Apparmor hassio (#10)
* Delete 0001-Autostart.patch * Update apparmor.mk * Update Config.in * Create hassio-apparmor * Update hassio-apparmor * Update data.conf * Delete etc-apparmor.d-containers.mount * Delete etc-apparmor.d-containers.mount * Delete hassio.conf * Update hassio-apparmor * Update Config.in * Update Config.in * Update hassio.mk * Update hostapp.sh * Update Config.in * Update hassio.mk * Update hassio.mk * Create hassio-supervisor * Update hassio-apparmor * Update hassio-apparmor * Update hassio-apparmor * Update hassio-supervisor * Update hassio-cli * Update hassio-apparmor * Update hassio-apparmor * Create hassio-apparmor.service * Update hassio-apparmor.service * Delete apparmor.service * Update local stuff * Profile for CLI * Update hassio.mk * Update hassio.mk * Update hassio-supervisor * Update hassio-apparmor
This commit is contained in:
@@ -4,9 +4,12 @@ set -e
|
||||
SUPERVISOR=""
|
||||
SUPERVISOR_VERSION=""
|
||||
SUPERVISOR_ARGS=""
|
||||
SUPERVISOR_PROFILE=""
|
||||
CLI=""
|
||||
CLI_VERSION=""
|
||||
CLI_ARGS=""
|
||||
CLI_PROFILE=""
|
||||
APPARMOR=""
|
||||
DATA_IMG="/export/data.ext4"
|
||||
|
||||
# Parse
|
||||
@@ -25,6 +28,10 @@ while [[ $# -gt 0 ]]; do
|
||||
SUPERVISOR_ARGS=$2
|
||||
shift
|
||||
;;
|
||||
--supervisor-profile)
|
||||
SUPERVISOR_PROFILE=$2
|
||||
shift
|
||||
;;
|
||||
--cli)
|
||||
CLI=$2
|
||||
shift
|
||||
@@ -37,6 +44,14 @@ while [[ $# -gt 0 ]]; do
|
||||
CLI_ARGS=$2
|
||||
shift
|
||||
;;
|
||||
--cli-profile)
|
||||
CLI_PROFILE=$2
|
||||
shift
|
||||
;;
|
||||
--apparmor)
|
||||
APPARMOR=$2
|
||||
shift
|
||||
;;
|
||||
*)
|
||||
exit 1
|
||||
;;
|
||||
@@ -49,11 +64,12 @@ dd if=/dev/zero of=${DATA_IMG} bs=1G count=1
|
||||
mkfs.ext4 -L "hassio-data" -E lazy_itable_init=0,lazy_journal_init=0 ${DATA_IMG}
|
||||
|
||||
# Mount / init file structs
|
||||
mount -o loop ${DATA_IMG} /mnt
|
||||
mkdir -p /mnt/docker
|
||||
mkdir -p /mnt/data/
|
||||
mount -o loop ${DATA_IMG} /mnt/data
|
||||
mkdir -p /mnt/data/docker
|
||||
|
||||
# Run dockerd
|
||||
dockerd -s overlay2 -g /mnt/docker &
|
||||
dockerd -s overlay2 -g /mnt/data/docker &
|
||||
DOCKER_PID=$!
|
||||
|
||||
DOCKER_COUNT=0
|
||||
@@ -75,14 +91,23 @@ docker pull "${CLI}:${CLI_VERSION}"
|
||||
docker tag "${CLI}:${CLI_VERSION}" "${CLI}:latest"
|
||||
|
||||
# Write config
|
||||
cat > /mnt/hassio.json <<- EOF
|
||||
cat > /mnt/data/hassio.json <<- EOF
|
||||
{
|
||||
"supervisor": "${SUPERVISOR}",
|
||||
"supervisor_args": "${SUPERVISOR_ARGS}",
|
||||
"supervisor_apparmor": "${SUPERVISOR_PROFILE}",
|
||||
"cli": "${CLI}",
|
||||
"cli_args": "${CLI_ARGS}"
|
||||
"cli_args": "${CLI_ARGS}",
|
||||
"cli_apparmor": "${CLI_PROFILE}",
|
||||
"apparmor": "${APPARMOR}"
|
||||
}
|
||||
EOF
|
||||
|
||||
# Setup AppArmor
|
||||
if [ ! -z "${APPARMOR}" ]; then
|
||||
mkdir -p /mnt/data/${APPARMOR}
|
||||
cp -f /apparmor/* /mnt/data/${APPARMOR}/
|
||||
fi
|
||||
|
||||
# Finish
|
||||
kill -TERM $DOCKER_PID && wait $DOCKER_PID && umount /mnt
|
||||
kill -TERM $DOCKER_PID && wait $DOCKER_PID && umount /mnt/data
|
||||
|
||||
Reference in New Issue
Block a user