Inital Commit
All checks were successful
Raspberry Pi Image Tool / Raspberry Pi Image Tool [arm64] (push) Successful in 11s
Raspberry Pi Image Tool / Raspberry Pi Image Tool [amd64] (push) Successful in 10s

This commit is contained in:
Cantibra
2025-10-26 21:11:05 +01:00
commit 5e4a11d784
15 changed files with 2537 additions and 0 deletions

View File

@@ -0,0 +1,152 @@
######################################
## ##
## Raspberry Pi Image Configuration ##
## ##
######################################
##
## System Settings
##
## Hostname
## Set the hostname of the Raspberry Pi.
##
HOSTNAME=''
## Root Password
## Set the password to access the Raspberry Pi.
##
ROOT_PASSWORD=''
## Secure Shell Public Key
## Set the public SSH Key to access the
## Raspberry Pi through an SSH connection.
##
SSH_PUBKEY=''
##
## WiFi Settings
##
## WiFi SSID
## Indicate the network name.
##
WIFI_SSID=''
## WiFi PSK
## Indicate the network password.
##
WIFI_PSK=''
## WiFi Key Management
## Indicate the accepted authenticated key management protocol.
##
## Value Description
## ----------------------------------------------------------
## NONE Wired Equivalent Privacy
## WPA-PSK Wi-Fi Protected Access 2
##
WIFI_KEY_MGMT='WPA-PSK'
## WiFi Scan SSID
## Indicate the status of scanning with specified Probe Request frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Enabled
##
WIFI_SCAN_SSID='0'
## WiFi PMF
## Indicate the status of Protected Management Frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Optional
## 2 Required
##
WIFI_PMF='0'
##
## Certificate Settings
##
## Certificate
## Indicate whether certificates are generated.
##
## ----------------------------------------------------------
## true Generate Certificates
## false Skip Function
##
CERTIFICATE='false'
## RSA Keysize
## Specifie the keysize for the RSA-Key.
##
## Value Description
## ----------------------------------------------------------
## 2048 2048 Bit
## 3072 3072 Bit
## 4096 4096 Bit
## .... .... Bit
##
RSA_KEYSIZE='3072'
## ECDSA Keysize
## Specifie the keysize for the ECDSA-Key.
##
## Value Description
## ----------------------------------------------------------
## secp384r1 384 Bit
## secp521r1 521 Bit
## ......... ... Bit
##
ECDSA_KEYSIZE='secp384r1'
## Certificate Subject
## Specifie the certificates subject.
##
## Country - Country Name (2 letter code)
## State - State or Province Name (full name)
## Locality - Locality Name (e.g. city)
## Organization - Organization Name (e.g. company)
## Organizational Unit - Organizational Unit Name (e.g. section)
## Common Name - Common Name (e.g. server FQDN or YOUR name)
##
COUNTRY='GB'
STATE='Cambridgeshire'
LOCALITY='Cambridge'
ORGANIZATION='Raspberry Pi Foundation'
ORGANIZATION_UNIT=''
COMMON_NAME='Raspberry Pi OS'
##
## Diffie-Hellman Settings
##
## Diffie-Hellman Parameters
## Indicate whether Diffie-Hellman Parameters are generated.
## NOTE: THIS FUNCTION INCREASE THE PREPARATION TIME!
##
## ----------------------------------------------------------
## true Generate DHPEM
## false Skip Function
##
DHPEM='false'
## Diffie-Hellman Parameters Keysize
## Specifie the keysize for the Diffie-Hellman Parameters.
## Each keysize generate a separate Diffie-Hellman Parameter.
## e.g. "512 1024 2048 4096"
##
DHPEM_SIZE="512 1024 2048 4096"

View File

@@ -0,0 +1,80 @@
## Cleanup Path Specification
## Path specification to the files or folders
## which will be deleted from the image.
##
/boot/firmware/.fseventsd
/boot/firmware/.TemporaryItems
/dev/*
/etc/.??*
/etc/group-
/etc/gshadow-
/etc/fake-hwclock.data
/etc/ld.so.cache
/etc/machine-id
/etc/passwd-
/etc/shadow-
/etc/ssh/authorizedkeys.d/*
/etc/ssh/sshd_host_key.d/*
/etc/ssl/certs/*
/etc/ssl/crt/*
/etc/ssl/dhpem/*
/etc/ssl/key/*
/etc/udev/hwdb.bin
/etc/xml/catalog.old
/etc/xml/polkitd.xml.old
/etc/xml/xml-core.xml.old
/initrd.img
/initrd.img.old
/lost+found/*
/media/*
/mnt/*
/opt/*
/proc/*
/root/*
/root/.bash_history
/root/.cache
/root/.config
/root/.gnupg
/root/.lesshst
/root/.local
/root/.nano
/root/.ssh
/root/.wget-hsts
/run/*
/srv/*
/sys/*
/tmp/*
/tmp/.??*
/usr/lib/udev/hwdb.bin
/var/backups/*
/var/cache/adduser/*
/var/cache/apparmor/*
/var/cache/apt/*
/var/cache/debconf/*
/var/cache/dphys-swapfile/*
/var/cache/ldconfig/*
/var/cache/man/*
/var/lib/alsa/*
/var/lib/apt/daily_lock
/var/lib/apt/lists/*
/var/lib/apt/mirrors/*
/var/lib/apt/periodic/*
/var/lib/bluetooth/*
/var/lib/dpkg/*-old
/var/lib/logrotate/*
/var/lib/raspberrypi/bootloader/backup/*
/var/lib/sgml-base/*
/var/lib/sudo/lectured/*
/var/lib/systemd/coredump
/var/lib/systemd/linger
/var/lib/systemd/pstore
/var/lib/systemd/random-seed
/var/lib/systemd/rfkill
/var/lib/systemd/timesync
/var/lib/systemd/timers
/var/lib/ucf/*
/var/log/apt/eipp.log.xz
/var/tmp/*
/var/trash/*
/vmlinuz
/vmlinuz.old

View File

@@ -0,0 +1,152 @@
######################################
## ##
## Raspberry Pi Image Configuration ##
## ##
######################################
##
## System Settings
##
## Hostname
## Set the hostname of the Raspberry Pi.
##
HOSTNAME=''
## Root Password
## Set the password to access the Raspberry Pi.
##
ROOT_PASSWORD=''
## Secure Shell Public Key
## Set the public SSH Key to access the
## Raspberry Pi through an SSH connection.
##
SSH_PUBKEY=''
##
## WiFi Settings
##
## WiFi SSID
## Indicate the network name.
##
WIFI_SSID=''
## WiFi PSK
## Indicate the network password.
##
WIFI_PSK=''
## WiFi Key Management
## Indicate the accepted authenticated key management protocol.
##
## Value Description
## ----------------------------------------------------------
## NONE Wired Equivalent Privacy
## WPA-PSK Wi-Fi Protected Access 2
##
WIFI_KEY_MGMT='WPA-PSK'
## WiFi Scan SSID
## Indicate the status of scanning with specified Probe Request frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Enabled
##
WIFI_SCAN_SSID='0'
## WiFi PMF
## Indicate the status of Protected Management Frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Optional
## 2 Required
##
WIFI_PMF='0'
##
## Certificate Settings
##
## Certificate
## Indicate whether certificates are generated.
##
## ----------------------------------------------------------
## true Generate Certificates
## false Skip Function
##
CERTIFICATE='false'
## RSA Keysize
## Specifie the keysize for the RSA-Key.
##
## Value Description
## ----------------------------------------------------------
## 2048 2048 Bit
## 3072 3072 Bit
## 4096 4096 Bit
## .... .... Bit
##
RSA_KEYSIZE='3072'
## ECDSA Keysize
## Specifie the keysize for the ECDSA-Key.
##
## Value Description
## ----------------------------------------------------------
## secp384r1 384 Bit
## secp521r1 521 Bit
## ......... ... Bit
##
ECDSA_KEYSIZE='secp384r1'
## Certificate Subject
## Specifie the certificates subject.
##
## Country - Country Name (2 letter code)
## State - State or Province Name (full name)
## Locality - Locality Name (e.g. city)
## Organization - Organization Name (e.g. company)
## Organizational Unit - Organizational Unit Name (e.g. section)
## Common Name - Common Name (e.g. server FQDN or YOUR name)
##
COUNTRY='GB'
STATE='Cambridgeshire'
LOCALITY='Cambridge'
ORGANIZATION='Raspberry Pi Foundation'
ORGANIZATION_UNIT=''
COMMON_NAME='Raspberry Pi OS'
##
## Diffie-Hellman Settings
##
## Diffie-Hellman Parameters
## Indicate whether Diffie-Hellman Parameters are generated.
## NOTE: THIS FUNCTION INCREASE THE PREPARATION TIME!
##
## ----------------------------------------------------------
## true Generate DHPEM
## false Skip Function
##
DHPEM='false'
## Diffie-Hellman Parameters Keysize
## Specifie the keysize for the Diffie-Hellman Parameters.
## Each keysize generate a separate Diffie-Hellman Parameter.
## e.g. "512 1024 2048 4096"
##
DHPEM_SIZE="512 1024 2048 4096"

View File

@@ -0,0 +1,137 @@
## Cleanup Path Specification
## Path specification to the files or folders
## which will be deleted from the image.
##
/aquota.group
/aquota.user
/boot/firmware/.fseventsd
/boot/firmware/.TemporaryItems
/dev/*
/etc/.??*
/etc/aliases.db
/etc/apt/apt.conf.d/76pveproxy
/etc/dnsmasq.d/*
/etc/fake-hwclock.data
/etc/group-
/etc/gshadow-
/etc/ld.so.cache
/etc/machine-id
/etc/network/interfaces.d/*
/etc/network/nat
/etc/passwd-
/etc/postfix/sasl/password.db
/etc/shadow-
/etc/ssh/authorizedkeys.d/*
/etc/ssh/sshd_host_key.d/*
/etc/ssl/certs/*
/etc/ssl/crt/*
/etc/ssl/dhpem/*
/etc/ssl/key/*
/etc/udev/hwdb.bin
/etc/xml/catalog.old
/etc/xml/polkitd.xml.old
/etc/xml/xml-core.xml.old
/initrd.img
/initrd.img.old
/lost+found/*
/media/*
/mnt/*
/opt/*
/proc/*
/root/*
/root/.bash_history
/root/.cache
/root/.config
/root/.gnupg
/root/.history_frr
/root/.lesshst
/root/.local
/root/.lvm_history
/root/.nano
/root/.ssh
/root/.wget-hsts
/run/*
/srv/*
/sys/*
/tmp/*
/tmp/.??*
/usr/lib/udev/hwdb.bin
/var/backups/*
/var/cache/adduser/*
/var/cache/apparmor/*
/var/cache/apt/*
/var/cache/debconf/*
/var/cache/dphys-swapfile/*
/var/cache/fontconfig/*
/var/cache/ldconfig/*
/var/cache/lxc/*
/var/cache/man/*
/var/cache/samba/*
/var/cache/zfs/*
/var/lib/alsa/*
/var/lib/apt/daily_lock
/var/lib/apt/lists/*
/var/lib/apt/mirrors/*
/var/lib/apt/periodic/*
/var/lib/bluetooth/*
/var/lib/ceph/*
/var/lib/corosync/*
/var/lib/dhcp/*
/var/lib/dpkg/*-old
/var/lib/fail2ban/*
/var/lib/logrotate/*
/var/lib/nfs/sm.bak/*
/var/lib/postfix/*
/var/lib/pve-cluster/*
/var/lib/pve-firewall/*
/var/lib/pve-manager/apl-info/*
/var/lib/pve-manager/jobs/*
/var/lib/pve-manager/pve-replication-state.*
/var/lib/quota/*
/var/lib/raspberrypi/bootloader/backup/*
/var/lib/rrdcached/db/*
/var/lib/rrdcached/journal/*
/var/lib/sgml-base/*
/var/lib/smartmontools/drivedb/*
/var/lib/smartmontools/smartd.*
/var/lib/sudo/lectured/*
/var/lib/swtpm-localca/*
/var/lib/systemd/coredump
/var/lib/systemd/linger
/var/lib/systemd/pstore
/var/lib/systemd/random-seed
/var/lib/systemd/rfkill
/var/lib/systemd/timers
/var/lib/systemd/timesync
/var/lib/ucf/*
/var/lib/vz/dump/*
/var/lib/vz/images/*
/var/lib/vz/private/*
/var/lib/vz/snippets/*
/var/lib/vz/template/cache/*
/var/lib/vz/template/iso/*
/var/log/apt/eipp.log.xz
/var/log/ifupdown2/*
/var/log/pve/*
/var/tmp/*
/var/spool/cron/crontabs/*
/var/spool/postfix/active/*
/var/spool/postfix/bounce/*
/var/spool/postfix/corrupt/*
/var/spool/postfix/defer/*
/var/spool/postfix/deferred/*
/var/spool/postfix/dev/*
/var/spool/postfix/etc/*
/var/spool/postfix/flush/*
/var/spool/postfix/incoming/*
/var/spool/postfix/lib/*
/var/spool/postfix/maildrop/*
/var/spool/postfix/pid/*
/var/spool/postfix/private/*
/var/spool/postfix/public/*
/var/spool/postfix/restart
/var/spool/postfix/saved/*
/var/spool/postfix/usr/*
/var/trash/*
/vmlinuz
/vmlinuz.old

View File

@@ -0,0 +1,152 @@
######################################
## ##
## Raspberry Pi Image Configuration ##
## ##
######################################
##
## System Settings
##
## Hostname
## Set the hostname of the Raspberry Pi.
##
HOSTNAME=''
## Root Password
## Set the password to access the Raspberry Pi.
##
ROOT_PASSWORD=''
## Secure Shell Public Key
## Set the public SSH Key to access the
## Raspberry Pi through an SSH connection.
##
SSH_PUBKEY=''
##
## WiFi Settings
##
## WiFi SSID
## Indicate the network name.
##
WIFI_SSID=''
## WiFi PSK
## Indicate the network password.
##
WIFI_PSK=''
## WiFi Key Management
## Indicate the accepted authenticated key management protocol.
##
## Value Description
## ----------------------------------------------------------
## NONE Wired Equivalent Privacy
## WPA-PSK Wi-Fi Protected Access 2
##
WIFI_KEY_MGMT='WPA-PSK'
## WiFi Scan SSID
## Indicate the status of scanning with specified Probe Request frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Enabled
##
WIFI_SCAN_SSID='0'
## WiFi PMF
## Indicate the status of Protected Management Frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Optional
## 2 Required
##
WIFI_PMF='0'
##
## Certificate Settings
##
## Certificate
## Indicate whether certificates are generated.
##
## ----------------------------------------------------------
## true Generate Certificates
## false Skip Function
##
CERTIFICATE='false'
## RSA Keysize
## Specifie the keysize for the RSA-Key.
##
## Value Description
## ----------------------------------------------------------
## 2048 2048 Bit
## 3072 3072 Bit
## 4096 4096 Bit
## .... .... Bit
##
RSA_KEYSIZE='3072'
## ECDSA Keysize
## Specifie the keysize for the ECDSA-Key.
##
## Value Description
## ----------------------------------------------------------
## secp384r1 384 Bit
## secp521r1 521 Bit
## ......... ... Bit
##
ECDSA_KEYSIZE='secp384r1'
## Certificate Subject
## Specifie the certificates subject.
##
## Country - Country Name (2 letter code)
## State - State or Province Name (full name)
## Locality - Locality Name (e.g. city)
## Organization - Organization Name (e.g. company)
## Organizational Unit - Organizational Unit Name (e.g. section)
## Common Name - Common Name (e.g. server FQDN or YOUR name)
##
COUNTRY='GB'
STATE='Cambridgeshire'
LOCALITY='Cambridge'
ORGANIZATION='Raspberry Pi Foundation'
ORGANIZATION_UNIT=''
COMMON_NAME='Raspberry Pi OS'
##
## Diffie-Hellman Settings
##
## Diffie-Hellman Parameters
## Indicate whether Diffie-Hellman Parameters are generated.
## NOTE: THIS FUNCTION INCREASE THE PREPARATION TIME!
##
## ----------------------------------------------------------
## true Generate DHPEM
## false Skip Function
##
DHPEM='false'
## Diffie-Hellman Parameters Keysize
## Specifie the keysize for the Diffie-Hellman Parameters.
## Each keysize generate a separate Diffie-Hellman Parameter.
## e.g. "512 1024 2048 4096"
##
DHPEM_SIZE="512 1024 2048 4096"

View File

@@ -0,0 +1,88 @@
## Cleanup Path Specification
## Path specification to the files or folders
## which will be deleted from the image.
##
/boot/dtb*
/boot/firmware/.fseventsd
/boot/firmware/.TemporaryItems
/boot/firmware/*.bak
/boot/firmware/overlays/*.bak
/boot/initrd.img
/boot/initrd.img.old
/boot/vmlinuz
/boot/vmlinuz.old
/dev/*
/etc/.??*
/etc/flash-kernel/ignore-efi
/etc/flash-kernel/machine
/etc/group-
/etc/gshadow-
/etc/fake-hwclock.data
/etc/ld.so.cache
/etc/machine-id
/etc/passwd-
/etc/shadow-
/etc/ssh/authorizedkeys.d/*
/etc/ssh/sshd_host_key.d/*
/etc/ssl/certs/*
/etc/ssl/crt/*
/etc/ssl/dhpem/*
/etc/ssl/key/*
/etc/udev/hwdb.bin
/etc/xml/catalog.old
/etc/xml/polkitd.xml.old
/etc/xml/xml-core.xml.old
/lost+found/*
/media/*
/mnt/*
/opt/*
/proc/*
/root/*
/root/.bash_history
/root/.cache
/root/.config
/root/.gnupg
/root/.lesshst
/root/.local
/root/.nano
/root/.ssh
/root/.wget-hsts
/run/*
/srv/*
/sys/*
/tmp/*
/tmp/.??*
/usr/lib/udev/hwdb.bin
/var/backups/*
/var/cache/adduser/*
/var/cache/apparmor/*
/var/cache/apt/*
/var/cache/debconf/*
/var/cache/dphys-swapfile/*
/var/cache/ldconfig/*
/var/cache/man/*
/var/lib/alsa/*
/var/lib/apt/daily_lock
/var/lib/apt/lists/*
/var/lib/apt/mirrors/*
/var/lib/apt/periodic/*
/var/lib/bluetooth/*
/var/lib/dhcpcd/*
/var/lib/dpkg/*-old
/var/lib/logrotate/*
/var/lib/raspberrypi/bootloader/backup/*
/var/lib/sgml-base/*
/var/lib/sudo/lectured/*
/var/lib/systemd/coredump
/var/lib/systemd/ephemeral-trees
/var/lib/systemd/linger
/var/lib/systemd/pstore
/var/lib/systemd/random-seed
/var/lib/systemd/rfkill
/var/lib/systemd/timesync
/var/lib/systemd/timers
/var/lib/ucf/*
/var/lock/*
/var/log/apt/eipp.log.xz
/var/tmp/*
/var/trash/*

View File

@@ -0,0 +1,152 @@
######################################
## ##
## Raspberry Pi Image Configuration ##
## ##
######################################
##
## System Settings
##
## Hostname
## Set the hostname of the Raspberry Pi.
##
HOSTNAME=''
## Root Password
## Set the password to access the Raspberry Pi.
##
ROOT_PASSWORD=''
## Secure Shell Public Key
## Set the public SSH Key to access the
## Raspberry Pi through an SSH connection.
##
SSH_PUBKEY=''
##
## WiFi Settings
##
## WiFi SSID
## Indicate the network name.
##
WIFI_SSID=''
## WiFi PSK
## Indicate the network password.
##
WIFI_PSK=''
## WiFi Key Management
## Indicate the accepted authenticated key management protocol.
##
## Value Description
## ----------------------------------------------------------
## NONE Wired Equivalent Privacy
## WPA-PSK Wi-Fi Protected Access 2
##
WIFI_KEY_MGMT='WPA-PSK'
## WiFi Scan SSID
## Indicate the status of scanning with specified Probe Request frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Enabled
##
WIFI_SCAN_SSID='0'
## WiFi PMF
## Indicate the status of Protected Management Frames.
##
## Value Description
## ----------------------------------------------------------
## 0 Disabled
## 1 Optional
## 2 Required
##
WIFI_PMF='0'
##
## Certificate Settings
##
## Certificate
## Indicate whether certificates are generated.
##
## ----------------------------------------------------------
## true Generate Certificates
## false Skip Function
##
CERTIFICATE='false'
## RSA Keysize
## Specifie the keysize for the RSA-Key.
##
## Value Description
## ----------------------------------------------------------
## 2048 2048 Bit
## 3072 3072 Bit
## 4096 4096 Bit
## .... .... Bit
##
RSA_KEYSIZE='3072'
## ECDSA Keysize
## Specifie the keysize for the ECDSA-Key.
##
## Value Description
## ----------------------------------------------------------
## secp384r1 384 Bit
## secp521r1 521 Bit
## ......... ... Bit
##
ECDSA_KEYSIZE='secp384r1'
## Certificate Subject
## Specifie the certificates subject.
##
## Country - Country Name (2 letter code)
## State - State or Province Name (full name)
## Locality - Locality Name (e.g. city)
## Organization - Organization Name (e.g. company)
## Organizational Unit - Organizational Unit Name (e.g. section)
## Common Name - Common Name (e.g. server FQDN or YOUR name)
##
COUNTRY='GB'
STATE='Cambridgeshire'
LOCALITY='Cambridge'
ORGANIZATION='Raspberry Pi Foundation'
ORGANIZATION_UNIT=''
COMMON_NAME='Raspberry Pi OS'
##
## Diffie-Hellman Settings
##
## Diffie-Hellman Parameters
## Indicate whether Diffie-Hellman Parameters are generated.
## NOTE: THIS FUNCTION INCREASE THE PREPARATION TIME!
##
## ----------------------------------------------------------
## true Generate DHPEM
## false Skip Function
##
DHPEM='false'
## Diffie-Hellman Parameters Keysize
## Specifie the keysize for the Diffie-Hellman Parameters.
## Each keysize generate a separate Diffie-Hellman Parameter.
## e.g. "512 1024 2048 4096"
##
DHPEM_SIZE="512 1024 2048 4096"

View File

@@ -0,0 +1,14 @@
## Cleanup Path Specification
## Path specification to the files or folders
## which will be deleted from the image.
##
/dev/*
/lost+found/*
/media/*
/mnt/*
/proc/*
/run/*
/sys/*
/tmp/*
/tmp/.??*
/var/tmp/*