- Grml-devel - lists.mur.at

Helping grml to boot noninteractively into network and ssh
by Marc Haber 11 Jul '26

11 Jul '26

Hi everybody, grml is a rescue system. I use it as such, and I like it very much. I think from the very beginning of my usage of grml, I wanted a rescue system iso that can boot autonomously, with a serial console, automatically brings up the network (configuration fitting the machine) and installs credentials so that I can log in to the rescue system via ssh with known credentials. This should especially cater to systems that do not have remote console access, making it necessary to travel to the machine or use remote hands when the rescue system doesn't come up. I made various approaches, but always got tangled in complex procedures using mechanisms that were at best loosely documented. But finally, I have a successful approach and would like to document this here, and ask for your opinion about how to document this (maybe inside the grml wiki) to allow people to use this, and whether some of my examples or scripts would be suitable to inclusion in some grml repository. Let me know where and I'll file PRs. This has become way easier by grml now using grub for both BIOS and EFI. grub is something I understand reasonably well. And I recently learned that you just need a single xorriso call to remaster a grml.iso while adding ("mapping") files to the image. I have written a small shell script which can be used to easily and quickly rebuild the iso with files from a local directory added. It is even possible to override files from the iso by placing a file in the map directory. The idea is to have a grmlreplay-conf.sh in a directory and having a tree of files that would be mapped into the iso below that. grmlreplay can be invoked from anywhere in that tree and will cd upwards until grmlreplay_conf.sh is found. The paths to the isos can be absolute, so grmlreplay can directly store the modified image in a libvirt/images/cd directory to directly boot a VM from that without having to move the image. With this mechanism, it is possible to build an image that does what I want it to. For the early boot part, https://github.com/grml/grml-live/pull/547 from earlier today is needed. File names mentioned are all relative to the root of the iso, that's what 7zz l /path/to/grml.iso prints. (1) quick, noninteractive boot with serial console Sadly, the bootparams mechanism does not work for things that are needed on the kernel command line. It is thus necessary to poke those into the actual boot process: ------ /boot/grub/grub_local_custom_pre_entry.cfg serial --unit=0 --speed=115200 --word=8 --stop=1 --parity=no terminal_input console serial terminal_output console serial set timeout=5 set extraopts="nodhcp console=tty1 console=ttyS0,115200n8" ------ (without #547 merged, apply the patches from there to grml-live and put the resulting /boot/grub/grub.cfg and map/boot/grub/grmlsmallamd64_default.cfg into map/boot/grub as well) (2) scripts/grml.sh my map directory contains a scripts/grml.sh that controls the other special actions. The necessary snippets are given below. Maybe it would be a good idea to run-parts scripts/grml.d in addition to executing scripts/grml.sh so that different things could be invoked from different scripts. Please let me know if you'd want a PR for that. (3) why not GRMLCFG? I would have needed some examples to understand how this works. I'd also wanted to avoid having a dedicated partition for GRMLCFG, avoiding the need to reparition existing systems to be able to use my rescue image. I therefore did things differently and am pretty satisfied with the simplicity of the result. (4) network init This is the machine specific part and can only be in the iso if that iso is intended to be only for this machine. I implemented a more flexible way that executes a script from the EFI partition (which MUST be there or we wouldn't have gotten that far if our grml iso is chainloaded from another grub via grml-rescueboot). For a BIOS or CSM machine, another mechanism would be needed. ------ scripts/grml.sh snippet # excecute grml/network.sh from EFI partition # possible case issues here (fat32 can only have upper case # lebels). maybe look for partition type ESP instead? LABEL=esp DEVICE="$(blkid -t LABEL=$LABEL | cut -d: -f1)" if [ -z "$DEVICE" ]; then DEVICE="$(blkid -t PARTLABEL=$LABEL | cut -d: -f1)" fi MOUNTDIR="/run/live/esp" mkdir "${MOUNTDIR}" mount -o ro "${DEVICE}" "${MOUNTDIR}" if [ -e "${MOUNTDIR}/grml/network.sh" ]; then . "${MOUNTDIR}/grml/network.sh" fi umount "${MOUNTDIR}" rmdir "${MOUNTDIR}" ------ See an example grml/network.sh below. I might publish a python program soon that generates such a network.sh from the currently running system's network configuration. (5) authorized_keys I decided to have the authorized_keys for the grml and root user in authorized_keys.d. ------ scripts/grml.sh snippet MEDIUMDIR="/run/live/medium" # install ssh keys for tu in root grml; do hmd="$(getent passwd "$tu" | cut -d: -f6)" mkdir -p "${hmd}/.ssh" find "${MEDIUMDIR}"/authorized_keys.d -type f -print0 | \ xargs --no-run-if-empty --null cat > "${hmd}/.ssh/authorized_keys" chown "${tu}:${tu}" "${hmd}/.ssh" "${hmd}/.ssh/authorized_keys" done ------ (6) bootparams put a bootparams file into the iso that sets the password, starts ssh and allows grml.sh to run: ------ bootparams/zgrml-bootparams keyboard=de scripts ssh encpasswd=<passwordhash> ------ note that the encpasswd can be any hash, not just md5 as it is mentioned in some docs I found. Also note that some options are needed by the kernel and the bootparams file is only ready when the system is already running. I am happy to discuss all this and am looking forward to your feedback. Greetings Marc ------ grmlreplay #!/bin/bash set -euo pipefail CONFFILE="grmlreplay_conf.sh" while [ ! -f "${CONFFILE}" ]; do [ "$PWD" = / ] && { echo "${CONFFILE} not found" >&2 exit 1 } cd .. done . "${CONFFILE}" # --- sanity checks --- command -v xorriso >/dev/null || { echo "need xorriso installed" >&2; exit 1; } [ -f "$ORIG_ISO" ] || { echo "source iso not found: $ORIG_ISO" >&2; exit 1; } [ -d "$MAP_DIR" ] || { echo "add dir not found: $MAP_DIR" >&2; exit 1; } xorriso -indev "$ORIG_ISO" -pkt_output off 2>&1 | grep -i -E "joliet|rock ?ridge" # preserve original volume id (grml's live-boot looks for it) VOLID=$(xorriso -indev "$ORIG_ISO" -pkt_output off -find / -maxdepth 0 2>/dev/null \ | true; xorriso -indev "$ORIG_ISO" -pkt_output off 2>&1 \ | awk -F"'" '/Volume id/{print $2; exit}') [ -n "$VOLID" ] || VOLID="GRML_CUSTOM" rm -f "$NEW_ISO" xorriso \ -indev "$ORIG_ISO" \ -outdev "$NEW_ISO" \ -volid "$VOLID" \ -joliet on \ -rockridge on \ -map "$MAP_DIR" / \ -boot_image any replay \ -commit xorriso -indev "$NEW_ISO" -pkt_output off 2>&1 | grep -i -E "joliet|rock ?ridge" echo "Done: $NEW_ISO" ------ ------ example grmlreplay_conf.sh ORIG_ISO="/var/lib/libvirt/cd/grml-small-2026.04-amd64.iso" MAP_DIR="./map" NEW_ISO="/var/lib/libvirt/cd/zgrml-small-2026.04-amd64.iso" ------ ------ ESP:grml/network.sh #!/bin/sh set -u PROG=${0##*/} log() { printf '%s: %s\n' "$PROG" "$*" >&2; } die() { printf '%s: ERROR: %s\n' "$PROG" "$*" >&2; exit 1; } run_cmd() { log "+ $*" "$@" || die "command failed: $*" } command -v ip >/dev/null 2>&1 || die "ip(8) not found" # --- enp1s0 --- run_cmd ip link set dev enp1s0 up run_cmd ip addr replace 192.0.2.134/28 dev enp1s0 run_cmd ip addr replace 2001:db8::43:100/64 dev enp1s0 # --- routes --- run_cmd ip route replace default via 192.0.2.129 dev enp1s0 run_cmd ip route replace default via 2001:db8::1 dev enp1s0 metric 1024 ------ ------ example tree ./map/scripts/grml.sh ./map/authorized_keys.d/authorized_keys ./map/bootparams/zgrml-bootparams ./map/boot/grub/grub_local_custom_pre_entry.cfg ./grmlreplay_conf.sh ------ -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

1 0

Unit espeakup.service not found.
by John G. Heim 03 May '26

03 May '26

It seems the espeakup package has been left out of the latest version of Grml. root@hutson ~ # espeakup zsh: command not found: espeakup 127 root@hutson ~ # systemctl start espeakup Failed to start espeakup.service: Unit espeakup.service not found.

2 2

Grml ISO does not contain syslinux files
by John G. Heim 03 May '26

03 May '26

The --syslinux flag does not seem to work with Grml 2026.04. root@nitschke:/home/john/src/grml4speakup# grml2usb --syslinux --bootoptions="ssh=mysecret" grml-full-2026.04-amd64.iso /dev/sda1 Executing grml2usb version 0.20.13 Using syslinux as bootloader Checking for boot flag Using ISO grml-full-2026.04-amd64.iso Identified grml flavour "grml-full-amd64". Copying files. This might take a while.... ISO does not contain syslinux files (logo.16 not found). Falling back to GRUB for BIOS boot. No /boot/grub/grub.cfg found inside EFI image, looks like Secure Boot support is missing. Skipping syslinux installation, ISO does not support it Synching data (this might take a while)

2 1

Grml - new stable release 2026.04 available
by Michael Prokop 02 May '26

02 May '26

Hi, for all your Spring computer recovery needs, we've got something: Grml 2026.04 with codename "CashFloh" is there! More information about this release is available in the release notes here: https://grml.org/changelogs/README-grml-2026.04/ Grab the latest Grml ISO(s) and spread the word: https://grml.org/download/ If you should notice any bugs please let us know: https://grml.org/bugs/ We welcome constructive feedback, suggestions for improvement and your contributions, please just reach out to us: https://grml.org/contact/ Thanks to everyone contributing to Grml and this release! Take care and happy Grml-ing! -mika- - for the Grml project

2 1

Grml - new stable release 2025.12 available
by Michael Prokop 12 Dec '25

12 Dec '25

Hi, for all your Christmas computer recovery needs, we've got something: Grml 2025.12 with codename "Postwurfsendung" is there! More information about this release is available in the release notes here: https://grml.org/changelogs/README-grml-2025.12/ Grab the latest Grml ISO(s) and spread the word: https://grml.org/download/ If you should notice any bugs please let us know: https://grml.org/bugs/ We welcome constructive feedback, suggestions for improvement and your contributions, please just reach out to us: https://grml.org/contact/ Thanks to everyone contributing to Grml and this release! Take care and happy Grml-ing! -mika- - for the Grml project

1 0

Sunset deb.grml.org?
by Michael Prokop 17 Aug '25

17 Aug '25

Hi, we're considering to deprecate our Debian repositories at deb.grml.org. We collected notes behind the idea at https://github.com/orgs/grml/discussions/246 and would appreciate feedback regarding our plan. Do we have any users of deb.grml.org, who might want to add their feedback, f.e. why and how you're using deb.grml.org, and whether our plan makes sense for you? Or are we maybe even overlooking something, which should prevent us from sunsetting deb.grml.org? Thanks! :) regards -mika-

1 0

Grml - new stable release 2025.08 available
by Michael Prokop 16 Aug '25

16 Aug '25

Hi, today we celebrate 32 years of Debian, and we bring you a new Grml release on top of that, based on brand new Debian trixie! Grml 2025.08 with codename "Oneinonein" is there! More information about this release is available in the release notes here: https://grml.org/changelogs/README-grml-2025.08/ Grab the latest Grml ISO(s) and spread the word: https://grml.org/download/ If you should notice any bugs please let us know: https://grml.org/bugs/ We welcome constructive feedback, suggestions for improvement and your contributions, please just reach out to us: https://grml.org/contact/ Thanks to everyone contributing to Grml and this release! Take care and happy Grml-ing! -mika- - for the Grml project

1 0

Grml - new stable release 2025.05 available
by Michael Prokop 20 May '25

20 May '25

Hi, Debian hard freezes today? We bring you a new Grml release on top of that! Grml 2025.05 with codename "Nudlaug" is there! More information about this release is available in the release notes here: https://grml.org/changelogs/README-grml-2025.05/ Grab the latest Grml ISO(s) and spread the word: https://grml.org/download/ If you should notice any bugs please let us know: https://grml.org/bugs/ We welcome constructive feedback, suggestions for improvement and your contributions, please just reach out to us: https://grml.org/contact/ Thanks to everyone contributing to Grml and this release! Take care and happy Grml-ing! -mika- - for the Grml project

2 1

FYI: Grml mailing lists migrated
by Michael Prokop 11 Apr '25

11 Apr '25

Hi, we try to minimize our infrastructure work, and the folks of mur.at (an organisation for promotion of network art in Graz/Austria) were so kind and are willing to host our Grml mailing lists. We're in the process of finalizing the migration. If this mail arrives in your mailbox, it could mean that (most of) the migration was a success. :) If you should notice any problems with our mailing, please reach out (see https://grml.org/contact/ for all kinds of options). Special credits to Wolfgang from mur.at! regards -mika-

1 0

Recent changes in grml-live + Discord server
by Michael Prokop 31 Jan '25

31 Jan '25

Hi Grml folks! If you're a user of grml-live (our build tool used for generating Grml ISOs), I'd like to draw your attention to some recent development: 1) In our latest release v0.52.0 we replaced FAI within grml-live with our own implementation called "minifai": https://github.com/grml/grml-live/commit/75203a3166825e59e05e7e1ec103ec4693… It's meant to be backwards compatible, so best case *you* don't even notice the change. :) 2) Furthermore, now that we got rid of FAI and gain options we couldn't have so far, we're working on a redesign of grml-live: https://github.com/grml/grml-live/issues/267 If you should note any issues for your use cases, or have any further constructive feedback, we'd like to hear from you! :) And while at it, we're currently evaluating usage of Discord as communication channel, so feel free to join our Grml discord server: https://discord.gg/pVjWyuEn regards -mika-

1 0