mirror of
https://github.com/Gerg-L/nixos.git
synced 2025-12-10 00:43:56 -05:00
truely silent boot has been achieved
This commit is contained in:
parent
04f7e566b4
commit
5cd0f03cb3
5 changed files with 222 additions and 3 deletions
|
|
@ -1,4 +1,12 @@
|
||||||
_: {lib, ...}: {
|
_: {
|
||||||
|
lib,
|
||||||
|
modulesPath,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
disabledModules = ["${modulesPath}/system/boot/stage-2.nix"];
|
||||||
|
imports = [
|
||||||
|
./stage-2.nix
|
||||||
|
];
|
||||||
environment.etc = {
|
environment.etc = {
|
||||||
"issue" = {
|
"issue" = {
|
||||||
text = "[?12l[?25h";
|
text = "[?12l[?25h";
|
||||||
|
|
@ -8,7 +16,7 @@ _: {lib, ...}: {
|
||||||
boot = {
|
boot = {
|
||||||
blacklistedKernelModules = ["nouveau" "lbm-nouveau" "pcspkr"];
|
blacklistedKernelModules = ["nouveau" "lbm-nouveau" "pcspkr"];
|
||||||
kernelParams = ["fbcon=nodefer" "bgrt_disable" "quiet" "systemd.show_status=false" "rd.udev.log_level=3" "vt.global_cursor_default=0"];
|
kernelParams = ["fbcon=nodefer" "bgrt_disable" "quiet" "systemd.show_status=false" "rd.udev.log_level=3" "vt.global_cursor_default=0"];
|
||||||
consoleLogLevel = 0;
|
consoleLogLevel = 3;
|
||||||
initrd.verbose = false;
|
initrd.verbose = false;
|
||||||
plymouth = {
|
plymouth = {
|
||||||
enable = lib.mkDefault true;
|
enable = lib.mkDefault true;
|
||||||
131
modules/boot/stage-2-init.sh
Normal file
131
modules/boot/stage-2-init.sh
Normal file
|
|
@ -0,0 +1,131 @@
|
||||||
|
#! @shell@
|
||||||
|
exec 1<&-
|
||||||
|
exec 1<>/dev/null
|
||||||
|
systemConfig=@systemConfig@
|
||||||
|
|
||||||
|
export HOME=/root PATH="@path@"
|
||||||
|
|
||||||
|
|
||||||
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" != true ]; then
|
||||||
|
# Process the kernel command line.
|
||||||
|
for o in $(</proc/cmdline); do
|
||||||
|
case $o in
|
||||||
|
boot.debugtrace)
|
||||||
|
# Show each command.
|
||||||
|
set -x
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
|
||||||
|
# Print a greeting.
|
||||||
|
echo
|
||||||
|
echo -e "\e[1;32m<<< @distroName@ Stage 2 >>>\e[0m"
|
||||||
|
echo
|
||||||
|
|
||||||
|
|
||||||
|
# Normally, stage 1 mounts the root filesystem read/writable.
|
||||||
|
# However, in some environments, stage 2 is executed directly, and the
|
||||||
|
# root is read-only. So make it writable here.
|
||||||
|
if [ -z "$container" ]; then
|
||||||
|
mount -n -o remount,rw none /
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
# Likewise, stage 1 mounts /proc, /dev and /sys, so if we don't have a
|
||||||
|
# stage 1, we need to do that here.
|
||||||
|
if [ ! -e /proc/1 ]; then
|
||||||
|
specialMount() {
|
||||||
|
local device="$1"
|
||||||
|
local mountPoint="$2"
|
||||||
|
local options="$3"
|
||||||
|
local fsType="$4"
|
||||||
|
|
||||||
|
# We must not overwrite this mount because it's bind-mounted
|
||||||
|
# from stage 1's /run
|
||||||
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" = true ] && [ "${mountPoint}" = /run ]; then
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
install -m 0755 -d "$mountPoint"
|
||||||
|
mount -n -t "$fsType" -o "$options" "$device" "$mountPoint"
|
||||||
|
}
|
||||||
|
source @earlyMountScript@
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" = true ]; then
|
||||||
|
echo "booting system configuration ${systemConfig}"
|
||||||
|
else
|
||||||
|
echo "booting system configuration $systemConfig" > /dev/kmsg
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
# Make /nix/store a read-only bind mount to enforce immutability of
|
||||||
|
# the Nix store. Note that we can't use "chown root:nixbld" here
|
||||||
|
# because users/groups might not exist yet.
|
||||||
|
# Silence chown/chmod to fail gracefully on a readonly filesystem
|
||||||
|
# like squashfs.
|
||||||
|
chown -f 0:30000 /nix/store
|
||||||
|
chmod -f 1775 /nix/store
|
||||||
|
if [ -n "@readOnlyNixStore@" ]; then
|
||||||
|
if ! [[ "$(findmnt --noheadings --output OPTIONS /nix/store)" =~ ro(,|$) ]]; then
|
||||||
|
if [ -z "$container" ]; then
|
||||||
|
mount --bind /nix/store /nix/store
|
||||||
|
else
|
||||||
|
mount --rbind /nix/store /nix/store
|
||||||
|
fi
|
||||||
|
mount -o remount,ro,bind /nix/store
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" != true ]; then
|
||||||
|
# Use /etc/resolv.conf supplied by systemd-nspawn, if applicable.
|
||||||
|
if [ -n "@useHostResolvConf@" ] && [ -e /etc/resolv.conf ]; then
|
||||||
|
resolvconf -m 1000 -a host </etc/resolv.conf
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
# Log the script output to /dev/kmsg or /run/log/stage-2-init.log.
|
||||||
|
# Only at this point are all the necessary prerequisites ready for these commands.
|
||||||
|
exec {logOutFd}>&1 {logErrFd}>&2
|
||||||
|
if test -w /dev/kmsg; then
|
||||||
|
exec > >(tee -i /proc/self/fd/"$logOutFd" | while read -r line; do
|
||||||
|
if test -n "$line"; then
|
||||||
|
echo "<7>stage-2-init: $line" > /dev/kmsg
|
||||||
|
fi
|
||||||
|
done) 2>&1
|
||||||
|
else
|
||||||
|
mkdir -p /run/log
|
||||||
|
exec > >(tee -i /run/log/stage-2-init.log) 2>&1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
# Required by the activation script
|
||||||
|
install -m 0755 -d /etc /etc/nixos
|
||||||
|
install -m 01777 -d /tmp
|
||||||
|
# Run the script that performs all configuration activation that does
|
||||||
|
# not have to be done at boot time.
|
||||||
|
echo "running activation script..."
|
||||||
|
$systemConfig/activate
|
||||||
|
# Record the boot configuration.
|
||||||
|
ln -sfn "$systemConfig" /run/booted-system
|
||||||
|
# Run any user-specified commands.
|
||||||
|
@shell@ @postBootCommands@
|
||||||
|
# Ensure systemd doesn't try to populate /etc, by forcing its first-boot
|
||||||
|
# heuristic off. It doesn't matter what's in /etc/machine-id for this purpose,
|
||||||
|
# and systemd will immediately fill in the file when it starts, so just
|
||||||
|
# creating it is enough. This `: >>` pattern avoids forking and avoids changing
|
||||||
|
# the mtime if the file already exists.
|
||||||
|
: >> /etc/machine-id
|
||||||
|
# No need to restore the stdout/stderr streams we never redirected and
|
||||||
|
# especially no need to start systemd
|
||||||
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" != true ]; then
|
||||||
|
# Reset the logging file descriptors.
|
||||||
|
exec 1>&$logOutFd 2>&$logErrFd
|
||||||
|
exec {logOutFd}>&- {logErrFd}>&-
|
||||||
|
# Start systemd in a clean environment.
|
||||||
|
echo "starting systemd..."
|
||||||
|
exec @systemdExecutable@ "$@"
|
||||||
|
fi
|
||||||
76
modules/boot/stage-2.nix
Normal file
76
modules/boot/stage-2.nix
Normal file
|
|
@ -0,0 +1,76 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
|
useHostResolvConf = config.networking.resolvconf.enable && config.networking.useHostResolvConf;
|
||||||
|
|
||||||
|
bootStage2 = pkgs.substituteAll {
|
||||||
|
src = ./stage-2-init.sh;
|
||||||
|
shellDebug = "${pkgs.bashInteractive}/bin/bash";
|
||||||
|
shell = "${pkgs.bash}/bin/bash";
|
||||||
|
inherit (config.boot) readOnlyNixStore systemdExecutable extraSystemdUnitPaths;
|
||||||
|
inherit (config.system.nixos) distroName;
|
||||||
|
isExecutable = true;
|
||||||
|
inherit useHostResolvConf;
|
||||||
|
inherit (config.system.build) earlyMountScript;
|
||||||
|
path = lib.makeBinPath ([
|
||||||
|
pkgs.coreutils
|
||||||
|
pkgs.util-linux
|
||||||
|
]
|
||||||
|
++ lib.optional useHostResolvConf pkgs.openresolv);
|
||||||
|
postBootCommands =
|
||||||
|
pkgs.writeText "local-cmds"
|
||||||
|
''
|
||||||
|
${config.boot.postBootCommands}
|
||||||
|
${config.powerManagement.powerUpCommands}
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
in {
|
||||||
|
options = {
|
||||||
|
boot = {
|
||||||
|
postBootCommands = mkOption {
|
||||||
|
default = "";
|
||||||
|
example = "rm -f /var/log/messages";
|
||||||
|
type = types.lines;
|
||||||
|
description = lib.mdDoc ''
|
||||||
|
Shell commands to be executed just before systemd is started.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
readOnlyNixStore = mkOption {
|
||||||
|
type = types.bool;
|
||||||
|
default = true;
|
||||||
|
description = lib.mdDoc ''
|
||||||
|
If set, NixOS will enforce the immutability of the Nix store
|
||||||
|
by making {file}`/nix/store` a read-only bind
|
||||||
|
mount. Nix will automatically make the store writable when
|
||||||
|
needed.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
systemdExecutable = mkOption {
|
||||||
|
default = "/run/current-system/systemd/lib/systemd/systemd";
|
||||||
|
type = types.str;
|
||||||
|
description = lib.mdDoc ''
|
||||||
|
The program to execute to start systemd.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
extraSystemdUnitPaths = mkOption {
|
||||||
|
default = [];
|
||||||
|
type = types.listOf types.str;
|
||||||
|
description = lib.mdDoc ''
|
||||||
|
Additional paths that get appended to the SYSTEMD_UNIT_PATH environment variable
|
||||||
|
that can contain mutable unit files.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
config = {
|
||||||
|
system.build.bootStage2 = lib.mkForce bootStage2;
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
@ -2,8 +2,8 @@ inputs: {
|
||||||
imports = [
|
imports = [
|
||||||
(import ./DE inputs)
|
(import ./DE inputs)
|
||||||
(import ./DM inputs)
|
(import ./DM inputs)
|
||||||
|
(import ./boot inputs)
|
||||||
|
|
||||||
(import ./boot.nix inputs)
|
|
||||||
(import ./git.nix inputs)
|
(import ./git.nix inputs)
|
||||||
(import ./hardware.nix inputs)
|
(import ./hardware.nix inputs)
|
||||||
(import ./misc.nix inputs)
|
(import ./misc.nix inputs)
|
||||||
|
|
|
||||||
|
|
@ -36,6 +36,10 @@ _: {config, ...}: {
|
||||||
devices = ["/dev/disk/by-id/nvme-SHPP41-500GM_SSB4N6719101A4N22"];
|
devices = ["/dev/disk/by-id/nvme-SHPP41-500GM_SSB4N6719101A4N22"];
|
||||||
}
|
}
|
||||||
];
|
];
|
||||||
|
splashImage = null;
|
||||||
|
extraConfig = ''
|
||||||
|
GRUB_TIMEOUT_STYLE=hidden
|
||||||
|
'';
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue