Modify the ISO with custom ca.crt?

shmu26 · April 27, 2023, 4:20am

This desktop computer is on a monitored network that requires a ca.crt to be installed before it can access Internet. (Yes, this is a man-in-the-middle setup.)
I want to be able to use the online features of the EOS installer, so I need to have that ca.crt up and working to do that.

How can I modify (remaster) the ISO so it will automatically include my ca.crt as part of the installation process?

It is easy enough for me to just boot the live flash drive with the standard ISO, and install my cert into the session, but that is not enough. Because when the installer gets to the update stage, it will fail, as the system can’t access Internet. That’s why I want my cert to be installed automatically.

Any ideas how to do this?

I0F · April 27, 2023, 6:05am

You need to use archiso with this repo in order to create your own ISO with your files inside it.

In both links are instructions on how to do this. The easiest way is probably just to follow the instructions of EOS. I’m not sure where the best place is to put the ca.crt file, though. But somebody else most likely has the answer for that.

joekamprad · April 27, 2023, 6:53am

github.com

endeavouros-team/calamares/blob/8345ba47720e2c0856ba034663bb7ea01bdcf2d7/data/eos/modules/pacstrap.conf#L64


      
            - which
            - xfsprogs
            - xterm
          
          
#
          # postInstallFiles is an array of file names which will be copied into the system
          #
          # The paths should be relative to the host and the files will be copied to the
          # location in the installed system
          #
          postInstallFiles:
            - "/etc/pacman.conf"
            - "/etc/calamares/scripts/chrooted_cleaner_script.sh"
            - "/etc/calamares/scripts/remove-ucode"
            - "/etc/dracut.conf.d/eos-defaults.conf"
            - "/etc/skel/.bashrc"

to copy the file at the needed place “post install” on target chroot… before anything will get installed there…

you could simply inject a line into pacstrap.conf file on building ISO inside run_before_squashfs:

github.com

endeavouros-team/EndeavourOS-ISO/blob/main/run_before_squashfs.sh

#!/usr/bin/env bash

# Made by Fernando "maroto"
# Run anything in the filesystem right before being "mksquashed"
# ISO-NEXT specific cleanup removals and additions (08-2021 + 10-2021) @killajoe and @manuel
# refining and changes november 2021 @killajoe and @manuel

script_path=$(readlink -f "${0%/*}")
work_dir="work"

# Adapted from AIS. An excellent bit of code!
# all pathes must be in quotation marks "path/to/file/or/folder" for now.

arch_chroot() {
    arch-chroot "${script_path}/${work_dir}/x86_64/airootfs" /bin/bash -c "${1}"
}

do_merge() {

arch_chroot "$(cat << EOF

This file has been truncated. show original

using wget ot put it into the build structure may under: https://github.com/endeavouros-team/EndeavourOS-ISO/tree/main/airootfs/root