Linux From Scratch（从零开始构建Linux系统，简称LFS）（三）

九. 系统配置

　　1. 安装 LFS-Bootscripts-20150222

　　　　软件包包含一套在 LFS 系统启动和关闭时的启动和停止脚本。

cd /sources
tar -jxf lfs-bootscripts-20150222.tar.bz2
cd lfs-bootscripts-20150222
make install
cd /sources
rm -rf lfs-bootscripts-20150222

　　2. 管理网络设备

# 运行以下命令，创建网络设备 Udev 规则
bash /lib/udev/init-net-rules.sh
# 查看生成的规则
cat /etc/udev/rules.d/70-persistent-net.rules

　　3. 配置系统主机名称

echo "lfs" > /etc/hostname

　　4. 创建 /etc/hosts  文件

cat > /etc/hosts << "EOF"
# Begin /etc/hosts (network card version)

127.0.0.1 localhost

# End /etc/hosts (network card version)
EOF

　　5. 配置 Sysvinit

　　　　内核初始化期间，第一个运行的程序默认是SysVinit，这个程序读取/etc/inittab文件

cat > /etc/inittab << "EOF"
# Begin /etc/inittab

id:3:initdefault:

si::sysinit:/etc/rc.d/init.d/rc S

l0:0:wait:/etc/rc.d/init.d/rc 0
l1:S1:wait:/etc/rc.d/init.d/rc 1
l2:2:wait:/etc/rc.d/init.d/rc 2
l3:3:wait:/etc/rc.d/init.d/rc 3
l4:4:wait:/etc/rc.d/init.d/rc 4
l5:5:wait:/etc/rc.d/init.d/rc 5
l6:6:wait:/etc/rc.d/init.d/rc 6

ca:12345:ctrlaltdel:/sbin/shutdown -t1 -a -r now

su:S016:once:/sbin/sulogin

1:2345:respawn:/sbin/agetty --noclear tty1 9600
2:2345:respawn:/sbin/agetty tty2 9600
3:2345:respawn:/sbin/agetty tty3 9600
4:2345:respawn:/sbin/agetty tty4 9600
5:2345:respawn:/sbin/agetty tty5 9600
6:2345:respawn:/sbin/agetty tty6 9600

# End /etc/inittab
EOF

　　6. 配置系统时钟

cat > /etc/sysconfig/clock << "EOF"
# Begin /etc/sysconfig/clock

UTC=1

# Set this to any options you might need to give to hwclock,
# such as machine hardware clock type for Alphas.
CLOCKPARAMS=

# End /etc/sysconfig/clock
EOF

　　7. Bash 启动文件

cat > /etc/profile << "EOF"
# Begin /etc/profile

export LANG=en_US.UTF-8

# End /etc/profile
EOF

　　8. 创建 /etc/inputrc 文件

　　　　inputrc  文件的作用是告知系统应该以怎样的键盘布局处理键盘

cat > /etc/inputrc << "EOF"
# Begin /etc/inputrc
# Modified by Chris Lynn <roryo@roryo.dynup.net>

# Allow the command prompt to wrap to the next line
set horizontal-scroll-mode Off

# Enable 8bit input
set meta-flag On
set input-meta On

# Turns off 8th bit stripping
set convert-meta Off

# Keep the 8th bit for display
set output-meta On

# none, visible or audible
set bell-style none

# All of the following map the escape sequence of the value
# contained in the 1st argument to the readline specific functions
"\eOd": backward-word
"\eOc": forward-word

# for linux console
"\e[1~": beginning-of-line
"\e[4~": end-of-line
"\e[5~": beginning-of-history
"\e[6~": end-of-history
"\e[3~": delete-char
"\e[2~": quoted-insert

# for xterm
"\eOH": beginning-of-line
"\eOF": end-of-line

# for Konsole
"\e[H": beginning-of-line
"\e[F": end-of-line

# End /etc/inputrc
EOF

　　9. 创建 /etc/shells 文件

　　　　shells 文件是当前系统所有可用 shell  的列表文件

cat > /etc/shells << "EOF"
# Begin /etc/shells

/bin/sh
/bin/bash

# End /etc/shells
EOF

　　10. LFS官方文档中还包含了其它可选配置，可按需添加

十. 让 LFS 系统可引导

　　1. 创建 /etc/fstab 文件

cat > /etc/fstab << "EOF"
# Begin /etc/fstab
# file system  mount-point  type     options             dump  fsck
#                                                              order
/dev/root    /    auto    noatime,nodiratime    1    1
#/dev/xxxx    swap    swap    pri=1    0    0

# End /etc/fstab
EOF    

　　2. 挂载 boot 分区

mkdir /mnt/boot
mount /dev/sdc1 /mnt/boot

　　3. Linux-4.7.2

　　　　a. 宿主系统下运行下列命令，查看有线、无线网卡型号

lspci | grep -i ethernet
lspci | grep -i wireless

　　　　b. 根据型号选择合适的驱动，安装配置内核

cd /sources
tar -Jxf linux-4.7.2.tar.xz
cd linux-4.7.2

make mrproper
make menuconfig
#新增
#[*]    Networking support --->
#-*-        Wireless --->
#<*>            cfg80211 - wireless configuration API
#[*]                cfg80211 wireless extensions compatibility
#       Device Drivers --->
#[*]        Network device support --->
#[*]            Ethernet driver support --->
#[*]                Atheros devices
#<M>                    Qualcomm Atheros AR816X/AR817x support
#[*]            Wireless LAN --->
#[*]                Atheros/Qualcomm devices
#<M>                    Atheros 802.11n wireless cards support
#[*]                        Atheros ath9k PCI/PCIe bus support
#<*>            PPP (point-to-point protocol) support
#<*>                PPP support for async serial ports

make
make modules_install

# 下面的命令假设主机是 x86 架构：
cp -v arch/x86/boot/bzImage /mnt/boot/vmlinuz-4.7.2

cp -v System.map /mnt/boot/System.map-4.7.2
cp -v .config /mnt/boot/config-4.7.2
install -d /usr/share/doc/linux-4.7.2
cp -r Documentation/* /usr/share/doc/linux-4.7.2

# 配置 Linux 模块加载顺序
# 如果将 USB 设备（ehci_hcd、ohci_hcd 和 uhci_hcd） 编译为模块，则需要此文件。
# 运行以下命令建立 /etc/modprobe.d/usb.conf 文件：

install -v -m755 -d /etc/modprobe.d
cat > /etc/modprobe.d/usb.conf << "EOF"
# Begin /etc/modprobe.d/usb.conf

install ohci_hcd /sbin/modprobe ehci_hcd ; /sbin/modprobe -i ohci_hcd ; true
install uhci_hcd /sbin/modprobe ehci_hcd ; /sbin/modprobe -i uhci_hcd ; true

# End /etc/modprobe.d/usb.conf
EOF

cd /sources
rm -rf linux-4.7.2  

　　4. 创建 initrd.img 文件

　　　　a. 点击此下载 mkinitramfs 相关文件，并放到LFS系统对应的位置

　　　　b. mkinitramfs 命令依赖于 cpio 包，先安装

cd /sources
tar -jxf cpio-2.12.tar.bz2
cd cpio-2.12

./configure --prefix=/usr \
            --bindir=/bin \
            --enable-mt   \
            --with-rmt=/usr/libexec/rmt &&
make &&
makeinfo --html            -o doc/html      doc/cpio.texi &&
makeinfo --html --no-split -o doc/cpio.html doc/cpio.texi &&
makeinfo --plaintext       -o doc/cpio.txt  doc/cpio.texi

make install &&
install -v -m755 -d /usr/share/doc/cpio-2.12/html &&
install -v -m644    doc/html/* \
                    /usr/share/doc/cpio-2.12/html &&
install -v -m644    doc/cpio.{html,txt} \
                    /usr/share/doc/cpio-2.12

cd /sources
rm -rf cpio-2.12

　　　　c. 执行如下命令，重新生成 initrd

cp /sbin/udevadm /bin/

chmod 777 /usr/sbin/mkinitramfs
/usr/sbin/mkinitramfs --force

　　　　d. 移动 initrd.img-4.7.2.xz 到 boot 分区下

mv /boot/initrd.img-4.7.2.xz /mnt/boot/

　　5. 用 GRUB 设置引导过程

# 将GRUB文件安装到 /mnt/boot/grub，并修改MBR扇区
grub-install --root-directory=/mnt /dev/sdc

# 创建GRUB配置文件
cat > /mnt/boot/grub/grub.cfg << "EOF"
# Begin /boot/grub/grub.cfg
set default=0
set timeout=5

menuentry "linux-4.7.2-lfs-7.10" {
         set kver=4.7.2
         set boot_uuid=<boot分区uuid>
         set root_uuid=<root分区uuid>
         search.fs_uuid ${boot_uuid} root
         linux /vmlinuz-${kver} root=uuid/${root_uuid}
         initrd /initrd.img-${kver}.xz
 }
EOF

十一. 最后

　　1. 创建 /etc/lfs-release 文件

cat > /etc/lsb-release << "EOF"
DISTRIB_ID="Linux From Scratch"
DISTRIB_RELEASE="7.10"
DISTRIB_CODENAME="kevin"
DISTRIB_DESCRIPTION="Linux From Scratch"
EOF

　　2. 安装 OpenSSH

# openssh依赖于openssl库，先安装openssl
cd /sources
tar -zxf openssl-1.0.2h.tar.gz
cd openssl-1.0.2h
./config --prefix=/usr         \
         --openssldir=/etc/ssl \
         --libdir=lib          \
         shared                \
         zlib-dynamic &&
make depend           &&
make
make MANDIR=/usr/share/man MANSUFFIX=ssl install &&
install -dv -m755 /usr/share/doc/openssl-1.0.2h  &&
cp -vfr doc/*     /usr/share/doc/openssl-1.0.2h

cd /sources
rm -rf openssl-1.0.2h

# 安装openssh
cd /sources
tar -zxf openssh-7.3p1.tar.gz
cd openssh-7.3p1
install  -v -m700 -d /var/lib/sshd &&
chown    -v root:sys /var/lib/sshd &&

groupadd -g 50 sshd        &&
useradd  -c 'sshd PrivSep' \
         -d /var/lib/sshd  \
         -g sshd           \
         -s /bin/false     \
         -u 50 sshd
./configure --prefix=/usr                     \
            --sysconfdir=/etc/ssh             \
            --with-md5-passwords              \
            --with-privsep-path=/var/lib/sshd &&
make
make install &&
install -v -m755    contrib/ssh-copy-id /usr/bin     &&

install -v -m644    contrib/ssh-copy-id.1 \
                    /usr/share/man/man1              &&
install -v -m755 -d /usr/share/doc/openssh-7.3p1     &&
install -v -m644    INSTALL LICENCE OVERVIEW README* \
                    /usr/share/doc/openssh-7.3p1

cd /sources
rm -rf openssh-7.3p1

# 系统启动时开启ssh服务
cd /sources
tar -Jxf blfs-bootscripts-20160902.tar.xz
cd blfs-bootscripts-20160902
make install-sshd
cd /sources
rm -rf blfs-bootscripts-20160902

　　3. 安装 dhcpcd

cd /sources
tar -Jxf dhcpcd-6.11.3.tar.xz
cd dhcpcd-6.11.3

./configure --libexecdir=/lib/dhcpcd \
            --dbdir=/var/lib/dhcpcd  &&
make

make install
cd /sources
rm -rf dhcpcd-6.11.3

　　4. 安装 wpa_supplicant

# wpa_supplicant依赖于libnl-3库，先安装libnl-3
cd /sources
tar -zxf libnl-3.2.28.tar.gz
cd libnl-3.2.28

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --disable-static  &&
make

make install
cd /sources
rm -rf libnl-3.2.28

# 安装wpa_supplicant
cd /sources
tar -zxf wpa_supplicant-2.5.tar.gz
cd wpa_supplicant-2.5

cat > wpa_supplicant/.config << "EOF"
CONFIG_BACKEND=file
CONFIG_CTRL_IFACE=y
CONFIG_DEBUG_FILE=y
CONFIG_DEBUG_SYSLOG=y
CONFIG_DEBUG_SYSLOG_FACILITY=LOG_DAEMON
CONFIG_DRIVER_NL80211=y
CONFIG_DRIVER_WEXT=y
CONFIG_DRIVER_WIRED=y
CONFIG_EAP_GTC=y
CONFIG_EAP_LEAP=y
CONFIG_EAP_MD5=y
CONFIG_EAP_MSCHAPV2=y
CONFIG_EAP_OTP=y
CONFIG_EAP_PEAP=y
CONFIG_EAP_TLS=y
CONFIG_EAP_TTLS=y
CONFIG_IEEE8021X_EAPOL=y
CONFIG_IPV6=y
CONFIG_LIBNL32=y
CONFIG_PEERKEY=y
CONFIG_PKCS12=y
CONFIG_READLINE=y
CONFIG_SMARTCARD=y
CONFIG_WPS=y
CFLAGS += -I/usr/include/libnl3
EOF

cd wpa_supplicant &&
make BINDIR=/sbin LIBDIR=/lib

install -v -m755 wpa_{cli,passphrase,supplicant} /sbin/ &&
install -v -m644 doc/docbook/wpa_supplicant.conf.5 /usr/share/man/man5/ &&
install -v -m644 doc/docbook/wpa_{cli,passphrase,supplicant}.8 /usr/share/man/man8/

cd /sources
rm -rf wpa_supplicant-2.5

　　5. 网络配置：复制到命令行执行前，记得把中文注释去掉，否则会出错

# 有线网络配置
cat > /etc/sysconfig/ifconfig.eth0 << "EOF"
ONBOOT="no"
IFACE="eth0"

# 静态IP
SERVICE="ipv4-static"
IP="192.168.1.2"
# 网关
GATEWAY="192.168.1.1"
# 子网掩码
PREFIX="24"
# 广播域
BROADCAST="192.168.1.255"

# 动态IP
#SERVICE="dhcpcd"
# -b background 后台运行
# -q quite 消息仍被记录，但是只有告警或错误的信息被打印
#DHCP_START="-b -q"
# -k release 退出前释放租期
#DHCP_STOP="-k"

EOF

# 无线网络配置
cat > /etc/sysconfig/ifconfig.wlan0 << "EOF"
ONBOOT="no"
IFACE="wlan0"
SERVICE="wpa"

# Additional arguments to wpa_supplicant
WPA_ARGS=""

# 动态IP
WPA_SERVICE="dhcpcd"
DHCP_START="-b -q"
DHCP_STOP="-k"

# 静态IP
#WPA_SERVICE="ipv4-static"
#IP="192.168.1.2"
#GATEWAY="192.168.1.1"
#PREFIX="24"
#BROADCAST="192.168.1.255"

EOF

# WIFI配置
cat > /etc/sysconfig/wpa_supplicant-wlan0.conf << "EOF"
network={
ssid="WiFi-name1"
psk="WiFi-password1"
priority=5
}
EOF

　　6. 卸载文件系统

logout

umount -v $LFS/dev/pts
umount -v $LFS/dev
umount -v $LFS/run
umount -v $LFS/proc
umount -v $LFS/sys
umount -v /mnt/boot
# 删除 boot 和 sources 文件夹
rm -rf $LFS/boot
rm -rf $LFS/sources

umount -v $LFS

　　7. 重启电脑，引导从U盘启动电脑

　　8. 默认登录用户名：root    密码：

　　9. 连接无线网络命令

wpa_supplicant -B -i wlan0 -c /etc/sysconfig/wpa_supplicant-wlan0.conf
dhcpcd wlan0

十二. 如何将LFS系统做成镜像

　　1. 需要一台装有Linux系统的PC机

　　2. 利用 gparted 格式化并重新划分U盘:

　　　　/dev/sdc1       100M        EXT4          boot分区

　　　　/dev/sdc2       900M        EXT4          LFS系统分区

　　3. 执行 sudo  fdisk -u -l /dev/sdc 命令，查看硬件的分区情况，start和end中数字的单位是512字节

　　4. 利用dd命令将U盘做成镜像：

　　　　　　dd if=/dev/sdc of=lfs-7.10-linux-4.7.2.img bs=512 count=[fdisk命令中最大的end数+1]