Something went wrong. Try again.
Monorepo for Aesthetic.Computer aesthetic.computer
Something went wrong. Try again.
Shell
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059#!/bin/bash# build-and-flash.sh — Build ac-native from scratch and optionally flash to USB## Works in Docker/Codespaces (no losetup/mount needed — uses mtools).## Usage:# ./build-and-flash.sh # Build kernel only# ./build-and-flash.sh --flash /dev/sdb # Build + flash to USB# ./build-and-flash.sh --skip-kernel --flash /dev/sdb # Rebuild binary/initramfs, reuse kernel source# ./build-and-flash.sh --skip-binary --flash /dev/sdb # Reuse binary, rebuild initramfs+kernel## Requirements: cpio lz4 jq musl-gcc (or gcc) libdrm-devel alsa-lib-devel# mtools (for --flash)
set -euo pipefail
RED='\033[0;31m'GREEN='\033[0;32m'YELLOW='\033[1;33m'NC='\033[0m'
log() { echo -e "${GREEN}[build]${NC} $*"; }warn() { echo -e "${YELLOW}[build]${NC} $*"; }err() { echo -e "${RED}[build]${NC} $*" >&2; }
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"NATIVE_DIR="$(dirname "${SCRIPT_DIR}")"BUILD_DIR="${NATIVE_DIR}/build"KERNEL_DIR="${NATIVE_DIR}/kernel"
FLASH_DEV=""SKIP_KERNEL=0SKIP_BINARY=0USE_SDL=1PIECE_PATH="${NATIVE_DIR}/pieces/prompt.mjs"KERNEL_VERSION="${KERNEL_VERSION:-6.14.2}"HANDLE="${AC_HANDLE:-jeffrey}"HANDLE_COLORS_API="${HANDLE_COLORS_API:-https://aesthetic.computer/.netlify/functions/handle-colors}"
while [ $# -gt 0 ]; do case "$1" in --flash) FLASH_DEV="$2"; shift 2 ;; --skip-kernel) SKIP_KERNEL=1; shift ;; --skip-binary) SKIP_BINARY=1; shift ;; --sdl) USE_SDL=1; shift ;; --piece) PIECE_PATH="$2"; shift 2 ;; --handle) HANDLE="$2"; shift 2 ;; --help|-h) echo "Usage: $0 [--flash /dev/sdX] [--skip-kernel] [--skip-binary] [--sdl] [--piece path.mjs] [--handle your-handle]" exit 0 ;; *) err "Unknown option: $1"; exit 1 ;; esacdone
mkdir -p "${BUILD_DIR}"
# ============================================================# Step 1: Check dependencies# ============================================================log "Checking dependencies..."
# Auto-install required packages if missing (Fedora/dnf)if command -v dnf &>/dev/null; then PKGS_NEEDED="" # Build tools command -v cpio &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} cpio" command -v lz4 &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} lz4" command -v bc &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} bc" command -v perl &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} perl" command -v make &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} make" command -v curl &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} curl" command -v jq &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} jq" # Kernel build headers [ -f /usr/include/libelf.h ] || PKGS_NEEDED="${PKGS_NEEDED} elfutils-libelf-devel" [ -f /etc/pki/tls/certs/ca-bundle.crt ] || PKGS_NEEDED="${PKGS_NEEDED} ca-certificates" # Native binary deps pkg-config --exists alsa 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} alsa-lib-devel" pkg-config --exists libdrm 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} libdrm-devel" [ -f /usr/include/flite/flite.h ] || PKGS_NEEDED="${PKGS_NEEDED} flite-devel" # WiFi tools + firmware command -v wpa_supplicant &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} wpa_supplicant" command -v dhclient &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} dhcp-client" command -v iw &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} iw" [ -d /lib/firmware ] && ls /lib/firmware/iwlwifi-cc-a0-* &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} iwlwifi-mvm-firmware" [ -f /lib/firmware/regulatory.db ] || PKGS_NEEDED="${PKGS_NEEDED} wireless-regdb" # SDL3 for GPU-accelerated display pkg-config --exists sdl3 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} SDL3-devel" # ffmpeg libs for video recording pkg-config --exists libavcodec 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} ffmpeg-free-devel" # Flash tools if [ -n "${FLASH_DEV}" ]; then command -v mmd &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} mtools" command -v mkfs.vfat &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} dosfstools" fi
if [ -n "${PKGS_NEEDED}" ]; then log "Installing missing packages:${PKGS_NEEDED}" sudo dnf install -y ${PKGS_NEEDED} || err "Failed to install packages" fifi
MISSING=""for cmd in cpio lz4 make curl jq bc perl; do command -v "$cmd" &>/dev/null || MISSING="${MISSING} ${cmd}"doneif [ -n "${MISSING}" ]; then err "Missing required tools:${MISSING}" exit 1fiif [ -n "${FLASH_DEV}" ]; then for cmd in mmd mcopy mkfs.vfat sfdisk; do command -v "$cmd" &>/dev/null || MISSING="${MISSING} ${cmd}" done if [ -n "${MISSING}" ]; then err "Missing flash tools:${MISSING}" exit 1 fifi
# ============================================================# Step 2: Build ac-native binary (static, musl)# ============================================================if [ "${SKIP_BINARY}" -eq 0 ]; then log "Building ac-native binary..." cd "${NATIVE_DIR}" CC_USE="${CC:-}" if [ -z "${CC_USE}" ]; then # Use musl-gcc for static linking only if it has linux/input.h if command -v musl-gcc &>/dev/null \ && echo '#include <linux/input.h>' | musl-gcc -E -x c - &>/dev/null; then CC_USE=musl-gcc else CC_USE=gcc fi fi MAKE_ARGS="CC=${CC_USE}" if [ "${USE_SDL}" -eq 1 ]; then MAKE_ARGS="${MAKE_ARGS} USE_SDL=1" fi # Only request static linking when using musl-gcc (gcc needs .so files) if [ "${CC_USE}" = "musl-gcc" ]; then MAKE_ARGS="${MAKE_ARGS} STATIC=1" fi make ${MAKE_ARGS} log "Binary: $(wc -c < "${BUILD_DIR}/ac-native") bytes"else log "Skipping binary build"fi
if [ ! -f "${BUILD_DIR}/ac-native" ]; then err "ac-native binary not found. Run without --skip-binary." exit 1fi
# ============================================================# Step 3: Create initramfs# ============================================================log "Creating initramfs..."INITRAMFS_DIR="${BUILD_DIR}/initramfs-root"
# Preserve piece.mjs if it exists and no --piece overrideif [ -f "${INITRAMFS_DIR}/piece.mjs" ] && [ "${PIECE_PATH}" = "${INITRAMFS_DIR}/piece.mjs" ]; then PIECE_CONTENT="$(cat "${INITRAMFS_DIR}/piece.mjs")"fi
rm -rf "${INITRAMFS_DIR}"mkdir -p "${INITRAMFS_DIR}"/{dev,proc,sys,tmp,mnt}
# Copy binarycp "${BUILD_DIR}/ac-native" "${INITRAMFS_DIR}/ac-native"chmod +x "${INITRAMFS_DIR}/ac-native"
# Copy pieceif [ -n "${PIECE_CONTENT:-}" ]; then echo "${PIECE_CONTENT}" > "${INITRAMFS_DIR}/piece.mjs"elif [ -f "${PIECE_PATH}" ]; then cp "${PIECE_PATH}" "${INITRAMFS_DIR}/piece.mjs"else err "No piece.mjs found at ${PIECE_PATH}" exit 1fi
# Copy all pieces to /pieces/ for system.jump() navigationPIECES_SRC="${NATIVE_DIR}/pieces"if [ -d "${PIECES_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/pieces" for p in "${PIECES_SRC}"/*.mjs; do [ -f "$p" ] && cp "$p" "${INITRAMFS_DIR}/pieces/" done log "Bundled pieces: $(ls "${INITRAMFS_DIR}/pieces/" | tr '\n' ' ')"fi
# Spatial rehearsal ships with its deterministic routing library and scores.# Seat assignment comes from the LAN controller, or from the command line# (spatial-rehearsal:<seat>) for one laptop alone; nothing per-machine is baked.# The baked default score is the CultureHub piece, Note(s)pat(ial) Native.mkdir -p "${INITRAMFS_DIR}/lib" "${INITRAMFS_DIR}/scores"cp "${NATIVE_DIR}/lib/spatial-rehearsal.mjs" "${INITRAMFS_DIR}/lib/"# Aesel's Claude bridge translator (pieces/aesel.mjs imports it from /lib).cp "${NATIVE_DIR}/lib/aesel-bridge.mjs" "${INITRAMFS_DIR}/lib/"cp "${NATIVE_DIR}/lib/aesel-ac.mjs" "${INITRAMFS_DIR}/lib/"cp "${NATIVE_DIR}/scores/"*.nsscore "${INITRAMFS_DIR}/scores/"cp "${NATIVE_DIR}/scores/notespatial-native.nsscore" "${INITRAMFS_DIR}/pieces/spatial-rehearsal.nsscore"
# Copy web pieces that run unmodified on native (Wave 1 + clock)AC_DISKS_DIR="${NATIVE_DIR}/../../system/public/aesthetic.computer/disks"for web_piece in clock.mjs 3x3.mjs 404.mjs beat.mjs brick-breaker.mjs \ dync.mjs error.mjs gostop.mjs hop.mjs shh.mjs chart.mjs \ f3ral3xp.mjs hw.mjs ptt.mjs; do [ -f "${AC_DISKS_DIR}/${web_piece}" ] && cp "${AC_DISKS_DIR}/${web_piece}" "${INITRAMFS_DIR}/pieces/"donelog "Bundled web pieces: $(ls "${INITRAMFS_DIR}/pieces/" | grep -c '.mjs') total"
# 🎹 Copy piano sample bank into /samples/piano/ for the C-side audio# engine to load at startup (audio.c: load_piano_bank). Each .raw is a# header-less stream of float32 mono samples at 48kHz; filename is the# anchor MIDI note number (e.g. 60.raw = C4). The pre-build script# scripts/prep-piano-samples.sh decimates the full Salamander Grand# Piano V3 SFZ to these anchor pitches. Total ~14 MB at 26 anchors.SAMPLES_SRC="${NATIVE_DIR}/samples/piano"if [ -d "${SAMPLES_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/samples/piano" cp "${SAMPLES_SRC}"/*.raw "${INITRAMFS_DIR}/samples/piano/" 2>/dev/null || true sample_count=$(ls "${INITRAMFS_DIR}/samples/piano/"*.raw 2>/dev/null | wc -l | tr -d ' ') sample_size=$(du -sh "${INITRAMFS_DIR}/samples/piano/" 2>/dev/null | cut -f1) log "Bundled piano samples: ${sample_count} anchors, ${sample_size}"fi
# Copy shared JS libraries needed by pieces (pure JS, no browser deps)AC_LIB_DIR="${NATIVE_DIR}/../../system/public/aesthetic.computer/lib"mkdir -p "${INITRAMFS_DIR}/lib"for lib_file in melody-parser.mjs notepat-convert.mjs note-colors.mjs; do if [ -f "${AC_LIB_DIR}/${lib_file}" ]; then cp "${AC_LIB_DIR}/${lib_file}" "${INITRAMFS_DIR}/lib/" fidonelog "Bundled JS libs: $(ls "${INITRAMFS_DIR}/lib/"*.mjs 2>/dev/null | xargs -n1 basename | tr '\n' ' ')"
# Bundle initramfs scripts (upload-log.sh etc.)SCRIPTS_SRC="${NATIVE_DIR}/initramfs-scripts"if [ -d "${SCRIPTS_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/scripts" cp "${SCRIPTS_SRC}"/*.sh "${INITRAMFS_DIR}/scripts/" 2>/dev/null || true chmod +x "${INITRAMFS_DIR}/scripts/"*.sh 2>/dev/null || truefi
# Bake default config.json into initramfs (handle + colors)# This ensures "hi @handle" shows even without USB flash path or /mnt/config.jsonHANDLE_CLEAN="${HANDLE#@}"[ -z "${HANDLE_CLEAN}" ] && HANDLE_CLEAN="jeffrey"INITRAMFS_CONFIG="${INITRAMFS_DIR}/default-config.json"COLORS_JSON=""if [ -n "${HANDLE_CLEAN}" ]; then HANDLE_URI="$(printf '%s' "${HANDLE_CLEAN}" | jq -sRr @uri 2>/dev/null || echo "${HANDLE_CLEAN}")" COLORS_RESP="$(curl -fsSL --connect-timeout 5 --max-time 12 \ "${HANDLE_COLORS_API}?handle=${HANDLE_URI}" 2>/dev/null || true)" if [ -n "${COLORS_RESP}" ]; then COLORS_JSON="$(printf '%s' "${COLORS_RESP}" | jq -c '.colors // empty' 2>/dev/null || true)" [ "${COLORS_JSON}" = "null" ] && COLORS_JSON="" fifiif [ -n "${COLORS_JSON}" ] && printf '%s' "${COLORS_JSON}" | jq -e 'type == "array"' >/dev/null 2>&1; then jq -cn --arg handle "${HANDLE_CLEAN}" --argjson colors "${COLORS_JSON}" \ '{handle:$handle, colors:$colors}' > "${INITRAMFS_CONFIG}" log "Baked config.json (handle: ${HANDLE_CLEAN}, colors: $(printf '%s' "${COLORS_JSON}" | jq 'length'))"else jq -cn --arg handle "${HANDLE_CLEAN}" '{handle:$handle}' > "${INITRAMFS_CONFIG}" log "Baked config.json (handle: ${HANDLE_CLEAN}, no colors)"fi
# KidLisp bundling is handled by ac-os (runs as user, has npx in PATH).# build-and-flash.sh runs under sudo where npx is unavailable.mkdir -p "${INITRAMFS_DIR}/jslib"
# Always create lib64 — even if ac-native is static, other bundled tools# (curl, iw, wpa_supplicant, busybox, git, jq) are dynamically linked.mkdir -p "${INITRAMFS_DIR}/lib64"
# Copy shared libs (if dynamic build)if file "${BUILD_DIR}/ac-native" | grep -q "dynamically linked"; then log "Copying shared libraries for dynamic binary..." for lib in $(ldd "${BUILD_DIR}/ac-native" | grep -oP '/\S+'); do [ -f "$lib" ] && cp -L "$lib" "${INITRAMFS_DIR}/lib64/" done # Symlink /lib -> /lib64 (some lookups use /lib) ln -sf lib64 "${INITRAMFS_DIR}/lib"fi
# Copy SDL3 + Mesa GPU libraries (if --sdl)if [ "${USE_SDL}" -eq 1 ]; then log "Bundling SDL3 + Mesa GPU stack..." mkdir -p "${INITRAMFS_DIR}/lib64/dri"
# SDL3 (direct, no sdl2-compat shim) for lib in libSDL3.so.0; do src=$(readlink -f "/usr/lib64/${lib}" 2>/dev/null) [ -f "$src" ] && cp -L "$src" "${INITRAMFS_DIR}/lib64/${lib}" done
# EGL + GLES + GBM (dlopen'd by SDL3 KMSDRM backend) for lib in libEGL.so.1 libEGL_mesa.so.0 libGLESv2.so.2 libgbm.so.1 libGL.so.1 libGLX_mesa.so.0 libGLdispatch.so.0 libglapi.so.0; do src=$(readlink -f "/usr/lib64/${lib}" 2>/dev/null) [ -f "$src" ] && cp -nL "$src" "${INITRAMFS_DIR}/lib64/${lib}" 2>/dev/null done
# Mesa gallium (monolithic driver — contains iris/i915/swrast) GALLIUM=$(ls /usr/lib64/libgallium-*.so 2>/dev/null | head -1) [ -f "$GALLIUM" ] && cp "$GALLIUM" "${INITRAMFS_DIR}/lib64/"
# DRI driver stubs (Mesa loads these, which then load libgallium) for drv in iris_dri.so i915_dri.so kms_swrast_dri.so swrast_dri.so libdril_dri.so; do src="/usr/lib64/dri/${drv}" if [ -L "$src" ]; then tgt=$(readlink "$src") ln -sf "$tgt" "${INITRAMFS_DIR}/lib64/dri/${drv}" elif [ -f "$src" ]; then cp "$src" "${INITRAMFS_DIR}/lib64/dri/" fi done
# GBM backend loader plugin — libgbm has a hardcoded /usr/lib64/gbm # path. Missing dri_gbm.so causes SIGSEGV during Mesa probe on boot. if [ -f /usr/lib64/gbm/dri_gbm.so ]; then mkdir -p "${INITRAMFS_DIR}/lib64/gbm" "${INITRAMFS_DIR}/usr/lib64/gbm" cp /usr/lib64/gbm/dri_gbm.so "${INITRAMFS_DIR}/lib64/gbm/" cp /usr/lib64/gbm/dri_gbm.so "${INITRAMFS_DIR}/usr/lib64/gbm/" fi
# libexpat (needed by Mesa DRI loader) for lib in libexpat.so.1; do src=$(readlink -f "/usr/lib64/${lib}" 2>/dev/null) [ -f "$src" ] && cp -nL "$src" "${INITRAMFS_DIR}/lib64/${lib}" 2>/dev/null done
GPU_SIZE=$(du -sh "${INITRAMFS_DIR}/lib64/libgallium"* "${INITRAMFS_DIR}/lib64/libSDL"* "${INITRAMFS_DIR}/lib64/libEGL"* "${INITRAMFS_DIR}/lib64/dri/" 2>/dev/null | tail -1 | cut -f1) log "SDL3 + Mesa GPU stack bundled (gallium: $(du -sh "${GALLIUM}" 2>/dev/null | cut -f1))"fi
# Copy ALSA config files (required for snd_pcm_open to resolve device names)if [ -d "/usr/share/alsa" ]; then log "Copying ALSA config files..." mkdir -p "${INITRAMFS_DIR}/usr/share/alsa" cp -r /usr/share/alsa/* "${INITRAMFS_DIR}/usr/share/alsa/" log "ALSA config: $(du -sh "${INITRAMFS_DIR}/usr/share/alsa" | cut -f1)"else warn "No /usr/share/alsa found — audio may not work"fi
# Copy WiFi components (wpa_supplicant, dhclient, iw, ip, firmware)# Resolve actual binary paths (location varies by distro: /usr/sbin vs /usr/bin)resolve_bin() { command -v "$1" 2>/dev/null || true; }WIFI_BINS=( "$(resolve_bin wpa_supplicant)" "$(resolve_bin wpa_cli)" "$(resolve_bin dhclient)" "$(resolve_bin iw)" "$(resolve_bin ip)")WIFI_COPIED=0for bin in "${WIFI_BINS[@]}"; do if [ -f "$bin" ]; then mkdir -p "${INITRAMFS_DIR}/$(dirname "$bin")" cp "$bin" "${INITRAMFS_DIR}${bin}" chmod +x "${INITRAMFS_DIR}${bin}" WIFI_COPIED=$((WIFI_COPIED + 1)) # Copy their shared libraries too for lib in $(ldd "$bin" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done fidoneif [ "${WIFI_COPIED}" -gt 0 ]; then log "WiFi binaries: ${WIFI_COPIED} copied"
# Copy Intel WiFi firmware (only latest version per card to save space) # 9260 = 9260-th-b0-jf-b0, AX200 = cc-a0, AX201 = QuZ-a0-hr-b0 / QuZ-a0-jf-b0 mkdir -p "${INITRAMFS_DIR}/lib/firmware" # Regulatory database (required for WiFi scanning) for rdb in regulatory.db regulatory.db.p7s; do [ -f "/lib/firmware/$rdb" ] && cp "/lib/firmware/$rdb" "${INITRAMFS_DIR}/lib/firmware/" done for pattern in "iwlwifi-9260-th-b0-jf-b0-*" "iwlwifi-cc-a0-*" "iwlwifi-QuZ-a0-hr-b0-*" "iwlwifi-QuZ-a0-jf-b0-*"; do # Get the latest (highest version number) firmware file fw=$(ls -v /lib/firmware/${pattern}.ucode* 2>/dev/null | tail -1 || true) if [ -n "$fw" ] && [ -f "$fw" ]; then dest="${INITRAMFS_DIR}/lib/firmware/$(basename "${fw%.xz}")" xz -dk "$fw" -c > "$dest" 2>/dev/null || cp "$fw" "$dest" log " firmware: $(basename "$dest") ($(du -sh "$dest" | cut -f1))" fi done FW_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware" 2>/dev/null | cut -f1) log "WiFi firmware: ${FW_SIZE:-0}"
# Copy extra firmware blobs from source tree (i915 GPU, Intel SOF audio, etc.) EXTRA_FW_DIR="${SCRIPT_DIR}/../firmware" if [ -d "${EXTRA_FW_DIR}" ]; then cp -r "${EXTRA_FW_DIR}/"* "${INITRAMFS_DIR}/lib/firmware/" 2>/dev/null || true EXTRA_FW_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware" 2>/dev/null | cut -f1) log "Total firmware (with source tree blobs): ${EXTRA_FW_SIZE}" fi
# Copy ALL i915 GPU firmware from host (supports Kaby Lake, Coffee Lake, etc.) # The source tree only has MTL/ARL blobs; the oven has firmware for all generations. if [ -d "/lib/firmware/i915" ]; then mkdir -p "${INITRAMFS_DIR}/lib/firmware/i915" I915_COUNT=0 for fw in /lib/firmware/i915/*; do [ -f "$fw" ] || continue dest="${INITRAMFS_DIR}/lib/firmware/i915/$(basename "${fw%.xz}")" dest="${dest%.zst}" if [ ! -f "$dest" ]; then case "$fw" in *.xz) xz -dk "$fw" -c > "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *.zst) zstd -d "$fw" -o "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *) cp "$fw" "$dest" ;; esac I915_COUNT=$((I915_COUNT + 1)) fi done log " i915 firmware: ${I915_COUNT} new blobs from /lib/firmware/i915/" fi
# Copy Intel SOF audio firmware from host (topology + IPC files) for sof_dir in /lib/firmware/intel/sof /lib/firmware/intel/sof-ipc4 \ /lib/firmware/intel/sof-tplg /lib/firmware/intel/sof-ipc4-tplg; do if [ -d "$sof_dir" ]; then dest_dir="${INITRAMFS_DIR}/lib/firmware/intel/$(basename "$sof_dir")" mkdir -p "$dest_dir" for fw in "$sof_dir"/*; do [ -f "$fw" ] || continue dest="$dest_dir/$(basename "${fw%.xz}")" dest="${dest%.zst}" if [ ! -f "$dest" ]; then case "$fw" in *.xz) xz -dk "$fw" -c > "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *.zst) zstd -d "$fw" -o "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *) cp "$fw" "$dest" ;; esac fi done fi done SOF_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware/intel" 2>/dev/null | cut -f1 || true) log " Intel SOF audio firmware: ${SOF_SIZE:-none}"
TOTAL_FW_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware" 2>/dev/null | cut -f1) log "Total firmware (all generations): ${TOTAL_FW_SIZE}"
# Copy flite TTS libraries (core + slt female + kal male voices) for flib in libflite.so.2.2 libflite_cmulex.so.2.2 libflite_usenglish.so.2.2 libflite_cmu_us_slt.so.2.2 libflite_cmu_us_kal.so.2.2; do src="" for dir in /usr/lib64 /usr/lib/x86_64-linux-gnu; do [ -f "${dir}/${flib}" ] && src="${dir}/${flib}" && break done if [ -n "$src" ]; then cp "$src" "${INITRAMFS_DIR}/lib64/" # Create soname symlinks ln -sf "$flib" "${INITRAMFS_DIR}/lib64/$(echo $flib | sed 's/\.so\..*/\.so/')" 2>/dev/null || true fi done FLITE_SIZE=$(du -sh "${INITRAMFS_DIR}/lib64/libflite"* 2>/dev/null | tail -1 | cut -f1 || true) log "Flite TTS: ${FLITE_SIZE:-not found}"
# Create /var/run for wpa_supplicant mkdir -p "${INITRAMFS_DIR}/var/run/wpa_supplicant"
# Minimal dhclient-script: configure interface after DHCP lease obtained # dhclient requires this at /sbin/dhclient-script (or via -sf flag) mkdir -p "${INITRAMFS_DIR}/sbin" cat > "${INITRAMFS_DIR}/sbin/dhclient-script" << 'DHCLIENT_SCRIPT'#!/bin/sh# Minimal dhclient hook for ac-native bare metalcase "$reason" in BOUND|RENEW|REBIND|REBOOT) ip addr flush dev "$interface" 2>/dev/null ip addr add "$new_ip_address/$new_subnet_mask" dev "$interface" 2>/dev/null [ -n "$new_routers" ] && ip route add default via "$new_routers" dev "$interface" 2>/dev/null mkdir -p /etc { # Use DHCP-provided DNS if available, always add public fallbacks [ -n "$new_domain_name_servers" ] && printf 'nameserver %s\n' $new_domain_name_servers printf 'nameserver 8.8.8.8\nnameserver 1.1.1.1\n' } > /etc/resolv.conf echo "[dhclient] BOUND $interface ip=$new_ip_address dns=$new_domain_name_servers" >> /tmp/dhclient.log ;; EXPIRE|FAIL|RELEASE|STOP) ip addr flush dev "$interface" 2>/dev/null echo "[dhclient] $reason $interface" >> /tmp/dhclient.log ;;esacexit 0DHCLIENT_SCRIPT chmod +x "${INITRAMFS_DIR}/sbin/dhclient-script" log "dhclient-script: installed"
# Need /bin/sh for system() calls — use busybox or link to bash if available mkdir -p "${INITRAMFS_DIR}/bin" if command -v busybox &>/dev/null; then cp "$(command -v busybox)" "${INITRAMFS_DIR}/bin/busybox" ln -sf busybox "${INITRAMFS_DIR}/bin/sh" for lib in $(ldd "$(command -v busybox)" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done # Busybox applet symlinks — covers find, cp, mv, rm, ln, wc, tail, sort, # uniq, tr, tee, xargs, diff, stat, ps, tar, gzip, touch, env, basename, # dirname, expr, test, printf, date, dd, df, du, echo, true, false, etc. for cmd in find cp mv rm ln wc tail sort uniq tr tee xargs diff stat ps \ tar gzip gunzip touch env basename dirname expr test printf \ date dd df du echo true false readlink mktemp vi hostname \ id whoami chown rmdir realpath seq yes nohup md5sum sha256sum; do ln -sf busybox "${INITRAMFS_DIR}/bin/${cmd}" 2>/dev/null || true done log " busybox: $(du -sh "${INITRAMFS_DIR}/bin/busybox" | cut -f1) ($(ls "${INITRAMFS_DIR}/bin/" | wc -l) symlinks)" elif [ -f /bin/bash ]; then cp /bin/bash "${INITRAMFS_DIR}/bin/sh" for lib in $(ldd /bin/bash 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done fi
# Claude Code needs /bin/bash — symlink to sh (busybox ash is close enough) [ -f "${INITRAMFS_DIR}/bin/sh" ] && ln -sf sh "${INITRAMFS_DIR}/bin/bash"
# BPF trace tool (if built) BPF_TRACE="${NATIVE_DIR}/bpf/ac-trace" if [ -f "${BPF_TRACE}" ]; then cp "${BPF_TRACE}" "${INITRAMFS_DIR}/bin/ac-trace" chmod +x "${INITRAMFS_DIR}/bin/ac-trace" log " ac-trace: $(du -sh "${INITRAMFS_DIR}/bin/ac-trace" | cut -f1)" fi
# Symlink WiFi binaries into /bin/ so system() calls find them via PATH for bin in "${WIFI_BINS[@]}"; do bname="$(basename "$bin")" [ -f "${INITRAMFS_DIR}${bin}" ] && ln -sf "$bin" "${INITRAMFS_DIR}/bin/${bname}" 2>/dev/null || true done
# Need basic utilities for shell commands (grep, awk, pgrep, killall, ls, rfkill, curl, etc.) # efibootmgr: sets UEFI boot order after OTA flash (prevents stale vendor boot entries) for util in grep awk sed pgrep killall cat ls head cut rfkill which curl sleep mkdir chmod sfdisk mkfs.vfat efibootmgr; do UTIL_PATH="$(command -v "$util" 2>/dev/null || true)" if [ -n "$UTIL_PATH" ] && [ -f "$UTIL_PATH" ]; then cp "$UTIL_PATH" "${INITRAMFS_DIR}/bin/" for lib in $(ldd "$UTIL_PATH" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done fi doneelse warn "No WiFi binaries found — WiFi will not work"fi
# ── SSH daemon (dropbear) for remote access ──DROPBEAR_BIN="$(command -v dropbear 2>/dev/null || true)"DROPBEARKEY_BIN="$(command -v dropbearkey 2>/dev/null || true)"if [ -n "$DROPBEAR_BIN" ] && [ -n "$DROPBEARKEY_BIN" ]; then log "Bundling dropbear SSH daemon..." mkdir -p "${INITRAMFS_DIR}/usr/sbin" "${INITRAMFS_DIR}/etc/dropbear" cp "$DROPBEAR_BIN" "${INITRAMFS_DIR}/usr/sbin/dropbear" cp "$DROPBEARKEY_BIN" "${INITRAMFS_DIR}/usr/sbin/dropbearkey" chmod +x "${INITRAMFS_DIR}/usr/sbin/dropbear" "${INITRAMFS_DIR}/usr/sbin/dropbearkey" ln -sf /usr/sbin/dropbear "${INITRAMFS_DIR}/bin/dropbear" 2>/dev/null || true ln -sf /usr/sbin/dropbearkey "${INITRAMFS_DIR}/bin/dropbearkey" 2>/dev/null || true for lib in $(ldd "$DROPBEAR_BIN" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done # Create passwd/group so dropbear can resolve uid 0 echo "root:x:0:0:root:/:/bin/sh" > "${INITRAMFS_DIR}/etc/passwd" echo "root:x:0:" > "${INITRAMFS_DIR}/etc/group" log " dropbear: $(du -sh "${INITRAMFS_DIR}/usr/sbin/dropbear" | cut -f1)"else warn "dropbear not found — SSH remote access not available"fi
# ── Claude Code utilities (git, ripgrep, jq, ssh) ──# These tools make Claude Code significantly more capable on the device.for util in git rg jq ssh; do UTIL_PATH="$(command -v "$util" 2>/dev/null || true)" if [ -n "$UTIL_PATH" ] && [ -f "$UTIL_PATH" ]; then cp "$UTIL_PATH" "${INITRAMFS_DIR}/bin/${util}" for lib in $(ldd "$UTIL_PATH" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " ${util}: $(du -sh "${INITRAMFS_DIR}/bin/${util}" | cut -f1)" else warn "${util} not found — Claude Code will have reduced capability" fidone
# ── Claude Code native binary ──# Download or use cached Bun SEA binary (no Node.js required on device)CLAUDE_CACHE="${BUILD_DIR}/claude-native"CLAUDE_GCS="https://storage.googleapis.com/claude-code-dist-86c565f3-f756-42ad-8dfa-d59b1c096819/claude-code-releases"if [ ! -f "${CLAUDE_CACHE}" ] || [ "$(find "${CLAUDE_CACHE}" -mtime +7 2>/dev/null)" ]; then CLAUDE_VER=$(curl -fsSL "${CLAUDE_GCS}/latest" 2>/dev/null || true) if [ -n "${CLAUDE_VER}" ]; then log "Downloading Claude Code ${CLAUDE_VER}..." curl -fsSL "${CLAUDE_GCS}/${CLAUDE_VER}/linux-x64/claude" -o "${CLAUDE_CACHE}.tmp" && \ mv "${CLAUDE_CACHE}.tmp" "${CLAUDE_CACHE}" && \ chmod +x "${CLAUDE_CACHE}" fifiif [ -f "${CLAUDE_CACHE}" ]; then cp "${CLAUDE_CACHE}" "${INITRAMFS_DIR}/bin/claude" chmod +x "${INITRAMFS_DIR}/bin/claude" # DO NOT strip — Bun SEA binary; stripping destroys embedded JS for lib in $(ldd "${CLAUDE_CACHE}" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " claude: $(du -sh "${INITRAMFS_DIR}/bin/claude" | cut -f1) (native binary)"else warn "Claude Code binary not available — Claude will not work on device"fi
# Git credential helper — reads GitHub PAT from /github-pat (baked by ac-os)cat > "${INITRAMFS_DIR}/bin/git-credential-ac" << 'GIT_CRED'#!/bin/sh# Serves GitHub PAT for git HTTPS auth on AC Native OScase "$1" in get) while IFS= read -r line; do case "$line" in host=github.com*) ;; *) continue ;; esac done [ -f /github-pat ] || exit 1 echo "protocol=https" echo "host=github.com" echo "username=x-access-token" printf "password=%s\n" "$(cat /github-pat | tr -d '\n')" ;;esacGIT_CREDchmod +x "${INITRAMFS_DIR}/bin/git-credential-ac"
# Copy CA trust bundle for HTTPS curl calls (OS update/clock/version checks).CA_BUNDLE_SRC=""for p in /etc/pki/tls/certs/ca-bundle.crt /etc/ssl/certs/ca-certificates.crt; do if [ -f "$p" ]; then CA_BUNDLE_SRC="$p" break fidoneif [ -n "${CA_BUNDLE_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/etc/pki/tls/certs" \ "${INITRAMFS_DIR}/etc/pki/tls" \ "${INITRAMFS_DIR}/etc/ssl/certs" cp "${CA_BUNDLE_SRC}" "${INITRAMFS_DIR}/etc/pki/tls/certs/ca-bundle.crt" cp "${CA_BUNDLE_SRC}" "${INITRAMFS_DIR}/etc/pki/tls/cert.pem" cp "${CA_BUNDLE_SRC}" "${INITRAMFS_DIR}/etc/ssl/certs/ca-certificates.crt" log "CA bundle installed: /etc/pki/tls/certs/ca-bundle.crt"else warn "No CA bundle found — HTTPS fetches may fail"fi
# Bundle ac-native's own shared library dependencies (needed when built dynamically)# Copies each .so to its canonical path inside initramfs, preserving directory structureif [ -f "${BUILD_DIR}/ac-native" ]; then for lib in $(ldd "${BUILD_DIR}/ac-native" 2>/dev/null | grep -oP '/[^ ()]+\.so[^ ()]*'); do [ -f "$lib" ] || continue dest_dir="${INITRAMFS_DIR}$(dirname "$lib")" mkdir -p "$dest_dir" cp -n "$lib" "$dest_dir/" 2>/dev/null || true # Also create unversioned .so symlink so dlopen() finds it base="$(basename "$lib")" novers="$(echo "$base" | sed 's/\.so\..*/\.so/')" [ "$novers" != "$base" ] && ln -sf "$base" "$dest_dir/$novers" 2>/dev/null || true done log "Bundled $(ldd "${BUILD_DIR}/ac-native" 2>/dev/null | grep -c '\.so') shared libs"fi
# ── Wayland compositor stack (cage + seatd + Mesa GPU) ──# cage: Wayland kiosk compositor — runs ac-native as a Wayland client# seatd: seat daemon required by wlroots/cage for DRM access# These enable browser popups (OAuth), GPU acceleration, and multi-client Wayland.CAGE_BIN="$(command -v cage 2>/dev/null || true)"SEATD_BIN="$(command -v seatd 2>/dev/null || true)"
if [ -n "${CAGE_BIN}" ] && [ -f "${CAGE_BIN}" ]; then log "Bundling cage Wayland compositor..." cp "${CAGE_BIN}" "${INITRAMFS_DIR}/bin/cage" chmod +x "${INITRAMFS_DIR}/bin/cage" for lib in $(ldd "${CAGE_BIN}" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " cage: $(du -sh "${INITRAMFS_DIR}/bin/cage" | cut -f1)"else warn "cage not installed — Wayland compositor unavailable"fi
if [ -n "${SEATD_BIN}" ] && [ -f "${SEATD_BIN}" ]; then cp "${SEATD_BIN}" "${INITRAMFS_DIR}/bin/seatd" chmod +x "${INITRAMFS_DIR}/bin/seatd" for lib in $(ldd "${SEATD_BIN}" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " seatd: $(du -sh "${INITRAMFS_DIR}/bin/seatd" | cut -f1)"else warn "seatd not installed — seat daemon unavailable"fi
# Mesa GPU stack (EGL, GBM, DRI drivers) — needed for cage/Wayland GPU rendering# Search both Fedora (/usr/lib64/) and Debian (/usr/lib/x86_64-linux-gnu/) pathsfind_lib() { for dir in /usr/lib64 /usr/lib/x86_64-linux-gnu; do local f="${dir}/$1" [ -f "$f" ] && echo "$f" && return 0 f="$(readlink -f "${dir}/$1" 2>/dev/null || true)" [ -f "$f" ] && echo "$f" && return 0 done return 0 # not found is OK}find_dri() { for dir in /usr/lib64/dri /usr/lib/x86_64-linux-gnu/dri; do [ -e "${dir}/$1" ] && echo "${dir}/$1" && return 0 done return 0 # not found is OK}
log "Bundling Mesa GPU + Wayland libs..."mkdir -p "${INITRAMFS_DIR}/lib64/dri"
for lib in libEGL.so.1 libEGL_mesa.so.0 libGLESv2.so.2 libgbm.so.1 libGL.so.1 \ libGLX_mesa.so.0 libGLdispatch.so.0 libglapi.so.0 \ libwayland-client.so.0 libwayland-cursor.so.0 libwayland-egl.so.1 \ libwayland-server.so.0 libxkbcommon.so.0 libinput.so.10 \ libexpat.so.1 libffi.so.8; do src="$(find_lib "$lib")" if [ -n "$src" ] && [ -f "$src" ]; then cp -nL "$src" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true ln -sf "$(basename "$src")" "${INITRAMFS_DIR}/lib64/${lib}" 2>/dev/null || true fidone
# Mesa gallium (monolithic driver — contains iris/i915/swrast)GALLIUM=$(ls /usr/lib64/libgallium-*.so /usr/lib/x86_64-linux-gnu/libgallium-*.so 2>/dev/null | head -1 || true)[ -n "$GALLIUM" ] && [ -f "$GALLIUM" ] && cp "$GALLIUM" "${INITRAMFS_DIR}/lib64/"
# DRI driver stubsfor drv in iris_dri.so i915_dri.so kms_swrast_dri.so swrast_dri.so libdril_dri.so; do src="$(find_dri "$drv")" if [ -n "$src" ]; then if [ -L "$src" ]; then tgt=$(readlink "$src") # Copy the target file too tgt_full="$(dirname "$src")/$tgt" [ -f "$tgt_full" ] && cp -n "$tgt_full" "${INITRAMFS_DIR}/lib64/dri/" 2>/dev/null || true ln -sf "$tgt" "${INITRAMFS_DIR}/lib64/dri/${drv}" elif [ -f "$src" ]; then cp "$src" "${INITRAMFS_DIR}/lib64/dri/" fi fidone
GPU_SIZE=$(du -sh "${INITRAMFS_DIR}/lib64/dri" 2>/dev/null | cut -f1 || true)GALLIUM_SIZE=$([ -n "${GALLIUM:-}" ] && du -sh "$GALLIUM" 2>/dev/null | cut -f1 || echo "none")log " Mesa GPU: dri=${GPU_SIZE:-0} gallium=${GALLIUM_SIZE}"
# xkb keyboard data (needed for Wayland keyboard layout)for xkb_dir in /usr/share/X11/xkb /usr/share/xkb; do if [ -d "$xkb_dir" ]; then mkdir -p "${INITRAMFS_DIR}/usr/share/X11" cp -aL "$xkb_dir" "${INITRAMFS_DIR}/usr/share/X11/xkb" 2>/dev/null || \ cp -rL "$xkb_dir" "${INITRAMFS_DIR}/usr/share/X11/xkb" 2>/dev/null || true log " xkb: $(du -sh "${INITRAMFS_DIR}/usr/share/X11/xkb" 2>/dev/null | cut -f1)" break fidone
# Init: shell script that starts seatd + cage + ac-native (Wayland compositor mode)# Falls back to direct ac-native exec if cage is not availablecp "${SCRIPT_DIR}/../initramfs/init" "${INITRAMFS_DIR}/init"chmod +x "${INITRAMFS_DIR}/init"log "Init: cage+Wayland boot script installed"
# ── Resolve ALL transitive shared library dependencies ──# Individual binary copies above use ldd per-binary, but miss transitive deps# (e.g. libnl-genl-3.so needed by iw/wpa_supplicant, libcurl.so.4 needed by curl).# Run ldd on every ELF binary/lib in the initramfs and copy anything still missing.log "Resolving transitive shared library dependencies..."TRANS_COPIED=0for pass in 1 2; do # Find all ELF files (binaries + shared libs) in the initramfs NEEDS_COPY=0 while IFS= read -r elf_file; do [ -f "$elf_file" ] || continue # Skip non-ELF files (scripts, data) file "$elf_file" 2>/dev/null | grep -q "ELF" || continue for lib in $(ldd "$elf_file" 2>/dev/null | grep -oP '/[^ ()]+\.so[^ ()]*'); do [ -f "$lib" ] || continue base="$(basename "$lib")" # Check if already in lib64/ if [ ! -f "${INITRAMFS_DIR}/lib64/${base}" ]; then cp "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null && NEEDS_COPY=1 && TRANS_COPIED=$((TRANS_COPIED + 1)) # Also create unversioned .so symlink novers="$(echo "$base" | sed 's/\.so\..*/\.so/')" [ "$novers" != "$base" ] && ln -sf "$base" "${INITRAMFS_DIR}/lib64/$novers" 2>/dev/null || true fi # All libs go into lib64/ only — no canonical-path copies. # /lib is a symlink to lib64/, so duplicating into /lib/x86_64-linux-gnu/ # would create a real directory that shadows the symlink and wastes ~84 MB. done done < <(find "${INITRAMFS_DIR}" -type f \( -name "*.so*" -o -path "*/bin/*" -o -path "*/sbin/*" -o -path "*/usr/sbin/*" -o -name "ac-native" \) 2>/dev/null) # Second pass catches deps-of-deps; break early if nothing new was found [ "${NEEDS_COPY}" -eq 0 ] && breakdonelog "Transitive deps: ${TRANS_COPIED} additional libraries copied"
# ── Deduplicate shared libraries ──# The build copies libs into lib64/ (primary) but transitive deps and ldd# also populated lib/x86_64-linux-gnu/ with identical copies (~84 MB waste).# Replace duplicates with symlinks; keep lib64/ as the single source of truth.if [ -d "${INITRAMFS_DIR}/lib/x86_64-linux-gnu" ]; then DUP_SAVED=0 for dup in "${INITRAMFS_DIR}/lib/x86_64-linux-gnu/"*; do [ -f "$dup" ] || continue base="$(basename "$dup")" if [ -f "${INITRAMFS_DIR}/lib64/${base}" ]; then DUP_SIZE=$(wc -c < "$dup") rm "$dup" ln -sf "../../lib64/${base}" "$dup" DUP_SAVED=$((DUP_SAVED + DUP_SIZE)) fi done log "Deduplicated lib/x86_64-linux-gnu/: saved $((DUP_SAVED / 1048576)) MB"fi
# Ensure /lib64 is on the dynamic linker search pathmkdir -p "${INITRAMFS_DIR}/etc"echo "/lib64" > "${INITRAMFS_DIR}/etc/ld.so.conf"echo "/lib/x86_64-linux-gnu" >> "${INITRAMFS_DIR}/etc/ld.so.conf"
# Ensure /lib/x86_64-linux-gnu exists (Ubuntu binaries like iw link against this path)mkdir -p "${INITRAMFS_DIR}/lib/x86_64-linux-gnu"# Symlink all lib64 .so files into the Ubuntu canonical pathfor lib in "${INITRAMFS_DIR}/lib64/"*.so*; do [ -f "$lib" ] || continue base="$(basename "$lib")" [ ! -e "${INITRAMFS_DIR}/lib/x86_64-linux-gnu/${base}" ] && \ ln -sf "../../lib64/${base}" "${INITRAMFS_DIR}/lib/x86_64-linux-gnu/${base}" 2>/dev/null || truedone
# Generate initramfs manifest (for build parity verification between local/oven)cd "${INITRAMFS_DIR}"find . -type f -o -type l | sort | while IFS= read -r f; do if [ -L "$f" ]; then printf "L %s -> %s\n" "$f" "$(readlink "$f")" else printf "F %s %s\n" "$(wc -c < "$f")" "$f" fidone > "${BUILD_DIR}/initramfs-manifest.txt"cp "${BUILD_DIR}/initramfs-manifest.txt" "${INITRAMFS_DIR}/manifest.txt"MANIFEST_LINES=$(wc -l < "${BUILD_DIR}/initramfs-manifest.txt")log "Manifest: ${MANIFEST_LINES} entries (${BUILD_DIR}/initramfs-manifest.txt)"
# Fix broken symlinks (cp -n can leave self-referencing symlinks)log "Fixing broken symlinks in initramfs..."BROKEN_COUNT=0for broken in $(find "${INITRAMFS_DIR}/lib64/" -type l ! -exec test -e {} \; -print 2>/dev/null); do name=$(basename "$broken") # Find the real file on the host — search multiple paths real="" for search in /lib64 /usr/lib64 /usr/lib/x86_64-linux-gnu; do candidate="${search}/${name}" if [ -f "$candidate" ] && [ ! -L "$candidate" ]; then real="$candidate"; break elif [ -L "$candidate" ]; then # Follow the symlink chain manually target=$(readlink "$candidate" 2>/dev/null) if [ -n "$target" ] && [ -f "${search}/${target}" ]; then real="${search}/${target}"; break fi fi done if [ -n "$real" ] && [ -f "$real" ]; then rm -f "$broken" cp "$real" "$broken" BROKEN_COUNT=$((BROKEN_COUNT + 1)) else warn " Could not resolve: $name" fidone[ "$BROKEN_COUNT" -gt 0 ] && log " Fixed ${BROKEN_COUNT} broken symlinks"
# Create cpio + both compressed variants. See build-and-flash-initramfs.sh# for why — short version: upload/staging prefer .gz, so stale .gz from# an old build silently gets flashed/uploaded if we don't regenerate.INITRAMFS_CPIO="${BUILD_DIR}/initramfs.cpio"cd "${INITRAMFS_DIR}"find . -print0 | cpio --null -ov --format=newc > "${INITRAMFS_CPIO}" 2>/dev/nulllz4 -l -9 -f "${INITRAMFS_CPIO}" "${INITRAMFS_CPIO}.lz4"gzip -9 -c "${INITRAMFS_CPIO}" > "${INITRAMFS_CPIO}.gz"CPIO_SIZE=$(wc -c < "${INITRAMFS_CPIO}.lz4")GZ_SIZE=$(wc -c < "${INITRAMFS_CPIO}.gz")log "Initramfs: ${CPIO_SIZE} bytes (LZ4), ${GZ_SIZE} bytes (GZ)"
# ============================================================# Step 4: Build kernel with embedded initramfs# ============================================================KERNEL_SRC="${BUILD_DIR}/linux-${KERNEL_VERSION}"VMLINUZ="${BUILD_DIR}/vmlinuz"
if [ "${SKIP_KERNEL}" -eq 0 ] || [ ! -f "${VMLINUZ}" ]; then log "Building kernel ${KERNEL_VERSION} with embedded initramfs..."
# Download kernel source if needed KERNEL_TAR="${BUILD_DIR}/linux-${KERNEL_VERSION}.tar.xz" if [ ! -f "${KERNEL_TAR}" ]; then log "Downloading kernel..." curl -L "https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-${KERNEL_VERSION}.tar.xz" -o "${KERNEL_TAR}" fi if [ ! -d "${KERNEL_SRC}" ]; then log "Extracting kernel..." tar xf "${KERNEL_TAR}" -C "${BUILD_DIR}" fi
# Apply config cp "${KERNEL_DIR}/config-minimal" "${KERNEL_SRC}/.config"
# Ensure built-in firmware blobs exist (kernel embeds these via CONFIG_EXTRA_FIRMWARE) FIRMWARE_ABS="$(cd "${BUILD_DIR}" && pwd)/firmware" mkdir -p "${FIRMWARE_ABS}" for fw in iwlwifi-9260-th-b0-jf-b0-46.ucode iwlwifi-cc-a0-77.ucode iwlwifi-QuZ-a0-hr-b0-77.ucode iwlwifi-QuZ-a0-jf-b0-77.ucode; do if [ ! -f "${FIRMWARE_ABS}/${fw}" ]; then if [ -f "/lib/firmware/${fw}" ]; then cp "/lib/firmware/${fw}" "${FIRMWARE_ABS}/${fw}" elif [ -f "/lib/firmware/${fw}.zst" ]; then zstd -d "/lib/firmware/${fw}.zst" -o "${FIRMWARE_ABS}/${fw}" 2>/dev/null elif [ -f "/lib/firmware/${fw}.xz" ]; then xz -dk "/lib/firmware/${fw}.xz" -c > "${FIRMWARE_ABS}/${fw}" 2>/dev/null else log "WARNING: firmware ${fw} not found in /lib/firmware/" fi fi done
# Fix firmware dir to match actual build location (config-minimal has a hardcoded path) sed -i "s|^CONFIG_EXTRA_FIRMWARE_DIR=.*|CONFIG_EXTRA_FIRMWARE_DIR=\"${FIRMWARE_ABS}\"|" "${KERNEL_SRC}/.config"
# Set initramfs source path INITRAMFS_ABS="$(cd "${BUILD_DIR}" && pwd)/initramfs.cpio.lz4" echo "CONFIG_INITRAMFS_SOURCE=\"${INITRAMFS_ABS}\"" >> "${KERNEL_SRC}/.config"
# Finalize config cd "${KERNEL_SRC}" make olddefconfig
# Build JOBS="${JOBS:-$(nproc)}" log "Compiling kernel (${JOBS} jobs)..." make -j"${JOBS}" bzImage
# Copy output BZIMAGE="${KERNEL_SRC}/arch/x86/boot/bzImage" if [ -f "${BZIMAGE}" ]; then cp "${BZIMAGE}" "${VMLINUZ}" else err "bzImage not found!" exit 1 fielse log "Skipping kernel build (using existing vmlinuz)"fi
KERNEL_SIZE=$(wc -c < "${VMLINUZ}")log "Kernel: $(( KERNEL_SIZE / 1024 / 1024 ))MB (${KERNEL_SIZE} bytes)"
# ============================================================# Step 5: Flash to USB (if --flash specified)# ============================================================if [ -n "${FLASH_DEV}" ]; then if [ ! -b "${FLASH_DEV}" ]; then err "${FLASH_DEV} is not a block device" exit 1 fi
log "Flashing to ${FLASH_DEV}..." warn "This will ERASE ALL DATA on ${FLASH_DEV}"
# Create GPT + EFI System Partition sfdisk "${FLASH_DEV}" << 'PART_EOF'label: gpttype=C12A7328-F81F-11D2-BA4B-00A0C93EC93B, size=512MPART_EOF sync
# Wait for partition PART="${FLASH_DEV}1" for i in $(seq 1 20); do [ -b "${PART}" ] && break sleep 0.3 done
if [ ! -b "${PART}" ]; then err "Partition ${PART} not found" exit 1 fi
# Format FAT32 mkfs.vfat -F 32 -n "AC-NATIVE" "${PART}"
# Copy kernel + splash chainloader using mtools (no mount needed) mmd -i "${PART}" ::EFI mmd -i "${PART}" ::EFI/BOOT SPLASH_EFI="${NATIVE_DIR}/bootloader/splash.efi" if [ -f "${SPLASH_EFI}" ]; then log "Using splash chainloader (${SPLASH_EFI})" mcopy -i "${PART}" "${SPLASH_EFI}" ::EFI/BOOT/BOOTX64.EFI mcopy -i "${PART}" "${VMLINUZ}" ::EFI/BOOT/KERNEL.EFI else log "No splash chainloader found, using kernel directly" mcopy -i "${PART}" "${VMLINUZ}" ::EFI/BOOT/BOOTX64.EFI fi
# Write config.json with handle + optional per-char colors from handle-colors API HANDLE_CLEAN="${HANDLE#@}" [ -z "${HANDLE_CLEAN}" ] && HANDLE_CLEAN="jeffrey" CONFIG_TMP=$(mktemp) COLORS_JSON="" if [ -n "${HANDLE_CLEAN}" ]; then HANDLE_URI="$(printf '%s' "${HANDLE_CLEAN}" | jq -sRr @uri)" COLORS_RESP="$(curl -fsSL --connect-timeout 5 --max-time 12 \ "${HANDLE_COLORS_API}?handle=${HANDLE_URI}" 2>/dev/null || true)" if [ -n "${COLORS_RESP}" ]; then COLORS_JSON="$(printf '%s' "${COLORS_RESP}" | jq -c '.colors // empty' 2>/dev/null || true)" [ "${COLORS_JSON}" = "null" ] && COLORS_JSON="" fi fi
if [ -n "${COLORS_JSON}" ] && printf '%s' "${COLORS_JSON}" | jq -e 'type == "array"' >/dev/null 2>&1; then jq -cn --arg handle "${HANDLE_CLEAN}" --argjson colors "${COLORS_JSON}" \ '{handle:$handle, colors:$colors}' > "${CONFIG_TMP}" COLOR_COUNT="$(printf '%s' "${COLORS_JSON}" | jq 'length')" log "Fetched ${COLOR_COUNT} boot colors for @${HANDLE_CLEAN}" else jq -cn --arg handle "${HANDLE_CLEAN}" '{handle:$handle}' > "${CONFIG_TMP}" warn "No handle colors for @${HANDLE_CLEAN} (using fallback rainbow title)" fi
mcopy -i "${PART}" "${CONFIG_TMP}" ::config.json rm -f "${CONFIG_TMP}" log "Wrote config.json (handle: ${HANDLE_CLEAN})"
sync log "Flashed! Kernel at EFI/BOOT/BOOTX64.EFI on ${FLASH_DEV}" log "Remove USB and boot from it (UEFI, Secure Boot OFF)."else log "" log "=== Build complete ===" log "Kernel: ${VMLINUZ}" log "" log "To flash to USB:" log " $0 --flash /dev/sdX" log "" log "Or manually with mtools:" log " sfdisk /dev/sdX < <(echo 'label: gpt'; echo 'type=C12A7328-F81F-11D2-BA4B-00A0C93EC93B, size=512M')" log " mkfs.vfat -F 32 -n AC-NATIVE /dev/sdX1" log " mmd -i /dev/sdX1 ::EFI ::EFI/BOOT" log " mcopy -i /dev/sdX1 ${VMLINUZ} ::EFI/BOOT/BOOTX64.EFI"fi