Сборка установочного ISO-образа Virtuality была добавлена
image/build-iso.sh пересобирает официальный Ubuntu Server 24.04 live-server ISO (amd64/arm64) в установщик Virtuality: - /autoinstall.yaml: установщик спрашивает только сеть, диск и пользователя, остальное автоматически; есть полностью автоматический режим --unattended; - исходники Virtuality (git-репозиторий, чтобы работал центр обновлений) и Python-колёса для офлайн-установки панели; - virtuality-firstboot.service при первой загрузке ставит KVM, libvirt, Cockpit, web-панель, vhealth и консольный dashboard, повторяя попытку до успеха. Также: зависимости панели закреплены полностью, установщики работают неинтерактивно и учитывают VIRTUALITY_USER, bootstrap.sh стал обёрткой над install.sh. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019LEUXMcdZo7b87mjkUsPgg
Этот коммит содержится в:
Claude
Executable
+244
@@ -0,0 +1,244 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
# ==========================================================
|
||||
# Virtuality ISO builder
|
||||
# Remasters the official Ubuntu Server 24.04 live ISO into a
|
||||
# Virtuality installer: Ubuntu autoinstall + bundled Virtuality
|
||||
# source and Python wheels + first boot setup service.
|
||||
#
|
||||
# Usage: image/build-iso.sh [options] (see --help)
|
||||
# Needs: xorriso, git, curl, python3 with pip, sha256sum.
|
||||
# Does not need root.
|
||||
# ==========================================================
|
||||
|
||||
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||
IMAGE_DIR="${REPO_ROOT}/image"
|
||||
|
||||
ARCH="amd64"
|
||||
UBUNTU_SERIES="24.04"
|
||||
UBUNTU_ISO=""
|
||||
CACHE_DIR="${VIRTUALITY_ISO_CACHE:-${REPO_ROOT}/.cache/iso}"
|
||||
OUTPUT_DIR="${REPO_ROOT}/dist"
|
||||
GIT_REF="HEAD"
|
||||
REPO_URL="https://github.com/viktor138irk/virtuality.git"
|
||||
WEB_PORT="8088"
|
||||
AUTO_UPDATE="1"
|
||||
UNATTENDED="0"
|
||||
USERNAME=""
|
||||
PASSWORD_HASH=""
|
||||
HOSTNAME_VALUE="virtuality"
|
||||
LOCALE="en_US.UTF-8"
|
||||
KEYBOARD="us"
|
||||
TIMEZONE="Etc/UTC"
|
||||
WITH_WHEELS="1"
|
||||
TARGET_PYTHON="3.12"
|
||||
|
||||
usage() {
|
||||
cat <<EOF
|
||||
Usage: $(basename "$0") [options]
|
||||
|
||||
Options:
|
||||
--arch amd64|arm64 Target architecture (default: ${ARCH})
|
||||
--ubuntu-iso PATH Use a local Ubuntu ${UBUNTU_SERIES} live-server ISO instead of downloading
|
||||
--cache-dir DIR Where downloaded Ubuntu ISOs are kept (default: ${CACHE_DIR})
|
||||
--output DIR Output directory (default: ${OUTPUT_DIR})
|
||||
--ref GIT_REF Git ref of Virtuality to bundle (default: ${GIT_REF})
|
||||
--repo-url URL Update remote configured on installed nodes (default: ${REPO_URL})
|
||||
--web-port PORT Web panel port on installed nodes (default: ${WEB_PORT})
|
||||
--no-auto-update Disable the nightly GitHub auto-update on installed nodes
|
||||
--locale LOCALE Installer/system locale (default: ${LOCALE})
|
||||
--keyboard LAYOUT Keyboard layout (default: ${KEYBOARD})
|
||||
--timezone TZ System timezone (default: ${TIMEZONE})
|
||||
--no-wheels Do not bundle Python wheels (first boot downloads them from PyPI)
|
||||
|
||||
Unattended mode (no questions at all, ERASES THE LARGEST DISK):
|
||||
--unattended Fully automatic install
|
||||
--username NAME Admin user (panel login), required with --unattended
|
||||
--password-hash HASH crypt(3) hash, e.g. from: openssl passwd -6
|
||||
--hostname NAME Hostname (default: ${HOSTNAME_VALUE})
|
||||
|
||||
Without --unattended the installer asks for network, disk and user
|
||||
like a regular Ubuntu Server install; everything else is automated.
|
||||
EOF
|
||||
}
|
||||
|
||||
die() { echo "ERROR: $*" >&2; exit 1; }
|
||||
say() { echo "==> $*"; }
|
||||
|
||||
while [[ $# -gt 0 ]]; do
|
||||
case "$1" in
|
||||
--arch) ARCH="$2"; shift 2 ;;
|
||||
--ubuntu-iso) UBUNTU_ISO="$2"; shift 2 ;;
|
||||
--cache-dir) CACHE_DIR="$2"; shift 2 ;;
|
||||
--output) OUTPUT_DIR="$2"; shift 2 ;;
|
||||
--ref) GIT_REF="$2"; shift 2 ;;
|
||||
--repo-url) REPO_URL="$2"; shift 2 ;;
|
||||
--web-port) WEB_PORT="$2"; shift 2 ;;
|
||||
--no-auto-update) AUTO_UPDATE="0"; shift ;;
|
||||
--locale) LOCALE="$2"; shift 2 ;;
|
||||
--keyboard) KEYBOARD="$2"; shift 2 ;;
|
||||
--timezone) TIMEZONE="$2"; shift 2 ;;
|
||||
--no-wheels) WITH_WHEELS="0"; shift ;;
|
||||
--unattended) UNATTENDED="1"; shift ;;
|
||||
--username) USERNAME="$2"; shift 2 ;;
|
||||
--password-hash) PASSWORD_HASH="$2"; shift 2 ;;
|
||||
--hostname) HOSTNAME_VALUE="$2"; shift 2 ;;
|
||||
-h|--help) usage; exit 0 ;;
|
||||
*) usage >&2; die "unknown option: $1" ;;
|
||||
esac
|
||||
done
|
||||
|
||||
case "$ARCH" in
|
||||
amd64) PY_PLATFORM_ARCH="x86_64"; MIRROR="https://releases.ubuntu.com/${UBUNTU_SERIES}" ;;
|
||||
arm64) PY_PLATFORM_ARCH="aarch64"; MIRROR="https://cdimage.ubuntu.com/releases/${UBUNTU_SERIES}/release" ;;
|
||||
*) die "unsupported arch: $ARCH (amd64 or arm64)" ;;
|
||||
esac
|
||||
[[ "$WEB_PORT" =~ ^[0-9]+$ ]] && (( WEB_PORT >= 1 && WEB_PORT <= 65535 )) || die "invalid --web-port: $WEB_PORT"
|
||||
if [[ "$UNATTENDED" == "1" ]]; then
|
||||
[[ "$USERNAME" =~ ^[a-z_][a-z0-9_-]{0,31}$ ]] || die "--unattended needs a valid --username"
|
||||
[[ "$PASSWORD_HASH" == \$* ]] || die "--unattended needs --password-hash (generate: openssl passwd -6)"
|
||||
[[ "$HOSTNAME_VALUE" =~ ^[a-zA-Z0-9][a-zA-Z0-9-]{0,62}$ ]] || die "invalid --hostname"
|
||||
fi
|
||||
for cmd in xorriso git curl python3 sha256sum md5sum; do
|
||||
command -v "$cmd" >/dev/null 2>&1 || die "$cmd not found (Ubuntu: sudo apt install xorriso git curl python3-pip)"
|
||||
done
|
||||
|
||||
VERSION="$(git -C "$REPO_ROOT" show "${GIT_REF}:VERSION" | tr -d '[:space:]')"
|
||||
[[ -n "$VERSION" ]] || die "cannot read VERSION at ${GIT_REF}"
|
||||
SUFFIX=""
|
||||
[[ "$UNATTENDED" == "1" ]] && SUFFIX="-unattended"
|
||||
OUTPUT_ISO="${OUTPUT_DIR}/virtuality-${VERSION}-ubuntu-${UBUNTU_SERIES}-${ARCH}${SUFFIX}.iso"
|
||||
|
||||
WORK_DIR="$(mktemp -d "${TMPDIR:-/tmp}/virtuality-iso.XXXXXX")"
|
||||
trap 'rm -rf "$WORK_DIR"' EXIT
|
||||
mkdir -p "$OUTPUT_DIR" "$CACHE_DIR"
|
||||
|
||||
# ---------------------------------------------------------- Ubuntu ISO
|
||||
if [[ -z "$UBUNTU_ISO" ]]; then
|
||||
say "Resolving the latest Ubuntu ${UBUNTU_SERIES} live-server ISO for ${ARCH}"
|
||||
curl -fsSL --retry 3 "${MIRROR}/SHA256SUMS" -o "${WORK_DIR}/SHA256SUMS"
|
||||
iso_name="$(grep -oE "ubuntu-${UBUNTU_SERIES}(\.[0-9]+)*-live-server-${ARCH}\.iso" "${WORK_DIR}/SHA256SUMS" | sort -uV | tail -n1)"
|
||||
[[ -n "$iso_name" ]] || die "live-server ISO for ${ARCH} not found in ${MIRROR}/SHA256SUMS"
|
||||
expected_sha="$(awk -v n="*${iso_name}" '$2 == n || $2 == substr(n, 2) {print $1}' "${WORK_DIR}/SHA256SUMS")"
|
||||
UBUNTU_ISO="${CACHE_DIR}/${iso_name}"
|
||||
if [[ -f "$UBUNTU_ISO" ]] && echo "${expected_sha} ${UBUNTU_ISO}" | sha256sum -c --status; then
|
||||
say "Using cached ${iso_name}"
|
||||
else
|
||||
say "Downloading ${iso_name}"
|
||||
curl -fL --retry 5 -C - -o "${UBUNTU_ISO}.part" "${MIRROR}/${iso_name}"
|
||||
mv "${UBUNTU_ISO}.part" "$UBUNTU_ISO"
|
||||
echo "${expected_sha} ${UBUNTU_ISO}" | sha256sum -c --status || die "checksum mismatch for ${iso_name}"
|
||||
fi
|
||||
say "Checksum OK: ${expected_sha}"
|
||||
fi
|
||||
[[ -f "$UBUNTU_ISO" ]] || die "Ubuntu ISO not found: $UBUNTU_ISO"
|
||||
|
||||
# ---------------------------------------------------------- payload
|
||||
PAYLOAD="${WORK_DIR}/virtuality"
|
||||
mkdir -p "$PAYLOAD"
|
||||
say "Bundling Virtuality ${VERSION} (${GIT_REF})"
|
||||
git clone --quiet --no-hardlinks "$REPO_ROOT" "${PAYLOAD}/source"
|
||||
git -C "${PAYLOAD}/source" checkout --quiet --detach "$(git -C "$REPO_ROOT" rev-parse "${GIT_REF}^{commit}")"
|
||||
git -C "${PAYLOAD}/source" remote set-url origin "$REPO_URL"
|
||||
|
||||
if [[ "$WITH_WHEELS" == "1" ]]; then
|
||||
say "Downloading Python ${TARGET_PYTHON} wheels for ${PY_PLATFORM_ARCH}"
|
||||
platform_args=(--platform "manylinux2014_${PY_PLATFORM_ARCH}")
|
||||
for glibc_minor in 17 28 31 34 35 39; do
|
||||
platform_args+=(--platform "manylinux_2_${glibc_minor}_${PY_PLATFORM_ARCH}")
|
||||
done
|
||||
python3 -m pip download --quiet --disable-pip-version-check \
|
||||
-r "${PAYLOAD}/source/web/requirements.txt" -d "${PAYLOAD}/source/wheels" \
|
||||
--only-binary=:all: --implementation cp --python-version "$TARGET_PYTHON" \
|
||||
--abi "cp${TARGET_PYTHON/./}" --abi abi3 --abi none "${platform_args[@]}"
|
||||
fi
|
||||
|
||||
cat > "${PAYLOAD}/image.env" <<EOF
|
||||
# Written by image/build-iso.sh, read by scripts/virtuality_firstboot.sh
|
||||
VIRTUALITY_IMAGE_VERSION=${VERSION}
|
||||
VIRTUALITY_IMAGE_BUILT=$(date -u +%Y-%m-%dT%H:%M:%SZ)
|
||||
VIRTUALITY_WEB_PORT=${WEB_PORT}
|
||||
VIRTUALITY_AUTO_UPDATE=${AUTO_UPDATE}
|
||||
EOF
|
||||
[[ "$UNATTENDED" == "1" ]] && echo "VIRTUALITY_USER=${USERNAME}" >> "${PAYLOAD}/image.env"
|
||||
cp "${IMAGE_DIR}/files/virtuality-firstboot.service" "${PAYLOAD}/virtuality-firstboot.service"
|
||||
|
||||
# ---------------------------------------------------------- autoinstall
|
||||
if [[ "$UNATTENDED" == "1" ]]; then
|
||||
interactive_sections=" []"
|
||||
identity=" identity:
|
||||
hostname: ${HOSTNAME_VALUE}
|
||||
username: ${USERNAME}
|
||||
realname: Virtuality Admin
|
||||
password: '${PASSWORD_HASH}'"
|
||||
else
|
||||
interactive_sections=" - network
|
||||
- storage
|
||||
- identity"
|
||||
identity=""
|
||||
fi
|
||||
python3 - "${IMAGE_DIR}/autoinstall.yaml" "${WORK_DIR}/autoinstall.yaml" <<PYEOF
|
||||
import sys
|
||||
text = open(sys.argv[1]).read()
|
||||
values = {
|
||||
"@@INTERACTIVE_SECTIONS@@": """${interactive_sections}""",
|
||||
"@@IDENTITY@@": """${identity}""",
|
||||
"@@LOCALE@@": "${LOCALE}",
|
||||
"@@KEYBOARD@@": "${KEYBOARD}",
|
||||
"@@TIMEZONE@@": "${TIMEZONE}",
|
||||
}
|
||||
for key, value in values.items():
|
||||
text = text.replace(key, value)
|
||||
open(sys.argv[2], "w").write(text)
|
||||
PYEOF
|
||||
python3 -c 'import sys, yaml; data = yaml.safe_load(open(sys.argv[1])); assert data["autoinstall"]["version"] == 1' "${WORK_DIR}/autoinstall.yaml" 2>/dev/null \
|
||||
|| python3 -c 'import sys, json; print("PyYAML not available, skipping YAML validation")'
|
||||
|
||||
# ---------------------------------------------------------- boot menu
|
||||
xorriso -osirrox on -indev "$UBUNTU_ISO" \
|
||||
-extract /boot/grub/grub.cfg "${WORK_DIR}/grub.cfg" \
|
||||
-extract /md5sum.txt "${WORK_DIR}/md5sum.txt" >/dev/null 2>&1 || die "cannot read grub.cfg from $UBUNTU_ISO"
|
||||
chmod u+w "${WORK_DIR}/grub.cfg" "${WORK_DIR}/md5sum.txt"
|
||||
python3 - "${WORK_DIR}/grub.cfg" "$UNATTENDED" "$VERSION" <<'PYEOF'
|
||||
import re
|
||||
import sys
|
||||
|
||||
path, unattended, version = sys.argv[1], sys.argv[2] == "1", sys.argv[3]
|
||||
text = open(path).read()
|
||||
match = re.search(r'menuentry "[^"]*" \{\n(.*?)\n\}', text, re.S)
|
||||
if not match:
|
||||
raise SystemExit("no menuentry found in grub.cfg")
|
||||
body = match.group(1)
|
||||
if "linux" not in body or "---" not in body:
|
||||
raise SystemExit("unexpected grub.cfg layout: " + body)
|
||||
kernel_args = "autoinstall ---" if unattended else "---"
|
||||
title = "Install Virtuality %s%s" % (version, " (UNATTENDED: erases disk)" if unattended else "")
|
||||
entry = 'menuentry "%s" {\n%s\n}\n' % (title, body.replace("---", kernel_args, 1))
|
||||
text = text[: match.start()] + entry + text[match.start():]
|
||||
text = re.sub(r"^set timeout=\d+", "set default=0\nset timeout=10", text, count=1, flags=re.M)
|
||||
text = text.replace('menuentry "Try or Install Ubuntu Server"', 'menuentry "Ubuntu Server (without Virtuality)"')
|
||||
open(path, "w").write(text)
|
||||
PYEOF
|
||||
new_md5="$(md5sum "${WORK_DIR}/grub.cfg" | cut -d' ' -f1)"
|
||||
sed -i "s|^[0-9a-f]\{32\} \./boot/grub/grub.cfg$|${new_md5} ./boot/grub/grub.cfg|" "${WORK_DIR}/md5sum.txt"
|
||||
|
||||
# ---------------------------------------------------------- repack
|
||||
say "Writing ${OUTPUT_ISO}"
|
||||
rm -f "$OUTPUT_ISO"
|
||||
chmod -R a+rX,go-w "$PAYLOAD"
|
||||
if ! xorriso -indev "$UBUNTU_ISO" -outdev "$OUTPUT_ISO" \
|
||||
-uid 0 -gid 0 \
|
||||
-map "$PAYLOAD" /virtuality \
|
||||
-map "${WORK_DIR}/autoinstall.yaml" /autoinstall.yaml \
|
||||
-map "${WORK_DIR}/grub.cfg" /boot/grub/grub.cfg \
|
||||
-map "${WORK_DIR}/md5sum.txt" /md5sum.txt \
|
||||
-boot_image any replay > "${WORK_DIR}/xorriso.log" 2>&1; then
|
||||
tail -n 30 "${WORK_DIR}/xorriso.log" >&2
|
||||
die "xorriso failed"
|
||||
fi
|
||||
[[ -s "$OUTPUT_ISO" ]] || die "xorriso did not produce $OUTPUT_ISO"
|
||||
|
||||
(cd "$OUTPUT_DIR" && sha256sum "$(basename "$OUTPUT_ISO")" > "$(basename "$OUTPUT_ISO").sha256")
|
||||
say "Done: ${OUTPUT_ISO} ($(du -h "$OUTPUT_ISO" | cut -f1))"
|
||||
say "SHA256: $(cut -d' ' -f1 "${OUTPUT_ISO}.sha256")"
|
||||
Ссылка в новой задаче
Block a user
© 2026 StackWorks