josh
c962d6d8ab
Tiger Lake and later Intel iGPUs need i915/tgl_guc_*.bin; without it the i915 init wedges and floods the console. Same story on most modern wifi/NIC hardware. Pull firmware-linux-nonfree (metapackage covering misc-nonfree, iwlwifi, realtek, amd-graphics, …) from the bookworm non-free-firmware repo — single line fix, ~500MB cost to the squashfs, worth it for booting arbitrary repaired hosts. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
48 lines
1.4 KiB
Plaintext
48 lines
1.4 KiB
Plaintext
# Vetting live image (Phase 2 skeleton).
|
|
#
|
|
# Produces a Debian-based rootfs packaged as squashfs plus a kernel
|
|
# image, ready to be served over HTTP to iPXE. The image is deliberately
|
|
# small: only what the agent needs to run Phase 2 (the Hello / Claim /
|
|
# Heartbeat loop). Phase 4+ adds smartctl, stress-ng, fio, iperf3, etc.
|
|
|
|
[Distribution]
|
|
Distribution=debian
|
|
Release=bookworm
|
|
# non-free-firmware is where bookworm landed i915 GuC/HuC, iwlwifi,
|
|
# amdgpu, nvidia-*, realtek NIC firmware, etc. — anything we'd want
|
|
# when PXE-booting a random repaired host. Without it i915 wedges
|
|
# on Tiger Lake+ and drags the serial console with it.
|
|
Repositories=main non-free-firmware
|
|
|
|
[Output]
|
|
Format=directory
|
|
Output=build
|
|
|
|
[Content]
|
|
# PXE live image — iPXE loads vmlinuz+initrd from TFTP, so the rootfs
|
|
# itself doesn't need an EFI bootloader. Bootable=no skips mkosi's
|
|
# systemd-boot/bootctl dance; we still get /vmlinuz + /initrd.img
|
|
# symlinks courtesy of the linux-image-amd64 postinst.
|
|
Bootable=no
|
|
BuildPackages=
|
|
Packages=
|
|
systemd
|
|
systemd-sysv
|
|
udev
|
|
linux-image-amd64
|
|
live-boot
|
|
iproute2
|
|
iputils-ping
|
|
openssh-server
|
|
ca-certificates
|
|
curl
|
|
dmidecode
|
|
pciutils
|
|
usbutils
|
|
firmware-linux-nonfree
|
|
|
|
# Phase 4 will add: smartmontools stress-ng fio iperf3 lshw lm-sensors
|
|
|
|
[Host]
|
|
# Copy the prebuilt Go agent in from the repo root via postinst.
|