110 lines
3.6 KiB
Plaintext
110 lines
3.6 KiB
Plaintext
# Fleet — cyber sci-fi secure-bring-up splash (Plymouth "script" plugin).
|
|
#
|
|
# Asset-free on purpose: everything is drawn with Image.Text, so the repo carries
|
|
# no binary images. The dracut hooks drive it with `plymouth update --status=<tok>`
|
|
# (see dot1x-macsec-up.sh / nvmf-connect.sh); this script maps each token to a
|
|
# security-handshake checklist and pulses the in-progress step. Tokens are
|
|
# best-effort and order-independent — anything not reported just stays "pending",
|
|
# and in rd.dot1x=0 test mode the auth/MACsec rows are marked "skipped" (never
|
|
# "failed"). No per-host data is ever shown (only states), per the no-state rule.
|
|
|
|
# ---- background (dark teal -> black) ----
|
|
Window.SetBackgroundTopColor(0.00, 0.05, 0.07);
|
|
Window.SetBackgroundBottomColor(0.00, 0.00, 0.00);
|
|
|
|
sw = Window.GetWidth();
|
|
sh = Window.GetHeight();
|
|
|
|
# ---- title / subtitle ----
|
|
title_img = Image.Text("F L E E T", 0.0, 1.0, 0.85, 1, "Sans Bold 36");
|
|
title = Sprite(title_img);
|
|
title.SetX(sw / 2 - title_img.GetWidth() / 2);
|
|
title.SetY(sh / 2 - 150);
|
|
|
|
sub_img = Image.Text("secure diskless bring-up", 0.30, 0.65, 0.65, 1, "Sans 14");
|
|
sub = Sprite(sub_img);
|
|
sub.SetX(sw / 2 - sub_img.GetWidth() / 2);
|
|
sub.SetY(sh / 2 - 102);
|
|
|
|
# ---- handshake stages ----
|
|
# state per stage: 0 pending, 1 active, 2 done, 3 skipped
|
|
n = 5;
|
|
label[0] = "TPM identity";
|
|
label[1] = "802.1X EAP-TLS";
|
|
label[2] = "MACsec link";
|
|
label[3] = "Network (DHCP)";
|
|
label[4] = "NVMe-oF root";
|
|
|
|
col_x = sw / 2 - 150;
|
|
row_y = sh / 2 - 36;
|
|
row_h = 34;
|
|
|
|
fun draw(i) {
|
|
glyph = "[ ]"; r = 0.22; g = 0.42; b = 0.42; # pending (dim teal)
|
|
if (state[i] == 1) { glyph = "[>>]"; r = 1.00; g = 0.72; b = 0.10; } # active (amber)
|
|
if (state[i] == 2) { glyph = "[OK]"; r = 0.10; g = 1.00; b = 0.50; } # done (neon green)
|
|
if (state[i] == 3) { glyph = "[--]"; r = 0.30; g = 0.30; b = 0.36; } # skipped (grey)
|
|
img = Image.Text(glyph + " " + label[i], r, g, b, 1, "Sans 16");
|
|
row[i].SetImage(img);
|
|
row[i].SetX(col_x);
|
|
row[i].SetY(row_y + i * row_h);
|
|
row[i].SetOpacity(1.0);
|
|
}
|
|
|
|
i = 0;
|
|
while (i < n) {
|
|
state[i] = 0;
|
|
row[i] = Sprite();
|
|
draw(i);
|
|
i = i + 1;
|
|
}
|
|
|
|
# ---- footer ----
|
|
foot_img = Image.Text("erofs + dm-verity • NVMe/TCP • no per-host state",
|
|
0.25, 0.45, 0.45, 1, "Sans 11");
|
|
foot = Sprite(foot_img);
|
|
foot.SetX(sw / 2 - foot_img.GetWidth() / 2);
|
|
foot.SetY(sh / 2 + 150);
|
|
|
|
# ---- status tokens from the boot hooks ----
|
|
fun set(i, s) { state[i] = s; draw(i); }
|
|
|
|
fun on_status(t) {
|
|
if (t == "mode-test") { set(0, 3); set(1, 3); set(2, 3); }
|
|
if (t == "tpm-active") set(0, 1);
|
|
if (t == "tpm-done") set(0, 2);
|
|
if (t == "dot1x-active") set(1, 1);
|
|
if (t == "dot1x-done") set(1, 2);
|
|
if (t == "macsec-active") set(2, 1);
|
|
if (t == "macsec-done") set(2, 2);
|
|
if (t == "net-active") set(3, 1);
|
|
if (t == "net-done") set(3, 2);
|
|
if (t == "nvme-active") set(4, 1);
|
|
if (t == "nvme-done") set(4, 2);
|
|
}
|
|
Plymouth.SetUpdateStatusFunction(on_status);
|
|
|
|
# ---- optional free-text line (e.g. warnings via `plymouth message`) ----
|
|
msg = Sprite();
|
|
fun on_message(text) {
|
|
img = Image.Text(text, 0.55, 0.80, 0.80, 1, "Sans 12");
|
|
msg.SetImage(img);
|
|
msg.SetX(sw / 2 - img.GetWidth() / 2);
|
|
msg.SetY(sh / 2 + 182);
|
|
}
|
|
Plymouth.SetMessageFunction(on_message);
|
|
|
|
# ---- pulse the in-progress row ----
|
|
tick = 0;
|
|
fun on_refresh() {
|
|
tick = tick + 1;
|
|
o = 1.0;
|
|
if (tick % 24 < 12) o = 0.45;
|
|
i = 0;
|
|
while (i < n) {
|
|
if (state[i] == 1) row[i].SetOpacity(o);
|
|
i = i + 1;
|
|
}
|
|
}
|
|
Plymouth.SetRefreshFunction(on_refresh);
|