more fixes, add argon2 patch

This commit is contained in:
Anderson Rosenberg 2025-09-01 17:42:15 -04:00
parent c28c503296
commit 0830eb4e45
No known key found for this signature in database
GPG key ID: 7ACF448C0590AB9C
11 changed files with 150 additions and 86 deletions

View file

@ -22,6 +22,7 @@ fi
: "${RELIANT_SKIP_CHECKSUM:=}"
: "${RELIANT_SPARSE_SAMPLES:=512}"
: "${RELIANT_BOOTSTRAP_QUBE:=bootstrap}"
: "${RELIANT_KERNEL_VERSION:=$(qvm-run --pass-io "$RELIANT_BOOTSTRAP_QUBE" 'uname -r')}"
# Validate configuration values
if [ -z "$RELIANT_SECURE_DEVICE" ]; then
@ -86,6 +87,10 @@ reliant_install_dracut() {
reliant_install_file "$1" "$RELIANT_DRACUT_DIR/$2" "$3" "$4" "$5"
}
# Run the build script inside of the bootstrap qube
echo "[INFO]: Building $RELIANT_BOOTSTRAP_QUBE:$RELIANT_SYSTEM_ROOT for kernel $RELIANT_KERNEL_VERSION..."
qvm-run --pass-io "$RELIANT_BOOTSTRAP_QUBE" "sh -c 'cd $RELIANT_SYSTEM_ROOT && ./build.sh'"
# Begin the installation process
echo "[INFO]: Installing reliant-system from $RELIANT_BOOTSTRAP_QUBE:$RELIANT_SYSTEM_ROOT..."
@ -118,7 +123,7 @@ reliant_install_dracut dracut/99reliant/scripts/reliant-initramfs.sh scripts/rel
reliant_install_dracut dracut/99reliant/patches/create-snapshot.sh patches/create-snapshot.sh 0755 root root
# reliant-system/qubes-sflc
reliant_install_file qubes-sflc/dm-sflc.ko "/usr/lib/modules/$(uname -r)/extra" 0644 root root
reliant_install_file qubes-sflc/dm-sflc.ko "/usr/lib/modules/$RELIANT_KERNEL_VERSION/extra/dm-sflc.ko" 0644 root root
reliant_install_sbin qubes-sflc/shufflecake shufflecake 0744 root root
echo "[INFO]: Successfully copied files to dom0."
@ -158,11 +163,11 @@ systemctl enable shufflecake-close.service
surgeon-dissect -t varlibqubes
reliant-snapshot-rw
# reliant-system/qubes-sflc
depmod -a "$RELIANT_KERNEL_VERSION"
# reliant-system/dracut
dracut --force --regenerate-all
# reliant-system/qubes-sflc
depmod
# Report successful installation
echo "[INFO]: Installation complete. Reboot to enter protected mode."