Alpine Linux - User contributions [en]

Vosk

2025-06-24T07:55:24Z

Jchdel: installing vosk and dependencies

This document describes how to configure an vosk in Alpine Linux.

== Installing vosk ==

<pre>
apk add py3-vosk-api \
py3-cffi \
vosk-model-small-en-us \
ffmpeg
</pre>

== Using vosk ==

<pre>
vosk-transcriber -i hello-world.mp3 \
-o hello-world.txt --log-level WARN \
-m /usr/share/vosk-models/small-en-us
</pre>

User:Jchdel

2025-06-02T08:38:30Z

Jchdel:

Hey,

I'm starting a journey in the voice assistant world.

I will try [[vosk]] and [[ovos]]. Both are lacking a page in this wiki. I hope to be able to contribute some insights...

Notes:
* `apk add vosk-api` is not enough
* `apk add py3-vosk-api` is missing `py3-cfii` dependency

----
My PREVIOUS home/lab setup was

* An Alpine router x86_64 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop) also in 64 bits
* a tower (16 cores x86_64, 128GB RAM) running Alpine, [[openVSwitch]] and [[qemu]]-kvm
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)

I plan to run a Xorg desktop headless in some KVM and remotely connect to it from the R-Pi as X station...
And to drive other dev and build boxes as KVM.

What about https://github.com/e1z0/Framebuffer-browser on Alpine? I plan to give a try and maybe package it...

<pre>
#!/bin/sh
set -x
# This script is intended to transform an Alpine Linux USB key running in
# diskless mode into a PXE boot server.
# It will run with a fixed IP 10.33.0.1 on eth0 acting as primary DHCP
# server.
# Only packages present in the local boot media will be available for
# booted boxes.

set -e

mount -o remount,rw /media/usb

# Let's do all downloads first!
sed -i -e '/community/s/^#//' -e '/edge/d' /etc/apk/repositories
apk update
apk add darkhttpd nfs-utils dnsmasq syslinux

ALPINE=alpine-netboot-3.17.3-x86_64.tar.gz
[ -f $ALPINE ] || \
while true;do
wget -c https://dl-cdn.alpinelinux.org/alpine/v3.17/releases/x86_64/$ALPINE \
&& break
done

mkdir -p /media/usb/tftpboot/pxelinux/pxelinux.cfg

# populate TFTP server
rm -fr /tmp/boot
tar xf alpine-netboot-3.17.3-x86_64.tar.gz -C /tmp
cp -r /tmp/boot/* /media/usb/tftpboot/pxelinux/

# populate HTTP server
#cd /media/usb
# add default apkovl.tar.gz here

# configure darkhttpd
sed -i -e 's+/var/www/localhost/htdocs+/media/usb+' /etc/init.d/darkhttpd
lbu add /etc/init.d/darkhttpd

# populate NFS server
## implicit as we publish /media/usb

# configure NFS for PXE boot
cat << EOF > /etc/exports
# /etc/exports
#
# See exports(5) for a description.

# use exportfs -arv to reread
/media/usb *(ro,no_root_squash,no_subtree_check)
EOF

# configure dnsmasq for PXE boot
cat << EOF > /etc/dnsmasq.d/stamp.conf
# DNS related options
interface=eth0
listen-address=10.33.0.1
listen-address=127.0.0.1
## uplink resolver
server=1.1.1.1
# DHCP related options
dhcp-range=10.33.0.1,10.33.1.254,12h
## push router
dhcp-option=option:router,10.33.0.1
## push resolver
dhcp-option=6,10.33.0.1
# PXE (TFTP) related options
enable-tftp
dhcp-boot=pxelinux/pxelinux.0
tftp-root=/media/usb/tftpboot
EOF
cp /usr/share/syslinux/pxelinux.0 /media/usb/tftpboot/pxelinux/
cp /usr/share/syslinux/ldlinux.c32 /media/usb/tftpboot/pxelinux/
cat << EOF > /media/usb/tftpboot/pxelinux/pxelinux.cfg/default
PROMPT 0
TIMEOUT 3
default alpine
LABEL alpine
LINUX vmlinuz-lts
INITRD pxerd
APPEND ip=dhcp alpine_dev=nfs:10.33.0.1:/media/usb/boot modloop=http://10.33.0.1/boot/modloop-lts nomodeset apkovl=http://10.33.0.1/stamp/default.apkovl.tar.gz alpine_repo=http://10.33.0.1/apks
EOF
# generate initramfs for PXE
if [ ! -f /media/usb/tftpboot/pxelinux/pxerd ];then
cd /etc/mkinitfs/features.d/
echo "kernel/drivers/net/virtio_net.ko" >> network.modules
echo "kernel/drivers/net/ethernet/e1000/*.ko" >> network.modules
echo "/usr/share/udhcpc/default.script" > dhcp.files
echo "kernel/net/packet/af_packet.ko" > dhcp.modules
echo "kernel/fs/nfs/*" > nfs.modules
cd /etc/mkinitfs/
echo 'features="ata base bootchart cdrom cramfs ext2 ext3 ext4 xfs floppy keymap kms raid scsi usb virtio squashfs network dhcp nfs"' > mkinitfs.conf
mkinitfs -o /media/usb/tftpboot/pxelinux/pxerd
fi

# console welcome message
cat << EOF > /etc/motd

This a PXE server intended to deploy a fleet of diskless Alpine Linux.

EOF

cat << EOF > /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 10.33.0.1
netmask 255.255.0.0
EOF

# force install from cache at reboot
cat << EOF > /etc/local.d/fix.start
#!/bin/sh
apk add darkhttpd
service darkhttpd start
EOF
chmod +x /etc/local.d/fix.start

# enable services at reboot
rc-update add local
rc-update add darkhttpd
rc-update add nfs
rc-update add dnsmasq

# persist changes
sync
apk cache -v sync
mount -o remount,ro /media/usb
lbu ci

echo "Press 'Enter' to reboot and act as PXE boot server"
echo "or 'ctrl-c' to go back to the terminal..."
read

reboot
</pre>

User:Jchdel

2025-06-02T07:55:03Z

Jchdel:

Hey,

I'm starting a journey in the voice assistant world.

I will try [[vosk]] and [[ovos]]. Both are lacking a page in this wiki. I hope to be able to contribute some insights...

----
My PREVIOUS home/lab setup was

* An Alpine router x86_64 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop) also in 64 bits
* a tower (16 cores x86_64, 128GB RAM) running Alpine, [[openVSwitch]] and [[qemu]]-kvm
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)

I plan to run a Xorg desktop headless in some KVM and remotely connect to it from the R-Pi as X station...
And to drive other dev and build boxes as KVM.

What about https://github.com/e1z0/Framebuffer-browser on Alpine? I plan to give a try and maybe package it...

<pre>
#!/bin/sh
set -x
# This script is intended to transform an Alpine Linux USB key running in
# diskless mode into a PXE boot server.
# It will run with a fixed IP 10.33.0.1 on eth0 acting as primary DHCP
# server.
# Only packages present in the local boot media will be available for
# booted boxes.

set -e

mount -o remount,rw /media/usb

# Let's do all downloads first!
sed -i -e '/community/s/^#//' -e '/edge/d' /etc/apk/repositories
apk update
apk add darkhttpd nfs-utils dnsmasq syslinux

ALPINE=alpine-netboot-3.17.3-x86_64.tar.gz
[ -f $ALPINE ] || \
while true;do
wget -c https://dl-cdn.alpinelinux.org/alpine/v3.17/releases/x86_64/$ALPINE \
&& break
done

mkdir -p /media/usb/tftpboot/pxelinux/pxelinux.cfg

# populate TFTP server
rm -fr /tmp/boot
tar xf alpine-netboot-3.17.3-x86_64.tar.gz -C /tmp
cp -r /tmp/boot/* /media/usb/tftpboot/pxelinux/

# populate HTTP server
#cd /media/usb
# add default apkovl.tar.gz here

# configure darkhttpd
sed -i -e 's+/var/www/localhost/htdocs+/media/usb+' /etc/init.d/darkhttpd
lbu add /etc/init.d/darkhttpd

# populate NFS server
## implicit as we publish /media/usb

# configure NFS for PXE boot
cat << EOF > /etc/exports
# /etc/exports
#
# See exports(5) for a description.

# use exportfs -arv to reread
/media/usb *(ro,no_root_squash,no_subtree_check)
EOF

# configure dnsmasq for PXE boot
cat << EOF > /etc/dnsmasq.d/stamp.conf
# DNS related options
interface=eth0
listen-address=10.33.0.1
listen-address=127.0.0.1
## uplink resolver
server=1.1.1.1
# DHCP related options
dhcp-range=10.33.0.1,10.33.1.254,12h
## push router
dhcp-option=option:router,10.33.0.1
## push resolver
dhcp-option=6,10.33.0.1
# PXE (TFTP) related options
enable-tftp
dhcp-boot=pxelinux/pxelinux.0
tftp-root=/media/usb/tftpboot
EOF
cp /usr/share/syslinux/pxelinux.0 /media/usb/tftpboot/pxelinux/
cp /usr/share/syslinux/ldlinux.c32 /media/usb/tftpboot/pxelinux/
cat << EOF > /media/usb/tftpboot/pxelinux/pxelinux.cfg/default
PROMPT 0
TIMEOUT 3
default alpine
LABEL alpine
LINUX vmlinuz-lts
INITRD pxerd
APPEND ip=dhcp alpine_dev=nfs:10.33.0.1:/media/usb/boot modloop=http://10.33.0.1/boot/modloop-lts nomodeset apkovl=http://10.33.0.1/stamp/default.apkovl.tar.gz alpine_repo=http://10.33.0.1/apks
EOF
# generate initramfs for PXE
if [ ! -f /media/usb/tftpboot/pxelinux/pxerd ];then
cd /etc/mkinitfs/features.d/
echo "kernel/drivers/net/virtio_net.ko" >> network.modules
echo "kernel/drivers/net/ethernet/e1000/*.ko" >> network.modules
echo "/usr/share/udhcpc/default.script" > dhcp.files
echo "kernel/net/packet/af_packet.ko" > dhcp.modules
echo "kernel/fs/nfs/*" > nfs.modules
cd /etc/mkinitfs/
echo 'features="ata base bootchart cdrom cramfs ext2 ext3 ext4 xfs floppy keymap kms raid scsi usb virtio squashfs network dhcp nfs"' > mkinitfs.conf
mkinitfs -o /media/usb/tftpboot/pxelinux/pxerd
fi

# console welcome message
cat << EOF > /etc/motd

This a PXE server intended to deploy a fleet of diskless Alpine Linux.

EOF

cat << EOF > /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 10.33.0.1
netmask 255.255.0.0
EOF

# force install from cache at reboot
cat << EOF > /etc/local.d/fix.start
#!/bin/sh
apk add darkhttpd
service darkhttpd start
EOF
chmod +x /etc/local.d/fix.start

# enable services at reboot
rc-update add local
rc-update add darkhttpd
rc-update add nfs
rc-update add dnsmasq

# persist changes
sync
apk cache -v sync
mount -o remount,ro /media/usb
lbu ci

echo "Press 'Enter' to reboot and act as PXE boot server"
echo "or 'ctrl-c' to go back to the terminal..."
read

reboot
</pre>

Configure OpenLDAP

2025-04-17T06:16:17Z

Jchdel: not needed anymore (at least in v3.21)

Lightweight Directory Access Protocol (LDAP) is often employed as an authentication mechanism, providing a common username and password across many different applications. This tutorial shows how to install and configure the OpenLDAP package on Alpine Linux.

== Installing Packages ==

There is an Alpine package for OpenLDAP. However, simply adding the openldap apk is not enough to get you up and running. You'll also need to install a backend database and some LDAP command-line tools.

Here's how:

{{Cmd|# apk add openldap openldap-back-mdb openldap-clients}}

But, before you start up the slapd service and go, there's a bit of configuration to do.

== Customizing Configuration for OpenLDAP 2.3+ ==

The Alpine OpenLDAP package can use either a configuration directory (slapd.d) or a configuration file (slapd.conf). Since OpenLDAP version 2.3, the preferred method is to use the slapd.d configuration directory. Any official OpenLDAP documentation, including their [https://www.openldap.org/doc/admin26/quickstart.html quickstart guide], will use this configuration method.

First, create the slapd.d directory with the proper ownership and permissions.

{{Cmd|# install -m 755 -o ldap -g ldap -d /etc/openldap/slapd.d}}

Next, edit the slapd startup configuration to use the directory instead of the file.

# Open up <code>/etc/conf.d/slapd</code> in your favorite editor
# Comment out <code>cfgfile="/etc/openldap/slapd.conf"</code>
# Uncomment <code>cfgdir="/etc/openldap/slapd.d"</code>

Finally, get rid of the included slapd.conf file.

{{Cmd|# rm /etc/openldap/slapd.conf}}

== Updating Shared Libraries File Names ==

Open up <code>/etc/openldap/slapd.ldif</code> in your favorite editor. Search for the file names ending with <code>.la</code> and change the extension to <code>.so</code>

== Customizing Configuration for Your Domain ==

Your LDAP domain can be the same as your DNS domain or it can be completely different. Whatever you choose, be sure to use the LDAP naming convention of <code>dc=domain,dc=tld</code> rather than the dot separated DNS style of <code>domain.tld</code>

# Edit slapd.ldif again.
# Find the <code>olcSuffix:</code> keyword.
# Change the value to match your domain
# Find <code>olcRootDN:</code>
# Change the value to match your domain

Later, this document will assume the domain is <code>dc=home</code> or <code>dc=contoso,dc=com</code>, reflecting a domain of <code>home</code> or <code>contoso.com</code> respectively.

== Importing the Configuration ==

Verify slapd.ldif one last time and use the <code>slapadd</code> command to import it into the backend database.

{{Cmd|# slapadd -n 0 -F /etc/openldap/slapd.d -l /etc/openldap/slapd.ldif}}

There should be no errors, only a "Closing DB..." message.

Next, change ownership on the resulting files in <code>/etc/openldap/slapd.d</code>

'''If you skip this step, the slapd service will refuse to start.'''

{{Cmd|# chown -R ldap:ldap /etc/openldap/slapd.d/*}}

== Configuring the slapd Service ==

The pid directory is missing. We'll need to create it or the service won't start, so this needs to be done first.

{{Cmd|# install -m 755 -o ldap -g ldap -d /var/lib/openldap/run}}

Next, you can start the service and enable it at boot.

{{Cmd|# rc-service slapd start
# rc-update add slapd}}

== Testing ==

The OpenLDAP quickstart guide uses the <code>ldapsearch</code> utility to test the configuration.

{{Cmd|$ ldapsearch -x -b "" -s base '(objectclass{{=}}*)' namingContexts}}

You should see your domain.

You can also test with <code>slapcat</code>

{{Cmd|$ slapcat -n 0}}

This will dump the entire config database in LDIF format. You can also pipe to grep and specify your domain name to verify everything looks correct. When using grep, remember LDAP uses the format dc=domain,dc=com and not the more familiar domain.com.

Later, when you begin populating your LDAP database, you can use <code>slapcat -n 1</code> to see your information. (Zero is the config database. Numbers above zero are user-defined databases.)

Finally, you can run <code>netstat -tln</code> and look for LDAP port 389 in the output.

== Scripted Installation ==

If you want to automate the steps above, use the following script. Be sure to adjust the DOMAIN value to fit your needs.

export DOMAIN="dc=home"

echo "Installing packages..."
apk add openldap openldap-back-mdb openldap-clients

echo "Configuring for v2.3+ style slapd.d config directory..."
install -m 755 -o ldap -g ldap -d /etc/openldap/slapd.d
sed -i~ \
-e 's/^cfgfile=/#cfgfile=/' \
-e 's/^#cfgdir=.*/cfgdir=\"\/etc\/openldap\/slapd.d\"/' \
/etc/conf.d/slapd
rm /etc/openldap/slapd.conf

echo "Customizing for domain: ${DOMAIN}..."
sed -i~ \
-e 's/\.la$/.so/' \
-e "s/dc=my-domain,dc=com/${DOMAIN}/" /etc/openldap/slapd.ldif

echo "Importing configuration..."
slapadd -n 0 -F /etc/openldap/slapd.d -l /etc/openldap/slapd.ldif
chown -R ldap:ldap /etc/openldap/slapd.d/*

echo "Configuring slapd service..."
install -m 755 -o ldap -g ldap -d /var/lib/openldap/run
service slapd start
rc-update add slapd

== Creating an Organizational Structure ==

Now that the installation is done, you can start using your LDAP database. At a minimum, you'll need to create an organization within your LDAP directory. This is covered as step 11 in the OpenLDAP [https://openldap.org/doc/admin26/quickstart.html quickstart] document.

Here is an example using the contoso.com domain as the organization and <code>home</code>/<code>dc=home</code> as the base DN (update the baseDN if yours differs):

cat <<EOF >org.ldif
dn: dc=contoso,dc=com
objectclass: dcObject
objectclass: organization
o: Fictional Company
dc: contoso

dn: cn=Manager,dc=contoso,dc=com
objectclass: organizationalRole
cn: Manager
EOF

ldapadd -x -D "cn=Manager,dc=home" -w secret -f org.ldif

You may also want to create organizational units (OUs) to help keep your directory tidy.

Here's an LDIF to create ''People'' and ''Groups'' as OUs:

# Organizational unit for users
dn: ou=People,dc=home
changetype: add
objectClass: organizationalUnit
ou: People

# Organizational unit for groups.
dn: ou=Groups,dc=home
changetype: add
objectClass: organizationalUnit
ou: Groups

Import the OUs with an ldapadd command similar to the one used to create the organization.

Now that this is done, you're ready to connect to the LDAP server with the administration tool of your choice and begin populating users, groups, etc. [http://ldapadmin.org/ LDAPAdmin]{{insecure url|TLS cert invalid}} is an oldie, but a goodie for Windows users.

== Next Steps ==

The configuration presented here does not include provisions for TLS (encrypted) communication. It should not be used on an untrusted network. Refer to the official OpenLDAP docs for instructions on setting up encrypted LDAP connections.

== References ==

* [https://openldap.org/doc/admin26/quickstart.html OpenLDAP Software 2.6 Administrator's Guide: A Quick-Start Guide]
* [https://stackoverflow.com/questions/72132704/did-i-import-inetorgperson-schema-correctly-for-openldap-on-alpine-linux/ ldap - Did I import inetOrgPerson schema correctly for OpenLDAP on Alpine Linux? - Stack Overflow]

[[Category:Networking]]

User:Jchdel

2023-05-30T12:39:40Z

Jchdel:

User:Jchdel

2023-05-29T14:18:42Z

Jchdel:

My current home/lab setup is

* An Alpine router x86_64 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop) also in 64 bits
* a tower (16 cores x86_64, 128GB RAM) running Alpine, [[openVSwitch]] and [[qemu]]-kvm
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)

I plan to run a Xorg desktop headless in some KVM and remotely connect to it from the R-Pi as X station...
And to drive other dev and build boxes as KVM.

What about https://github.com/e1z0/Framebuffer-browser on Alpine? I plan to give a try and maybe package it...

<pre>
#!/bin/sh
set -x
# This script is intended to transform an Alpine Linux USB key running in
# diskless mode into a PXE boot server.
# It will run with a fixed IP 10.33.0.1 on eth0 acting as primary DHCP
# server.
# Only packages present in the local boot media will be available for
# booted boxes.

set -e

mount -o remount,rw /media/usb

# Let's do all downloads first!
sed -i -e '/community/s/^#//' -e '/edge/d' /etc/apk/repositories
apk update
apk add abuild

cd /media/usb/apks/x86_64
LIST_OF_PACKAGES="aardvark-dns
abuild
acct
acct-openrc
alpine-base
alpine-baselayout
alpine-baselayout-data
alpine-conf
alpine-keys
alpine-release
apk-tools
argon2-libs
attr
bash
blkid
brotli-libs
busybox
busybox-binsh
busybox-mdev-openrc
busybox-openrc
busybox-suid
ca-certificates
ca-certificates-bundle
catatonit
conmon
containers-common
crun
cryptsetup-libs
curl
darkhttpd
device-mapper-libs
e2fsprogs
e2fsprogs-libs
fakeroot
fuse-common
fuse-openrc
fuse-overlayfs
fuse3
fuse3-libs
glib
gnupg-gpgconf
gpg
gpg-agent
gpgme
gpgsm
ifupdown-ng
ip6tables
ip6tables-openrc
iptables
iptables-openrc
json-c
kmod
kmod-libs
kmod-openrc
lddtree
libacl
libassuan
libblkid
libbz2
libc-utils
libcap2
libcom_err
libcrypto3
libcurl
libedit
libevent
libffi
libgcc
libgcrypt
libgpg-error
libintl
libksba
libmnl
libmount
libnftnl
libseccomp
libslirp
libssl3
libuuid
linux-firmware-none
linux-lts
linux-pam
lzip
lz4-libs
mdev-conf
mkinitfs
mtools
musl
musl-utils
ncurses-libs
ncurses-terminfo-base
netavark
nghttp2-libs
npth
openrc
openssh
openssh-client-common
openssh-client-default
openssh-keygen
openssh-server
openssh-server-common
openssh-sftp-server
openssl
patch
pcre2
pkgconf
pinentry
podman
podman-openrc
popt
readline
rsync
rsync-openrc
scanelf
shadow-libs
shadow-subids
slirp4netns
sqlite-libs
ssl_client
syslinux
tar
tmux
vim
xxd
xz-libs
yajl
zlib
zstd-libs"
for p in $LIST_OF_PACKAGES ; do apk fetch $p ; done
apk index -o APKINDEX.tar.gz *.apk
export SUDO=""
abuild-keygen -n -i -a
lbu add ~/.abuild
abuild-sign APKINDEX.tar.gz

apk add darkhttpd nfs-utils dnsmasq syslinux

export SUDO=""
abuild-keygen -n -i -a

ALPINE=alpine-netboot-3.17.3-x86_64.tar.gz
[ -f $ALPINE ] || \
while true;do
wget -c https://dl-cdn.alpinelinux.org/alpine/v3.17/releases/x86_64/$ALPINE \
&& break
done

mkdir -p /media/usb/tftpboot/pxelinux/pxelinux.cfg

# populate TFTP server
rm -fr /tmp/boot
tar xf alpine-netboot-3.17.3-x86_64.tar.gz -C /tmp
cp -r /tmp/boot/* /media/usb/tftpboot/pxelinux/

# populate HTTP server
#cd /media/usb
# add default apkovl.tar.gz here

# configure darkhttpd
sed -i -e 's+/var/www/localhost/htdocs+/media/usb+' /etc/init.d/darkhttpd
lbu add /etc/init.d/darkhttpd

# populate NFS server
## implicit as we publish /media/usb

# configure NFS for PXE boot
cat << EOF > /etc/exports
# /etc/exports
#
# See exports(5) for a description.

# use exportfs -arv to reread
/media/usb *(ro,no_root_squash,no_subtree_check)
EOF

# configure dnsmasq for PXE boot
cat << EOF > /etc/dnsmasq.d/stamp.conf
# DNS related options
interface=eth0
listen-address=10.33.0.1
listen-address=127.0.0.1
## uplink resolver
server=1.1.1.1
# DHCP related options
dhcp-range=10.33.0.1,10.33.1.254,12h
## push router
dhcp-option=option:router,10.33.0.1
## push resolver
dhcp-option=6,10.33.0.1
# PXE (TFTP) related options
enable-tftp
dhcp-boot=pxelinux/pxelinux.0
tftp-root=/media/usb/tftpboot
EOF
cp /usr/share/syslinux/pxelinux.0 /media/usb/tftpboot/pxelinux/
cp /usr/share/syslinux/ldlinux.c32 /media/usb/tftpboot/pxelinux/
cat << EOF > /media/usb/tftpboot/pxelinux/pxelinux.cfg/default
PROMPT 0
TIMEOUT 3
default alpine
LABEL alpine
LINUX vmlinuz-lts
INITRD pxerd
APPEND ip=dhcp alpine_dev=nfs:10.33.0.1:/media/usb/boot modloop=http://10.33.0.1/boot/modloop-lts nomodeset apkovl=http://10.33.0.1/stamp/default.apkovl.tar.gz alpine_repo=http://10.33.0.1/apks
EOF
# generate initramfs for PXE
if [ ! -f /media/usb/tftpboot/pxelinux/pxerd ];then
cd /etc/mkinitfs/features.d/
echo "kernel/drivers/net/virtio_net.ko" >> network.modules
echo "kernel/drivers/net/ethernet/e1000/*.ko" >> network.modules
echo "/usr/share/udhcpc/default.script" > dhcp.files
echo "kernel/net/packet/af_packet.ko" > dhcp.modules
echo "kernel/fs/nfs/*" > nfs.modules
cd /etc/mkinitfs/
echo 'features="ata base bootchart cdrom cramfs ext2 ext3 ext4 xfs floppy keymap kms raid scsi usb virtio squashfs network dhcp nfs"' > mkinitfs.conf
mkinitfs -o /media/usb/tftpboot/pxelinux/pxerd
fi

# console welcome message
cat << EOF > /etc/motd

This a PXE server intended to deploy a fleet of diskless Alpine Linux.

EOF

cat << EOF > /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 10.33.0.1
netmask 255.255.0.0
EOF

# force install from cache at reboot
cat << EOF > /etc/local.d/fix.start
#!/bin/sh
apk add darkhttpd
service darkhttpd start
EOF
chmod +x /etc/local.d/fix.start

# enable services at reboot
rc-update add local
rc-update add darkhttpd
rc-update add nfs
rc-update add dnsmasq

# persist changes
sync
apk cache -v sync
mount -o remount,ro /media/usb
lbu ci

echo "Press 'Enter' to reboot and act as PXE boot server"
echo "or 'ctrl-c' to go back to the terminal..."
read

reboot
</pre>

User:Jchdel

2023-05-29T14:16:50Z

Jchdel:

My current home/lab setup is

* An Alpine router x86_64 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop) also in 64 bits
* a tower (16 cores x86_64, 128GB RAM) running Alpine, [[openVSwitch]] and [[qemu]]-kvm
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)

I plan to run a Xorg desktop headless in some KVM and remotely connect to it from the R-Pi as X station...
And to drive other dev and build boxes as KVM.

What about https://github.com/e1z0/Framebuffer-browser on Alpine? I plan to give a try and maybe package it...

<pre>
#!/bin/sh
set -x
# This script is intended to transform an Alpine Linux USB key running in
# diskless mode into a PXE boot server.
# It will run with a fixed IP 10.33.0.1 on eth0 acting as primary DHCP
# server.
# Only packages present in the local boot media will be available for
# booted boxes.

set -e

mount -o remount,rw /media/usb

# Let's do all downloads first!
sed -i -e '/community/s/^#//' -e '/edge/d' /etc/apk/repositories
apk update
apk add abuild

cd /media/usb/apks/x86_64
LIST_OF_PACKAGES="aardvark-dns
abuild
acct
acct-openrc
alpine-base
alpine-baselayout
alpine-baselayout-data
alpine-conf
alpine-keys
alpine-release
apk-tools
argon2-libs
attr
bash
blkid
brotli-libs
busybox
busybox-binsh
busybox-mdev-openrc
busybox-openrc
busybox-suid
ca-certificates
ca-certificates-bundle
catatonit
conmon
containers-common
crun
cryptsetup-libs
curl
darkhttpd
device-mapper-libs
e2fsprogs
e2fsprogs-libs
fakeroot
fuse-common
fuse-openrc
fuse-overlayfs
fuse3
fuse3-libs
glib
gnupg-gpgconf
gpg
gpg-agent
gpgme
gpgsm
ifupdown-ng
ip6tables
ip6tables-openrc
iptables
iptables-openrc
json-c
kmod
kmod-libs
kmod-openrc
lddtree
libacl
libassuan
libblkid
libbz2
libc-utils
libcap2
libcom_err
libcrypto3
libcurl
libedit
libevent
libffi
libgcc
libgcrypt
libgpg-error
libintl
libksba
libmnl
libmount
libnftnl
libseccomp
libslirp
libssl3
libuuid
linux-firmware-none
linux-lts
linux-pam
lzip
lz4-libs
mdev-conf
mkinitfs
mtools
musl
musl-utils
ncurses-libs
ncurses-terminfo-base
netavark
nghttp2-libs
npth
openrc
openssh
openssh-client-common
openssh-client-default
openssh-keygen
openssh-server
openssh-server-common
openssh-sftp-server
openssl
patch
pcre2
pkgconf
pinentry
podman
podman-openrc
popt
readline
rsync
rsync-openrc
scanelf
shadow-libs
shadow-subids
slirp4netns
sqlite-libs
ssl_client
syslinux
tar
tmux
vim
xxd
xz-libs
yajl
zlib
zstd-libs"
for p in $LIST_OF_PACKAGES ; do apk fetch $p ; done
apk index -o APKINDEX.tar.gz *.apk
export SUDO=""
abuild-keygen -n -i -a
lbu add ~/.abuild
abuild-sign APKINDEX.tar.gz

apk add darkhttpd nfs-utils dnsmasq syslinux

export SUDO=""
abuild-keygen -n -i -a

ALPINE=alpine-netboot-3.17.3-x86_64.tar.gz
[ -f $ALPINE ] || \
while true;do
wget -c https://dl-cdn.alpinelinux.org/alpine/v3.17/releases/x86_64/$ALPINE \
&& break
done

mkdir -p /media/usb/tftpboot/pxelinux/pxelinux.cfg

# populate TFTP server
rm -fr /tmp/boot
tar xf alpine-netboot-3.17.3-x86_64.tar.gz -C /tmp
cp -r /tmp/boot/* /media/usb/tftpboot/pxelinux/

# populate HTTP server
#cd /media/usb
# add default apkovl.tar.gz here

# configure darkhttpd (nginx should already be done by bootstrap-manager)
sed -i -e 's+/var/www/localhost/htdocs+/media/usb+' /etc/init.d/darkhttpd
lbu add /etc/init.d/darkhttpd

# populate NFS server
## implicit as we publish /media/usb

# configure NFS for PXE boot
cat << EOF > /etc/exports
# /etc/exports
#
# See exports(5) for a description.

# use exportfs -arv to reread
/media/usb *(ro,no_root_squash,no_subtree_check)
EOF

# configure dnsmasq for PXE boot
cat << EOF > /etc/dnsmasq.d/stamp.conf
# DNS related options
interface=eth0
listen-address=10.33.0.1
listen-address=127.0.0.1
## uplink resolver
server=1.1.1.1
# DHCP related options
dhcp-range=10.33.0.1,10.33.1.254,12h
## push router
dhcp-option=option:router,10.33.0.1
## push resolver
dhcp-option=6,10.33.0.1
# PXE (TFTP) related options
enable-tftp
dhcp-boot=pxelinux/pxelinux.0
tftp-root=/media/usb/tftpboot
EOF
cp /usr/share/syslinux/pxelinux.0 /media/usb/tftpboot/pxelinux/
cp /usr/share/syslinux/ldlinux.c32 /media/usb/tftpboot/pxelinux/
cat << EOF > /media/usb/tftpboot/pxelinux/pxelinux.cfg/default
PROMPT 0
TIMEOUT 3
default alpine
LABEL alpine
LINUX vmlinuz-lts
INITRD pxerd
APPEND ip=dhcp alpine_dev=nfs:10.33.0.1:/media/usb/boot modloop=http://10.33.0.1/boot/modloop-lts nomodeset apkovl=http://10.33.0.1/stamp/stamp.apkovl.tar.gz alpine_repo=http://10.33.0.1/apks
EOF
# generate initramfs for PXE
if [ ! -f /media/usb/tftpboot/pxelinux/pxerd ];then
cd /etc/mkinitfs/features.d/
echo "kernel/drivers/net/virtio_net.ko" >> network.modules
echo "kernel/drivers/net/ethernet/e1000/*.ko" >> network.modules
echo "/usr/share/udhcpc/default.script" > dhcp.files
echo "kernel/net/packet/af_packet.ko" > dhcp.modules
echo "kernel/fs/nfs/*" > nfs.modules
cd /etc/mkinitfs/
echo 'features="ata base bootchart cdrom cramfs ext2 ext3 ext4 xfs floppy keymap kms raid scsi usb virtio squashfs network dhcp nfs"' > mkinitfs.conf
mkinitfs -o /media/usb/tftpboot/pxelinux/pxerd
fi

# console welcome message
cat << EOF > /etc/motd

This a PXE server intended to deploy a fleet of diskless Alpine Linux.

EOF

cat << EOF > /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 10.33.0.1
netmask 255.255.0.0
EOF

# force install from cache at reboot
cat << EOF > /etc/local.d/fix.start
#!/bin/sh
apk add darkhttpd
service darkhttpd start
EOF
chmod +x /etc/local.d/fix.start

# enable services at reboot
rc-update add local
rc-update add darkhttpd
rc-update add nfs
rc-update add dnsmasq

# persist changes
sync
apk cache -v sync
mount -o remount,ro /media/usb
lbu ci

echo "Press 'Enter' to reboot and act as PXE boot server"
echo "or 'ctrl-c' to go back to the terminal..."
read

reboot
</pre>

User:Jchdel

2023-05-29T13:41:37Z

Jchdel:

My current home/lab setup is

* An Alpine router x86_64 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop) also in 64 bits
* a tower (16 cores x86_64, 128GB RAM) running Alpine, [[openVSwitch]] and [[qemu]]-kvm
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)

I plan to run a Xorg desktop headless in some KVM and remotely connect to it from the R-Pi as X station...
And to drive other dev and build boxes as KVM.

What about https://github.com/e1z0/Framebuffer-browser on Alpine? I plan to give a try and maybe package it...

<pre>
#!/bin/sh
set -x
# This script is intended to transform an Alpine Linux USB key running in
# diskless mode into a PXE boot server.
# It will run with a fixed IP 10.33.0.1 on eth0 acting as primary DHCP
# server.
# Only packages present in the local boot media will be available for
# booted boxes.

set -e

mount -o remount,rw /media/usb

# Let's do all downloads first!
sed -i -e '/community/s/^#//' -e '/edge/d' /etc/apk/repositories
apk update
apk add abuild

cd /media/usb/apks/x86_64
LIST_OF_PACKAGES="aardvark-dns
abuild
acct
acct-openrc
alpine-base
alpine-baselayout
alpine-baselayout-data
alpine-conf
alpine-keys
alpine-release
apk-tools
argon2-libs
attr
bash
blkid
brotli-libs
busybox
busybox-binsh
busybox-mdev-openrc
busybox-openrc
busybox-suid
ca-certificates
ca-certificates-bundle
catatonit
conmon
containers-common
crun
cryptsetup-libs
curl
darkhttpd
device-mapper-libs
e2fsprogs
e2fsprogs-libs
fakeroot
fuse-common
fuse-openrc
fuse-overlayfs
fuse3
fuse3-libs
glib
gnupg-gpgconf
gpg
gpg-agent
gpgme
gpgsm
ifupdown-ng
ip6tables
ip6tables-openrc
iptables
iptables-openrc
json-c
kmod
kmod-libs
kmod-openrc
lddtree
libacl
libassuan
libblkid
libbz2
libc-utils
libcap2
libcom_err
libcrypto3
libcurl
libedit
libevent
libffi
libgcc
libgcrypt
libgpg-error
libintl
libksba
libmnl
libmount
libnftnl
libseccomp
libslirp
libssl3
libuuid
linux-firmware-none
linux-lts
linux-pam
lzip
lz4-libs
mdev-conf
mkinitfs
mtools
musl
musl-utils
ncurses-libs
ncurses-terminfo-base
netavark
nghttp2-libs
npth
openrc
openssh
openssh-client-common
openssh-client-default
openssh-keygen
openssh-server
openssh-server-common
openssh-sftp-server
openssl
patch
pcre2
pkgconf
pinentry
podman
podman-openrc
popt
readline
rsync
rsync-openrc
scanelf
shadow-libs
shadow-subids
slirp4netns
sqlite-libs
ssl_client
syslinux
tar
tmux
vim
xxd
xz-libs
yajl
zlib
zstd-libs"
for p in $LIST_OF_PACKAGES ; do apk fetch $p ; done
apk index -o APKINDEX.tar.gz *.apk
export SUDO=""
abuild-keygen -n -i -a
lbu add ~/.abuild
abuild-sign APKINDEX.tar.gz

grep nginx /etc/apk/world && HTTP_SERVER="" || HTTP_SERVER=darkhttpd
apk add darkhttpd nfs-utils dnsmasq syslinux

export SUDO=""
abuild-keygen -n -i -a

ALPINE=alpine-netboot-3.17.3-x86_64.tar.gz
[ -f $ALPINE ] || \
while true;do
wget -c https://dl-cdn.alpinelinux.org/alpine/v3.17/releases/x86_64/$ALPINE \
&& break
done

mkdir -p /media/usb/tftpboot/pxelinux/pxelinux.cfg

# populate TFTP server
rm -fr /tmp/boot
tar xf alpine-netboot-3.17.3-x86_64.tar.gz -C /tmp
cp -r /tmp/boot/* /media/usb/tftpboot/pxelinux/

# populate HTTP server
#cd /media/usb
# add default apkovl.tar.gz here

# configure darkhttpd (nginx should already be done by bootstrap-manager)
if [ "$HTTP_SERVER" == "darkhttpd" ]; then
sed -i -e 's+/var/www/localhost/htdocs+/media/usb+' /etc/init.d/darkhttpd
lbu add /etc/init.d/darkhttpd
fi

# populate NFS server
## implicit as we publish /media/usb

# configure NFS for PXE boot
cat << EOF > /etc/exports
# /etc/exports
#
# See exports(5) for a description.

# use exportfs -arv to reread
/media/usb *(ro,no_root_squash,no_subtree_check)
EOF

# configure dnsmasq for PXE boot
cat << EOF > /etc/dnsmasq.d/stamp.conf
# DNS related options
interface=eth0
listen-address=10.33.0.1
listen-address=127.0.0.1
## uplink resolver
server=1.1.1.1
# DHCP related options
dhcp-range=10.33.0.1,10.33.1.254,12h
## push router
dhcp-option=option:router,10.33.0.1
## push resolver
dhcp-option=6,10.33.0.1
# PXE (TFTP) related options
enable-tftp
dhcp-boot=pxelinux/pxelinux.0
tftp-root=/media/usb/tftpboot
EOF
cp /usr/share/syslinux/pxelinux.0 /media/usb/tftpboot/pxelinux/
cp /usr/share/syslinux/ldlinux.c32 /media/usb/tftpboot/pxelinux/
cat << EOF > /media/usb/tftpboot/pxelinux/pxelinux.cfg/default
PROMPT 0
TIMEOUT 3
default alpine
LABEL alpine
LINUX vmlinuz-lts
INITRD pxerd
APPEND ip=dhcp alpine_dev=nfs:10.33.0.1:/media/usb/boot modloop=http://10.33.0.1/boot/modloop-lts nomodeset apkovl=http://10.33.0.1/stamp/stamp.apkovl.tar.gz alpine_repo=http://10.33.0.1/apks
EOF
# generate initramfs for PXE
if [ ! -f /media/usb/tftpboot/pxelinux/pxerd ];then
cd /etc/mkinitfs/features.d/
echo "kernel/drivers/net/virtio_net.ko" >> network.modules
echo "kernel/drivers/net/ethernet/e1000/*.ko" >> network.modules
echo "/usr/share/udhcpc/default.script" > dhcp.files
echo "kernel/net/packet/af_packet.ko" > dhcp.modules
echo "kernel/fs/nfs/*" > nfs.modules
cd /etc/mkinitfs/
echo 'features="ata base bootchart cdrom cramfs ext2 ext3 ext4 xfs floppy keymap kms raid scsi usb virtio squashfs network dhcp nfs"' > mkinitfs.conf
mkinitfs -o /media/usb/tftpboot/pxelinux/pxerd
fi

# console welcome message
cat << EOF > /etc/motd

This a PXE server intended to deploy a fleet of STAMPs.

EOF

cat << EOF > /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 10.33.0.1
netmask 255.255.0.0
EOF

if [ "$HTTP_SERVER" == "darkhttpd" ]; then
# force install from cache at reboot
cat << EOF > /etc/local.d/fix.start
#!/bin/sh
apk add darkhttpd
service darkhttpd start
EOF
chmod +x /etc/local.d/fix.start
fi

# enable services at reboot
[ "$HTTP_SERVER" == "darkhttpd" ] && rc-update add local
[ "$HTTP_SERVER" == "darkhttpd" ] && rc-update add darkhttpd
rc-update add nfs
rc-update add dnsmasq

# persist changes
sync
apk cache -v sync
mount -o remount,ro /media/usb
lbu ci

echo "Press 'Enter' to reboot and act as PXE boot server"
echo "or 'ctrl-c' to go back to the terminal..."
read

reboot
</pre>

User:Jchdel

2023-05-29T13:38:18Z

Jchdel: How to transfrom a diskless USB key in a PXE boot server

My current home/lab setup is

* An Alpine router x86_64 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop) also in 64 bits
* a tower (16 cores x86_64, 128GB RAM) running Alpine, [[openVSwitch]] and [[qemu]]-kvm
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)

I plan to run a Xorg desktop headless in some KVM and remotely connect to it from the R-Pi as X station...
And to drive other dev and build boxes as KVM.

What about https://github.com/e1z0/Framebuffer-browser on Alpine? I plan to give a try and maybe package it...

<pre>
#!/bin/sh
set -x
# This script is intended to transform an Alpine Linux USB key running in
# diskless mode into a PXE boot server.
# It will run with a fixed IP 10.33.0.1 on eth0 acting as primary DHCP
# server.
# Only packages present in the local boot media will be available for
# booted boxes.

set -e

mount -o remount,rw /media/usb

# Let's do all downloads first!
sed -i -e '/community/s/^#//' -e '/edge/d' /etc/apk/repositories
apk update
apk add abuild

cd /media/usb/apks/x86_64
LIST_OF_PACKAGES="aardvark-dns
abuild
acct
acct-openrc
alpine-base
alpine-baselayout
alpine-baselayout-data
alpine-conf
alpine-keys
alpine-release
apk-tools
argon2-libs
attr
bash
blkid
brotli-libs
busybox
busybox-binsh
busybox-mdev-openrc
busybox-openrc
busybox-suid
ca-certificates
ca-certificates-bundle
catatonit
conmon
containers-common
crun
cryptsetup-libs
curl
darkhttpd
device-mapper-libs
e2fsprogs
e2fsprogs-libs
fakeroot
fuse-common
fuse-openrc
fuse-overlayfs
fuse3
fuse3-libs
glib
gnupg-gpgconf
gpg
gpg-agent
gpgme
gpgsm
ifupdown-ng
ip6tables
ip6tables-openrc
iptables
iptables-openrc
json-c
kmod
kmod-libs
kmod-openrc
lddtree
libacl
libassuan
libblkid
libbz2
libc-utils
libcap2
libcom_err
libcrypto3
libcurl
libedit
libevent
libffi
libgcc
libgcrypt
libgpg-error
libintl
libksba
libmnl
libmount
libnftnl
libseccomp
libslirp
libssl3
libuuid
linux-firmware-none
linux-lts
linux-pam
lzip
lz4-libs
mdev-conf
mkinitfs
mtools
musl
musl-utils
ncurses-libs
ncurses-terminfo-base
netavark
nghttp2-libs
npth
openrc
openssh
openssh-client-common
openssh-client-default
openssh-keygen
openssh-server
openssh-server-common
openssh-sftp-server
openssl
patch
pcre2
pkgconf
pinentry
podman
podman-openrc
popt
readline
rsync
rsync-openrc
scanelf
shadow-libs
shadow-subids
slirp4netns
sqlite-libs
ssl_client
syslinux
tar
tmux
vim
xxd
xz-libs
yajl
zlib
zstd-libs"
for p in $LIST_OF_PACKAGES ; do apk fetch $p ; done
apk index -o APKINDEX.tar.gz *.apk
export SUDO=""
abuild-keygen -n -i -a
lbu add ~/.abuild
abuild-sign APKINDEX.tar.gz

grep nginx /etc/apk/world && HTTP_SERVER="" || HTTP_SERVER=darkhttpd
apk add \
$HTTP_SERVER nfs-utils dnsmasq syslinux

export SUDO=""
abuild-keygen -n -i -a

ALPINE=alpine-netboot-3.17.3-x86_64.tar.gz
if [ -f $ALPINE.sha256 ]
then
mv $ALPINE.sha256 $ALPINE.sha256-previous
else
touch $ALPINE.sha256-previous
fi
while true;do
wget -c https://dl-cdn.alpinelinux.org/alpine/v3.17/releases/x86_64/$ALPINE.sha256 \
&& break
done
#if [ diff $ALPINE.sha256 $ALPINE.sha256-previous ]
#then
[ -f $ALPINE ] || \
while true;do
wget -c https://dl-cdn.alpinelinux.org/alpine/v3.17/releases/x86_64/$ALPINE \
&& break
done
#else
#fi

mkdir -p /media/usb/tftpboot/pxelinux/pxelinux.cfg

# populate TFTP server
rm -fr /tmp/boot
tar xf alpine-netboot-3.17.3-x86_64.tar.gz -C /tmp
cp -r /tmp/boot/* /media/usb/tftpboot/pxelinux/

# populate HTTP server
#cd /media/usb
#wget -q https://stamp:evensoft@stamp.evensoft.dev/pixie/pxe-default.apkovl.tar.gz

# configure darkhttpd (nginx should already be done by bootstrap-manager)
if [ "$HTTP_SERVER" == "darkhttpd" ]; then
sed -i -e 's+/var/www/localhost/htdocs+/media/usb+' /etc/init.d/darkhttpd
lbu add /etc/init.d/darkhttpd
fi

# populate NFS server
## implicit as we publish /media/usb

# configure NFS for PXE boot
cat << EOF > /etc/exports
# /etc/exports
#
# See exports(5) for a description.

# use exportfs -arv to reread
/media/usb *(ro,no_root_squash,no_subtree_check)
EOF

# configure dnsmasq for PXE boot
cat << EOF > /etc/dnsmasq.d/stamp.conf
# DNS related options
interface=eth0
listen-address=10.33.0.1
listen-address=127.0.0.1
## uplink resolver
server=1.1.1.1
# DHCP related options
dhcp-range=10.33.0.1,10.33.1.254,12h
## push router
dhcp-option=option:router,10.33.0.1
## push resolver
dhcp-option=6,10.33.0.1
# PXE (TFTP) related options
enable-tftp
dhcp-boot=pxelinux/pxelinux.0
tftp-root=/media/usb/tftpboot
EOF
cp /usr/share/syslinux/pxelinux.0 /media/usb/tftpboot/pxelinux/
cp /usr/share/syslinux/ldlinux.c32 /media/usb/tftpboot/pxelinux/
cat << EOF > /media/usb/tftpboot/pxelinux/pxelinux.cfg/default
PROMPT 0
TIMEOUT 3
default alpine
LABEL alpine
LINUX vmlinuz-lts
INITRD pxerd
APPEND ip=dhcp alpine_dev=nfs:10.33.0.1:/media/usb/boot modloop=http://10.33.0.1/boot/modloop-lts nomodeset apkovl=http://10.33.0.1/stamp/stamp.apkovl.tar.gz alpine_repo=http://10.33.0.1/apks
EOF
# generate initramfs for PXE
if [ ! -f /media/usb/tftpboot/pxelinux/pxerd ];then
cd /etc/mkinitfs/features.d/
echo "kernel/drivers/net/virtio_net.ko" >> network.modules
echo "kernel/drivers/net/ethernet/e1000/*.ko" >> network.modules
echo "/usr/share/udhcpc/default.script" > dhcp.files
echo "kernel/net/packet/af_packet.ko" > dhcp.modules
echo "kernel/fs/nfs/*" > nfs.modules
cd /etc/mkinitfs/
echo 'features="ata base bootchart cdrom cramfs ext2 ext3 ext4 xfs floppy keymap kms raid scsi usb virtio squashfs network dhcp nfs"' > mkinitfs.conf
mkinitfs -o /media/usb/tftpboot/pxelinux/pxerd
fi

# console welcome message
cat << EOF > /etc/motd

This a PXE server intended to deploy a fleet of STAMPs.

EOF

cat << EOF > /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 10.33.0.1
netmask 255.255.0.0
EOF

if [ "$HTTP_SERVER" == "darkhttpd" ]; then
# force install from cache at reboot
cat << EOF > /etc/local.d/fix.start
#!/bin/sh
apk add darkhttpd
service darkhttpd start
EOF
chmod +x /etc/local.d/fix.start
fi

# enable services at reboot
[ "$HTTP_SERVER" == "darkhttpd" ] && rc-update add local
[ "$HTTP_SERVER" == "darkhttpd" ] && rc-update add darkhttpd
rc-update add nfs
rc-update add dnsmasq

# persist changes
sync
apk cache -v sync
mount -o remount,ro /media/usb
lbu ci

echo "Press 'Enter' to reboot and act as PXE boot server"
echo "or 'ctrl-c' to go back to the terminal..."
read

reboot
</pre>

User:Jchdel

2023-05-22T17:28:21Z

Jchdel: Framebuffer-browser?

User:Jchdel

2022-03-13T04:31:52Z

Jchdel: update lab setup

User:Jchdel

2021-11-12T17:21:03Z

Jchdel:

My current home/lab setup is

* An Alpine router x86 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop)
* a desktop (16 cores, 128GB RAM) (used as build box or simulator)
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)
* a couple of x86-64 boxes lying aroung running Alpine
* 28" HD
* [''project''] home server ''(Alpine or Debian based?)'' ''(R-Pi 3 or x86-64?)''
** local time server with {{Pkg|chrony}}
** local resolver cache with {{Pkg|unbound}}
** Kodi (or other MMC) with {{Pkg|???}}
** SMTP relay with {{Pkg|postfix}}
** HTTP proxy with {{Pkg|squid}}
** privoxy with {{Pkg|privoxy}}
** file server with {{Pkg|rsync}}
** HTTP reverse proxy ( with {{Pkg|nginx}}
** local package repository with {{Pkg|cron}}
** gitlab with {{Pkg|docker-ce}}
** jenkins master (or other CI toolchain) with {{Pkg|docker-ce}}
* [''project''] jenkins satellite build box(es)
* a CPL plug (to switch)
* a laptop (4 cores, 16GB RAM)
* a CPL plug (to emonPi)
* an emonPi, see http://openenergymonitor.org/, running MQTT
** a Davis Meteo station (data collected with weenx)
** a WKS Solar inverter (data collected with mpp-solar)
** several emonTh, see http://openenergymonitor.org/
** [''project''] https://www.zigbee2mqtt.io/
** [''project''] two Toons (by Quby) as home displays, see https://github.com/ToonSoftwareCollective

On top of the emonPI used as data logger for several IoT scattered among the house, I would like to deploy a multimedia center. And to add caching and filtering features to the router (squid, privoxy, tor, ...) and maybe basic internet services for internal consumption... Or I will dedicate a R-Pi 3 or a x86-64 as LAN server... dunno yet...

I still have a full rack of servers and switches lying around but not the electricity power nor the internet uplink to make use of it :(

User:Jchdel

2021-11-11T07:31:55Z

Jchdel:

My current home/lab setup is

* An Alpine router x86 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop)
* a desktop (16 cores, 128GB RAM) (used as build box or simulator)
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)
* a couple of x86-64 boxes lying aroung running Alpine
* 28" HD
* [''project''] home server ''(Alpine or Debian based?)'' ''(R-Pi 3 or x86-64?)''
** local time server
** local resolver cache
** Home Assistant (or Domoticz or... )
** Kodi (or other MMC)
** SMTP relay
** HTTP proxy (squid)
** privoxy
** file server
** HTTP reverse proxy (nginx)
** local package repository
** gitlab
** jenkins master (or other CI toolchain)
* [''project''] jenkins satellite build box(es)
* a CPL plug (to switch)
* a laptop (4 cores, 16GB RAM)
* a CPL plug (to emonPi)
* an emonPi, see http://openenergymonitor.org/, running MQTT
** a Davis Meteo station (data collected with weenx)
** a WKS Solar inverter (data collected with mpp-solar)
** several emonTh, see http://openenergymonitor.org/
** [''project''] https://www.zigbee2mqtt.io/
** [''project''] two Toons (by Quby) as home displays, see https://github.com/ToonSoftwareCollective

On top of the emonPI used as data logger for several IoT scattered among the house, I would like to deploy a multimedia center. And to add caching and filtering features to the router (squid, privoxy, tor, ...) and maybe basic internet services for internal consumption... Or I will dedicate a R-Pi 3 or a x86-64 as LAN server... dunno yet...

I still have a full rack of servers and switches lying around but not the electricity power nor the internet uplink to make use of it :(

User:Jchdel

2021-11-11T07:29:15Z

Jchdel:

My current home/lab setup is

* An Alpine router x86 running https://github.com/jchdel/select-fastest-gateway connected to two or three different uplinks
* a switch
* a R-Pi 4 (used as usual desktop)
* a desktop (16 cores, 128GB RAM) (used as build box or simulator)
* dual 43" 4K (DP to desktop, HDMI to R-Pi 4)
* a couple of x86-64 boxes lying aroung running Alpine
* 28" HD
* [''project''] home server ''(Alpine or Debian based?)''
** local time server
** local resolver cache
** Home Assistant (or Domoticz or... )
** Kodi (or other MMC)
** SMTP relay
** HTTP proxy (squid)
** privoxy
** file server
** HTTP reverse proxy (nginx)
** local package repository
** gitlab
** jenkins master (or other CI toolchain)
* [''project''] jenkins satellite build box(es)
* a CPL plug (to switch)
* a laptop (4 cores, 16GB RAM)
* a CPL plug (to emonPi)
* an emonPi, see http://openenergymonitor.org/, running MQTT
** a Davis Meteo station (data collected with weenx)
** a WKS Solar inverter (data collected with mpp-solar)
** several emonTh, see http://openenergymonitor.org/
** [''project''] https://www.zigbee2mqtt.io/
** [''project''] two Toons (by Quby) as home displays, see https://github.com/ToonSoftwareCollective

On top of the emonPI used as data logger for several IoT scattered among the house, I would like to deploy a multimedia center. And to add caching and filtering features to the router (squid, privoxy, tor, ...) and maybe basic internet services for internal consumption... Or I will dedicate a R-Pi 3 or a x86-64 as LAN server... dunno yet...

I still have a full rack of servers and switches lying around but not the electricity power nor the internet uplink to make use of it :(

User:Jchdel

2021-11-10T20:47:07Z

Jchdel: update resume

User:Jchdel

2021-10-20T15:02:52Z

Jchdel: Replaced content with "I run it on alpine 3.13: https://github.com/jchdel/select-fastest-gateway"

I run it on alpine 3.13: https://github.com/jchdel/select-fastest-gateway

User:Jchdel

2021-10-20T06:20:26Z

Jchdel: how to select fastest uplink on a router (optimization)

to be run periodically (I do it every minutes for a 3 ISP setup)
<pre>
#!/bin/bash
# This script configure the router to use fastest available gateway
# as default one. It uses some bashism...
[ -f /tmp/router.order ] && logger "Already running" && exit 1
NICS=($(ip -br link|awk '{print $1}')) # index 0 is loopback (lo)
NNICS=$((${#NICS[@]}-1))
GWS=()
IPS=()
iptables -t mangle -F
iptables -t nat -F
# Did we lost all of our gateways?
ip route | grep -q default || \
for ((i=1; i<=$NNICS; i++))
do
ifdown ${NICS[$i]}
ifup ${NICS[$i]} && \
logger "${NICS[$i]} restarted." || \
logger "Unable to restart ${NICS[$i]}."
done
# Prepare routing tables for each gateway
for ((i=1; i<=$NNICS; i++))
do
IPS[$i]="$(ip a s ${NICS[$i]}|awk '/inet/{print $2}'|cut -d/ -f1)"
[ -z "${IPS[$i]}" ] && GWS[$i]="" && continue
# disable kernel filtering of "unwanted" packets
echo 0 > /proc/sys/net/ipv4/conf/${NICS[$i]}/rp_filter
GWS[$i]="$(ip r | grep default | grep -v dead | grep ${NICS[$i]} | cut -d\ -f3)"
[ -z "${GWS[$i]}" ] && continue
# duplicate main routing table for each live default gateway
ip route flush table $i
ip route show table main | grep -Ev ^default | while read ROUTE ; do
ip route add table $i $ROUTE
done
# add default gateway
ip route add table $i default via ${GWS[$i]} dev ${NICS[$i]}
# mark packets from localhost
iptables -t mangle -A OUTPUT -s ${IPS[$i]} -j MARK --set-mark $i
# activate alternate routing
while $(ip rule del fwmark $i table $i);do .;done 2>/dev/null
ip rule add fwmark $i table $i prio ${i}0
# MASQUERADE or SNAT ?
iptables -t nat -I POSTROUTING -o ${NICS[$i]} -j MASQUERADE #SNAT --to-source ${IPS[$i]}
done
# activate changes in policy routing
ip route flush cache
# ping same target via each gateway
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
( ping -n -c 5 -q -I ${IPS[$i]} 1.1 >/dev/null \
&& logger "1.1 responded for ${IPS[$i]} dev ${NICS[$i]}" \
|| logger "No response from 1.1 for ${IPS[$i]} dev ${NICS[$i]}" ; \
echo $i >> /tmp/router.order ) &
done
wait -n # first gateway to complete
# meanwhile, main routing table is still active
INDEX=$(head -1 /tmp/router.order)
METRIC=1
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
ip route del default via ${GWS[$i]} dev ${NICS[$i]}
done
ip route add default via ${GWS[$INDEX]} dev ${NICS[$INDEX]} metric $METRIC
echo 1 > /proc/sys/net/ipv4/ip_forward
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}."
wait # other gateways
cat /tmp/router.order | while read i
do
[ $i -eq $INDEX ] && continue
METRIC=$(($METRIC+1))
ip r a default via ${GWS[$i]} dev ${NICS[$i]} metric $METRIC
done
rm -f /tmp/router.order
exit 0
</pre>

User:Jchdel

2021-10-16T11:38:05Z

Jchdel: how to select fastest uplink on a router (alternative)

to be run periodically (I do it every minutes for a 3 ISP setup)
<pre>
#!/bin/bash
# This script configure the router to use fastest available gateway
# as default one. It uses some bashism...
[ -f /tmp/router.order ] && logger "Already running" && exit 1
NICS=($(ip -br link|awk '{print $1}')) # index 0 is loopback (lo)
NNICS=$((${#NICS[@]}-1))
GWS=()
IPS=()
iptables -t mangle -F
iptables -t nat -F
# Did we lost all of our gateways?
ip route | grep -q default || \
for ((i=1; i<=$NNICS; i++))
do
ifdown ${NICS[$i]}
ifup ${NICS[$i]} && \
logger "${NICS[$i]} restarted." || \
logger "Unable to restart ${NICS[$i]}."
done
# Prepare routing tables for each gateway
for ((i=1; i<=$NNICS; i++))
do
IPS[$i]="$(ip a s ${NICS[$i]}|awk '/inet/{print $2}'|cut -d/ -f1)"
[ -z "${IPS[$i]}" ] && GWS[$i]="" && continue
GWS[$i]="$(ip r | grep default | grep -v dead | grep ${NICS[$i]} | cut -d\ -f3)"
[ -z "${GWS[$i]}" ] && continue
# duplicate main routing table for each live default gateway
ip route flush table $i
ip route show table main | grep -Ev ^default | while read ROUTE ; do
ip route add table $i $ROUTE
done
# add default gateway
ip route add table $i default via ${GWS[$i]} dev ${NICS[$i]}
# mark packets from localhost
iptables -t mangle -A OUTPUT -s ${IPS[$i]} -j MARK --set-mark $i
# activate alternate routing
while $(ip rule del fwmark $i table $i);do .;done 2>/dev/null
ip rule add fwmark $i table $i prio ${i}0
# disable kernel filtering of "unwanted" packets
echo 0 > /proc/sys/net/ipv4/conf/${NICS[$i]}/rp_filter
done
# activate changes in policy routing
ip route flush cache
# ping same target via each gateway
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
( ping -n -c 5 -q -I ${IPS[$i]} 1.1 >/dev/null \
&& logger "1.1 responded for ${IPS[$i]} dev ${NICS[$i]}" \
|| logger "No response from 1.1 for ${IPS[$i]} dev ${NICS[$i]}" ; \
echo $i >> /tmp/router.order ) &
done
wait -n # first gateway to complete
INDEX=$(head -1 /tmp/router.order)
# set default router for FORWARDED packets
iptables -t mangle -A FORWARD -j MARK --set-mark $INDEX
# MASQUERADE or SNAT ?
iptables -t nat -I POSTROUTING -o ${NICS[$INDEX]} -j MASQUERADE #SNAT --to-source ${IPS[$INDEX]}
ip route flush cache # not sure this one is needed?
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}."
wait # other gateways to complete
rm -f /tmp/router.order
exit 0
</pre>
or
<pre>
wait -n
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
ip r del default via ${GWS[$i]} dev ${NICS[$i]}
done
INDEX=$(head -1 /tmp/router.order)
METRIC=1
[ -z "${GWS[$INDEX]}" ] || \
ip r a default via ${GWS[$INDEX]} dev ${NICS[$INDEX]} metric $METRIC
# MASQUERADE or SNAT ?
iptables -t nat -I POSTROUTING -o ${NICS[$INDEX]} -j MASQUERADE #SNAT --to-source ${IPS[$INDEX]}
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}."
wait
cat /tmp/router.order | while read i
do
[ $i -eq $INDEX ] && continue
[ -z "${GWS[$i]}" ] && continue
METRIC=$(($METRIC+1))
ip r a default via ${GWS[$i]} dev ${NICS[$i]} metric $METRIC
done
rm -f /tmp/router.order
exit 0
</pre>

User:Jchdel

2021-10-16T10:31:11Z

Jchdel: how to select fastest uplink on a router

to be run periodically (I do it every minutes for a 3 ISP setup)
<pre>
#!/bin/bash
# This script configure the router to use fastest available gateway
# as default one. It uses some bashism...
[ -f /tmp/router.order ] && logger "Already running" && exit 1
NICS=($(ip -br link|awk '{print $1}')) # index 0 is loopback (lo)
NNICS=$((${#NICS[@]}-1))
GWS=()
IPS=()
iptables -t mangle -F
iptables -t nat -F
iptables -F INPUT
iptables -F OUTPUT
# Did we lost all of our gateways?
ip route | grep -q default || \
for ((i=1; i<=$NNICS; i++))
do
ifdown ${NICS[$i]}
ifup ${NICS[$i]} && \
logger "${NICS[$i]} restarted." || \
logger "Unable to restart ${NICS[$i]}."
done
# Prepare routing tables for each gateway
for ((i=1; i<=$NNICS; i++))
do
IPS[$i]="$(ip a s ${NICS[$i]}|awk '/inet/{print $2}'|cut -d/ -f1)"
[ -z "${IPS[$i]}" ] && GWS[$i]="" && continue
GWS[$i]="$(ip r | grep default | grep -v dead | grep ${NICS[$i]} | cut -d\ -f3)"
[ -z "${GWS[$i]}" ] && continue
# duplicate main routing table for each live default gateway
ip route flush table $i
ip route show table main | grep -Ev ^default | while read ROUTE ; do
ip route add table $i $ROUTE
done
# add default gateway
ip route add table $i default via ${GWS[$i]} dev ${NICS[$i]}
# mark packets from localhost
iptables -t mangle -A OUTPUT -s ${IPS[$i]} -j MARK --set-mark $i
# activate alternate routing
while $(ip rule del fwmark $i table $i);do .;done 2>/dev/null
ip rule add fwmark $i table $i prio ${i}0
# disable kernel filtering of "unwanted" packets
echo 0 > /proc/sys/net/ipv4/conf/${NICS[$i]}/rp_filter
done
# activate changes in policy routing
ip route flush cache
# ping same target via each gateway
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
( ping -n -c 5 -q -I ${IPS[$i]} 1.1 >/dev/null \
&& logger "1.1 responded for ${IPS[$i]} dev ${NICS[$i]}" \
|| logger "No response from 1.1 for ${IPS[$i]} dev ${NICS[$i]}" ; \
echo $i >> /tmp/router.order ) &
done
wait -n # first gateway to complete
INDEX=$(head -1 /tmp/router.order)
# set default router for FORWARDED packets
iptables -t mangle -A FORWARD -j MARK --set-mark $INDEX
# MASQUERADE or SNAT ?
iptables -t nat -I POSTROUTING -o ${NICS[$INDEX]} -j MASQUERADE #SNAT --to-source ${IPS[$INDEX]}
ip route flush cache # not sure this one is needed?
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}."
wait # other gateways to complete
rm -f /tmp/router.order
exit 0
</pre>

Talk:Alpine on ARM

2020-03-04T09:53:41Z

Jchdel: Created page with "Successful install on board: * orange-pi-pc - 2020-02-15 * sunvell R69 - 2020-03-01 (same SD as the opipc)"

Successful install on board:

* orange-pi-pc - 2020-02-15
* sunvell R69 - 2020-03-01 (same SD as the opipc)

User:Jchdel

2020-02-18T05:42:11Z

Jchdel: Created page with "After live migrating a fleet of (~150) embedded devices from Debian 8 to Alpine 3.6, it is now time to refactor the disk layout (i.e. reinstalling remotely and live) and migra..."

After live migrating a fleet of (~150) embedded devices from Debian 8 to Alpine 3.6, it is now time to refactor the disk layout (i.e. reinstalling remotely and live) and migrate (fleet is now ~250 devices) to latest Alpine for one.

On the other hand I now need to have same setup on x86_64 and on armv7 and they want to reduce costs deploying new units. I just installed latest Alpine on a orange-pi-pc and it runs like a charm.

Meanwhile, I discovered projects like balena.io, foundries.io or mender.io, both solving the OTA problem. I wonder if I could adapt mender.io to distribute an Alpine system running in mode RUN-FROM-RAM with custom partitioning of the internal storage... I will give it a try and report results here...

Talk:DIY Fully working Alpine Linux for Allwinner and Other ARM SOCs

2020-02-18T05:23:53Z

Jchdel: add stepped procedure

Hi, 
I'm currently trying the procedure to install AL on orange-pi-pc. 
I'm cross compiling from a debian box. 
Compilation of kernel (linux-sunxi) fails with

$ make zImage
CHK include/linux/version.h
CHK include/generated/utsrelease.h
make[1]: 'include/generated/mach-types.h' is up to date.
CALL scripts/checksyscalls.sh
CHK include/generated/compile.h
GEN .version
CHK include/generated/compile.h
UPD include/generated/compile.h
CC init/version.o
LD init/built-in.o
LD .tmp_vmlinux1
arm-linux-gnueabihf-ld: no machine record defined
arch/arm/kernel/built-in.o: In function `kretprobe_trampoline':
/srv/r_and_d/linux-sunxi/arch/arm/kernel/kprobes.c:379: undefined reference to `trampoline_handler'
Makefile:875: recipe for target '.tmp_vmlinux1' failed
make: *** [.tmp_vmlinux1] Error 1

I'm trying to search any clue on the net to fix this but nothing so far :( 
any idea?

--[[User:Jchdel|Jchdel]] ([[User talk:Jchdel|talk]]) 07:03, 15 February 2020 (UTC)

I went the alternate way and build the kernel with armbian toolbox. 
I'm now a happy Alpine Linux user on orange-pi-pc. It took be about 7 hours to complete "setup-alpine" starting from scratch. 
A point of attention is the size of initramfs! 
I learned a lot about arm ecosystem. Thanks a lot for this great introduction! 

started to prepare an Alpine Linux SD card for the orange-pi-pc
# compile kernel from source (kernel-sunxi)
# compile kernel modules from source
# compile u-boot from source
# download rootfs from alpinelinux.org
# extract initramfs
# extract modloop
# extract SPL
# extract dtb
# extract kernel
# extract modules
# extract firmware
# adapt and generate initramfs
# adapt and generate modloop
# prepare u-boot macro (boot.cmd)
# generate u-boot macro (boot.scr)
# flash spl
# flash u-boot
# partition SD
# format new partition
# mount new partition
# copy kernel, initramfs, modloop, dtp, and u-boot macro
# umount
# put SD in orange-pi-pc
# power on
# enjoy!

--[[User:Jchdel|Jchdel]] ([[User talk:Jchdel|talk]]) 08:30, 16 February 2020 (UTC)

Talk:DIY Fully working Alpine Linux for Allwinner and Other ARM SOCs

2020-02-16T08:30:21Z

Jchdel:

Talk:DIY Fully working Alpine Linux for Allwinner and Other ARM SOCs

2020-02-15T07:03:19Z

Jchdel:

Hi,
I'm currently trying the procedure to install AL on orange-pi-pc.
I'm cross compiling from a debian box.
Compilation of kernel (linux-sunxi) fails with

$ make zImage
CHK include/linux/version.h
CHK include/generated/utsrelease.h
make[1]: 'include/generated/mach-types.h' is up to date.
CALL scripts/checksyscalls.sh
CHK include/generated/compile.h
GEN .version
CHK include/generated/compile.h
UPD include/generated/compile.h
CC init/version.o
LD init/built-in.o
LD .tmp_vmlinux1
arm-linux-gnueabihf-ld: no machine record defined
arch/arm/kernel/built-in.o: In function `kretprobe_trampoline':
/srv/r_and_d/linux-sunxi/arch/arm/kernel/kprobes.c:379: undefined reference to `trampoline_handler'
Makefile:875: recipe for target '.tmp_vmlinux1' failed
make: *** [.tmp_vmlinux1] Error 1

I'm trying to search any clue on the net to fix this but nothing so far :(
any idea?
--[[User:Jchdel|Jchdel]] ([[User talk:Jchdel|talk]]) 07:03, 15 February 2020 (UTC)

Talk:DIY Fully working Alpine Linux for Allwinner and Other ARM SOCs

2020-02-15T06:59:36Z

Jchdel: trying to implement the how to...

Hi,
I'm currently trying the procedure to install AL on orange-pi-pc.
I'm cross compiling from a debian box.
Compilation of kernel (linux-sunxi) fails with
<nowiki>
$ make zImage
CHK include/linux/version.h
CHK include/generated/utsrelease.h
make[1]: 'include/generated/mach-types.h' is up to date.
CALL scripts/checksyscalls.sh
CHK include/generated/compile.h
GEN .version
CHK include/generated/compile.h
UPD include/generated/compile.h
CC init/version.o
LD init/built-in.o
LD .tmp_vmlinux1
arm-linux-gnueabihf-ld: no machine record defined
arch/arm/kernel/built-in.o: In function `kretprobe_trampoline':
/srv/r_and_d/linux-sunxi/arch/arm/kernel/kprobes.c:379: undefined reference to `trampoline_handler'
Makefile:875: recipe for target '.tmp_vmlinux1' failed
make: *** [.tmp_vmlinux1] Error 1
</nowiki> I'm trying to search any clue on the net to fix this but nothing so far :(
any idea?