admin
317037f8eb
Two jobs, one repack pass. BRANDING. Every ISO now carries a Felhom boot screen built from the website's og-image_2.png at repack time (ImageMagick in the assistant container), so the boot card has ONE source and not a second pre-rendered copy in the repo to drift. The card is scaled onto a 1024x768 gfxterm canvas, top-centered, and the card's own subtle background grid is continued across the letterbox fill PHASE-LOCKED to where the card's grid lands — the fill is seamless rather than a square of grid floating in flat navy. Menu positioning needs a gfxmenu theme (plain background_image cannot move the menu off the wordmark), so the stock pvetheme is replaced by felhomtheme, which puts the menu in the lower third the layout deliberately leaves empty. SAFETY — the half that matters. The stock PVE menu offers Graphical, Terminal UI and serial installers plus an Advanced Options submenu (nomodeset x2, three debug variants, Rescue Boot, memtest, UEFI settings). Every one of them reaches the MANUAL installer, whose first question is which disk to wipe. A customer, or their helpful nephew, must not be able to get there from a boot menu. They are not hidden and not password-gated: they are NOT EMITTED. What ships is one entry, 'Felhom telepítés', default, 5s. Boot behavior is unchanged. The kernel/append and initrd lines are lifted VERBATIM from the ISO's own 'Install Proxmox VE (Automated)' entry rather than frozen into a copy here, so a PVE bump tracks automatically; the build fails if they cannot be found, if the append line has lost proxmox-start-auto-installer, or if auto-installer-mode.toml is absent (which would mean the one Felhom- labelled entry boots a manual installer). The rendered menu is then gated for exactly 1 entry, 0 submenus, and zero references to proxtui/proxdebug/nomodeset/ Rescue Boot/memtest/fwsetup — and re-verified by reading the menu back OUT of the finished ISO, not merely out of the extract tree. mkimage-surgery.sh -> iso-repack.sh: branding and the slice-B loader swap need the same extract -> modify -> re-master cycle, so they share one pass instead of re-mastering twice. The mkimage recipe is untouched. The embedded module list is still derived from the STOCK grub.cfg (snapshotted before branding rewrites it), plus gfxmenu's bitmap/bitmap_scale/trig renderer deps. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Nn3VgQk9iwEGgyx6QJ2NvE
33 lines
2.0 KiB
Docker
33 lines
2.0 KiB
Docker
# scripts/iso/Dockerfile.assistant — the build host for the Felhom bare-metal ISO pipeline (R-21).
|
|
#
|
|
# Debian trixie == PVE 9.x codename; the proxmox-auto-install-assistant is pinned to the ISO
|
|
# generation by installing it from the PVE no-subscription repo of the ISO's Debian codename
|
|
# (spike SPIKE-baremetal-iso-2026-07-16.md §15.6: pair by major.minor). Rebuild this image when the
|
|
# target PVE generation changes (e.g. PVE 10 -> Debian forky) and record both versions in the build
|
|
# manifest.
|
|
#
|
|
# Build: docker build -f scripts/iso/Dockerfile.assistant -t felhom-iso-assistant:trixie scripts/iso
|
|
FROM debian:trixie
|
|
|
|
# xorriso: ISO (re-)mastering. shellcheck: lint. grub-mkimage (+ x86_64-efi module dir) and mtools:
|
|
# the slice-B mkimage loader surgery — build a monolithic UEFI loader from the ISO's own GRUB modules
|
|
# and inject it into the efi.img ESP (FAT, via mtools). grub 2.12 on trixie == the PVE 9.x ISO's
|
|
# 2.12-9+pmx2 generation, so the tool matches the modules it embeds. imagemagick: the R-38 GRUB boot
|
|
# card — grub/generate-grub-background.sh letterboxes the website's brand asset onto a 1024x768
|
|
# gfxterm canvas at repack time, so the boot screen has ONE source (the website asset) and not a
|
|
# second pre-rendered copy checked into the repo to drift.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates wget gnupg xorriso shellcheck \
|
|
grub-common grub-efi-amd64-bin mtools dosfstools imagemagick \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# PVE 9.x (trixie) no-subscription repo — pairs the assistant to the 9.2 ISO generation.
|
|
RUN wget -q https://enterprise.proxmox.com/debian/proxmox-release-trixie.gpg \
|
|
-O /etc/apt/trusted.gpg.d/proxmox-release-trixie.gpg
|
|
RUN echo "deb http://download.proxmox.com/debian/pve trixie pve-no-subscription" \
|
|
> /etc/apt/sources.list.d/pve.list
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
proxmox-auto-install-assistant \
|
|
&& rm -rf /var/lib/apt/lists/*
|