# Architecture-independend Files REQUIRED_PROGS+=( chroot ip less parted readlink # For noninteractive confirmation in commands yes ) PROGS+=( partprobe fdisk cfdisk sfdisk ) # progs to take along PROGS+=( rpc.statd rpcbind mknod blkid vol_id udev_volume_id portmap rpcinfo tac reboot halt shutdown killall5 killall tee ifconfig nslookup route ifenslave ifrename nameif klogd syslog-ng syslogd rsyslogd date rmdir init telinit ethtool expand insmod modprobe lsmod true false mingetty agetty getty rmmod hostname uname sleep logger pstree ln dirname basename tty ping netstat free traceroute xxd vi pico nano rmmod df dmesg du gzip netcat curl top iptraf joe getent id ldd strace rsync tail head find md5sum mkfs mkfs.ext2 mkfs.ext3 mkfs.ext4 mkfs.ext4dev mkfs.jfs mkfs.xfs mkfs.reiserfs mkfs.vfat mkfs.btrfs mkreiserfs fsck fsck.ext2 fsck.ext3 fsck.ext4 fsck.ext4dev fsck.xfs fsck.reiserfs reiserfsck fsck.btrfs findmnt btrfsck tune2fs tune4fs xfs_admin xfs_db xfs_repair xfs_info xfs_growfs btrfs jfs_tune reiserfstune egrep fgrep chmod chown stat mkswap swapon swapoff mknod touch scsi_id lsscsi logd initctl lspci usleep mktemp /bin/true strace which mkfifo seq openvt poweroff chacl getfacl setfacl attr getfattr setfattr mpath_wait xargs sg_inq env w dosfslabel sysctl blockdev lsblk clear ckbcomp # required for keyboard layout if setupcon is used # Older releases of os-prober (1.74 and below) use dmsetup as a fallback # solution for mounting when grub-mount is missing. # # However, dmsetup was included in the rescue image if and only if LVM, # multipath or encryption were detected. Thus, BIOS machines that do # not use these but still have dmsetup present, would block indefinitely # on the "Installing GRUB2 boot loader..." step. # # GRUB2 installation is performed in a chroot after the data have already # been recovered. ReaR would call grub-mkconfig which calls os-prober # which then executes dmsetup. However, it would never receive the expected # response in the form of releasing a System V semaphore by dmsetup executed # by udevd outside the chroot as rescue system would not have dmsetup present. # # see https://github.com/rear/rear/pull/2748 # related https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853927 dmsetup dmeventd # In some cases to detect an USB device properly we need: systemd-detect-virt ) # the lib* serves to cover both 32bit and 64bit libraries! # LIBS+=( ### needed for username lookups /lib*/libnss_dns* /lib*/libnss_files* ### support multiarch /lib/*/libnss_dns* /lib/*/libnss_files* /lib*/libgcc_s* /lib*/libresolv* /usr/lib*/rsyslog/*so /lib*/rsyslog/*so # Only copy *.so files in /usr/lib*/syslog-ng/ and skip /usr/lib*/syslog-ng/loggen/ # because the loggen program is not included in the recovery system # see https://github.com/rear/rear/issues/2743 /usr/lib*/syslog-ng/*so ### needed for curl HTTPS /lib*/libnsspem.so* /usr/lib*/libnsspem.so* /lib*/libfreebl*.so* /usr/lib*/libfreebl*.so* /lib*/libnss3.so* /usr/lib*/libnss3.so* /lib*/libnssutil3.so* /usr/lib*/libnssutil3.so* /lib*/libsoftokn3.so* /usr/lib*/libsoftokn3.so* /lib*/libsqlite3.so* /usr/lib*/libsqlite3.so* /lib*/libfreeblpriv3.so* /usr/lib*/libfreeblpriv3.so* /lib*/libssl.so* /usr/lib*/libssl.so* /lib*/libnssdbm3.so* /usr/lib*/libnssdbm3.so* ) COPY_AS_IS+=( /dev /etc/inputr[c] /etc/protocols /etc/services /etc/rpc /etc/termcap /etc/terminfo /lib*/terminfo /usr/share/terminfo /etc/netconfig /etc/mke2fs.conf /etc/*-release /etc/localtime /etc/magic /usr/share/misc/magic /etc/dracut.conf /etc/dracut.conf.d /usr/lib/dracut /sbin/modprobe.ksplice-orig /etc/sysctl.conf /etc/sysctl.d /etc/e2fsck.conf ) # Needed by vi on Fedora and derived distributions # where vi is a shell script that executes /usr/libexec/vi # see https://github.com/rear/rear/pull/2822 COPY_AS_IS+=( /usr/libexec/vi ) # Required by curl with https: # There are stored the distribution provided certificates # installed from packages, nothing confidential. # Usually the public verified certs, and not private keys. # The private keys are stored in /etc/ssl/private (not copied) # Private keys in /etc/pki/* are excluded (see below). # For more information on why brackets and quotes are not used, check https://github.com/rear/rear/pull/1971 # COPY_AS_IS+=( /etc/ssl/[c]erts /etc/[p]ki /usr/lib/[s]sl /usr/share/[c]a-certificates /etc/[c]a-certificates ) # but somehow that does not work in practice, see also https://github.com/rear/rear/pull/1971 # so that /etc/ca-certificates/* is added in the old "known to somehow work" style # that had been used before, cf. https://github.com/rear/rear/pull/1402 COPY_AS_IS+=( '/etc/ssl/certs/*' '/etc/pki/*' '/usr/lib/ssl/*' '/usr/share/ca-certificates/*' '/etc/ca-certificates/*' ) # exclude /dev/shm/*, due to the way we use tar the leading / should be omitted COPY_AS_IS_EXCLUDE+=( dev/shm/\* ) # Exclude private keys: /etc/pki/tls/private /etc/pki/CA/private /etc/pki/nssdb/key*.db and /usr/lib/ssl/private (cf. above): COPY_AS_IS_EXCLUDE+=( '/etc/pki/tls/private' '/etc/pki/CA/private' '/etc/pki/nssdb/key*.db' '/usr/lib/ssl/private' ) # some stuff for the Linux command line (the leading blank is needed to add it as a separated word to the KERNEL_CMDLINE string): KERNEL_CMDLINE+=" selinux=0" # common users and groups CLONE_USERS+=( daemon rpc usbmuxd usbmux vcsa nobody dbus ) CLONE_GROUPS+=( tty usbmuxd usbmux fuse kvm oinstall dbus ) # Add firmware file for AMD graphics hardware (if present) on TCG Opal pre-boot authentication (PBA) images # Cf. https://github.com/rear/rear/issues/2474 # lspci output is expected to look similar to this: # 00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Device 98e4 (rev 81) if type -p lspci >/dev/null && lspci | grep --quiet ' VGA .*AMD'; then OPAL_PBA_FIRMWARE_FILES+=( '*/amdgpu/*' ) fi