archr/Arch-R
0
0
Fork 0
mirror of https://github.com/archr-linux/Arch-R.git synced 2026-07-12 18:19:42 -07:00
Code Issues Packages Projects Releases Wiki Activity
Files
e8fd3a6c43e772066ebb89030eb619d1e4f8bbab
Arch-R/projects/ArchR/packages/sysutils/systemd/package.mk
T
Douglas Teles e8fd3a6c43 perf: corrigir gaps detectados via SSH no R36S 
5 ganhos mensuráveis identificados rodando o sistema vivo:

1. /etc/sysctl.d → /storage/.config/sysctl.d, e systemd-sysctl roda
   Before=sysinit.target — /storage só monta em local-fs.target. O
   symlink ficava dangling quando systemd-sysctl lia, então archr.conf
   (BBR/fq_codel, vm.dirty_writeback_centisecs=1500, ip_forward, etc.)
   nunca era aplicado no boot. Verificado: rodando sysctl -p manual
   depois do boot, dirty_writeback_centisecs vai de 500 → 1500.
   Replicar os defaults da distro em /usr/lib/sysctl.d (rootfs, sempre
   disponível) garante aplicação antes de /storage subir; o /etc/
   sysctl.d permanece como ponto de override do usuário.

2. enable.turbo-mode=1 em system.cfg padrão. A baseline validada do
   R36S inclui CPU turbo @ 1512 MHz via cpufreq/boost (vdd_arm
   regulator-max=1.45V), mas o default era 0 — clamp em 1416 MHz
   sem opt-in. O nó scaling_max_freq sobe para 1512000 assim que
   boost=1, comprovado live no device. Quem precisar do clamp
   térmico de 1416 desliga via Settings > Advanced.

3. rpcbind.service rodando idle custava ~11 MB de RAM em um device
   com 1 GB total, sem nada usando NFS. O upstream já fornece
   rpcbind.socket (Listen :111 + /run/rpcbind.sock) e systemd faz
   activation on-demand — mount.nfs dispara o daemon quando o user
   realmente monta um share. Trocado enable_service rpcbind.service
   por rpcbind.socket.

4. archr-touchscreen-keyboard ficava acordando a cada 5s mesmo em
   devices sem touchscreen (R36S, R33S, etc), e com Restart=always
   um exit do helper provocava restart infinito. Adicionado bail-out
   precoce quando DEVICE_HAS_TOUCHSCREEN != true, e Restart trocado
   para on-failure para honrar o exit limpo. Em devices sem
   touchscreen o serviço passa a ficar inativo após o primeiro boot.

5. setrootpass cryptpw sha512 + smbpasswd + syncthing generate
   custavam ~6s a cada boot — chamado pelo autostart 007-rootpw com a
   senha já configurada. Adicionado short-circuit que compara o hash
   sha256 da senha contra o cache em /storage/.cache/.archr-rootpass.
   sha256: se nada mudou, sai em 20ms.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-24 11:37:36 -03:00

341 lines
14 KiB
Makefile
Raw Blame History

# SPDX-License-Identifier: GPL-2.0-or-later
# Copyright (C) 2009-2016 Stephan Raue (stephan@openelec.tv)
# Copyright (C) 2018-present Team LibreELEC (https://libreelec.tv)
PKG_NAME="systemd"
PKG_VERSION="255.8"
PKG_LICENSE="LGPL2.1+"
PKG_SITE="http://www.freedesktop.org/wiki/Software/systemd"
PKG_URL="https://github.com/systemd/systemd-stable/archive/v${PKG_VERSION}.tar.gz"
PKG_DEPENDS_TARGET="toolchain libcap kmod util-linux libidn2 Python3:host Jinja2:host pcre2 zstd libgcrypt openssl"
PKG_LONGDESC="A system and session manager for Linux, compatible with SysV and LSB init scripts."
PKG_MESON_OPTS_TARGET="--libdir=/usr/lib \
-Drootprefix=/usr \
-Dsplit-usr=false \
-Dsplit-bin=true \
-Ddefault-hierarchy=hybrid \
-Dtty-gid=5 \
-Dtests=false \
-Dseccomp=false \
-Dselinux=false \
-Dapparmor=false \
-Dpolkit=false \
-Dacl=false \
-Daudit=false \
-Dblkid=true \
-Dfdisk=false \
-Dkmod=true \
-Dpam=false \
-Dpwquality=false \
-Dmicrohttpd=false \
-Dlibcryptsetup=false \
-Dlibcurl=false \
-Dlibidn=false \
-Dlibidn2=true \
-Dlibiptc=false \
-Dqrencode=false \
-Dgcrypt=true \
-Dgnutls=false \
-Dopenssl=true \
-Dp11kit=false \
-Delfutils=false \
-Dzlib=false \
-Dbzip2=false \
-Dxz=false \
-Dlz4=false \
-Dxkbcommon=false \
-Dpcre2=true \
-Dglib=false \
-Ddbus=false \
-Ddefault-dnssec=no \
-Dimportd=false \
-Dremote=false \
-Dutmp=true \
-Dhibernate=false \
-Denvironment-d=false \
-Dbinfmt=true \
-Drepart=false \
-Dcoredump=false \
-Dresolve=true \
-Dlogind=true \
-Dhostnamed=true \
-Dlocaled=false \
-Dmachined=false \
-Dportabled=false \
-Duserdb=false \
-Dhomed=false \
-Dnetworkd=false \
-Dtimedated=true \
-Dtimesyncd=true \
-Dfirstboot=false \
-Drandomseed=false \
-Dbacklight=false \
-Dvconsole=false \
-Dquotacheck=false \
-Dsysusers=false \
-Dtmpfiles=true \
-Dhwdb=true \
-Drfkill=true \
-Dldconfig=false \
-Defi=false \
-Dtpm=false \
-Dima=false \
-Dsmack=false \
-Dgshadow=false \
-Didn=false \
-Dnss-myhostname=false \
-Dnss-mymachines=false \
-Dnss-resolve=true \
-Dnss-systemd=false \
-Dman=false \
-Dhtml=false \
-Dlink-udev-shared=true \
-Dlink-systemctl-shared=true \
-Dlink-networkd-shared=false \
-Dbashcompletiondir=no \
-Dzshcompletiondir=no \
-Dkmod-path=/usr/bin/kmod \
-Dmount-path=/usr/bin/mount \
-Dumount-path=/usr/bin/umount \
-Dversion-tag=${PKG_VERSION} \
-Dc_args=-D__counted_by\(x\)\= \
-Dcpp_args=-D__counted_by\(x\)\="
if [ -n "${BUILD_WITH_DEBUG}" ]
then
PKG_MESON_OPTS_TARGET+=" -Ddebug-tty=${DEBUG_TTY}"
fi
pre_configure_target() {
export TARGET_CFLAGS=$(echo ${TARGET_CFLAGS} | sed -e "s|-O.|-O3|g")
export TARGET_LDFLAGS=$(echo ${TARGET_LDFLAGS} | sed -e "s|-O.|-O3|g")
export TARGET_CFLAGS="${TARGET_CFLAGS} -fno-schedule-insns -fno-schedule-insns2 -Wno-format-truncation"
export LC_ALL=en_US.UTF-8
}
post_makeinstall_target() {
# remove unneeded stuff
safe_remove ${INSTALL}/etc/init.d
safe_remove ${INSTALL}/etc/systemd/system
safe_remove ${INSTALL}/etc/xdg
safe_remove ${INSTALL}/etc/X11
safe_remove ${INSTALL}/usr/bin/kernel-install
safe_remove ${INSTALL}/usr/lib/kernel/install.d
safe_remove ${INSTALL}/usr/lib/rpm
safe_remove ${INSTALL}/usr/lib/systemd/user
safe_remove ${INSTALL}/usr/lib/tmpfiles.d/etc.conf
safe_remove ${INSTALL}/usr/lib/tmpfiles.d/home.conf
safe_remove ${INSTALL}/usr/share/factory
# remove Network adaper renaming rule, this is confusing
safe_remove ${INSTALL}/usr/lib/udev/rules.d/80-net-setup-link.rules
safe_remove ${INSTALL}/usr/lib/udev/rules.d/71-seat.rules
safe_remove ${INSTALL}/usr/lib/udev/rules.d/73-seat-late.rules
# remove getty units, we dont want a console
safe_remove ${INSTALL}/usr/lib/systemd/system/autovt@.service
safe_remove ${INSTALL}/usr/lib/systemd/system/console-getty.service
safe_remove ${INSTALL}/usr/lib/systemd/system/container-getty@.service
safe_remove ${INSTALL}/usr/lib/systemd/system/getty.target
safe_remove ${INSTALL}/usr/lib/systemd/system/getty@.service
safe_remove ${INSTALL}/usr/lib/systemd/system/serial-getty@.service
safe_remove ${INSTALL}/usr/lib/systemd/system/*.target.wants/getty.target
# remove other notused or nonsense stuff (our /etc is ro)
safe_remove ${INSTALL}/usr/lib/systemd/systemd-update-done
safe_remove ${INSTALL}/usr/lib/systemd/system/systemd-update-done.service
safe_remove ${INSTALL}/usr/lib/systemd/system/*.target.wants/systemd-update-done.service
safe_remove ${INSTALL}/usr/lib/systemd/system/dev-hugepages.mount
safe_remove ${INSTALL}/usr/lib/systemd/system/*.target.wants/dev-hugepages.mount
safe_remove ${INSTALL}/usr/lib/systemd/system/systemd-journald-audit.socket
# Pre-build hwdb.bin at image creation so systemd-hwdb-update.service
# doesn't have to rebuild it on every boot (was costing ~4.4s in
# systemd-analyze blame). The file format is arch-independent so the
# host's systemd-hwdb is safe to use. The override.conf in
# system.d/systemd-hwdb-update.service.d makes the service a no-op at
# runtime; this step ensures the binary db is present for udev.
if command -v systemd-hwdb >/dev/null; then
systemd-hwdb --usr --root=${INSTALL} update || true
fi
# remove nspawn
safe_remove ${INSTALL}/usr/bin/systemd-nspawn
safe_remove ${INSTALL}/usr/lib/systemd/system/systemd-nspawn@.service
# remove unneeded generators
for gen in ${INSTALL}/usr/lib/systemd/system-generators/*; do
case "${gen}" in
*/systemd-debug-generator)
# keep it
;;
*)
safe_remove "${gen}"
;;
esac
done
# remove catalog
safe_remove ${INSTALL}/usr/lib/systemd/catalog
# remove partition
safe_remove ${INSTALL}/usr/lib/systemd/systemd-growfs
safe_remove ${INSTALL}/usr/lib/systemd/systemd-makefs
# distro preset policy
safe_remove ${INSTALL}/usr/lib/systemd/system-preset/*
echo "disable *" > ${INSTALL}/usr/lib/systemd/system-preset/99-default.preset
safe_remove ${INSTALL}/usr/lib/systemd/user-preset/*
echo "disable *" > ${INSTALL}/usr/lib/systemd/user-preset/90-systemd.preset
# remove networkd
safe_remove ${INSTALL}/usr/lib/systemd/network
# remove systemd-time-wait-sync (not detecting slew time updates, using package wait-time-sync)
safe_remove ${INSTALL}/usr/lib/systemd/system/systemd-time-wait-sync.service
safe_remove ${INSTALL}/usr/lib/systemd/systemd-time-wait-sync
# tune journald.conf - volatile storage (RAM only, no SD writes)
sed -e "s,^.*Storage=.*$,Storage=volatile,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*Compress=.*$,Compress=no,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*MaxFileSec=.*$,MaxFileSec=0,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*MaxRetentionSec=.*$,MaxRetentionSec=0,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*RuntimeMaxUse=.*$,RuntimeMaxUse=2M,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*RuntimeMaxFileSize=.*$,RuntimeMaxFileSize=128K,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*SplitMode=.*$,SplitMode=none,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*SystemMaxUse=.*$,SystemMaxUse=10M,g" -i ${INSTALL}/etc/systemd/journald.conf
if [ "${BUILD_WITH_DEBUG}" = "yes" ]; then
sed -e "s,^.*ForwardToConsole=.*$,ForwardToConsole=yes,g" -i ${INSTALL}/etc/systemd/journald.conf
sed -e "s,^.*TTYPath=.*$,TTYPath=${DEBUG_TTY},g" -i ${INSTALL}/etc/systemd/journald.conf
fi
# tune logind.conf
sed -e "s,^.*HandleLidSwitch=.*$,HandleLidSwitch=suspend,g" -i ${INSTALL}/etc/systemd/logind.conf
sed -e "s,^.*HandlePowerKey=.*$,HandlePowerKey=suspend,g" -i ${INSTALL}/etc/systemd/logind.conf
# SYSTEMD-RESOLVED CONFIGURATION
sed -i 's/^#MulticastDNS=yes/MulticastDNS=no/' ${INSTALL}/etc/systemd/resolved.conf || echo "MulticastDNS=no" >> ${INSTALL}/etc/systemd/resolved.conf
# FALLBACK DNS (Mixed Google/Cloudflare Anycast)
sed -i 's/^#FallbackDNS=.*/FallbackDNS=8.8.8.8 1.1.1.1 2001:4860:4860::8888 2606:4700:4700::1111/' ${INSTALL}/etc/systemd/resolved.conf || echo "FallbackDNS=8.8.8.8 1.1.1.1 2001:4860:4860::8888 2606:4700:4700::1111" >> ${INSTALL}/etc/systemd/resolved.conf
# replace systemd-machine-id-setup with ours
safe_remove ${INSTALL}/usr/lib/systemd/system/systemd-machine-id-commit.service
safe_remove ${INSTALL}/usr/lib/systemd/system/*.target.wants/systemd-machine-id-commit.service
safe_remove ${INSTALL}/usr/bin/systemd-machine-id-setup
mkdir -p ${INSTALL}/usr/bin
cp ${PKG_DIR}/scripts/systemd-machine-id-setup ${INSTALL}/usr/bin
cp ${PKG_DIR}/scripts/userconfig-setup ${INSTALL}/usr/bin
cp ${PKG_DIR}/scripts/usercache-setup ${INSTALL}/usr/bin
mkdir -p ${INSTALL}/usr/sbin
cp ${PKG_DIR}/scripts/network-base-setup ${INSTALL}/usr/sbin
cp ${PKG_DIR}/scripts/systemd-timesyncd-setup ${INSTALL}/usr/sbin
# /etc/resolv.conf and /etc/hosts must be writable
ln -sf /run/archr/resolv.conf ${INSTALL}/etc/resolv.conf
ln -sf /run/archr/hosts ${INSTALL}/etc/hosts
# provide 'halt', 'shutdown', 'reboot' & co.
ln -sf /usr/bin/systemctl ${INSTALL}/usr/sbin/halt
ln -sf /usr/bin/systemctl ${INSTALL}/usr/sbin/poweroff
ln -sf /usr/bin/systemctl ${INSTALL}/usr/sbin/reboot
ln -sf /usr/bin/systemctl ${INSTALL}/usr/sbin/runlevel
ln -sf /usr/bin/systemctl ${INSTALL}/usr/sbin/shutdown
ln -sf /usr/bin/systemctl ${INSTALL}/usr/sbin/telinit
# strip
debug_strip ${INSTALL}/usr
# defaults
mkdir -p ${INSTALL}/usr/config
cp -PR ${PKG_DIR}/config/* ${INSTALL}/usr/config
safe_remove ${INSTALL}/etc/modules-load.d
ln -sf /storage/.config/modules-load.d ${INSTALL}/etc/modules-load.d
ln -sf /storage/.config/logind.conf.d ${INSTALL}/etc/systemd/logind.conf.d
ln -sf /storage/.config/resolved.conf.d ${INSTALL}/etc/systemd/resolved.conf.d
ln -sf /storage/.config/sleep.conf.d ${INSTALL}/etc/systemd/sleep.conf.d
ln -sf /storage/.config/timesyncd.conf.d ${INSTALL}/etc/systemd/timesyncd.conf.d
safe_remove ${INSTALL}/etc/sysctl.d
ln -sf /storage/.config/sysctl.d ${INSTALL}/etc/sysctl.d
# /etc/sysctl.d aponta para /storage que ainda não está montado
# quando systemd-sysctl roda (Before=sysinit.target). Resultado: os
# archr.conf / 99-archr-networking.conf nunca eram aplicados no boot
# — dirty_writeback_centisecs, BBR/fq_codel, ip_forward etc. ficavam
# no default do kernel. Replicar os defaults da distro em
# /usr/lib/sysctl.d (rootfs, sempre acessível) garante a aplicação
# antes de /storage subir. A cópia em /etc/sysctl.d continua sendo o
# ponto de override do usuário (last-wins).
mkdir -p ${INSTALL}/usr/lib/sysctl.d
cp -PR ${PKG_DIR}/config/sysctl.d/*.conf ${INSTALL}/usr/lib/sysctl.d/
safe_remove ${INSTALL}/etc/tmpfiles.d
ln -sf /storage/.config/tmpfiles.d ${INSTALL}/etc/tmpfiles.d
safe_remove ${INSTALL}/etc/udev/hwdb.d
ln -sf /storage/.config/hwdb.d ${INSTALL}/etc/udev/hwdb.d
safe_remove ${INSTALL}/etc/udev/rules.d
ln -sf /storage/.config/udev.rules.d ${INSTALL}/etc/udev/rules.d
# system manager timeout overrides
mkdir -p ${INSTALL}/etc/systemd/system.conf.d
cp -PR ${PKG_DIR}/config/system.conf.d/* ${INSTALL}/etc/systemd/system.conf.d/
# journald
ln -sf /storage/.cache/journald.conf.d ${INSTALL}/usr/lib/systemd/journald.conf.d
}
post_install() {
add_group systemd-journal 190
add_group systemd-timesync 191
add_user systemd-timesync x 191 191 "systemd-timesync" "/" "/bin/false"
add_group systemd-network 193
add_user systemd-network x 193 193 "systemd-network" "/" "/bin/sh"
add_group systemd-oom 194
add_user systemd-oom x 194 194 "systemd Userspace OOM Killer" "/" "/bin/false"
add_group systemd-resolve 192
add_user systemd-resolve x 192 192 "systemd-resolve" "/" "/bin/false"
add_group adm 4
add_group tty 5
add_group disk 6
add_group lp 7
add_group kmem 9
add_group wheel 10
add_group cdrom 11
add_group dialout 18
add_group floppy 19
add_group utmp 22
add_group tape 33
add_group kvm 36
add_group video 39 pipewire
add_group audio 63 pipewire
add_group input 104
add_group render 105
add_group sgx 106
add_group users 100
add_group nogroup 65534
add_user nobody x 65534 65534 "nobody" "/" "/bin/false"
enable_service machine-id.service
enable_service debugconfig.service
enable_service userconfig.service
enable_service usercache.service
enable_service network-base.service
enable_service systemd-timesyncd.service
enable_service systemd-timesyncd-setup.service
enable_service systemd-resolved.service
# debug-shell.service is for emergency root access via tty9 — keeping it
# enabled in production wastes RAM (a getty-like process) and exposes a
# passwordless root shell. Disable by default; users that want it can
# enable from settings.
}
Reference in New Issue View Git Blame Copy Permalink