1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
|
#!/usr/bin/env bash
set -euE
# librechroot
# Copyright (C) 2010-2012 Nicolás Reynolds <fauno@parabola.nu>
# Copyright (C) 2011-2012 Joshua Ismael Haase Hernández (xihh) <hahj87@gmail.com>
# Copyright (C) 2012 Michał Masłowski <mtjm@mtjm.eu>
# Copyright (C) 2012-2018 Luke Shumaker <lukeshu@parabola.nu>
# Copyright (C) 2018 Andreas Grapentin <andreas@grapentin.org>
#
# License: GNU GPLv2+
#
# This file is part of Parabola.
#
# Parabola is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 2 of the License, or
# (at your option) any later version.
#
# Parabola is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Parabola. If not, see <http://www.gnu.org/licenses/>.
# HACKING: if a command is added or removed, it must be changed in 4 places:
# - the usage() text
# - the commands=() array
# - the case statement in main() that checks the number of arguments
# - the case statement in main() that runs them
source "$(librelib conf)"
source "$(librelib messages)"
source "$(librelib chroot/makechrootpkg)"
shopt -s nullglob
umask 0022
################################################################################
# Utility functions #
################################################################################
# Usage: detect_chroot_arch $makepkg_conf
detect_chroot_arch()
{
local makepkg_conf="$1"
local chroot_arch
chroot_arch=$(grep -a '^CARCH=' "$makepkg_conf" 2> /dev/null | cut -d '=' -f 2 | tr -d '"')
[[ ${chroot_arch} =~ x86_64|i686|armv7h ]] || chroot_arch=$(uname -m)
echo ${chroot_arch}
}
# Usage: make_empty_repo $copydir
make_empty_repo() {
local copydir=$1
mkdir -p "${copydir}/repo"
bsdtar -czf "${copydir}/repo/repo.db.tar.gz" -T /dev/null
ln -s "repo.db.tar.gz" "${copydir}/repo/repo.db"
}
# Usage: chroot_add_to_local_repo $copydir $pkgfiles...
chroot_add_to_local_repo() {
local copydir=$1; shift
mkdir -p "$copydir/repo"
local pkgfile
for pkgfile in "$@"; do
cp "$pkgfile" "$copydir/repo"
pushd "$copydir/repo" >/dev/null
repo-add repo.db.tar.gz "${pkgfile##*/}"
popd >/dev/null
done
}
# Print code to set $rootdir and $copydir; blank them on error
calculate_directories() {
# Don't assume that CHROOTDIR or CHROOT are set,
# but assume that COPY is set.
local rootdir copydir
if [[ -n ${CHROOTDIR:-} ]] && [[ -n ${CHROOT:-} ]]; then
rootdir="${CHROOTDIR}/${CHROOT}/root"
else
rootdir=''
fi
if [[ ${COPY:0:1} = / ]]; then
copydir=$COPY
elif [[ -n ${CHROOTDIR:-} ]] && [[ -n ${CHROOT:-} ]]; then
copydir="${CHROOTDIR}/${CHROOT}/${COPY}"
else
copydir=''
fi
declare -p rootdir
declare -p copydir
}
check_mountpoint() {
local file=$1
local mountpoint mountopts
mountpoint="$(df -P "$file"|sed '1d;s/.*\s//')"
mountopts=($(LC_ALL=C mount|awk "{ if (\$3==\"$mountpoint\") { gsub(/[(,)]/, \" \", \$6); print \$6 } }"))
! in_array nosuid "${mountopts[@]}" && ! in_array noexec "${mountopts[@]}"
}
################################################################################
# Wrappers for files in ${pkglibexecdir}/chroot/ #
################################################################################
readonly _arch_nspawn="$(librelib chroot/arch-nspawn)"
readonly _mkarchroot="$(librelib chroot/mkarchroot)"
arch_nspawn_flags=()
sysd_nspawn_flags=()
hack_arch_nspawn_flags() {
local copydir="$1"
local makepkg_conf="$copydir/etc/makepkg.conf"
OPTIND=1
set -- "${arch_nspawn_flags[@]}"
while getopts 'hC:M:c:f:s' arg; do
case "$arg" in
M) makepkg_conf="$OPTARG" ;;
*) :;;
esac
done
local CARCH=$(detect_chroot_arch "$makepkg_conf")
local setarch interpreter
case $CARCH in
armv7h|armv7l) setarch=armv7l; interpreter=/usr/bin/qemu-arm-static ;;
*) setarch=$CARCH; interpreter=/usr/bin/qemu-$CARCH-static ;;
esac
if ! setarch $setarch /bin/true 2>/dev/null; then
# We're running a cross-arch chroot
# Make sure that qemu-static is set up with binfmt_misc
if [[ -z $(grep -l -xF \
-e "interpreter $interpreter" \
-r -- /proc/sys/fs/binfmt_misc 2>/dev/null \
| xargs -r grep -xF 'enabled') ]]
then
error 'Cannot cross-compile for %s on %s' "$CARCH" "$(uname -m)"
plain 'This requires a binfmt_misc entry for %s.' "$interpreter"
prose 'Such a binfmt_misc entry is provided by the %s
package. If you have it installed, but still see
this message, you may need to restart %s.' \
qemu-user-static-binfmt systemd-binfmt.service
return $EXIT_NOTINSTALLED
fi
# Let qemu/binfmt_misc do its thing
arch_nspawn_flags+=(-f "$interpreter" -s)
fi
}
# Usage: arch-nspawn $copydir $cmd...
arch-nspawn() {
local copydir=$1; shift
local cmd=("$@")
local arch_nspawn_flags=("${arch_nspawn_flags[@]}")
hack_arch_nspawn_flags "$copydir"
"$_arch_nspawn" \
"${arch_nspawn_flags[@]}" \
"$copydir" \
"${sysd_nspawn_flags[@]}" \
-- \
"${cmd[@]}"
}
# Usage: mkarchroot $copydir $pkgs...
mkarchroot() {
local copydir=$1; shift
local pkgs=("$@")
local arch_nspawn_flags=("${arch_nspawn_flags[@]}")
hack_arch_nspawn_flags "$copydir"
local cmd=(
unshare -m "$_mkarchroot"
# mkarchroot flags: (flags are very similar to arch-nspawn)
"${arch_nspawn_flags[@]}"
# chroot directory:
-- "$copydir"
# pacman flags:
# * hack around https://bugs.archlinux.org/task/49347
--hookdir="$copydir/etc/pacman.d/hooks"
# packages: (and maybe more flags... pacstrap injects
# flags at the end, so we can't turn of flag parsing
# with '--')
"${pkgs[@]}"
)
"${cmd[@]}"
}
################################################################################
# Main program #
################################################################################
readonly DEF_PACMANCONF_DIR=/usr/share/pacman/defaults
usage() {
eval "$(calculate_directories)"
local mount_msg="$(_ 'PATH[:INSIDE_PATH[:OPTIONS]]')"
print "Usage: %s [OPTIONS] COMMAND [ARGS...]" "${0##*/}"
echo
print 'Interacts with a libre "archroot" (similarly to `arch-chroot`).'
echo
prose 'This is configured with `chroot.conf`,
either in `/etc/libretools.d/`, or `$XDG_CONFIG_HOME/libretools/`.
The configurable variables are:'
bullet '$CHROOTDIR'
bullet '$CHROOT'
bullet '$CHROOTEXTRAPKG'
echo
prose 'Each chroot is named; and there may be multiple chroots; all of which,
are stored in $CHROOTDIR, with the default chroot name being: $CHROOT.
Each named chroot has a pristine, read-only master system (`root`),
which is used as the seed for any number of named working copies,
which may be derived from it.
If a working copy is not specified, the default is the $LIBREUSER,
determined at runtime, per /usr/lib/libretools/conf.sh.
$LIBREUSER is normally the current local login; but may be
over-ridden by setting $SUDO_USER in the environment.'
echo
prose 'Unless the working copy is manually specified as an absolute path,
the path to the working copy ($copydir) will determined at runtime:'
print ' $CHROOTDIR/$CHROOT/$COPY'
echo
prose 'The current settings for the above variables are:'
bullet "\$CHROOTDIR : %s" "${CHROOTDIR:-$(_ 'ERROR: NO SETTING')}"
bullet "\$CHROOT : %s" "${CHROOT:-$( _ 'ERROR: NO SETTING')}"
bullet "\$COPY : %s" "${COPY}"
bullet "\$rootdir : %s" "${rootdir:-$( _ 'ERROR' )}"
bullet "\$copydir : %s" "${copydir:-$( _ 'ERROR' )}"
echo
prose 'If the chroot-set or working copy does not exist, it will be created
automatically. A chroot by default contains the packages in the
`base-devel` group and any packages named in $CHROOTEXTRAPKG.
However, for technical reasons, `fakeroot-tcp` replaces `fakeroot`
in armv7h chroots (per BR #2775).
The packages installed into the chroot, will be those found
in the standard Parabola repos: (libre, core, extra, community, pcr),
regardless of the pacman/makepkg configuration of the host system.
The configuration files in the chroot will also be the standard ones
installed by the `pacman` package.
These defaults may be over-ridden with the `-C`, `-M`, and `-A` flags;
and other tools (such as `libremakepkg`) may over-ride them later.'
echo
prose 'This command will make the following configuration changes in the
chroot:'
bullet 'overwrite `/etc/libretools.d/chroot.conf`' # libretools/librechroot
bullet 'overwrite `/etc/pacman.d/mirrorlist`' # devtools/arch-nspawn
bullet 'set `CacheDir` in `/etc/pacman.conf`' # devtools/arch-nspawn
prose 'If an over-ride `pacman.conf` is specified with the `-C` flag,
the changes above are made after the file is copied in.
The `-C` flag will not prevent these modifications.'
echo
prose 'The processor architecture of the chroot is determined by the `$CARCH`
variable, in the `/etc/makepkg.conf` file, inside of the chroot.
The `-M` flag allows specifying an over-ride of the standard file.'
echo
print 'The `-A <CARCH>` flag sets the -C and -M flags as:'
echo " -C \"${DEF_PACMANCONF_DIR}/pacman.conf.\$CARCH\" \\"
echo " -M \"${DEF_PACMANCONF_DIR}/makepkg.conf.\$CARCH\""
prose 'However, `pacman.conf` will be modified to:'
bullet 'set `Architecture` to match the `CARCH=` line in `makepkg.conf`'
bullet 'comment-out any `Include = /etc/pacman.d/*.conf` lines'
bullet 'add special-case build support repos (commented-out)'
prose 'The `-A` option is recommended for creating a new `root` seed, e.g.:'
echo ' sudo librechroot -n i686 -A i686 make'
echo
prose 'Creating/deleting/synchronizing a copy, can be relatively slow;
but can be very fast, if $CHROOTDIR is on a btrfs partition.'
echo
flag 'Options:' \
"-n <$(_ NAME)>" 'Name of the chroot to use' \
"-l <$(_ COPY)>" 'Name of, or absolute path to, the copy to use' \
"-C <$(_ FILE)>" 'Copy this file to chroot as: `/etc/pacman.conf`
This option is mutually exclusive with -A.' \
"-M <$(_ FILE)>" 'Copy this file to chroot as: `/etc/makepkg.conf`
This option is mutually exclusive with -A.' \
"-A <$(_ CARCH)>" 'Specify the architecture of a new `root` seed.
This option is mutually exclusive with -C and -M.' \
"-N" 'Disable networking in the chroot' \
"-w <${mount_msg}>" 'Bind mount a file or directory, read/write' \
"-r <${mount_msg}>" 'Bind mount a file or directory, read-only'
echo
flag 'Commands (create/copy/delete):' \
'make' 'Create a `root` seed and working copy' \
'sync' 'Sync the copy with the clean `root` seed' \
'delete' 'Delete the working copy'
flag 'Commands (packages):' \
"install-file $(_ FILES...)" 'Like `pacman -U FILES...`' \
"install-name $(_ NAMES...)" 'Like `pacman -S NAMES...`' \
'update' 'Like `pacman -Syu`' \
'clean-pkgs' 'Remove all packages from the working copy
that are not in `base-devel`,
$CHROOTEXTRAPKG, or in the depends array
of the working copy /startdir/PKGBUILD;
and install all packages that are.
`libremakepkg` does this implicitly.'
flag 'Commands (maintenance):' \
"run $(_ CMD...)" 'Run CMD in the working copy' \
'enter' 'Enter an interactive shell in the working copy' \
'clean-repo' 'Clean /repo in the working copy'
flag 'Commands (misc):' \
'help' 'Show this message'
}
readonly commands=(
noop make sync delete
install-file install-name update clean-pkgs
run enter clean-repo help
)
# Globals: $CHROOTDIR, $CHROOT, $COPY, $rootdir and $copydir
main() {
COPY=$LIBREUSER
[[ $COPY != root ]] || COPY=copy
declare -i retconf=0
load_conf chroot.conf CHROOTDIR CHROOT || retconf=$?
local target_arch=$(uname -m)
local mode=enter opt
declare -Ai used_opts
local tmp_pacmanconf="$(mktemp --tmpdir ${tmp_pacmanconf_prefix}.XXXXXXXXXX)"
local has_tmp_pacmanconf=0
local def_pacmanconf
local def_makepkgconf
trap 'rm -f -- "$tmp_pacmanconf"' EXIT
## parse CLI options ##
while getopts 'n:l:NC:M:A:w:r:' opt; do
case $opt in
n ) CHROOT=$OPTARG ;;
l ) COPY=$OPTARG ;;
N ) sysd_nspawn_flags+=(--private-network) ;;
C|M) target_arch=$(detect_chroot_arch "$OPTARG")
arch_nspawn_flags+=(-$opt "$OPTARG") ;;
A ) target_arch=$OPTARG
def_pacmanconf="${DEF_PACMANCONF_DIR}"/pacman.conf.${target_arch}
def_makepkgconf="${DEF_PACMANCONF_DIR}"/makepkg.conf.${target_arch}
arch_nspawn_flags+=( -C "${tmp_pacmanconf}"
-M "${def_makepkgconf}" )
has_tmp_pacmanconf=1 ;;
w ) sysd_nspawn_flags+=("--bind=$OPTARG") ;;
r ) sysd_nspawn_flags+=("--bind-ro=$OPTARG") ;;
* ) usage >&2; return $EXIT_INVALIDARGUMENT ;;
esac
used_opts[$opt]+=1
done
## validate CLI options ##
for opt in n l C M A; do
if (( ${used_opts[$opt]:-0} > 1 )); then
error "Option -%s may only be given once" "$opt"
usage >&2
return $EXIT_INVALIDARGUMENT
fi
done
if (( ${used_opts[A]:-0} && ( ${used_opts[C]:-0} || ${used_opts[M]:-0} ) )); then
error "Option -A may not be used together with -C or -M"
usage >&2
return $EXIT_INVALIDARGUMENT
fi
shift $((OPTIND - 1))
if [[ $# -lt 1 ]]; then
error "Must specify a command"
usage >&2
return $EXIT_INVALIDARGUMENT
fi
mode=$1
if ! in_array "$mode" "${commands[@]}"; then
error "Unrecognized command: %s" "$mode"
usage >&2
return $EXIT_INVALIDARGUMENT
fi
shift
case "$mode" in
help)
usage
return $EXIT_SUCCESS
:;;
noop|make|sync|delete|update|enter|clean-pkgs|clean-repo)
if [[ $# -gt 0 ]]; then
error 'Command `%s` does not take any arguments: %s' "$mode" "$*"
usage >&2
return $EXIT_INVALIDARGUMENT
fi
:;;
install-file)
if [[ $# -lt 1 ]]; then
error 'Command `%s` requires at least one file' "$mode"
usage >&2
return $EXIT_INVALIDARGUMENT
else
local missing=()
local file
for file in "$@"; do
if ! [[ -f $file ]]; then
missing+=("$file")
fi
done
if [[ ${#missing[@]} -gt 0 ]]; then
error "%s: file(s) not found: %s" "$mode" "${missing[*]}"
return $EXIT_INVALIDARGUMENT
fi
fi
:;;
install-name)
if [[ $# -lt 1 ]]; then
error 'Command `%s` requires at least one package name' "$mode"
usage >&2
return $EXIT_INVALIDARGUMENT
fi
:;;
run)
if [[ $# -lt 1 ]]; then
error 'Command `%s` requires at least one argument' "$mode"
usage >&2
return $EXIT_INVALIDARGUMENT
fi
:;;
esac
if (( has_tmp_pacmanconf )) && \
! [[ -f "${def_pacmanconf}" && -f "${def_makepkgconf}" ]]; then
error 'Unsupported architecture: %s' "${target_arch}"
plain 'See the files in %q for valid architectures.' "${DEF_PACMANCONF_DIR}/"
return $EXIT_INVALIDARGUMENT;
fi
## process CLI options ##
if (( has_tmp_pacmanconf )); then
readonly REPOS_HEADER='###########################\n# Parabola standard repos #'
tmppacmanconf="$(mktemp --tmpdir librechroot-pacman.conf.XXXXXXXXXX)"
read -r -d '' VOLATILE_REPOS <<-'EOF'
##############################\
# Special-case build-support #\
##############################\
\
# Enable the volatile arm [arm-aur] repo only as needed\
# [arm-aur]\
# Server = https://mirror.archlinuxarm.org/$arch/$repo/\
\
# Enable the volatile i686 [build-support] repo only as needed\
# [build-support]\
# Server = http://mirror.archlinux32.org/$arch/$repo/\
\
# Enable the volatile i686 [staging] repo only as needed\
# [staging]\
# Server = http://mirror.archlinux32.org/$arch/$repo/\
\
# Enable the volatile x86_64 [staging] repo only as needed\
# [staging]\
# Server = http://mirror.archlinux.org/$arch/$repo/\
EOF
# generate custom pacman.conf
sed -r \
-e "s|^#?\\s*Architecture.+|Architecture = ${target_arch}|g" \
-e "s|^.*Include\s*=\s*/etc/pacman.d/.*\.conf|#&|" \
-e "N ; /${REPOS_HEADER}/ i ${VOLATILE_REPOS} \n\n" \
< "${def_pacmanconf}" \
> "${tmp_pacmanconf}"
fi
## finalize state ##
[[ $retconf = 0 ]] || exit $retconf
eval "$(calculate_directories)"
readonly LIBREUSER LIBREHOME
readonly CHROOTDIR CHROOT COPY
readonly rootdir copydir
readonly mode
## business ##
if (( EUID )); then
error "This program must be run as root."
return $EXIT_NOPERMISSION
fi
umask 0022
# Keep this lock for as long as we are running
# Note that '9' is the same FD number as in mkarchroot et al.
lock 9 "$copydir.lock" \
"Waiting for existing lock on chroot copy to be released: [%s]" "$COPY"
if [[ $mode != delete ]]; then
if ! check_mountpoint "$copydir.lock"; then
error "Chroot copy is mounted with nosuid or noexec options: [%s]" "$COPY"
return $EXIT_FAILURE
fi
if [[ ! -d $rootdir ]]; then
# Create build chroot
# NOTE: ARM chroots require 'fakeroot-tcp' (BR #2775)
local fakeroot_pkg=fakeroot$( [[ "${target_arch}" == 'armv7h' ]] && echo '-tcp' )
local chroot_pkgs=$( pacman --config "${tmp_pacmanconf}" -Sgq base-devel | \
sed "s|fakeroot|${fakeroot_pkg}|" )
msg "Creating 'root' copy for chroot [%s]" "$CHROOT"
mkarchroot "$rootdir" ${chroot_pkgs} </dev/null
make_empty_repo "$rootdir"
fi
if [[ ! -d $copydir ]] || [[ $mode == sync ]]; then
msg "Syncing copy [%s] with root copy" "$COPY"
sync_chroot "$CHROOTDIR/$CHROOT/root" "$copydir" "$COPY"
fi
# Note: the in-chroot pkgconfdir is non-configurable, this is
# intentionally hard-coded.
mkdir -p "$copydir/etc/libretools.d"
{
if [[ ${#CHROOTEXTRAPKG[*]} -eq 0 ]]; then
echo 'CHROOTEXTRAPKG=()'
else
printf 'CHROOTEXTRAPKG=('
printf '%q ' "${CHROOTEXTRAPKG[@]}"
printf ')\n'
fi
} > "$copydir"/etc/libretools.d/chroot.conf
# "touch" the chroot first
# this will
# - overwrite '/etc/pacman.d/mirrorlist'"
# - set 'CacheDir' in \`/etc/pacman.conf'"
# - apply -C or -M flags
arch-nspawn "$copydir" true </dev/null
if [[ -n ${tmp_pacmanconf:-} ]]; then
rm -f -- "$tmp_pacmanconf"
fi
trap EXIT # clear the trap to remove the tmp pacman.conf from -A
arch_nspawn_flags=() # XXX dirty hack, don't apply -C or -M again
fi
########################################################################
case "$mode" in
# Create/copy/delete
noop|make|sync) :;;
delete)
if [[ -d $copydir ]]; then
delete_chroot "$copydir"
fi
;;
# Dealing with packages
install-file)
install_packages "$copydir" "$@" </dev/null
chroot_add_to_local_repo "$copydir" "$@"
;;
install-name)
arch-nspawn "$copydir" pacman -Sy --noconfirm -- "$@" </dev/null
;;
update)
arch-nspawn "$copydir" pacman -Syu --noconfirm </dev/null
;;
clean-pkgs)
trap "rm -f -- ${copydir@Q}/{chcleanup,chrootexec}" EXIT
install -m755 "$(librelib chroot/chcleanup)" "$copydir/chcleanup"
printf '%s\n' \
'#!/bin/bash' \
'mkdir -p /startdir' \
'cd /startdir' \
'/chcleanup' \
> "$copydir/chrootexec"
chmod 755 "$copydir/chrootexec"
arch-nspawn "$copydir" /chrootexec </dev/null
;;
# Other
run)
arch-nspawn "$copydir" "$@"
;;
enter)
arch-nspawn "$copydir" bash
;;
clean-repo)
rm -rf "${copydir}"/repo/*
make_empty_repo "$copydir"
;;
esac
}
main "$@"
|