Something went wrong. Try again.
Monorepo for Aesthetic.Computer aesthetic.computer
Something went wrong. Try again.
Shell
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139#!/bin/bash# build-and-flash.sh — Build ac-native from scratch and optionally flash to USB## Works in Docker/Codespaces (no losetup/mount needed — uses mtools).## Usage:# ./build-and-flash.sh # Build kernel only# ./build-and-flash.sh --flash /dev/sdb # Build + flash to USB# ./build-and-flash.sh --skip-kernel --flash /dev/sdb # Rebuild binary/initramfs, reuse kernel source# ./build-and-flash.sh --skip-binary --flash /dev/sdb # Reuse binary, rebuild initramfs+kernel## Requirements: cpio lz4 jq musl-gcc (or gcc) libdrm-devel alsa-lib-devel# mtools (for --flash)
set -euo pipefail
RED='\033[0;31m'GREEN='\033[0;32m'YELLOW='\033[1;33m'NC='\033[0m'
log() { echo -e "${GREEN}[build]${NC} $*"; }warn() { echo -e "${YELLOW}[build]${NC} $*"; }err() { echo -e "${RED}[build]${NC} $*" >&2; }
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"NATIVE_DIR="$(dirname "${SCRIPT_DIR}")"BUILD_DIR="${NATIVE_DIR}/build"KERNEL_DIR="${NATIVE_DIR}/kernel"
FLASH_DEV=""SKIP_KERNEL=0SKIP_BINARY=0USE_SDL=1PIECE_PATH="${NATIVE_DIR}/pieces/prompt.mjs"KERNEL_VERSION="${KERNEL_VERSION:-6.14.2}"HANDLE="${AC_HANDLE:-jeffrey}"HANDLE_COLORS_API="${HANDLE_COLORS_API:-https://aesthetic.computer/.netlify/functions/handle-colors}"
while [ $# -gt 0 ]; do case "$1" in --flash) FLASH_DEV="$2"; shift 2 ;; --skip-kernel) SKIP_KERNEL=1; shift ;; --skip-binary) SKIP_BINARY=1; shift ;; --sdl) USE_SDL=1; shift ;; --piece) PIECE_PATH="$2"; shift 2 ;; --handle) HANDLE="$2"; shift 2 ;; --help|-h) echo "Usage: $0 [--flash /dev/sdX] [--skip-kernel] [--skip-binary] [--sdl] [--piece path.mjs] [--handle your-handle]" exit 0 ;; *) err "Unknown option: $1"; exit 1 ;; esacdone
mkdir -p "${BUILD_DIR}"
# ============================================================# Step 1: Check dependencies# ============================================================log "Checking dependencies..."
# Auto-install required packages if missing (Fedora/dnf)if command -v dnf &>/dev/null; then PKGS_NEEDED="" # Build tools command -v cpio &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} cpio" command -v lz4 &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} lz4" command -v bc &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} bc" command -v perl &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} perl" command -v make &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} make" command -v curl &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} curl" command -v jq &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} jq" command -v bash &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} bash" # Kernel build headers [ -f /usr/include/libelf.h ] || PKGS_NEEDED="${PKGS_NEEDED} elfutils-libelf-devel" [ -f /etc/pki/tls/certs/ca-bundle.crt ] || PKGS_NEEDED="${PKGS_NEEDED} ca-certificates" # Native binary deps pkg-config --exists alsa 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} alsa-lib-devel" pkg-config --exists libdrm 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} libdrm-devel" [ -f /usr/include/flite/flite.h ] || PKGS_NEEDED="${PKGS_NEEDED} flite-devel" # WiFi tools + firmware command -v wpa_supplicant &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} wpa_supplicant" command -v dhclient &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} dhcp-client" command -v iw &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} iw" [ -d /lib/firmware ] && ls /lib/firmware/iwlwifi-cc-a0-* &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} iwlwifi-mvm-firmware" [ -f /lib/firmware/regulatory.db ] || PKGS_NEEDED="${PKGS_NEEDED} wireless-regdb" # SDL3 for GPU-accelerated display pkg-config --exists sdl3 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} SDL3-devel" # ffmpeg libs for video recording pkg-config --exists libavcodec 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} ffmpeg-free-devel" # Flash tools if [ -n "${FLASH_DEV}" ]; then command -v mmd &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} mtools" command -v mkfs.vfat &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} dosfstools" fi
if [ -n "${PKGS_NEEDED}" ]; then log "Installing missing packages:${PKGS_NEEDED}" sudo dnf install -y ${PKGS_NEEDED} || err "Failed to install packages" fielif command -v apt-get &>/dev/null; then PKGS_NEEDED="" command -v cpio &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} cpio" command -v lz4 &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} lz4" command -v bc &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} bc" command -v perl &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} perl" command -v make &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} make" command -v curl &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} curl" command -v jq &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} jq" command -v wpa_supplicant &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} wpasupplicant" command -v dhclient &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} isc-dhcp-client" command -v iw &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} iw" command -v busybox &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} busybox-static" command -v git &>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} git" [ -d /usr/share/alsa ] || PKGS_NEEDED="${PKGS_NEEDED} alsa-utils" [ -f /lib/firmware/regulatory.db ] 2>/dev/null || PKGS_NEEDED="${PKGS_NEEDED} wireless-regdb" ls /lib/firmware/iwlwifi-* &>/dev/null 2>&1 || PKGS_NEEDED="${PKGS_NEEDED} linux-firmware" if [ -n "${PKGS_NEEDED}" ]; then log "Installing missing packages (apt):${PKGS_NEEDED}" sudo apt-get update -qq 2>/dev/null || true sudo apt-get install -y -qq ${PKGS_NEEDED} 2>&1 | tail -3 || err "Failed to install packages" fifi
MISSING=""for cmd in cpio lz4 make curl jq bc perl; do command -v "$cmd" &>/dev/null || MISSING="${MISSING} ${cmd}"doneif [ -n "${MISSING}" ]; then err "Missing required tools:${MISSING}" exit 1fiif [ -n "${FLASH_DEV}" ]; then for cmd in mmd mcopy mkfs.vfat sfdisk; do command -v "$cmd" &>/dev/null || MISSING="${MISSING} ${cmd}" done if [ -n "${MISSING}" ]; then err "Missing flash tools:${MISSING}" exit 1 fifi
# ============================================================# Step 2: Build ac-native binary (static, musl)# ============================================================if [ "${SKIP_BINARY}" -eq 0 ]; then log "Building ac-native binary..." cd "${NATIVE_DIR}" CC_USE="${CC:-}" if [ -z "${CC_USE}" ]; then # Use musl-gcc for static linking only if it has linux/input.h if command -v musl-gcc &>/dev/null \ && echo '#include <linux/input.h>' | musl-gcc -E -x c - &>/dev/null; then CC_USE=musl-gcc else CC_USE=gcc fi fi MAKE_ARGS="CC=${CC_USE}" if [ "${USE_SDL}" -eq 1 ]; then MAKE_ARGS="${MAKE_ARGS} USE_SDL=1" fi # Only request static linking when using musl-gcc (gcc needs .so files) if [ "${CC_USE}" = "musl-gcc" ]; then MAKE_ARGS="${MAKE_ARGS} STATIC=1" fi make ${MAKE_ARGS} log "Binary: $(wc -c < "${BUILD_DIR}/ac-native") bytes"else log "Skipping binary build"fi
if [ ! -f "${BUILD_DIR}/ac-native" ]; then err "ac-native binary not found. Run without --skip-binary." exit 1fi
# ============================================================# Step 3: Create initramfs# ============================================================log "Creating initramfs..."INITRAMFS_DIR="${BUILD_DIR}/initramfs-root"
# Preserve piece.mjs if it exists and no --piece overrideif [ -f "${INITRAMFS_DIR}/piece.mjs" ] && [ "${PIECE_PATH}" = "${INITRAMFS_DIR}/piece.mjs" ]; then PIECE_CONTENT="$(cat "${INITRAMFS_DIR}/piece.mjs")"fi
rm -rf "${INITRAMFS_DIR}"mkdir -p "${INITRAMFS_DIR}"/{dev,proc,sys,tmp,mnt,run,etc}
# Create essential device nodes — kernel needs /dev/console before running init# Without these: "Warning: unable to open an initial console"sudo mknod -m 622 "${INITRAMFS_DIR}/dev/console" c 5 1sudo mknod -m 666 "${INITRAMFS_DIR}/dev/null" c 1 3sudo mknod -m 666 "${INITRAMFS_DIR}/dev/zero" c 1 5sudo mknod -m 666 "${INITRAMFS_DIR}/dev/tty" c 5 0
# Copy binarycp "${BUILD_DIR}/ac-native" "${INITRAMFS_DIR}/ac-native"chmod +x "${INITRAMFS_DIR}/ac-native"
# Copy pieceif [ -n "${PIECE_CONTENT:-}" ]; then echo "${PIECE_CONTENT}" > "${INITRAMFS_DIR}/piece.mjs"elif [ -f "${PIECE_PATH}" ]; then cp "${PIECE_PATH}" "${INITRAMFS_DIR}/piece.mjs"else err "No piece.mjs found at ${PIECE_PATH}" exit 1fi
# Copy all pieces to /pieces/ for system.jump() navigationPIECES_SRC="${NATIVE_DIR}/pieces"if [ -d "${PIECES_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/pieces" for p in "${PIECES_SRC}"/*.mjs; do [ -f "$p" ] && cp "$p" "${INITRAMFS_DIR}/pieces/" done log "Bundled pieces: $(ls "${INITRAMFS_DIR}/pieces/" | tr '\n' ' ')"fi
# Copy web pieces that run unmodified on native (Wave 1).# NOTE: clock.mjs is NOT in this list — the web clock.mjs uses browser-only# APIs (hud, typeface, store.persist, net.pieces) that native doesn't expose,# so it renders as a black screen on the device. A minimal native-compatible# clock.mjs lives in fedac/native/pieces/ and is copied in the pass above.# If you need the full web clock with all its features, use it in a browser.AC_DISKS_DIR="${NATIVE_DIR}/../../system/public/aesthetic.computer/disks"for web_piece in 3x3.mjs 404.mjs beat.mjs brick-breaker.mjs \ dync.mjs error.mjs gostop.mjs hop.mjs shh.mjs chart.mjs \ f3ral3xp.mjs hw.mjs ptt.mjs arena.mjs; do [ -f "${AC_DISKS_DIR}/${web_piece}" ] && cp "${AC_DISKS_DIR}/${web_piece}" "${INITRAMFS_DIR}/pieces/"donelog "Bundled web pieces: $(ls "${INITRAMFS_DIR}/pieces/" | grep -c '.mjs') total"
# 🎹 Copy piano sample bank into /samples/piano/ for the C-side audio# engine to load at startup (audio.c: load_piano_bank). Each .raw is a# header-less stream of float32 mono samples at 48kHz; filename is the# anchor MIDI note number (e.g. 60.raw = C4). The pre-build script# scripts/prep-piano-samples.sh decimates the full Salamander Grand# Piano V3 SFZ to these anchor pitches. Total ~14 MB at 26 anchors.SAMPLES_SRC="${NATIVE_DIR}/samples/piano"if [ -d "${SAMPLES_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/samples/piano" cp "${SAMPLES_SRC}"/*.raw "${INITRAMFS_DIR}/samples/piano/" 2>/dev/null || true sample_count=$(ls "${INITRAMFS_DIR}/samples/piano/"*.raw 2>/dev/null | wc -l | tr -d ' ') sample_size=$(du -sh "${INITRAMFS_DIR}/samples/piano/" 2>/dev/null | cut -f1) log "Bundled piano samples: ${sample_count} anchors, ${sample_size}"fi
# 🐾 Copy the zoo sample bank into /samples/zoo/ for the audio engine's# named one-shot bank (audio.c: load_oneshot_bank). Each .raw is a# header-less stream of float32 mono samples at 48kHz; filename is the# animal name (e.g. dog.raw, cat.raw — see ZOO_NAMES in notepat.mjs).# Generated by scripts/prep-zoo-samples.sh.ZOO_SRC="${NATIVE_DIR}/samples/zoo"if [ -d "${ZOO_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/samples/zoo" cp "${ZOO_SRC}"/*.raw "${INITRAMFS_DIR}/samples/zoo/" 2>/dev/null || true zoo_count=$(ls "${INITRAMFS_DIR}/samples/zoo/"*.raw 2>/dev/null | wc -l | tr -d ' ') zoo_size=$(du -sh "${INITRAMFS_DIR}/samples/zoo/" 2>/dev/null | cut -f1) log "Bundled zoo samples: ${zoo_count} animals, ${zoo_size}"else log "WARNING: ${ZOO_SRC} not present — zoo kit will be silent on device"fi
# Copy shared JS libraries needed by pieces (pure JS, no browser deps)AC_LIB_DIR="${NATIVE_DIR}/../../system/public/aesthetic.computer/lib"mkdir -p "${INITRAMFS_DIR}/lib"for lib_file in melody-parser.mjs notepat-convert.mjs note-colors.mjs percussion.mjs num.mjs; do if [ -f "${AC_LIB_DIR}/${lib_file}" ]; then cp "${AC_LIB_DIR}/${lib_file}" "${INITRAMFS_DIR}/lib/" fidonelog "Bundled JS libs: $(ls "${INITRAMFS_DIR}/lib/"*.mjs 2>/dev/null | xargs -n1 basename | tr '\n' ' ')"
# Bundle initramfs scripts (upload-log.sh etc.)SCRIPTS_SRC="${NATIVE_DIR}/initramfs-scripts"if [ -d "${SCRIPTS_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/scripts" cp "${SCRIPTS_SRC}"/*.sh "${INITRAMFS_DIR}/scripts/" 2>/dev/null || true chmod +x "${INITRAMFS_DIR}/scripts/"*.sh 2>/dev/null || truefi
# Bake default config.json into initramfs (handle + colors)# This ensures "hi @handle" shows even without USB flash path or /mnt/config.jsonHANDLE_CLEAN="${HANDLE#@}"[ -z "${HANDLE_CLEAN}" ] && HANDLE_CLEAN="jeffrey"INITRAMFS_CONFIG="${INITRAMFS_DIR}/default-config.json"COLORS_JSON=""if [ -n "${HANDLE_CLEAN}" ]; then HANDLE_URI="$(printf '%s' "${HANDLE_CLEAN}" | jq -sRr @uri 2>/dev/null || echo "${HANDLE_CLEAN}")" COLORS_RESP="$(curl -fsSL --connect-timeout 5 --max-time 12 \ "${HANDLE_COLORS_API}?handle=${HANDLE_URI}" 2>/dev/null || true)" if [ -n "${COLORS_RESP}" ]; then COLORS_JSON="$(printf '%s' "${COLORS_RESP}" | jq -c '.colors // empty' 2>/dev/null || true)" [ "${COLORS_JSON}" = "null" ] && COLORS_JSON="" fifiif [ -n "${COLORS_JSON}" ] && printf '%s' "${COLORS_JSON}" | jq -e 'type == "array"' >/dev/null 2>&1; then jq -cn --arg handle "${HANDLE_CLEAN}" --argjson colors "${COLORS_JSON}" \ '{handle:$handle, colors:$colors}' > "${INITRAMFS_CONFIG}" log "Baked config.json (handle: ${HANDLE_CLEAN}, colors: $(printf '%s' "${COLORS_JSON}" | jq 'length'))"else jq -cn --arg handle "${HANDLE_CLEAN}" '{handle:$handle}' > "${INITRAMFS_CONFIG}" log "Baked config.json (handle: ${HANDLE_CLEAN}, no colors)"fi
# KidLisp bundling is handled by ac-os (runs as user, has npx in PATH).# build-and-flash.sh runs under sudo where npx is unavailable.mkdir -p "${INITRAMFS_DIR}/jslib"
# Always create lib64 — even if ac-native is static, other bundled tools# (curl, iw, wpa_supplicant, busybox, git, jq) are dynamically linked.mkdir -p "${INITRAMFS_DIR}/lib64"
# Copy shared libs (if dynamic build)if file "${BUILD_DIR}/ac-native" | grep -q "dynamically linked"; then log "Copying shared libraries for dynamic binary..."
# Detect musl-linked binary (interpreter is ld-musl-*, ldd won't work) if file "${BUILD_DIR}/ac-native" | grep -q "ld-musl"; then log " musl-linked binary detected" # Copy musl dynamic linker MUSL_LD=$(find /usr/lib /lib -name "ld-musl-x86_64.so.1" -type f 2>/dev/null | head -1) if [ -n "${MUSL_LD}" ]; then cp "${MUSL_LD}" "${INITRAMFS_DIR}/lib64/" # Also symlink to /lib/ where the binary expects it mkdir -p "${INITRAMFS_DIR}/lib" ln -sf ../lib64/ld-musl-x86_64.so.1 "${INITRAMFS_DIR}/lib/ld-musl-x86_64.so.1" log " musl linker: ${MUSL_LD}" fi # Copy musl libc (the linker IS the libc for musl) # Also copy system libs the binary links against (readelf approach) if command -v readelf &>/dev/null; then for needed in $(readelf -d "${BUILD_DIR}/ac-native" 2>/dev/null | grep NEEDED | grep -oP '\[.*?\]' | tr -d '[]'); do # Search common lib paths for dir in /usr/lib/x86_64-linux-gnu /usr/lib64 /lib/x86_64-linux-gnu /lib64 /usr/lib; do if [ -f "${dir}/${needed}" ]; then cp -nL "${dir}/${needed}" "${INITRAMFS_DIR}/lib64/" 2>/dev/null break fi done done fi else # Standard glibc binary — ldd works for lib in $(ldd "${BUILD_DIR}/ac-native" | grep -oP '/\S+'); do [ -f "$lib" ] && cp "$lib" "${INITRAMFS_DIR}/lib64/" done fi # Symlink /lib -> /lib64 (some lookups use /lib) ln -sf lib64 "${INITRAMFS_DIR}/lib"fi
# Copy SDL3 + Mesa GPU libraries (if --sdl)if [ "${USE_SDL}" -eq 1 ]; then log "Bundling SDL3 + Mesa GPU stack..." mkdir -p "${INITRAMFS_DIR}/lib64/dri"
# SDL3 (direct, no sdl2-compat shim) for lib in libSDL3.so.0; do src=$(readlink -f "/usr/lib64/${lib}" 2>/dev/null) [ -f "$src" ] && cp "$src" "${INITRAMFS_DIR}/lib64/" && ln -sf "$(basename "$src")" "${INITRAMFS_DIR}/lib64/${lib}" done
# EGL + GLES + GBM (dlopen'd by SDL3 KMSDRM backend) for lib in libEGL.so.1 libEGL_mesa.so.0 libGLESv2.so.2 libgbm.so.1 libGL.so.1 libGLX_mesa.so.0 libGLdispatch.so.0 libglapi.so.0; do src=$(readlink -f "/usr/lib64/${lib}" 2>/dev/null) [ -f "$src" ] && cp -n "$src" "${INITRAMFS_DIR}/lib64/" 2>/dev/null && ln -sf "$(basename "$src")" "${INITRAMFS_DIR}/lib64/${lib}" 2>/dev/null done
# Mesa gallium (monolithic driver — contains iris/i915/swrast) GALLIUM=$(ls /usr/lib64/libgallium-*.so 2>/dev/null | head -1) [ -f "$GALLIUM" ] && cp "$GALLIUM" "${INITRAMFS_DIR}/lib64/"
# DRI driver stubs (Mesa loads these, which then load libgallium) for drv in iris_dri.so i915_dri.so kms_swrast_dri.so swrast_dri.so libdril_dri.so; do src="/usr/lib64/dri/${drv}" if [ -L "$src" ]; then tgt=$(readlink "$src") ln -sf "$tgt" "${INITRAMFS_DIR}/lib64/dri/${drv}" elif [ -f "$src" ]; then cp "$src" "${INITRAMFS_DIR}/lib64/dri/" fi done
# GBM backend loader plugin. libgbm.so.1 has a hardcoded path # (/usr/lib64/gbm/dri_gbm.so) baked in at build time — without this # file, SDL3's KMSDRM backend crashes during Mesa DRI probe (we hit # a SIGSEGV in prod). Ship it at both /lib64/gbm and the hardcoded # /usr/lib64/gbm path so the loader finds it regardless of lookup. if [ -f /usr/lib64/gbm/dri_gbm.so ]; then mkdir -p "${INITRAMFS_DIR}/lib64/gbm" "${INITRAMFS_DIR}/usr/lib64/gbm" cp /usr/lib64/gbm/dri_gbm.so "${INITRAMFS_DIR}/lib64/gbm/" cp /usr/lib64/gbm/dri_gbm.so "${INITRAMFS_DIR}/usr/lib64/gbm/" fi
# libexpat (needed by Mesa DRI loader) for lib in libexpat.so.1; do src=$(readlink -f "/usr/lib64/${lib}" 2>/dev/null) [ -f "$src" ] && cp -n "$src" "${INITRAMFS_DIR}/lib64/" 2>/dev/null && ln -sf "$(basename "$src")" "${INITRAMFS_DIR}/lib64/${lib}" 2>/dev/null done
GPU_SIZE=$(du -sh "${INITRAMFS_DIR}/lib64/libgallium"* "${INITRAMFS_DIR}/lib64/libSDL"* "${INITRAMFS_DIR}/lib64/libEGL"* "${INITRAMFS_DIR}/lib64/dri/" 2>/dev/null | tail -1 | cut -f1) log "SDL3 + Mesa GPU stack bundled (gallium: $(du -sh "${GALLIUM}" 2>/dev/null | cut -f1))"fi
# Copy ALSA config files (required for snd_pcm_open to resolve device names)if [ -d "/usr/share/alsa" ]; then log "Copying ALSA config files..." mkdir -p "${INITRAMFS_DIR}/usr/share/alsa" cp -r /usr/share/alsa/* "${INITRAMFS_DIR}/usr/share/alsa/" log "ALSA config: $(du -sh "${INITRAMFS_DIR}/usr/share/alsa" | cut -f1)"else warn "No /usr/share/alsa found — audio may not work"fi
# Copy WiFi components (wpa_supplicant, dhclient, iw, ip, firmware)# Resolve actual binary paths (location varies by distro: /usr/sbin vs /usr/bin)resolve_bin() { command -v "$1" 2>/dev/null || true; }WIFI_BINS=( "$(resolve_bin wpa_supplicant)" "$(resolve_bin wpa_cli)" "$(resolve_bin dhclient)" "$(resolve_bin iw)" "$(resolve_bin ip)")WIFI_COPIED=0for bin in "${WIFI_BINS[@]}"; do if [ -f "$bin" ]; then mkdir -p "${INITRAMFS_DIR}/$(dirname "$bin")" cp "$bin" "${INITRAMFS_DIR}${bin}" chmod +x "${INITRAMFS_DIR}${bin}" WIFI_COPIED=$((WIFI_COPIED + 1)) # Copy their shared libraries too for lib in $(ldd "$bin" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done fidoneif [ "${WIFI_COPIED}" -gt 0 ]; then log "WiFi binaries: ${WIFI_COPIED} copied"
# Copy Intel WiFi firmware (only latest version per card to save space) # 9260 = 9260-th-b0-jf-b0, AX200 = cc-a0, AX201 = QuZ-a0-hr-b0 / QuZ-a0-jf-b0 mkdir -p "${INITRAMFS_DIR}/lib/firmware" # Regulatory database (required for WiFi scanning) for rdb in regulatory.db regulatory.db.p7s; do if [ -f "/lib/firmware/$rdb" ]; then cp "/lib/firmware/$rdb" "${INITRAMFS_DIR}/lib/firmware/" elif [ -f "/lib/firmware/${rdb}.zst" ]; then zstd -d "/lib/firmware/${rdb}.zst" -o "${INITRAMFS_DIR}/lib/firmware/$rdb" 2>/dev/null elif [ -f "/lib/firmware/${rdb}.xz" ]; then xz -dk "/lib/firmware/${rdb}.xz" -c > "${INITRAMFS_DIR}/lib/firmware/$rdb" 2>/dev/null fi done for pattern in "iwlwifi-9260-th-b0-jf-b0-*" "iwlwifi-cc-a0-*" "iwlwifi-QuZ-a0-hr-b0-*" "iwlwifi-QuZ-a0-jf-b0-*"; do # Get the latest (highest version number) firmware file fw=$(ls -v /lib/firmware/${pattern}.ucode* 2>/dev/null | tail -1 || true) if [ -n "$fw" ] && [ -f "$fw" ]; then dest="${INITRAMFS_DIR}/lib/firmware/$(basename "${fw%.xz}")" dest="${dest%.zst}" case "$fw" in *.xz) xz -dk "$fw" -c > "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *.zst) zstd -d "$fw" -o "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *) cp "$fw" "$dest" ;; esac log " firmware: $(basename "$dest") ($(du -sh "$dest" | cut -f1))" fi done FW_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware" 2>/dev/null | cut -f1) log "WiFi firmware: ${FW_SIZE:-0}"
# Copy extra firmware blobs from source tree (i915 GPU, Intel SOF audio, etc.) EXTRA_FW_DIR="${SCRIPT_DIR}/../firmware" if [ -d "${EXTRA_FW_DIR}" ]; then cp -r "${EXTRA_FW_DIR}/"* "${INITRAMFS_DIR}/lib/firmware/" 2>/dev/null || true EXTRA_FW_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware" 2>/dev/null | cut -f1) log "Total firmware (with source tree blobs): ${EXTRA_FW_SIZE}" fi
# Copy ALL i915 GPU firmware from host (supports Kaby Lake, Coffee Lake, etc.) # The source tree only has MTL/ARL blobs; the oven has firmware for all generations. if [ -d "/lib/firmware/i915" ]; then mkdir -p "${INITRAMFS_DIR}/lib/firmware/i915" I915_COUNT=0 for fw in /lib/firmware/i915/*; do [ -f "$fw" ] || continue dest="${INITRAMFS_DIR}/lib/firmware/i915/$(basename "${fw%.xz}")" dest="${dest%.zst}" if [ ! -f "$dest" ]; then case "$fw" in *.xz) xz -dk "$fw" -c > "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *.zst) zstd -d "$fw" -o "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *) cp "$fw" "$dest" ;; esac I915_COUNT=$((I915_COUNT + 1)) fi done log " i915 firmware: ${I915_COUNT} new blobs from /lib/firmware/i915/" fi
# Copy Intel SOF audio firmware from host (topology + IPC files) for sof_dir in /lib/firmware/intel/sof /lib/firmware/intel/sof-ipc4 \ /lib/firmware/intel/sof-tplg /lib/firmware/intel/sof-ipc4-tplg; do if [ -d "$sof_dir" ]; then dest_dir="${INITRAMFS_DIR}/lib/firmware/intel/$(basename "$sof_dir")" mkdir -p "$dest_dir" for fw in "$sof_dir"/*; do [ -f "$fw" ] || continue dest="$dest_dir/$(basename "${fw%.xz}")" dest="${dest%.zst}" if [ ! -f "$dest" ]; then case "$fw" in *.xz) xz -dk "$fw" -c > "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *.zst) zstd -d "$fw" -o "$dest" 2>/dev/null || cp "$fw" "$dest" ;; *) cp "$fw" "$dest" ;; esac fi done fi done SOF_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware/intel" 2>/dev/null | cut -f1 || true) log " Intel SOF audio firmware: ${SOF_SIZE:-none}"
TOTAL_FW_SIZE=$(du -sh "${INITRAMFS_DIR}/lib/firmware" 2>/dev/null | cut -f1) log "Total firmware (all generations): ${TOTAL_FW_SIZE}"
# Copy flite TTS libraries (core + slt female + kal male voices) for flib in libflite.so.2.2 libflite_cmulex.so.2.2 libflite_usenglish.so.2.2 libflite_cmu_us_slt.so.2.2 libflite_cmu_us_kal.so.2.2; do src="" for dir in /usr/lib64 /usr/lib/x86_64-linux-gnu; do [ -f "${dir}/${flib}" ] && src="${dir}/${flib}" && break done if [ -n "$src" ]; then cp "$src" "${INITRAMFS_DIR}/lib64/" # Create soname symlinks ln -sf "$flib" "${INITRAMFS_DIR}/lib64/$(echo $flib | sed 's/\.so\..*/\.so/')" 2>/dev/null || true fi done FLITE_SIZE=$(du -sh "${INITRAMFS_DIR}/lib64/libflite"* 2>/dev/null | tail -1 | cut -f1 || true) log "Flite TTS: ${FLITE_SIZE:-not found}"
# Create /var/run for wpa_supplicant mkdir -p "${INITRAMFS_DIR}/var/run/wpa_supplicant"
# Minimal dhclient-script: configure interface after DHCP lease obtained # dhclient requires this at /sbin/dhclient-script (or via -sf flag) mkdir -p "${INITRAMFS_DIR}/sbin" cat > "${INITRAMFS_DIR}/sbin/dhclient-script" << 'DHCLIENT_SCRIPT'#!/bin/sh# Minimal dhclient hook for ac-native bare metalcase "$reason" in BOUND|RENEW|REBIND|REBOOT) ip addr flush dev "$interface" 2>/dev/null ip addr add "$new_ip_address/$new_subnet_mask" dev "$interface" 2>/dev/null [ -n "$new_routers" ] && ip route add default via "$new_routers" dev "$interface" 2>/dev/null mkdir -p /etc { # Use DHCP-provided DNS if available, always add public fallbacks [ -n "$new_domain_name_servers" ] && printf 'nameserver %s\n' $new_domain_name_servers printf 'nameserver 8.8.8.8\nnameserver 1.1.1.1\n' } > /etc/resolv.conf echo "[dhclient] BOUND $interface ip=$new_ip_address dns=$new_domain_name_servers" >> /tmp/dhclient.log ;; EXPIRE|FAIL|RELEASE|STOP) ip addr flush dev "$interface" 2>/dev/null echo "[dhclient] $reason $interface" >> /tmp/dhclient.log ;;esacexit 0DHCLIENT_SCRIPT chmod +x "${INITRAMFS_DIR}/sbin/dhclient-script" log "dhclient-script: installed"
# Need /bin/sh for system() calls — use busybox or link to bash if available mkdir -p "${INITRAMFS_DIR}/bin" if command -v busybox &>/dev/null; then cp "$(command -v busybox)" "${INITRAMFS_DIR}/bin/busybox" ln -sf busybox "${INITRAMFS_DIR}/bin/sh" for lib in $(ldd "$(command -v busybox)" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done # Busybox applet symlinks — covers find, cp, mv, rm, ln, wc, tail, sort, # uniq, tr, tee, xargs, diff, stat, ps, tar, gzip, touch, env, basename, # dirname, expr, test, printf, date, dd, df, du, echo, true, false, etc. for cmd in sh sleep mkdir mount umount cat cp mv rm ln chmod chown \ date dd find grep head kill ps sed sort tail tee test touch tr wc which \ mktemp printf seq stat basename dirname env expr true false readlink \ realpath rmdir uniq yes tar gzip gunzip hostname id ip modprobe \ mkswap swapon vi df du diff xargs nohup pgrep killall cut whoami awk \ sync poweroff reboot halt mknod udhcpc md5sum sha256sum; do ln -sf busybox "${INITRAMFS_DIR}/bin/${cmd}" 2>/dev/null || true done log " busybox: $(du -sh "${INITRAMFS_DIR}/bin/busybox" | cut -f1) ($(ls "${INITRAMFS_DIR}/bin/" | wc -l) symlinks)" elif [ -f /bin/bash ]; then cp /bin/bash "${INITRAMFS_DIR}/bin/sh" for lib in $(ldd /bin/bash 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done fi
# Claude Code NEEDS real bash — busybox ash is NOT close enough for # Claude's Bash tool (no arrays, no process substitution, no local -n, # no ${var//pattern/repl} in ash, etc.). Always ship real /bin/bash # alongside busybox so Claude's shell-outs actually work. /bin/sh stays # as busybox for small scripts that don't need bash features. if [ -f /bin/bash ] || [ -f /usr/bin/bash ]; then BASH_SRC="$(command -v bash 2>/dev/null || echo /bin/bash)" cp "${BASH_SRC}" "${INITRAMFS_DIR}/bin/bash" chmod +x "${INITRAMFS_DIR}/bin/bash" for lib in $(ldd "${BASH_SRC}" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " bash: $(du -sh "${INITRAMFS_DIR}/bin/bash" | cut -f1) (real GNU bash)" else # Fallback: symlink to busybox if real bash isn't available at build time [ -f "${INITRAMFS_DIR}/bin/sh" ] && ln -sf sh "${INITRAMFS_DIR}/bin/bash" warn "No /bin/bash found at build time — falling back to busybox ash (Claude Code will have issues)" fi
# BPF trace tool (if built) BPF_TRACE="${NATIVE_DIR}/bpf/ac-trace" if [ -f "${BPF_TRACE}" ]; then cp "${BPF_TRACE}" "${INITRAMFS_DIR}/bin/ac-trace" chmod +x "${INITRAMFS_DIR}/bin/ac-trace" log " ac-trace: $(du -sh "${INITRAMFS_DIR}/bin/ac-trace" | cut -f1)" fi
# Symlink WiFi binaries into /bin/ so system() calls find them via PATH for bin in "${WIFI_BINS[@]}"; do bname="$(basename "$bin")" [ -f "${INITRAMFS_DIR}${bin}" ] && ln -sf "$bin" "${INITRAMFS_DIR}/bin/${bname}" 2>/dev/null || true done
# Need basic utilities for shell commands (grep, awk, pgrep, killall, ls, rfkill, curl, etc.) # efibootmgr: sets UEFI boot order after OTA flash (prevents stale vendor boot entries) # partx/partprobe/wipefs: needed by install-to-HD path for partition # table refresh after sfdisk (the kernel BLKRRPART call fails with # EBUSY on nvme when we repartition it in place; partx -u is a # non-destructive alternative that updates kernel's partition # table view without requiring exclusive access). wipefs wipes # old FS signatures so mkfs.vfat can take the device. for util in grep awk sed pgrep killall cat ls head cut rfkill which curl sleep mkdir chmod sfdisk mkfs.vfat efibootmgr partx partprobe wipefs; do UTIL_PATH="$(command -v "$util" 2>/dev/null || true)" if [ -n "$UTIL_PATH" ] && [ -f "$UTIL_PATH" ]; then cp "$UTIL_PATH" "${INITRAMFS_DIR}/bin/" for lib in $(ldd "$UTIL_PATH" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done fi doneelse warn "No WiFi binaries found — WiFi will not work"fi
# ── SSH daemon (dropbear) for remote access ──DROPBEAR_BIN="$(command -v dropbear 2>/dev/null || true)"DROPBEARKEY_BIN="$(command -v dropbearkey 2>/dev/null || true)"if [ -n "$DROPBEAR_BIN" ] && [ -n "$DROPBEARKEY_BIN" ]; then log "Bundling dropbear SSH daemon..." mkdir -p "${INITRAMFS_DIR}/usr/sbin" "${INITRAMFS_DIR}/etc/dropbear" cp "$DROPBEAR_BIN" "${INITRAMFS_DIR}/usr/sbin/dropbear" cp "$DROPBEARKEY_BIN" "${INITRAMFS_DIR}/usr/sbin/dropbearkey" chmod +x "${INITRAMFS_DIR}/usr/sbin/dropbear" "${INITRAMFS_DIR}/usr/sbin/dropbearkey" ln -sf /usr/sbin/dropbear "${INITRAMFS_DIR}/bin/dropbear" 2>/dev/null || true ln -sf /usr/sbin/dropbearkey "${INITRAMFS_DIR}/bin/dropbearkey" 2>/dev/null || true for lib in $(ldd "$DROPBEAR_BIN" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done # Create passwd/group so dropbear can resolve uid 0 echo "root:x:0:0:root:/:/bin/sh" > "${INITRAMFS_DIR}/etc/passwd" echo "root:x:0:" > "${INITRAMFS_DIR}/etc/group" log " dropbear: $(du -sh "${INITRAMFS_DIR}/usr/sbin/dropbear" | cut -f1)"else warn "dropbear not found — SSH remote access not available"fi
# ── Claude Code utilities (git, ripgrep, jq, ssh) ──# These tools make Claude Code significantly more capable on the device.for util in git rg jq ssh; do UTIL_PATH="$(command -v "$util" 2>/dev/null || true)" if [ -n "$UTIL_PATH" ] && [ -f "$UTIL_PATH" ]; then cp "$UTIL_PATH" "${INITRAMFS_DIR}/bin/${util}" for lib in $(ldd "$UTIL_PATH" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " ${util}: $(du -sh "${INITRAMFS_DIR}/bin/${util}" | cut -f1)" else warn "${util} not found — Claude Code will have reduced capability" fidone
# ── Claude Code native binary ──# Download or use cached Bun SEA binary (no Node.js required on device)CLAUDE_CACHE="${BUILD_DIR}/claude-native"CLAUDE_GCS="https://storage.googleapis.com/claude-code-dist-86c565f3-f756-42ad-8dfa-d59b1c096819/claude-code-releases"if [ ! -f "${CLAUDE_CACHE}" ] || [ "$(find "${CLAUDE_CACHE}" -mtime +7 2>/dev/null)" ]; then CLAUDE_VER=$(curl -fsSL "${CLAUDE_GCS}/latest" 2>/dev/null || true) if [ -n "${CLAUDE_VER}" ]; then log "Downloading Claude Code ${CLAUDE_VER}..." curl -fsSL "${CLAUDE_GCS}/${CLAUDE_VER}/linux-x64/claude" -o "${CLAUDE_CACHE}.tmp" && \ mv "${CLAUDE_CACHE}.tmp" "${CLAUDE_CACHE}" && \ chmod +x "${CLAUDE_CACHE}" fifiif [ -f "${CLAUDE_CACHE}" ]; then cp "${CLAUDE_CACHE}" "${INITRAMFS_DIR}/bin/claude" chmod +x "${INITRAMFS_DIR}/bin/claude" # DO NOT strip — Bun SEA binary; stripping destroys embedded JS for lib in $(ldd "${CLAUDE_CACHE}" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " claude: $(du -sh "${INITRAMFS_DIR}/bin/claude" | cut -f1) (native binary)"else warn "Claude Code binary not available — Claude will not work on device"fi
# Git credential helper — reads GitHub PAT from /github-pat (baked by ac-os)cat > "${INITRAMFS_DIR}/bin/git-credential-ac" << 'GIT_CRED'#!/bin/sh# Serves GitHub PAT for git HTTPS auth on AC Native OScase "$1" in get) while IFS= read -r line; do case "$line" in host=github.com*) ;; *) continue ;; esac done [ -f /github-pat ] || exit 1 echo "protocol=https" echo "host=github.com" echo "username=x-access-token" printf "password=%s\n" "$(cat /github-pat | tr -d '\n')" ;;esacGIT_CREDchmod +x "${INITRAMFS_DIR}/bin/git-credential-ac"
# Copy CA trust bundle for HTTPS curl calls (OS update/clock/version checks).CA_BUNDLE_SRC=""for p in /etc/pki/tls/certs/ca-bundle.crt /etc/ssl/certs/ca-certificates.crt; do if [ -f "$p" ]; then CA_BUNDLE_SRC="$p" break fidoneif [ -n "${CA_BUNDLE_SRC}" ]; then mkdir -p "${INITRAMFS_DIR}/etc/pki/tls/certs" \ "${INITRAMFS_DIR}/etc/pki/tls" \ "${INITRAMFS_DIR}/etc/ssl/certs" cp "${CA_BUNDLE_SRC}" "${INITRAMFS_DIR}/etc/pki/tls/certs/ca-bundle.crt" cp "${CA_BUNDLE_SRC}" "${INITRAMFS_DIR}/etc/pki/tls/cert.pem" cp "${CA_BUNDLE_SRC}" "${INITRAMFS_DIR}/etc/ssl/certs/ca-certificates.crt" log "CA bundle installed: /etc/pki/tls/certs/ca-bundle.crt"else warn "No CA bundle found — HTTPS fetches may fail"fi
# Bundle ac-native's own shared library dependencies (needed when built dynamically)# Copies each .so to its canonical path inside initramfs, preserving directory structureif [ -f "${BUILD_DIR}/ac-native" ]; then for lib in $(ldd "${BUILD_DIR}/ac-native" 2>/dev/null | grep -oP '/[^ ()]+\.so[^ ()]*'); do [ -f "$lib" ] || continue dest_dir="${INITRAMFS_DIR}$(dirname "$lib")" mkdir -p "$dest_dir" cp -n "$lib" "$dest_dir/" 2>/dev/null || true # Also create unversioned .so symlink so dlopen() finds it base="$(basename "$lib")" novers="$(echo "$base" | sed 's/\.so\..*/\.so/')" [ "$novers" != "$base" ] && ln -sf "$base" "$dest_dir/$novers" 2>/dev/null || true done log "Bundled $(ldd "${BUILD_DIR}/ac-native" 2>/dev/null | grep -c '\.so') shared libs"fi
# ── Wayland compositor stack (cage + seatd + Mesa GPU) ──# cage: Wayland kiosk compositor — runs ac-native as a Wayland client# seatd: seat daemon required by wlroots/cage for DRM access# These enable browser popups (OAuth), GPU acceleration, and multi-client Wayland.CAGE_BIN="$(command -v cage 2>/dev/null || true)"SEATD_BIN="$(command -v seatd 2>/dev/null || true)"
if [ -n "${CAGE_BIN}" ] && [ -f "${CAGE_BIN}" ]; then log "Bundling cage Wayland compositor..." cp "${CAGE_BIN}" "${INITRAMFS_DIR}/bin/cage" chmod +x "${INITRAMFS_DIR}/bin/cage" for lib in $(ldd "${CAGE_BIN}" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -n "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " cage: $(du -sh "${INITRAMFS_DIR}/bin/cage" | cut -f1)"else warn "cage not installed — Wayland compositor unavailable"fi
if [ -n "${SEATD_BIN}" ] && [ -f "${SEATD_BIN}" ]; then cp "${SEATD_BIN}" "${INITRAMFS_DIR}/bin/seatd" chmod +x "${INITRAMFS_DIR}/bin/seatd" for lib in $(ldd "${SEATD_BIN}" 2>/dev/null | grep -oP '/\S+'); do [ -f "$lib" ] && cp -nL "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true done log " seatd: $(du -sh "${INITRAMFS_DIR}/bin/seatd" | cut -f1)"else warn "seatd not installed — seat daemon unavailable"fi
# Mesa GPU stack (EGL, GBM, DRI drivers) — needed for cage/Wayland GPU rendering# Search both Fedora (/usr/lib64/) and Debian (/usr/lib/x86_64-linux-gnu/) pathsfind_lib() { for dir in /usr/lib64 /usr/lib/x86_64-linux-gnu; do local f="${dir}/$1" [ -f "$f" ] && echo "$f" && return 0 f="$(readlink -f "${dir}/$1" 2>/dev/null || true)" [ -f "$f" ] && echo "$f" && return 0 done return 0 # not found is OK}find_dri() { for dir in /usr/lib64/dri /usr/lib/x86_64-linux-gnu/dri; do [ -e "${dir}/$1" ] && echo "${dir}/$1" && return 0 done return 0 # not found is OK}
log "Bundling Mesa GPU + Wayland libs..."mkdir -p "${INITRAMFS_DIR}/lib64/dri"
for lib in libEGL.so.1 libEGL_mesa.so.0 libGLESv2.so.2 libgbm.so.1 libGL.so.1 \ libGLX_mesa.so.0 libGLdispatch.so.0 libglapi.so.0 \ libwayland-client.so.0 libwayland-cursor.so.0 libwayland-egl.so.1 \ libwayland-server.so.0 libxkbcommon.so.0 libinput.so.10 \ libexpat.so.1 libffi.so.8; do src="$(find_lib "$lib")" if [ -n "$src" ] && [ -f "$src" ]; then cp -nL "$src" "${INITRAMFS_DIR}/lib64/" 2>/dev/null || true ln -sf "$(basename "$src")" "${INITRAMFS_DIR}/lib64/${lib}" 2>/dev/null || true fidone
# Mesa gallium (monolithic driver — contains iris/i915/swrast)GALLIUM=$(ls /usr/lib64/libgallium-*.so /usr/lib/x86_64-linux-gnu/libgallium-*.so 2>/dev/null | head -1 || true)[ -n "$GALLIUM" ] && [ -f "$GALLIUM" ] && cp "$GALLIUM" "${INITRAMFS_DIR}/lib64/"
# DRI driver stubsfor drv in iris_dri.so i915_dri.so kms_swrast_dri.so swrast_dri.so libdril_dri.so; do src="$(find_dri "$drv")" if [ -n "$src" ]; then if [ -L "$src" ]; then tgt=$(readlink "$src") # Copy the target file too tgt_full="$(dirname "$src")/$tgt" [ -f "$tgt_full" ] && cp -n "$tgt_full" "${INITRAMFS_DIR}/lib64/dri/" 2>/dev/null || true ln -sf "$tgt" "${INITRAMFS_DIR}/lib64/dri/${drv}" elif [ -f "$src" ]; then cp "$src" "${INITRAMFS_DIR}/lib64/dri/" fi fidone
GPU_SIZE=$(du -sh "${INITRAMFS_DIR}/lib64/dri" 2>/dev/null | cut -f1 || true)GALLIUM_SIZE=$([ -n "${GALLIUM:-}" ] && du -sh "$GALLIUM" 2>/dev/null | cut -f1 || echo "none")log " Mesa GPU: dri=${GPU_SIZE:-0} gallium=${GALLIUM_SIZE}"
# xkb keyboard data (needed for Wayland keyboard layout)for xkb_dir in /usr/share/X11/xkb /usr/share/xkb; do if [ -d "$xkb_dir" ]; then mkdir -p "${INITRAMFS_DIR}/usr/share/X11" cp -aL "$xkb_dir" "${INITRAMFS_DIR}/usr/share/X11/xkb" 2>/dev/null || \ cp -rL "$xkb_dir" "${INITRAMFS_DIR}/usr/share/X11/xkb" 2>/dev/null || true log " xkb: $(du -sh "${INITRAMFS_DIR}/usr/share/X11/xkb" 2>/dev/null | cut -f1)" break fidone
# Init: shell script that starts seatd + cage + ac-native (Wayland compositor mode)# Falls back to direct ac-native exec if cage is not availablecp "${SCRIPT_DIR}/../initramfs/init" "${INITRAMFS_DIR}/init"chmod +x "${INITRAMFS_DIR}/init"log "Init: cage+Wayland boot script installed"
# ── Resolve ALL transitive shared library dependencies ──# Individual binary copies above use ldd per-binary, but miss transitive deps# (e.g. libnl-genl-3.so needed by iw/wpa_supplicant, libcurl.so.4 needed by curl).# Run ldd on every ELF binary/lib in the initramfs and copy anything still missing.log "Resolving transitive shared library dependencies..."TRANS_COPIED=0for pass in 1 2; do # Find all ELF files (binaries + shared libs) in the initramfs NEEDS_COPY=0 while IFS= read -r elf_file; do [ -f "$elf_file" ] || continue # Skip non-ELF files (scripts, data) file "$elf_file" 2>/dev/null | grep -q "ELF" || continue for lib in $(ldd "$elf_file" 2>/dev/null | grep -oP '/[^ ()]+\.so[^ ()]*'); do [ -f "$lib" ] || continue base="$(basename "$lib")" # Check if already in lib64/ if [ ! -f "${INITRAMFS_DIR}/lib64/${base}" ]; then cp "$lib" "${INITRAMFS_DIR}/lib64/" 2>/dev/null && NEEDS_COPY=1 && TRANS_COPIED=$((TRANS_COPIED + 1)) # Also create unversioned .so symlink novers="$(echo "$base" | sed 's/\.so\..*/\.so/')" [ "$novers" != "$base" ] && ln -sf "$base" "${INITRAMFS_DIR}/lib64/$novers" 2>/dev/null || true fi # All libs go into lib64/ only — no canonical-path copies. # /lib is a symlink to lib64/, so duplicating into /lib/x86_64-linux-gnu/ # would create a real directory that shadows the symlink and wastes ~84 MB. done done < <(find "${INITRAMFS_DIR}" -type f \( -name "*.so*" -o -path "*/bin/*" -o -path "*/sbin/*" -o -path "*/usr/sbin/*" -o -name "ac-native" \) 2>/dev/null) # Second pass catches deps-of-deps; break early if nothing new was found [ "${NEEDS_COPY}" -eq 0 ] && breakdonelog "Transitive deps: ${TRANS_COPIED} additional libraries copied"
# ── Deduplicate shared libraries ──# The build copies libs into lib64/ (primary) but transitive deps and ldd# also populated lib/x86_64-linux-gnu/ with identical copies (~84 MB waste).# Replace duplicates with symlinks; keep lib64/ as the single source of truth.if [ -d "${INITRAMFS_DIR}/lib/x86_64-linux-gnu" ]; then DUP_SAVED=0 for dup in "${INITRAMFS_DIR}/lib/x86_64-linux-gnu/"*; do [ -f "$dup" ] || continue base="$(basename "$dup")" if [ -f "${INITRAMFS_DIR}/lib64/${base}" ]; then DUP_SIZE=$(wc -c < "$dup") rm "$dup" ln -sf "../../lib64/${base}" "$dup" DUP_SAVED=$((DUP_SAVED + DUP_SIZE)) fi done log "Deduplicated lib/x86_64-linux-gnu/: saved $((DUP_SAVED / 1048576)) MB"fi
# Ensure /lib64 is on the dynamic linker search pathmkdir -p "${INITRAMFS_DIR}/etc"echo "/lib64" > "${INITRAMFS_DIR}/etc/ld.so.conf"echo "/lib/x86_64-linux-gnu" >> "${INITRAMFS_DIR}/etc/ld.so.conf"
# Ensure /lib/x86_64-linux-gnu exists (Ubuntu binaries like iw link against this path)mkdir -p "${INITRAMFS_DIR}/lib/x86_64-linux-gnu"# Symlink all lib64 .so files into the Ubuntu canonical pathfor lib in "${INITRAMFS_DIR}/lib64/"*.so*; do [ -f "$lib" ] || continue base="$(basename "$lib")" [ ! -e "${INITRAMFS_DIR}/lib/x86_64-linux-gnu/${base}" ] && \ ln -sf "../../lib64/${base}" "${INITRAMFS_DIR}/lib/x86_64-linux-gnu/${base}" 2>/dev/null || truedone
# Generate initramfs manifest (for build parity verification between local/oven)cd "${INITRAMFS_DIR}"find . -type f -o -type l | sort | while IFS= read -r f; do if [ -L "$f" ]; then printf "L %s -> %s\n" "$f" "$(readlink "$f")" else printf "F %s %s\n" "$(wc -c < "$f")" "$f" fidone > "${BUILD_DIR}/initramfs-manifest.txt"cp "${BUILD_DIR}/initramfs-manifest.txt" "${INITRAMFS_DIR}/manifest.txt"MANIFEST_LINES=$(wc -l < "${BUILD_DIR}/initramfs-manifest.txt")log "Manifest: ${MANIFEST_LINES} entries (${BUILD_DIR}/initramfs-manifest.txt)"
# Create cpio + both compressed variants. The kernel embeds the lz4 for# fast boot (CONFIG_INITRAMFS_SOURCE), but we also regenerate the .gz# every time because `upload-release.sh` and `ac_media_stage_boot_tree`# both prefer .gz for universal bootloader compatibility — if we skip# this, they silently pick up a stale .gz from a previous build (that# bit us with a March-30 binary flashed weeks later).INITRAMFS_CPIO="${BUILD_DIR}/initramfs.cpio"cd "${INITRAMFS_DIR}"find . -print0 | cpio --null -ov --format=newc > "${INITRAMFS_CPIO}" 2>/dev/nulllz4 -l -9 -f "${INITRAMFS_CPIO}" "${INITRAMFS_CPIO}.lz4"gzip -9 -c "${INITRAMFS_CPIO}" > "${INITRAMFS_CPIO}.gz"CPIO_SIZE=$(wc -c < "${INITRAMFS_CPIO}.lz4")GZ_SIZE=$(wc -c < "${INITRAMFS_CPIO}.gz")log "Initramfs: ${CPIO_SIZE} bytes (LZ4), ${GZ_SIZE} bytes (GZ)"
# ============================================================# Step 4: Build kernel with embedded initramfs# ============================================================KERNEL_SRC="${BUILD_DIR}/linux-${KERNEL_VERSION}"VMLINUZ="${BUILD_DIR}/vmlinuz"
if [ "${SKIP_KERNEL}" -eq 0 ] || [ ! -f "${VMLINUZ}" ]; then log "Building kernel ${KERNEL_VERSION} with embedded initramfs..."
# Download kernel source if needed KERNEL_TAR="${BUILD_DIR}/linux-${KERNEL_VERSION}.tar.xz" if [ ! -f "${KERNEL_TAR}" ]; then log "Downloading kernel..." curl -L "https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-${KERNEL_VERSION}.tar.xz" -o "${KERNEL_TAR}" fi if [ ! -d "${KERNEL_SRC}" ]; then log "Extracting kernel..." tar xf "${KERNEL_TAR}" -C "${BUILD_DIR}" fi
# Apply config cp "${KERNEL_DIR}/config-minimal" "${KERNEL_SRC}/.config"
# Ensure built-in firmware blobs exist (kernel embeds these via CONFIG_EXTRA_FIRMWARE) FIRMWARE_ABS="$(cd "${BUILD_DIR}" && pwd)/firmware" mkdir -p "${FIRMWARE_ABS}" for fw in iwlwifi-9260-th-b0-jf-b0-46.ucode iwlwifi-cc-a0-77.ucode iwlwifi-QuZ-a0-hr-b0-77.ucode iwlwifi-QuZ-a0-jf-b0-77.ucode; do if [ ! -f "${FIRMWARE_ABS}/${fw}" ]; then if [ -f "/lib/firmware/${fw}" ]; then cp "/lib/firmware/${fw}" "${FIRMWARE_ABS}/${fw}" elif [ -f "/lib/firmware/${fw}.zst" ]; then zstd -d "/lib/firmware/${fw}.zst" -o "${FIRMWARE_ABS}/${fw}" 2>/dev/null elif [ -f "/lib/firmware/${fw}.xz" ]; then xz -dk "/lib/firmware/${fw}.xz" -c > "${FIRMWARE_ABS}/${fw}" 2>/dev/null else log "WARNING: firmware ${fw} not found in /lib/firmware/" fi fi done
# Fix firmware dir to match actual build location (config-minimal has a hardcoded path) sed -i "s|^CONFIG_EXTRA_FIRMWARE_DIR=.*|CONFIG_EXTRA_FIRMWARE_DIR=\"${FIRMWARE_ABS}\"|" "${KERNEL_SRC}/.config"
# Set initramfs source path INITRAMFS_ABS="$(cd "${BUILD_DIR}" && pwd)/initramfs.cpio.lz4" echo "CONFIG_INITRAMFS_SOURCE=\"${INITRAMFS_ABS}\"" >> "${KERNEL_SRC}/.config"
# Finalize config cd "${KERNEL_SRC}" make olddefconfig
# Build JOBS="${JOBS:-$(nproc)}" log "Compiling kernel (${JOBS} jobs)..." make -j"${JOBS}" bzImage
# Copy output BZIMAGE="${KERNEL_SRC}/arch/x86/boot/bzImage" if [ -f "${BZIMAGE}" ]; then cp "${BZIMAGE}" "${VMLINUZ}" else err "bzImage not found!" exit 1 fielse log "Skipping kernel build (using existing vmlinuz)"fi
KERNEL_SIZE=$(wc -c < "${VMLINUZ}")log "Kernel: $(( KERNEL_SIZE / 1024 / 1024 ))MB (${KERNEL_SIZE} bytes)"
# ============================================================# Step 5: Flash to USB (if --flash specified)# ============================================================if [ -n "${FLASH_DEV}" ]; then if [ ! -b "${FLASH_DEV}" ]; then err "${FLASH_DEV} is not a block device" exit 1 fi
log "Flashing to ${FLASH_DEV}..." warn "This will ERASE ALL DATA on ${FLASH_DEV}"
# Create GPT + EFI System Partition sfdisk "${FLASH_DEV}" << 'PART_EOF'label: gpttype=C12A7328-F81F-11D2-BA4B-00A0C93EC93B, size=512MPART_EOF sync
# Wait for partition PART="${FLASH_DEV}1" for i in $(seq 1 20); do [ -b "${PART}" ] && break sleep 0.3 done
if [ ! -b "${PART}" ]; then err "Partition ${PART} not found" exit 1 fi
# Format FAT32 mkfs.vfat -F 32 -n "AC-NATIVE" "${PART}"
# Copy kernel + splash chainloader using mtools (no mount needed) mmd -i "${PART}" ::EFI mmd -i "${PART}" ::EFI/BOOT SPLASH_EFI="${NATIVE_DIR}/bootloader/splash.efi" if [ -f "${SPLASH_EFI}" ]; then log "Using splash chainloader (${SPLASH_EFI})" mcopy -i "${PART}" "${SPLASH_EFI}" ::EFI/BOOT/BOOTX64.EFI mcopy -i "${PART}" "${VMLINUZ}" ::EFI/BOOT/KERNEL.EFI else log "No splash chainloader found, using kernel directly" mcopy -i "${PART}" "${VMLINUZ}" ::EFI/BOOT/BOOTX64.EFI fi
# Write config.json with handle + optional per-char colors from handle-colors API HANDLE_CLEAN="${HANDLE#@}" [ -z "${HANDLE_CLEAN}" ] && HANDLE_CLEAN="jeffrey" CONFIG_TMP=$(mktemp) COLORS_JSON="" if [ -n "${HANDLE_CLEAN}" ]; then HANDLE_URI="$(printf '%s' "${HANDLE_CLEAN}" | jq -sRr @uri)" COLORS_RESP="$(curl -fsSL --connect-timeout 5 --max-time 12 \ "${HANDLE_COLORS_API}?handle=${HANDLE_URI}" 2>/dev/null || true)" if [ -n "${COLORS_RESP}" ]; then COLORS_JSON="$(printf '%s' "${COLORS_RESP}" | jq -c '.colors // empty' 2>/dev/null || true)" [ "${COLORS_JSON}" = "null" ] && COLORS_JSON="" fi fi
if [ -n "${COLORS_JSON}" ] && printf '%s' "${COLORS_JSON}" | jq -e 'type == "array"' >/dev/null 2>&1; then jq -cn --arg handle "${HANDLE_CLEAN}" --argjson colors "${COLORS_JSON}" \ '{handle:$handle, colors:$colors}' > "${CONFIG_TMP}" COLOR_COUNT="$(printf '%s' "${COLORS_JSON}" | jq 'length')" log "Fetched ${COLOR_COUNT} boot colors for @${HANDLE_CLEAN}" else jq -cn --arg handle "${HANDLE_CLEAN}" '{handle:$handle}' > "${CONFIG_TMP}" warn "No handle colors for @${HANDLE_CLEAN} (using fallback rainbow title)" fi
mcopy -i "${PART}" "${CONFIG_TMP}" ::config.json rm -f "${CONFIG_TMP}" log "Wrote config.json (handle: ${HANDLE_CLEAN})"
sync log "Flashed! Kernel at EFI/BOOT/BOOTX64.EFI on ${FLASH_DEV}" log "Remove USB and boot from it (UEFI, Secure Boot OFF)."else log "" log "=== Build complete ===" log "Kernel: ${VMLINUZ}" log "" log "To flash to USB:" log " $0 --flash /dev/sdX" log "" log "Or manually with mtools:" log " sfdisk /dev/sdX < <(echo 'label: gpt'; echo 'type=C12A7328-F81F-11D2-BA4B-00A0C93EC93B, size=512M')" log " mkfs.vfat -F 32 -n AC-NATIVE /dev/sdX1" log " mmd -i /dev/sdX1 ::EFI ::EFI/BOOT" log " mcopy -i /dev/sdX1 ${VMLINUZ} ::EFI/BOOT/BOOTX64.EFI"fi