mirror of
https://github.com/home-assistant/operating-system.git
synced 2026-04-17 15:45:07 +01:00
b3755e9f45
Since home-assistant/version#305 the AppArmor profiles were split to per-channel files. This was never reflected in hassio package build though. Currently this doesn't cause any trouble and the profile is replaced later by the Supervisor but make sure we're always using the correct one from the beginning.
45 lines
1.4 KiB
Bash
Executable File
45 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -e
|
|
|
|
build_dir=$1
|
|
dst_dir=$2
|
|
channel=$3
|
|
docker_version=$4
|
|
|
|
data_img="${dst_dir}/data.ext4"
|
|
data_dir="${build_dir}/data"
|
|
|
|
APPARMOR_URL="https://version.home-assistant.io/apparmor_${channel}.txt"
|
|
|
|
# Make image
|
|
rm -f "${data_img}"
|
|
truncate --size="1280M" "${data_img}"
|
|
mkfs.ext4 -L "hassos-data" -E lazy_itable_init=0,lazy_journal_init=0 "${data_img}"
|
|
|
|
# Mount / init file structs
|
|
mkdir -p "${data_dir}"
|
|
sudo mount -o loop,discard "${data_img}" "${data_dir}"
|
|
|
|
trap 'docker rm -f ${container} > /dev/null; sudo umount ${data_dir} || true' ERR EXIT
|
|
|
|
# Use official Docker in Docker images
|
|
# We use the same version as Buildroot is using to ensure best compatibility
|
|
container=$(docker run --privileged -e DOCKER_TLS_CERTDIR="" \
|
|
-v "${data_dir}":/mnt/data \
|
|
-v "${build_dir}":/build \
|
|
-d "docker:${docker_version}-dind" --feature containerd-snapshotter --data-root /mnt/data/docker)
|
|
|
|
docker exec "${container}" sh /build/dind-import-containers.sh
|
|
|
|
sudo bash -ex <<EOF
|
|
# Indicator for docker-prepare.service to use the containerd snapshotter
|
|
touch "${data_dir}/.docker-use-containerd-snapshotter"
|
|
|
|
# Setup AppArmor
|
|
mkdir -p "${data_dir}/supervisor/apparmor"
|
|
curl -fsL -o "${data_dir}/supervisor/apparmor/hassio-supervisor" "${APPARMOR_URL}"
|
|
|
|
# Persist build-time updater channel
|
|
jq -n --arg channel "${channel}" '{"channel": \$channel}' > "${data_dir}/supervisor/updater.json"
|
|
EOF
|