Shell 100.00%

archarm-mobile-fde-installer's Introduction

This script allows you to install Arch Linux ARM for PinePhone / PineTab with full disk encryption.

archarm-mobile-fde-installer's People

Contributors

Stargazers

Watchers

Forkers

davidegirardi e-minguez wose failpyre schmurian craftybastard ocawesome101 fbmoose48 crispy-landslide tech-saviours-org robert-l-turner langfingaz pentamassiv macasieb drrac27 beardstack

archarm-mobile-fde-installer's Issues

How to fix the down of server: https://danctnix.arikawa-hi.me/rootfs/archarm-on-mobile?

Hello I really would like to reinstall arch with FDE, but I need a workaround for the service https://danctnix.arikawa-hi.me/rootfs/archarm-on-mobile that is down for a few months.

Failed to initialize F2FS segment manager

Creating an encrypted micro-SD-card for the PinePhone with F2FS failed for me: The encrypted partition could not be mounted.

I'm not sure where this error comes from. Maybe just a bad SD card (even if it is quite new)? I thought I'll report this here in case some others have a similar error.

The script did continue after the failed mount command and did not report the error back. I'll create a merge-request to address that in a second.

Output from dmesg:

[ 1791.977711] F2FS-fs (dm-1): Mismatch valid blocks 872 vs. 237
[ 1791.977722] F2FS-fs (dm-1): Failed to initialize F2FS segment manager (-117)

Output from the script:

Which image do you want to create?
1) PinePhone
2) PineTab
#? 1
Which environment would you like to install?
1) Phosh
2) Plasma
3) Sxmo
4) Barebone
#? 3
Which filesystem would you like to use?
1) ext4
2) f2fs
#? 2
Which SD card do you want to flash?
NAME        MAJ:MIN RM  SIZE RO TYPE  MOUNTPOINTS
mmcblk0     179:0    0 59,2G  0 disk  
├─mmcblk0p1 179:1    0 59,2G  0 part  
└─mmcblk0p2 179:2    0    1M  0 part  
nvme0n1     259:0    0  1,9T  0 disk  
├─nvme0n1p1 259:1    0  600M  0 part  /boot
├─nvme0n1p2 259:2    0    1G  0 part  
└─nvme0n1p3 259:3    0  1,9T  0 part  
  └─crypt   254:0    0  1,9T  0 crypt /var/lib/docker/btrfs
                                      /home
                                      /
Device node (/dev/sdX): /dev/mmcblk0
Flashing image to: /dev/mmcblk0
WARNING: All data will be erased! You have been warned!
Some commands require root permissions, you might be asked to enter your sudo password.

ARE YOU SURE /dev/mmcblk0 IS WHAT YOU PICKED?
Confirm device node: /dev/mmcblk0

Downloading images...
archlinux-pinephone 100%[===================>] 924,73M  1,49MB/s    in 11m 4s  
archlinux-pinephone-sxmo-20220501.sqfs: OK
arch-install-script 100%[===================>]  14,09K  --.-KB/s    in 0s      
You'll now be asked to type in a new encryption key. DO NOT LOSE THIS!
Enter passphrase for /dev/mmcblk0p2: 
Verify passphrase: 
Key slot 0 created.
Command successful.
Enter passphrase for /dev/mmcblk0p2: 
mkfs.fat 4.2 (2021-01-31)

    F2FS-tools: mkfs.f2fs Ver: 1.15.0 (2022-05-13)

Info: Disable heap-based policy
Info: Debug level = 0
Info: Trim is enabled
Info: Segments per section = 1
Info: Sections per zone = 1
Info: sector size = 512
Info: total sectors = 123678720 (60390 MB)
Info: zone aligned segment0 blkaddr: 512
Info: format version with
  "Linux version 5.15.45-1-lts (linux-lts@archlinux) (gcc (GCC) 12.1.0, GNU ld (GNU Binutils) 2.38) #1 SMP Mon, 06 Jun 2022 09:19:52 +0000"
Info: [/dev/mapper/tmp.d17tGUYimm] Discarding device
Info: This device doesn't support BLKSECDISCARD
Info: This device doesn't support BLKDISCARD
Info: Overprovision ratio = 0.820%
Info: Overprovision segments = 495 (GC reserved = 251)
Info: format successful
mount: /home/yoda/Downloads/archarm-mobile-fde-installer/tmp.lbrRbZ4GVy: mount(2) system call failed: Structure needs cleaning.
       dmesg(1) may have more information after failed mount system call.
Parallel unsquashfs: Using 16 processors
75292 inodes (76110 blocks) to write

[=========================================================|] 151402/151402 100%

created 61321 files
created 5517 directories
created 7707 symlinks
created 0 devices
created 0 fifos
created 0 sockets
created 6264 hardlinks
==> ERROR: /home/yoda/Downloads/archarm-mobile-fde-installer/tmp.lbrRbZ4GVy is not a mountpoint
90+1 records in
90+1 records out
745359 bytes (745 kB, 728 KiB) copied, 0,00142721 s, 522 MB/s
umount: ./tmp.lbrRbZ4GVy: not mounted
Cleaning up working directory...
rm: cannot remove './tmp.lbrRbZ4GVy/boot': Device or resource busy
All done! Please insert the card to your device and power on.

device-mapper: reload ioctl on alarm_install (252:0) failed: Invalid argument

Could you help me, determine if it is a dependency issue with cryptsetup or an another mistake on my end ?

I’ve got cryptsetup version 2.3.4-2 installed, straight from the Arch Linux extra repositories.

Neither trying with the two filesystem options work.

It does create the two partitions (The boot one, at 250Mo if I remember, and the other LUKS one, taking the rest of the emmc space). However, it seems it can’t populate it.

pm sudo ./installer.sh 
Which image do you want to create?
1) PinePhone
2) PineTab
#? 1
Which environment would you like to install?
1) Phosh
2) Barebone
#? 1
Which filesystem would you like to use?
1) ext4
2) f2fs
#? 2
Which SD card do you want to flash?
NAME        MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
sda           8:0    0 232,9G  0 disk 
└─sda1        8:1    0 232,9G  0 part /mnt/Ventilateur
sdb           8:16   0   1,8T  0 disk 
└─sdb1        8:17   0   1,8T  0 part /mnt/Ensommeiller
sdc           8:32   0   1,8T  0 disk 
└─sdc1        8:33   0   1,8T  0 part /mnt/Galant
sdd           8:48   0 596,2G  0 disk 
└─sdd1        8:49   0 596,2G  0 part /mnt/Velour
sde           8:64   0 931,5G  0 disk 
└─sde1        8:65   0 931,5G  0 part /mnt/Salamandre
sdf           8:80   1   7,5G  0 disk 
├─sdf1        8:81   1   2,9G  0 part 
├─sdf2        8:82   1   2,3M  0 part 
└─sdf3        8:83   1   4,6G  0 part 
sdg           8:96   0 223,6G  0 disk 
└─sdg1        8:97   0 223,6G  0 part 
sdh           8:112  0 465,8G  0 disk 
sdi           8:128  1  14,7G  0 disk 
├─sdi1        8:129  1   243M  0 part 
└─sdi2        8:130  1  14,4G  0 part 
sdj           8:144  1  59,7G  0 disk 
└─sdj1        8:145  1    49M  0 part 
sr0          11:0    1  1024M  0 rom  
zram0       253:0    0   2,6G  0 disk [SWAP]
zram1       253:1    0   2,6G  0 disk [SWAP]
zram2       253:2    0   2,6G  0 disk [SWAP]
zram3       253:3    0   2,6G  0 disk [SWAP]
zram4       253:4    0   2,6G  0 disk [SWAP]
zram5       253:5    0   2,6G  0 disk [SWAP]
zram6       253:6    0   2,6G  0 disk [SWAP]
zram7       253:7    0   2,6G  0 disk [SWAP]
zram8       253:8    0   2,6G  0 disk [SWAP]
zram9       253:9    0   2,6G  0 disk [SWAP]
zram10      253:10   0   2,6G  0 disk [SWAP]
zram11      253:11   0   2,6G  0 disk [SWAP]
nvme0n1     259:0    0 465,8G  0 disk 
├─nvme0n1p1 259:1    0   300M  0 part /boot/efi
└─nvme0n1p2 259:2    0 465,5G  0 part /run/timeshift/backup
Device node (/dev/sdX): /dev/sdi
Flashing image to: /dev/sdi
WARNING: All data will be erased! You have been warned!
Some commands require root permissions, you might be asked to enter your sudo password.

ARE YOU SURE /dev/sdi IS WHAT YOU PICKED?
Confirm device node: /dev/sdi

Downloading images...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   161  100   161    0     0    223      0 --:--:-- --:--:-- --:--:--   223
archlinux-pinephone-phosh.sqfs: Réussi
--2021-02-25 12:23:58--  https://archlinux.org/packages/extra/any/arch-install-scripts/download/
Certificat de l’autorité de certification « /etc/ssl/certs/ca-certificates.crt » chargé
Résolution de archlinux.org (archlinux.org)… 2a01:4f9:c010:6b1f::1, 95.217.163.246
Connexion à archlinux.org (archlinux.org)|2a01:4f9:c010:6b1f::1|:443… connecté.
requête HTTP transmise, en attente de la réponse… 302 Found
Emplacement : https://mirror.chaoticum.net/arch/extra/os/x86_64/arch-install-scripts-23-2-any.pkg.tar.zst [suivant]
--2021-02-25 12:23:58--  https://mirror.chaoticum.net/arch/extra/os/x86_64/arch-install-scripts-23-2-any.pkg.tar.zst
Résolution de mirror.chaoticum.net (mirror.chaoticum.net)… 2a01:4f8:150:720b::2, 176.9.51.222
Connexion à mirror.chaoticum.net (mirror.chaoticum.net)|2a01:4f8:150:720b::2|:443… connecté.
requête HTTP transmise, en attente de la réponse… 200 OK
Taille : 14546 (14K) [application/octet-stream]
Sauvegarde en : « arch-install-scripts.tar.zst »

arch-install-scripts.tar.zst                                                                    100%[====================================================================================================================================================================================================================================================>]  14,21K  --.-KB/s    ds 0s      

2021-02-25 12:23:59 (200 MB/s) — « arch-install-scripts.tar.zst » sauvegardé [14546/14546]

You'll now be asked to type in a new encryption key. DO NOT LOSE THIS!
Saisissez la phrase secrète pour /dev/sdi2 : 
Vérifiez la phrase secrète : 
La signature de superbloc « crypto_LUKS » existante (offset: 0 octets) sur le périphérique /dev/sdi2 sera effacée.
La signature de superbloc « crypto_LUKS » existante (offset: 16384 octets) sur le périphérique /dev/sdi2 sera effacée.
Emplacement de clef 0 créé.
Opération réussie.
Saisissez la phrase secrète pour /dev/sdi2 : 
device-mapper: reload ioctl on alarm_install (252:0) failed: Argument invalide
ERROR: Failed to locate rootfs mapper. Aborting.

¨Atleast one partition is being used¨ error, should prompt to format it.

Downloading images...
archlinux-pinephone-phosh-20211130.sqfs: Réussi
Erreur: Au moins une partition de /dev/sdf est en cours d’utilisation.
Erreur: Vous voulez établir une partition de 0,00B à 256MB (secteurs 0..500000).
La position la plus proche gérable est 512B à 1048kB (secteurs 1..2047). 
Erreur: Impossible d’avoir des partitions qui se chevauchent.
You'll now be asked to type in a new encryption key. DO NOT LOSE THIS!
Saisissez la phrase secrète pour /dev/sdf2 : 
Vérifiez la phrase secrète : 
Le périphérique /dev/sdf2 est utilisé. Impossible de continuer avec l'opération de formatage.
La commande a échoué avec le code -1 (paramètres erronés ou manquants).
/dev/sdf2 n'est pas un périphérique LUKS valide.
ERROR: Failed to locate rootfs mapper. Aborting.

Except if it was because I just had Gnome Disks randomly opened in the background during the process, the script didn't know what to do with the mounted eMMC encrypted partition of my PinePhone, before the encryption process, despite knowingly it wouldn't be able to do anything.

I've did try with, and without decrypting the eMMC partition (With the gnome decryption prompt when plug-in in on Gnome), and both gave the same result.

So, I had to format that eMMC partition clean myself manually.

It's more a suggestion than a real bug, just to prevent confusion in that case to users.

tar: This does not look like a tar archive

Script fails with error:
tar: This does not look like a tar archive
tar: Skipping to next header
tar: usr/bin/genfstab: Not found in archive
tar: Exiting with failure status due to previous errors
chmod: cannot access 'genfstab': No such file or directory
ERROR: Failed to locate genfstab. Aborting.

Error occurs on line 138: tar --transform='s,^([^/][^/]*/)+,,' -xf arch-install-scripts.tar.zst usr/bin/genfstab

Not sure if the file is bad? Mine is 14510 KB. I'm also lacking a /genfstab folder in /usr/bin.

Progress Meter for curl command

I came across the issue that at least my version of curl (7.64.0 on a current Debian box, as well as 7.75.0 on a Manjaro system) did not support the --progress-meter parameter. Therefore the checksum verification fails in the following manner:

curl: option --progress-meter: is unknown
curl: try 'curl --help' or 'curl --manual' for more information
sha512sum: 'standard input': no properly formatted SHA512 checksum lines found
ERROR: Checksum does not match. Aborting.

Chaning the parameter to --progress-bar in this line did the trick.

I'm just curious if this was intentional since it seems to be working fine for others.

danctnix.arikawa-hi.me seems to be permanently down

The server for the source images

DOWNLOAD_SERVER="https://danctnix.arikawa-hi.me/rootfs/archarm-on-mobile"

seems to be permanently down. It might be a good idea to use another source and/or add an option to give a cli-parameter for an image file. So it coult be downloaded from here https://github.com/dreemurrs-embedded/Pine64-Arch/releases/tag/20230203.

Error: Checksum does not match

After the image get's downloaded:

curl: option --progress-meter: is unknown
curl: try 'curl --..............................'
sha512sum: 'standard input': no properly formatted SHA512 checksum lines found
ERROR: Checksum does not match. Aborting

I might be missing something obvious, but can't get passed the checksum check

no boot with "Could not parse config file: /etc/osk.conf" after pacman update

Installed on pinephone pro explorer with fork from https://github.com/TECH-SAVIOURS-ORG/archarm-mobile-fde-installer on microsd with no issues.

It was working flawlessly (regarding fde, boot) for some time.

After running pacman -Syu about 2 days ago it stopped booting.

After aqua led comes blue led and then arch / penguin logo with spinning wheel.

When connecting usb keyboard I'm seeing an endless loop of below errors:

ERROR: Could not parse config file: /etc/osk.conf
ERROR: No valid config file specified, use -c [path
ERROR: Syntax error on line 4
ERROR: Could not parse config file: /etc/osk.conf
ERROR: No valid config file specified, use -c [path]
ERROR: Syntax error on line 4
ERROR: Could not parse config file: /etc/osk.conf
ERROR: No valid config file specified, use -c [path]

I'm still able to boot my normal (no fde) arch from emmc.

(Please forgive typos, on mobile)

Broken boot serial log:

U-Boot 2022.01-4 (Feb 17 2022 - 20:19:02 +0000) DanctNIX ARM

CPU:   Allwinner A64 (SUN50I)
Model: PineTab, Development Sample
DRAM:  2 GiB
DRAM Clock: 624 MHz
WDT:   Not starting watchdog@1c20ca0
MMC:   mmc@1c0f000: 0, mmc@1c10000: 2, mmc@1c11000: 1
Loading Environment from FAT... Unable to read "uboot.env" from mmc1:1... In:    serial
Out:   serial
Err:   serial
Net:   No ethernet found.
Set ram_freq : 624
Hit any key to stop autoboot:  0
switch to partitions #0, OK
mmc1(part 0) is current device
Scanning mmc 1:1...
Found U-Boot script /boot.scr
1491 bytes read in 8 ms (181.6 KiB/s)
## Executing script at 4fc00000
gpio: pin 98 (gpio 98) value is 1
Booting from eMMC
Loading kernel...
8257014 bytes read in 194 ms (40.6 MiB/s)
Uncompressing kernel...
Uncompressed size: 20144136 = 0x1336008
Loading initramfs...
80676705 bytes read in 1752 ms (43.9 MiB/s)
Loading dtb...
45145 bytes read in 30 ms (1.4 MiB/s)
Resizing FDT
Adding FTD RAM clock
memory {
        ram_freq = "624";
};
Loading user script
Failed to load '/user.scr'
No user script found
Booting...
gpio: pin 98 (gpio 98) value is 0
Moving Image from 0x40080000 to 0x40200000, end=415a0000
## Flattened Device Tree blob at 4fa00000
   Booting using the fdt blob at 0x4fa00000
   Loading Ramdisk to 4530f000, end 49fff761 ... OK
   Loading Device Tree to 0000000045300000, end 000000004530efff ... OK

Starting kernel ...

[    4.756595] lima 1c40000.gpu: dev_pm_opp_set_regulators: no regulator (mali) found: -19
[    9.031521] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000290
[    9.040420] Mem abort info:
[    9.043930]   ESR = 0x96000004
[    9.047445]   EC = 0x25: DABT (current EL), IL = 32 bits
[    9.052913]   SET = 0, FnV = 0
[    9.056022]   EA = 0, S1PTW = 0
[    9.059214]   FSC = 0x04: level 0 translation fault
[    9.064132] Data abort info:
[    9.067041]   ISV = 0, ISS = 0x00000004
[    9.070907]   CM = 0, WnR = 0
[    9.076249] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000042334000
[    9.083695] [0000000000000290] pgd=0000000000000000, p4d=0000000000000000
[    9.090571] Internal error: Oops: 96000004 [#1] PREEMPT SMP
[    9.096146] Modules linked in:
[    9.099307] CPU: 1 PID: 59 Comm: kworker/u8:3 Not tainted 5.17.0-2-danctnix #1
[    9.107210] Hardware name: PineTab, Development Sample (DT)
[    9.112781] Workqueue: events_unbound deferred_probe_work_func
[    9.118626] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[    9.125584] pc : of_drm_find_panel+0x78/0xd0
[    9.129856] lr : of_drm_find_panel+0x4c/0xd0
[    9.134124] sp : ffff80000966bb40
[    9.137438] x29: ffff80000966bb40 x28: 0000000000000000 x27: 0000000000000000
[    9.144575] x26: ffff80000933f640 x25: ffff00000180700d x24: ffff8000092f35a0
[    9.151712] x23: 0000000000000036 x22: 0000000000000000 x21: ffff8000092f0fb8
[    9.158849] x20: ffff00007fbe7888 x19: ffff00000944a780 x18: 0000000000000000
[    9.165986] x17: ffff800008c694f0 x16: 0000000000000000 x15: 0000000000000000
[    9.173122] x14: 0000000000000001 x13: 0000000000000002 x12: 0000000000000040
[    9.180257] x11: 0000000000000003 x10: 0101010101010101 x9 : 0000000000000000
[    9.187394] x8 : 7f7f7f7f7f7f7f7f x7 : fefefeff646c606d x6 : 1d150c11f5f38080
[    9.194530] x5 : 00007375110c151d x4 : 0000000000000000 x3 : ffff8000092f0fb8
[    9.201667] x2 : ffff8000092f0fd8 x1 : 0000000000000000 x0 : ffff00000944a7a0
[    9.208805] Call trace:
[    9.211249]  of_drm_find_panel+0x78/0xd0
[    9.215173]  sun6i_dsi_attach+0x20/0x84
[    9.219014]  mipi_dsi_attach+0x2c/0x40
[    9.222764]  ili9881c_dsi_probe+0x100/0x180
[    9.226948]  mipi_dsi_drv_probe+0x24/0x30
[    9.230958]  really_probe.part.0+0x9c/0x2fc
[    9.235143]  __driver_probe_device+0x98/0x144
[    9.239502]  driver_probe_device+0xc4/0x15c
[    9.243687]  __device_attach_driver+0xb4/0x120
[    9.248132]  bus_for_each_drv+0x78/0xd0
[    9.251969]  __device_attach+0xdc/0x184
[    9.255806]  device_initial_probe+0x14/0x20
[    9.259991]  bus_probe_device+0x9c/0xa4
[    9.263827]  deferred_probe_work_func+0x88/0xc0
[    9.268358]  process_one_work+0x1d0/0x350
[    9.269883] sunxi-mmc 1c10000.mmc: initialized, max. request size: 16384 KB, uses new timings mode
[    9.272369]  worker_thread+0x2c0/0x460
[    9.285063]  kthread+0x10c/0x110
[    9.288295]  ret_from_fork+0x10/0x20
[    9.291879] Code: d1008033 eb02003f 540001a0 f9400261 (f9414821)
[    9.297712] mmc1: new high speed SDIO card at address 0001
[    9.297968] ---[ end trace 0000000000000000 ]---
[    9.445010] mmc2: new DDR MMC card at address 0001
[    9.450784] mmcblk2: mmc2:0001 DA4064 58.2 GiB
[    9.457785]  mmcblk2: p1 p2
[    9.465747] mmcblk2boot0: mmc2:0001 DA4064 4.00 MiB
[    9.476626] mmcblk2boot1: mmc2:0001 DA4064 4.00 MiB
[   15.070972] sun4i-drm display-engine: [drm] Cannot find any crtc or sizes
[   38.744473] random: crng init done

dreemurrs-embedded / archarm-mobile-fde-installer Goto Github PK