2017-05-07 00:54:36 -04:00
-investigate weird signing issue- if you specify a key to sign with, it appears that the squashed images (at least in the http dir) doesn't have a sig/asc. do they need to copy it over? or is it not even signing them?
2017-10-01 12:09:14 -04:00
-switch from python-pygpgme to python-gpgme for better performance. also clean up bGPG in general; reference KANT.
2017-10-16 03:37:10 -04:00
-more pythonic! classes (because inits help), use list or tuple constant for checksums, try vars-ing the configparser stuff (and move defaults to in-code?),
change path combinations to use os.path.join etc.
2017-05-07 00:54:36 -04:00
2016-11-28 02:56:15 -05:00
-i_am_a_racecar optimizations
2017-03-26 12:30:56 -04:00
- different distro guests (debian, etc.)- https://stackoverflow.com/questions/2349991/python-how-to-import-other-python-files/20749411#20749411
2016-12-30 19:57:34 -05:00
-incorporate this into the manual?
-TFTP configs generated for pxelinux
2016-12-14 01:31:51 -05:00
-fix the branding, etc. on ipxe. :(
2016-12-17 15:16:09 -05:00
-add ipxe to full iso maybe?
2015-04-21 00:18:23 -04:00
-include benchmarking
-- http://sourceforge.net/projects/unixbench/
-- https://code.google.com/p/byte-unixbench/
-- https://github.com/akopytov/sysbench
-- (http://blog.due.io/2014/linode-digitalocean-and-vultr-comparison/ etc.)
2017-03-06 03:21:23 -05:00
-There *has* to be a better way of handling package installation in the chroots.
--implement pyalpm to decreate dependency on chroot pacman-ing?
2016-12-03 06:07:41 -05:00
--or even maybe https://wiki.archlinux.org/index.php/offline_installation_of_packages in pure python!
2016-12-04 14:27:23 -05:00
-set up automatic exporting to PDF of the user manual server-side. https://pypi.python.org/pypi/unoconv/0.6
2016-12-09 12:41:17 -05:00
-maybe remove lxde, firefox, chrome and replace with enlightenment/midori?
2016-12-13 23:43:53 -05:00
-custom repo? https://brainwreckedtech.wordpress.com/2013/01/27/making-your-own-arch-linux-repository/
2017-03-06 03:21:23 -05:00
--https://wiki.archlinux.org/index.php/Building_32-bit_packages_on_a_64-bit_system # NOTE: arch has dropped i686, now continued as archlinux32
2016-12-19 23:14:10 -05:00
-implement better "additional" packages list. specify for path in build.ini- these should be more easily changed by end users. DON'T TOUCH iso.pkgs.lst since those are necessary for booting.
2017-03-06 03:21:23 -05:00
-automatic shorewall/some other firewall?
2014-12-19 14:13:30 -05:00
-autodetection/configuration of network. DHCP is currently running by default, but does it need to support IPv6? if so, how would the user configure their network?
2015-05-15 02:48:35 -04:00
-DISABLE NETWORKMANAGER AND "fi.w1.wpa_supplicant1"??? keeps spawning wpa_supplicant (and thusly killing networking proper)
2016-12-30 19:57:34 -05:00
-for netboot, custom user agent (should be defined by build.ini)
2015-07-09 22:02:03 -04:00
--iPXE's curl
--initrd's curl
2016-12-30 19:57:34 -05:00
-WISH: Better logging/debugging
2016-11-28 02:56:15 -05:00
-WISH: signing for secureboot releases (PreLoader and loader.efi handle this okay, but require manual intervention)
-does loader.efi support splash backgrounds? can i implement that differently somehow?
2015-08-27 20:57:45 -04:00
--yes, see e.g. https://www.reddit.com/r/archlinux/comments/3bwgf0/where_put_the_splasharchbmp_to_splash_screen_boot/
2017-03-06 03:21:23 -05:00
-strip out/remove unnecessary and orphan packages (e.g. gcc, make, automake, etc.) before building ISO
2015-07-05 04:33:33 -04:00
-incorporate iPXE tweaks:
2015-09-23 15:27:49 -04:00
--http://ipxe.org/crypto
2015-06-29 12:44:57 -04:00
--http://ipxe.org/cmd/imgtrust
--http://ipxe.org/cmd/imgverify
2016-11-28 02:56:15 -05:00
--enable use of custom CA/self-signed certs for HTTPS etc.
--signed kernel and initrd for ipxe:
---#imgtrust --permanent
---#imgverify vmlinuz path/to/vmlinuz.sig
---#imgverify initrd path/to/initrd.sig
---DONE, partially. need to incorporate codesign certs/keys. routines, conf variables
2015-08-17 02:07:46 -04:00
-enable mirror= kernel commandline.
2017-03-06 03:21:23 -05:00
-NOTE: Following should be implemented via AIF-NG (https://git.square-r00t.net/AIF-NG, work pending for fix to BDisk for i686/x86_64 split)
2015-08-17 02:07:46 -04:00
--if mirror_(NAME) is present, use that as repo name.
--if it starts with /, treat as mirrorlist (Include); otherwise use Server =
--if it has mirror_SIG-X, set signature options e.g. _SIG-N would be "SigLevel = Never"
2015-08-21 14:45:51 -04:00
-iPXE background support. sed -rf "${BASEDIR}/src/ipxe_local/script.sed" ${SRCDIR}/ipxe/src/config/general.h ; sed -rf "${BASEDIR}/src/ipxe_local/script2.sed" ${SRCDIR}/ipxe/src/config/console.h
2016-11-28 02:56:15 -05:00
--note that iPXE VESAFB console is not (yet) supported in EFI, so this is on hold. check into this to see if it has changed.
2015-07-05 04:33:33 -04:00
-include WinMTR, build Mac OS X MTR for dist/tools on CD
-include pre-compiled LibreCrypt for opening LUKS parts on Windows (https://github.com/t-d-k/LibreCrypt)
2017-03-26 12:30:56 -04:00
--curl -s https://raw.githubusercontent.com/t-d-k/LibreCrypt/master/README.md | egrep 'InstallLibreCrypt_v[A-Za-z0-9\.]*.exe' | cut -f2 -d'"'
