macs: build clover.qcow2 ourselves

NixOS · Jun 5, 2019 · 341d72a · 341d72a
1 parent 63cb172
commit 341d72a
Show file tree

Hide file tree

Showing 6 changed files with 123 additions and 34 deletions.
diff --git a/delft/network.nix b/delft/network.nix
@@ -18,7 +18,6 @@ let
         zvolName = "rpool/mac-hdd-2-initial-setup-startup-script.img";
         ovmfCodeFile = ../macs/dist/OVMF_CODE.fd;
         ovmfVarsFile = ../macs/dist/OVMF_VARS-1024x768.fd;
-        cloverImage = ../macs/dist/Clover.qcow2;
         guestConfigDir = ../macs/guest;
       };
     };

diff --git a/macs/build.nix b/macs/build.nix
diff --git a/macs/dist/Clover.qcow2 b/macs/dist/Clover.qcow2
diff --git a/macs/dist/config.plist.template b/macs/dist/config.plist.template
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>Boot</key>
+	<dict>
+		<key>Arguments</key>
+		<string>@params@</string>
+		<key>DefaultVolume</key>
+		<string>system</string>
+		<key>Log</key>
+		<true/>
+		<key>Secure</key>
+		<false/>
+		<key>Timeout</key>
+		<integer>@timeout@</integer>
+	</dict>
+	<key>GUI</key>
+	<dict>
+		<key>Scan</key>
+		<dict>
+			<key>Entries</key>
+			<true/>
+			<key>Tool</key>
+			<true/>
+		</dict>
+		<key>ScreenResolution</key>
+		<string>@resolution@</string>
+		<key>Theme</key>
+		<string>embedded</string>
+	</dict>
+	<key>RtVariables</key>
+	<dict>
+		<key>BooterConfig</key>
+		<string>0x28</string>
+		<key>CsrActiveConfig</key>
+		<string>@csrFlag@</string>
+	</dict>
+	<key>SMBIOS</key>
+	<dict>
+		<key>Trust</key>
+		<false/>
+	</dict>
+	<key>SystemParameters</key>
+	<dict>
+		<key>InjectKexts</key>
+		<false/>
+		<key>InjectSystemID</key>
+		<true/>
+	</dict>
+</dict>
+</plist>
+
diff --git a/macs/host/clover.qcow2.nix b/macs/host/clover.qcow2.nix
@@ -0,0 +1,64 @@
+{ lib
+, runCommand
+, fetchurl
+, libguestfs
+, libguestfs-appliance
+, resolution ? "1024x768"
+, csrFlag ? "0x3"
+, params ? "-v"
+, timeout ? "3"
+# https://github.com/Clover-EFI-Bootloader/clover/blob/6b8018b1fec958d672951f87cefd8b6cfd5318ac/rEFIt_UEFI/Platform/boot.h#L127-L135
+}:
+
+lib.fix (self: {
+  clover-image = runCommand "clover.qcow2" {
+    buildInputs = [ libguestfs ];
+    inherit resolution csrFlag params timeout;
+    LIBGUESTFS_PATH = libguestfs-appliance;
+  } ''
+    export HOME=$NIX_BUILD_TOP
+    mkdir work
+    cp --no-preserve=mode ${self.clover-iso} clover.iso
+    guestfish -a clover.iso -m "/dev/sda:/:norock" <<EOF
+    copy-out /EFI work
+    EOF
+    eval $(guestfish --listen)
+    guestfish --remote disk-create clover2.img qcow2 256M
+    guestfish --remote add clover2.img
+    time guestfish --remote run
+    guestfish --remote part-init /dev/sda gpt
+    guestfish --remote part-add /dev/sda p 2048 200000
+    guestfish --remote -- part-add /dev/sda p 202048 -2048
+    guestfish --remote part-set-gpt-type /dev/sda 1 C12A7328-F81F-11D2-BA4B-00A0C93EC93B
+    guestfish --remote part-set-bootable /dev/sda 1 true
+    guestfish --remote mkfs vfat /dev/sda1 label:EFI
+    guestfish --remote mkfs vfat /dev/sda2 label:clover
+    guestfish --remote mount /dev/sda2 /
+    guestfish --remote mkdir /ESP
+    guestfish --remote mount /dev/sda1 /ESP
+    guestfish --remote mkdir /ESP/EFI
+    guestfish --remote mkdir /ESP/EFI/CLOVER
+    guestfish --remote copy-in work/EFI/BOOT /ESP/EFI
+    guestfish --remote copy-in work/EFI/CLOVER/CLOVERX64.efi /ESP/EFI/CLOVER
+    guestfish --remote copy-in work/EFI/CLOVER/drivers64UEFI /ESP/EFI/CLOVER
+    guestfish --remote copy-in work/EFI/CLOVER/drivers-Off/drivers64UEFI/PartitionDxe-64.efi /ESP/EFI/CLOVER/drivers64UEFI
+    guestfish --remote copy-in work/EFI/CLOVER/drivers-Off/drivers64UEFI/ApfsDriverLoader-64.efi /ESP/EFI/CLOVER/drivers64UEFI
+    guestfish --remote copy-in work/EFI/CLOVER/drivers-Off/drivers64UEFI/OsxAptioFix3Drv-64.efi /ESP/EFI/CLOVER/drivers64UEFI
+    guestfish --remote copy-in work/EFI/CLOVER/tools /ESP/EFI/CLOVER
+    substituteAll ${./config.plist.template} work/config.plist
+    guestfish --remote copy-in work/config.plist /ESP/EFI/CLOVER
+    guestfish --remote rm /ESP/EFI/CLOVER/drivers64UEFI/AudioDxe-64.efi
+    guestfish --remote umount-all
+    guestfish --remote shutdown
+    mv clover2.img $out
+  '';
+  cloverVersion = "4934";
+  clover-iso-lzma = fetchurl {
+    url = "mirror://sourceforge/cloverefiboot/CloverISO-${self.cloverVersion}.tar.lzma";
+    sha256 = "0ivwaapgir2yvsyp7gi9ddj6r97j99n99cz0xwqhcrijimp06hcl";
+  };
+  clover-iso = runCommand "clover.iso" {} ''
+    tar -xvf ${self.clover-iso-lzma}
+    mv -v *.iso $out
+  '';
+})
diff --git a/macs/host/default.nix b/macs/host/default.nix
@@ -1,5 +1,5 @@
 
-{ lib, config, ... }:
+{ pkgs, lib, config, ... }:
 let
   inherit (lib) mkOption types;
 in {
@@ -197,6 +197,11 @@ in {
 
         cloverImage = mkOption {
           type = types.path;
+          default = pkgs.callPackage ./clover.qcow2.nix {
+            # 0x23 means allow dtrace and untrusted kexts
+            # https://github.com/Clover-EFI-Bootloader/clover/blob/6b8018b1fec958d672951f87cefd8b6cfd5318ac/rEFIt_UEFI/Platform/boot.h#L127-L135
+            csrFlag = "0x23";
+          };
           description = ''
             Path to the Clover bootloader.
           '';