3 # QEMU trick to dive user in his own hoe environment
4 # as root in a virualized shadow of his own system
6 # (C) 2013 Pavel Pisa <pisa@cmp.felk.cvut.cz>
8 # THE TSCRIPT IS PROVIDED “AS IS” WITHOUT WARRANTY
9 # OF ANY KIND, EITHER EXPRESSED OR IMPLIED.
11 # There is no limitation of scrip use, modification
12 # and distribution or relicensing.
14 # Some used ideas are documented at CTU FEE A4M35OSP
16 # http://support.dce.felk.cvut.cz/osp/cviceni/2/
17 # http://support.dce.felk.cvut.cz/osp/cviceni/2-en/
19 # and Departemnt Of Control Engineering IT Wiki
20 # https://support.dce.felk.cvut.cz/
23 QEMU=qemu-system-x86_64
24 BUSYBOX=$(which busybox)
25 RESIZE=$(which resize)
26 KERNEL_VERSION=$(uname -r)
27 KERNEL_IMAGE=/boot/vmlinuz-${KERNEL_VERSION}
28 RAMDISK_ARCHIVE=ramdisk.cpio
29 #GEN_INIT_CPIO=$(dirname $0)/gen_init_cpio
30 INITRD_DIR=initrd_content
31 MODULES_LIST="virtio virtio_ring virtio_pci virtio_net virtio_net fscache 9pnet 9pnet_virtio 9p aufs overlay"
33 QEMU_KVM_ENABLE="-enable-kvm"
34 #QEMU_OUTPUT="-vga cirrus -serial null"
35 QEMU_OUTPUT="-nographic -append console=ttyS0"
37 INITRD_DIR_ABS=$(readlink -f ${INITRD_DIR})
39 function libraries_for_binary()
41 ldd $1 | sed -n -e 's#^\t\(/[^ ]*\) .*$#\1#p' -e 's#^\t\([^ ]*\) => \([^ ]\+\) .*$#\2#p'
50 mkdir -p ${tgt_dir}/$(dirname ${src}) || return 1
51 cp -av ${src} ${tgt_dir}/${src#/} || \
52 cp -v ${src} ${tgt_dir}/${src#/} || return 1
59 if [ ${l:0:1} != '/' ] ; then
60 l=$(dirname ${src})/${l}
66 function setup_initrd_content()
68 mkdir -p ${INITRD_DIR_ABS}
69 mkdir -p ${INITRD_DIR_ABS}/bin
70 mkdir -p ${INITRD_DIR_ABS}/etc/init.d
72 LIBS=$(libraries_for_binary ${BUSYBOX})
73 if [ -n "${RESIZE}" ] ; then
74 LIBS+=" "$(libraries_for_binary ${RESIZE})
77 LIBS="$(for i in ${LIBS} ; do echo $i ; done | sort -u)"
80 deep_copy ${i} ${INITRD_DIR_ABS}
83 cp -a ${BUSYBOX} ${INITRD_DIR_ABS}/bin
84 ( cd ${INITRD_DIR_ABS}/bin && ln -s busybox sh )
86 if [ -n "${RESIZE}" ] ; then
87 cp -a ${RESIZE} ${INITRD_DIR_ABS}/bin
91 for m in ${MODULES_LIST} ; do
92 mf=$(find /lib/modules/${KERNEL_VERSION} -name ${m}.ko )
93 if [ -n "${mf}" ] ; then
94 mkdir -p "${INITRD_DIR_ABS}/$(dirname ${mf})"
95 cp -a "${mf}" "${INITRD_DIR_ABS}/${mf#/}"
97 echo "Module ${m} not found"
103 root_dir_list="/proc /sys /dev /mnt /mnt/root /mnt/rootbase /mnt/overlay /tmp"
107 for d in $root_dir_list ; do
112 echo "Starting QEMU trick"
113 if mount -t proc none /proc ; then
114 echo "mount works directly"
117 echo "trying busybox mount"
118 BINPR="/bin/busybox "
119 if ! \${BINPR}mount -t proc none /proc ; then
120 echo "mounting proc failed, cannot continue"
125 \${BINPR}mount -t sysfs none /sys
126 \${BINPR}mount -t tmpfs none /dev
129 for m in ${MODULES_LIST} ; do
134 if [ -e /bin/resize ] ; then
135 \${BINPR}mv /dev/tty /dev/tty-backup
136 \${BINPR}ln -s /dev/console /dev/tty
137 /bin/resize >/tmp/term-size
139 \${BINPR}stty cols \$COLUMNS rows \$LINES
140 \${BINPR}rm -f /dev/tty
141 \${BINPR}mv /dev/tty-backup /dev/tty
143 \${BINPR}mount -t 9p -o ro,trans=virtio,version=9p2000.u root /mnt/rootbase
144 \${BINPR}mount -t tmpfs overlay /mnt/overlay
145 \${BINPR}mkdir -p /mnt/overlay/data
147 echo "Ready to setup overlay"
151 if grep -q aufs /proc/filesystems ; then
152 echo "Using aufs to remap root"
153 \${BINPR}mount -n -t aufs -o noxino,noatime,dirs=/mnt/overlay/data=rw:/mnt/rootbase=ro aufs-root ${rootmnt}
155 echo "Using overlay to remap root"
156 \${BINPR}mkdir -p /mnt/overlay/work
157 \${BINPR}mount -n -t overlay -o upperdir=/mnt/overlay/data,workdir=/mnt/overlay/work,lowerdir=/mnt/rootbase overlay-root ${rootmnt}
160 \${BINPR}mount -n -o move /dev ${rootmnt}/dev
161 \${BINPR}mount -n -o move /sys ${rootmnt}/sys
162 \${BINPR}mount -n -o move /proc ${rootmnt}/proc
163 \${BINPR}mount -t 9p -o trans=virtio,version=9p2000.u home ${rootmnt}/home
164 \${BINPR}mount -t tmpfs none ${rootmnt}/root
165 \${BINPR}mount -t tmpfs none ${rootmnt}/tmp
166 \${BINPR}mount -t tmpfs none ${rootmnt}/run
167 \${BINPR}mount -t tmpfs none ${rootmnt}/var/log
168 \${BINPR}mount -t tmpfs none ${rootmnt}/var/tmp
170 \${BINPR}rm -f ${rootmnt}/var/lib/urandom/random-seed
171 \${BINPR}rm -rf ${rootmnt}/etc/shadow
172 echo >${rootmnt}/etc/shadow
173 \${BINPR}rm -rf ${rootmnt}/etc/ssh
174 \${BINPR}mkdir ${rootmnt}/etc/ssh
176 \${BINPR}rm -f ${rootmnt}/etc/rc2.d/* ${rootmnt}/etc/rc3.d/* ${rootmnt}/etc/rc4.d/* ${rootmnt}/etc/rc5.d/*
178 \${BINPR}rm -rf ${rootmnt}/etc/fstab.d ${rootmnt}/etc/fstab
179 echo >${rootmnt}/etc/fstab
181 \${BINPR}rm -rf ${rootmnt}/var/lib/dpkg/lock ${rootmnt}/var/lib/apt/lists/lock ${rootmnt}/var/cache/apt/archives/lock
182 \${BINPR}rm -rf ${rootmnt}/etc/apt/apt.conf.d/*etckeeper ${rootmnt}/var/lib/dpkg/triggers/Lock
184 \${BINPR}rm -rf ${rootmnt}/etc/network/interfaces.d ${rootmnt}/etc/network/interfaces
185 echo "auto lo eth0" >${rootmnt}/etc/network/interfaces
186 echo "iface lo inet loopback" >>${rootmnt}/etc/network/interfaces
187 echo "iface eth0 inet dhcp" >>${rootmnt}/etc/network/interfaces
189 if [ -e ${rootmnt}/bin/bash ] ; then
195 \${BINPR}mv ${rootmnt}/etc/inittab ${rootmnt}/etc/inittab.orig
196 \${BINPR}cp ${rootmnt}/etc/inittab.orig ${rootmnt}/etc/inittab
197 \${BINPR}sed -i -e '/\/sbin\/.*getty/d' ${rootmnt}/etc/inittab
198 #echo "1:2345:respawn:/bin/sh" >>${rootmnt}/etc/inittab
199 #echo "T0:1234:respawn:/bin/sh" >>${rootmnt}/etc/inittab
201 echo "1:2345:respawn:/sbin/agetty -n -l \${shell} -o '-l' tty1 38400 linux" >>${rootmnt}/etc/inittab
202 echo "2:23:respawn:/sbin/agetty -n -l \${shell} -o '-l' tty2 38400 linux" >>${rootmnt}/etc/inittab
203 echo "T0:23:respawn:/sbin/agetty -n -l \${shell} -o '-l' -L ttyS0 9600 xterm" >>${rootmnt}/etc/inittab
206 echo "Ready to proceed by pivot_root"
210 #mkdir -p ${rootmnt}/overlay/pivot
211 #pivot_root . overlay/pivot
212 #exec chroot . sbin/init
213 exec switch_root ${rootmnt} /sbin/init
216 ) >${INITRD_DIR_ABS}/init
218 chmod 755 ${INITRD_DIR_ABS}/init
223 function build_initrd_gen_init_cpio()
229 nod /dev/tty0 644 0 0 c 4 0
230 nod /dev/tty1 644 0 0 c 4 1
231 nod /dev/tty2 644 0 0 c 4 2
232 nod /dev/tty3 644 0 0 c 4 3
233 nod /dev/tty4 644 0 0 c 4 4
234 #slink /init bin/busybox 700 0 0
238 dir /mnt/root 755 0 0
239 dir /mnt/rootbase 755 0 0
240 dir /mnt/overlay 755 0 0
242 find ${INITRD_DIR} -mindepth 1 -type d -printf "dir /%P %m 0 0\n"
243 find ${INITRD_DIR} -type f -printf "file /%P %p %m 0 0\n"
244 find ${INITRD_DIR} -type l -printf "slink /%P %l %m 0 0\n"
247 $GEN_INIT_CPIO filelist | gzip > ${RAMDISK_ARCHIVE}
252 function build_initrd_cpio()
254 ( cd ${INITRD_DIR_ABS} && find . | cpio --quiet -H newc -o ) | gzip -9 > ${RAMDISK_ARCHIVE}
257 function run_virt_system()
259 $QEMU ${QEMU_KVM_ENABLE} \
260 -kernel ${KERNEL_IMAGE} \
261 -initrd ${RAMDISK_ARCHIVE} ${QEMU_MEMORY} \
262 -virtfs local,path=/,security_model=none,mount_tag=root \
263 -virtfs local,path=/home,security_model=none,mount_tag=home \
264 -net nic,macaddr=be:be:be:10:00:01,model=virtio,vlan=0 \
268 # -chardev can,id=canbus0,port=can0
269 # -device pci-can,chardev=canbus0,model=SJA1000
270 # -device apohw -vga cirrus
271 # -device mf624,port=55555
276 function clean_setup()
278 rm -rf ${RAMDISK_ARCHIVE} filelist ${INITRD_DIR_ABS}
281 if [ "$(whoami)" == "root" ] ; then
282 echo "$0: !!! TOO DANGEROUS TO RUN AS ROOT !!!"
286 clean_setup || exit 1
287 echo "=== setup_initrd_content ==="
288 setup_initrd_content || exit 1
289 echo "=== build_initrd ==="
290 if [ -n "${GEN_INIT_CPIO}" ] ; then
291 build_initrd_gen_init_cpio || exit 1
293 build_initrd_cpio || exit 1
295 echo "=== run_virt_system ==="
296 run_virt_system || exit 1