debian-rk3576-ospack.yaml

{{ $suite := or .suite "trixie" }}
{{ $variant := or .variant "minbase" }}
{{ $gitinfo := or .gitinfo "unknown" }}
{{ $testsdir := or .testsdir "prebuilt/tests" }}

architecture: arm64

actions:
  - action: mmdebstrap
    description: Bootstrap a base Debian {{ $suite }} system
    suite: {{ $suite }}
    variant: {{ $variant }}
    keyring: /usr/share/keyrings/debian-archive-keyring.gpg
    components:
      - main
      - contrib
      - non-free
      - non-free-firmware
    include:
      - acl
      - adduser
      - avahi-daemon
      - alsa-ucm-conf
      - alsa-utils
      - apt-transport-https
      - bash-completion
      - bc
      - bluedevil
      - bluez
      - bluez-alsa-utils
      - bluez-firmware
      - bluez-meshd
      - bsdextrautils
      - bsdmainutils
      - build-essential
      - ca-certificates
      - cec-utils
      - cog
      - curl
      - device-tree-compiler
      - dmidecode
      - dnsmasq-base
      - drm-info
      - e2fsprogs
      - edid-decode
      - evtest
      - file
      - fio
      - firmware-misc-nonfree
      - firmware-realtek
      - gcc
      - git
      - glmark2-wayland
      - gpiod
      - i2c-tools
      - inetutils-telnet
      - initramfs-tools
      - iperf3
      - iproute2
      - iptables
      - iputils-ping
      - iw
      - iwd
      - kde-config-screenlocker
      - kde-spectacle
      - kde-standard
      - kmscube
      - konsole
      - kscreen
      - less
      - libcanberra-pulse
      - libdrm-tests
      - libtypec-utils
      - libubootenv-tool
      - libusb-1.0-0-dev
      - links
      - linux-cpupower
      - linux-sysctl-defaults
      - lm-sensors
      - locales
      - lshw
      - lsof
      - make
      - mesa-utils
      - modemmanager
      - nano
      - nftables
      - nodejs
      - openssh-server
      - p7zip
      - pciutils
      - pipewire-alsa
      - plasma-nm
      - plasma-systemmonitor
      - powercap-utils
      - powerdevil
      - python3-pandas
      - python3-plotly
      - rfkill
      - rsync
      - sddm
      - sddm-theme-breeze
      - sox
      - strace
      - stress-ng
      - sudo
      - sysstat
      - systemd
      - systemd-repart
      - systemd-resolved
      - systemd-sysv
      - systemd-timesyncd
      - systemsettings
      - tcpdump
      - traceroute
      - u-boot-menu
      - udev
      - unzip
      - usb-modeswitch
      - usbutils
      - util-linux-extra
      - v4l-utils
      - vim-tiny
      - wget
      - wireless-regdb
      - wireplumber
      - wpasupplicant
      - zstd

  - action: run
    description: Generate en_US.UTF-8 locale
    chroot: true
    command: sed -i 's/^# en_US.UTF-8/en_US.UTF-8/' /etc/locale.gen && locale-gen

  - action: run
    description: Set default locale
    chroot: true
    command: echo "LANG=en_US.UTF-8" > /etc/default/locale

  - action: run
    description: Add default user "user" with password "user"
    chroot: true
    command: useradd -s /bin/bash -F -m user &&
             echo "user:user" | chpasswd &&
             gpasswd -a user sudo

  - action: run
    description: Add dedicated "flipctl" user
    chroot: true
    command: useradd -s /usr/sbin/nologin -d /var/lib/flipctl -G input,video,render -m -r flipctl

  - action: run
    description: Create user's .bash_aliases
    chroot: true
    command: |
      echo "alias pastebin='curl --data-binary @- https://staging.getpost.workers.dev/'" >> /home/user/.bash_aliases
      chown user:user /home/user/.bash_aliases

  - action: run
    description: Add sbin directories to user's PATH
    chroot: true
    command: printf '\nexport PATH=$PATH:/usr/local/sbin:/usr/sbin:/sbin\n' >> /home/user/.bashrc

  - action: download
    description: Download the most recent version of sbc-bench
    url: https://raw.githubusercontent.com/ThomasKaiser/sbc-bench/master/sbc-bench.sh
    name: sbc-bench

  - action: overlay
    description: Copy sbc-bench into root
    origin: sbc-bench
    destination: /usr/bin/sbc-bench.sh

  - action: run
    chroot: true
    command: chmod +x /usr/bin/sbc-bench.sh

  - action: overlay
    description: Overlay our config defaults
    source: overlays/configs
    destination: /etc

  - action: overlay
    description: Overlay Broadcom WiFi/BT firmware files
    source: overlays/firmware
    destination: /usr/lib/firmware

  - action: overlay
    description: Overlay our usr/local scripts
    source: overlays/usr/local
    destination: /usr/local

  - action: overlay
    description: Overlay our usr/sbin files
    source: overlays/usr/sbin
    destination: /usr/sbin

  - action: overlay
    description: Overlay our usr/share files
    source: overlays/usr/share
    destination: /usr/share

  # NetworkManager ignores connection profiles that are world-readable.
  # Git can not track 600 permission, so we must set it here.
  - action: run
    description: Fix permissions on NetworkManager connection profiles
    chroot: true
    command: chmod 600 /etc/NetworkManager/system-connections/*.nmconnection

  - action: run
    description: Save GIT info
    chroot: true
    command: |
      echo 'BUILD_GIT="{{ $gitinfo }}"' >> /etc/os-release

  - action: run
    description: Make u-boot-update script executable
    chroot: true
    command: chmod +x /usr/sbin/u-boot-update

  - action: run
    description: Remove /etc/machine-id and default /etc/motd
    chroot: true
    command: rm -f /etc/machine-id /etc/motd

  - action: run
    description: Switch to upstream signed regulatory.db
    chroot: true
    command: update-alternatives --set regulatory.db /lib/firmware/regulatory.db-upstream

  - action: overlay
    description: Copy test suite into the target
    source: {{ $testsdir }}
    destination: /flipperone-testing

  - action: run
    description: Make test suite writable for all users
    chroot: true
    command: chmod -R o+w /flipperone-testing

  - action: download
    description: Download our patched Cog browser with support for seat selection
    url: https://dl-linux-images.flipp.dev/flipperone-deb/pool/main/c/cog/cog_0.19.1%2Bgit20260428.4fdf9dc-1_arm64.deb
    name: cog-seat

  - action: install-deb
    description: Install the patched Cog package into the target
    origin: cog-seat

  - action: download
    description: Download SDDM from Debian Sid rebuilt against Trixie libraries
    url: https://dl-linux-images.flipp.dev/flipperone-deb/pool/main/s/sddm/sddm_0.21.0%2Bgit20251101.dfa5315-1_arm64.deb
    name: sddm-sid

  - action: install-deb
    description: Install the updated SDDM package into the target
    origin: sddm-sid

  - action: download
    description: Download updated Mediatek firmware (sid version)
    url: https://dl-linux-images.flipp.dev/flipperone-deb/pool/main/f/firmware-nonfree/firmware-mediatek_20260309-1_all.deb
    name: firmware-sid

  - action: install-deb
    description: Install the updated Mediatek firmware into the target
    origin: firmware-sid

  - action: pack
    description: Save a tarball of the root filesystem
    file: debian-ospack.tar.gz