HOME

sh-3ll 1.0
DIR:/usr/local/jetapps/usr/share/rear/conf/GNU/
Current File : //usr/local/jetapps/usr/share/rear/conf/GNU/Linux.conf
# Architecture-independend Files
REQUIRED_PROGS+=(
chroot
ip
less
parted
readlink
# For noninteractive confirmation in commands
yes
)

PROGS+=(
partprobe
fdisk
cfdisk
sfdisk
)

# progs to take along
PROGS+=(
rpc.statd
rpcbind
mknod
blkid
vol_id
udev_volume_id
portmap
rpcinfo
tac
reboot
halt
shutdown
killall5
killall
tee
ifconfig
nslookup
route
ifenslave
ifrename
nameif
klogd
syslog-ng
syslogd
rsyslogd
date
rmdir
init
telinit
ethtool
expand
insmod
modprobe
lsmod
true
false
mingetty
agetty
getty
rmmod
hostname
uname
sleep
logger
pstree
ln
dirname
basename
tty
ping
netstat
free
traceroute
xxd
vi
pico
nano
rmmod
df
dmesg
du
gzip
netcat
curl
top
iptraf
joe
getent
id
ldd
strace
rsync
tail
head
find
md5sum
mkfs
mkfs.ext2
mkfs.ext3
mkfs.ext4
mkfs.ext4dev
mkfs.jfs
mkfs.xfs
mkfs.reiserfs
mkfs.vfat
mkfs.btrfs
mkreiserfs
fsck
fsck.ext2
fsck.ext3
fsck.ext4
fsck.ext4dev
fsck.xfs
fsck.reiserfs
reiserfsck
fsck.btrfs
findmnt
btrfsck
tune2fs
tune4fs
xfs_admin
xfs_db
xfs_repair
xfs_info
xfs_growfs
btrfs
jfs_tune
reiserfstune
egrep
fgrep
chmod
chown
stat
mkswap
swapon
swapoff
mknod
touch
scsi_id
lsscsi
logd
initctl
lspci
usleep
mktemp
/bin/true
strace
which
mkfifo
seq
openvt
poweroff
chacl
getfacl
setfacl
attr
getfattr
setfattr
mpath_wait
xargs
sg_inq
env
w
dosfslabel
sysctl
blockdev
lsblk
clear
ckbcomp # required for keyboard layout if setupcon is used

# Older releases of os-prober (1.74 and below) use dmsetup as a fallback
# solution for mounting when grub-mount is missing.
#
# However, dmsetup was included in the rescue image if and only if LVM,
# multipath or encryption were detected.  Thus, BIOS machines that do
# not use these but still have dmsetup present, would block indefinitely
# on the "Installing GRUB2 boot loader..." step.
#
# GRUB2 installation is performed in a chroot after the data have already
# been recovered.  ReaR would call grub-mkconfig which calls os-prober
# which then executes dmsetup.  However, it would never receive the expected
# response in the form of releasing a System V semaphore by dmsetup executed
# by udevd outside the chroot as rescue system would not have dmsetup present.
#
# see https://github.com/rear/rear/pull/2748
# related https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853927
dmsetup
dmeventd
# In some cases to detect an USB device properly we need:
systemd-detect-virt
)

# the lib* serves to cover both 32bit and 64bit libraries!
#
LIBS+=(

### needed for username lookups
/lib*/libnss_dns*
/lib*/libnss_files*
### support multiarch
/lib/*/libnss_dns*
/lib/*/libnss_files*

/lib*/libgcc_s*
/lib*/libresolv*
/usr/lib*/rsyslog/*so
/lib*/rsyslog/*so
# Only copy *.so files in /usr/lib*/syslog-ng/ and skip /usr/lib*/syslog-ng/loggen/
# because the loggen program is not included in the recovery system
# see https://github.com/rear/rear/issues/2743
/usr/lib*/syslog-ng/*so

### needed for curl HTTPS
/lib*/libnsspem.so*
/usr/lib*/libnsspem.so*
/lib*/libfreebl*.so*
/usr/lib*/libfreebl*.so*
/lib*/libnss3.so*
/usr/lib*/libnss3.so*
/lib*/libnssutil3.so*
/usr/lib*/libnssutil3.so*
/lib*/libsoftokn3.so*
/usr/lib*/libsoftokn3.so*
/lib*/libsqlite3.so*
/usr/lib*/libsqlite3.so*
/lib*/libfreeblpriv3.so*
/usr/lib*/libfreeblpriv3.so*
/lib*/libssl.so*
/usr/lib*/libssl.so*
/lib*/libnssdbm3.so*
/usr/lib*/libnssdbm3.so*
)

COPY_AS_IS+=( /dev /etc/inputr[c] /etc/protocols /etc/services /etc/rpc /etc/termcap /etc/terminfo /lib*/terminfo /usr/share/terminfo /etc/netconfig /etc/mke2fs.conf /etc/*-release /etc/localtime /etc/magic /usr/share/misc/magic /etc/dracut.conf /etc/dracut.conf.d /usr/lib/dracut /sbin/modprobe.ksplice-orig /etc/sysctl.conf /etc/sysctl.d /etc/e2fsck.conf )

# Needed by vi on Fedora and derived distributions
# where vi is a shell script that executes /usr/libexec/vi
# see https://github.com/rear/rear/pull/2822
COPY_AS_IS+=( /usr/libexec/vi )

# Required by curl with https:
# There are stored the distribution provided certificates
# installed from packages, nothing confidential.
# Usually the public verified certs, and not private keys.
# The private keys are stored in /etc/ssl/private (not copied)
# Private keys in /etc/pki/* are excluded (see below).
# For more information on why brackets and quotes are not used, check https://github.com/rear/rear/pull/1971
# COPY_AS_IS+=( /etc/ssl/[c]erts /etc/[p]ki /usr/lib/[s]sl /usr/share/[c]a-certificates  /etc/[c]a-certificates )
# but somehow that does not work in practice, see also https://github.com/rear/rear/pull/1971
# so that /etc/ca-certificates/* is added in the old "known to somehow work" style
# that had been used before, cf. https://github.com/rear/rear/pull/1402
COPY_AS_IS+=( '/etc/ssl/certs/*' '/etc/pki/*' '/usr/lib/ssl/*' '/usr/share/ca-certificates/*' '/etc/ca-certificates/*' )

# exclude /dev/shm/*, due to the way we use tar the leading / should be omitted
COPY_AS_IS_EXCLUDE+=( dev/shm/\* )
# Exclude private keys: /etc/pki/tls/private /etc/pki/CA/private /etc/pki/nssdb/key*.db and /usr/lib/ssl/private (cf. above):
COPY_AS_IS_EXCLUDE+=( '/etc/pki/tls/private' '/etc/pki/CA/private' '/etc/pki/nssdb/key*.db' '/usr/lib/ssl/private' )

# some stuff for the Linux command line (the leading blank is needed to add it as a separated word to the KERNEL_CMDLINE string):
KERNEL_CMDLINE+=" selinux=0"

# common users and groups
CLONE_USERS+=( daemon rpc usbmuxd usbmux vcsa nobody dbus )
CLONE_GROUPS+=( tty usbmuxd usbmux fuse kvm oinstall dbus )

# Add firmware file for AMD graphics hardware (if present) on TCG Opal pre-boot authentication (PBA) images
# Cf. https://github.com/rear/rear/issues/2474
# lspci output is expected to look similar to this:
#   00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Device 98e4 (rev 81)
if type -p lspci >/dev/null && lspci | grep --quiet ' VGA .*AMD'; then
    OPAL_PBA_FIRMWARE_FILES+=( '*/amdgpu/*' )
fi