build_raspberry_pi.sh

@@ -15,12 +15,12 @@ sudo mkdir -p "${BUILD_DIR}"
 # download a modern RaspiOS build
 if [ ! -f raspios.img.xz ]
 then
-	wget -O raspios.img.xz "https://downloads.raspberrypi.org/raspios_lite_arm64/images/raspios_lite_arm64-2024-03-15/2024-03-15-raspios-bookworm-arm64-lite.img.xz"
+	wget -O raspios.img.xz "https://downloads.raspberrypi.org/raspios_lite_arm64/images/raspios_lite_arm64-2023-05-03/2023-05-03-raspios-bullseye-arm64-lite.img.xz"
-	echo "58a3ec57402c86332e67789a6b8f149aeeb4e7bb0a16c9388a66ea6e07012e45 raspios.img.xz" | sha256sum --check --status
+	echo "bf982e56b0374712d93e185780d121e3f5c3d5e33052a95f72f9aed468d58fa7 raspios.img.xz" | sha256sum --check --status
 	if [ $? -ne 0 ]
 	then
 	    echo "downloaded raspios does not match checksum";
-	    exit 1;
+	    return -1;
 	fi
 fi
 
@@ -30,7 +30,7 @@ xz -kd raspios.img.xz
 # Repartition image
 export LIBGUESTFS_BACKEND_SETTINGS=force_tcg
 truncate -r raspios.img raspikiosk.img
-truncate -s +2G raspikiosk.img
+truncate -s +3G raspikiosk.img
 
 virt-resize --expand /dev/sda2 raspios.img raspikiosk.img
 rm -f raspios.img
@@ -43,8 +43,8 @@ sudo mount /dev/loop0p2 "${BUILD_DIR}"
 sudo mount /dev/loop0p1 "${BUILD_DIR}/boot"
 
 # Copy the (raspberry pi-specific) skeleton files
-sudo rsync -a --no-owner --no-group "${SCRIPT_DIR}/raspberry_pi_skeleton/." "${BUILD_DIR}"
+sudo rsync -a "${SCRIPT_DIR}/raspberry_pi_skeleton/." "${BUILD_DIR}"
-sudo rsync -a --no-owner --no-group "${SCRIPT_DIR}/kiosk_skeleton/." "${BUILD_DIR}/kiosk_skeleton"
+sudo rsync -a "${SCRIPT_DIR}/kiosk_skeleton/." "${BUILD_DIR}/kiosk_skeleton"
 
 # Make fstab read-only
 sed -i 's/vfat    defaults/vfat    ro,defaults/g' "${BUILD_DIR}/etc/fstab"
@@ -59,10 +59,14 @@ sudo mount proc -t proc -o nosuid,noexec,nodev "${BUILD_DIR}/proc/"
 sudo mount sys -t sysfs -o nosuid,noexec,nodev,ro "${BUILD_DIR}/sys/"
 sudo mount devpts -t devtmpfs -o mode=0755,nosuid "${BUILD_DIR}/dev/"
 
-# Install everything.
+# Raspbian currently ships only Debian 11. Let's upgrade to 12.
+sudo chroot "${BUILD_DIR}" /raspberry_pi_bullseye.sh
+
+# and then actually install everything.
 sudo chroot "${BUILD_DIR}" /kiosk_skeleton/build.sh
 
 sudo rm -r "${BUILD_DIR}/kiosk_skeleton"
+sudo rm "${BUILD_DIR}/raspberry_pi_bullseye.sh"
 
 cp "${BUILD_DIR}/version-info" version-info
 

kiosk_skeleton/build.sh

@@ -1,8 +1,8 @@
 #!/bin/bash
 # This script is being run on the target debian platform
 
-dpkg --configure -a
 apt update
+APT_LISTCHANGES_FRONTEND=none DEBIAN_FRONTEND=noninteractive apt dist-upgrade -y
 DEBIAN_FRONTEND=noninteractive apt install -y lightdm openbox nginx php-fpm php-cli chromium autossh unclutter x11-xserver-utils xdotool htop nano openssh-server rsync x11vnc lm-sensors ntpdate scrot wireless-regdb fontconfig curl gpg
 
 rsync -a --chown=root:root "/kiosk_skeleton/." "/"
@@ -87,8 +87,8 @@ systemctl enable setup-refresh-timer.service
 curl -sSL https://apt.hyperion-project.org/hyperion.pub.key | gpg --dearmor -o /usr/share/keyrings/hyperion.pub.gpg
 echo "deb [signed-by=/usr/share/keyrings/hyperion.pub.gpg] https://apt.hyperion-project.org/ $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/hyperion.list
 apt update
-apt install -y hyperion
+apt install -y hyperiond
-systemctl enable hyperion
+systemctl enable hyperiond
 
 # generate a version info/build info file
 echo -n "Chromium version: " >> /version-info
@@ -97,7 +97,3 @@ dpkg --list | grep "ii  chromium " >> /version-info
 echo -n "Linux kernel version: " >> /version-info
 ls /lib/modules/  | sort -r | head -n 1 >> /version-info
 echo >> /version-info
-
-# Clean up to reduce image size
-apt-get clean
-rm -rf /var/lib/apt/lists/*

kiosk_skeleton/etc/initramfs-tools/conf.d/disable-backups.conf

@@ -1 +0,0 @@
-update_initramfs=no