buildimg.sh

#!/bin/sh

set -e

if [ -z "$1" ] || [ -z "$2" ]; then
	echo "buildimg.sh srcdir disk.img"
	exit 1
fi
SRCDIR=$1
IMGFILE=$2

# Set environment variables so make can use them.
export TARGET=mips
export TARGET_ARCH=mips64
export KERNCONF=ERL

# Create working space
WORKDIR=`env TMPDIR=\`pwd\` mktemp -d -t ERLBUILD`
chflags nodump ${WORKDIR}

# Build MIPS64 world and ERL kernel
JN=`sysctl -n hw.ncpu`
make -C $SRCDIR buildworld -j${JN}
make -C $SRCDIR buildkernel -j${JN}

# Install into a temporary tree
mkdir ${WORKDIR}/tree
make -C ${SRCDIR} installworld distribution installkernel DESTDIR=${WORKDIR}/tree

# Prepare to run commands inside a chroot.
cp /etc/resolv.conf ${WORKDIR}/tree/etc/
cp /usr/local/bin/qemu-${TARGET_ARCH}-static ${WORKDIR}/tree/qemu
mount -t devfs devfs ${WORKDIR}/tree/dev

# Install packages
chroot ${WORKDIR}/tree /qemu pkg bootstrap -y
chroot ${WORKDIR}/tree /qemu pkg install -y djbdns isc-dhcp44-server

# DNS setup
chroot ${WORKDIR}/tree /qemu pw user add dnscache -u 184 -d /nonexistent -s /usr/sbin/nologin
chroot ${WORKDIR}/tree /qemu pw user add dnslog -u 186 -d /nonexistent -s /usr/sbin/nologin
mkdir ${WORKDIR}/tree/var/service
chroot ${WORKDIR}/tree /qemu /usr/local/bin/dnscache-conf dnscache dnslog /var/service/dnscache 0.0.0.0
touch ${WORKDIR}/tree/var/service/dnscache/root/ip/192.168

# Create ubnt user
echo ubnt | chroot ${WORKDIR}/tree /qemu pw user add ubnt -m -G wheel -h 0

# Clean up temporary bits
umount ${WORKDIR}/tree/dev
rm ${WORKDIR}/tree/qemu
rm ${WORKDIR}/tree/etc/resolv.conf

# FreeBSD configuration
cat > ${WORKDIR}/tree/etc/rc.conf <<EOF
hostname="ERL"
growfs_enable="YES"
ifconfig_octe0="DHCP"
ifconfig_octe1="192.168.1.1 netmask 255.255.255.0"
ifconfig_octe2="192.168.2.1 netmask 255.255.255.0"
pf_enable="YES"
gateway_enable="YES"
sendmail_enable="NONE"
sshd_enable="YES"
ntpd_enable="YES"
ntpd_sync_on_start="YES"
svscan_enable="YES"
dhcpd_enable="YES"
dhcpd_ifaces="octe1 octe2"
EOF
cat > ${WORKDIR}/tree/etc/pf.conf <<EOF
# Allow anything on loopback
set skip on lo0

# Scrub all incoming traffic
scrub in

# NAT outgoing traffic
nat on octe0 inet from { octe1:network, octe2:network } to any -> (octe0:0)

# Reject anything with spoofed addresses
antispoof quick for { octe1, octe2, lo0 } inet

# Default to blocking incoming traffic but allowing outgoing traffic
block all
pass out all

# Allow LAN to access the rest of the world
pass in on { octe1, octe2 } from any to any
block in on { octe1, octe2 } from any to self

# Allow LAN to ping us                                       
pass in on { octe1, octe2 } inet proto icmp to self icmp-type echoreq

# Allow LAN to access DNS, DHCP, and NTP
pass in on { octe1, octe2 } proto udp to self port { 53, 67, 123 }
pass in on { octe1, octe2 } proto tcp to self port 53

# Allow octe2 to access SSH
pass in on octe2 proto tcp to self port 22
EOF
mkdir -p ${WORKDIR}/tree/usr/local/etc
cat > ${WORKDIR}/tree/usr/local/etc/dhcpd.conf <<EOF
option domain-name "localdomain";
subnet 192.168.1.0 netmask 255.255.255.0 {
        range 192.168.1.2 192.168.1.254;
        option routers 192.168.1.1;
        option domain-name-servers 192.168.1.1;
}
subnet 192.168.2.0 netmask 255.255.255.0 {
        range 192.168.2.2 192.168.2.254;
        option routers 192.168.2.1;
        option domain-name-servers 192.168.2.1;
}
EOF
cat > ${WORKDIR}/tree/etc/periodic.conf <<EOF
daily_output="/var/log/daily.log"
weekly_output="/var/log/weekly.log"
monthly_output="/var/log/monthly.log"
EOF
echo "/dev/da0s2a / ufs ro 1 1" > ${WORKDIR}/tree/etc/fstab

# We want to run firstboot scripts
touch ${WORKDIR}/tree/firstboot

# We want to have a read-only /, but we'll need to write to /etc/ and /var/
# after we boot.  Stash their contents and set things up to extract them into
# memory disks at boot time.
touch ${WORKDIR}/tree/etc/diskless
mkdir -p ${WORKDIR}/tree/conf/base
cp -Rp ${WORKDIR}/tree/etc/ ${WORKDIR}/tree/conf/base/etc
cp -Rp ${WORKDIR}/tree/var/ ${WORKDIR}/tree/conf/base/var
echo 128000 > ${WORKDIR}/tree/conf/base/var/md_size

# Create FAT32 filesystem to hold the kernel
newfs_msdos -C 33M -F 32 -c 1 -S 512 ${WORKDIR}/FAT32.img
mddev=`mdconfig -f ${WORKDIR}/FAT32.img`
mkdir ${WORKDIR}/FAT32
mount -t msdosfs /dev/${mddev}  ${WORKDIR}/FAT32
cp ${WORKDIR}/tree/boot/kernel/kernel ${WORKDIR}/FAT32/vmlinux.64
umount /dev/${mddev}
rmdir ${WORKDIR}/FAT32
mdconfig -d -u ${mddev}

# Create UFS filesystem
makefs -f 16384 -B big -s 1600m ${WORKDIR}/UFS.img ${WORKDIR}/tree

# Create complete disk image
mkimg -s mbr		\
    -p fat32:=${WORKDIR}/FAT32.img \
    -p "freebsd:-mkimg -s bsd -p freebsd-ufs:=${WORKDIR}/UFS.img" \
    -o ${IMGFILE}

# Clean up
chflags -R noschg ${WORKDIR}
rm -r ${WORKDIR}