
# without limitation the rights to use, copy, modify, merge, publish,
# distribute, sublicense, and/or sell copies of the Software, and to
# permit persons to whom the Software is furnished to do so, subject to
# the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
# IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
# TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
# SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
set -e
set -u
set -o pipefail
me="$(basename "$0")"
NULL=
sdk=
if [ "${1-}" = '--sdk' ]; then
sdk=yes
shift
fi
if [ "$#" != 1 ] || [ "$1" = '--help' ] || [ "x$(id -u)" != x0 ] ||
! [ -d "$1" ]; then
echo "$me: Usage:" >&2
echo " $me SYSROOT" >&2
echo "" >&2
echo "Run this script as root." >&2
exit 2
fi
set -x
sysroot="$1"
cd "$sysroot"
rm -fr --one-file-system usr/local
rm -fr --one-file-system \
etc/apparmor \
etc/apparmor.d \
etc/bindresvport.blacklist \
etc/console-setup \
etc/cron.daily \
etc/cron.hourly \
etc/cron.monthly \
etc/cron.weekly \
etc/dbus-1/system.d \
etc/depmod.d \
etc/dhcp \
etc/emacs \
etc/fstab \
etc/fstab.d \
etc/gai.conf \
etc/group- \
etc/gshadow- \
etc/hostname \
etc/hosts \
etc/hosts.allow \
etc/hosts.deny \
etc/init \
etc/init.d \
etc/initramfs-tools \
etc/insserv \
etc/insserv.conf \
etc/insserv.conf.d \
etc/iproute2 \
etc/issue \
etc/issue.net \
etc/kbd \
etc/kernel \
etc/libaudit.conf \
etc/localtime \
etc/logcheck \
etc/login.defs \
etc/logrotate.d \
etc/lsb-base \
etc/lsb-base-logging.sh \
etc/machine-id \
etc/mailname \
etc/modprobe.d \
etc/modules \
etc/motd \
etc/network \
etc/networks \
etc/nologin \
etc/opt \
etc/pam.conf \
etc/pam.d \
etc/passwd- \
etc/ppp \
"etc/rc.local" \
etc/rc0.d \
etc/rc2.d \
etc/rc3.d \
etc/rc4.d \
etc/rc5.d \
etc/rc6.d \
etc/rcS.d \
etc/resolv.conf \
etc/resolvconf \
etc/rmt \
etc/rpc \
etc/rsyslog.conf \
etc/rsyslog.d \
etc/securetty \
etc/security \
etc/selinux \
etc/staff-group-for-usr-local \
etc/subgid- \
etc/subuid- \
etc/sudoers \
etc/sudoers.d \
etc/sysctl.conf \
etc/sysctl.d \
etc/systemd \
etc/terminfo \
etc/timezone \
etc/udev \
etc/update-motd.d \
var/backups \
var/cache \
var/lib/aptitude/pkgstates.old \
var/lib/binfmts \
var/lib/dbus/machine-id \
var/lib/dpkg/available-old \
var/lib/dpkg/diversions-old \
var/lib/dpkg/status-old \
var/lib/dpkg/statoverride \
var/lib/urandom \
"var/local" \
var/lock \
var/log \
var/mail \
var/opt \
var/run \
var/spool \
${NULL}
for d in \
var/lib/dbus \
var/lib/misc \
var/lib \
; do
if [ -d "$d" ]; then
rmdir --ignore-fail-on-non-empty "$d"
fi
done
chmod -R --changes "a-s,o-t,u=rwX,og=rX" .
chown -R --changes "root:root" .
if [ -n "$sdk" ]; then
install -d var/cache/apt/archives/partial
install -d var/lib/extrausers
touch var/cache/apt/archives/partial/.exists
# This is only useful if the SDK has libnss-extrausers
cp etc/passwd var/lib/extrausers/passwd
cp etc/group var/lib/extrausers/groups
else
rm -fr --one-file-system \
etc/adduser.conf \
etc/alternatives \
etc/apt \
etc/bash_completion.d \
etc/dpkg \
etc/debconf.conf \
etc/default \
etc/deluser.conf \
etc/gdb \
etc/gpasswd \
etc/gshadow \
etc/groff \
etc/group \
etc/mailcap \
etc/mailcap.order \
etc/manpath.config \
etc/mke2fs.conf \
etc/newt \
etc/passwd \
etc/shadow \
etc/skel \
etc/subgid \
etc/subuid \
etc/ucf.conf \
share/bash-completion \
share/bug \
var \
${NULL}
fi
rm -fr --one-file-system boot media mnt opt proc run srv sys tmp
mkdir proc run sys tmp
mv etc files
ln -s files usr
ln -s files/etc etc
ln -s files/var var