1.1.51-alt1

- current updates

.gear/mkimage-profiles.spec

@@ -1,22 +1,22 @@
 Name: mkimage-profiles
-Version: 1.0.0
+Version: 1.1.51
 Release: alt1
 
 Summary: ALT Linux based distribution metaprofile
 License: GPLv2+
 Group: Development/Other
 
-Url: http://www.altlinux.org/Mkimage/Profiles/m-p
+Url: http://altlinux.org/m-p
 Source: %name-%version.tar
 Packager: Michael Shigorin <mike@altlinux.org>
 
 BuildArch: noarch
 BuildRequires: rsync asciidoc-a2x xmlgraphics-fop fonts-ttf-dejavu
-BuildRequires: /proc
 
 Requires: rsync git-core
 Requires: time schedutils sfdisk
 Requires: mkimage >= 0.2.5
+Requires: mkimage-preinstall
 
 # Recommends: graphviz qemu-img
 
@@ -28,6 +28,7 @@ Requires: mkimage >= 0.2.5
 %package doc
 Summary: %name documentation
 Group: Development/Documentation
+BuildRequires: java /proc
 
 %description
 mkimage-profiles is a collection of bits and pieces useful for
@@ -37,7 +38,7 @@ to choose from, and some ready-made image recipes as well.
 
 Make no mistake: constructing distributions isn't just fun, it takes
 a lot of passion and knowledge to produce a non-trivial one.  So m-p
-(the short nick for mkimage-profiles) is complex too.  If you need
+(the short alias for mkimage-profiles) is complex too.  If you need
 -- or want -- to make just a few tweaks to an existing recipe, it might
 be easier to comprehend the generated profile (aka builddir) which
 contains only the needed subprofiles, script hooks and package lists
@@ -78,6 +79,172 @@ cp -a * %buildroot%mpdir
 %doc %docs/*
 
 %changelog
+* Mon Nov 10 2014 Michael Shigorin <mike@altlinux.org> 1.1.51-alt1
+- current updates
+
+* Mon Oct 27 2014 Michael Shigorin <mike@altlinux.org> 1.1.50-alt1
+- minor tweaks
+
+* Mon Oct 13 2014 Michael Shigorin <mike@altlinux.org> 1.1.49-alt1
+- pkglist updates
+
+* Mon Sep 29 2014 Michael Shigorin <mike@altlinux.org> 1.1.48-alt1
+- (sysv)init: exclude systemd explicitly
+
+* Mon Sep 22 2014 Michael Shigorin <mike@altlinux.org> 1.1.47-alt1
+- kpackages() argswap
+
+* Mon Sep 15 2014 Michael Shigorin <mike@altlinux.org> 1.1.46-alt1
+- regular fixes
+
+* Mon Sep 01 2014 Michael Shigorin <mike@altlinux.org> 1.1.45-alt1
+- starterkits alpha
+
+* Mon Aug 18 2014 Michael Shigorin <mike@altlinux.org> 1.1.44-alt1
+- connman fixup
+
+* Mon Aug 04 2014 Michael Shigorin <mike@altlinux.org> 1.1.43-alt1
+- fixed package build
+
+* Mon Jul 28 2014 Michael Shigorin <mike@altlinux.org> 1.1.42-alt1
+- current bits
+
+* Mon Jul 07 2014 Michael Shigorin <mike@altlinux.org> 1.1.41-alt1
+- post-214 fixups
+
+* Mon Jun 30 2014 Michael Shigorin <mike@altlinux.org> 1.1.40-alt1
+- systemd-214
+
+* Mon Jun 16 2014 Michael Shigorin <mike@altlinux.org> 1.1.39-alt1
+- starterkits-20140612
+
+* Mon Jun 02 2014 Michael Shigorin <mike@altlinux.org> 1.1.38-alt1
+- mksquashfs 4.3 support
+
+* Mon May 26 2014 Michael Shigorin <mike@altlinux.org> 1.1.37-alt1
+- use/browser
+
+* Mon May 19 2014 Michael Shigorin <mike@altlinux.org> 1.1.36-alt1
+- regular-lxqt
+
+* Mon May 12 2014 Michael Shigorin <mike@altlinux.org> 1.1.35-alt1
+- yet another rescue week
+
+* Mon May 05 2014 Michael Shigorin <mike@altlinux.org> 1.1.34-alt1
+- remember Odessa
+
+* Mon Apr 28 2014 Michael Shigorin <mike@altlinux.org> 1.1.33-alt1
+- net-eth tweaks
+
+* Mon Apr 21 2014 Michael Shigorin <mike@altlinux.org> 1.1.32-alt1
+- regular-rescue week
+
+* Mon Apr 14 2014 Michael Shigorin <mike@altlinux.org> 1.1.31-alt1
+- live: refactoring
+- forensics mode
+
+* Mon Apr 07 2014 Michael Shigorin <mike@altlinux.org> 1.1.30-alt1
+- robotics support
+
+* Mon Mar 31 2014 Michael Shigorin <mike@altlinux.org> 1.1.29-alt1
+- mediacheck feature
+
+* Mon Mar 24 2014 Michael Shigorin <mike@altlinux.org> 1.1.28-alt1
+- install2: more cleanups
+
+* Mon Mar 17 2014 Michael Shigorin <mike@altlinux.org> 1.1.27-alt1
+- don't insist on k-m-r8168
+- codebase deduplication
+
+* Mon Mar 10 2014 Michael Shigorin <mike@altlinux.org> 1.1.26-alt1
+- docs week
+- deflogin: empty ROOTPW explicitly ignored (potential security fix)
+
+* Mon Mar 03 2014 Michael Shigorin <mike@altlinux.org> 1.1.25-alt1
+- regular updates
+
+* Mon Feb 10 2014 Michael Shigorin <mike@altlinux.org> 1.1.24-alt1
+- service bridge
+
+* Mon Feb 03 2014 Michael Shigorin <mike@altlinux.org> 1.1.23-alt1
+- live, net*, syslinux fixes (see also #26608)
+
+* Mon Jan 27 2014 Michael Shigorin <mike@altlinux.org> 1.1.22-alt1
+- ahci kludge (see #29705) :(
+
+* Mon Jan 20 2014 Michael Shigorin <mike@altlinux.org> 1.1.21-alt1
+- rescue tweaks
+
+* Mon Jan 13 2014 Michael Shigorin <mike@altlinux.org> 1.1.20-alt1
+- support for CIFS installation method (sin@)
+- glibc-locales for regular images (closes: #29693)
+
+* Mon Dec 30 2013 Michael Shigorin <mike@altlinux.org> 1.1.19-alt1
+- regular fixes
+
+* Mon Dec 23 2013 Michael Shigorin <mike@altlinux.org> 1.1.18-alt1
+- efi updates
+
+* Mon Dec 16 2013 Michael Shigorin <mike@altlinux.org> 1.1.17-alt1
+- refind branding
+
+* Mon Dec 09 2013 Michael Shigorin <mike@altlinux.org> 1.1.16-alt1
+- e18
+
+* Mon Dec 02 2013 Michael Shigorin <mike@altlinux.org> 1.1.15-alt1
+- regular fixups
+
+* Mon Nov 25 2013 Michael Shigorin <mike@altlinux.org> 1.1.14-alt1
+- important bugfix: THE_PACKAGES weren't getting through to .base
+- regular-sysv-tde related churn
+
+* Mon Nov 04 2013 Michael Shigorin <mike@altlinux.org> 1.1.13-alt1
+- rescue friday
+
+* Mon Oct 21 2013 Michael Shigorin <mike@altlinux.org> 1.1.12-alt1
+- live-builder update
+
+* Mon Oct 14 2013 Michael Shigorin <mike@altlinux.org> 1.1.11-alt1
+- luks better
+
+* Mon Sep 30 2013 Michael Shigorin <mike@altlinux.org> 1.1.10-alt1
+- regular tweaks
+
+* Mon Sep 23 2013 Michael Shigorin <mike@altlinux.org> 1.1.9-alt1
+- regular fixes
+
+* Mon Sep 16 2013 Michael Shigorin <mike@altlinux.org> 1.1.8-alt1
+- armh/p7/ve fixes
+
+* Mon Aug 26 2013 Michael Shigorin <mike@altlinux.org> 1.1.7-alt1
+- minor fixes
+
+* Mon Aug 12 2013 Michael Shigorin <mike@altlinux.org> 1.1.6-alt1
+- vm-net retired
+
+* Mon Aug 05 2013 Michael Shigorin <mike@altlinux.org> 1.1.5-alt1
+- armh related fixes
+
+* Mon Jul 29 2013 Michael Shigorin <mike@altlinux.org> 1.1.4-alt1
+- assorted fixups
+
+* Mon Jul 22 2013 Michael Shigorin <mike@altlinux.org> 1.1.3-alt1
+- armh fixes and tweaks
+
+* Mon Jul 15 2013 Michael Shigorin <mike@altlinux.org> 1.1.2-alt1
+- control and sound features
+
+* Mon Jul 01 2013 Michael Shigorin <mike@altlinux.org> 1.1.1-alt1
+- cuboxism
+
+* Mon Jun 17 2013 Michael Shigorin <mike@altlinux.org> 1.1.0-alt1
+- 1.1.x branch: public alpha development status
+  + new subprofile: rootfs
+  + new features: armh*, deflogin, init, services
+  + refactored features: build-*, efi, fonts, live, x11*
+  + tar2vm got rewritten as tar2fs, gained ARM support
+- minor spec metadata update
+
 * Mon Jun 17 2013 Michael Shigorin <mike@altlinux.org> 1.0.0-alt1
 - 1.0
 

.gear/tags/9873ef00763476e979b938961f22c0e65d4e2c97

@@ -0,0 +1,6 @@
+object 3261d946336eea5546f83b400331e703227e1b0f
+type commit
+tag v1.1.50
+tagger Michael Shigorin <mike@altlinux.org> 1414443321 +0300
+
+tweaks

.gear/tags/c00468bd4033aa25fe1bb5af8c874b02bb492969

@@ -1,6 +0,0 @@
-object 57b368d75d54ef23b7d8b564e826efcb11e6a4d7
-type commit
-tag v0.9.16
-tagger Michael Shigorin <mike@altlinux.org> 1370880061 +0400
-
-1.0pre

.gear/tags/list

@@ -1 +1 @@
-c00468bd4033aa25fe1bb5af8c874b02bb492969 v0.9.16
+9873ef00763476e979b938961f22c0e65d4e2c97 v1.1.50

Makefile

@@ -6,15 +6,16 @@
 -include $(HOME)/.mkimage/profiles.mk
 
 # for immediate assignment
-ifndef ARCHES
-ifdef ARCH
-ARCHES := $(ARCH)
-else
-ARCHES := $(shell arch \
+ifndef ARCH
+ARCH := $(shell arch \
 	| sed 's/i686/i586/; s/armv7.*/armh/; s/armv.*/arm/; s/ppc.*/ppc/')
 endif
+
+ifndef ARCHES
+ARCHES := $(ARCH)
 endif
-export ARCHES
+
+export ARCHES ARCH
 
 export PATH := $(CURDIR)/bin:$(PATH)
 
@@ -29,8 +30,10 @@ MAKE += -r --no-print-directory
 
 DIRECT_TARGETS := help help/distro help/ve help/vm clean distclean check
 .PHONY: $(DIRECT_TARGETS)
+
+# these build nothing so no use of reports either
 $(DIRECT_TARGETS):
-	@$(MAKE) -f main.mk $@
+	@$(MAKE) -f main.mk REPORT= $@
 
 export NUM_TARGETS := $(words $(MAKECMDGOALS))
 
@@ -65,3 +68,6 @@ SHELL = /bin/bash
 
 docs:
 	@$(MAKE) -C doc
+
+docs-publish:
+	@$(MAKE) -C doc publish

QUICKSTART

@@ -19,7 +19,7 @@ http://en.altlinux.org/Hasher; large tmpfs helps a lot).
 ~~~~~~~
 от имени root::
 ----
-# apt-get install mkimage hasher git-core
+# apt-get install mkimage mkimage-preinstall hasher git-core
 # hasher-useradd USER
 ----
 
@@ -27,7 +27,7 @@ http://en.altlinux.org/Hasher; large tmpfs helps a lot).
 ----
 $ git config --global user.email "my@email"
 $ git config --global user.name "My Name"
-$ mkdir ~/out
+$ mkdir -p ~/out ~/tmp
 ----
 
 тестовая сборка::
@@ -51,3 +51,4 @@ $ make ARCH=i586 APTCONF=~/apt/apt.conf.i586 REPORT=1 ve/generic.tar
 - http://www.altlinux.org/hasher
 - http://www.altlinux.org/mkimage
 - http://www.altlinux.org/m-p
+- http://www.altlinux.org/m-p-howto ("как поправить под себя")

README

@@ -21,7 +21,7 @@
 
 Особенности:
 
-* метапрофиль может быть полностью read-only при сборке
+* метапрофиль при сборке может быть доступен только на чтение
 * для сборки подыскивается предпочтительно tmpfs
 * в профиль копируются только нужные объекты;
   он автономен относительно метапрофиля
@@ -36,10 +36,9 @@
 Объекты:
 
 * дистрибутивы и виртуальные среды/машины:
-** описываются в conf.d/*.mk или соответственно lib/{distro,ve,vm}.mk
+** описываются в conf.d/*.mk
 ** могут основываться на предшественниках, расширяя их
-** дистрибутивы также:
-*** включают один или более субпрофилей по надобности
+** дистрибутивы также включают один или более субпрофилей по надобности
 ** желательно избегать множественного наследования, см. тж. фичи
 * субпрофили:
 ** список собирается в $(SUBPROFILES)
@@ -66,12 +65,15 @@
 
 См. тж.:
 
-* http://altlinux.org/m-p
+* http://altlinux.org/m-p: обзорная документация, в т.ч. howto
 * doc/:
 ** params.txt: переменные, указываемые при запуске сборки
 ** pkglists.txt: формирование состава образа
 ** features.txt: обзор подключаемых особенностей
 
+Примечание: пути в документации задаются от каталога верхнего уровня,
+если не указаны как относительные в явном виде (./) или по смыслу.
+
 Удачи; что не так -- пишите.
 
 Michael Shigorin <mike@altlinux.org>

bin/report-targets

@@ -21,7 +21,7 @@ while read first second third rest; do
 	for to in $TO; do
 		out="  \"$FROM\" -> \"$to\""
 		case $to in
-		*distro/*)
+		*distro/*|*vm/*)
 			echo "$out [weight=10];";;
 		*)
 			echo "$out";;

bin/tags2lists

@@ -30,4 +30,7 @@ transformed="$(sed \
 	-e "s, *) *, ) ,g")"
 
 [ "$DEBUG" = 2 ] && echo "`basename $0`: transformed = \"$transformed\"" >&2
-[ -z "$transformed" ] || find $transformed | sed 's,^\./,,' | grep -v '\.sw.$'
+[ -z "$transformed" ] ||
+	find $transformed \
+	| sed 's,^\./,,' \
+	| egrep -v '(\.sw.|~)$'

bin/tar2fs

@@ -0,0 +1,247 @@
+#!/bin/bash -ex
+# usage:
+# tar2fs chroot.tar image.raw [size_in_bytes [fstype]]
+
+. shell-error
+
+if [ $# -lt 2 ]; then
+	fatal "error: tar2fs needs at least two arguments"
+fi
+
+# this needs env_keep sudo setup to actually work
+if [ -n "$GLOBAL_BUILDDIR" ]; then
+	WORKDIR="$GLOBAL_BUILDDIR/vmroot"
+else
+	WORKDIR="$(mktemp --tmpdir -d vmroot-XXXXX)"
+fi
+
+[ -n "$WORKDIR" ] || fatal "couldn't come up with suitable WORKDIR"
+
+[ -n "$GLOBAL_DEBUG" ] || message "WORKDIR: $WORKDIR"
+
+MB=1048576		# a parted's "megabyte" in bytes is *broken*
+
+SIZE_FACTOR=2		# multiply the sizes found by this value
+BOOT_SIZE_FACTOR=2	# multiply /boot size by this value additionally
+
+CUR_BOUNDARY=0		# align first partition at 1MB for performance (+1)
+
+INITRD_MODULES=
+BOOTFSTYPE=
+BOOTPART=
+
+case "`arch`" in	# NB: sudo => no GLOBAL_ will do either; mind qemu-*
+*86*)
+	# NB: different storage modules might be needed for non-kvm
+	INITRD_MODULES="sd_mod ata_piix"
+	BLOCKDEV="/dev/sda"	# might be /dev/vda for virtio
+	ROOTPART="1"
+	;;
+arm*)
+	BOOTFSTYPE="ext2"	# support expected in every sane target uboot
+	BLOCKDEV="/dev/mmcblk0p"	# ...hopefully...
+	BOOTPART="1"
+	ROOTPART="2"
+	;;
+esac
+
+# figure out the part taken by /boot in the given tarball
+boot_size() {
+	if [ -n "$BOOTPART" ]; then
+		tar tvf "$1" \
+		| awk ' \
+			BEGIN { sum=0 }
+			/^-.* \.\/boot\// { sum=sum+$3 }
+			END { print sum }'
+	else
+		echo "0"
+	fi
+}
+
+# parted wrapper for convenience
+parting() { parted "$LOOPDEV" --align optimal --script -- "$@"; }
+
+# unfortunately parted is insane enough to lump alignment controls
+# into unit controls so creating adjacent partitions sized in MiB
+# is not as straightforward as it might be... thus "+1" padding;
+# see also http://www.gnu.org/software/parted/manual/parted.html#unit
+mkpart() {
+	# a bit different start/end semantics to handle end of device too
+	local start="$(($CUR_BOUNDARY + 1))"	# yes, we lose a megabyte
+	if [ -n "$1" ]; then
+		CUR_BOUNDARY="$(($start + $1))"
+		local end="$CUR_BOUNDARY"MiB
+	else
+		local end="-1s"	# last sector of the image
+	fi
+	parting mkpart primary ext2 "$start"MiB "$end"
+}
+
+# a tarball containing chroot with a kernel
+TAR="$1"
+[ -s "$TAR" ] || fatal "source tarball doesn't really exist"
+
+# a path to the image to be generated
+IMG="$2"
+[ -d "$(dirname "$IMG")" ] || fatal "target directory doesn't exist"
+
+# 0 means auto; if a value is specified it holds (no /boot subtracted)
+ROOTSIZE="$3"
+[ -n "$ROOTSIZE" -a "$ROOTSIZE" != 0 ] || unset ROOTSIZE
+
+# image size in bytes
+TARSIZE="$(stat -Lc %s "$TAR")"
+# /boot size in that tarball
+BOOTSIZE="$(boot_size "$TAR")"
+DEFSIZE="$(($SIZE_FACTOR * ($TARSIZE - $BOOTSIZE)))"	# (exact sizes)
+ROOTSIZE="$((${ROOTSIZE:-$DEFSIZE} + $MB - 1))"	# for ceil rounding to MB
+# image and /boot sizes in megabytes
+ROOTSIZEM="$(($ROOTSIZE / $MB))"
+BOOTSIZEM="$((($SIZE_FACTOR * $BOOT_SIZE_FACTOR * $BOOTSIZE + $MB - 1) / $MB))"
+
+# tested to work: ext[234], jfs
+# NB: xfs doesn't have a spare sector for the bootloader
+ROOTFSTYPE="${4:-ext4}"
+
+# single root partition hardwired so far,
+# add another image for home/data/swap if needed
+ROOTDEV="$BLOCKDEV$ROOTPART"
+
+# last preparations...
+MKFS="mkfs.$ROOTFSTYPE ${BOOTFSTYPE:+mkfs.$BOOTFSTYPE}"
+for i in losetup sfdisk parted kpartx $MKFS; do
+	if ! type -t "$i" >&/dev/null; then
+		fatal "$i required but not found in host system"
+	fi
+done
+
+LOOPDEV="$(losetup --find)"	# would be sad about non-binary megabytes too
+ROOTFS="$WORKDIR/chroot"
+
+BOOTFS=
+if [ -n "$BOOTPART" ]; then
+	BOOTFS="$ROOTFS/boot"
+fi
+
+exit_handler() {
+	rc=$?
+	if [ -n "$ROOTFS" ]; then
+		umount ${BOOTFS:+"$BOOTFS"} "$ROOTFS"{/dev,/proc,/sys,}
+
+		if [ -n "$LOOPDEV" ]; then
+			kpartx -d "$LOOPDEV"
+			losetup --detach "$LOOPDEV"
+		fi
+		rm -r -- "$ROOTFS"
+		rmdir -- "$WORKDIR"
+	fi
+	exit $rc
+}
+
+# handle -e in shebang as well
+trap exit_handler EXIT ERR
+
+# prepare disk image and a filesystem inside it
+rm -f -- "$IMG"
+OFFSET="$(($CUR_BOUNDARY + $BOOTSIZEM + $ROOTSIZEM - 1))"
+dd if=/dev/zero of="$IMG" conv=notrunc bs=$MB count=1 seek="$OFFSET"
+losetup "$LOOPDEV" "$IMG"
+
+parting mklabel msdos
+
+if [ -n "$BOOTPART" ]; then
+	BOOTDEV="$BLOCKDEV$BOOTPART"
+	mkpart "$BOOTSIZEM"
+fi
+
+# not ROOTSIZEM but "the rest"; somewhat non-trivial arithmetics lurk in parted
+mkpart
+
+kpartx -a -s "$LOOPDEV"
+LOOPROOT="/dev/mapper/$(basename "$LOOPDEV")p$ROOTPART"
+
+mkfs."$ROOTFSTYPE" "$LOOPROOT"
+
+if [ -n "$BOOTPART" ]; then
+	LOOPBOOT="/dev/mapper/$(basename "$LOOPDEV")p$BOOTPART"
+	mkfs."$BOOTFSTYPE" "$LOOPBOOT"
+fi
+
+ROOTUUID="$(blkid -s UUID -o value -c /dev/null "$LOOPROOT")"
+if [ -n "$ROOTUUID" ]; then
+       ROOTDEV="UUID=$ROOTUUID"
+else
+       ROOTDEV="$LOOPROOT"
+fi
+
+if [ -n "$BOOTPART" ]; then
+	BOOTUUID="$(blkid -s UUID -o value -c /dev/null "$LOOPBOOT")"
+	if [ -n "$ROOTUUID" ]; then
+		BOOTDEV="UUID=$BOOTUUID"
+	fi
+fi
+
+# mount and populate it
+mkdir -pm755 "$ROOTFS"
+mount "$LOOPROOT" "$ROOTFS"
+
+if [ -n "$BOOTPART" ]; then
+	mkdir -pm700 "$BOOTFS"
+	mount "$LOOPBOOT" "$BOOTFS"
+fi
+
+tar -C "$ROOTFS" --numeric-owner -xf "$TAR"
+for i in /dev /proc /sys; do mount --bind "$i" "$ROOTFS$i"; done
+
+# loop device so lilo could work...
+echo "$ROOTDEV / $ROOTFSTYPE relatime 1 1" >> "$ROOTFS/etc/fstab"
+
+# target device at once
+if [ -n "$BOOTPART" ]; then
+	echo "$BOOTDEV /boot $BOOTFSTYPE defaults 1 2" >> "$ROOTFS/etc/fstab"
+fi
+
+echo "MODULES_PRELOAD += $INITRD_MODULES $ROOTFSTYPE" >> "$ROOTFS/etc/initrd.mk"
+
+KERNEL="$(readlink $ROOTFS/boot/vmlinuz | sed 's,vmlinuz-,,')"
+chroot "$ROOTFS" make-initrd -k "$KERNEL"
+
+# ...target device too
+sed -i "s,$LOOPROOT,$ROOTDEV," "$ROOTFS/etc/fstab"
+
+if [ -x /sbin/lilo ]; then
+	# configure and install bootloader
+	REGEXP='^Disk .*: ([0-9]+) cylinders, ([0-9]+) heads, ([0-9]+) sectors/track*$'
+	set -- $(sfdisk -l "$LOOPDEV" | grep -E "$REGEXP" | sed -r "s@$REGEXP@\1 \2 \3@")
+
+	LILO_COMMON="lba32
+delay=1
+vga=0
+image=/boot/vmlinuz
+  initrd=/boot/initrd.img
+  append=\"root=$ROOTDEV rootdelay=3 quiet\"
+  label=linux"
+
+	cat > "$ROOTFS"/etc/lilo-loop.conf <<-EOF
+	boot=$LOOPDEV
+	disk=$LOOPDEV
+	  bios=0x80
+	  cylinders=$1
+	  heads=$2
+	  sectors=$3
+	  partition=$LOOPROOT
+	  start=63
+	$LILO_COMMON
+	EOF
+
+	chroot "$ROOTFS" lilo -C /etc/lilo-loop.conf
+
+	cat > "$ROOTFS"/etc/lilo.conf <<-EOF
+	boot=$BLOCKDEV
+	$LILO_COMMON
+	EOF
+fi
+
+if [ -n "$SUDO_USER" ]; then
+	chown "$SUDO_USER" "$IMG" "$ROOTFS" "$WORKDIR"
+fi

bin/tar2vm

@@ -1,134 +0,0 @@
-#!/bin/bash -e
-# usage:
-# tar2vm chroot.tar image.raw [size_in_bytes]
-
-. shell-error
-
-if [ $# -lt 2 ]; then
-	fatal "error: tar2vm needs at least two arguments"
-fi
-
-# this needs env_keep sudo setup to actually work
-if [ -n "$GLOBAL_BUILDDIR" ]; then
-	WORKDIR="$GLOBAL_BUILDDIR/vmroot"
-else
-	WORKDIR="$(mktemp --tmpdir -d vmroot-XXXXX)"
-fi
-
-[ -n "$WORKDIR" ] || fatal "couldn't come up with suitable WORKDIR"
-
-[ -n "$GLOBAL_DEBUG" ] || message "WORKDIR: $WORKDIR"
-
-# a tarball containing chroot with a kernel
-TAR="$1"
-[ -s "$TAR" ] || fatal "source tarball doesn't really exist"
-
-# a path to the image to be generated
-IMG="$2"
-[ -d "$(dirname "$IMG")" ] || fatal "target directory doesn't exist"
-
-# image size in bytes (256M is a fallback)
-TARSIZE="$(stat -Lc %s "$TAR")"
-DEFSIZE="$((2 * $TARSIZE))"
-DISKSIZE="${3:-${DEFSIZE:-268435456}}"
-# ...and in megabytes
-DISKSIZEM="$(($DISKSIZE / 1048576))"
-
-# tested to work: ext[234], jfs
-# NB: xfs doesn't have a spare sector for the bootloader
-ROOTFSTYPE="${4:-ext4}"
-
-# single root partition hardwired so far,
-# add another image for swap if needed
-ROOTDEV="/dev/sda1"
-
-# last preparations...
-for i in losetup sfdisk parted kpartx mkfs."$ROOTFSTYPE"; do
-	if ! type -t "$i" >&/dev/null; then
-		fatal "$i required but not found"
-	fi
-done
-
-LOOPDEV="$(losetup --find)"
-ROOTFS="$WORKDIR/chroot"
-
-exit_handler()
-{
-	rc=$?
-	if [ -n "$ROOTFS" ]; then
-		umount "$ROOTFS"{/dev,/proc,/sys,}
-		if [ -n "$LOOPDEV" ]; then
-			kpartx -d "$LOOPDEV"
-			losetup --detach "$LOOPDEV"
-		fi
-		rm -r -- "$ROOTFS"
-		rmdir -- "$WORKDIR"
-	fi
-	exit $rc
-}
-
-trap exit_handler EXIT
-
-# prepare disk image and a filesystem inside it
-rm -f -- "$IMG"
-dd if=/dev/zero of="$IMG" conv=notrunc \
-	bs=1 count=1 seek="$(($DISKSIZE - 1))"
-losetup "$LOOPDEV" "$IMG"
-
-parted --script "$LOOPDEV" mklabel msdos
-parted --script "$LOOPDEV" mkpart primary ext2 1 "$DISKSIZEM"
-
-kpartx -a "$LOOPDEV"
-LOOPDEV1="/dev/mapper/$(basename "$LOOPDEV")p1"
-
-mkfs."$ROOTFSTYPE" "$LOOPDEV1"
-
-# mount and populate it
-mkdir -pm755 "$ROOTFS"
-mount "$LOOPDEV1" "$ROOTFS"
-tar -C "$ROOTFS" --numeric-owner -xf "$TAR"
-for i in /dev /proc /sys; do mount --bind "$i" "$ROOTFS$i"; done
-
-# NB: different storage modules might be needed for non-kvm
-echo "$LOOPDEV1 / $ROOTFSTYPE defaults 1 1" >> "$ROOTFS/etc/fstab"
-echo "MODULES_PRELOAD=sd_mod ata_piix $ROOTFSTYPE" >> "$ROOTFS/etc/initrd.mk"
-
-KERNEL="$(readlink $ROOTFS/boot/vmlinuz | sed 's,vmlinuz-,,')"
-chroot "$ROOTFS" make-initrd -k "$KERNEL"
-
-sed -i "s,$LOOPDEV1,$ROOTDEV," "$ROOTFS/etc/fstab"
-
-# configure and install bootloader
-REGEXP='^Disk .*: ([0-9]+) cylinders, ([0-9]+) heads, ([0-9]+) sectors/track*$'
-set -- $(sfdisk -l "$LOOPDEV" | grep -E "$REGEXP" | sed -r "s@$REGEXP@\1 \2 \3@")
-
-LILO_COMMON="lba32
-delay=1
-vga=0
-image=/boot/vmlinuz
-  initrd=/boot/initrd.img
-  append=\"root=$ROOTDEV rootdelay=3\"
-  label=linux"
-
-cat > "$ROOTFS"/etc/lilo-loop.conf << EOF
-boot=$LOOPDEV
-disk=$LOOPDEV
-  bios=0x80
-  cylinders=$1
-  heads=$2
-  sectors=$3
-  partition=$LOOPDEV1
-  start=63
-$LILO_COMMON
-EOF
-
-chroot "$ROOTFS" lilo -C /etc/lilo-loop.conf
-
-cat > "$ROOTFS"/etc/lilo.conf << EOF
-boot=${ROOTDEV%[0-9]*}
-$LILO_COMMON
-EOF
-
-if [ -n "$SUDO_USER" ]; then
-	chown "$SUDO_USER" "$IMG" "$ROOTFS" "$WORKDIR"
-fi

conf.d/README

@@ -12,7 +12,13 @@
 
 Попросту говоря, copy-paste -- тревожный признак.
 
-По переменным (см. тж. ../doc/pkglists.txt):
+Вместо него нередко может помочь выделение кусочков конфигурации
+в пределах включаемого файла в цели mixin/*, которые не являются
+самостоятельными или даже промежуточными, но включают полезные
+группы настроек, нужных в различных образах, не наследующих
+друг другу -- посмотрите существующие примеры использования.
+
+По переменным (см. тж. doc/pkglists.txt):
 
 * для пользовательского окружения (live, main) предназначены
   THE_PACKAGES, THE_LISTS, THE_GROUPS, THE_PACKAGES_REGEXP

conf.d/armh.mk

@@ -0,0 +1,93 @@
+ifeq (armh,$(ARCH))
+
+ifeq (ve,$(IMAGE_CLASS))
+
+# aliases for autobuild
+ve/regular-nexus7-e17: ve/nexus7-e17; @:
+ve/regular-nexus7-kde4: ve/nexus7-kde4; @:
+ve/altlinux-p7-nexus7-e17: ve/nexus7-e17; @:
+ve/altlinux-p7-nexus7-kde4: ve/nexus7-kde4; @:
+
+ve/.tegra3-base: ve/.base use/armh use/kernel
+	@$(call add,BASE_PACKAGES,nvidia-tegra)
+
+ve/.tegra3-tablet: ve/.tegra3-base use/armh-tegra3 +pulse
+	@$(call add,BASE_LISTS,$(call tags,base tablet))
+
+ve/.nexus7-tablet: ve/.tegra3-tablet use/armh-nexus7 \
+	use/x11-autologin use/deflogin/altlinuxroot
+	@$(call set,KFLAVOURS,grouper)	# fits tilapia just fine
+	@$(call set,BRANDING,altlinux-kdesktop)	### the only suitable so far
+	@$(call add,BASE_PACKAGES,mkinitrd)     ### rootsubdir support
+	@$(call add,BASE_PACKAGES,firmware-nexus7)
+	@$(call add,BASE_PACKAGES,livecd-ru)	### until l10n is there
+
+ve/nexus7-e17: ve/.nexus7-tablet use/x11/e17 use/x11/lightdm/gtk; @:
+
+ve/nexus7-kde4: ve/.nexus7-tablet use/x11/lightdm/kde +systemd +pulse +nm
+	@$(call add,BASE_LISTS,$(call tags,base kde4mobile))
+
+ve/nexus7-xfce: ve/.nexus7-tablet use/x11/xfce use/x11/lightdm/gtk +systemd
+	@$(call add,BASE_PACKAGES,florence at-spi2-atk)
+
+endif
+
+ifeq (vm,$(IMAGE_CLASS))
+
+# NB: early dependency on use/kernel is on intent
+vm/.arm-base: profile/bare use/kernel use/net-eth/dhcp use/net-ssh; @:
+	@$(call add,BASE_PACKAGES,interactivesystem e2fsprogs)
+	@$(call add,BASE_PACKAGES,apt)
+	@$(call add,BASE_PACKAGES,mkinitrd uboot-tools)
+	@$(call set,BRANDING,altlinux-kdesktop)
+
+vm/.cubox-bare: vm/.arm-base use/armh-cubox use/net-ssh use/repo use/tty/S0
+	@$(call add,BASE_PACKAGES,glibc-locales vim-console rsync)
+
+vm/.cubox-desktop: vm/.cubox-bare use/armh-dovefb +systemd +pulse \
+	use/armh-cubox use/branding use/xdg-user-dirs/deep \
+	use/fonts/otf/adobe use/fonts/ttf/redhat use/fonts/ttf/ubuntu
+	@$(call set,BRANDING,altlinux-kdesktop)
+	@$(call add,THE_BRANDING,alterator graphics indexhtml menu notes)
+	@$(call add,BASE_PACKAGES,parole gst-ffmpeg gst-plugins-vmeta)
+	@$(call add,BASE_PACKAGES,gst-plugins-good gst-plugins-nice)
+	@$(call add,BASE_PACKAGES,gst-plugins-bad gst-plugins-ugly)
+	@$(call add,BASE_PACKAGES,LibreOffice4-full LibreOffice4-langpack-ru)
+	@$(call add,BASE_LISTS,$(call tags,(base || desktop) && regular))
+
+vm/cubox-xfce-ru: vm/.cubox-desktop use/deflogin/altlinuxroot \
+	use/slinux/arm use/x11/lightdm/gtk use/x11-autologin +nm
+	@$(call add,BASE_PACKAGES,livecd-ru)
+
+# these images use a kind of OEM setup
+vm/.cubox-oem: vm/.cubox-desktop use/oem; @:
+
+vm/.cubox-gtk: vm/.cubox-oem use/x11/lightdm/gtk +nm; @:
+
+vm/cubox-xfce: vm/.cubox-gtk \
+	use/slinux/arm use/net-usershares use/domain-client; @:
+
+vm/cubox-mate: vm/.cubox-gtk use/x11/mate; @:
+	@$(call set,BRANDING,altlinux-centaurus)
+	@$(call add,THE_BRANDING,mate-settings)
+
+vm/cubox-tde: vm/.cubox-oem use/net-eth/dhcp use/x11-autostart +tde
+	@$(call add,BASE_LISTS,openscada)
+
+vm/cubox-kde4: vm/.cubox-oem use/x11/kde4 use/x11/kdm4 use/fonts/zerg +pulse
+	@$(call add,BASE_LISTS,$(call tags,desktop && kde4 && !extra))
+
+vm/cubox-server: vm/.cubox-bare use/deflogin/altlinuxroot use/control/sudo-su \
+	+sysvinit
+	@$(call set,BRANDING,altlinux-centaurus)
+	@$(call add,BASE_PACKAGES,agetty fdisk)
+	@$(call add,BASE_LISTS,$(call tags,base security))
+
+vm/arm-server: vm/.arm-base use/net-eth/dhcp use/cleanup/installer +sysvinit
+	@$(call set,KFLAVOURS,armadaxp)
+	@$(call add,BASE_PACKAGES,agetty)
+	@$(call add,BASE_LISTS,$(call tags,extra (server || network)))
+
+endif
+
+endif

conf.d/desktop.mk

@@ -6,16 +6,20 @@ distro/.desktop-base: distro/.installer use/syslinux/ui/vesamenu use/x11/xorg
 
 distro/.desktop-mini: distro/.desktop-base use/x11/xdm +power; @:
 
-distro/.desktop-network: distro/.desktop-mini use/stage2/net-eth +vmguest
+mixin/desktop-installer: use/x11-autostart use/sound +net-eth +vmguest
 	@$(call add,SYSTEM_PACKAGES,fonts-ttf-google-croscore-arimo)
-	@$(call add,BASE_PACKAGES,udev-rule-generator-net sysklogd)
 	@$(call add,BASE_LISTS, \
 		$(call tags,(base || desktop) && (l10n || network)))
+	@$(call add,INSTALL2_PACKAGES,ntfs-3g)
+	@$(call add,BASE_PACKAGES,os-prober)
+
+distro/.desktop-network: distro/.desktop-mini mixin/desktop-installer; @:
 
 distro/.desktop-extra:
 	@$(call add,BASE_LISTS,$(call tags,(archive || base) && (extra)))
 
-distro/kde4-lite: distro/.desktop-mini distro/.desktop-network distro/.desktop-extra +kde4-lite
+distro/kde4-lite: distro/.desktop-mini \
+	distro/.desktop-network distro/.desktop-extra +kde4-lite
 	@$(call set,KFLAVOURS,std-def)
 
 distro/tde: distro/.desktop-network +tde; @:

conf.d/homeros.mk

@@ -1,6 +1,6 @@
-
 ifeq (distro,$(IMAGE_CLASS))
 
-distro/homeros-mini: distro/.live-base use/live/textinstall use/homeros; @:
+distro/homeros-mini: distro/.live-base use/live/textinstall \
+	use/homeros use/speech/en use/isohybrid; @:
 
 endif

conf.d/live.mk

@@ -10,17 +10,20 @@ distro/syslinux: distro/.init \
 	use/syslinux/localboot.cfg use/syslinux/ui/vesamenu use/hdt; @:
 
 distro/.live-base: distro/.base use/live/base use/power/acpi/button; @:
+distro/.live-x11: distro/.live-base use/live/x11; @:
+
 distro/.live-desktop: distro/.base +live use/live/install use/stage2/net-eth \
-	use/plymouth/live use/efi; @:
+	use/plymouth/live; @:
 distro/.live-desktop-ru: distro/.live-desktop use/live/ru; @:
 
-distro/.live-kiosk: distro/.base use/live/base use/live/autologin +power \
-	use/syslinux/timeout/1 use/cleanup use/stage2/net-eth
-	@$(call add,LIVE_PACKAGES,fonts-ttf-dejavu)
+distro/.live-kiosk: distro/.base use/live/base use/live/autologin \
+	use/syslinux/timeout/1 use/cleanup use/stage2/net-eth \
+	use/fonts/otf/adobe +power
 	@$(call add,CLEANUP_PACKAGES,'alterator*' 'guile*' 'vim-common')
 
 distro/live-builder-mini: distro/.live-base use/dev/mkimage use/dev \
-	use/syslinux/timeout/30
+	use/stage2/net-eth use/net-eth/dhcp use/syslinux/timeout/30 \
+	use/isohybrid
 	@$(call set,KFLAVOURS,$(BIGRAM))
 	@$(call add,LIVE_LISTS,\
 		$(call tags,(base || live) && (server || builder)))
@@ -29,7 +32,7 @@ distro/live-builder-mini: distro/.live-base use/dev/mkimage use/dev \
 	@$(call add,LIVE_PACKAGES,zsh sudo)
 
 distro/live-builder: distro/live-builder-mini \
-	use/live/rw use/live/repo use/dev/repo
+	use/efi/signed use/live/rw use/live/repo use/dev/repo
 	@$(call add,MAIN_LISTS,$(call tags,live builder))
 	@$(call add,MAIN_PACKAGES,syslinux pciids memtest86+ mkisofs)
 
@@ -41,54 +44,65 @@ distro/live-razorqt: distro/.live-desktop +razorqt; @:
 distro/live-tde: distro/.live-desktop-ru use/live/install +tde; @:
 distro/live-fvwm: distro/.live-desktop-ru use/x11/lightdm/gtk use/x11/fvwm; @:
 
-distro/live-rescue: distro/live-icewm use/efi
+distro/live-rescue: distro/live-icewm +efi
 	@$(call add,LIVE_LISTS,$(call tags,rescue && (fs || live || x11)))
 	@$(call add,LIVE_LISTS,openssh \
 		$(call tags,(base || extra) && (archive || rescue || network)))
 
 # NB: this one doesn't include the browser, needs to be chosen downstream
-distro/.live-webkiosk: distro/.live-kiosk use/live/hooks use/live/ru
-	@$(call add,LIVE_LISTS,$(call tags,desktop && (live || network)))
-	@$(call add,LIVE_PACKAGES,alsa-utils udev-alsa)
+distro/.live-webkiosk: distro/.live-kiosk use/live/hooks use/live/ru use/sound
+	@$(call add,LIVE_LISTS,$(call tags,live desktop))
+
+distro/.live-webkiosk-gtk: distro/.live-webkiosk
 	@$(call add,CLEANUP_PACKAGES,'libqt4*' 'qt4*')
 
-distro/live-webkiosk-mini: distro/.live-webkiosk
+distro/live-webkiosk-mini: distro/.live-webkiosk-gtk \
+	use/fonts/otf/mozilla use/isohybrid
 	@$(call add,LIVE_PACKAGES,livecd-webkiosk-firefox)
 
 # NB: flash/java plugins are predictable security holes
-distro/live-webkiosk-flash: distro/live-webkiosk-mini use/plymouth/live +vmguest
-	@$(call add,LIVE_PACKAGES,mozilla-plugin-adobe-flash)
-	@$(call add,LIVE_PACKAGES,mozilla-plugin-java-1.6.0-sun)
+distro/live-webkiosk-flash: distro/live-webkiosk-mini use/plymouth/live \
+	use/browser/plugin/flash use/browser/plugin/java use/efi/signed \
+	+vmguest; @:
 
 distro/live-webkiosk: distro/live-webkiosk-mini use/live/desktop; @:
 
-distro/live-webkiosk-chromium: distro/.live-webkiosk
+distro/live-webkiosk-chromium: distro/.live-webkiosk use/fonts/ttf/google
 	@$(call add,LIVE_PACKAGES,livecd-webkiosk-chromium)
 
-distro/live-flightgear: distro/live-icewm use/live/sound use/x11/3d-proprietary
-	@$(call add,LIVE_PACKAGES,FlightGear fgo input-utils)
+distro/live-webkiosk-seamonkey: distro/.live-webkiosk use/fonts/ttf/google
+	@$(call add,LIVE_PACKAGES,livecd-webkiosk-seamonkey)
+
+distro/live-webkiosk-qupzilla: distro/.live-webkiosk use/fonts/otf/mozilla
+	@$(call add,LIVE_PACKAGES,livecd-webkiosk-qupzilla)
+
+distro/.live-3d: distro/.live-x11 use/x11/3d \
+	use/x11/lightdm/gtk +icewm +sysvinit
+	@$(call add,LIVE_PACKAGES,glxgears glxinfo)
+
+distro/live-glxgears: distro/.live-3d; @:
+
+distro/live-flightgear: distro/.live-kiosk use/x11/3d use/sound \
+	use/stage2/net-eth use/net-eth/dhcp use/services +efi +sysvinit
+	@$(call set,KFLAVOURS,un-def)
+	@$(call add,LIVE_LISTS,$(call tags,xorg misc))
+	@$(call add,LIVE_PACKAGES,FlightGear FlightGear-tu154b)
+	@$(call add,LIVE_PACKAGES,fgo input-utils livecd-fgfs)
+	@$(call add,LIVE_PACKAGES,glxgears glxinfo)
+	@$(call add,DEFAULT_SERVICES_DISABLE,rpcbind alteratord messagebus)
+	@$(call add,SERVICES_DISABLE,livecd-net-eth)
 	@$(call try,HOMEPAGE,http://www.4p8.com/eric.brasseur/flight_simulator_tutorial.html)
 
-distro/live-gnome: distro/.live-desktop-ru use/systemd use/live/nodm use/x11/3d-proprietary
-	@$(call add,LIVE_PACKAGES,gnome3-default)
+distro/live-e17: distro/.live-desktop-ru use/x11/e17 use/x11/lightdm/gtk; @:
 
-distro/live-cinnamon: distro/.live-desktop-ru use/live/autologin \
-	use/x11/cinnamon use/x11/3d-proprietary; @:
-
-distro/live-mate: distro/.live-desktop-ru use/live/nodm use/x11/3d-free
-	@$(call add,LIVE_LISTS,openssh $(call tags,(desktop || mobile) && mate))
-	@$(call set,KFLAVOURS,un-def)	# the newest one
-
-distro/live-e17: distro/.live-desktop-ru use/live/autologin \
-	use/x11/e17 use/x11/gdm2.20; @:
-
-distro/live-gimp: distro/live-icewm use/x11/3d-free use/live/ru
+distro/live-gimp: distro/live-icewm use/live/ru
 	@$(call add,LIVE_PACKAGES,gimp tintii immix fim)
-	@$(call add,LIVE_PACKAGES,cvltonemap darktable geeqie rawstudio ufraw)
+	@$(call add,LIVE_PACKAGES,sane sane-frontends xsane)
+	@$(call add,LIVE_PACKAGES,darktable geeqie rawstudio ufraw)
 	@$(call add,LIVE_PACKAGES,macrofusion python-module-pygtk-libglade)
-	@$(call add,LIVE_PACKAGES,qtfm openssh-clients rsync)
+	@$(call add,LIVE_PACKAGES,qtfm openssh-clients rsync usbutils)
 	@$(call add,LIVE_PACKAGES,design-graphics-sisyphus2)
 
-distro/live-sugar: distro/.live-desktop-ru use/x11/sugar; @:
+distro/live-robo: distro/live-icewm +robotics use/live/ru; @:
 
 endif

conf.d/p7.mk

@@ -1,20 +1,41 @@
 # p7 base kits
-ifeq (distro,$(IMAGE_CLASS))
 
 mixin/p7:
 	@$(call set,BRANDING,altlinux-starterkit)
 
-### kludge compatibility: introspection stub for ../main.mk :-/
+ifeq (distro,$(IMAGE_CLASS))
+
+### kludge compatibility: introspection stub for main.mk :-/
 distro/altlinux-p7-cinnamon: distro/regular-cinnamon mixin/p7; @:
 distro/altlinux-p7-e17: distro/regular-e17 mixin/p7; @:
 distro/altlinux-p7-icewm: distro/regular-icewm mixin/p7; @:
 distro/altlinux-p7-gnome3: distro/regular-gnome3 mixin/p7; @:
+distro/altlinux-p7-gnustep: distro/regular-gnustep mixin/p7; @:
 distro/altlinux-p7-kde4: distro/regular-kde4 mixin/p7; @:
 distro/altlinux-p7-lxde: distro/regular-lxde mixin/p7; @:
+distro/altlinux-p7-lxqt: distro/regular-lxqt mixin/p7; @:
+distro/altlinux-p7-lxqt-sysv: distro/regular-lxqt-sysv mixin/p7; @:
 distro/altlinux-p7-mate: distro/regular-mate mixin/p7; @:
 distro/altlinux-p7-razorqt: distro/regular-razorqt mixin/p7; @:
 distro/altlinux-p7-rescue: distro/regular-rescue mixin/p7; @:
 distro/altlinux-p7-tde: distro/regular-tde mixin/p7; @:
+distro/altlinux-p7-tde-sysv: distro/regular-tde-sysv mixin/p7; @:
+distro/altlinux-p7-wmaker: distro/regular-wmaker mixin/p7; @:
 distro/altlinux-p7-xfce: distro/regular-xfce mixin/p7; @:
 
+distro/altlinux-p7-sysv-tde: distro/regular-sysv-tde mixin/p7; @:
+
+distro/altlinux-p7-jeos: distro/regular-jeos mixin/p7; @:
+distro/altlinux-p7-server: distro/regular-server mixin/p7; @:
+distro/altlinux-p7-server-ovz: distro/regular-server-ovz mixin/p7; @:
+distro/altlinux-p7-server-hyperv: distro/regular-server-hyperv mixin/p7; @:
+
+endif
+
+ifeq (ve,$(IMAGE_CLASS))
+ve/altlinux-p7-ovz-generic: ve/generic mixin/p7; @:
+endif
+
+ifeq (vm,$(IMAGE_CLASS))
+vm/altlinux-p7-vm-net: vm/net mixin/p7; @:
 endif

conf.d/regular.mk

@@ -2,81 +2,206 @@
 ifeq (distro,$(IMAGE_CLASS))
 
 # common ground
-distro/.regular-bare: distro/.base +wireless use/efi/signed \
-	use/memtest use/stage2/net-eth use/kernel/net
+distro/.regular-bare: distro/.base +wireless +net-eth \
+	use/efi/signed use/memtest use/kernel/net
 	@$(call try,SAVE_PROFILE,yes)
 
-# WM base target
-distro/.regular-base: distro/.regular-bare +vmguest +live \
-	use/live/ru use/live/install use/live/repo use/live/rw \
-	use/luks use/x11/3d-free use/branding
+# graphical target (not enforcing xorg drivers or blobs)
+distro/.regular-x11: distro/.regular-bare use/x11/wacom +vmguest \
+	use/live/x11 use/live/install use/live/repo use/live/rw \
+	use/luks use/branding use/browser/firefox/live use/browser/firefox/i18n
 	@$(call add,LIVE_LISTS,$(call tags,(base || desktop) && regular))
 	@$(call add,LIVE_LISTS,$(call tags,base rescue))
-	@$(call add,LIVE_PACKAGES,installer-feature-desktop-other-fs-stage2)
-	@$(call add,THE_BRANDING,indexhtml notes alterator)
-	@$(call add,THE_BRANDING,graphics)
+	@$(call add,LIVE_PACKAGES,gpm livecd-install-apt-cache)
+	@$(call add,DEFAULT_SERVICES_ENABLE,gpm)
+
+# common WM live/installer bits
+mixin/regular-desktop: use/x11/xorg use/sound use/xdg-user-dirs
+	@$(call add,THE_PACKAGES,installer-feature-desktop-other-fs-stage2)
+	@$(call add,THE_PACKAGES,alterator-notes)
+	@$(call add,THE_BRANDING,alterator graphics indexhtml notes)
+
+# WM base target
+distro/.regular-base: distro/.regular-x11 mixin/regular-desktop
 
 # DE base target
 # TODO: use/plymouth/live when luks+plymouth is done, see also #28255
 distro/.regular-desktop: distro/.regular-base \
-	use/systemd use/syslinux/ui/gfxboot use/firmware/laptop use/efi/refind
-	@$(call add,LIVE_PACKAGES,fuse-exfat)
+	use/syslinux/ui/gfxboot use/firmware/laptop use/efi/refind +systemd
 	@$(call add,LIVE_LISTS,domain-client)
 	@$(call add,THE_BRANDING,bootloader)
+	@$(call add,DEFAULT_SERVICES_DISABLE,gssd idmapd krb5kdc rpcbind)
 	@$(call set,KFLAVOURS,std-def)
 
 distro/.regular-gtk: distro/.regular-desktop use/x11/lightdm/gtk +plymouth; @:
+distro/.regular-sysv: distro/.regular-base +sysvinit; @:
+distro/.regular-sysv-gtk: distro/.regular-sysv use/syslinux/ui/gfxboot \
+	use/x11/gdm2.20; @:
 
-distro/regular-icewm: distro/.regular-base use/x11/lightdm/gtk +icewm
+distro/.regular-install: distro/.regular-bare +installer +sysvinit +power \
+	use/branding use/bootloader/grub use/luks \
+	use/install2/fs use/install2/vnc use/install2/repo
+	@$(call add,THE_LISTS,$(call tags,base regular))
+	@$(call add,INSTALL2_BRANDING,alterator notes)
+	@$(call add,THE_BRANDING,alterator)
+
+# NB:
+# - no +power or even use/power/acpi/button on intent
+# - stock cleanup is not enough (or installer-common-stage3 deps soaring)
+distro/regular-jeos: distro/.base use/isohybrid +sysvinit +net-eth \
+	use/install2/packages use/install2/vmguest use/vmguest/base \
+	use/branding use/bootloader/lilo use/syslinux/lateboot.cfg \
+	use/install2/cleanup/everything use/install2/cleanup/kernel/everything \
+	use/cleanup/x11-alterator use/net use/kernel/net use/power/acpi/button
+	@$(call set,KFLAVOURS,led-ws)	# led-vs might be nice here
+	@$(call add,BASE_KMODULES,guest scsi vboxguest)
+	@$(call set,INSTALLER,altlinux-generic)
+	@$(call add,INSTALL2_BRANDING,alterator notes)
+	@$(call add,THE_BRANDING,alterator) # just to be cleaned up later on
+	@$(call add,THE_PACKAGES,apt basesystem dhcpcd openssh vim-console)
+	@# a *lot* of stray things get pulled in by alterator modules
+	@$(call add,CLEANUP_PACKAGES,libICE 'libX*' libxcb libfreetype)
+	@$(call add,CLEANUP_PACKAGES,fontconfig 'glib2*' libffi 'libltdl*')
+	@$(call add,CLEANUP_PACKAGES,liblcms libjpeg 'libpng*' 'libtiff*')
+	@$(call add,CLEANUP_PACKAGES,avahi-autoipd bridge-utils) # i-c-stage3
+	@$(call add,CLEANUP_PACKAGES,iw wpa_supplicant)
+	@$(call add,CLEANUP_PACKAGES,openssl libpcsclite)
+	@# fully fledged interactivesystem isn't needed here either
+	@$(call add,CLEANUP_PACKAGES,interactivesystem 'groff*' man stmpclean)
+	@$(call add,CLEANUP_PACKAGES,glibc-gconv-modules gettext)
+	@$(call add,CLEANUP_PACKAGES,console-scripts console-vt-tools 'kbd*')
+	@$(call add,CLEANUP_PACKAGES,libsystemd-journal libsystemd-login)
+	@$(call add,CLEANUP_PACKAGES,dbus libdbus libcap-ng)
+
+distro/.regular-install-x11: distro/.regular-install \
+	mixin/regular-desktop +vmguest
+	@$(call set,INSTALLER,altlinux-desktop)
+	@$(call add,THE_LISTS,$(call tags,regular desktop))
+
+distro/regular-icewm: distro/.regular-sysv-gtk +icewm \
+	use/browser/seamonkey/i18n use/fonts/ttf/redhat
 	@$(call add,LIVE_LISTS,$(call tags,regular icewm))
+	@$(call add,LIVE_PACKAGES,gparted mnt)
 	@$(call set,KFLAVOURS,un-def)
 
-distro/regular-wmaker: distro/.regular-desktop use/x11/lightdm/gtk \
-	use/x11/wmaker
+mixin/regular-wmaker: use/efi/refind use/syslinux/ui/gfxboot use/x11/wmaker
 	@$(call add,LIVE_PACKAGES,livecd-install-wmaker)
-	@$(call add,LIVE_PACKAGES,xxkb)
+	@$(call add,LIVE_PACKAGES,installer-feature-no-xconsole-stage3)
+	@$(call add,MAIN_PACKAGES,wmgtemp wmhdaps wmpomme wmxkbru xxkb)
 
-distro/regular-gnustep: distro/regular-wmaker use/x11/gnustep +plymouth
+# wdm can't do autologin so add standalone one for livecd
+distro/regular-wmaker: distro/.regular-sysv \
+	mixin/regular-wmaker use/live/autologin use/browser/seamonkey/i18n
+	@$(call add,LIVE_PACKAGES,wdm)
+	@$(call set,KFLAVOURS,led-ws)
+
+# gdm2.20 can reboot/halt with both sysvinit and systemd, and is slim
+mixin/regular-gnustep: use/x11/gnustep use/x11/gdm2.20 use/mediacheck \
+	use/browser/firefox/classic +plymouth
 	@$(call add,THE_BRANDING,graphics)
 
-distro/regular-xfce: distro/.regular-gtk use/x11/xfce; @:
+distro/regular-gnustep: distro/.regular-sysv \
+	mixin/regular-wmaker mixin/regular-gnustep; @:
+distro/regular-gnustep-systemd: distro/.regular-base +systemd \
+	mixin/regular-wmaker mixin/regular-gnustep; @:
 
-distro/regular-lxde: distro/.regular-gtk use/x11/lxde use/fonts/infinality
-	@$(call add,LIVE_LISTS,$(call tags,desktop nm))
+distro/regular-xfce: distro/.regular-gtk \
+	use/x11/xfce use/domain-client/full use/browser/firefox/classic \
+	use/x11/gtk/nm +nm; @:
+
+distro/regular-lxde: distro/.regular-gtk use/x11/lxde use/fonts/infinality \
+	use/x11/gtk/nm +nm
+	@$(call add,LIVE_LISTS,$(call tags,desktop gvfs))
 
 distro/regular-xmonad: distro/.regular-gtk use/x11/xmonad
 	@$(call add,LIVE_PACKAGES,livecd-regular-xmonad)
 
-distro/regular-mate: distro/.regular-gtk
-	@$(call add,LIVE_LISTS,$(call tags,(desktop || mobile) && (mate || nm)))
+distro/regular-mate: distro/.regular-gtk +nm \
+	use/x11/mate use/fonts/ttf/google use/domain-client/full
+	@$(call add,LIVE_LISTS,$(call tags,mobile mate))
 
-distro/regular-e17: distro/.regular-gtk use/x11/e17 use/fonts/infinality
-	@$(call add,LIVE_PACKAGES,xterm)
+distro/regular-e17: distro/.regular-gtk use/x11/e17 use/fonts/infinality; @:
+distro/regular-e19: distro/.regular-gtk use/x11/e19 use/fonts/infinality; @:
+distro/regular-e19-sysv: distro/.regular-sysv-gtk use/x11/e19; @:
 
 distro/regular-cinnamon: distro/.regular-gtk \
-	use/x11/cinnamon use/fonts/infinality
+	use/x11/cinnamon use/fonts/infinality use/net/nm/mmgui
 	@$(call set,META_VOL_ID,ALT Linux $(IMAGE_NAME)) # see also #28271
+	@$(call set,KFLAVOURS,un-def)
 
-distro/regular-gnome3: distro/.regular-desktop use/x11/gnome3 +plymouth; @:
+# not .regular-gtk due to gdm vs lightdm
+distro/regular-gnome3: distro/.regular-desktop \
+	use/x11/gnome3 use/browser/epiphany +plymouth +nm
+	@$(call add,LIVE_PACKAGES,livecd-gnome3-nosetup)
 
-distro/regular-tde: distro/.regular-desktop +tde +plymouth
-	@$(call add,LIVE_LISTS,$(call tags,desktop nm))
-	@$(call add,LIVE_PACKAGES,kdegames kdeedu)
+# reusable bits
+mixin/regular-tde: use/syslinux/ui/gfxboot use/browser/firefox/classic \
+	+tde +plymouth
+	@$(call add,THE_PACKAGES,kdeedu)
+	@$(call add,THE_LISTS,openscada)
 
-distro/regular-kde4: distro/.regular-desktop use/x11/kde4 use/x11/kdm4 \
-	use/fonts/zerg +plymouth
+distro/regular-tde: distro/.regular-desktop mixin/regular-tde \
+	use/x11/gtk/nm use/net/nm/mmgui; @:
+
+distro/regular-tde-sysv: distro/.regular-sysv mixin/regular-tde \
+	use/net-eth/dhcp use/efi/refind; @:
+
+distro/regular-kde4: distro/.regular-desktop use/x11/kde4/nm use/x11/kdm4 \
+	use/browser/konqueror4 use/fonts/zerg use/domain-client/full \
+	use/net/nm/mmgui +pulse +plymouth
 	@$(call add,LIVE_LISTS,$(call tags,regular kde4))
+	@$(call add,LIVE_PACKAGES,rosa-imagewriter)
+	@$(call add,DEFAULT_SERVICES_ENABLE,prefdm)
 
 distro/regular-razorqt: distro/.regular-desktop +razorqt +plymouth; @:
 
+mixin/regular-lxqt: use/x11/lxqt use/x11/lightdm/lxqt \
+	use/browser/qupzilla +plymouth; @:
+
+distro/regular-lxqt: distro/.regular-desktop mixin/regular-lxqt +nm; @:
+
+distro/regular-lxqt-sysv: distro/.regular-sysv mixin/regular-lxqt \
+	use/net-eth/dhcp use/efi/refind; @:
+
 distro/regular-sugar: distro/.regular-gtk use/x11/sugar; @:
 
-distro/regular-rescue: distro/.regular-bare use/rescue/rw \
-	use/syslinux/ui/menu use/hdt use/efi/refind
+# NB: never ever use/syslinux/ui/gfxboot here as gfxboot mangles
+#     kernel cmdline resulting in method:disk instead of method:cdrom
+#     which will change propagator's behaviour to probe additional
+#     filesystems (ro but no loop) thus potentially writing to
+#     an unrecovered filesystem's journal
+distro/regular-rescue: distro/.regular-bare use/rescue/rw use/luks \
+	use/branding use/efi/refind use/efi/shell use/efi/memtest86 \
+	use/hdt use/syslinux/ui/menu use/syslinux/rescue_fm.cfg \
+	use/syslinux/timeout/200 use/mediacheck test/rescue/no-x11
 	@$(call set,KFLAVOURS,un-def)
+	@$(call add,RESCUE_PACKAGES,gpm)
 
-distro/regular-server: distro/.regular-bare +installer \
-	use/bootloader/grub use/firmware use/server/mini
-	@$(call add,THE_LISTS,$(call tags,(base || server) && regular))
+distro/regular-sysv-tde: distro/.regular-install-x11 \
+	mixin/desktop-installer mixin/regular-tde \
+	use/branding/complete use/branding/slideshow/once \
+	use/net-eth/dhcp use/efi/refind use/efi/shell use/rescue/base \
+	use/fonts/otf/adobe use/fonts/otf/mozilla
+	@$(call set,KFLAVOURS,led-ws)
+	@$(call add,RESCUE_LISTS,$(call tags,rescue misc))
+	@$(call add,THE_LISTS,$(call tags,base desktop))
+	@$(call add,THE_LISTS,$(call tags,regular tde))
+	@$(call add,MAIN_PACKAGES,man-whatis usb-modeswitch)
+
+distro/regular-server: distro/.regular-install use/server/mini use/rescue/base
+	@$(call add,THE_LISTS,$(call tags,regular server))
+	@$(call add,MAIN_PACKAGES,aptitude)
+	@$(call set,INSTALLER,altlinux-server)
+
+distro/regular-server-ovz: distro/regular-server \
+	use/server/ovz use/server/groups/base; @:
+
+distro/regular-server-hyperv: distro/regular-server
+	@$(call set,KFLAVOURS,un-def)
+	@$(call add,THE_PACKAGES,hyperv-daemons)
+	@$(call add,THE_PACKAGES,alterator-fbi)
+	@$(call add,THE_LISTS,$(call tags,server alterator))
+	@$(call add,DEFAULT_SERVICES_DISABLE,ahttpd alteratord)
+	@$(call add,DEFAULT_SERVICES_DISABLE,bridge cpufreq-simple)
 
 endif

conf.d/server.mk

@@ -5,24 +5,20 @@ distro/.server-base: distro/.installer use/syslinux/ui/menu use/memtest \
 	use/cleanup/x11-alterator
 	@$(call add,BASE_LISTS,server-base openssh)
 
-distro/server-nano: distro/.server-base use/bootloader/lilo +power
+distro/server-nano: distro/.server-base use/bootloader/lilo +power \
+	use/install2/cleanup/crypto use/install2/cleanup/vnc
 	@$(call add,BASE_LISTS,$(call tags,server network))
 	@$(call add,BASE_PACKAGES,dhcpcd cpio)
 
-distro/server-mini: distro/.server-base use/server/mini use/kernel/net \
-	use/efi use/stage2/net-eth
+distro/server-mini: distro/.server-base +net-eth \
+	use/server/mini use/kernel/net use/efi use/power/acpi/button
+	@$(call set,INSTALLER,altlinux-server)
 	@$(call add,BASE_PACKAGES,make-initrd-mdadm make-initrd-lvm)
 
-distro/server-ovz: distro/server-mini use/install2/net use/hdt use/rescue \
-	use/firmware/server use/firmware/cpu use/power/acpi/button +wireless
-	@$(call set,STAGE1_KFLAVOUR,std-def)
-	@$(call set,KFLAVOURS,std-def ovz-el)
-	@$(call add,MAIN_KMODULES,ipset ipt-netflow opendpi pf_ring)
-	@$(call add,MAIN_KMODULES,xtables-addons)	# t6/branch
-	@$(call add,MAIN_KMODULES,drbd83 kvm)
-	@$(call add,BASE_LISTS,ovz-server)
-	@$(call add,MAIN_GROUPS,dns-server http-server ftp-server kvm-server)
-	@$(call add,MAIN_GROUPS,ipmi mysql-server dhcp-server mail-server)
-	@$(call add,MAIN_GROUPS,monitoring diag-tools)
+distro/server-ovz: distro/server-mini use/server/ovz use/server/groups/base \
+	use/install2/net use/hdt use/rescue \
+	use/firmware/server use/firmware/cpu +wireless; @:
+
+distro/server-zabbix: distro/server-mini use/server/zabbix; @:
 
 endif

conf.d/t7.mk

@@ -0,0 +1,13 @@
+# t7 base kits
+
+mixin/t7:
+	@$(call set,BRANDING,altlinux-starterkit) ### needs changing
+
+ifeq (distro,$(IMAGE_CLASS))
+
+distro/altlinux-t7-gnustep: distro/regular-gnustep mixin/t7; @:
+distro/altlinux-t7-gnustep-systemd: distro/regular-gnustep-systemd mixin/t7; @:
+distro/altlinux-t7-tde: distro/regular-tde mixin/t7; @:
+distro/altlinux-t7-sysv-tde: distro/regular-sysv-tde mixin/t7; @:
+
+endif

conf.d/test.mk

@@ -6,11 +6,9 @@ ifeq (distro,$(IMAGE_CLASS))
 distro/syslinux-auto: distro/.init use/hdt use/syslinux/timeout/1; @:
 distro/syslinux-noescape: distro/syslinux-auto use/syslinux/noescape.cfg; @:
 
-distro/live-systemd: distro/.base use/live/base use/systemd; @:
+distro/live-systemd: distro/.base use/live/base +systemd; @:
 distro/live-plymouth: distro/.live-base use/plymouth/live; @:
-
-distro/live-isomd5sum: distro/.base use/live/base use/isomd5sum
-	@$(call add,LIVE_PACKAGES,livecd-isomd5sum)
+distro/live-mediacheck: distro/.base use/mediacheck; @:
 
 distro/live-testserver: distro/live-install use/server/mini
 	@$(call set,KFLAVOURS,std-def el-smp)
@@ -19,6 +17,11 @@ distro/live-gns3: distro/live-icewm
 	@$(call add,LIVE_LISTS,gns3)
 	@$(call add,LIVE_KMODULES,kvm virtualbox)
 
+# NB: requires runtime Server/ServerActive setup in zabbix_agentd.conf
+distro/live-zabbix: distro/live-icewm use/net-eth
+	@$(call add,THE_PACKAGES,zabbix-agent)
+	@$(call add,DEFAULT_SERVICES_ENABLE,zabbix_agentd)
+
 distro/icewm-efi: distro/icewm use/efi/debug use/firmware
 	@$(call add,INSTALL2_PACKAGES,strace)
 
@@ -26,7 +29,7 @@ distro/razorqt-kz: distro/regular-razorqt
 	@$(call set,GLOBAL_BOOT_LANG,kk_KZ)
 	@$(call add,LIVE_PACKAGES,hunspell-kk)
 
-distro/server-systemd: distro/server-mini use/systemd
+distro/server-systemd: distro/server-mini +systemd
 	@$(call set,KFLAVOURS,std-def)
 
 distro/server-test: distro/server-mini use/relname
@@ -42,11 +45,29 @@ distro/server-ovz-netinst: distro/.base sub/stage1 use/stage2 \
 	@$(call add,SYSLINUX_CFG,netinstall2)
 
 distro/desktop-luks: distro/icewm use/luks; @:
-distro/desktop-systemd: distro/icewm use/systemd; @:
+distro/desktop-systemd: distro/icewm +systemd; @:
 distro/desktop-plymouth: distro/icewm +plymouth; @:
-distro/live-mate-systemd: distro/live-mate use/systemd use/live/install; @:
 distro/server-efi: distro/server-mini use/efi/debug; @:
 
+distro/server-zabbix: distro/server-mini use/server/zabbix use/net-eth
+
+# a crop of images running stuff as PID 1
+distro/bash: distro/.base use/pid1
+	@$(call add,STAGE1_PACKAGES,bash)
+	@$(call set,PID1_BIN,/bin/bash)
+
+distro/vi: distro/.base use/pid1
+	@$(call add,STAGE1_PACKAGES,vim-minimal)
+	@$(call set,PID1_BIN,/bin/vi)
+
+distro/emacs: distro/.base use/pid1
+	@$(call add,STAGE1_PACKAGES,mg)
+	@$(call set,PID1_BIN,/usr/bin/mg)
+
+distro/elinks: distro/.base use/pid1/net
+	@$(call add,STAGE1_PACKAGES,elinks)
+	@$(call set,PID1_BIN,/usr/bin/elinks)
+
 endif # IMAGE_CLASS: distro
 
 ifeq (ve,$(IMAGE_CLASS))
@@ -73,9 +94,8 @@ endif # IMAGE_CLASS: ve
 
 ifeq (vm,$(IMAGE_CLASS))
 
-vm/net-static: vm/bare use/vm-net/static use/vm-ssh
-	@$(call set,VM_NET_IPV4ADDR,10.0.2.16/24)
-	@$(call set,VM_NET_IPV4GW,10.0.2.2)
+vm/net-static: vm/bare use/net-eth use/net-ssh
+	@$(call add,NET_ETH,eth0:static:10.0.2.16/24:10.0.2.2)
 
 endif # IMAGE_CLASS: vm
 

conf.d/ve.mk

@@ -0,0 +1,29 @@
+ifeq (ve,$(IMAGE_CLASS))
+
+# no "vzctl enter"
+ve/bare: ve/.base use/init/sysv; @:
+
+# /dev/pty and friends start here
+ve/base: ve/bare
+	@$(call add,BASE_PACKAGES,interactivesystem)
+
+# a particular package list
+ve/ldv: ve/bare
+	@$(call add,BASE_PACKAGES,xz bzip2 glibc hostinfo less)
+	@$(call add,BASE_PACKAGES,vim-console netlist rsync time)
+	@$(call add,BASE_PACKAGES,openssh-blacklist openssh-server)
+	@$(call add,BASE_PACKAGES,shadow-edit shadow-groups)
+
+ve/docker: ve/.base use/repo; @:
+
+# this should be more or less convenient
+ve/generic: ve/base use/repo
+	@$(call add,BASE_PACKAGES,vim-console etckeeper)
+	@$(call add,BASE_LISTS,openssh \
+		$(call tags,base && (server || network || security || pkg)))
+
+# example of service-specific template
+ve/openvpn: ve/bare
+	@$(call add,BASE_LISTS,$(call tags,server openvpn))
+
+endif

conf.d/vm.mk

@@ -1,9 +1,26 @@
 # virtual machines
 ifeq (vm,$(IMAGE_CLASS))
 
-vm/net: vm/bare use/vm-net/dhcp use/vm-ssh; @:
+# NB: interactivesystem pulls in network-config-subsystem anyways
+vm/bare: vm/.bare +sysvinit
+	@$(call add,BASE_PACKAGES,apt)
+
+vm/net: vm/bare use/net-eth/dhcp use/net-ssh use/repo use/control/sudo-su
+	@$(call add,BASE_PACKAGES,su)
 
 # NB: use/x11 employs some installer-feature packages
-vm/icewm: vm/net use/cleanup/installer use/repo +icewm; @:
+vm/.desktop-bare: vm/net use/x11/xorg use/cleanup/installer use/repo; @:
+
+vm/.desktop-base: vm/.desktop-bare \
+	use/deflogin/altlinuxroot use/x11-autologin; @:
+
+mixin/icewm: use/x11/lightdm/gtk +icewm; @:
+
+vm/icewm: vm/.desktop-base mixin/icewm; @:
+
+vm/icewm-setup: vm/.desktop-bare mixin/icewm use/oem use/x11-autostart
+	@$(call set,BRANDING,simply-linux)
+	@$(call add,THE_BRANDING,graphics)
+	@$(call add,THE_LISTS,$(call tags,base l10n))
 
 endif

doc/Makefile

@@ -8,6 +8,9 @@ ifdef DEBUG
 VERBOSE = --verbose
 endif
 
+# avoid common DEBUG for the time being
+-include $(HOME)/.mkimage/profiles.mk
+
 PROJECT = mkimage-profiles
 TOPLEVEL_DOC = $(PROJECT).asciidoc
 RESOURCE_FILES = /etc/asciidoc
@@ -24,10 +27,22 @@ COMMON_ARGS = -d book -a lang="$L" $(DEST) $(VERBOSE) $(TOPLEVEL_DOC)
 HTML_ARGS = -a data-uri --icons -r $(RESOURCE_FILES) -r . \
 	    --xsltproc-opts='$(XSLT_ARGS)' $(COMMON_ARGS)
 
+# most convenient deliverables
+DOCS_OUT = $(PROJECT).pdf $(PROJECT).html docbook-xsl.css
+
+# intermediate files
+DOCS_TMP = $(PROJECT).fo $(PROJECT).xml
+
 .PHONY: all prep chunked xhtml pdf clean
 
 all: chunked xhtml pdf
 
+# NB: destination defined externally
+publish: all
+	@if [ -n "$(DOCS_PUBLISH)" ]; then \
+		rsync -qa $(DOCS_OUT) "$(DOCS_PUBLISH)"; \
+	fi
+
 prep:
 	@if [ -n "$(BUILDDIR)" ]; then mkdir -p "$(BUILDDIR)"; fi
 
@@ -46,5 +61,4 @@ pdf: prep
 clean:
 	@echo "** cleaning up"
 	@if [ -d "$(BUILDDIR)" ]; then cd "$(BUILDDIR)"; fi; \
-	rm -f $(PROJECT).pdf $(PROJECT).html docbook-xsl.css; \
-	rm -rf $(PROJECT).chunked/
+	rm -rf $(DOCS_OUT) $(DOCS_TMP) $(PROJECT).chunked/ .fop.xconf

doc/assumptions.txt

@@ -27,7 +27,7 @@ ALT Linux 6.0+ и GNU make 3.81+ (на которых и разрабатыва
 
     E: Couldn't find package
 
-* features.in/stage2/stage1/scripts.d/02-kdefault
+* features.in/kernel/stage1/scripts.d/80-make-initrd
 * features.in/stage2/stage1/scripts.d/03-test-kernel
 * sub.in/stage1/Makefile
 ** ожидают, что в stage1 попадёт строго одно ядро сообразно

doc/mkimage-profiles.asciidoc

@@ -10,26 +10,27 @@ mkimage-profiles, или _m-p_ — результат осмысления и о
 
 *Цели*
 
-* пригодность к применению как очень крутыми хакерами, так и новичками
-* относительно низкая трудоёмкость использования
 * поощрение совместной работы
+* относительно низкая трудоёмкость использования
+* пригодность к применению как очень крутыми хакерами, так и новичками
 
 *Средства*
 
 Двухуровневость:
-метапрофиль более объёмен и сложен, но выгоден для долгосрочной разработки
-сгенерированный дистрибутивный профиль более легко обозрим и модифицируем как одноразовый форк
-наследственность на уровне индивидуальных особенностей и образов в целом
-прозрачность и диагностируемость формирования конфигурации
-документированность
+
+* метапрофиль более объёмен и сложен, но выгоден для долгосрочной разработки
+* сгенерированный дистрибутивный профиль более легко обозрим и модифицируем как одноразовый форк
+* наследственность на уровне индивидуальных особенностей и образов в целом
+* прозрачность и диагностируемость формирования конфигурации
+* документированность
 
 *Примеры использования*
 
-Выполняем начальные инструкции по документации
+Выполняем начальные инструкции по документации:
 
   git clone git://git.altlinux.org/people/mike/packages/mkimage-profiles.git
   cd mkimage-profiles
-  make icewm.iso
+  make rescue.iso
 
 = Основы =
 

doc/params.txt

@@ -6,91 +6,91 @@
 * APTCONF
 ** задаёт путь к требуемому apt.conf
 ** значение: пусто (по умолчанию системный) либо строка
-** см. ../image.in/Makefile, apt.conf.sample
+** см. image.in/Makefile, doc/apt.conf.sample
 
 * ARCH
 ** задаёт целевую архитектуру образов
 ** значение: пусто (по умолчанию авто), i586, x86_64, arm, ppc
-** см. ../lib/build.mk
+** см. lib/build.mk
 
 * ARCHES
 ** задаёт набор целевых архитектур при параметрическом задании APTCONF
 ** значение: пусто (по умолчанию авто) либо список через пробел
-** см. ../Makefile, profiles.mk.sample
+** см. Makefile, doc/profiles.mk.sample
 
 * BELL
 ** подаёт сигнал после завершения сборки
 ** значение: пусто (по умолчанию нет) либо любая строка
-** см. ../lib/build.mk
+** см. lib/build.mk
 
 * BUILDDIR
 ** задаёт каталог генерируемого профиля и сборки
 ** значение: пусто (по умолчанию авто) либо строка
-** см. ../lib/profile.mk
+** см. lib/profile.mk
 
 * BUILDDIR_PREFIX
 ** задаёт префикс каталога генерируемого профиля и сборки
 ** значение: строка; по умолчанию выбирается алгоритмически
-** см. ../main.mk
+** см. main.mk
 
 * BUILDLOG
 ** задаёт путь к файлу журнала сборки/очистки
-** значение: по умолчанию $(BUILDDIR)/build.log либо строка
-** см. ../lib/log.mk
+** значение: $(BUILDDIR)/build.log (по умолчанию) либо строка
+** см. lib/log.mk
 
 * CHECK
 ** включает режим проверки сборки конфигурации (без сборки образа)
 ** значение: пусто (по умолчанию) либо любая строка
-** см. ../lib/build.mk, ../lib/clean.mk
+** см. lib/build.mk, lib/clean.mk
 
 * CLEAN
 ** экономия RAM+swap при сборке в tmpfs, иначе места на диске
 ** очистка рабочего каталога после успешной сборки очередной стадии
 ** может помешать использовать некоторые варианты отладки
-** значение: любая строка; по умолчанию пусто при DEBUG, иначе 1
-** см. ../lib/clean.mk
+** значение: пусто, 0, 1, 2; по умолчанию пусто при DEBUG, иначе 1
+** см. lib/clean.mk
 
 * DEBUG
 ** включает средства отладки, может отключить зачистку после сборки
 ** значение: пусто (по умолчанию), 1 или 2
-** см. ../lib/log.mk, ../lib/clean.mk
+** см. lib/log.mk, lib/clean.mk
 
 * HOMEPAGE, HOMENAME, HOMEWAIT
 ** указывают адрес, название и таймаут перехода для домашней страницы
 ** значение: корректный URL, строка, целое неотрицательное число
-** см. ../features.in/live/generate.mk (тж. по умолчаниям)
+** см. features.in/live/generate.mk (тж. по умолчаниям)
 
 * ISOHYBRID
 ** включает создание гибриднго ISO-образа
 ** значение: пусто (по умолчанию) либо любая строка
-** см. ../features.in/pack/config.mk
+** см. features.in/pack/config.mk, features.in/isohybrid/config.mk
 
 * NICE
 ** понижает нагрузку системы сборочной задачей
 ** значение: пусто (по умолчанию) либо любая строка
-** см. ../lib/build.mk
+** см. lib/build.mk
 
 * REPORT
 ** запрашивает создание отчётов о собранном образе
 ** значение: пусто (по умолчанию) либо любая строка
 ** NB: в силу специфики обработки передаётся только явно
-** см. ../Makefile, ../report.mk, ../lib/report.mk
+** см. Makefile, report.mk, lib/report.mk
 
 * ROOTPW
 ** устанавливает пароль root по умолчанию для образов виртуальных машин
 ** значение: пусто (по умолчанию root) либо строка
-** см. ../features.in/build-vm/image-scripts.d/00root
+** см. features.in/deflogin/rootfs/image-scripts.d/50-root
 
 * SAVE_PROFILE
 ** сохраняет архив сгенерированного профиля в .disk/
 ** значение: пусто (по умолчанию) либо любая строка
-** см. ../image.in/Makefile
+** см. image.in/Makefile
 
 * SORTDIR
 ** дополнительно структурирует каталог собранных образов
 ** значение: пусто (по умолчанию) либо строка
 *** например, '$(IMAGE_NAME)/$(DATE)'
-** см. ../image.in/Makefile
+** см. image.in/Makefile
 
 * SQUASHFS
 ** определяет характер сжатия squashfs для stage2
@@ -98,18 +98,18 @@
 *** пусто (по умолчанию) либо normal: xz
 *** tight: xz с -Xbcj по платформе (лучше, но дольше -- подбор в два прохода)
 *** fast: gzip/lzo (быстрее запаковывается и распаковывается, меньше степень)
-** см. ../features.in/stage2/stage1/scripts.d/03-test-kernel
+** см. features.in/stage2/stage1/scripts.d/03-test-kernel
 
 * STATUS
 ** добавляет в имя образа указанный префикс
 ** значение:
 *** пусто (по умолчанию) либо строка (например, "alpha", "beta")
-** см. ../image.in/Makefile
+** см. image.in/Makefile
 
 * VM_SIZE
 ** задаёт размер несжатого образа виртуальной машины в байтах
 ** значение: пусто (по умолчанию двойной размер чрута) или целое
-** см. ../features.in/build-vm/lib/90-build-vm.mk, ../bin/tar2vm
+** см. features.in/build-vm/lib/90-build-vm.mk, bin/tar2vm
 
 [float]
 === пример ===

doc/pkglists.txt

@@ -1,7 +1,7 @@
 == Списки пакетов ==
 
-Состав пакетной базы субпрофилей определяется значенями
-следующих переменных профиля (см. тж. ../conf.d/README;
+Состав пакетной базы субпрофилей определяется значениями
+следующих переменных профиля (см. тж. conf.d/README;
 некоторые "*" ниже заэкранированы ради парсера asciidoc):
 
 * main: пакетная база для установки
@@ -14,14 +14,14 @@
 ** THE_KMODULES, BASE_KMODULES, MAIN_KMODULES, BASE_KMODULES_REGEXP
 *** KFLAVOURS
 
-* stage2: общая часть installer, live, rescue
+* stage2: общая часть install2, live, rescue
 ** sub.in/stage2/Makefile, features.in/\*/stage2/lib/*.mk
 ** SYSTEM_PACKAGES, STAGE2_PACKAGES
 ** STAGE1_KMODULES, STAGE1_KMODULES_REGEXP,
     STAGE2_KMODULES, STAGE2_KMODULES_REGEXP
 *** STAGE1_KFLAVOUR или последний из KFLAVOURS
 
-* installer: компактная "живая" система, содержащая только инсталятор
+* install2: компактная "живая" система, содержащая только инсталятор
 ** см. stage2
 *** features.in/install2/install2/stage2cfg.mk,
     features.in/\*/install2/lib/*.mk

doc/vm.txt

@@ -2,14 +2,14 @@
 
 *ВНИМАНИЕ:* заключительная операция создания образа жёсткого диска
 из архива с содержимым корневой файловой системы требует доступа
-к sudo и разрешения на выполнение скрипта bin/tar2vm в корневом
+к sudo и разрешения на выполнение скрипта bin/tar2fs в корневом
 каталоге метапрофиля при установке mkimage-profiles из пакета
 (это в планах исправить, но подход к libguestfs пока успехом
 не увенчался).
 
 Соответствующий фрагмент конфигурации sudo(8) может выглядеть как:
 
-  mike ALL=NOPASSWD: /usr/share/mkimage-profiles/bin/tar2vm
+  mike ALL=NOPASSWD: /usr/share/mkimage-profiles/bin/tar2fs
 
 При работе с локальной копией mkimage-profiles.git следует иметь
 в виду, что предоставлять недоверенному пользователю право выполнять
@@ -25,3 +25,10 @@
 Пример сборки и запуска VM:
 
   $ make ROOTPW=reallysecret1 vm/bare.img && kvm -hda ~/out/bare.img
+
+Если при сборке образа файловой системы произойдёт сбой, может оказаться
+нужным вручную освободить используемые loop-устройства, например, так:
+
+  # losetup -a
+  # kpartx -d /dev/loop0
+  # losetup -d /dev/loop0

features.in/00example/README

@@ -21,12 +21,12 @@
 цели в UI конфигурирования образа.
 
 Остальное содержимое является дополнительным и используется
-в таком порядке (см. ../Makefile):
+в таком порядке (см. features.in/Makefile):
 
 * сперва в $(BUILDDIR)/image/ копируются все подкаталоги,
   соответствующие итоговым именам субпрофилей, запрошенных
   для профиля образа; при этом они сливаются с деревом,
-  которое уже сформировано субпрофилями (../sub.in/*) и уже
+  которое уже сформировано субпрофилями (sub.in/*) и уже
   скопированными фичами; если какие-либо файлы перекрылись
   по именам, rsync должен оставить резервные копии (*~),
   которые должны просигнализировать о беспорядке;

features.in/00example/config.mk

@@ -8,6 +8,6 @@
 #
 # for somewhat more involved example, see syslinux feature
 
-use/00example: sub/main use/anotherfeature
+use/00example: use/repo/main use/anotherfeature
 	@$(call add_feature)
 	@$(call add,MAIN_PACKAGES,hello)

features.in/Makefile

@@ -36,8 +36,8 @@ include $(BUILDDIR)/distcfg.mk
 
 # first rsync what's static, and make backups (*~) --
 # these might signal of file clashes (or plain dirt);
-# second, care for toplevel and tagged script dirs;
-# then handle two more ways of implementing a feature
+# second, care for toplevel dirs;
+# then handle feature generator scripts
 #
 # NB: some subprofiles will be specified as "src/dst"
 #     -- then both src/ and dst/ can hold the addons;
@@ -58,6 +58,11 @@ prep:
 	fi
 
 # feat
+# NB: this is somewhat complicated since it has to handle "$sub" like:
+#     - "/": copy feature's toplevel parts to the BUILDDIR toplevel
+#     - "stage1": copy feature's stage1 parts into stage1 subprofile
+#     - "stage2@live": copy feature's stage2 parts into live subprofile
+#     - "rootfs@/": copy feature's rootfs parts into BUILDDIR toplevel
 $(FEATURES):
 	@feat=$@; \
 	if [ -n "$(GLOBAL_DEBUG)" ]; then \
@@ -71,6 +76,13 @@ $(FEATURES):
 		else \
 			src="$${sub%@*}"; \
 			dst="$${sub#*@}"; \
+			if [ "$$src" = / ]; then \
+				echo "** src=/: you don't want this" >&2; \
+				exit 1; \
+			fi; \
+			if [ "$$dst" = / -o "$$dst" = "" ]; then \
+				dst="."; \
+			fi; \
 			srcdirs=; \
 			if [ -d "$$src" ]; then \
 				srcdirs="$$src"; \
@@ -78,9 +90,9 @@ $(FEATURES):
 			if [ -d "$$dst" -a "$$dst" != "$$src" ]; then \
 				srcdirs="$${srcdirs:+$$srcdirs }$$dst"; \
 			fi; \
+			: "why this overduplication was done? (still needed)"; \
 			for srcdir in $$srcdirs; do \
-				rsync -qab --exclude tagged \
-					"$$srcdir/" "$(BUILDDIR)/$$dst/"; \
+				rsync -qab "$$srcdir/" "$(BUILDDIR)/$$dst/"; \
 			done; \
 		fi; \
 		if [ -n "$(GLOBAL_DEBUG)" ]; then \
@@ -98,7 +110,7 @@ $(FEATURES):
 			done; \
 			popd >&/dev/null; \
 		done; \
-		if [ -n "$$dst" ]; then \
+		if [ -n "$$dst" -a "$$dst" != "." ]; then \
 			the="$$sub subprofile"; \
 		else \
 			the="toplevel"; \

features.in/README

@@ -8,14 +8,14 @@
 других фич либо субпрофилей.
 
 Каждая фича должна содержать файл config.mk, включаемый
-в ../main.mk при построении конфигурации будущего профиля;
+в main.mk при построении конфигурации будущего профиля;
 он может описывать одну или более целей вида use/*,
 дополняющих конфигурацию, и обязан добавить имя фичи
 в $(FEATURES), для чего создана функция add_feature.
 
 На этапе генерации сборочного профиля фичи рассматриваются
-после инициализации профиля (см. ../image.in/) и копирования
-субпрофилей (см. ../sub.in/).  Для каждой фичи, указанной
+после инициализации профиля (см. image.in/) и копирования
+субпрофилей (см. sub.in/).  Для каждой фичи, указанной
 в $(FEATURES), копируются подкаталоги сообразно включенным
 субпрофилям, а также lib/ и {image-,}scripts.d/; затем
 выполняются generate.sh и generate.mk при их наличии.

features.in/armh-cubox/README

@@ -0,0 +1 @@
+Поддержка SolidRun Cubox в расчёте на подключенный по HDMI дисплей FullHD.

features.in/armh-cubox/config.mk

@@ -0,0 +1,3 @@
+use/armh-cubox: use/armh
+	@$(call add_feature)
+	@$(call set,KFLAVOURS,cubox)

features.in/armh-cubox/rootfs/image-scripts.d/40-boot

@@ -0,0 +1,19 @@
+#!/bin/sh
+
+mkdir -p /boot
+
+# 1920x1080 version of the boot script
+cat > /boot/boot << EOF
+setenv bootargs 'console=ttyS0,115200 root=/dev/mmcblk0p2 ro video=dovefb:lcd0:1920x1080-32@60-edid clcd.lcd0_enable=1 clcd.lcd1_enable=0 vmalloc=128M panic=3'
+ext2load mmc 0:1 2000000 uimage
+ext2load mmc 0:1 2800000 uinitrd
+bootm 2000000 2800000
+EOF
+
+# 1280x720 version of the boot script (not used at the moment)
+cat > /boot/boot.720 << EOF
+setenv bootargs 'console=ttyS0,115200 root=/dev/mmcblk0p2 ro video=dovefb:lcd0:1280x720-24@60-edid clcd.lcd0_enable=1 clcd.lcd1_enable=0 vmalloc=128M panic=3'
+ext2load mmc 0:1 2000000 uimage
+ext2load mmc 0:1 2800000 uinitrd
+bootm 2000000 2800000
+EOF

features.in/armh-dovefb/README

@@ -0,0 +1 @@
+Эта фича обеспечивает начальное конфигурирование Marvell Dove GPU.

features.in/armh-dovefb/config.mk

@@ -0,0 +1,3 @@
+use/armh-dovefb: use/armh
+	@$(call add_feature)
+	@$(call add,THE_PACKAGES,xorg-drv-dovefb)

features.in/armh-dovefb/rootfs/image-scripts.d/90-armh-dovefb.sh

@@ -0,0 +1,106 @@
+#!/bin/sh
+
+mkdir -p /etc/udev/rules.d
+cd /etc/udev/rules.d
+
+cat > 99-bmm.rules << EOF
+KERNEL=="bmm|bmm[0-9]", GROUP="xgrp", MODE="0660"
+EOF
+
+cat > 99-fb.rules << EOF
+KERNEL=="fb|fb[0-9]", GROUP="xgrp", MODE="0660"
+EOF
+
+cat > 99-galcore.rules << EOF
+KERNEL=="galcore|galcore[0-9]", GROUP="xgrp", MODE="0660"
+EOF
+
+cat > 99-uio.rules << EOF
+KERNEL=="uio|uio[0-9]", GROUP="xgrp", MODE="0660"
+EOF
+
+mkdir -p /etc/X11
+cd /etc/X11
+
+cat > xorg.conf.720 << EOF
+Section "Device"
+	Identifier	"Videocard0"
+	Driver		"dovefb"
+#	Option		"ExaAccel"	"on"
+	Option		"Solid"		"on"
+	Option		"Copy"		"on"
+	Option		"Composite"	"on"
+	Option		"Commit"	"on"
+	Option		"XvAccel"	"on"
+	Option		"UseGPU"	"on"
+EndSection
+
+Section "Monitor"
+	Identifier	"LCD0"
+	Option		"PreferredMode"	"1280x720"
+EndSection
+
+Section "Screen"
+	Identifier	"Screen 0"
+	Device		"Videocard0"
+	Monitor		"LCD0"
+	DefaultDepth	24
+	DefaultFbBpp	24
+	SubSection	"Display"
+		Depth	24
+		Modes	"1280x720"
+	EndSubSection
+EndSection
+
+Section "ServerLayout"
+	Identifier "Main Layout"
+	Screen	0  "Screen 0"
+EndSection
+EOF
+
+cat > xorg.conf.1080 << EOF
+Section "Device"
+	Identifier	"Videocard0"
+	Driver		"dovefb"
+#	Option		"ExaAccel"	"on"
+	Option		"Solid"		"on"
+	Option		"Copy"		"on"
+	Option		"Composite"	"on"
+	Option		"Commit"	"on"
+	Option		"XvAccel"	"on"
+	Option		"UseGPU"	"on"
+	#Option		"Debug"		"on"
+EndSection
+
+Section "Monitor"
+	Identifier "LCD0"
+	Option "PreferredMode" "1920x1080"
+EndSection
+
+Section "Screen"
+	Identifier "Screen 0"
+	Device "Videocard0"
+	Monitor "LCD0"
+	DefaultDepth 16
+	DefaultFbBpp 16
+	SubSection "Display"
+		Depth 16
+		Modes "1920x1080@60"
+	EndSubSection
+	SubSection "Display"
+		Depth 24
+		Modes "1920x1080@60"
+	EndSubSection
+	SubSection "Display"
+		Depth 32
+		Modes "800x600@60"
+	EndSubSection
+EndSection
+
+Section "ServerLayout"
+	Identifier "Main Layout"
+	Screen 0 "Screen 0"
+EndSection
+EOF
+
+ln -s xorg.conf.1080 xorg.conf

features.in/armh-nexus7/README

@@ -0,0 +1 @@
+Эта фича конфигурирует специфические для Google/ASUS Nexus7 аспекты.

features.in/armh-nexus7/config.mk

@@ -0,0 +1,2 @@
+use/armh-nexus7:
+	@$(call add_feature)

features.in/armh-nexus7/rootfs/image-scripts.d/90-armh-nexus7.sh

@@ -0,0 +1,172 @@
+#!/bin/sh
+
+# FIXME: the exact partition may vary
+cat >> /etc/fstab << EOF
+# YMMV, this might be /dev/mmcblk0p10 either
+/dev/mmcblk0p9 / ext4 defaults 1 1
+EOF
+
+cd /etc/udev/rules.d || exit 1
+
+cat > 90-tegra-rt5640.rules << EOF
+SUBSYSTEM!="sound", GOTO="tegra_rt5640_end"
+ACTION!="change", GOTO="tegra_rt5640_end"
+KERNEL!="card*", GOTO="tegra_rt5640_end"
+
+ATTRS{id}=="tegrart5640", ENV{PULSE_PROFILE_SET}="tegra-nexus7.conf"
+
+LABEL="tegra_rt5640_end"
+EOF
+
+cd /usr/share/pulseaudio/alsa-mixer/profile-sets || exit 1
+cat > tegra-nexus7.conf << EOF
+[General]
+auto-profiles = yes
+
+[Mapping analog-stereo]
+device-strings = front:%f hw:%f plughw:%f
+channel-map = left,right
+paths-output = tegra-nexus7-speaker tegra-nexus7-headphone
+paths-input = tegra-nexus7-intmic
+priority = 10
+EOF
+
+cd /etc/X11 || exit 1
+cat > xorg.conf << EOF
+Section "Device"
+	Identifier	"nexus"
+	Driver		"tegra"
+EndSection
+EOF
+
+cd /etc/X11/xorg.conf.d || exit 1
+cat > 99-nexus-calibration.conf << EOF
+Section "InputClass"
+    Identifier    "Nexus 7 Touchscreen"
+    MatchIsTouchscreen "on"
+    MatchProduct  "elan-touchscreen"
+    MatchDevicePath "/dev/input/event*"
+    MatchDriver   "evdev"
+#    Option  "Calibration"   "29 2125 106 1356"
+#    Option  "SwapAxes"      "0"
+#    Option  "Calibration"   "566 1201 1025 2075"
+#    Option  "SwapAxes"      "1"
+     Option  "Calibration"   "6 2132 29 1294"
+     Option  "SwapAxes"      "0"
+EndSection
+EOF
+
+cat > 99-nexus-rotation.conf << EOF
+Section "Monitor"
+    Identifier	"Monitor"
+    Option	"Rotate" "right"
+EndSection
+
+Section "Screen"
+    Identifier    "Screen"
+    Monitor       "Monitor"
+EndSection
+EOF
+
+cd /usr/share/pulseaudio/alsa-mixer/paths || exit 1
+cat > tegra-nexus7-headphone.conf << EOF
+[General]
+priority = 90
+name = analog-output-headphones
+
+[Jack HP-detect]
+state.plugged = yes
+
+[Element Master]
+switch = mute
+volume = merge
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element HP]
+switch = mute
+volume = merge
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element Headphone Jack]
+switch = mute
+volume = merge
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element Int Spk]
+switch = off
+
+; Due to a kernel bug (?) the "Int Mic" is a playback control.
+; Therefore we enable it here instead of in the proper place
+[Element Int Mic]
+switch = on
+
+EOF
+
+cat > tegra-nexus7-intmic.conf << EOF
+[General]
+priority = 90
+name = analog-input-microphone-internal
+
+[Element ADC]
+; For some reason the ADC volume seems not to be affecting input gain
+switch = mute
+volume = zero
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element ADC Boost Gain]
+switch = mute
+volume = merge
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element Int Mic]
+switch = mute
+
+[Element DMIC]
+enumeration = select
+
+[Option DMIC:DMIC1]
+priority = 89
+name = analog-input-internal-microphone
+
+EOF
+
+cat > tegra-nexus7-speaker.conf << EOF
+[General]
+priority = 100
+name = analog-output-speaker
+
+[Jack HP-detect]
+state.plugged = no
+state.unplugged = unknown
+
+[Element Master]
+switch = mute
+volume = merge
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element Speaker]
+switch = mute
+volume = merge
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element Int Spk]
+switch = mute
+volume = merge
+override-map.1 = all
+override-map.2 = all-left,all-right
+
+[Element Headphone Jack]
+switch = off
+
+; Due to a kernel bug (?) the "Int Mic" is a playback control.
+; Therefore we enable it here instead of in the proper place
+[Element Int Mic]
+switch = on
+EOF

features.in/armh-tegra3/README

@@ -0,0 +1 @@
+Эта фича предназначена для базовой поддержки систем на чипсете NVIDIA Tegra3.

features.in/armh-tegra3/config.mk

@@ -0,0 +1,2 @@
+use/armh-tegra3:
+	@$(call add_feature)

features.in/armh-tegra3/rootfs/image-scripts.d/90-armh-tegra3.sh

@@ -0,0 +1,28 @@
+#!/bin/sh
+
+cd /etc/udev/rules.d || exit 1
+
+cat > 69-tegra-gpu.rules << EOF
+# Set the right permissions to the devices provided by the
+# tegra driver
+ENV{ACL_MANAGE}=="0", GOTO="tegra_gpu_end"
+ACTION!="add|change", GOTO="tegra_gpu_end"
+
+# root only devices
+KERNEL=="knvrm" OWNER="root" GROUP="root" MODE="0660"
+KERNEL=="knvmap" OWNER="root" GROUP="root" MODE="0660"
+
+# graphics devices
+ACTION=="add|change", KERNEL=="nvhost*", GROUP="xgrp", MODE="0660"
+ACTION=="add|change", KERNEL=="nvmap*", GROUP="xgrp", MODE="0660"
+ACTION=="add|change", KERNEL=="tegra*", GROUP="xgrp", MODE="0660"
+ACTION=="add|change", KERNEL=="nvram", GROUP="xgrp", MODE="0660"
+ACTION=="add|change", KERNEL=="nvhdcp*", GROUP="xgrp", MODE="0660"
+
+LABEL="tegra_gpu_end"
+EOF
+
+# FIXME: xgrp is a kludge
+cat > 69-tegra-touchscreen.rules << EOF
+SUBSYSTEM=="input",ACTION=="add|change",KERNEL=="event*",ATTRS{name}=="elan-touchscreen", SYMLINK+="twofingtouch", MODE="0660", GROUP="xgrp"
+EOF

features.in/armh/README

@@ -0,0 +1,2 @@
+Эта фича занимается тем подмножеством необходимой для ARM-образов
+функциональности, которую получается как-то обобщить.

features.in/armh/config.mk

@@ -0,0 +1,2 @@
+use/armh: use/control/sudo-su
+	@$(call add_feature)

features.in/armh/rootfs/image-scripts.d/40-noclock.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+echo 'HWCLOCK_SET_TIME_AT_START=false' >> /etc/sysconfig/clock

features.in/armh/rootfs/image-scripts.d/50-initrd

@@ -0,0 +1,48 @@
+#!/bin/sh
+
+kver="$(rpm -qa 'kernel-image*' \
+	    --qf '%{installtime} %{version}-%{name}-%{release}\n' \
+	| sort -n \
+	| tail -n 1 \
+	| cut -f 2 -d ' ' \
+	| sed 's/kernel-image-//')"
+
+[ -h /boot/vmlinuz ] || ln -s vmlinuz-$kver /boot/vmlinuz
+[ -h /boot/initrd.img ] || ln -s initrd-$kver.img /boot/initrd.img
+
+# NB: mkinitrd-3.0.16+ has rootsubdir support which is critical
+#     for TWRP based ARM "VE" chroots (e.g. for nexus7);
+#     should be implemented in make-initrd either
+
+### rootfs type should become configurable
+if rpm -q mkinitrd; then
+	mkinitrd --with ext4 -f /boot/initrd-$kver.img "$kver"
+fi
+
+# NB: if the adresses ever become different this "API" _will_ change
+# NB: initrd compression (-C) might change, armadaxp handles gzip
+umk() {
+	[ $# = 4 ] || exit 1
+	cd /boot
+	umkimage \
+		-A arm \
+		-O linux \
+		-T "$1" \
+		-C none \
+		-a "$2" \
+		-e "$2" \
+		-n "`readlink "$3"`" \
+		-d "$3" \
+		"$4"
+}
+
+### the addresses will become variables some day probably
+if rpm -q uboot-tools; then
+	umk kernel 0x00008000 vmlinuz uimage
+	umk ramdisk 0x00800000 initrd.img uinitrd
+	if [ -s boot ]; then
+		umk script 0 boot boot.scr
+	fi
+fi
+
+:

features.in/armh/rootfs/image-scripts.d/50-network

@@ -0,0 +1,40 @@
+#!/bin/sh
+
+#     DESCRIPTION
+#
+# Setup network settings
+# 1. Truncate /etc/resolv.conf
+# 2. Init /etc/hosts with "127.0.0.1 localhost"
+# 3. Set hostname, domainname
+# 4. Set defaults for NetworkManager.
+
+
+#     REQUIRES
+#
+# Nothing
+
+
+#     INFO
+# At startup time hostname may be changed by live-hostname package.
+
+. shell-config
+
+NAME="init3-network"
+
+verbose()
+{
+    if [ -n "$GLOBAL_VERBOSE" ]; then
+        echo "HOOK: $NAME: $@"
+    fi
+}
+
+verbose "has started"
+
+DOMAINNAME="localdomain"
+HOSTNAME="localhost.localdomain"
+
+verbose "Init /etc/hosts with 127.0.0.1 localhost"
+echo "127.0.0.1 localhost localhost.localdomain" > /etc/hosts
+
+verbose "Truncate /etc/resolv.conf"
+echo nameserver 8.8.8.8 >/etc/resolv.conf

features.in/armh/rootfs/image-scripts.d/91-unsigned-repo

@@ -0,0 +1,7 @@
+#!/bin/sh
+# Sisyphus/armh is not being signed as of June, 2013
+
+repo_source='/etc/apt/sources.list.d/alt.list'
+[ -s "$repo_source" ] || exit 0
+
+sed -i 's, \[alt\],,' "$repo_source" ||:

features.in/bootloader/config.mk

@@ -4,7 +4,7 @@
 #       the last different one wins
 # - remember .base if adding yet another *_PACKAGES
 
-use/bootloader: use/install2 sub/main
+use/bootloader:
 	@$(call add_feature)
 	@$(call add,BASE_PACKAGES,alterator-$$(BASE_BOOTLOADER))
 

features.in/bootloader/install2/image-scripts.d/00-check-bootloader

@@ -0,0 +1,6 @@
+#!/bin/sh
+
+if [ -z "$GLOBAL_BASE_BOOTLOADER" ]; then
+	echo "** error: BASE_BOOTLOADER empty while bootloader feature requested" >&2
+	exit 1
+fi

features.in/branding/config.mk

@@ -4,8 +4,13 @@ use/branding:
 
 # NB: not every distro might have all the branding of its own
 use/branding/full: use/branding use/syslinux/ui/gfxboot
-	@$(call add,THE_BRANDING,alterator bootsplash graphics)
+	@$(call add,THE_BRANDING,alterator bootloader bootsplash graphics)
 	@$(call add,THE_BRANDING,indexhtml notes slideshow)
 
 use/branding/complete: use/branding/full use/plymouth/full
 	@$(call add,INSTALL2_BRANDING,notes slideshow)
+
+# http://altlinux.org/branding/slideshow
+use/branding/slideshow/once: use/branding
+	@$(call add,INSTALL2_BRANDING_SLIDESHOW,once:true)
+	@$(call xport,INSTALL2_BRANDING_SLIDESHOW)

features.in/branding/install2/image-scripts.d/50-branding.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+[ -n "$GLOBAL_INSTALL2_BRANDING_SLIDESHOW" ] || exit 0
+
+for arg in $GLOBAL_INSTALL2_BRANDING_SLIDESHOW; do
+	echo "${arg/:/=}" >> /etc/alterator/slideshow.conf
+done

features.in/branding/install2/lib/50branding.mk

@@ -1 +1,2 @@
-IMAGE_PACKAGES_REGEXP += $(call branding,$(INSTALL2_BRANDING))
+IMAGE_PACKAGES_REGEXP += $(call branding, \
+				$(STAGE2_BRANDING) $(INSTALL2_BRANDING))

features.in/branding/lib/20-branding.mk

@@ -2,3 +2,6 @@
 # NB: this comes just before build-distro.mk
 
 DOT_BASE += $(call branding,$(THE_BRANDING))
+
+CHROOT_PACKAGES_REGEXP += $(call branding,bootloader)
+CHROOT_PACKAGES += ImageMagick-tools

features.in/branding/live/lib/50branding.mk

@@ -1 +1,2 @@
-IMAGE_PACKAGES_REGEXP += $(call branding,$(THE_BRANDING))
+IMAGE_PACKAGES_REGEXP += $(call branding, \
+				$(THE_BRANDING) $(STAGE2_BRANDING))

features.in/branding/stage2/lib/40branding.mk

@@ -1 +0,0 @@
-IMAGE_PACKAGES_REGEXP += $(call branding,$(STAGE2_BRANDING))

features.in/browser/README

@@ -0,0 +1,6 @@
+Эта фича обеспечивает наличие и конкретизацию выбора браузера.
+Разумеется, дополнительные варианты могут быть установлены
+явным или косвенным затребованием.
+
+Следует понимать, что каждая из целей может быть использована
+лишь один раз, повторное упоминание будет проигнорировано make.

features.in/browser/config.mk

@@ -0,0 +1,38 @@
+use/browser:
+	@$(call add_feature)
+	@$(call add,THE_PACKAGES_REGEXP,$$(THE_BROWSER))
+	@$(call try,THE_BROWSER,webclient)	# fallback
+
+use/browser/firefox use/browser/seamonkey \
+	use/browser/chromium use/browser/epiphany \
+	use/browser/qupzilla use/browser/rekonq \
+	use/browser/elinks use/browser/links2: \
+	use/browser/%: use/browser
+	@$(call set,THE_BROWSER,$*)
+
+use/browser/konqueror: use/browser
+	@$(call set,THE_BROWSER,kdebase-konqueror)
+
+use/browser/konqueror4: use/browser
+	@$(call set,THE_BROWSER,kde4base-konqueror)
+
+use/browser/firefox/live: use/browser/firefox
+	@$(call add,THE_BROWSER,livecd-firefox)
+
+# scarey, and will have to be done otherwise when l10n feature is there
+use/browser/firefox/i18n: use/browser/firefox
+	@$(call add,THE_BROWSER,firefox-be firefox-kk firefox-ru firefox-uk)
+
+# fx29+
+use/browser/firefox/classic: use/browser/firefox
+	@$(call add,THE_BROWSER,firefox-classic_theme_restorer.*)
+
+use/browser/seamonkey/i18n: use/browser/seamonkey
+	@$(call add,THE_BROWSER,seamonkey-ru)
+
+# inherently insecure, NPAPI only
+use/browser/plugin/flash: use/browser
+	@$(call add,THE_PACKAGES,mozilla-plugin-adobe-flash)
+
+use/browser/plugin/java: use/browser
+	@$(call add,THE_PACKAGES,mozilla-plugin-java-1.6.0-sun)

features.in/build-distro/README

@@ -3,3 +3,9 @@
 
 Дополняет финальную стадию сборки (lib/, scripts.d/)
 и тесно с ней связана.
+
+При желании более полно воспользоваться доступными средствами
+фиксации метаданных обратите внимание на следующие переменные:
+META_SYSTEM_ID, META_PUBLISHER, META_PREPARER, META_APP_ID,
+META_VOL_ID, META_VOL_SET, META_BIBLIO, META_ABSTRACT;
+см. тж. genisoimagerc(5) из пакета genisoimage.

features.in/build-distro/config.mk

@@ -1,3 +1,3 @@
-# hooked from ../../lib/sugar.mk
+# hooked from lib/sugar.mk
 use/build-distro:
 	@$(call add_feature)

features.in/build-distro/lib/90-build-distro.mk

@@ -1,7 +1,8 @@
 # step 4: build the distribution image
 
-# take the latter part for complex-specified subprofiles like stage2@live
-SUBDIRS = $(SUBPROFILE_DIRS)
+# take the latter part for complex-specified subprofiles like stage2@live;
+# care to exclude non-directories holding no makefiles like rootfs
+SUBDIRS = $(sort $(dir $(wildcard $(addsuffix /Makefile,$(SUBPROFILE_DIRS)))))
 
 # proxy over the ISO metadata collected; see also genisoimagerc(5)
 BOOT_SYSI := $(META_SYSTEM_ID)
@@ -12,6 +13,7 @@ BOOT_VOLI := $(shell echo $(META_VOL_ID) | cut -c1-32)
 BOOT_VOLS := $(META_VOL_SET)
 BOOT_BIBL := $(META_BIBLIO)
 BOOT_ABST := $(META_ABSTRACT)
+DATE_F    := $(shell date +%F)
 
 BOOT_TYPE := isolinux
 
@@ -23,7 +25,7 @@ prep: $(GLOBAL_DEBUG) dot-disk $(WHATEVER)
 # can't use mp-showref which belongs to the metaprofile
 dot-disk:
 	@mkdir -p files/.disk
-	@echo "ALT Linux based" >files/.disk/info
+	@echo "$(META_VOL_ID) $(DATE_F)" >files/.disk/info
 	@echo "$(ARCH)" >files/.disk/arch
 	@echo "$(DATE)" >files/.disk/date
 	@if type -t git >&/dev/null; then \

features.in/build-ve/README

@@ -1,4 +1,5 @@
-Эта фича конфигурирует создание образа виртуального окружения (VE).
+Эта фича конфигурирует создание образа виртуального окружения (VE),
+что используется для сборки шаблонов OpenVZ и ARM-чрутов для TWRP.
 
 Дополняет финальную стадию сборки (lib/, image-scripts.d/)
 и тесно с ней связана.

features.in/build-ve/config.mk

@@ -1,3 +1,3 @@
-# hooked from ../../lib/sugar.mk
-use/build-ve:
+# hooked from lib/sugar.mk
+use/build-ve: sub/rootfs@/
 	@$(call add_feature)

features.in/build-ve/lib/90-build-ve.mk

@@ -8,10 +8,14 @@ ifeq (cpio,$(IMAGE_PACKTYPE))
 MKI_CPIO_COMPRESS = $(IMAGE_COMPRESS)
 endif
 
-IMAGE_PACKAGES = $(call list,$(BASE_LISTS)) \
+# some VEs _can_ contain kernels (think ARM multiboot
+# but this can also help VE/VM hybrid images)
+IMAGE_PACKAGES = $(DOT_BASE) \
 		 $(SYSTEM_PACKAGES) \
 		 $(COMMON_PACKAGES) \
-		 $(BASE_PACKAGES)
+		 $(BASE_PACKAGES) \
+		 $(THE_PACKAGES) \
+		 $(call list,$(BASE_LISTS) $(THE_LISTS))
 
 all: $(GLOBAL_DEBUG) build-image copy-tree run-image-scripts pack-image \
 	postprocess $(GLOBAL_CLEAN_WORKDIR)

features.in/build-vm/README

@@ -1,3 +1,3 @@
 Эта фича конфигурирует создание образа виртуальной машины (VM).
 Дополняет финальную стадию сборки (lib/, image-scripts.d/).
-Требует для работы sudo(8) -- см. тж. ../../doc/vm.txt .
+Требует для работы sudo(8) -- см. тж. doc/vm.txt

features.in/build-vm/config.mk

@@ -1,4 +1,3 @@
-# hooked from ../../lib/sugar.mk
-use/build-vm:
+# hooked from lib/sugar.mk
+use/build-vm: sub/rootfs@/ use/kernel
 	@$(call add_feature)
-	@$(call xport,ROOTPW)

features.in/build-vm/generate.mk

@@ -1,4 +1,4 @@
-# copy tar2vm helper into generated profile to enable standalone builds
+# copy tar2fs helper into generated profile to enable standalone builds
 
 all:
-	@install -pD $(MKIMAGE_PROFILES)/bin/tar2vm $(BUILDDIR)/bin/tar2vm
+	@install -pD $(MKIMAGE_PROFILES)/bin/tar2fs $(BUILDDIR)/bin/tar2fs

features.in/build-vm/image-scripts.d/00-root

@@ -1,11 +0,0 @@
-#!/bin/sh
-
-if [ -n "$GLOBAL_ROOTPW" ]; then
-	if type -t chpasswd >&/dev/null; then
-		echo "root:$GLOBAL_ROOTPW" | chpasswd
-	else
-		echo "** warning: chpasswd binary missing" >&2
-	fi
-else
-	echo "** warning: no root password provided, you're on your own" >&2
-fi

features.in/build-vm/image-scripts.d/07-kernel

@@ -1,6 +1,6 @@
 #!/bin/sh
 # predictable file locations make bootloader configuration simple;
-# this script relates to .../features.in/stage2/stage1/scripts.d/80-make-initfs
+# this script relates to features.in/stage2/stage1/scripts.d/80-make-initfs
 
 kver="$(rpm -qa 'kernel-image*' \
             --qf '%{installtime} %{version}-%{name}-%{release}\n' \

features.in/build-vm/image-scripts.d/90-firsttime

@@ -1,3 +0,0 @@
-#!/bin/sh
-# Run scripts from /etc/firsttime.d at first start
-[ -f "/var/lock/TMP_1ST" ] || touch "/var/lock/TMP_1ST"

features.in/build-vm/lib/90-build-vm.mk

@@ -1,19 +1,17 @@
 # step 4: build the virtual machine image
 
-IMAGE_PACKAGES = $(SYSTEM_PACKAGES) \
+IMAGE_PACKAGES = $(DOT_BASE) \
+		 $(SYSTEM_PACKAGES) \
 		 $(COMMON_PACKAGES) \
 		 $(BASE_PACKAGES) \
 		 $(THE_PACKAGES) \
-		 $(call list,$(BASE_LISTS) $(THE_LISTS)) \
-		 $(call kpackages,$(THE_KMODULES) $(BASE_KMODULES),$(KFLAVOURS))
+		 $(call list,$(BASE_LISTS) $(THE_LISTS))
 
 # intermediate chroot archive
 VM_TARBALL := $(IMAGE_OUTDIR)/$(IMAGE_NAME).tar
 VM_RAWDISK := $(IMAGE_OUTDIR)/$(IMAGE_NAME).raw
-
-ifeq (,$(ROOTPW))
-$(error please provide root password via ROOTPW)
-endif
+VM_FSTYPE ?= ext4
+VM_SIZE ?= 0
 
 check-sudo:
 	@if ! type -t sudo >&/dev/null; then \
@@ -22,9 +20,9 @@ check-sudo:
 	fi
 
 prepare-image: check-sudo
-	@if ! sudo $(TOPDIR)/bin/tar2vm \
-		"$(VM_TARBALL)" "$(VM_RAWDISK)" $$VM_SIZE; then \
-		echo "** error: sudo tar2vm failed, see also doc/vm.txt" >&2; \
+	@if ! sudo $(TOPDIR)/bin/tar2fs \
+		"$(VM_TARBALL)" "$(VM_RAWDISK)"  $(VM_SIZE) $(VM_FSTYPE); then \
+		echo "** error: sudo tar2fs failed, see also doc/vm.txt" >&2; \
 		exit 1; \
 	fi
 
@@ -43,7 +41,6 @@ convert-image: prepare-image
 	fi
 
 run-image-scripts: GLOBAL_CLEANUP_PACKAGES := $(CLEANUP_PACKAGES)
-run-image-scripts: GLOBAL_ROOTPW := $(ROOTPW)
 
 # override
 pack-image: MKI_PACK_RESULTS := tar:$(VM_TARBALL)

features.in/control/README

@@ -0,0 +1,2 @@
+Эта фича предоставляет интерфейс для конфигурирования дистрибутивных
+значений по умолчанию control(8); см. тж. http://altlinux.org/control

features.in/control/config.mk

@@ -0,0 +1,8 @@
+use/control:
+	@$(call add_feature)
+	@$(call add,THE_PACKAGES,control)
+	@$(call xport,CONTROL)
+
+# some presets
+use/control/sudo-su: use/control
+	@$(call add,CONTROL,su:public sudo:public)

features.in/control/rootfs/image-scripts.d/50-control

@@ -0,0 +1,11 @@
+#!/bin/sh
+# setup control(8) states
+
+[ -z "$GLOBAL_CONTROL" ] ||
+	echo "$GLOBAL_CONTROL" \
+	| tr ' ' '\n' \
+	| while IFS=':' read facility state; do
+		[ -z "$facility" -o -z "$state" ] ||
+			control "$facility" "$state"
+	done
+:

features.in/deflogin/README

@@ -0,0 +1,8 @@
+Эта фича конфигурирует root login и пользователей по умолчанию.
+
+Если ROOTPW не задан, то подходящий пароль не существует.
+При необходимости задать пустой пароль root (например, на LiveCD)
+выставьте переменную ROOTPW_EMPTY в значение "1".
+
+ВНИМАНИЕ: применяйте разумно, т.к. крайне легко создать и оставить
+          дыру в безопасности!

features.in/deflogin/config.mk

@@ -0,0 +1,41 @@
+# WARNING: the variable values are stored in build config/log!
+use/deflogin:
+	@$(call add_feature)
+	@$(call add,THE_PACKAGES,shadow-utils passwd)
+	@$(call xport,ROOTPW_EMPTY)
+	@$(call xport,ROOTPW)
+	@$(call xport,USERS)
+	@$(call xport,GROUPS)
+
+# some presets
+# USERS variable chunk format is "login:passwd:admin:sudo"
+# GROUPS are just stashed there to include USERS logins created
+
+# basic livecd: root and altlinux users with no password at all
+use/deflogin/live: use/deflogin
+	@$(call set,ROOTPW_EMPTY,1)
+	@$(call add,USERS,altlinux::1:1)
+
+# real thing: some control added
+use/deflogin/desktop: use/deflogin/live \
+	use/deflogin/hardware use/deflogin/xgrp use/deflogin/privileges; @:
+
+# could also be passed on the commandline
+use/deflogin/root: use/deflogin
+	@$(call try,ROOTPW,altlinux)
+
+# appliances: "root:altlinux"; "altlinux:root" in "xgrp" group
+use/deflogin/altlinuxroot: use/deflogin/root use/deflogin/xgrp
+	@$(call add,USERS,altlinux:root:1:1)
+
+# peripherals
+use/deflogin/hardware: use/deflogin
+	@$(call add,GROUPS,cdwriter radio scanner uucp)
+
+# videocard and desktop related hardware
+use/deflogin/xgrp: use/deflogin
+	@$(call add,GROUPS,xgrp audio)
+
+# potentially elevated privileges (NB: _not_ wheel)
+use/deflogin/privileges: use/deflogin
+	@$(call add,GROUPS,fuse netadmin proc users)

features.in/deflogin/rootfs/image-scripts.d/50-issue

@@ -0,0 +1,20 @@
+#!/bin/sh
+# issue welcome message if there's a guest user
+# (the first one configured with empty password)
+
+[ -n "$GLOBAL_USERS" ] || exit 1
+
+guest=
+for u in $GLOBAL_USERS; do
+	login="${u%%:*}"
+	[ -n "$login" ] || continue
+	rest="${u#*:}"
+	pass="${rest%%:*}"
+	[ -z "$pass" ] || continue
+	guest="$login"
+	break
+done
+
+[ -n "$guest" ] || exit 0
+
+echo "Hello friend, say \`$guest' to log in at \\l" >> /etc/issue

features.in/deflogin/rootfs/image-scripts.d/50-root

@@ -0,0 +1,16 @@
+#!/bin/sh
+
+# explicitly requested empty root password
+case "$GLOBAL_ROOTPW_EMPTY" in
+1|y|Y|yes)
+	usermod -p "" root
+	exit 0
+	;;
+esac
+
+# set root password if any; no-op if it is empty
+if [ -z "$GLOBAL_ROOTPW" ]; then
+	echo "** warning: no root password provided, skipping" >&2
+else
+	echo "$GLOBAL_ROOTPW" | passwd --stdin root
+fi

features.in/deflogin/rootfs/image-scripts.d/50-users

@@ -0,0 +1,35 @@
+#!/bin/sh
+# add regular user(s) assigning passwords and attributes of power
+
+# NB: care that the utilities exist; shadow-utils is warranted
+
+add_user() {
+	useradd -m "$1" &&
+	usermod -p "" "$1" &&
+	if [ -n "$GLOBAL_GROUPS" ]; then	# some of them might be missing
+		for group in $GLOBAL_GROUPS; do
+			usermod -a --groups "$group" "$1" ||:
+		done
+	fi ||
+	echo "*** failed to add user '$1'"
+}
+
+set_password() { echo "$1:$2" | chpasswd; }
+
+set_admin() { usermod -a --groups "wheel" "$1"; }
+
+set_sudo() {
+	[ ! -w "/etc/sudoers" ] ||
+		echo "$1	ALL=(ALL) ALL" >> "/etc/sudoers"
+}
+
+# chpasswd is intended for batch use but that would be less comprehensible
+[ -z "$GLOBAL_USERS" ] ||
+	echo "$GLOBAL_USERS" \
+	| tr ' ' '\n' \
+	| while IFS=':' read login passwd admin sudo; do
+		add_user "$login"
+		[ -z "$passwd" ] || set_password "$login" "$passwd"
+		[ -z "$admin" ] || set_admin "$login"
+		[ -z "$sudo" ] || set_sudo "$login"
+	done

features.in/dev/config.mk

@@ -1,6 +1,7 @@
-use/dev:
+use/dev: use/control
 	@$(call add_feature)
 	@$(call add,THE_PACKAGES,git-core hasher gear)
+	@$(call add,CONTROL,pam_mktemp:enabled)
 
 use/dev/mkimage: use/dev
 	@$(call add,THE_PACKAGES,mkimage shadow-change su)

features.in/dev/live/image-scripts.d/51-hasher

@@ -28,7 +28,6 @@ fi
 
 # $TMP
 TMP="/tmp/.private/$USER"
-control pam_mktemp enabled
 sed -i '/^%_tmppath.*tmp$/d' "$HOME/.rpmmacros"
 echo "%_tmppath	$TMP" >> "$HOME/.rpmmacros"
 
@@ -40,5 +39,8 @@ ln -s "$TMP/hasher" "$HOME/hasher"
 echo "export share_network=1" >> /etc/profile.d/hasher.sh
 chmod +x /etc/profile.d/hasher.sh
 
+# squashfs-tools 4.3+
+echo "allowed_mountpoints=/proc" >> /etc/hasher-priv/system
+
 # requisite
 hasher-useradd "$USER"

features.in/domain-client/README

@@ -0,0 +1,7 @@
+Эта фича конфигурирует поддержку клиента домена ALT Linux.
+
+krb5-ticket-watcher применяется для отладки либо обновления
+билетов при нехватке сконфигурированного по умолчанию (сутки)
+либо указанного администратором времени жизни таковых.
+
+NB: не проверено на инсталяторах!

features.in/domain-client/config.mk

@@ -0,0 +1,7 @@
+use/domain-client: use/net/dhcp
+	@$(call add_feature)
+	@$(call add,THE_LISTS,domain-client)
+
+use/domain-client/full: use/domain-client
+	@$(call add,THE_PACKAGES,krb5-ticket-watcher)
+	@$(call add,DEFAULT_SERVICES_ENABLE,avahi-daemon)

features.in/domain-client/rootfs/image-scripts.d/70-network-shares-dhcpcd.sh

@@ -0,0 +1,10 @@
+#!/bin/sh -efu
+
+dhcpcd_conf="/etc/dhcpcd.conf"
+
+[ -f "$dhcpcd_conf" ] || exit 0
+
+grep -q '^option[[:blank:]]\+vendor_encapsulated_options' "$dhcpcd_conf" || {
+	echo "# added by 70-network-shares-dhcpcd.sh"
+	echo "option vendor_encapsulated_options"
+} >> "$dhcpcd_conf"

features.in/domain-client/rootfs/image-scripts.d/70-network-shares-nscd.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+# bump name services caching time up
+
+[ -s /etc/nscd.conf ] || exit 0
+
+sed -i 's/\(positive-time-to-live[^0-9]*\)[0-9]*$/\1 31536000/g' /etc/nscd.conf

features.in/domain-client/rootfs/image-scripts.d/70-network-shares-samba.sh

@@ -0,0 +1,117 @@
+#!/bin/sh -efu
+
+##
+# This script:
+#   1) updates pam_mount configuration
+#   2) updates pam configuration
+#
+# NB: network shares automounted only for a particular uid range
+
+. shell-error
+
+msg() {
+	printf "$* \n"
+}
+
+pmconf="/etc/security/pam_mount.conf.xml"
+pamconf="/etc/pam.d/system-auth-krb5"
+
+##
+# Update pam_mount configuration file
+#
+update_pmconf() {
+
+	local insert_at tmp_conf
+
+	tmp_conf="${pmconf}.new"
+
+	# no pam_mount: impossible(tm)
+	[ -w "$pmconf" ] || return 1
+
+	# already configured
+	grep -qs dnssd_lookup "$pmconf" 2>/dev/null && return 0
+
+	# configure pam_mount to use avahi
+	insert_at="$(sed -n '/<!-- Volume definitions -->/=' "$pmconf" \
+		| head -n 1)"
+
+	if [ -z "$insert_at" ]; then
+		msg "Can't find position for injection in $pmconf"
+		return 1
+	fi
+
+	# part 1 (head)
+	head -n $((insert_at-1)) "$pmconf" > "$tmp_conf"
+
+	# part 2 (inserted text)
+	cat >> "$tmp_conf" <<'__EOF__'
+
+<!-- # inserted by 70-network-shares-samba.sh ##################### -->
+
+<volume uid="5000-10000" fstype="cifs" dnssd_lookup="1" mountpoint="/home/%(USER)/share" options="sec=krb5,cruid=%(USERUID)" />
+<cifsmount>/sbin/mount.cifs //%(SERVER)/%(VOLUME) %(MNTPT) -o %(OPTIONS)</cifsmount>
+<cifsumount>/sbin/umount.cifs %(MNTPT)</cifsumount>
+
+<!-- ############################################################## -->
+
+__EOF__
+
+	# part 3 (tail)
+	sed -n "$insert_at,\$p" "$pmconf" >> "$tmp_conf"
+
+	# update config
+	chown root:root "$tmp_conf"
+	chmod 644 "$tmp_conf"
+	mv -f "$tmp_conf" "$pmconf"
+
+	# XXX: REMOVE FOR RELEASE
+	# sed -i -e '/debug enable/ s/0/1/' "$pmconf"
+}
+
+##
+# Update pam configuration
+#
+update_pam() {
+	local append_after
+
+	# no pam-config: impossible(tm)
+	[ -w "$pamconf" ] || return 1
+
+	if [ -L "$pamconf" ]; then
+		pamconf="$(realpath "$pamconf")"
+	fi
+
+	# already configured
+	grep -qs pam_mount "$pamconf" && return 0
+
+	append_after="$(sed -n '/^auth[[:space:]]\+required/=' "$pamconf" \
+		| tail -n 1)"
+	[ -n "$append_after" ] &&
+		sed -i \
+		-e "$append_after a auth     optional       pam_mount.so" \
+		"$pamconf"
+
+	append_after="$(sed -n '/^session[[:space:]]\+required/=' "$pamconf" \
+		| tail -n 1)"
+	[ -n "$append_after" ] &&
+		sed -i \
+		-e "$append_after a session  optional       pam_mount.so" \
+		"$pamconf"
+	append_after="$(sed -n '/^auth[[:space:]]\+required/=' \
+		"$pamconf"_ccreds | tail -n 1)"
+
+	[ -n "$append_after" ] &&
+		sed -i \
+		-e "$append_after a auth     optional       pam_mount.so" \
+		"$pamconf"_ccreds
+
+	### set ccache to predicadable value (ouch!)
+	sed -i 's|pam_krb5.so use_first_pass$|pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u|' "$pamconf"
+}
+
+##
+# Start
+#
+update_pmconf &&
+update_pam
+

features.in/efi/README

@@ -2,7 +2,7 @@
 
 Конфигурируется заданием загрузчика (EFI_BOOTLOADER)
 и файла сертификата (EFI_CERT) при помощи целей;
-пример использования доступен в ../../conf.d/regular.mk
+пример использования доступен в conf.d/regular.mk
 
 См. тж.:
 * http://www.altlinux.org/UEFI

features.in/efi/config.mk

@@ -1,4 +1,4 @@
-+efi: use/efi; @:
++efi: use/efi/signed; @:
 
 ifeq (x86_64,$(ARCH))
 
@@ -6,28 +6,29 @@ EFI_LISTS := $(call tags,base efi)
 
 use/efi:
 	@$(call add_feature)
-	@$(call set,MKI_VER_MINIMAL,0.2.5)	# see #28219
+	@$(call set,MKI_VER_MINIMAL,0.2.12)	# it's official now
 	@$(call add,THE_LISTS,$(EFI_LISTS))
 	@$(call add,RESCUE_LISTS,$(EFI_LISTS))
 	@$(call add,THE_PACKAGES,$$(EFI_SHELL))
 	@$(call add,RESCUE_PACKAGES,refind $$(EFI_SHELL))
 	@$(call add,INSTALL2_PACKAGES,dosfstools fatresize)
 	@$(call try,EFI_BOOTLOADER,elilo)	# default one
+	@$(call add,STAGE1_KCONFIG,EFI EFI_PARTITION EFI_VARS FB_EFI)
 
 use/efi/refind: use/efi
 	@$(call set,EFI_BOOTLOADER,refind)
 
 use/efi/signed: use/efi
-	@$(call set,MKI_VER_MINIMAL,0.2.7)	# refind->elilo handoff
 	@$(call set,EFI_CERT,altlinux)
 	@$(call add,THE_PACKAGES,shim-signed)
-	@$(call set,EFI_SHELL,efi-shell-signed)	# even more useful
-	@$(call add,RESCUE_PACKAGES,refind-signed)
-	@$(call add,RESCUE_PACKAGES,openssl sbsigntools)
+	@$(call add,RESCUE_PACKAGES,openssl pesign sbsigntools)
 
 use/efi/shell: use/efi
 	@$(call try,EFI_SHELL,efi-shell)
 
+use/efi/memtest86: use/efi/refind
+	@$(call set,EFI_MEMTEST86,efi-memtest86)
+
 use/efi/debug: use/efi
 	@$(call add,STAGE2_PACKAGES,efibootmgr gdisk)
 	@$(call set,KFLAVOURS,led-ws)
@@ -35,6 +36,7 @@ use/efi/debug: use/efi
 else
 
 # ignore on an unsupported target arch but make it hybrid at least
-use/efi use/efi/refind use/efi/signed use/efi/shell use/efi/debug: use/isohybrid
+use/efi use/efi/signed use/efi/debug \
+  use/efi/refind use/efi/shell use/efi/memtest86: use/isohybrid
 
 endif

features.in/efi/rootfs/image-scripts.d/50-efi

@@ -0,0 +1,4 @@
+#!/bin/sh
+# see also https://bugzilla.altlinux.org/27970
+
+grep -q efivars /etc/modules || echo efivars >> /etc/modules

features.in/efi/stage2/image-scripts.d/50-efi

@@ -1,4 +1,4 @@
 #!/bin/sh
 # see also https://bugzilla.altlinux.org/27970
 
-echo efivars >> /etc/modules
+grep -q efivars /etc/modules || echo efivars >> /etc/modules

features.in/firmware/config.mk

@@ -9,7 +9,6 @@ use/firmware:
 use/firmware/full: use/firmware/server use/firmware/laptop
 
 use/firmware/cpu: use/firmware
-	@$(call add,THE_PACKAGES,firmware-amd-ucode)
 	@$(call add,THE_PACKAGES,microcode-data-intel microcode_ctl)
 
 use/firmware/server: use/firmware
@@ -19,15 +18,10 @@ use/firmware/server: use/firmware
 # NB: individual firmwarez would sometimes conflict
 #     with ones newly merged into firmware-linux
 # FIXME: kernel modules rather belong to use/hardware
-use/firmware/wireless: use/firmware
-	@$(call add,THE_KMODULES,bcmwl ndiswrapper)
+use/firmware/wireless: use/firmware use/kernel/wireless
 	@$(call add,THE_PACKAGES,firmware-acx100)
-	@#$(call add,THE_PACKAGES,firmware-i2400m)
-	@#$(call add,THE_PACKAGES_REGEXP,firmware-carl9170.*)
 	@$(call add,THE_PACKAGES_REGEXP,firmware-prism.*)
 	@$(call add,THE_PACKAGES_REGEXP,firmware-ipw.*)
-	@#$(call add,THE_PACKAGES_REGEXP,firmware-iwl.*)
-	@#$(call add,THE_PACKAGES_REGEXP,firmware-rt.*)
 	@$(call add,THE_PACKAGES_REGEXP,firmware-zd.*)
 
 use/firmware/laptop: use/firmware/wireless use/firmware/cpu

features.in/fonts/README

@@ -1,5 +1,5 @@
-Эта фича занимается конфигурированием подсистемы
-конфигурации шрифтов fontconfig (sic!); помимо
-возможности выставить желаемые кусочки вручную
-предлагаются и заранее заданные интегральные
-варианты, прошедшие обкатку в дистрибутивах.
+Эта фича позволяет системно конфигурировать файлы
+конфигурации подсистемы конфигурирования шрифтов
+fontconfig (sic!), заодно предоставляя прошедшие
+обкатку в дистрибутивах варианты предварительно
+заданной конфигурации для удобства.

features.in/fonts/config.mk

@@ -1,3 +1,4 @@
+# fontconfig setup
 use/fonts:
 	@$(call add_feature)
 	@$(call xport,FONT_FEATURES_ENABLE)
@@ -10,6 +11,33 @@ use/fonts/zerg: use/fonts
 	@$(call set,FONT_FEATURES_DISABLE,no-antialias lcdfilter-none \
 		unhinted no-sub-pixel)
 
-# nothing configured to add_feature, let's skip that this time
-use/fonts/infinality:
+# nothing configured to add_feature but let's not skip that for consistency
+use/fonts/infinality: use/fonts
 	@$(call add,THE_PACKAGES,libfreetype-infinality fontconfig-infinality)
+
+# a few typical font collections
+# NB: dejavu is ugly thus missing
+# NB: not depending on use/fonts intentionally,
+#     the scripts are unneeded to add packages
+use/fonts/otf/adobe:
+	@$(call add,THE_PACKAGES,fonts-otf-adobe-source-code-pro)
+	@$(call add,THE_PACKAGES,fonts-otf-adobe-source-sans-pro)
+
+use/fonts/otf/mozilla:
+	@$(call add,THE_PACKAGES,fonts-otf-mozilla-fira)
+
+use/fonts/ttf/google:
+	@$(call add,THE_PACKAGES,fonts-ttf-droid)
+	@$(call add,THE_PACKAGES,fonts-ttf-google-croscore-arimo)
+	@$(call add,THE_PACKAGES,fonts-ttf-google-croscore-cousine)
+	@$(call add,THE_PACKAGES,fonts-ttf-google-croscore-tinos)
+
+use/fonts/ttf/google/extra: use/fonts/ttf/google
+	@$(call add,THE_PACKAGES,fonts-ttf-google-crosextra-caladea)
+	@$(call add,THE_PACKAGES,fonts-ttf-google-crosextra-carlito)
+
+use/fonts/ttf/redhat:
+	@$(call add,THE_PACKAGES,fonts-ttf-liberation)
+
+use/fonts/ttf/ubuntu:
+	@$(call add,THE_PACKAGES,fonts-ttf-ubuntu-font-family)

features.in/homeros/config.mk

@@ -1,10 +1,7 @@
-use/homeros:
+use/homeros: use/control/sudo-su use/services
 	@$(call add_feature)
 #	@$(call set,BRANDING,simply-linux)
-#	@$(call add,THE_BRANDING,menu xfce-settings)
-	@$(call add,THE_LISTS,homeros/voiceman)
 	@$(call add,THE_LISTS,homeros/homeros)
-	@$(call add,THE_LISTS,homeros/tts)
 	@$(call add,THE_LISTS,homeros/yasr)
 	@$(call add,THE_LISTS,homeros/tools)
-#	@$(call set,META_VOL_SET,Homeros)
+	@$(call add,DEFAULT_SERVICES_ENABLE,sshd)

features.in/homeros/live/image-scripts.d/10-amixer

@@ -1,13 +0,0 @@
-#!/bin/sh
-
-cat <<EOF > /etc/rc.d/rc.local
-#!/bin/sh
-
-amixer set Master 75%
-amixer set Master toggle
-amixer set PCM 75%
-amixer set PCM toggle
-
-EOF
-
-chmod 755 /etc/rc.d/rc.local

features.in/homeros/live/image-scripts.d/10-rhvoice

@@ -1,4 +0,0 @@
-#!/bin/sh -e
-
-/bin/ln -s /etc/tts.d/rhvoice-en.voiceman /etc/voiceman.d/rhvoice-en.output
-/bin/ln -s /etc/tts.d/rhvoice.voiceman /etc/voiceman.d/rhvoice.output