#!/bin/sh
# auto/config - live-build configuration for the bty live env.
#
# live-build invokes this script when (re)configuring the build dir
# (typically the first ``lb build`` run, and again whenever ``lb build``
# itself calls ``lb config``). Encodes our lb config args: Debian
# trixie, amd64, no debian-installer, no memtest, no apt recommends,
# no security.
#
# Two output modes, switched by the ``BTY_USB_ISO`` environment
# variable:
#
#   - **default (netboot)**: kernel + initrd + squashfs trio for the
#     ``live-x86`` PXE-flash flow. Server hosts these three files
#     over HTTP and clients chain into them via iPXE.
#   - **BTY_USB_ISO=1 (iso-hybrid)**: hybrid ISO image bootable from
#     CD or USB stick (BIOS + UEFI). Used by the ``usb-iso`` variant.
#     Adds ``--bootloaders syslinux,grub-efi`` for dual-firmware boot
#     and ``bty.mode=interactive`` to the kernel cmdline so
#     ``bty-tui-on-tty1.service`` fires on USB boot the same way it
#     fires for the PXE-tui flow.
#
# Both modes use the same chroot package set + hooks; only the binary
# packaging differs. ``lb build`` re-runs this script during its
# internal ``lb config`` step, so the env var must be set in the
# build invocation's environment - not just at the initial config
# call. ``cijoe/scripts/usb_iso_build.py`` does this via ``sudo env
# BTY_USB_ISO=1 lb build``.
#
# Requires live-build 20240208+ (Debian trixie or newer) which
# fetches ``dists/<release>/main/Contents-<arch>.gz`` from the
# per-component layout Debian now publishes. Ubuntu's stock
# live-build 20230502 still uses the obsolete top-level URL and
# 404s on every active Debian release; release.yml's live job
# pulls the trixie .deb explicitly to work around that.
set -e

if [ "${BTY_USB_ISO:-}" = "1" ]; then
    BINARY_IMAGES=iso-hybrid
    BOOTLOADERS_OPTS="--bootloaders syslinux,grub-efi"
    # ``splash`` triggers plymouth to render the bty boot splash
    # (see ``hooks/normal/0950-bty-plymouth.hook.chroot``). Without
    # it the kernel scrolls boot messages over our suppressed
    # bootloader menu, which works but doesn't show bty branding
    # during the kernel boot window.
    BOOTAPPEND="boot=live components quiet splash noeject bty.mode=interactive bty.version=__BTY_VERSION__"
else
    BINARY_IMAGES=netboot
    BOOTLOADERS_OPTS=""
    BOOTAPPEND="boot=live components quiet splash noeject bty.version=__BTY_VERSION__"
fi

# shellcheck disable=SC2086 # BOOTLOADERS_OPTS is intentionally word-split
lb config noauto \
    --mode debian \
    --distribution trixie \
    --architectures amd64 \
    --archive-areas "main non-free-firmware" \
    --firmware-chroot true \
    --binary-images "${BINARY_IMAGES}" \
    --debian-installer none \
    --memtest none \
    --apt-recommends false \
    --security false \
    ${BOOTLOADERS_OPTS} \
    --bootappend-live "${BOOTAPPEND}" \
    "${@}"
# ``--archive-areas "main non-free-firmware"`` unlocks the
# ``firmware-*`` packages. Default areas are just ``main``, which
# silently drops every firmware blob and produces a live env where
# i915 wedges the GPU on probe and certain NIC / WiFi chipsets fail
# to load. Debian split ``non-free-firmware`` out of ``non-free``
# in bookworm precisely so this archive can be enabled on its own.
#
# ``--firmware-chroot true`` pulls ``firmware-linux-nonfree`` (a
# metapackage that Depends on EVERY individual nonfree ``firmware-*``
# package: realtek, iwlwifi, atheros, brcm80211, mediatek, ath11k,
# bnx2/bnx2x, netronome, nvidia-graphics, amd-graphics, and a long
# tail of server-NIC + old-WiFi blobs). The size cost (~300 MiB
# compressed) buys "boots on whatever bare-metal box the operator
# points it at" -- the alternative is the operator hits a missing
# firmware -> driver init failure -> dead NIC and can't proceed.
# Trimming back to a curated list was tried earlier; recurring
# Realtek / WiFi failures on consumer mini-PCs drove the reversal.
# The trixie-backports archive layered via
# ``config/archives/backports.list.chroot`` plus the pin in
# ``config/preferences/backports.pref.chroot`` makes apt pull the
# newest kernel + firmware Debian ships, not just trixie's.
# Note: an earlier iteration tried ``--syslinux-timeout 1`` here per
# advice from elsewhere; live-build trixie (20250814) doesn't
# recognise that flag and ``lb config`` errors out. Bootloader-menu
# suppression is handled in
# ``hooks/binary/0500-bty-skip-bootloader-menu.hook.binary`` instead.
