[Tink] initramfs boot to console with tmpfs root

Add dracut module for boot to console with root in tmpfs.
Generate Tink initramfs image in build which is able to
boot to console with just initramfs/vmlinuz image.

Signed-off-by: Swee Yee Fonn <swee.yee.fonn@intel.com>

Author: sfonn

SPECS/dracut/90tmpfsroot/tmpfsroot-module-setup.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+# Copyright (c) Intel Corporation.
+# Licensed under the MIT License.
+
+check() {
+    require_binaries tar || return 1
+    return 0
+}
+
+depends() {
+    return 0
+}
+
+install() {
+    inst_hook mount 90 "$moddir/tmpfsroot-mount.sh"
+}

SPECS/dracut/90tmpfsroot/tmpfsroot-mount.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+# Copyright (c) Intel Corporation.
+# Licensed under the MIT License.
+
+info "mount tmpfs for root"
+if ! mount -t tmpfs -o size=1G tmpfs $NEWROOT; then
+  warn "Failed to mount tmpfs on $NEWROOT"
+  die
+fi
+
+cd $NEWROOT
+
+if [[ -f /rootfs.tar.gz ]]; then
+  info "extract rootfs.tar.gz to $NEWROOT"
+  tar -xvf /rootfs.tar.gz -C $NEWROOT
+else
+  warn "no rootfs.tar.gz found"
+  die
+fi
+
+info "rootfs on tmpfs complete"

SPECS/dracut/dracut.signatures.json

@@ -12,7 +12,9 @@
   "dracut-102.tar.gz": "601b175cbf4d2ee902bb7bda3af8826ae2ca060c1af880f6da5a833413f4ec70",
   "lgpl-2.1.txt": "dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551",
   "megaraid.conf": "914824cdbe0c525b71efa05a75e453335b0068beb8bc28bef2a5866d74bf7dd4",
+  "tmpfsroot-module-setup.sh": "d1e2d512a3769fb70f7726b1899f89950d5bfc2199e8cde5df44adebd740006f",
+  "tmpfsroot-mount.sh": "884c4c9a17118229dfbb40ec9a4a23d307c12349dbf19adc1a2d8640c2f77fd0",
   "module-setup.sh": "8f5a0d3cc393d78bcb523b0d53c578d2767d688f00e84b525355bbb31d753da4",
   "overlayfs-mount.sh": "28f47c107a4435c5153bdb5b2f92f20b7a75bf3932216635ee810875c27dd55b"
  }
-}
+}

SPECS/dracut/dracut.spec

@@ -4,7 +4,7 @@
 Summary:        dracut to create initramfs
 Name:           dracut
 Version:        102
-Release:        11%{?dist}
+Release:        12%{?dist}
 # The entire source code is GPLv2+
 # except install/* which is LGPLv2+
 License:        GPLv2+ AND LGPLv2+
@@ -31,6 +31,8 @@ Source11:       50-noxattr.conf
 Source12:       90livenet/azl-liveos-artifacts-download.service
 Source13:       90livenet/azl-liveos-artifacts-download.sh
 Source14:       90overlayfs/azl-configure-selinux.sh
+Source15:       90tmpfsroot/tmpfsroot-module-setup.sh
+Source16:       90tmpfsroot/tmpfsroot-mount.sh
 
 # allow-liveos-overlay-no-user-confirmation-prompt.patch has been introduced by
 # the Azure Linux team to allow skipping the user confirmation prompt during
@@ -146,6 +148,13 @@ Requires:       %{name} = %{version}-%{release}
 %description systemd-cryptsetup
 This package contains dracut module needed to build an initramfs with systemd-cryptsetup enabled.
 
+%package tmpfsroot
+Summary:        dracut module to support root on tmpfs
+Requires:       %{name} = %{version}-%{release}
+
+%description tmpfsroot
+This package contains dracut module root on tmpfs.
+
 %package virtio
 Summary:        dracut configuration needed to build an initramfs with virtio guest drivers
 Requires:       %{name} = %{version}-%{release}
@@ -221,6 +230,10 @@ mkdir -p %{buildroot}%{dracutlibdir}/modules.d/20overlayfs/
 install -p -m 0755 %{SOURCE4} %{buildroot}%{dracutlibdir}/modules.d/20overlayfs/
 install -p -m 0755 %{SOURCE5} %{buildroot}%{dracutlibdir}/modules.d/20overlayfs/
 
+mkdir -p %{buildroot}%{dracutlibdir}/modules.d/90tmpfsroot/
+install -p -m 0755 %{SOURCE15} %{buildroot}%{dracutlibdir}/modules.d/90tmpfsroot/module-setup.sh
+install -p -m 0755 %{SOURCE16} %{buildroot}%{dracutlibdir}/modules.d/90tmpfsroot/
+
 touch %{buildroot}%{_var}/opt/%{name}/log/%{name}.log
 ln -srv %{buildroot}%{_var}/opt/%{name}/log/%{name}.log %{buildroot}%{_var}/log/
 
@@ -241,6 +254,7 @@ ln -srv %{buildroot}%{_bindir}/%{name} %{buildroot}%{_sbindir}/%{name}
 %exclude %{_libdir}/kernel
 %exclude %{dracutlibdir}/modules.d/20overlayfs
 %exclude %{dracutlibdir}/modules.d/90systemd-cryptsetup
+%exclude %{dracutlibdir}/modules.d/90tmpfsroot
 %{_libdir}/%{name}/%{name}-init.sh
 %{_datadir}/pkgconfig/%{name}.pc
 %{dracutlibdir}/%{name}-functions.sh
@@ -309,6 +323,10 @@ ln -srv %{buildroot}%{_bindir}/%{name} %{buildroot}%{_sbindir}/%{name}
 %dir %{dracutlibdir}/modules.d/90systemd-cryptsetup
 %{dracutlibdir}/modules.d/90systemd-cryptsetup/*
 
+%files tmpfsroot
+%dir %{dracutlibdir}/modules.d/90tmpfsroot
+%{dracutlibdir}/modules.d/90tmpfsroot/*
+
 %files virtio
 %defattr(-,root,root,0755)
 %{_sysconfdir}/dracut.conf.d/00-virtio.conf

toolkit/imageconfigs/edge-image-tink.json

@@ -6,7 +6,7 @@
             "Artifacts": [
                 {
                     "Name": "edge-readonly-tink",
-                    "Compression": "tar.gz"
+                    "Type": "tar.gz"
                 }
             ]
         }
@@ -37,10 +37,13 @@
             "FinalizeImageScripts": [
                 {
                     "Path": "scripts/cleanup.sh"
+                },
+                {
+                    "Path": "scripts/setup-tink-initramfs.sh"
                 }
             ],
             "KernelCommandLine": {
-                "ExtraCommandLine": "quiet splash"
+                "ExtraCommandLine": "root=tmpfs rootflags=size=1G,mode=0755 rd.skipfsck noresume quiet splash"
             },
             "Hostname": "EdgeMicrovisorToolkitTink",
             "DisableRpmDocs": true,

toolkit/imageconfigs/packagelists/tink-packages.json

@@ -1,5 +1,7 @@
 {
     "packages": [
+        "dracut-tmpfsroot",
+        "tar",
         "fluent-bit",
         "caddy",
         "rng-tools",

toolkit/imageconfigs/scripts/setup-tink-initramfs.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+
+# Copyright (c) Intel Corporation.
+# Licensed under the MIT License.
+
+# Failure can be ignored.
+set -e
+set -x
+
+# regen initramfs for tink
+echo "Tink: final regen initramfs"
+
+ramfs=$(find /boot -type f -name initramfs*img -printf '%f\n')
+# unzip initramfs
+mkdir /tmp/initramfs
+cd /tmp/initramfs
+echo "Tink: inside $(pwd)"
+echo "Tink: unziping initial initramfs for repack"
+gunzip -c -k /boot/$ramfs | cpio -idmv --no-absolute-filenames
+echo "Tink: free space $(df -h)"
+
+mkdir /tmp/rootfs
+cd /tmp/rootfs
+echo "Tink: inside $(pwd)"
+echo "Tink: free space $(df -h)"
+mkdir -p boot dev etc home mnt media proc sys run tmp usr usr/bin usr/sbin usr/lib usr/libexec var
+chown root:root boot dev etc home mnt media proc sys run tmp usr usr/bin usr/sbin usr/lib usr/libexec var
+chmod 0700 boot
+chmod 0755 dev etc home mnt media proc sys run tmp usr usr/bin usr/sbin usr/lib usr/libexec var
+echo "Tink: copy initial initramfs for rootfs"
+cp -a /tmp/initramfs/dev/* dev/
+ln -s usr/bin bin
+ln -s usr/sbin sbin
+ln -s usr/lib lib
+ln -s usr/lib lib64
+chown root:root bin sbin lib lib64
+chmod 0777 bin sbin lib lib64
+echo "Tink: after initramfs copy $(ls -l .)"
+echo "Tink: after initramfs copy $(du -h /tmp/rootfs)"
+echo "Tink: copying rootfs files"
+cp -R -p /usr/sbin/* usr/sbin/
+cp -R -p /usr/bin/* usr/bin/
+cp -R -p /usr/lib/* usr/lib/
+cp -R -p /usr/libexec/* usr/libexec/
+cp -R -p /var/lib var/
+cp -R -p /etc/* etc/
+# override boot device command line
+echo "Tink: fstab contents $(cat etc/fstab)"
+echo 'Tink: tmpfs   /   tmpfs   defaults,size=1G   0   0' > etc/fstab
+#echo "" > etc/fstab
+echo "Tink: fstab contents after edit $(cat etc/fstab)"
+# simple setup for console
+#echo 'LANG=en_US.UTF-8' > etc/locale.conf
+#echo 'KEYMAP=us' > etc/vconsole.conf
+#echo 'FONT=lat9w-16' >> etc/vconsole.conf
+echo "Tink: console setup $(cat etc/locale.conf etc/vconsole.conf)"
+mkdir -p usr/share/terminfo/v
+cp -R -p /usr/share/terminfo/v/vt100 usr/share/terminfo/v/
+cp -R -p /usr/share/terminfo/v/vt220 usr/share/terminfo/v/
+mkdir -p usr/share/keymaps
+cp -R -p /usr/share/keymaps/include usr/share/keymaps/
+mkdir -p usr/share/keymaps/i386/include
+cp -R -p /usr/share/keymaps/i386/include/* usr/share/keymaps/i386/include/
+mkdir -p usr/share/keymaps/i386/qwerty
+cp -R -p /usr/share/keymaps/i386/qwerty/us.map.gz usr/share/keymaps/i386/qwerty/
+mkdir -p usr/share/consolefonts
+cp -R -p /usr/share/consolefonts/lat9w-16* usr/share/consolefonts/
+mkdir -p usr/share/dbus-1
+cp -R -p /usr/share/dbus-1/system.conf usr/share/dbus-1/
+echo "Tink: after copy $(du -h /tmp/rootfs)"
+echo "Tink: free space $(df -h)"
+tar cf - -C . . | gzip -9 > /rootfs.tar.gz
+cd -
+echo "Tink: rootfs size: $(ls -l /rootfs.tar.gz)"
+rm -rf /tmp/rootfs
+
+cd /tmp/initramfs
+echo "Tink: inside $(pwd)"
+echo "Tink: after copy $(du -h /tmp/initramfs)"
+echo "Tink: check cmdline.d $(ls etc/cmdline.d)"
+echo "Tink: check cmdline.d contents $(cat etc/cmdline.d/95root-dev.conf)"
+#echo 'root=tmpfs rootfstype=tmpfs'  > etc/cmdline.d/95root-dev.conf
+#echo 'root= rootfstype=auto'  > etc/cmdline.d/95root-dev.conf
+echo 'root=tmpfs rootflags=size=1G,mode=0755' > etc/cmdline.d/95root-dev.conf
+echo "Tink: check cmdline.d contents after edit $(cat etc/cmdline.d/95root-dev.conf)"
+echo "Tink: before rm devexist* $(ls -al var/lib/dracut/hooks/initqueue/finished/)"
+rm -f var/lib/dracut/hooks/initqueue/finished/devexists*
+echo "Tink: after rm devexist* $(ls -al var/lib/dracut/hooks/initqueue/finished/)"
+echo "Tink: before rm wants $(ls -al etc/systemd/system/initrd.target.wants/)"
+rm -rf etc/systemd/system/initrd.target.wants/dev-disk-b*
+echo "Tink: after rm wants $(ls etc/systemd/system/initrd.target.wants/)"
+echo "Tink: before rm disk service $(ls -al etc/systemd/system/dev-disk-b*)"
+rm -rf etc/systemd/system/dev-disk-b*
+echo "Tink: after rm disk service $(ls -al etc/systemd/system/)"
+echo "$(find . -iname dev-disk*)"
+# copy tar required for uncompressing rootfs archive
+echo "Tink: before copy tar $(find . -iname tar)"
+cp /usr/bin/tar usr/bin
+echo "Tink: after copy tar $(find . -iname tar)"
+mv /rootfs.tar.gz /tmp/initramfs/
+find . | cpio -o -H newc | gzip > /boot/$ramfs
+cd -
+
+echo "Tink: $(ls -l /boot/$ramfs)"
+rm -rf /tmp/initramfs