container-bin-image (6057B)
1 #!/usr/bin/env pthbs-build 2 #+busybox.504428034e649f598212c8994966e36667178683ec90987355f495ad3ca4abac 3 #+busybox-bzip2.4ea548a271f41e7147568dc02e5071fb200eab38a9a22e733d3106b71e354812 4 #+busybox-gzip.0999e8c6a8b7df82fc1cf10ade2468fb2bc4352f76d4b1d2af5099a65ccada9b 5 #+busybox-lzop.f0d93621bfd8ca106a8590562d93158b05087e5ef48068c7a84d9967b67d2d25 6 #+busybox-unzip.737f61aac20ef6c0554fca59bb599bf98e4fb77fbd97fba65a3692ac9d4afb84 7 #+busybox-xz.639cf99dd37a7d6f719b937d13af92202e01adf11c130f8647574c1d9ef5b0d2 8 #+busybox-cpio.d22266c2b6c056c0ea96873402d06591aa23368ea24d91f1fbf8a8327cb210f8 9 #+busybox-dpkg.2b0dd2fa41e946e98f2f8948ae3d3a152a069c77460768d9c76d41f56974e514 10 #+busybox-rpm.62bb242b4fbb3fd51b233ed9ce6c257ab997b1ee3a68ef3048656addc98f3d97 11 #+busybox-tar.dd3d9b0075fc038df431ce2a16fc1b140de521e1aa6d154dc7b607f9403d5ac0 12 #+busybox-ed.6ff6cd59168705c6b256d800cde7e8c69dd05c556520317dae6a0b492029fe6b 13 #+busybox-sed.8793bcd2536ab32fa528bbb0c22f0c014663ac5e045193aa7bd113a07f58c5b9 14 #+busybox-vi.db3d29c62845a55b7c5491d057cb9ea6c6deba93c567f4ef9eb15f06be8ad171 15 #+busybox-xxd.9dff38f0c9dbf57856a0824bc23cc99cb31a67ce5138de7a6de2e255880a5696 16 #+busybox-process-extra.448a35fa5362e576a23ef306ec6e0da2f625adae08cc5c3b12a01d5d28f76ce6 17 #+busybox-procps.835712dc539d5583773d175255a5c4e27b5823d97e855948d27cc2c194247b0f 18 #+busybox-psmisc.f2434b74cd3e07ddea335da52c222567bc111b621f0f060afef8bcc26a8d96fd 19 #+busybox-ash.039eb4051853cdde4d03b8dbd5d6128957bf933be5ac398471666e5db0d33dab 20 #+busybox-bc.e731e83c11906525d676777835256a3f478779eafe7152701adfc46558d73009 21 #+busybox-coreutils.a57a12f85d58388c284d4f93f6c485d4bc2a7eac0d0f4be57b20d2ddbd4c8b8f 22 #+busybox-coreutils-extra.09de38ce2d65026888577e8314766e4b17205b2a99a4fecfdd5cd89c1cd82aed 23 #+busybox-daemontools.d12e277e7154028f0beaae44ad1e2c7e1cd12d28549b6861604fc634c3e09aaf 24 #+busybox-grep.474abd8ddad6afb320c55141078cb4507d02c4610181a4d72a4d98ba93434a60 25 #+busybox-misc.ea211db457ee098923eeff82a4388d5864254a6c2718f38471b5b2867c73d158 26 #+busybox-sh.49a7505969c9882c8a9a7ad3f5dba6d1382add3559f4da21ceafb2708d3fd4c8 27 #+busybox-util-linux-unpriv.95b792cd49d1f00d5488b15d93809166916ef3b8a63a69ea11f3bf6e92a74f24 28 #+busybox-dosfstools.179546bcd6ecb66c6539894d62d901e727b7ad1a7a314c6a6f3765eab9405090 29 #+busybox-e2fsprogs.a245d4da1f6a891c026409abc8b13aa012ce68db7dc02930dcd3e4d5384842a8 30 #+busybox-iproute2.2822ef07216c1b433ab6bd19871080d568c92fea2a26e8426c28e6adad2aeb29 31 #+busybox-iputils.9b88d3ac1988b296f3fcee8cec5f52d4a48a7663db0f98b359ef651e5a0760f2 32 #+busybox-net-misc.184d15a75f96f84c2d5ea201cbe58f8aec454ea601244764b374ceabc4fc6f9f 33 #+busybox-net-tools.3c6cac9d84e0b4f46317732bcbdc12d817879778d29f8b5b74fcac0e8fb97404 34 #+busybox-traceroute.1c04a547b3624077f5f494f0a0dd5c337d3aceae789725c0845cb7737a828b37 35 #+busybox-wget.6b7bb97a67eaa6dfe9f7d6b3e5be0962949e2b7e6ae80209a22144357742a14f 36 #+busybox-chpst.e73c721864c0b7b040fdb39e0d35fa32989e05ee813aad6dc901013c2aca37e3 37 #+busybox-console.70304cc8fe0cefc87bb7af67cb28509c71dd3c3bdf135172151b5d965ac5202e 38 #+busybox-getty.d5e78232db781cba4ac4c02a96262e18c8b52c4878d8c80879372327c40ab0ca 39 #+busybox-linux-extra.f198e630cc9428c7aba67c0d384144b71043f0d30dfa2d198a5f32d028728bc5 40 #+busybox-mtd-utils.2a0057a22776d92c89cfe12c28ad895f1c1a8a5f015a0fafe70661c3bc13620f 41 #+busybox-shadow.5ffa856469711a1550867610fdf3f0e161f27a79efebc6f232a085372f7586bb 42 #+busybox-su.b90c285664f5f1761b6f76bacbc155f89deb55ae38bd1668396a275bea461bff 43 #+busybox-util-linux-priv.9a041dc43dbcf3c67bac149789e819b0bb3934768de2d5f2785feda2d66a2d8e 44 #+busybox-logging.d216f2ce8e94dbbd8f29849959e3b3dfeda95ff53cfc5df1ee5533255b0b5b38 45 #+busybox-cron.d75134f370a00d415670bd831a43ffbc88d8abb59afa0920457f14458d3ed35c 46 #+busybox-diffutils.eed6ca067c994ab56e63b8b97a60f6e9f3625d3f9aeda53306e23bb42186ce78 47 #+busybox-findutils.db22f512240124b15d61cf8d0ceafebc98649f6f137608a2d1bd66f18e81ad8c 48 #+busybox-login.861e229c09761723554930888e954e43d46dec30d0e2bbc792d2c4bf6206486f 49 #+execline.403a4e1645c681e8c2ca9a75704a27658b788db460265916951d1d7a1e59ce8a 50 #+s6.8995e7d6191578e627f1a57d90c25a0e52d9afa701bbbe951f12494e5880351c 51 #+ccx-utils.a0dd0b66ee77bbde1c20e981ba4ddf14995cacb0b99789c0bf50eb40286a63c6 52 #+applyuidgid-caps.5686455a4eb04ec1a2bddbefe5fbc02b1c2ee926d76cb5c80f49615ae8fd2d46 53 #+easyseccomp.a7a8ac63b6862efbc9e3b92f971f30c1529e11e5b02b073b8f6f6187e1d8cdc7 54 #+mlog.ccaa6829cadd2cad0613a94d52a7dc45051407d0467f53e0d5e1fed3b73bc8d1 55 #+abduco.dfb142f878a5c0d868054abf7a13289458b2b828f3b10f4f6be5cc3f9ef1f968 56 #+nawk.ec8a7f9ea4618a151470a1c1a0026f688a5032eb06b8e459510fe82316c17a60 57 #@sha256:b9236c0fd504ffbc56f65d0522d2acadcd2683380eaa6f1873e8201eaa7388a5:default-policy.easyseccomp 58 59 img="$pthbs_destdir/home/ccx/versions/$pthbs_package/container-bin-image" 60 mkdir -p "$img" 61 easyseccomp -i default-policy.easyseccomp -o "$img/seccomp-default.bpf" 62 easyseccomp -i default-policy.easyseccomp -d ALLOW_PTRACE -o "$img/seccomp-ptrace.bpf" 63 easyseccomp -i default-policy.easyseccomp -d ALLOW_PTRACE -d ALLOW_SETUID_SETGID -d ALLOW_SECCOMP -d ALLOW_LANDLOCK -o "$img/seccomp-build.bpf" 64 easyseccomp -i default-policy.easyseccomp -d ALLOW_PTRACE -d ALLOW_SETUID_SETGID -o "$img/seccomp-xpra.bpf" 65 easyseccomp -i default-policy.easyseccomp -d ALLOW_SETUID_SETGID -o "$img/seccomp-setuidgid.bpf" 66 cd "$img" 67 68 # first commands without argv0 aliases 69 for cmd in "${PATH%%:*}"/*; do 70 rp=$(realpath "$cmd") 71 base=$(basename "$rp") 72 if test $base = "${cmd##*/}"; then 73 if test -e "./$base"; then 74 printf "fatal: duplicate command file: '%s'\n" "$base" 75 exit 1 76 fi 77 cp -p "$rp" ./ 78 fi 79 done 80 81 # now alias using symlinks 82 for cmd in "${PATH%%:*}"/*; do 83 rp=$(realpath "$cmd") 84 base=$(basename "$rp") 85 if ! test $base = "${cmd##*/}"; then 86 if ! test -f "./$base"; then 87 cp -p "$rp" ./ 88 fi 89 ln -s "./$base" "./${cmd##*/}" 90 fi 91 done 92 93 for cmd in if busybox umount chpst spawn-pty ptsname applyuidgid-caps seccomp-run; do 94 if ! test -x "./$cmd"; then 95 printf "fatal: expected command not found: '%s'\n" "$cmd" 96 exit 1 97 fi 98 done 99 ./true 100 ./seccomp-run ./seccomp-default.bpf ./true 101 pwd 102 ls -lhA 103 104 touch "$pthbs_destdir/home/ccx/versions/$pthbs_package/.install-links"