2018-01-30 11:34:07 +01:00
|
|
|
preinstall:
|
|
|
|
|
# switch to hardened, build hardened toolchain, rebuild everything
|
|
|
|
|
mkdir -p $(CHROOT)/etc/portage/profile
|
|
|
|
|
echo "-hardened" >> $(CHROOT)/etc/portage/profile/use.mask
|
|
|
|
|
$(inroot) $(EMERGE) $(USEPKG) --oneshot gcc
|
|
|
|
|
$(inroot) $(EMERGE) $(USEPKG) --oneshot binutils virtual/libc
|
|
|
|
|
-$(gcc_config)
|
|
|
|
|
$(inroot) $(EMERGE) $(USEPKG) --emptytree @world
|
|
|
|
|
$(inroot) bash -c 'yes YES | etc-update --automode -9'
|
|
|
|
|
|
|
|
|
|
# Unitas-Portage-Overlay einbinden
|
|
|
|
|
$(inroot) $(EMERGE) -n $(USEPKG) app-portage/layman
|
|
|
|
|
sed -i 's/check_official : Yes/check_official : No/' $(CHROOT)/etc/layman/layman.cfg
|
|
|
|
|
wget -P $(CHROOT)/etc/layman/overlays http://dev.unitas-network.de/raw/Gentoo/Unitas.git/master/unitas-overlays.xml
|
|
|
|
|
$(inroot) layman -l | grep -q unitas || $(inroot) layman -La unitas
|
|
|
|
|
|
|
|
|
|
postinstall: timesyncd.conf firstboot.start
|
|
|
|
|
# Konfigurationen anpassen
|
|
|
|
|
cp timesyncd.conf $(CHROOT)/etc/systemd/timesyncd.conf
|
2018-09-08 18:44:08 +02:00
|
|
|
mkdir -p $(CHROOT)/etc/local.d
|
2018-01-30 11:34:07 +01:00
|
|
|
cp firstboot.start $(CHROOT)/etc/local.d/firstboot.start
|
|
|
|
|
touch $(CHROOT)/firstboot
|
|
|
|
|
sed -i 's/# %wheel ALL=(ALL) ALL/%wheel ALL=(ALL) ALL/' $(CHROOT)/etc/sudoers
|
|
|
|
|
$(inroot) useradd -m -G users,wheel -s /bin/bash admin
|
|
|
|
|
$(inroot) passwd -d admin; $(inroot) passwd -e admin
|
|
|
|
|
$(inroot) systemctl enable screen@adm.service
|
|
|
|
|
|
|
|
|
|
# Beispiel feste IP-Adresse
|
|
|
|
|
cp 00-eth0.network $(CHROOT)/00-eth0.network.example
|
|
|
|
|
|
2019-07-07 13:41:16 +02:00
|
|
|
# MariaDB-Konfiguration ($$, weil make ein $ entfernt)
|
|
|
|
|
echo "s/^character-set-server.*$$/character-set-server = utf8mb4\ncollation-server = utf8mb4_general_ci\ntransaction_isolation = READ-COMMITTED\nbinlog_format = ROW\nexpire_logs_days = 3/"
|
|
|
|
|
sed -i "s/^character-set-server.*$$/character-set-server = utf8mb4\ncollation-server = utf8mb4_general_ci\ntransaction_isolation = READ-COMMITTED\nbinlog_format = ROW\nexpire_logs_days = 3/" $(CHROOT)/etc/mysql/my.cnf
|
|
|
|
|
sed -i "s/^innodb_file_per_table.*$$/innodb_file_per_table=1\ninnodb_file_format=barracuda\ninnodb_large_prefix=on/" $(CHROOT)/etc/mysql/my.cnf
|
|
|
|
|
sed -i "s/default-character-set=utf8/default-character-set=utf8mb4/" $(CHROOT)/etc/mysql/my.cnf
|
2018-01-30 11:34:07 +01:00
|
|
|
cp mariadb/my.cnf.root $(CHROOT)/root/.my.cnf
|
|
|
|
|
chmod 0600 $(CHROOT)/root/.my.cnf
|
|
|
|
|
rm -rf $(CHROOT)/var/lib/mysql/*
|
|
|
|
|
$(inroot) bash -c 'yes gentoo | emerge --config dev-db/mariadb'
|
|
|
|
|
|
|
|
|
|
# Apache-/PHP-Konfiguration
|
2018-10-08 19:49:20 +02:00
|
|
|
patch $(CHROOT)/etc/php/apache2-*/php.ini < php/php.ini-opcache.diff
|
2018-01-30 11:34:07 +01:00
|
|
|
find $(CHROOT)/etc/php/apache2-*/ -iname php.ini -print | xargs \sed -i \
|
|
|
|
|
-e 's:.*date.timezone =.*:date.timezone = Europe/Berlin:' \
|
|
|
|
|
-e 's:.*max_execution_time =.*:max_execution_time = 3600:' \
|
|
|
|
|
-e 's:.*max_input_time =.*:max_input_time = 3600:' \
|
|
|
|
|
-e 's:.*post_max_size =.*:post_max_size = 8G:' \
|
|
|
|
|
-e 's:.*upload_max_filesize =*.:upload_max_filesize = 8G:' \
|
|
|
|
|
-e 's:.*always_populate_raw_post_data =.*:always_populate_raw_post_data = -1:'
|
|
|
|
|
$(inroot) systemctl enable apache2
|
|
|
|
|
|
|
|
|
|
clean:
|
