archboot/usr/lib/initcpio/install/archboot_base_common

#!/usr/bin/env bash
# Created by Tobias Powalowski <tpowa@archlinux.org>

build ()
{
    ### add virtio modules
    add_checked_modules 'virtio|zram|btrfs|libcrc32|zstd|sg|pkcs8_key_parser'
    
    ### setting up base structure
    map add_dir "/mnt" "/install" "/var/log" "/home" "/var/tmp"

    add_symlink /var/run ../run
    add_symlink /var/lock ../run/lock

    ### add basic apps
    map add_binary init agetty basename mount umount clear env printf gawk tty bash partprobe cp dir du ls mv rm sed grep \
          kill killall more ps pwd rmdir true cat mkdir echo false sleep kmod pidof touch chmod \
          find wc wget uname bsdtar yes awk halt shutdown reboot poweroff insmod modprobe sh dd hexdump \
          sort zstd nano date tee mktemp install pgrep vi ex edit view mkfs.btrfs rmmod mountpoint gzip \
          ldconfig ln top df cut stat sln nscd

    ### add nano files
    add_full_dir /usr/share/nano
    
    add_file "/usr/lib/libkmod.so"
    add_symlink "/init" "/usr/lib/systemd/systemd"
    
    ### adding needed files from running system
    add_symlink "/etc/mtab" "/proc/self/mounts"
    map add_full_dir "/etc/profile.d" "/usr/share/terminfo"
    systemfiles="bash.bash_logout crypttab fstab host.conf hosts inputrc mke2fs.conf \
                 nanorc nscd.conf nsswitch.conf protocols request-key.conf resolv.conf securetty \
                 services wgetrc"
    for i in $systemfiles; do
        add_file "/etc/$i"
    done

    ### adding config files of installation system
    map add_file "/etc/profile" "/etc/group" "/etc/gshadow"
    basic_config="bash.bashrc hostname modprobe.d/modprobe.conf passwd shadow shells"
    for i in $basic_config; do
        add_file "/usr/share/archboot/base/etc/$i" "/etc/$i"
    done
    ### add kmod related config file(s)
    add_file "/usr/lib/depmod.d/search.conf"

    ### fixing network support from glibc
    map add_file "/lib/libnss_files.so.2" "/lib/libnss_dns.so.2"

    ### add pam
    map add_binary mkhomedir_helper pam_timestamp_check unix_chkpwd unix_update
    map add_full_dir "/etc/security" "/etc/default" "/etc/pam.d" "/usr/lib/security"
    add_file "/etc/environment"

    ### add shadow
    map add_binary login nologin
    add_file "/etc/login.defs"
    
    ### add systemd
    # add systemd kernel modules
    add_checked_modules 'nfs|autofs4|loop'
    map add_binary mount.nfs4 umount.nfs umount.nfs4 mount.nfs setfont loadkeys
    
    #dbus files
    map add_binary dbus-cleanup-sockets dbus-daemon dbus-launch dbus-monitor dbus-run-session dbus-send dbus-test-tool \
          dbus-update-activation-environment dbus-uuidgen /usr/lib/dbus-1.0/dbus-daemon-launch-helper
    add_dir "/var/lib/dbus"
    map add_full_dir "/etc/dbus-1" "/usr/share/dbus-1"

    #systemd files
    map add_binary systemd-umount busctl bootctl coredumpctl hostnamectl journalctl kernel-install localectl \
          loginctl machinectl networkctl systemctl systemd-analyze systemd-ask-password \
          systemd-cat systemd-cgls systemd-cgtop \
          systemd-delta systemd-detect-virt systemd-escape systemd-firstboot systemd-hwdb systemd-inhibit systemd-machine-id-setup \
          systemd-mount systemd-notify systemd-nspawn systemd-path systemd-resolve \
          systemd-run systemd-socket-activate systemd-stdio-bridge systemd-sysusers \
          systemd-tty-ask-password-agent timedatectl systemd-repart userdbctl homectl oomctl portablectl systemd-creds \
          systemd-cryptenroll systemd-dissect systemd-id128 systemd-sysext
    map add_dir "/etc/tmpfiles.d" "/etc/modules-load.d" "/etc/binfmt.d/" "/var/lib/systemd"
    map add_full_dir "/etc/sysctl.d/"  "/etc/systemd" "/etc/xdg"  "/usr/lib/systemd"  "/usr/share/systemd"  "/usr/share/factory" \
                     "/usr/share/polkit-1" "/usr/lib/tmpfiles.d" "/usr/lib/modules-load.d" "/usr/lib/sysusers.d" "/usr/lib/sysctl.d"
    add_file "/usr/lib/os-release"
    add_file "/usr/share/archboot/base/etc/locale.conf" "/etc/locale.conf"
    add_file "/usr/share/archboot/base/etc/vconsole.conf" "/etc/vconsole.conf"
    add_file "/usr/share/archboot/base/etc/systemd/system/getty@.service" "/etc/systemd/system/getty@.service"
    add_file "/usr/share/archboot/base/etc/systemd/system/serial-getty@.service" "/etc/systemd/system/serial-getty@.service"
    add_file "/usr/share/archboot/base/etc/systemd/system/autovt@.service" "/etc/systemd/system/autovt@.service"
    add_file "/usr/share/archboot/base/etc/systemd/system/getty.target.wants/getty@tty1.service" \
             "/usr/lib/systemd/system/getty@tty1.service"
    add_symlink "/etc/systemd/system/getty.target.wants/getty@tty1.service" "/usr/lib/systemd/system/getty@tty1.service"
    add_file "/usr/share/archboot/base/etc/machine-id" "/etc/machine-id"

    ### add missing libsystemd files
    map add_file "/usr/lib/libnss_myhostname.so.2" "/usr/lib/libnss_mymachines.so.2" \
                 "/usr/lib/libnss_resolve.so.2" "/usr/lib/libnss_systemd.so.2"
    ### fix tmpfiles startup
    map add_file "/usr/lib/libnss_compat.so.2" "/usr/lib/libnsl.so.1"
    ## fix for systemd >=245 set default.target
    # remove initrd-release to allow normal systemd boot without initrd.target
    rm -f /tmp/*/root/etc/initrd-release
    add_symlink "/etc/systemd/system/default.target" "/usr/lib/systemd/system/multi-user.target"
    # mask systemd-gpt-auto-generator, errors out on initramfs usage
    add_symlink "/etc/systemd/system-generators/systemd-gpt-auto-generator" "/dev/null"
    ### add udev, which is not covered by udev hook
    add_binary "logger"
    # add rule files
    add_full_dir "/usr/lib/udev"
    # add schedule rules file
    add_file "/usr/share/archboot/base/etc/udev/rules.d/60-ioschedulers.rules" "/etc/udev/rules.d/60-ioschedulers.rules" 

    # add swapiness sysctl config file
    add_file "/usr/share/archboot/base/etc/sysctl.d/99-sysctl.conf" "/etc/sysctl.d/99-sysctl.conf"

    ### add pacman
    map add_binary pacman pacman-conf pacman-key pacman-db-upgrade makepkg \
          makepkg-template repo-add repo-elephant testpkg vercmp curl gpg-agent gpg \
          gpgconf gpg-connect-agent repo-remove archlinux-keyring-wkd-sync
    map add_dir "/var/cache/pacman/pkg" "/var/lib/pacman"
    map add_file "/etc/pacman.conf" "/etc/makepkg.conf" "/etc/pacman.d/mirrorlist"
    # add pacman initialisation of gpg keys
    add_dir "/etc/pacman.d/gnupg"
    add_file "/usr/share/archboot/base/etc/systemd/system/pacman-init.service" "/etc/systemd/system/pacman-init.service"
    add_symlink "/etc/systemd/system/multi-user.target.wants/pacman-init.service" "/etc/systemd/system/pacman-init.service"
    map add_full_dir "/usr/share/pacman/keyrings" "/usr/share/makepkg"
    # add local installed pacman database in container mode
    if [[ -e "/etc/hostname" ]]; then
       [[ "$(cat /etc/hostname )" == "archboot" ]] && add_full_dir "/var/lib/pacman/local"
    else
        add_full_dir "/var/lib/pacman/local"
    fi

    ### add nss p11-kit and ca certificates
    map add_binary p11-kit trust certutil cmsutil crlutil modutil nss-config pk12util \
                   shlibsign signtool signver ssltap symkeyutil update-ca-trust
    cafile="tls-ca-bundle.pem"
    cert="cert.pem"
    cert2="ca-certificates.crt"
    ca_dir="/etc/ca-certificates/extracted"
    cert_dir="/etc/ssl"
    cert2_dir="/etc/ssl/certs"
    map add_full_dir "$ca_dir" "$cert2_dir" /usr/lib/p11-kit /usr/lib/pkcs11
    add_symlink "${cert_dir}/${cert}" "../ca-certificates/extracted/$cafile"
    add_symlink "${cert2_dir}/${cert2}" "../../ca-certificates/extracted/$cafile"
    add_file /usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit

    ### add secure boot MOK
    add_full_dir /usr/share/archboot/keys

    ### fix licenses
    map add_file "/usr/share/licenses/shadow/LICENSE" "/usr/share/licenses/iana-etc/LICENSE" \
                 "/usr/share/licenses/dbus/COPYING" "/usr/share/licenses/p11-kit/COPYING"

}

help ()
{
cat <<HELPEOF
  This hook sets up all common initial directories and installs base, kmod,
  pam, pacman, shadow, systemd, udev utilities and libraries 
  for a archboot image. 
  DO NOT remove this one unless you know what you're doing.
HELPEOF
}