tarxvftech / pim17_builder

Fork of raspi-alpine/builder

Raspberry PI Alpine Linux Image Builder

Create minimal Linux images based on Alpine Linux for the Raspberry PI.

Features

• Alpine base
  • Small image size
  • Fast image build
• A/B partition schema
  • Simple update of whole system
  • Fallback if update failed
• Choice of three base image cpu types for targeting every Raspberry PI
• Read only root filesystem

Usage

Note: If you want to build the image on a different architecture then the destination, you can use qemu-user-static:

docker run --privileged --rm multiarch/qemu-user-static --persistent yes

Image Creation

A simple example for a go application can be found in the examples/go directory, there is also a node-red one in examples/node-red

To generate an empty image simply run:

docker run --rm -it -v $PWD/output:/output ghcr.io/raspi-alpine/builder

This will create 2 image files in the directory $PWD/output/:

• alpine.img.gz: complete SD card image for the raspberry
• alpine_update.img.gz: image of root partition to update running raspberry

For each image a *.sha256 file will be generated to validate integrity.

To add custom modifications mount a script to /input/image.sh. The following variables can be useful for the for and image.sh:

Variable	Description
INPUT_PATH	Path to input directory
ROOTFS_PATH	Path to new root filesystem
BOOTFS_PATH	Path to new boot filesystem
DATAFS_PATH	Path to new data filesystem

There is also a function chroot_exec that can be used to run command inside the new root filesystem. To enable a service called example_daemon simple run:

chroot_exec rc-update add example_daemon default

Config Variables

The following variables can be used to modify the base behaviour of the image builder.

Variable	Default Value	Description
ADDITIONAL_DIR_KERNEL_MODULES	none	Directories in kernel modules to include all modules from, eg "w1" for one wire modules
ADDITIONAL_KERNEL_MODULES	none	Kernel modules to keep in addition to DEFAULT_KERNEL_MODULES, so you don't have to add back the default ones
ALPINE_BRANCH	v3.15	Alpine Branch to use for image
ALPINE_MIRROR	https://dl-cdn.alpinelinux.org/alpine	Mirror used for package download
ARCH	armv7	Set to aarch64 to enable 64bit uboot and kernel (for raspberry pi 3 and 4), or armhf for pi zero and pi1 (will not boot on pi4)
CACHE_PATH	none	Path inside container for cache (needs a volume mounting to it), if set firmware and apk files are saved as restored.
CMDLINE	resources/build.sh	Override default cmdline for kernel (needs setting in an env file not with --env, see test/simple-image for example)
CUSTOM_IMAGE_SCRIPT	image.sh	Name of script for image customizations (relative to input dir)
DEFAULT_DROPBEAR_ENABLED	true	True to enable SSH server by default
DEFAULT_HOSTNAME	alpine	Default hostname
DEFAULT_KERNEL_MODULES	ipv6 af_packet	Kernel modules to keep in image
DEFAULT_ROOT_PASSWORD	alpine	Default password for root user
DEFAULT_TIMEZONE	Etc/UTC	Default Timezone to use for image
DEV	mdev	Device manager to use, can be mdev or eudev
IMG_NAME	sdcard	Base name of created image file
INPUT_PATH	/input	Input directory inside container
OUTPUT_PATH	/output	Output directory inside container
RPI_FIRMWARE_BRANCH	stable	Raspberry Pi Branch to use for firmware, 'alpine' uses alpine version
RPI_FIRMWARE_GIT	https://github.com/raspberrypi/firmware	Raspberry Pi firmware Repo Mirror
SIZE_BOOT	100M	Size of boot partition
SIZE_DATA	20M	Initial Size of data partition
SIZE_ROOT_FS	200M	Size of root file system (0 for automatic shrink to content)
SIZE_ROOT_PART	500M	Size of root partition
UBOOT_COUNTER_RESET_ENABLED	true	True to enable simple boot counter reset service

ARCH variable

Setting the ARCH variable effects which pi versions the image will run on:

Board	armhf	armv7	aarch64
pi0	✅
pi1	✅
pi2	✅	✅
pi3, pi0w2, cm3	✅	✅	✅
pi4, pi400, cm4		✅	✅

Kernel Modules

There are three environment variables for selecting which kernel modules to keep.

• DEFAULT_KERNEL_MODULES (Base modules, should not normally be changed unless * to keep all modules)
• ADDITIONAL_KERNEL_MODULES (Extra modules that are not in a .conf file for loading)
• ADDITIONAL_DIR_KERNEL_MODULES (keep all modules in subdirectory of kernel modules)

Along with these /etc/modules is checked, /etc/modules-load.d and /usr/lib/modules-load.d are checked for .conf files. Any modules in these files are kept as well.

Customization

As well as the environment variables some files change the building of the image as well.

In the INPUT_PATH if there is an m4 folder with the file hdmi.m4 this will be included instead of the default hdmi section in config.txt, to let the kernel decide hdmi settings just create a blank hdmi.m4 file.

Update running system

The system can be updated without a complete flash of the SD card from the running system with the following steps:

1. Transfer the update image to the running system
2. (Optional) Validate integrity of image with checksum file
3. Write the image to the actual inactive partition
4. Switch active partition
5. Reboot system

An example implementation can be found in the helper script ab_flash

Image structure

Partition Layout

The image contains 4 partitions:

1. Boot: (Size: SIZE_BOOT)
   Contains boot loader and boot configuration

2. Root A: (Size: SIZE_ROOT_PART)
   Contains complete root filesystem including all required kernels

3. Root B: (Size: SIZE_ROOT_PART)
   Same as Root A

4. Data: (Size: Initial SIZE_DATA & increases on first start)
   Contains persistent data for both root partitions

With the exception of the data partition every partition is mounted read only

The A/B root partitions enables an easy and reliable way to update the complete system. This is done by flashing the inactive partition with a new root filesystem and make this partition active. If this new filesystem does not boot the boot loader will fallback to the old partition.

The root file system should be as small as possible to reduce the update time later. To support future increase of the root file system the partition should contain some free space.

Boot loader

To support the A/B partition schema the U-Boot boot loader is used.

The configuration/script for the boot loader can be found in the boot.cmd. This will boot the active root partition and switch the active partition if the active one will not start.

This script also select the right kernel for old Raspberry PIs

The image contains a simple tool that resets the boot counter and switch the active partition from the running OS. The sources of the script can be found in the uboot.c.

Logging

By default syslog is configured to log to the kernel printk buffer so it does not create any log files, logs can be read with dmesg. Which are shown along with kernel messages.