136 lines
3.4 KiB
Bash
Executable File
136 lines
3.4 KiB
Bash
Executable File
#! @shell@
|
|
|
|
systemConfig=@systemConfig@
|
|
|
|
export HOME=/root PATH="@path@"
|
|
|
|
|
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" != true ]; then
|
|
# Process the kernel command line.
|
|
for o in $(</proc/cmdline); do
|
|
case $o in
|
|
boot.debugtrace)
|
|
# Show each command.
|
|
set -x
|
|
;;
|
|
esac
|
|
done
|
|
|
|
|
|
# Print a greeting.
|
|
echo
|
|
echo -e "\e[1;32m<<< NixOS Stage 2 >>>\e[0m"
|
|
echo
|
|
|
|
|
|
# Normally, stage 1 mounts the root filesystem read/writable.
|
|
# However, in some environments, stage 2 is executed directly, and the
|
|
# root is read-only. So make it writable here.
|
|
if [ -z "$container" ]; then
|
|
mount -n -o remount,rw none /
|
|
fi
|
|
fi
|
|
|
|
|
|
# Likewise, stage 1 mounts /proc, /dev and /sys, so if we don't have a
|
|
# stage 1, we need to do that here.
|
|
if [ ! -e /proc/1 ]; then
|
|
specialMount() {
|
|
local device="$1"
|
|
local mountPoint="$2"
|
|
local options="$3"
|
|
local fsType="$4"
|
|
|
|
# We must not overwrite this mount because it's bind-mounted
|
|
# from stage 1's /run
|
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" = true ] && [ "${mountPoint}" = /run ]; then
|
|
return
|
|
fi
|
|
|
|
install -m 0755 -d "$mountPoint"
|
|
mount -n -t "$fsType" -o "$options" "$device" "$mountPoint"
|
|
}
|
|
source @earlyMountScript@
|
|
fi
|
|
|
|
|
|
if [ "${IN_NIXOS_SYSTEMD_STAGE1:-}" = true ]; then
|
|
echo "booting system configuration ${systemConfig}"
|
|
else
|
|
echo "booting system configuration $systemConfig" > /dev/kmsg
|
|
fi
|
|
|
|
|
|
# Make /nix/store a read-only bind mount to enforce immutability of
|
|
# the Nix store. Note that we can't use "chown root:nixbld" here
|
|
# because users/groups might not exist yet.
|
|
# Silence chown/chmod to fail gracefully on a readonly filesystem
|
|
# like squashfs.
|
|
chown -f 0:30000 /nix/store
|
|
chmod -f 1775 /nix/store
|
|
if [ -n "@readOnlyNixStore@" ]; then
|
|
if ! [[ "$(findmnt --noheadings --output OPTIONS /nix/store)" =~ ro(,|$) ]]; then
|
|
if [ -z "$container" ]; then
|
|
mount --bind /nix/store /nix/store
|
|
else
|
|
mount --rbind /nix/store /nix/store
|
|
fi
|
|
mount -o remount,ro,bind /nix/store
|
|
fi
|
|
fi
|
|
|
|
|
|
|
|
# Log the script output to /dev/kmsg or /run/log/stage-2-init.log.
|
|
# Only at this point are all the necessary prerequisites ready for these commands.
|
|
exec {logOutFd}>&1 {logErrFd}>&2
|
|
if test -w /dev/kmsg; then
|
|
exec > >(tee -i /proc/self/fd/"$logOutFd" | while read -r line; do
|
|
if test -n "$line"; then
|
|
echo "<7>stage-2-init: $line" > /dev/kmsg
|
|
fi
|
|
done) 2>&1
|
|
else
|
|
mkdir -p /run/log
|
|
exec > >(tee -i /run/log/stage-2-init.log) 2>&1
|
|
fi
|
|
|
|
|
|
# Required by the activation script
|
|
install -m 0755 -d /etc /etc/nixos
|
|
install -m 01777 -d /tmp
|
|
|
|
|
|
# Run the script that performs all configuration activation that does
|
|
# not have to be done at boot time.
|
|
echo "running activation script..."
|
|
$systemConfig/activate
|
|
|
|
|
|
# Record the boot configuration.
|
|
ln -sfn "$systemConfig" /run/booted-system
|
|
|
|
# copy eudev rules over to /var
|
|
cp -ru @eudev@/var/lib/udev /var/lib/
|
|
|
|
# Run any user-specified commands.
|
|
@shell@ @postBootCommands@
|
|
|
|
|
|
# Reset the logging file descriptors.
|
|
exec 1>&$logOutFd 2>&$logErrFd
|
|
exec {logOutFd}>&- {logErrFd}>&-
|
|
|
|
|
|
mkdir -p \
|
|
/etc/syndicate/user-settings \
|
|
/run/etc/syndicate/core \
|
|
/run/etc/syndicate/services \
|
|
/run/etc/syndicate/machine \
|
|
|
|
# Start Synit.
|
|
echo "starting Synit..."
|
|
exec @synit_pid1@ \
|
|
--log @logProgram@ \
|
|
--server-path @syndicate_server@
|