This value is used to authenticate rescue rootfs image
by verifying the squashfs file's sha256sum before use
(propagator-20140419+).

Looks like this check might be useful for other stage2
images as well but let's get started with this one.

Thanks Maxim Suhanov <suhanov/group-ib.ru> for both
http://www.forensicswiki.org/wiki/Forensic_Live_CD_issues
and propagator patches.

Found it in yet another TODO at last;
serial console support is requisite.

These are mostly less known ones lurking in Sisyphus;
some of those might go, some might stick.

Massive Solutions' intranet wiki page on firmware
has proved useful yet again, and stegdetect has been
omitted given that steghide is there already.

These have been spotted while working on text-based utility
package lists; dvdisaster is rather welcome on x11 pkglist too.

xbiso is xbox xdvdfs iso extraction utility;
mdbtools helps use MS Access files.

Thanks Maxim Suhanov (suhanov <AT> group-ib.ru,
http://www.forensicswiki.org/wiki/User:.FUF)
for taking the time to review regular-rescue image.

Note that there are more than just filesystems:
arrays, logical volumes and swaps aren't activated either;
startup-rescue >= 0.18 should make that clear enough.

syslinux shortcut handling is case-insensitive,
let's find yet another letter...

biew was strangely missing indeed; several more
http://www.forensicswiki.org/wiki/Category:Tools
added as these have been packaged for ALT already;
fatback is on the way and dc3dd should come soon.

Debugging department has seen a /minor facelift/ too.

Some tools depend on X11 though and have been put
into a separate pkglist for that matter.

- live: refactoring
- forensics mode

Just a convenient knob for a few things done previously
to help spare the interesting bits from being overrun.

NB: live_rw isn't added although it might be useful
    since that would yield too many boot targets overall;
    this is likely to change some day, hopefully when
    media type detection/handling is implemented.

Let's bump syslinux timeout to 20 seconds either
so that iKVM users have a chance to select anything
and not just see the default booting after a few
screen area size changes.

Wonder how it's been missing for 3+ years...

A variant of rescue that marks the need to be careful
towards block devices and filesystems thus reducing
the amount of auto-activation done by startup-rescue
(0.17 or newer).

cvltonemap is no more available in sisyphus/p7;
xsane and usbutils were sorely missing (thanks dd@).

NB: fim is currently i586-only, need to fix or drop it.

server-zabbix.iso is ready for deployment,
and live-zabbix.iso is zabbix agent + firefox
(needs at least Server to be specified properly
within zabbix_agentd.conf when booted).

This is a refactored result of Zabbix-related experiments;
we can do a rough zabbix server sketch that still requires
its own setup to go.

NB: both the pkglist and the target are describing several
distinct things actually: zabbix server, zabbix agent,
and the underlying SQL/HTTP/SMTP servers which might get
their own smaller targets some day.

It used to be added in server-ovz but it really belongs to
the underlying server-mini already as more images built
upon that one should perform correct shutdown given ATX
compatible case/mobo or a VM that can do ACPI.

This reverts commit fd8f3755.
xdg-su is broken (some would say beyond repair) regarding DE
detection and handling of various GUI helper utilities,
especially in graceful fallback department; only a few images
can get imagewriter until this is fixed, let kde4 be the one.

It appears that live feature has been buggy regarding user
groups: its 30-users script would create a predefined account
with fixed supplementry groups list, and even if deflogin feature
got used too it would fail to add any groups to already existing
account since its useradd(8) call would fail.

Let's drop this duplication which has been long overdue anyways.

Thanks dd@ for both reporting the problem and carrying out
initial investigation.

There have been several problems with this feature:
- a typo;
- non-existant GROUPS (even a single one) would block setting
  all of the supplementary groups but separately-set 'wheel';
- this feature isn't used much actually so sees no battle testing.

The typo has been just fixed; GROUPS are now applied by iteration
which is less effective but more reliable; an additional script
hook to write down login invitation for the first passwordless
account (if any) has been implemented; and several more group
managing targets have been added (based on live feature's script).

This relates to commit f2892ad3
as there's an obvious need to be able to set empty root password
for LiveCDs but previous implementation was very fragile (and is
going to stay that way) -- so clear and separate knob for making
an image defenseless looks better.

- robotics support

Whoops, the very first build of a real distro with gfxboot
has shown that the label isn't picked up there... and things
are actually worse: iso.needscheck gfxboot test seems to look
up "check=1" in sectors where it might have been landing back
then but it's just not there by now; some kludgery is due in
branding-altlinux-sisyphus unfortunately.

No use to hunt make or diff file-by-file.

Well this chroot should have been more lean
in the first place (or a few files in initrd)
but life is short so better use/baby/steps.

These aren't needed in this subprofile but can sneak in
via e.g. SYSTEM_PACKAGES.

- mediacheck feature

This is an experimental addition to an image that might
get some attention (and broken downloads as well).

Update accordingly to feature change.

Note that the new image is quite minimalistic/useless.

This one is quite different already and utility-based name
was pretty clumsy; meet the new feature and retire the old
experimental one.

Please note that quite aggressive cleanups are implemented
within this stage2-based subprofile for the simple reason
that it has a single task to do; nothing else is expected
to be configured into it for that matter.

This functionality asks to be further moved into initrd of course;
adding it there will take a few more decisions to be made, mostly
regarding user interaction in failure scenarios, and it looks like
mkimage will have to be patched in case this doesn't just go into
full.cz under some sort of conditional check.

Just a humble config snippet for another squashfs;
note that @bootargs@ aren't expected at all this time.

The whole story with this installer has been due to a query
at #altlinux whether there's a distribution image similar
to altlinux-p7-rescue.iso which appears to be booting under
Hyper-V Gen. 2 without a hitch; changing just the kernel
towards the newer one made the user rather happy since
everything worked out-of-box for him, even unimportant bits.

Of course it's mostly due to boyarsh@'s preceding work :)

NB: there's no use to build i586 version as that hypervisor
lacks CSM (BIOS implementation) and would only boot UEFI
compatible operating systems with pretty strict requirements.

quiterss is lurking in autoimports so far,
gotta have a look at it...

As proposed by Speccyfighter:

http://lists.altlinux.org/pipermail/community/2014-March/681897.html

...but not installed by default due to overhead:

http://bugzilla.altlinux.org/21838

It has dawned on me that gdm2.20 is more widely useful
within sysvinit based builds: lightdm with gtk greeter
would fail to poweroff/reboot while this one would not.

It's not exactly obvious how install2_size, live_size or rescue_size
get defined since the variable names themselves get constructed;
help git grep these down.

acpid is not enough since power button handling configuration
has been split apart; and tracking this in zillion places is
utterly useless in face of a specially trained power feature.

Just use it.

At least Radeon drivers badly need those,
e.g. SUMO_uvd.bin + PALM_pfp.bin for C60 APU.

Helps live-flightgear.iso a lot indeed!