环境
Qemu:QEMU emulator version 3.1.0
Linux:Linux-4.14.13
工具链:arm-none-linux-gnueabi-gcc  (gcc version 4.8.3 20140320)
Android:7.1.2
busybox:BusyBox v1.24.2
 
概述
         Android系统使用的根文件系统是用mkbootfs和minigzip制作的,其中mkbootfs用于将根文件系统打包成cpio格式,也可以用cpio工具来打包,将来Linux内核在启动时会调用init/initramfs.c中的函数unpack_to_rootfs对cpio格式进行解包[调用路径:start_kernel --> rest_init --> kernel_init --> kernel_init_freeable --> do_basic_setup --> do_initcalls --> do_initcall_level --> do_one_initcall --> populate_rootfs --> unpack_to_rootfs],在内存中构造出根文件系统结构,mkbootfs工具是Android自己实现的,支持的功能也比cpio弱很多。minigzip也是Android实现的一个压缩工具,是对gzip的简化。
        minigzip的源码位于:external/zlib/
        mkbootfs的源码位于:system/core/cpio/mkbootfs.c
        不过需要注意mkbootfs的功能要比cpio弱,从mkbootfs.c的代码注释中可以看出来:
/* NOTES
**
** - see buffer-format.txt from the linux kernel docs for
**   an explanation of this file format
** - dotfiles are ignored
** - directories named 'root' are ignored
** - device notes, pipes, etc are not supported (error)
*/

 

    上面的信息说明了如下几点:

1. 对cpio格式的说明,Linux内核文档Documentation/early-userspace/buffer-format.txt中有详细说明说明:
The full format of the initramfs buffer is defined by the following
grammar, where:
        *       is used to indicate "0 or more occurrences of"
        (|)     indicates alternatives
        +       indicates concatenation
        GZIP()  indicates the gzip(1) of the operand
        ALGN(n) means padding with null bytes to an n-byte boundary

        initramfs  := ("\0" | cpio_archive | cpio_gzip_archive)*

        cpio_gzip_archive := GZIP(cpio_archive)

        cpio_archive := cpio_file* + (<nothing> | cpio_trailer)

        cpio_file := ALGN(4) + cpio_header + filename + "\0" + ALGN(4) + data

        cpio_trailer := ALGN(4) + cpio_header + "TRAILER!!!\0" + ALGN(4)

2. 名为"."的文件会被忽略,不会进行打包。

3. 名为"root"的文件也会被忽略,不会进行打包。
4. 不支持设备节点以及管道文件。所以在使用mkbootfs时,需要确保被打包的路径下没有这两种文件,否者会导致错误,并且Linux内核也无法正常访问指定的文件。
 
   此外,在使用mkbootfs时还需要注意的时,mkbootfs会对打包的文件的权限以及uid和gid进行修改(在函数fix_stat中),有可能会遇到本来具备可执行权限的文件,在用mkbootfs打包成cpio格式后,该文件的可执行权限丢失了,比如/etc/init.d/rcS。
 
用法
lib_path=`readlink -f ./lib`
bin_path=`readlink -f ./bin/`

export LD_LIBRARY_PATH=${lib_path}:$LD_LIBRARY_PATH
export PATH=${bin_path}:$PATH

rm -f ramdisk.img ramdisk.cpio
rm -rf ./tmp/

# pack
pushd rootfs2
mkbootfs -f ../config.txt . | minigzip > ../ramdisk.img
mkbootfs -f ../config.txt . > ../ramdisk.cpio
popd

# unpack
mkdir -p tmp
pushd tmp
cpio -i < ../ramdisk.cpio
popd

 

其中config.txt是一个配置文件,内容如下:

etc/init.d/rcS 0 0 0755
 0 0 0744

第1行,把"etc/init.d/rcS"文件的uid设置为0,gid设置为0,权限设置为0755

第2行,所有其他文件的uid都设置0,gid也设置为0,权限设置为0744
需要注意的是,第2行开始有一个空格,并且需要放在最后一行,对具体文件的设置要放到前面。详见mkbootfs.c中函数read_canned_config。
 
    如果没有个指定config.txt,那么会使用Android代码中自带的配置机制[在fix_stat中会调用fs_config],功能要比config.txt更完善,如果在使用mkbootfs时还设置了-d <path>,那么函数fs_config会优先使用<path>/system/etc/fs_config_dirs和<path>/system/etc/fs_config_files中描述的规则,前者针对目录,后者针对其他文件。如果没有给mkbootfs传递-d <path>参数,那么使用Android在源码中指定的规则,它们存放在两个数组中,一个针对目录,一个针对其他文件:
 
针对目录的配置规则:
/* Rules for directories.
** These rules are applied based on "first match", so they
** should start with the most specific path and work their
** way up to the root.
*/

static const struct fs_path_config android_dirs[] = { 
    { 00770, AID_SYSTEM, AID_CACHE,  0, "cache" },
    { 00500, AID_ROOT,   AID_ROOT,   0, "config" },
    { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/app" },
    { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/app-private" },
    { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/app-ephemeral" },
    { 00771, AID_ROOT,   AID_ROOT,   0, "data/dalvik-cache" },
    { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/data" },
    { 00771, AID_SHELL,  AID_SHELL,  0, "data/local/tmp" },
    { 00771, AID_SHELL,  AID_SHELL,  0, "data/local" },
    { 01771, AID_SYSTEM, AID_MISC,   0, "data/misc" },
    { 00770, AID_DHCP,   AID_DHCP,   0, "data/misc/dhcp" },
    { 00771, AID_SHARED_RELRO, AID_SHARED_RELRO, 0, "data/misc/shared_relro" },
    { 00775, AID_MEDIA_RW, AID_MEDIA_RW, 0, "data/media" },
    { 00775, AID_MEDIA_RW, AID_MEDIA_RW, 0, "data/media/Music" },
    { 00750, AID_ROOT,   AID_SHELL,  0, "data/nativetest" },
    { 00750, AID_ROOT,   AID_SHELL,  0, "data/nativetest64" },
    ... ...

 

针对其他文件的规则:

static const struct fs_path_config android_files[] = {
    { 00440, AID_ROOT,      AID_SHELL,     0, "system/etc/init.goldfish.rc" },
    { 00550, AID_ROOT,      AID_SHELL,     0, "system/etc/init.goldfish.sh" },
    { 00550, AID_ROOT,      AID_SHELL,     0, "system/etc/init.ril" },
    { 00555, AID_ROOT,      AID_ROOT,      0, "system/etc/ppp/*" },
    { 00555, AID_ROOT,      AID_ROOT,      0, "system/etc/rc.*" },
    { 00440, AID_ROOT,      AID_ROOT,      0, "system/etc/recovery.img" },
    { 00444, AID_ROOT,      AID_ROOT,      0, conf_dir + 1 },
    { 00444, AID_ROOT,      AID_ROOT,      0, conf_file + 1 },
    { 00644, AID_SYSTEM,    AID_SYSTEM,    0, "data/app/*" },
    { 00644, AID_MEDIA_RW,  AID_MEDIA_RW,  0, "data/media/*" },
    { 00644, AID_SYSTEM,    AID_SYSTEM,    0, "data/app-private/*" },
    { 00644, AID_SYSTEM,    AID_SYSTEM,    0, "data/app-ephemeral/*" },
    { 00644, AID_APP,       AID_APP,       0, "data/data/*" },
    { 00640, AID_ROOT,      AID_SHELL,     0, "data/nativetest/tests.txt" },
    { 00640, AID_ROOT,      AID_SHELL,     0, "data/nativetest64/tests.txt" },
    ... ...

 

验证
1.  使用压缩格式的ramdisk.img (mkbootfs -f ../config.txt . | minigzip > ../ramdisk.img)
kernel_dir=./Linux-4.14.13
kernel_image=${kernel_dir}/arch/arm/boot/zImage
dtb_image=${kernel_dir}/arch/arm/boot/dts/vexpress-v2p-ca9.dtb
qemu_path=/home/pengdonglin/disk_ext/Qemu/qemu-3.1.0/build/install/bin

${qemu_path}/qemu-system-arm \
    -M vexpress-a9 \
    -m 1024M \
    -smp 1 \
    -kernel ${kernel_image} \
    -nographic \
    -append "root=/dev/ram0 rw rootfstype=ramfs console=ttyAMA0 init=/init ignore_loglevel" \
    -initrd ./rootfs/ramdisk.img \
    -dtb ${dtb_image}

 

部分启动log:
[    0.609270] Trying to unpack rootfs image as initramfs...
[    0.965940] Freeing initrd memory: 3616K
 
2. 使用非压缩的ramdisk.cpio (mkbootfs -f ../config.txt . > ../ramdisk.cpio)
kernel_dir=./Linux-4.14.13
kernel_image=${kernel_dir}/arch/arm/boot/zImage
dtb_image=${kernel_dir}/arch/arm/boot/dts/vexpress-v2p-ca9.dtb
qemu_path=/home/pengdonglin/disk_ext/Qemu/qemu-3.1.0/build/install/bin

${qemu_path}/qemu-system-arm \
    -M vexpress-a9 \
    -m 1024M \
    -smp 1 \
    -kernel ${kernel_image} \
    -nographic \
    -append "root=/dev/ram0 rw rootfstype=ramfs console=ttyAMA0 init=/init ignore_loglevel" \
    -initrd ./rootfs/ramdisk.cpio \
    -dtb ${dtb_image}
 
部分启动log:
[    0.610055] Trying to unpack rootfs image as initramfs...
[    0.760468] Freeing initrd memory: 7040K

 

此外,Linux内核本身也支持在编译时将指定的外部根文件系统编译成cpio.gz格式,然后跟Linux内核链接到一起,在启动时就不需要指定initrd了,Linux内核支持的打包工具usr/gen_init_cpio.c也比mkbootfs强大:
配置内核:
General setup --->
        [*] Initial RAM filesystem and RAM disk (initramfs/initrd) support
        (/home/pengdonglin/aarch32/rootfs/rootfs) Initramfs source file(s)
 
Linux内核对这部分的处理请参考usr/Makefile,下面是加入上面的配置之后的部分内核编译log:
  GEN     usr/initramfs_data.cpio.gz
  GZIP    kernel/config_data.gz
  CHK     kernel/config_data.h
  UPD     kernel/config_data.h
  CC      kernel/configs.o
  AR      kernel/built-in.o
  AS      usr/initramfs_data.o
  AR      usr/built-in.o

 

展开:
/bin/bash ./scripts/gen_initramfs_list.sh -o usr/initramfs_data.cpio.gz  -u 0  -g 0  /home/pengdonglin/disk_ext/Qemu/aarch32/rootfs/rootfs

 

下面是测试命令:
kernel_dir=./Linux-4.14.13
kernel_image=${kernel_dir}/arch/arm/boot/zImage
dtb_image=${kernel_dir}/arch/arm/boot/dts/vexpress-v2p-ca9.dtb
qemu_path=/home/pengdonglin/disk_ext/Qemu/qemu-3.1.0/build/install/bin

${qemu_path}/qemu-system-arm \
    -M vexpress-a9 \
    -m 1024M \
    -smp 1 \
    -kernel ${kernel_image} \
    -nographic \
    -append "root=/dev/ram0 rw rootfstype=ramfs console=ttyAMA0 init=/init ignore_loglevel" \
    -dtb ${dtb_image}

 

此外,在Documentation/filesystems/ramfs-rootfs-initramfs.txt提供了一个使用cpio打包的脚本:
185   #!/bin/sh
186 
187   # Copyright 2006 Rob Landley <rob@landley.net> and TimeSys Corporation.
188   # Licensed under GPL version 2
189 
190   if [ $# -ne 2 ]
191   then
192     echo "usage: mkinitramfs directory imagename.cpio.gz"
193     exit 1
194   fi
195 
196   if [ -d "$1" ]
197   then
198     echo "creating $2 from $1"
199     (cd "$1"; find . | cpio -o -H newc | gzip) > "$2"
200   else
201     echo "First argument must be a directory"
202     exit 1
203   fi

 

完。