From 1eca862849ff53fa2de1679f68f90e4779ca656e Mon Sep 17 00:00:00 2001
From: macmpi <spam@ipik.org>
Date: Tue, 16 May 2023 09:28:58 +0200
Subject: [PATCH 1/4] improve overlay file detection

take name from dmesg
add suggestion for removal in banner
---
 headless.apkovl.tar.gz             | Bin 5058 -> 5242 bytes
 overlay/etc/local.d/headless.start |  15 +++++++++++++--
 sample_unattended.sh               |   5 +++--
 3 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/headless.apkovl.tar.gz b/headless.apkovl.tar.gz
index 97fe05d22b0cf2ee668d43883f4984adec4866da..faed1ed7cabfeedcb39336fc306c3bdd3b93c9e0 100644
GIT binary patch
literal 5242
zcmV-=6ou;_iwFP!000001MFINv!hm)_rK;-;I?NyHuD}iXm;!xgh&!X2vC5jDHj<;
z6j9*ycVBqj_Bwa%Zo7A<s!!E>h?~yuo_v9z_27^GU_xf1N%G}7)6cIjzfl6CFcifp
z3i}8_5gf-p0?9ub*g{>?IyDG>RF`G@d*j~L|1V0xtp8^}2%Ro#zj5b1e$xbXpLjv@
z?szN;rU>G{p?`v+@sB{{-9h+m`k;TfY2rUL2E6z`{Wkx{2^_~!454QIqbNpx@c;Kg
z-|K(=`z9`%_M5tKzDa}ex$4|^#p5mhk0LbnGyRjx<%9pf2b%T%G^-qBXIkUx<Z$Td
zVf=EtVUO&3X^xJYwV|!=S%fGNfy-BgOniJ3jzT}QIiB8)g16Q(qDXPlnf)2L5jqJS
z&zTj)Mr3KJ5t`f1;P!TU^Js3hmd-HeZ&&-+734#7*v6@zJ_>_Nbg#oWtb_NI*KDA(
zM60XEjaDx0<J@=DsTt1<IuO31%iWG;w>Q}vjiYoua2!qheO-$ej=%2CTdhZs+u?S=
zb_Z_QF^|ry;sU!6M}0zs7!noowu$xNE@EaY7s3`zV&s<d@K(B$YtL`gKI&i|kGh?U
z%9wFDx(9T3lMmNA*!AqrzZV1?to3c*Q&PjFaGWQlzdPT>uu8kNp{j?|N|&T_#6TE{
zCTCAAZ?!Xa=d6XKyh5AJ*5k*7AA7&Wr<KE-lkPg^8DE<s7Zl=tm`)db3^LcnCS$js
zXgdh}-Zx8E&Mr-K4h1OGTI4{X>n-95CVgBV+!guI`JQLC-ZrP>GC1y_hP*!nDC68m
z5XrlQBR9-;<L1WglHTDE_xk+8AlA*+>PLzo54#*PYnPtm4tM#Mkz7R?Z;gpJUxADL
z|J})|qzInk!11%7X@LK0>-|9gTlz)(4}6Ry(bbXz-W89R`2Wke|3m(#aQtWSpP(@0
zL;Qaq^t8~L7iASZXuN6|5~%6&nKgNE$6GJGfQzp)w|L17wS7%n|Mrp}*tJOZZhl&R
z@@~HB>?8X<EqR0856k~{^0272FTinB&C}zs4C2;DaufIB#IU%foh1xqbk6eoW}>W`
ztv3%>_xI4Tj36&q*4QR{qf&z#e>Z_^^y5|kr;7p$XfE%vwYLw2=y5yMa?)wV;l`(f
z>PgiKQV(quO-b7mJ|Uo+^dK^>Hf;Q8bqd|<gWtv&1Wa0$G+d(zt$<7<mu$!fvEUP=
zZSUebYh50Lb0IV35@*&$Z|ti&vB$5z0$xPRtDD~z`+L#<@A?0`ssZ12{+r$X=k*_f
z5+D5keb7?>y;1o~4amK&0W*6eqpHc1OPehGy7B*-?SH5f{<Y}0&VTQc$6NA0iICXO
z^FM*mAN>D)&>xup*V#+{_g^x#R{(1K(lyMJmw^_~4yW7TRF=vS2Xz!i$SV8+XJVI8
z?3Uc6)k9<rm3t6Yozkc;LwpdXfM8!_`BaJ<k}r_aO{1G=%lKjFk2)F-#eCM3FArl=
zZW7Dp?Y)geWqMWGsIB|yP$(>%>ChAco&}9)?VVk^%anZ<s@_2|5JO2Kma|4_pQdYc
zilPp}U5a{SQ7nv^VbUvAp313BZc)SadlyJ4%U)$2&wH!26~+l<4aDhskK2?swhzO%
zN?#^pZPcmmc$M6ZODO$AC6pvz8ESe<#i=#Q5!hrDp40<ZI2EMf(aCUWD5lv;Bkb}n
z8JQCol&wUkn`vg+Nq?Z0rnQ}KW!H@(Q&>}Hwj0I(dG}p*ysr0UysvTBXW&cBGsp!?
zQGYl+qM~}-_Ip%lnWDO2s|HDKdkDK0g^QmkaonD3S-3ucu$X9n)3ry#m)0i;Va*&4
zypygxH15jT9pOkR*VhN9(ZlMPGuM*i%BVZS+z}(w60LSUzQO^8%z9OnF_U6!Ro!2l
z{r19Dg5|c@LkZW|I5H*8ujr**N>uGMK$3~>wfLvcB7nu%#5KDYWJbJSHpgyr^WypB
zy2U*emM<`exq(sbJU!xX$0iVW<Y9F+v{)+0_2ry!!fqWwI<Q^sb5fQcxuH&tg7E&8
z*&?$A3C$^@SRxm7(G-1ow-rX(QXHC@s&UZBQ`q3RsLfFV7cLMDRK~QuPS;J0w0uI8
zESvA+X}e{8kC2tV#h|XSEm`-fQwqVRv8VR5RT2tYPa=89#n5)+wWI;Zi$qv`zCQ>8
zRl4>8NxV~W*-6I1GMO}}Q{jOP7{t+x8E{0^pKi8Ht{eJv-$!K75_g8JusaamR)oOk
z5L^bs&V)o~7bDfBw4vM}1bL3FCdzyMWi!!kaoL^+EIG9Gj=WrOB5;b!u+Ii_Cj;hg
zh2f!wmb#`2ZKYm4VQ+0I&zd%>?uJ|H-1e?2my_0JB#EuiL);{1XI!6|E6G6kk*-gC
z0qDb7YgwM`@j~DY#vHOCcRMjA*_xX2n!i$~Z7)!4beEM>8&b8icdBF5E7%_)+nw}8
zO`#qTP16+e8+VTG`bDJu#=r-^Y5Lvap#?87Wk1K47qeh5K7Jw6P$D|)lw!;#4;}Au
zUC}KBjQ6c0uAChd*rPad_{7=#sXwdNDMm$Ovs(-5DE1eNV!Kqk>5We$w|t67PP~ao
z89&nU&ZrGQ=Xjfoh4<J@0ZIo#$Ul(VvFlXJm(ejw*LcTL8rED%*d~J_6I6%FT(2p}
zLv^PqWXDfV90LbNTaDwC?sv$wN8|w!4oY4dJ61qZwA5Nz=G%U~CzavgnUZ!_7-Gbj
zdonS%H6i;@Y90M}0vNoIi~OvV%oV-6W^l77Ex&Tq>7*rGj*P_dcC?k7i4Dp_x?bf1
z5jAa}B;iFs9$~slkl=(H0L*uU%SuDN*Y?AJ4miI-*7n&HC~eo`cRx{#Rz6pIErNZG
zI(E21c5xpW*A3451sosUU1S@;qew4D=wPbYgkTv_CY`8skuKN+qsx|ftL+u(q0+dz
zb<?_%_NqL`wCiMxEEhxJRY-cHq3(dF#+1zu8-Cp=oBX6)N3^kB_&7LlIN7(!meF+`
z(Wf3cMu8RD^k#d-pgy~8HWh?Np<ypZ0rY5)U(QvCS{Ti*c^Pqx1d)l&L-xk0*qK=B
zOQc3PZs<L9E#&Sa=bkYaj*Fh6C_zLgk5E-$LyK1kE2t8#C&pJ+ryC^Un1>rB*7JK)
zG*-suEJ{6zTE}~jhy-<aq>|B?#=aM8e6%iyB=v#q$#$X3!!<~Z#?(rboq+Pn&Mr6R
zAxpYeiSw<QbjVsc#}P;5xsF6;kd|ho%Vln_RyT=h1Ax_#KKDhdA_>@~rPaM;iSrtc
z&EAPvhFbeu_MueK!OQk(SH2|J<7U-M=JB$NS9Prprj!$aXcWgV;_<pUyX%}goKLEX
z?%`tqwU%5%59k6_^E&cgmbLYY#;$yT5(=sCdej~-F~nZCH<AEo*SUry`;g_loap-y
z1o**FNwu3cNtmA{bg=NoZY+^zPzpuH_#_`D`m~0(tEzWp<j9OSs|E@oqgT+Vval7G
z@`+^o#y=huN~a|zxRO4+B~8_m9P{A1;h>lp%cQn@yl?mXQc(C*!m5u7fK}FF6>MME
zY?}4s2tjr~iGr#RlIkr_u;;9?=bVGyrH)=?30c*!n-KyjMk`dD$_sP7!8j1<=p>9Q
zesxRv{B8wT+C4TTeqRTW3R8L2ud0dTV={34b68cDJzHonrFNt5qj(iPq-|AbdqDEx
zsY(WCs?0(<Zg!=0FB@`b7}hMNficO(+fca<H8)g07JQzvEQSp=apCfd%wF!BtIgbG
zpxWYFnT@V8eWI8e-s*EjW2|WNd~bHt3TquHq}P>hIXxe(nr81S8lzsvEMp|n)vLKM
zqJ$F;97le8ET|CQ!b`Qa)<+jxAxBYYJTdER11;@~kh<b|@`nFEk0U<Nd#2_5mzAEA
zJ^O#yJK&f1zi<8igTN6AqiGsn-v3e*^5OmO`=B4||NF-^&x=Uj;bwnd|8x0+pg-uJ
zq!#@XB!+%C|Gy9V^b^=k3b=^@;8Tz*tFca^xCJo;!@#HIg8v1~9WSqvx!=$>*C!?M
zf}#nYWIrg{Bus+(ui#!b0pQH*hI~-JdWAgGua@QXz)$MHYr&@V%dQ2T!Uu!8F6#zt
zOVBHerpyA+X~5chez8H&FM|dw$`;JZXdXVcaZ*G;@CZB*{TlXz9{zq7_VvG^05A`W
zf*O2kTJW=PkxxJU68;W+#lAdz1eK)d9^m&j4KCj{HEr!wVE@@0q@X*#+1m^^PiL?o
z+~yVhJP&&<kf?TCuxkPzEc*-$lPoBlJOIPG%t1d7nh2QNzk2oApI_gB|1r-9D)6ZU
zKUYe}pTRG)Yp@C0cD`v|&wT#!ub<CDogoE3|F)`=Vn$DXw=^xBK5yW^K7aWc41W%O
z@oHJWa@zPckEDKK|LU{3_0`flLzIH70_$0{WnL`%49glED(9P~tEw#VoZ_|In<fUA
zFS~*osJ*8*-+0X}fnU!cUmSj3ZB}v6b`_`w?NHV!I718S`9u{oKoWxg0H4B{`L}N{
zeFy)P&-1LC@D=#ae+Sz*D1eWDRXLa0Vis}COv198fqn7{_}HmZ(DD7B;RZfViWyjz
zfloPwAaCakFTw1mJ-;>(2(l)4JG{jVe}EV!z#@T9z#l;(h@U|EFIl}oQoI)8k2=1W
z%%=+r@Xc3uKN2!Hvsl<RRp2e2<u4ZcL-&jQfo1Vx%CpMK+KGN^A8PsIWnU(~mO|kF
z1$4V4d$G-5B6xm&p7pWV(Cln;JNVh3vj&8lv4OqJX_{qIUjQHbCGhdbp3?*~%X#3R
z{`3#zY4y)9znf>w9W$gamdi4v1^@Q9C;lLSUw{2uQh7bp>E@X5pY2?2Z`(Ey-dF2a
zFshNHS?$=eW49`TB5kv+=-LM9`k}~zK$aMri!3RUY{wY(-}f9TS$>fcXLF4W6#*l%
zNbyd`=kA`P<Ww=4`YPldSCtl=0)ij(Ec-@N-I!4wynIQ2c|6#-L}y?J`O+q?<t5^z
zORR}IcFA^k*)|j$MZJxi1F(;Ut@;=m{57O_(`?k+M!iut4vlu!+qYsqv8J=$=A5Fd
znkmIFo$rp7i^?Gs>{QG`B6?o$bnAv;(5JY&L7!Zs@W`?WxE`0z%<X~C^e+*)!L{$Y
z{)CRamAGf>8fjW&xn!QD=UsYwOY}sA)YQ@gR{LqGM^hQ&mgxkm!q7p`c|6$WLj6)s
zP!WHwKM^UiY>=gcm=6O)n{djgGE8i~PmG8XweX%HYOw&}0W&yH>ADH0#K$5Zx7<Sv
zbt#30%nxGWdzL$8LFkW#gR?h$D(QeV_Jzax+~c7|gP4^l3HdUCS!2#(0gI*C!Vkbh
zkf-fH86|m)<y_JIi+=9Ox(|LcyMoSv_fr4L2{ls7aiFCswaUqe!aBS|D*ge%$ajdw
z0BV&p9u7r(It=3JSz@4wP08m}&pC|vE7?$;d~JC!z&s5(?8#G_a-AnE89^akn^>WD
ztm_$svUF5GxVSK*0MIcnFGD~3^6U~AgZ1shA(C5+oOJ%_xcW-Fz}4rUbXMb-r=ctS
zC;|H+mt(QSVJzh0gg|<25{j7b5Di&$=2hikqsNmnP5bJPa6E+?5Dttu+~qMxppdTQ
z1BEVndmQ<S0DKoiFPR*xf0E{ZnHn)AZ6AooC`QiDD9jBhlp%{_W)TnA$g|>@dxXZw
z4n+`y`GOe%a>IZUrze7d(q6U(38FK<kSMmG#SmIKlsL~%K1fTz2Po@9l<)1uqy}Yf
z?qC`cj*$U?V0i!#OMvSlc*4ItK0&sJ>rVs-2SJRkPCSIe&)%PY{rU9c)#u+%KE63U
z)+Ht#5m`N#(<5ArJO-$AZ8%;4u6oXUKtm1|7OPJ8_Rjl*D0}Lu%tnC(&MI$kAIOGR
z4`qokyOXEHj0&lmzA7@+C8I<3fZI2cx^nUql9pOWNPQ@Lz!c`}_8D16Dh1(^rhzWv
zNO(>r0NPl04iB)#O;(Gi0XP(^N$~6~X|)I7OVKHXzh(7Qze+ePG$4AHmI3^!h+D!w
z3;I(urF&4UOVQGbJsA29BX(IJlU~aylA#jX%w~%MkoWGPzUtC6SW~?q%_}PwfLTqk
zPB^Um0#)B*1?RDq_kPhsLz7n#G?mJ;tX*BOxIWWlE_yE%ITYTr3g?WLm!Jl$0N(*5
z)ohnr-YB4MIz)kr;xolGtbx#Z1F{{dOq3LJ#Zhlz&PrBd=NtYF4a9`CQJ{>x<gW|4
ztH9>zCCdqH)iAQyLLi-`&)JFP>I<l^g}H=7n|VYYnN0g;6lZn@z#bv)*Id-b(5HWe
zRLR4H@y!iFdg}4j0X8h;knfPT$%cWdV6v<8_p&q@99HVrEb!N(!Cd7!S9o@hj_$ie
zuKL0`T)lddt!`eh-69{(xjacrt~K%yDrJ6wri==rekf~HnaIxGy=A{wca*CapzSRs
z!5tbSlbMP(Ki(DNSMI(P_Lh$Y{@-oM<GzWE^?v`=HoC2DyVJn9rqSwl%KiUsw0k1%
z#$?F%|2oC*|F)W~x%HR(|DB_wa{qrD?cZ+tKcP~bN+DlvF#2K4zI=XNJ0%p+wo%`5
z`uGEgajNKLbw=dtOwbOakb5Yq)`(aFKI*ul?WJRGnVq(2T$}v4*?eKXXfw$RW#4tj
z>~u|3w7r&TH%xAondqOi99p(<8IOwp2F^EI&7)=+|F_W|pyeBp@nHNny4m_S)$c#r
z<?lbX(*6VSA5*xI&q97X5+Q1ACr)<uj-82ZFcD=U=wYgT-LJ=YF>NO&buqqa8jaNw
z=$2K<+D$%q8F?-rb2s`%Zvd_L{?GjX|1er*{NGMnT>oS{Wy3gl{Q9?uE|lxPg_ghm
zau;o5G8F&ouD||9qtR~tzzn&gCp-~@m26g}tbOO}U$(N9?fY$i0~U;$$^cLR0HgMT
A(f|Me

literal 5058
zcmV;z6Fux7iwFP!000001ME6!v!hma{@VNs-0sPY&Ai9HC?30l5FoT51V{)bQ(f%)
zB36Op{~o07cG@0$x{|aznW{cj?_I<>+;i^PFI>NM;V*t?KxUvx@-fcv%kgoI5*US{
zC{9t>7YK^rIQ9id{@#M!p=(;Z2Ei}tvTXkm-G}i1q~Oo?fA;*q?y~l^Gq3S=<JW!c
z`pw7VaW^nU5dRJP6BLbq0U{qygx`kG_J^A$`dxFtBmU_R#XnBqIF4cnHQOIWG4gZ#
ze+qbK|M~BAR5tDFy0KrU{`g#V&d1{Mf%r!en)-$P$@}m*{yzcCc7K{p4ze>Wae1;i
zbaXNP{&U41+2#Fqcw8+tWqHj)WET>+blH)yhp&QB=!Z7P)2mkS=2Aj->nQH@{){Aq
zN<znTW`>a#no6n#`li#ky_F^|%`KMeGt7CL#XfQb=@1?^QL3i5LgQl9?Jy4O;63Fw
zE9ktY<;5+bcSd_V_Z@X=#xsKsgtt?rZp*TpL~=*%xV{`Xj;6i7u0@06FWd7*=@BG3
zBnNDJ;D#-8>+~urFoQU%6Cy;AxFeHQr21D8(_5(!HfS6nNzTKY^_5(@UL*Hm2lIH?
zZ5>p?w8POkpxZ<`Txx&Yvs>?45U{^gH+@g78!m;TJTATM`6>og+ATF%KAaZndVLNV
z2qV$>?8;?Q+hcdmT4<eDXtUb5{223N@3r`}uz7t_9a}%+OI_srLfjA2$-qZHa~y2a
zw)=^;eBbLmy>z6^Xu@+KK!MUC2MS$o5LeLY<MQAv$eYUdJhO2(IUSY$aSJu%^(H_W
z=iK~I+QuBYVm2!$*AgSW!U68~xxpZ2Vkz}4MUb0S4w<=4&rydve9Nqz-EK@89dEt^
z@BaU9c2>oO{}lPQm-$Tt{9k+TXZYX3-{pVb!$=Zc+-tzc;_=A;f1me%s{a&@|04er
z6o!1x|DOV$?y%%VNd^xJFKgNwR8;BA>O8pR%?B26@MY!{kJ?aMm$dbgM}1(IBH26n
z>3+#O`J%Iq>^r#E4R$}=|F@Hig{@@($5GZ#x5J%?TOP?()Qc0t;-+$5V<@9?rq?$U
zW!7xHx;d)1hmK_kx&D2QO}y7C*-!YZ4qU?bXZ@c}3fzU}@-ADt`#=b9$*Gp&PALuv
zpANFSt`?AdXv1)d+n(?U0bQjBk#Uq^<%Nq=;9PF}Cc+?KQmVM&8bxRYWFonEMc#<J
ze8PIuJGjc4#%-_-GTRwZW*TZ^UF3;9e)k>lP%SU7ep~II#Qy&%{y$a^_@VvZ9PYpD
z{|J=$9RHsJ?)~3elRtVu?oAJvSt|*Zb)LN6lZ0P){$KO`&wau_7yQ=#?_=`#K>a5X
z68mNSClLB`{C^7g9qa!xd(?mLQK{VmkfR4`m><3qnmjw4lEJP_nIjJJD2$L<cmvKv
z4zsgba+_8+k=11GMwoR<qn-ruevkr!Wk}Mg6jvl)AfuCpiD*gqVd#%48Vtp}*OZK#
zwklV#Y4O(HLc%h=?Aoxc`{_{ZSU6LmDF9p(8qwN4J9L-r_E{jihqZ=iyEtSyb6oG!
zbcs%3*g?2MQMW9NgfY`}dLc_wIkj;THeA1VfRr+=Mb`1WyI7h*6hr1foG#a>O=)d&
z(>$~EBr;M)mFkX{wX<@FU4N5_U7Rm8IZaY=YPE6%RvCrI^}rQ&1u1xV(i|F!Xtq)a
ztGuqY%#I4m+J&b?*E8j$-cVCf+Rihx%gUB0tf@202_k^JdJa2Ymisc=*SO;`uo3YL
zVqhui4X0aJRJUZmM}?LtDg#?INSy2;>{1jCexk&2bFL-fasz^5qP<nu9yM>hJV6Mn
z=dkad)ZI<tE}Yd7_B!SI`d~L|P#tsTQgU1wc1M^yVq{vP)wahMIIttLUKS-xrx;6?
z_lCXS7+fWoPK(`k!4exsrlk1=eQ%dySvd{RT1WRv^z(NSz}?xzCA$|SM!XuUW4B7&
zXx_PQa94&U1LiQt*Q%|nhJ12td~r)278gy4)&;pV&M_x!mm#DAo5emSCFz!H^3?1Q
z-n%dxWcDDTIfWEU<f1C-q9<)P!bqDtn`WkJ92D{tG&n9QbC$pb1EPUSn>Lr}vWk$F
zkBO3H^L;dJHmv6o(ynhYsB0`!Qr+s5La?swsXc9$#Ez{ekv!yLU^&rptpG=3O_+VY
zKL`R<I@SS+-BV#~*V@6<nbfaS;f4(u#L<lIb41mj5=$bN4Sl-qL(*@FE5laU6$p|A
zA@Df_m;SKTA<^DONM)23lxu__&AC-adDk;m6YUhn<~(5Wp{=*1Vc>*s7sjy927N05
z`gVcgfr6H*A`5LLUtD2tZYbBBR<h~@8|vKljx3dv(q<%yEzm>M#Akb4o|y~DK=_fa
zPkaHW!&zxrp6u~L;59}cvLSamF(TQTn(~^zP^V2VP;7XWcBwL?a%XL2TdNnaH$s*(
zsj-|wJs|43F60S!4zH>q(q5zCgV!|u_Ha}DM^4$#`Q_mjtl{AXkp^p`!%iv2tn$Ei
zZ<ht#Lcn<4*y6(8LcTSMBZp6%#h?1Ke3>Ft)K=T2Adg~im=xQkN}@I%5hwW+lAM@`
zNEzMI^2*2!K<9Xyi-mhzO+HHdLcrgU<k)qx=}G7qrc1nIDFtgTBy5p>kqNR*Wschv
z<e|FK6td+fJBok<qb$a8O7~mj(j(G<2!~x>Yg<-8QM6QAN#fgnxhHqS!PVEwb;l4R
z#$4lxNtT4<L8*E4q6uK|LMrm}u4FFg)zSULnw0#)QKyp<b2%~+$K+`35*-_MxAo;B
z6^N)P`#25^0l5X~B1ZfZt^qLL5e~Z^>b<fb26Vvr6|%I>x<D!07QcG&PHUxewO2ye
zQ>bHy@5nCdL+!G{d9Q$@qq7Yy4Y(DlafA-Kj7<oZ5oO$oyDn4(YhYB#6qDLokS@9&
z7fClQtMy)%=A3q!ERp3RD7Xl5uQk*a5ao!n_+iB_o82lu?JgtQSPpy~Y&e*#WU?f5
zS%>tgM~<Oy1{S^ATrjB5lGUn$@G#J<yHfx?>gUF}3Q!ZH`6VwQwiY82vARj_I2BtR
zOT9Iz5VjMzH&qF^>&Q80%z>k#rzlDg(a9xb8CcQc1;PrdgzJg%c8gO2t#Qo7wG!+3
zy)J4CZFLscJ&BsfYmbNob+y+eqcDwiEtdFb8izRbfX&HrAmip}Bt~O$B}%qWxn*aS
zEB%ngUAv3&jUIQ%a(9kGj>vNr33Wd$^-z_{+*&M>HPiY4s~~;uiDpF-utTpG*ODd9
zOE}VdJ7gJZ>228Ct_lxswokkAQDBd&MZeaM#x`2iwLIwSoB%|vI0hk)*Ui~k=G@_Y
zl4W!cAAP7br5d_H22{=SNP9_AmJ1rY@IFfH$Q`eS?a_!J_OeMx0-zoH5|HdolJat*
zuY>R72TdmBZd%1beqN)4i8oebiZp{#C^AMT=`hi!CA?Wwy(1w<W=zZ)D1?k&K%>mU
zW>iWilI<Jsc-T=Yy=MFi>A@RPm(8`U9~>tbb~?r~spTB6n>~MTC_E}=<y!^7GHbFs
zY+u)Gn)TxdK~_JBf~*c}*}cEPo~y>5vkz*Q+G>%-WL3jXMhK)BE>LkQ4d#--I1sAn
zB#aAwk)(WnHT?_i92*k9E`3Obsl4hJ)x_};={w#zs4CN%J=C94t5Nr1v<PqOO;sp+
zVC}(E6%Y1Q>BaiE+Lq?EY{;QuSiP7AMkgD0Mdd2gB&d2U_&jA<3>#{~;BrG^jqB=S
zF^L3J8+;?N;YFfP6jQ?+b?#`i1+Aa2&6ZkVt-TKDWu=;S&xebq*?T*MkuPJGF>BIM
ztGO|vgcA-NM}BiGr~u!<_ik&cjt;g!j-t@GV%Aw2T3UvXI^ub9hyOpXBR<0?hWq|6
zD_uK#_I|f-z>n|0A3Xm-U^InekMG1NN>Rk;@4ue{-naj|*EP>~m3+j-{$u;22!Rmq
z*&n~}|4IDw`HxQmUwsKXaRE0G0DJ{<Wi{4u7_}gVU>NvxAMihex$WjvJmWQGb$Qyw
zu3t3%ljQkD8wasp|0}qcbO1Q>swN%e?_MI$^vnBns_(_M@3vsmdS%ywcHx13U6*wO
zwk7D6MN?)zXg6T(K0kaA^h&=0i?Ri?GMvfBHj0Z7@Nd2gqTj=w-^1^o!oL3(6aZ$j
z(67O#rUhU9fPD4UH}H?(OZM^d5!}T^cLU$~G<ZMT)U>r-f&Htul7i0oc5Sn`c{&RV
z!fjr`&okMqkh0GzyN$kk^(QchXVKw&UXKkv<@U|<t2P2>4YgzCgC6*FCj|fa4gCDg
zALk!+H}iig-=YKXsjzb&{N~xN(s|P7+2NkU34D62Yv%gE{_rFC@85#|@emk%Lcy=^
z8eIEX1=h3P%KW~Dpsc~6vR^k{Rb{bj7jJahG!b||wdL19?LNIdzct_Sy}Ag&M=;Nm
z&F1slt^#Gh9m+Zd<D&KJdAH;@KpcR71)l=&<*OgwF8W9K=X{=Ly$3JBzkLg~kzW8W
zepT_t><u&9JCmU7X2HIE3A~us4BDRe3%P+8aWM;)WwSad1o<#$_@1bKj`=l0z|R{0
z!{Xgt>?aX}7`SWTOYl9B2;yfV{g<xZN>aR0;(Lg9n)&L^0(^U-?mZ=gGmAUhrt;l;
z)OdIA`w2aJ*zDA0@o>}GWMyrKzqJmze1F=<gKxCpdw&L<F3!9;XnsY4=jZ3y9(Ny_
z18KewzWP(vfN(Q5u$$RUb6?cgzzeSgUc7Ma#-CZvgn#(MUy-N9-@f^Aequ(<B7J=y
z?j$Yvm%lvm2Lb&4``^;a8&bQQ<Neh<*_)s7W5uuDNa5duy{sJDO@TM)dB!&v-+p@^
z|FfMd>uuWz!hIEg#YPF7qm?32vXl_;gOez2kOM}JhXO5(6}ghwP$a`cih%z3ezVJ4
zq>ok+3YZHBmiOQcXJ)_oW=UH_tAk6lR;FJsZR>D15hu6A4dage$xcq#F%*o$`N7SB
zu#aq0jWIOr*MRV5IOvb{{-Ccv)yMhhl1F08ciHH$py<A4N-<o{b2e&=$|;0-3bT-8
zp7kfwzOL)^X&xTXr`9MU<R%5KE97Pt=E`H;FClG%h37clmcF@rxMy@V(zMBP$#p8v
zvbyOl(bE!AQ%k?F-s{SUwhV;Ndf!-=!m1HED0FTgYz3&V<OGHIh4DnBoo9nQ9YkX7
z18ssGqpB~l`6FUGl!R^f7oZmN0S~x>^_bRe1&e_WA#xJn#)VZZ22k<*$o5?B?3f>T
z8{0zfSFw|+o^L$cVoTwQfYT(#6D1*ECNRDcEV5y-G+TH+I0kaC=_{iokEpCmx_^6F
z+u8TPU9uI_2Tn`ldmU<~R<nUBm()7vF~K@^hgAGMz{s<Rq9D{d7a~~O(QNHUyNkp?
zA=}ZOQzIW?#CK#v)%k+EFhG%FJe|ufO>Ld~ESW)&u9f%D{u-!ud!D1^q7ujD?w8Ku
zfnaNIg8^v$@%+7%3|CWf+p(?ZK8)C0$OI)UTxM$%MPokhm%FeNOZ?*iBM?Te*dnPR
z!nZc^Dp`_NCxIXkPH$(w|2q3{`RVidhnKUnt~9-6hkWh`dJ2h|XRuvYTW?DKQI9I0
z(3B@7<Mip?-nf4e>r4ZZnc(=|THW9yI1s_RmMk~BlgC5=8W~A<Uu3FFp7qU@FuzKM
zCMY0CT526z>O;E(rZBSGXJj3z6ogAQ0#>w0xMnJ#KsSdKKKZbs6_}?I{WnW-r=RNA
z3D%7U#AwA0pb1SB3ic`KPoP2fpvZ+{UmbI`_AEvuszD~bS<)m!;dW-TvH-yQ6%0=;
zO)-gRu{7@@fcFv1>Jm5E^_}0K>RWiQ7+ZC($Xquyd77@NjFl&+2PKPlGffI0RpRo5
zVmXn&Aoo(JAyyFIJ|y)_M{qaxX_&sE#zOs+#x$(qgJ6MEh6->+6v0$sGs={%*~zQK
zdc(h@iMU`d_LY$<`?Uno4K`1gRB?LWFtVnwgp*~7tfN|FAnJQTZC=%~9Z|=b(y=U)
zXFUk)7&zN=JZ?ds<s~wL2ohpbn1mcS7yA=TSjeKiL)s=auOjOC>iXjtO@hN-nHIY|
ziiC@7+YeWT0<BPAO;1m+S|Yt(>ci^&PPSivvy-MhT(dkh1KS6u;IRv+l=%gkGUENq
zK$c>Jmh9rqEB42OduppUMB6LiD7!~<WHM7|^Yi!S_?3lr<LI3}*{+1^50P=RzyBHQ
z)6sN18PNH!KAKM2^WS5%E8yy2GUWSTljiq7N5fIU|ML8Ia(ddH{~n|L*F)d?RIX7S
z;mJcNFNoNePcM2iiXu8%SaNHL9|$o)Ri8ZGBIa^o(<ziK>ug2TLzV;|4P4R@#F^m6
zWNhdQLp(Ev&yD9}CP|eXTTG0})G&oH9~tJr5d2QV_`hy7oaW#%ZiW9k`iG<8>9EEB
zW3+2H?LlN*i~ssG_y176|37Zu|36CmAK*VO;e;Lw#JAWEP@r0ow-JHEcW2ht)R`UT
zB4QN8=3?28zDIQAm=u-xP19(umW1xzru4UJ@^C(O9kCHk_=Da6x!L<4#sB}Hk6Qdc
zPAmIAIg2=O9NgajBccnf|Buk>{V$K84kknKzv<2WuMY;}(N9d5$6>Z>M_?s~RVi<G
Y-2ZKBTie>!w!7K>0Y5+dO8`&+0C80wvH$=8

diff --git a/overlay/etc/local.d/headless.start b/overlay/etc/local.d/headless.start
index 8eec0c6..b68e546 100755
--- a/overlay/etc/local.d/headless.start
+++ b/overlay/etc/local.d/headless.start
@@ -11,9 +11,12 @@ exec 1>/dev/console 2>&1
 logger -st ${0##*/} "Alpine Linux headless bootstrap v$VERSION by macmpi"
 
 mkdir /tmp/.trash
-ovlpath=$( find /media -maxdepth 2 -type d -path '*/.*' -prune -o -type f -name *.apkovl.tar.gz -exec dirname {} \; | head -1 )
 
-# Help randomess for wpa_supplicant and ssh server
+# grab used ovl filename from dmesg
+ovl="$( dmesg | grep -o 'Loading user settings from .*:' | awk '{print $5}' | sed 's/:.*$//' )"
+ovlpath="$( dirname "$ovl" )"
+
+# Help randomness for wpa_supplicant and ssh server
 rc-service seedrng start
 
 ## Setup Network interfaces
@@ -95,10 +98,18 @@ cat <<-EOF >> /etc/ssh/sshd_config
 	EOF
 
 # Banner file
+warn=""
+grep -q "${ovlpath}.*[[:space:]]ro[[:space:],]" /proc/mounts; RO=$?
+[ "$RO" -eq "0" ] && warn="(remount partition read-write!)"
+
 cat <<-EOF > /tmp/.trash/banner
 
 	Alpine Linux headless bootstrap v$VERSION by macmpi
 
+You may want to delete/rename overlay before next reboot ${warn}:
+$ovl
+(can be done automatically with unattended script - see sample snippet)
+
 	EOF
 
 # Bundled temporary keys are moved in RAM /tmp so they won't be stored
diff --git a/sample_unattended.sh b/sample_unattended.sh
index 58fab1b..0ab512e 100644
--- a/sample_unattended.sh
+++ b/sample_unattended.sh
@@ -14,12 +14,13 @@ sleep 60
 
 
 ## This snippet removes apkovl file on volume after initial boot
-ovlpath=$( find /media -maxdepth 2 -type d -path '*/.*' -prune -o -type f -name *.apkovl.tar.gz -exec dirname {} \; | head -1 )
+ovl="$( dmesg | grep -o 'Loading user settings from .*:' | awk '{print $5}' | sed 's/:.*$//' )"
+ovlpath="$( dirname "$ovl" )"
 
 # also works in case volume is mounted read-only
 grep -q "${ovlpath}.*[[:space:]]ro[[:space:],]" /proc/mounts; RO=$?
 [ "$RO" -eq "0" ] && mount -o remount,rw "${ovlpath}"
-rm "${ovlpath}"/*.apkovl.tar.gz
+rm -f "${ovl}"
 [ "$RO" -eq "0" ] && mount -o remount,ro "${ovlpath}"
 
 ########################################################

From 51e426e9bf8459c7c40e07b067db2c2f7af5b60a Mon Sep 17 00:00:00 2001
From: macmpi <spam@ipik.org>
Date: Tue, 16 May 2023 14:36:41 +0200
Subject: [PATCH 2/4] preserve original config files better

this would allow to also use apkovl to rescue existing disk-based setup
---
 headless.apkovl.tar.gz             | Bin 5242 -> 5644 bytes
 overlay/etc/local.d/headless.start |  84 ++++++++++++++++++++++-------
 2 files changed, 65 insertions(+), 19 deletions(-)

diff --git a/headless.apkovl.tar.gz b/headless.apkovl.tar.gz
index faed1ed7cabfeedcb39336fc306c3bdd3b93c9e0..13cfcfdd675e468d3b5abcd21241d9394da2ef7a 100644
GIT binary patch
literal 5644
zcmV+n7W3&JiwFP!000001ME6^^P|R<{?~j8GIn`lv%ld!<dj`O2oMq=1n7WG%Ef&j
z;uLuE-51F-F2{-OJ;t+}s(DpX)AZ~2UiUj22s#h`<aY*S0h%PA?E*h<pVugXQ5cHi
z6oq|)pa_m*pMd1=E!YG4wsRT~{G_R>?$_{sYy4jnf<^yt{2+Aty!*~w*7#i;G(+MA
z?fc{LP%uRh{|)^U6peoZBJWRxUxttRhub#(U1Px0|LNcIf1JQ^9K{f7(Lah}<VXMi
z5b#d_%kR6mYP;{6*7+_ArZ;u(zAqlX;r}Q?Q$N!``Di}+{|A6Y?=OqWL3V*PuFejJ
zP9DZTx*PV$t{=Cf<7RDW>suZnazx<LRVEW3--MGej9r0eH>2dOwS>sqIO)ydjHHB4
zLdSD%MX?cCT4sdit~WTv&Qg!&R_pB<=KS4CiCsZDM2B6R>Dj$BxJ37QjKg|Zp}ckj
zowu~Qx~H^!>F(#Dr%vs3X3&xFWnJp`EW1l3Z!(VC>w)8F+8>%mym0(=f8J>Wf~1G^
zfb9?5xM%LYS;r-IA&&Zt2r(qeWV(s<;3i^bCzZkuO=2W1czCzHk!#Oy)gkI(9*_FH
zi%OVrIJyUPpGt>o6YK|e@83!S4%Yf^7^rQ_WpG?1mA^mV#IVl#wV|qq(@NiN&k+M*
zB$}K(wMrXj>d$!xZHpRhH#?7?5`G%|4xd*JZ_c{wm}h)#id;~N$~d1c_!Q)>i_OMf
znQ1!+{J}RXSIRGKbPfe5)H>uqq3a#u2_}79AKVpr*ZF~GcHXX_<0?4rp_aVe1t{m-
zdk{(cgd;c1ZsQh4ddY5Zh<ihEVGt{|wdS57$lb2S+}da7xW`?-W45j=Pibr7?Kj}V
z{{QUcby5Z|ap3rQ(6+$;we^04|1JDO{11GLB+=C)2fQyH&-nk3asS8sPvQ8_;y*!Q
z$jA8qA>ic!YhIL8@SyRkVQfK7m(HxogL~e3jsh;e&fW5v8yfqXb$<HH5A0eb2e&vq
zE_t_D_4bi{2amkLD&yn7n>{S*><e(5RP%H{Jdn8ck=(?CI5RA6Y3D75GCF7ZLpxJe
z!#10{tNRLctRlz@9yE4|V$^Do@;4K>Mn9$cKP3u0gyxDqUwcX@MECU6NJ+1ihm_Ao
z)!Wu9NIi5>G$-9a_=JFNvV+LD+PLwf)hTqZcYYUR5HM?X(sHdPbOJJyT(TkW#6vz|
zyBl0wXRXV9bS`8rU*g=l=&gNKXZHBbH^6gid3E#4+x|iH|7-sLzG}eVI{z*1{`2~e
zK#7n3{~_Q}|GicDvj*gTr~z|(BcZCvlaG6n@Xw9^pV|J$I^kane(C)8K6(5`{wEO<
z`+5E+5c;G4e+c*;^Zz=3=70a0sl5_V<LA)0Onx9*JUgD!(Wxz!BM#~$OpsOjBhJJw
zBikLh&+5C#8Y*`utR|yTUxN4`%mBf@NYbeiHzZ#olbc1UXiNBE9F95~j^%RJlrDE;
zQ*9E<=557BqAI(}UDP$hd?;lW&UI)G0ndUawDHa^-RH8BhpKnj8i*k$5zATAR>`t8
zI!93t;Vwnp^C%Xk+%V~tD$Uj0C27=hgW>`iW!bB|=Xr0nw!%1ptdTffZ*iB=#_n$T
zR^>}%tW7%AAFo??;}Y_4R|z>OR)(6TnK*YwH36HP!jop?N~eZ2JUSUJ4aGEDYlL0h
zwnpy6C1uOeDK*VpJLz}S(zLGkt^B%iBnoSr+;+nlAaB0QPS>?k#Y%&_J_BE3o<S~H
zhWg{_9+mYyRTNa{n6kcLs}@O81;Van>Eb6!oOb6%60Ub3EN9x^^xe_$x9byxux0@V
z-bt758h7RFo^ZAqH#7&Q)x-K&FxQIXs;EE0+z}(Q3a$48zQO^S%m-DJFq2|zRaGvI
zvb%7#V7VQ3m%}wSO-x1eEBa9`C8~BBp{<E3TKxCVB7ldniECC7Bu2blHphOGdhv2{
z-Qk`JOBa~K+`y>!o*wb(u?@sMd01TyE#8*o`f^S<VZV+b9oVguf|R6tVW@K}BfNiQ
zcF1BuLVJoRmMBDBG(}(9?}UlAWQS(vdKxwI6t*}nYD<*Bg$qOjwK4Cm^K}y=9iI>t
z%N9yJ?{=*35t2M~7}U46CFx#$${^S@6iT73ijdi67Rf^)hPE58w;FJ~Yzb>9l!G8p
zm1`f6#5<Lj{nj{GCX)qCCfu<RgE*Qo1CFSNQ))}(x}{GyB_e~4xG`*v-GDG%5dvR8
za21Su6B3<$jMSIPh6;laq$ReRDDU}~%}l%HWp^I2<j^&H@^Zn6z$q`Il8@$I0?hpi
z!$S?NbWIhyTD^LLV(lo;nm4NMhCAxq4X!Fxv)1J#iLKB>+$LvdTA!IK$w2s#Zccm&
z=;K-ISe_j4Qs5279P_bodod>2hMJ3pzfz~&AW&>{ljKYrGqtz(s$(=O*q<QVo%KY`
zpaBp~(-ex7J4ZMDBGP_q;G^HR!~SsBf@e%omiY2C3-;pU7a|L{M30>^jM)^S<K3?-
zx`Tk}wsXXlvxfqE5+@FyIh#KXXZ1SAsAz2VYeAjF;bKv2pJ}Py`b3fzb3}4tDk4>U
z&#D`vwg6q=T_Kj<eKQ9r9S9+RN77^8tClaJQ<Saoo~1Oby^^p^24ya&4wbuJTat(R
zMpMY1pPe`c4ve;%ra4pg$aO%Z5fKh@(HMJHKvA^PI!WTYVXctzc<{`vc9R)m!kAk!
zGwGU;d?>SyemnyVUP@(gmMi9p-dr<C?O7|X9CbQr30EK!aZHc4oSN7u-?!JRR3f6L
zDM=Du1mqrOs{{#7xB<X?Pq^%MY!poyM|8yb4YIb+ra)=?4!`+{Y;@AOR<sEAHR{;o
zGTFyNWL!5m@0W0VboY^M0QWMx9HE1$Vl#r}M3wZS+()`#kBlx^V%pd%(nGh?D(&ZW
zy;W3ciD}o_7FjNa!mE%BMoZlQQH?2^A2<BEl{dvnzD{UsyYO*z;BdCn*_P0C6Vayu
zIYxmM+Vp03#h@WiH=7#5qtLJ)Mga_HP+ZP+h*}uUuXzb^j0BO0&0X@Qx!jvr=5I-j
zaNN+l>srX&CeA%$E*zHwMNxu?&K{wvz=jsD5LQwZ+{}zGuTCkn#W4>zDs12tQ#4k_
z<}7Xp619%E0TBu6=4>lQV_N%GuJOsb9Foijb|>3~E_c@;F&a~AQE~#xt9rZIn1?*+
zJ2@_PX3`^T`5Z?aQ4~57nL$>WkuFt*y;`MPrV9X8Lx#c^t(qiYm)@>!6-%7gaBL1v
z#4^;{-?4YOjt*X~WPSBau*c16*qX=7K3+AAI-1*p07Roah7pf9?b%%y+~IsuRaAkG
z0n}Mi1KptuR4;TSMUu4jipH*dfD$q(^Lo@BFEPYkcPU8#wCh|$lD$h(QO)#i3<CUM
zsHED@n<OmGTXeMW)^074W>5-6ruZZsX8N>-cdL4ECFICVsnr0bkkcz@Qd!uFE9peC
zL+c+8GNsd7Cb*J5ydzE3+B)XJb;D6MF_y_}_jubW{G*`osf1PUH2|xu#mbn{G;Ed+
z(*!~GFpGk!k6YDyJi%VFhQc`qz0VxI%oDP1U^gcOQjAupI9C_un!-2`>F6v>D}I$`
zd~vgaEA1Xz62GkjNQJ4Q9#-|t@i7^={yD5`%U&!rm@~W8l_*|C_wBAOH3iuE@LVUO
zGuLLhJ#O}ub*ox(Y#G)p=aDhV*4t2p4z($&A4|T-SQf*^hPZIWMPe_v&DCa738;7Y
zPGY00M4u?8fp_{+(HJY*Jm1<qwZb}Q8`A4qx152GR&A^Jvc{;_DbJZL>FV`T7*WCr
z2aXfJJC;<4@8CzZwbmyWTOmhLXgx9SZ3C_Bi;%hEdG^NtKaV3m!Uu-O`7f_LCx7Gr
zZtsAf?|*;u`ws#~D0(^mA&>XJ6!G!>?+1aO>i^y2nm3Ovd5??zb^W6ljic}MkJ2>y
zIRBIQ$L~Kr2z>Sj*iA~fjRD{@kgMvcNusy|F$BZFmq&yD8(27AQ76l|p>3`&a^eML
z8@xz<P<Ba}1kKl=BAEbi=5<3lsNcLo-q5cA0Qk<Svp;?beh+;5G%(OB{BK@;j=p-=
zud`_BV+-o1p3?^4=L-Uul)$H-I==rU_}Oy3=qAs>s>~-a3Bj`JKqqe&E1kf)3EGAK
zg8b<+@&|C?wcv*p_#a@@1U2|F-oRI%f4}hf+p9l;T^u~<E|eFvh59nIjJyKB_+lZH
zlwJ4^7kmYN`z;7}MGe2{8mEonw?YK|V}6({|9|?^^5+NnL&T*Cy5L6%7paD%>f1-}
zr}LJfpGfs&{ZD!POwxt=Pb6&vAACu`*Dd@P_w~EAz5a^}!>|7<5`XpOqaS#21-^R9
zyX*tJaQGS=o2rb!zICEt*{k55bZ_Sbt>XcITQvFH?PdsmQ0KpcFOLmFUx9yp$mP{P
zbQY1&zrCpz1A6tGw9M(M=Ixwi2i{Km5efY3kIO9v@a5(2#-7)UsRVf&EC@{jzBJ*F
zcb8Qy96oyh$d^7?EnB~YEU>FUHvs*<uJgomy5M0?%e}g4yB9BCPP}~${?V`AT2dD@
zfA|u37``6(NfUS-*mi!^FJlYMplPb6eUS93vaRv}bXu_S-uz&^eigJ&GI<p(=u;Ob
zWdsEGzyr~5mu(&3ceAi>zd!+CL5qS0d}%xI^Y4+*KKlw@Y>j<BCI{uD?C;>a=nFo+
z!fO{**5L5@Tb}~m>8%$o-cn?Xus_xKV+B#;xQhyx6<0$JhDjcjP7#1%Qx%|J1Z@N?
z_ZN5j;}5+b-J}9v%a!9NPXky4Y=f>_I_(cL-+cA;>jl*rGw}8I|Jly9|2B;T;rq4z
zE4FF4KCW?|O&~{wc$5Qil&Ty;sPrnw-ZZ{Cwy~Xt2=#xzZ+4yd5t{}sRCl@^sUq>N
zcV_4L&Dudk3acL6&?VvoPweY^Rr0^x3a#%O(Ma;J1Hryh#nlRpLc|x`@mT=XdSjRN
zIrIWH^^J=#HkT{)9)=?(oGs7-vlhRNh%4L*AfzZwWP0|NN3iBGkEUKgu@7sa_vfLO
za<y2dn|hXy4%-Y<{#R(6_sDIe4lo&d69~2m$Gey(knDmOn1=|f)TyRs#|!x*DB=WH
z8+RLx+vQzxVNJ%&ZJQ$JU2F^irRBHaO4ZgA)mAi-Yg1x(IvKH3Q(4IxbDeLI7%YDC
zG-bYdq7Qv;QgyM&_ZP#$vypB^kTA+GNLnR(J@(SeiW{Y-xV6s)6WbA9zbt{S>y%>P
zod{!GXVo1iWc6?s)=kF<L)sK_spTOr$-?yo6Yt$SYt$Z`@7>4}29ZR*r7016_^@{L
z=D8>>#afY5jR~?%6^qHQw%Bo1O2H}Bc>cgJuQWM~73Bw!-ZywOT02K;WctP2rjFsp
z>_o7w=$moHxB~$v;b86RfZIp5DaRNHi6Ed%)@<mVmfp}?^;Rbty+i?;8neY{GbQM<
zWKu9J=Q-ChjKvg6qcR%;jNR9}J-yXx(O>y+gZ>JYBI-FD*X1JMB^G!WQWy+9$ML50
z$z95*{fb7CmT7J&anN%_608z)$UP0N%r`rqr_DdG+Vk9qCaV-s6FFRIQX!}MsC|bg
zek5#>RGC~klEo%99&@&nLX=dZh>v}wqhQA9_#`&U4z&%05o~uKX$>eP46%Z>OZUC!
zRC8JAVdn!RVn8;wgS6xMk?pyLLnzm~wk-}ce8p!1ix}6QZLv%4^1z^3%!tK=1fqHx
zFhgWRb&FEv`M~Qy33)TckA1BRQU`&y`~<p=wvgtafER>OZUt@Q@r06lMA!?my+%s%
zEP_dJxQ!DYjP2-X>_@YcSPLPWQRK;yQ)udUQk1;-#Bj0446q%DOPUOzEf&w9#I8+^
zz&)%~5_d_8lD>C#)(?HSN&oyj@RBe4=kO<J*sPCH1|w9a(>I6JN7@<gK7CVRHI8)}
zG02q+b^<Qu3bbhp{Rh*{-JEucgobXu9qeh^2XBJUGq86Bx|RI~(u4>X9VVW`Jpf;n
zEY1QhN@Mj4Nqp1S2!UxkaA$#xVF^Y_ZcK>`H5@D3(TGi4BZ{~SPh+7O*nWiG4~Pri
zH1?@%y0-6A(bE#;$Nrjlz3@;25{$iT0leAi<JUqJ@Ng>n;N`j75y>GM0}IO#cg*zR
z0fr0DVbYVBgWQSearqR*9`QZ3fj7vv=<eA2!30W|``y)E9ew!i==kF8ACHfp9vxPM
zTUvH#3>;4HGvJ=X86g<78ug`@9`<O;UdC=Z?eeAj7j*^mfMn(bl8@z9ci`NJ-m&PH
z7kk<zh*XN}D$6YAvLv|39C7nXpkq$KLfqzhvV}YZ@}ZPIK_!9U_7^H)q%jgtbX-Fl
z8DYTz;uxPT?!(?qR*Pmn&=ji)N7~MbwGHPNyytDgC#El&HS}U-8pLSM4nR_6NE8an
zh)rpeM3?w0Zv4#A*s~bn%o3jTl3E!LS=ts#%Q8R({0dN(x6ZRN^(4aRqAP-5%OzGx
zi5o8<>MNKq?Oa7~+ub%belbUrMLntC)r`g~3rSMhJJU$vd#Z~%A@h>2!B^-^Ce<m^
zFnvT5j0QJ3&_MDtuK>G4S#aWp5z%6L{tS_T6mGjv9-4AEZH&B;yRJB~nz$wfQ>cmK
z43}-!|J>RWO}xGrx8&9Or(gYTxr^en$y|=jNS!ZKrSpmn|CENYq1wckMxLKzlvU0A
zgiO_x4I`c7%&TyI`bv%BVwI(~GrL$(%a)&$ptD6JBg7_9Zq4xw3!-0Mpm6gbMxm)m
zD3$}hJi&ynEQ(^1Fg_lUT~%^-u^qL{!O)_OOv;fSj?(8uNn-6C9DMB-VfD;4+`W8}
zEg#jepUbjI!R>LebPRa)NESUv%BV@Z3`B1&%InF?XY6BjQzo4fzk5cdd6VXd3M=#8
zFQ3c(SDZDKd-saxzd6hPkTd4he*f2L_1e8ow}E-hR=d|#&wuWMz7pAM<00Pv?3Ta(
z-EOv1_HT>de;gdB=RbEr|Ma2H7PXkv2YBLe%|mT|_x4Hch`fl7OfC)U692%(IH7gX
zn-JVMvFUWp7Uu^NUWY7pJ{q{7qm@H$^t+vYYuM-a`^^Xa2OTDmkQf_w``un2ecYhk
zHyeF!s23EzhYHI7+If6a{%_Iq|911Bsq+6_&@J$9Ej(_`|E*qP|EB!?Pe=X!=T7Kf
zkpHoS6M8J*pC&e16=p@=H4hwPc4$q_7DETQU_p;4&EcgUeU2Cwku4Z~(=?i^#jd+D
z`c)(zI!s)LUvnq?L2rPq_WoD;|9@$<RsO#l%Gy6}+t=&|-){dl!3AaiJD_6wi_@C5
z@sRkhx4QjXjYg;a6Kjc+Bipqjppx~9l+gd&{)!YSQlv<cB1MW6DN>|Jks?Kk6e&`q
mNRc8%iWDhQq)3q>MT!(DQlv<cB1MY+Tl6>i)^|SucmM$C<t_gJ

literal 5242
zcmV-=6ou;_iwFP!000001MFINv!hm)_rK;-;I?NyHuD}iXm;!xgh&!X2vC5jDHj<;
z6j9*ycVBqj_Bwa%Zo7A<s!!E>h?~yuo_v9z_27^GU_xf1N%G}7)6cIjzfl6CFcifp
z3i}8_5gf-p0?9ub*g{>?IyDG>RF`G@d*j~L|1V0xtp8^}2%Ro#zj5b1e$xbXpLjv@
z?szN;rU>G{p?`v+@sB{{-9h+m`k;TfY2rUL2E6z`{Wkx{2^_~!454QIqbNpx@c;Kg
z-|K(=`z9`%_M5tKzDa}ex$4|^#p5mhk0LbnGyRjx<%9pf2b%T%G^-qBXIkUx<Z$Td
zVf=EtVUO&3X^xJYwV|!=S%fGNfy-BgOniJ3jzT}QIiB8)g16Q(qDXPlnf)2L5jqJS
z&zTj)Mr3KJ5t`f1;P!TU^Js3hmd-HeZ&&-+734#7*v6@zJ_>_Nbg#oWtb_NI*KDA(
zM60XEjaDx0<J@=DsTt1<IuO31%iWG;w>Q}vjiYoua2!qheO-$ej=%2CTdhZs+u?S=
zb_Z_QF^|ry;sU!6M}0zs7!noowu$xNE@EaY7s3`zV&s<d@K(B$YtL`gKI&i|kGh?U
z%9wFDx(9T3lMmNA*!AqrzZV1?to3c*Q&PjFaGWQlzdPT>uu8kNp{j?|N|&T_#6TE{
zCTCAAZ?!Xa=d6XKyh5AJ*5k*7AA7&Wr<KE-lkPg^8DE<s7Zl=tm`)db3^LcnCS$js
zXgdh}-Zx8E&Mr-K4h1OGTI4{X>n-95CVgBV+!guI`JQLC-ZrP>GC1y_hP*!nDC68m
z5XrlQBR9-;<L1WglHTDE_xk+8AlA*+>PLzo54#*PYnPtm4tM#Mkz7R?Z;gpJUxADL
z|J})|qzInk!11%7X@LK0>-|9gTlz)(4}6Ry(bbXz-W89R`2Wke|3m(#aQtWSpP(@0
zL;Qaq^t8~L7iASZXuN6|5~%6&nKgNE$6GJGfQzp)w|L17wS7%n|Mrp}*tJOZZhl&R
z@@~HB>?8X<EqR0856k~{^0272FTinB&C}zs4C2;DaufIB#IU%foh1xqbk6eoW}>W`
ztv3%>_xI4Tj36&q*4QR{qf&z#e>Z_^^y5|kr;7p$XfE%vwYLw2=y5yMa?)wV;l`(f
z>PgiKQV(quO-b7mJ|Uo+^dK^>Hf;Q8bqd|<gWtv&1Wa0$G+d(zt$<7<mu$!fvEUP=
zZSUebYh50Lb0IV35@*&$Z|ti&vB$5z0$xPRtDD~z`+L#<@A?0`ssZ12{+r$X=k*_f
z5+D5keb7?>y;1o~4amK&0W*6eqpHc1OPehGy7B*-?SH5f{<Y}0&VTQc$6NA0iICXO
z^FM*mAN>D)&>xup*V#+{_g^x#R{(1K(lyMJmw^_~4yW7TRF=vS2Xz!i$SV8+XJVI8
z?3Uc6)k9<rm3t6Yozkc;LwpdXfM8!_`BaJ<k}r_aO{1G=%lKjFk2)F-#eCM3FArl=
zZW7Dp?Y)geWqMWGsIB|yP$(>%>ChAco&}9)?VVk^%anZ<s@_2|5JO2Kma|4_pQdYc
zilPp}U5a{SQ7nv^VbUvAp313BZc)SadlyJ4%U)$2&wH!26~+l<4aDhskK2?swhzO%
zN?#^pZPcmmc$M6ZODO$AC6pvz8ESe<#i=#Q5!hrDp40<ZI2EMf(aCUWD5lv;Bkb}n
z8JQCol&wUkn`vg+Nq?Z0rnQ}KW!H@(Q&>}Hwj0I(dG}p*ysr0UysvTBXW&cBGsp!?
zQGYl+qM~}-_Ip%lnWDO2s|HDKdkDK0g^QmkaonD3S-3ucu$X9n)3ry#m)0i;Va*&4
zypygxH15jT9pOkR*VhN9(ZlMPGuM*i%BVZS+z}(w60LSUzQO^8%z9OnF_U6!Ro!2l
z{r19Dg5|c@LkZW|I5H*8ujr**N>uGMK$3~>wfLvcB7nu%#5KDYWJbJSHpgyr^WypB
zy2U*emM<`exq(sbJU!xX$0iVW<Y9F+v{)+0_2ry!!fqWwI<Q^sb5fQcxuH&tg7E&8
z*&?$A3C$^@SRxm7(G-1ow-rX(QXHC@s&UZBQ`q3RsLfFV7cLMDRK~QuPS;J0w0uI8
zESvA+X}e{8kC2tV#h|XSEm`-fQwqVRv8VR5RT2tYPa=89#n5)+wWI;Zi$qv`zCQ>8
zRl4>8NxV~W*-6I1GMO}}Q{jOP7{t+x8E{0^pKi8Ht{eJv-$!K75_g8JusaamR)oOk
z5L^bs&V)o~7bDfBw4vM}1bL3FCdzyMWi!!kaoL^+EIG9Gj=WrOB5;b!u+Ii_Cj;hg
zh2f!wmb#`2ZKYm4VQ+0I&zd%>?uJ|H-1e?2my_0JB#EuiL);{1XI!6|E6G6kk*-gC
z0qDb7YgwM`@j~DY#vHOCcRMjA*_xX2n!i$~Z7)!4beEM>8&b8icdBF5E7%_)+nw}8
zO`#qTP16+e8+VTG`bDJu#=r-^Y5Lvap#?87Wk1K47qeh5K7Jw6P$D|)lw!;#4;}Au
zUC}KBjQ6c0uAChd*rPad_{7=#sXwdNDMm$Ovs(-5DE1eNV!Kqk>5We$w|t67PP~ao
z89&nU&ZrGQ=Xjfoh4<J@0ZIo#$Ul(VvFlXJm(ejw*LcTL8rED%*d~J_6I6%FT(2p}
zLv^PqWXDfV90LbNTaDwC?sv$wN8|w!4oY4dJ61qZwA5Nz=G%U~CzavgnUZ!_7-Gbj
zdonS%H6i;@Y90M}0vNoIi~OvV%oV-6W^l77Ex&Tq>7*rGj*P_dcC?k7i4Dp_x?bf1
z5jAa}B;iFs9$~slkl=(H0L*uU%SuDN*Y?AJ4miI-*7n&HC~eo`cRx{#Rz6pIErNZG
zI(E21c5xpW*A3451sosUU1S@;qew4D=wPbYgkTv_CY`8skuKN+qsx|ftL+u(q0+dz
zb<?_%_NqL`wCiMxEEhxJRY-cHq3(dF#+1zu8-Cp=oBX6)N3^kB_&7LlIN7(!meF+`
z(Wf3cMu8RD^k#d-pgy~8HWh?Np<ypZ0rY5)U(QvCS{Ti*c^Pqx1d)l&L-xk0*qK=B
zOQc3PZs<L9E#&Sa=bkYaj*Fh6C_zLgk5E-$LyK1kE2t8#C&pJ+ryC^Un1>rB*7JK)
zG*-suEJ{6zTE}~jhy-<aq>|B?#=aM8e6%iyB=v#q$#$X3!!<~Z#?(rboq+Pn&Mr6R
zAxpYeiSw<QbjVsc#}P;5xsF6;kd|ho%Vln_RyT=h1Ax_#KKDhdA_>@~rPaM;iSrtc
z&EAPvhFbeu_MueK!OQk(SH2|J<7U-M=JB$NS9Prprj!$aXcWgV;_<pUyX%}goKLEX
z?%`tqwU%5%59k6_^E&cgmbLYY#;$yT5(=sCdej~-F~nZCH<AEo*SUry`;g_loap-y
z1o**FNwu3cNtmA{bg=NoZY+^zPzpuH_#_`D`m~0(tEzWp<j9OSs|E@oqgT+Vval7G
z@`+^o#y=huN~a|zxRO4+B~8_m9P{A1;h>lp%cQn@yl?mXQc(C*!m5u7fK}FF6>MME
zY?}4s2tjr~iGr#RlIkr_u;;9?=bVGyrH)=?30c*!n-KyjMk`dD$_sP7!8j1<=p>9Q
zesxRv{B8wT+C4TTeqRTW3R8L2ud0dTV={34b68cDJzHonrFNt5qj(iPq-|AbdqDEx
zsY(WCs?0(<Zg!=0FB@`b7}hMNficO(+fca<H8)g07JQzvEQSp=apCfd%wF!BtIgbG
zpxWYFnT@V8eWI8e-s*EjW2|WNd~bHt3TquHq}P>hIXxe(nr81S8lzsvEMp|n)vLKM
zqJ$F;97le8ET|CQ!b`Qa)<+jxAxBYYJTdER11;@~kh<b|@`nFEk0U<Nd#2_5mzAEA
zJ^O#yJK&f1zi<8igTN6AqiGsn-v3e*^5OmO`=B4||NF-^&x=Uj;bwnd|8x0+pg-uJ
zq!#@XB!+%C|Gy9V^b^=k3b=^@;8Tz*tFca^xCJo;!@#HIg8v1~9WSqvx!=$>*C!?M
zf}#nYWIrg{Bus+(ui#!b0pQH*hI~-JdWAgGua@QXz)$MHYr&@V%dQ2T!Uu!8F6#zt
zOVBHerpyA+X~5chez8H&FM|dw$`;JZXdXVcaZ*G;@CZB*{TlXz9{zq7_VvG^05A`W
zf*O2kTJW=PkxxJU68;W+#lAdz1eK)d9^m&j4KCj{HEr!wVE@@0q@X*#+1m^^PiL?o
z+~yVhJP&&<kf?TCuxkPzEc*-$lPoBlJOIPG%t1d7nh2QNzk2oApI_gB|1r-9D)6ZU
zKUYe}pTRG)Yp@C0cD`v|&wT#!ub<CDogoE3|F)`=Vn$DXw=^xBK5yW^K7aWc41W%O
z@oHJWa@zPckEDKK|LU{3_0`flLzIH70_$0{WnL`%49glED(9P~tEw#VoZ_|In<fUA
zFS~*osJ*8*-+0X}fnU!cUmSj3ZB}v6b`_`w?NHV!I718S`9u{oKoWxg0H4B{`L}N{
zeFy)P&-1LC@D=#ae+Sz*D1eWDRXLa0Vis}COv198fqn7{_}HmZ(DD7B;RZfViWyjz
zfloPwAaCakFTw1mJ-;>(2(l)4JG{jVe}EV!z#@T9z#l;(h@U|EFIl}oQoI)8k2=1W
z%%=+r@Xc3uKN2!Hvsl<RRp2e2<u4ZcL-&jQfo1Vx%CpMK+KGN^A8PsIWnU(~mO|kF
z1$4V4d$G-5B6xm&p7pWV(Cln;JNVh3vj&8lv4OqJX_{qIUjQHbCGhdbp3?*~%X#3R
z{`3#zY4y)9znf>w9W$gamdi4v1^@Q9C;lLSUw{2uQh7bp>E@X5pY2?2Z`(Ey-dF2a
zFshNHS?$=eW49`TB5kv+=-LM9`k}~zK$aMri!3RUY{wY(-}f9TS$>fcXLF4W6#*l%
zNbyd`=kA`P<Ww=4`YPldSCtl=0)ij(Ec-@N-I!4wynIQ2c|6#-L}y?J`O+q?<t5^z
zORR}IcFA^k*)|j$MZJxi1F(;Ut@;=m{57O_(`?k+M!iut4vlu!+qYsqv8J=$=A5Fd
znkmIFo$rp7i^?Gs>{QG`B6?o$bnAv;(5JY&L7!Zs@W`?WxE`0z%<X~C^e+*)!L{$Y
z{)CRamAGf>8fjW&xn!QD=UsYwOY}sA)YQ@gR{LqGM^hQ&mgxkm!q7p`c|6$WLj6)s
zP!WHwKM^UiY>=gcm=6O)n{djgGE8i~PmG8XweX%HYOw&}0W&yH>ADH0#K$5Zx7<Sv
zbt#30%nxGWdzL$8LFkW#gR?h$D(QeV_Jzax+~c7|gP4^l3HdUCS!2#(0gI*C!Vkbh
zkf-fH86|m)<y_JIi+=9Ox(|LcyMoSv_fr4L2{ls7aiFCswaUqe!aBS|D*ge%$ajdw
z0BV&p9u7r(It=3JSz@4wP08m}&pC|vE7?$;d~JC!z&s5(?8#G_a-AnE89^akn^>WD
ztm_$svUF5GxVSK*0MIcnFGD~3^6U~AgZ1shA(C5+oOJ%_xcW-Fz}4rUbXMb-r=ctS
zC;|H+mt(QSVJzh0gg|<25{j7b5Di&$=2hikqsNmnP5bJPa6E+?5Dttu+~qMxppdTQ
z1BEVndmQ<S0DKoiFPR*xf0E{ZnHn)AZ6AooC`QiDD9jBhlp%{_W)TnA$g|>@dxXZw
z4n+`y`GOe%a>IZUrze7d(q6U(38FK<kSMmG#SmIKlsL~%K1fTz2Po@9l<)1uqy}Yf
z?qC`cj*$U?V0i!#OMvSlc*4ItK0&sJ>rVs-2SJRkPCSIe&)%PY{rU9c)#u+%KE63U
z)+Ht#5m`N#(<5ArJO-$AZ8%;4u6oXUKtm1|7OPJ8_Rjl*D0}Lu%tnC(&MI$kAIOGR
z4`qokyOXEHj0&lmzA7@+C8I<3fZI2cx^nUql9pOWNPQ@Lz!c`}_8D16Dh1(^rhzWv
zNO(>r0NPl04iB)#O;(Gi0XP(^N$~6~X|)I7OVKHXzh(7Qze+ePG$4AHmI3^!h+D!w
z3;I(urF&4UOVQGbJsA29BX(IJlU~aylA#jX%w~%MkoWGPzUtC6SW~?q%_}PwfLTqk
zPB^Um0#)B*1?RDq_kPhsLz7n#G?mJ;tX*BOxIWWlE_yE%ITYTr3g?WLm!Jl$0N(*5
z)ohnr-YB4MIz)kr;xolGtbx#Z1F{{dOq3LJ#Zhlz&PrBd=NtYF4a9`CQJ{>x<gW|4
ztH9>zCCdqH)iAQyLLi-`&)JFP>I<l^g}H=7n|VYYnN0g;6lZn@z#bv)*Id-b(5HWe
zRLR4H@y!iFdg}4j0X8h;knfPT$%cWdV6v<8_p&q@99HVrEb!N(!Cd7!S9o@hj_$ie
zuKL0`T)lddt!`eh-69{(xjacrt~K%yDrJ6wri==rekf~HnaIxGy=A{wca*CapzSRs
z!5tbSlbMP(Ki(DNSMI(P_Lh$Y{@-oM<GzWE^?v`=HoC2DyVJn9rqSwl%KiUsw0k1%
z#$?F%|2oC*|F)W~x%HR(|DB_wa{qrD?cZ+tKcP~bN+DlvF#2K4zI=XNJ0%p+wo%`5
z`uGEgajNKLbw=dtOwbOakb5Yq)`(aFKI*ul?WJRGnVq(2T$}v4*?eKXXfw$RW#4tj
z>~u|3w7r&TH%xAondqOi99p(<8IOwp2F^EI&7)=+|F_W|pyeBp@nHNny4m_S)$c#r
z<?lbX(*6VSA5*xI&q97X5+Q1ACr)<uj-82ZFcD=U=wYgT-LJ=YF>NO&buqqa8jaNw
z=$2K<+D$%q8F?-rb2s`%Zvd_L{?GjX|1er*{NGMnT>oS{Wy3gl{Q9?uE|lxPg_ghm
zau;o5G8F&ouD||9qtR~tzzn&gCp-~@m26g}tbOO}U$(N9?fY$i0~U;$$^cLR0HgMT
A(f|Me

diff --git a/overlay/etc/local.d/headless.start b/overlay/etc/local.d/headless.start
index b68e546..847d3f7 100755
--- a/overlay/etc/local.d/headless.start
+++ b/overlay/etc/local.d/headless.start
@@ -5,6 +5,43 @@
 
 VERSION="0.7"
 
+
+_apk() {
+	local cmd="$1"
+	local pkg="$2"
+
+	case $cmd in
+		add) # install only if not already present
+			if ! apk info | grep -wq "${pkg}"; then
+				apk add "$pkg" && printf "${pkg} " >> /tmp/.trash/installed
+			fi
+		;;
+		del) # delete only if previously installed
+			if grep -wq "$pkg" /tmp/.trash/installed; then
+				apk del "$pkg" && sed -i 's/\b'"${pkg}"'\b//' /tmp/.trash/installed
+			fi
+		;;
+		*)
+			echo "only add/del: wrong usage"; exit
+		;;
+	esac
+}
+
+_preserve() {
+	[ -f "$1" ] && cp "$1" "${1}.orig"
+}
+
+_restore() {
+	if [ -f "${1}.orig" ]; then
+		mv -- "${1}.orig" "${1}"
+	else
+		rm -rf "${1}"
+	fi
+}
+
+##### End of part to be dupplicated into post-cleanup (do not alter!)
+
+
 # Redirect stdout and errors to console as rc.local does not log anything
 exec 1>/dev/console 2>&1
 
@@ -22,12 +59,14 @@ rc-service seedrng start
 ## Setup Network interfaces
 if [ -f "${ovlpath}/wpa_supplicant.conf" ]; then
 	logger -st ${0##*/} "Wifi setup found !"
-	apk add wpa_supplicant
+	_apk add wpa_supplicant
+	_preserve "/etc/wpa_supplicant/wpa_supplicant.conf"
 	install -m600 "${ovlpath}/wpa_supplicant.conf" /etc/wpa_supplicant/wpa_supplicant.conf
 else
 	logger -st ${0##*/} "Wifi setup not found !"
 fi
 
+_preserve "/etc/network/interfaces"
 if ! install -m644 "${ovlpath}/interfaces" /etc/network/interfaces; then
 	# set default interfaces if not specified by interface file on boot storage
 	logger -st ${0##*/} "No interfaces file supplied, building default interfaces..."
@@ -77,18 +116,21 @@ fi
 echo "Using following network interfaces:"
 cat /etc/network/interfaces
 
+_preserve "/etc/hostname"
 echo "alpine-headless" > /etc/hostname
 hostname -F /etc/hostname
 
-grep -q "wlan" /etc/network/interfaces && [ -f /etc/wpa_supplicant/wpa_supplicant.conf ] && rc-service wpa_supplicant start
+grep -q "wlan" /etc/network/interfaces && \
+	[ -f /etc/wpa_supplicant/wpa_supplicant.conf ] && \
+		rc-service wpa_supplicant start
 rc-service networking start
 
 
 ## Setup temporary SSH server (root login, no password)
-## we use some bundled or optionaly provided keys to avoid generation at startup and save time
-apk add openssh
-cp /etc/ssh/sshd_config /etc/ssh/sshd_config.orig
-cp /etc/conf.d/sshd /etc/conf.d/sshd.orig
+## We use some bundled (or optionaly provided) keys to avoid generation at startup and save time
+_apk add openssh
+_preserve "/etc/ssh/sshd_config"
+_preserve "/etc/conf.d/sshd"
 
 cat <<-EOF >> /etc/ssh/sshd_config
 	AuthenticationMethods none
@@ -100,26 +142,27 @@ cat <<-EOF >> /etc/ssh/sshd_config
 # Banner file
 warn=""
 grep -q "${ovlpath}.*[[:space:]]ro[[:space:],]" /proc/mounts; RO=$?
-[ "$RO" -eq "0" ] && warn="(remount partition read-write!)"
+[ "$RO" -eq "0" ] && warn="(remount partition rw!)"
 
 cat <<-EOF > /tmp/.trash/banner
 
 	Alpine Linux headless bootstrap v$VERSION by macmpi
 
-You may want to delete/rename overlay before next reboot ${warn}:
+You may want to delete/rename .apkovl file before reboot ${warn}:
 $ovl
 (can be done automatically with unattended script - see sample snippet)
 
+
 	EOF
 
 # Bundled temporary keys are moved in RAM /tmp so they won't be stored
-# within permanent config later (new ones will then be generated)
+# within permanent config later (new ones will then be generated at reboot)
 KEYGEN_STANCE="sshd_disable_keygen=yes"
 mv /etc/ssh/ssh_host_*_key* /tmp/.trash/.
 
 # Inject optional custom keys (those might be stored)
 if install -m600 "${ovlpath}"/ssh_host_*_key* /etc/ssh/; then
-	# check for empty key within injected ones: generate new keys if found
+	# check for empty key within injected ones: if found, generate new keys
 	if find /etc/ssh/ -maxdepth 1 -type f -name 'ssh_host_*_key*' -empty | grep -q .; then
 		rm /etc/ssh/ssh_host_*_key*
 		KEYGEN_STANCE=""
@@ -141,16 +184,19 @@ rc-service sshd start
 
 ## Prep for final post-cleanup
 ## clears any installed packages and settings
-cat <<-EOF > /tmp/.trash/post-cleanup
-	#!/bin/sh
+# copy begininng of this file to keep functions
+sed -n '/^#* End .*alter!)$/q;p' /etc/local.d/headless.start > /tmp/.trash/post-cleanup
+
+cat <<-EOF >> /tmp/.trash/post-cleanup
+
 	logger -st ${0##*/} "Cleaning-up..."
-	mv /etc/ssh/sshd_config.orig /etc/ssh/sshd_config
-	mv /etc/conf.d/sshd.orig /etc/conf.d/sshd
-	apk del openssh
-	apk del wpa_supplicant
-	rm -rf /etc/wpa_supplicant
-	rm /etc/network/interfaces
-	rm /etc/hostname
+	_restore "/etc/ssh/sshd_config"
+	_restore "/etc/conf.d/sshd"
+	_apk del openssh
+	_restore "/etc/wpa_supplicant/wpa_supplicant.conf"
+	_apk del wpa_supplicant
+	_restore "/etc/network/interfaces"
+	_restore "/etc/hostname"
 	rm /etc/modules-load.d/g_ether.conf
 	rm /etc/modprobe.d/g_ether.conf
 	rc-update del local default

From f10e0c0def2cfa2f14960fa12c40e10d541a520b Mon Sep 17 00:00:00 2001
From: macmpi <spam@ipik.org>
Date: Wed, 17 May 2023 09:52:12 +0200
Subject: [PATCH 3/4] Update readme: original state preservation notes

---
 README.md | 26 ++++++++++++++------------
 1 file changed, 14 insertions(+), 12 deletions(-)

diff --git a/README.md b/README.md
index ff87050..58023a6 100644
--- a/README.md
+++ b/README.md
@@ -1,16 +1,16 @@
-# Deploy Alpine Linux on a headless system
+# Bootstrap Alpine Linux on a headless system
 
 [Alpine Linux documentation](https://docs.alpinelinux.org/user-handbook/0.1a/Installing/setup_alpine.html) assumes **initial setup** is carried-out on a system with a keyboard & display to interract with.\
 However, in many cases one might want to deploy a headless system that is only available through a network connection (ethernet, wifi or as USB ethernet gadget).
 
-This repo provides an **overlay file** to initially boot such headless system (leveraging Alpine distro's `initramfs` feature): it starts a basic ssh server to log-into from another Computer, in order to then perform actual system setup.
+This repo provides an **overlay file** to initially bootstrap[^1] a headless system (leveraging Alpine distro's `initramfs` feature): it starts a ssh server to log-into from another Computer, so that actual install on fresh system (or rescue on existing disk-based system) can then be performed remotely.
 
 
-## Install procedure:
+## Setup procedure:
 Please follow [Alpine Linux Wiki](https://wiki.alpinelinux.org/wiki/Installation#Installation_Overview) to download & create installation media for the target platform.\
 Tools provided here can be used on any plaform for any install modes (diskless, data disk, system disk).
 
-Just add [**headless.apkovl.tar.gz**](https://github.com/macmpi/alpine-linux-headless-bootstrap/raw/main/headless.apkovl.tar.gz)[^1] overlay file at the root of Alpine Linux boot media (or onto any custom side-media) and boot-up the system.\
+Just add [**headless.apkovl.tar.gz**](https://github.com/macmpi/alpine-linux-headless-bootstrap/raw/main/headless.apkovl.tar.gz)[^2] overlay file at the root of Alpine Linux boot media (or onto any custom side-media) and boot-up the system.\
 With default network interface definitions (and SSID/pass file if using wifi), system can then be remotely accessed with: `ssh root@<IP>`\
 (system IP address may be determined with any IP scanning tools such as `nmap`).
 
@@ -19,21 +19,23 @@ From there, actual system install can be performed as usual with `setup-alpine`
 
 
 Extra files may be added next to `headless.apkovl.tar.gz` to customise boostrapping configuration (check sample files):
-- `wpa_supplicant.conf`[^2] (*mandatory for wifi usecase*): define wifi SSID & password.
-- `interfaces`[^2] (*optional*): define network interfaces at will, if defaults DCHP-based are not suitable.
-- `ssh_host_*_key*` (*optional*): provide custom ssh keys to be injected (may be stored), instead of using bundled ones[^1] (not stored). Providing an empty key file will trigger new keys generation (ssh server may take longer to start).
-- `unattended.sh`[^2] (*optional*): create custom automated deployment script to further tune & extend actual setup (backgrounded).
+- `wpa_supplicant.conf`[^3] (*mandatory for wifi usecase*): define wifi SSID & password.
+- `interfaces`[^3] (*optional*): define network interfaces at will, if defaults DCHP-based are not suitable.
+- `ssh_host_*_key*` (*optional*): provide custom ssh keys to be injected (may be stored), instead of using bundled ones[^2] (not stored). Providing an empty key file will trigger new keys generation (ssh server may take longer to start).
+- `unattended.sh`[^3] (*optional*): create custom automated deployment script to further tune & extend actual setup (backgrounded).
 
 
-**Goody:** seamless USB bootstrapping for PiZero devices (or similar supporting USB ethernet gadget networking):\
-Just add `dtoverlay=dwc2` in `usercfg.txt` (or `config.txt`), and plug USB cable into Computer port.\
+**Goody:** seamless USB-ethernet gadget boostrapping (PiZero for instance):\
+On supporting Pi devices, just add `dtoverlay=dwc2` in `usercfg.txt` (or `config.txt`), and plug USB cable into Computer port.\
 With Computer set-up to share networking with USB interface as 10.42.0.1 gateway, one can log into device from Computer with: `ssh root@10.42.0.2`
 
 Main execution steps are logged in `/var/log/messages`.
 
-[^1]: About bundled ssh keys: as this package is essentially intended to **quickly bootstrap** system in order to configure it, it purposely embeds [some ssh keys](https://github.com/macmpi/alpine-linux-headless-bootstrap/tree/main/overlay/etc/ssh) so that bootstrapping is as fast as possible. Those (temporary) keys are moved in RAM /tmp, so they will **not be saved/reused** once permanent configuration is set (with or without ssh server voluntarily installed in permanent setup).
+[^1]: Initial boot fully preserves system's original state (config files & installed packages): a fresh system will therefore come-up as unconfigured.
 
-[^2]: These files are linux text files: Windows/macOS users need to use text editors supporting linux text line-ending (such as [notepad++](https://notepad-plus-plus.org/), BBEdit or any similar).
+[^2]: About bundled ssh keys: this overlay is meant to **quickly bootstrap** system in order to then proceed with proper install; therefore it purposely embeds [some ssh keys](https://github.com/macmpi/alpine-linux-headless-bootstrap/tree/main/overlay/etc/ssh) so that bootstrapping is as fast as possible. Those temporary keys are moved in RAM /tmp: they will **not be stored/reused** once actual system install is performed (whether or not ssh server is installed in final setup).
+
+[^3]: These files are linux text files: Windows/macOS users need to use text editors supporting linux text line-ending (such as [notepad++](https://notepad-plus-plus.org/), BBEdit or any similar).
 
 
 ## How to customize ?

From d40447c6fa09b45642d586c96f563b1cd25fa369 Mon Sep 17 00:00:00 2001
From: macmpi <spam@ipik.org>
Date: Wed, 17 May 2023 19:13:41 +0200
Subject: [PATCH 4/4] bump version to 0.8

---
 headless.apkovl.tar.gz             | Bin 5644 -> 5642 bytes
 overlay/etc/local.d/headless.start |   2 +-
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/headless.apkovl.tar.gz b/headless.apkovl.tar.gz
index 13cfcfdd675e468d3b5abcd21241d9394da2ef7a..aaac53ca077c83efa0184a819a34523948774e4a 100644
GIT binary patch
delta 5439
zcmV-F6~O9@EQ&0U7zXUHzu`WVkscR+u8HHsdyHo{Rr9K(rs>!3z3z855Of~=*>4QU
z0yIfJ+Xa5!KCe*%qc9Z3DGK`xK@l9sJ_E_$TCfN7ZRa!~_*qj`-9N+owef#Z2p0Xn
z@q^Im^X_|hS>yL@&<u$ev>%SgL%|e5{5SMZP&ED-h<rE^{xN*gKiszQZyE!Cp8ik&
zn*ZYjj^ikXP>cRi6eB<R|HpuL`d@zE$5q>X-?Yy6Sunk+d-p@}_!a+05t{m${>ex4
z$^SnBEP8)gR1UHWtZ{XAICSzb{?XmAM|S<V9UV7oLtEeS2$3TKm##9I`1mHAgkkIo
zJi8esZ>=Rn-o{C94re4KbP_s$o^vaTjmXk6BQ$rt!6|l@dNj9MZ_hC2?^a6e3eq7u
z?BYz%?xn#cy4PbI*24<rwHxTXrPb9vrR7U^KMy^1YNs=Uj)X7kQom=}T`GB#aok=H
z97ogs&@|$O<FEVkP8$#;J){S0f8fSFbMMVMF0l)7)MrG9AyFpNO{@ohHxV;CsT6i-
z5+iBB!@KQ`Tzh`24p9&Dc+~G*RKkqI(LJF1R61OnU_Y>X|5g%ku-13OKy6ztgX1Ep
z{QdbRhIQ7j4OKmyR{C~(ju;3d(d6u@RoXaHf6hB-ThwT~*?Ihw@YCRT_`Gs>bJktQ
zJmYIq<bqOE#`$!?ryzHKU2Hb?%1qlq;19l8xl(><qjM-gq1GV>3SI9IPcZ4@`rxj}
zyUq_hv-5TZ9aq6|54Gg&E<icw-h)WmCmgw9b{n@a(o1%OL);sR3ximxtu^-yLGE@n
z=GHzt$35=y9kX?1c}iOoZ@&c}_Wvg*uah!(i37*agSG|!udVlg6Z~)C@8W;pV<d^L
z9y#Dc@p#7nzmNMr<$nste-{4<3PV1{|BnGL4_Nb}q=E;HR}EteYPxi0O&;9y)^ika
z@pbN&&)m@1*R1o?XMSMUB00Fl>2b-s#j3ZD>^pem4OST+|K03iQD<L(<D{CW`{9Aa
zt&ij;9>kepaZ5XYZ!wh7Im;i~nX($T+1y>-SD<4RL0<5nu}c)AR)dtknZPxApX&dV
zDDV)PEBbuxDWMSE(^DfQy;dGlJ{whUTdyGX&_&UlbOYfN0=mf#BI9b~#*bE~(7oRI
zU5r7%tkp@&wVKcg$V_s{hP)FG`GoCmaB-crF89&7khy$+iF50sxAs+?+2gn00?)1G
z)y+TN_K%|ff9C%mss{YE^WWm`Kd=7?l=$TT9|Ios-&>VGYe4SD8Zfsv5~`X!`M4(u
zzij-!Wc#1$gnupgN9Vr}$>Ue@KZ%go&+|Wl(4YMOW592i|JV65|NGBO?UjHUKZnL;
z@&nQ0+3}Qrj!tc<9C1)5VS=pEA8{sj8QJd0eOBK^)=;@SVKo_z`VzzkVFn2HMUqaH
zxFPuxncOT&MO(rT<8ai`a4eUzrgXU*n`)C-Hg7975>?q%?xL<4=0hp7aIQmh2zVAW
zp^bNT={}d0JXF2I)<6t7iCE5>wn~<*(K(8G2zM!e>YhijFy)3xuT*KS<}OL2mKzio
z$SBKR<vq`PtF;xz31p4L>3WO1j5c<6!?!A5B4cgRss4D~x*L~}hr3G1NwG52EX~BZ
zGpY&L<P@GXBUd^#q~X!YaA_!}*;*s)>b5m<CoU;lj!vm*=GsZWqn4(1y>I2$jU!Q5
z+vK)?8^!>6^Idkju9YfQ8r=06_!9FBa=|jxA5ZtFtnaC!phCx#^#xnCNRlcLb}dU6
zKT+beJ2#SWy#rx6)BdLKj)uQopCE)a3pnsjx_sBTD`)qFv(31nIXJBz*2jXmRvcGF
z{SoGl7@1XQy&v!u4#;FasG@|K6l1HZa&eS@-G!?K%k8kc9ImlxVk(+n(T{Q|QMJ<u
zZB10s;=g?s0X&RNT(gQGG2-pAIrf{>i<gt@4);`8y1*Rf21dR2^oUQ7Z6NN+!|G~i
z@wOz_mvh1i`*j5Az;2}!q$J%7L!Db0;r%PKLlz4X+EYZaL?P;;Df-fWCrq>@J2W$Y
z*VCwxr?ACwQCp$}E?giQsEv7dov)i1>G*`GShi5&dADPIkC5b{!=S#kElKz4QwG7N
zp->8KRfNnovq&BaF|^%yz14u@WlLB?p&SH(s$BbkB;KjK?6=0jGMOxBGU1Mm7{t+x
z8E`~BoKjmN*DZazDG?cT#EoHV>;{B?>535e0)nex+?$Z->|><9R5nx?gdi=k)kJyE
zziejOEib$Ch$V-v*^`$GP6SSQ8I^oA_Yz?4R~Q~@Xr*ha(ADbI6BKJldDgs9bvN8m
z=WcLSshYJeCrNCD9^y7RJJb5iTuBDPk92e5OF$pbTF3I_fR_SqFy@$#h1-jNG08U6
zTr~WZI_(C5VxyZRXWE#ly}ef*qglcJ1ljJaCu#-_fM}YgP^8>By6G2@_FDrV{k9$U
zhr1R$V~VoGm#0~<7azY6S-2&7?37{5rU)JHeqGTW1WdP`Bd(l16xfqEarn&H{AoC=
z*EvQ-W3yii>Ld;qi(>msOZC=&Cz7<7Ba#zS5vk&PR^1r21?U3r3bFL=n>j$~KnVFe
zk{<hBwR{PkqHK-#ETv)Xm4t0FD04w|sND71l04KmnnL#c?8Gr}V6@dV&6%=Ct^*>C
zh;WdL#@Mq0ilUX)NfO@;YlW1@gJ*8Fo6Has#@v#bN!NtrLz#8-;~8Lo@KP#^vs^J(
z^yZpDYR_76<*3t1OSl4=h+}%R<<!JR`M$kgr4kV}O-YjQA|UrLTO~+v!VLiCd%|V6
zW20!wIHDuYZ;-WpHU&!CclgauWTTVLwW39^uTjSym&raJBICNjdB23?qq~o61Gtyj
z<p>>26`K((C#s|u<v!AX1$$(4$r97XUXdQUomOc-uj{R%N=r<;&bG*MF%({fWH4Il
z28e1*+5EWS*R8xMPV#j^Tib<?qXUPtozAv|uA7KH4ahMHtk9-6yDJ6_dAixu5FUkw
z{V)n(K!f6Pu0zzqXnxI0h+`y(L~QPoH_heV#4>+NYJ}s4-d)#!Lhd$k?iq98xEv^o
z5=3<N2vr3(w0MQElB(clW_)>dN}(-|dALzw1Fx8(u`)JiaXXNxb-WFTNKiLtTQM5b
z+P89zPuAs-WInJv*)DXsy9SBTm|BaH6Hs2&+ttQA<VoMjaj`R#9$CxhIO2$+(2>Xt
zvdWBfsVeN%D%~=FT>!8eG8DdO)g%GC^mcWtSmL~fV{>pKmZ8@Ej=jrubntQ|>#Jvi
zJ#JRR);wPJ@v3Rm(cBgUAR6T{jCj0h&+fY54(F4qq6&Nrpw5yS=nh?=dZ8mJlBBIy
zG<M|!l#of8*Q4%ui6Qp7OGyHtUFRB->|K(IYNl^v5a0)YLnYOI-Xvjh-lC(0w{~lZ
zG=owoGQ}t9Fw>_syj#_SD<MZ_O05Pcg`8eNlgh$YTuCRA9a{f*kSU$sGQpMf;T>tJ
z*48l(t{aZBiLp#(yT{v3;U5KsPbI8+uK`$PEmp>qreU*um?j9ahglR<ecY<v;|cbX
zH5AS{=zZpY=w+UebpyLOA&_FULdChdFxM2ufk;PZVOsI4G~<h#6<lfe*pm2d9Y88f
z74@*HXO54_!1d2zU0e2Ip~0Nlt*%7zD!OlXb*U-9)`#ah8J)Q{%k6QqudG|ul4HxT
zW;u_HNw(gGDs-q#QT<r*MaHriHa5hCD=rdyxoxh0Hj_#~y~B4B8(k&(L@^D#)0c|I
zSkdPB*6yhl);ZgdUe~(i41Ba|Tg8_(M!imX&TL6nub0Az5>7a9ocP_bq(XcLKdP;@
zKDpQmIf_E-iFt1uXk}l7%oWeGH~#;59PtT0GCa<IdF46z8~-<Z2mE~h`>Wr75IBm`
z#1jvHMJbZ{^#1o_!29}t_qgWGV@p2ZV*k1RQH;jX_w<iH&i~}&`=3we|KA?I_#Nyf
zCEUgU@CC?K_0%L$+<_Q^Vc^T7!T${`9IvR8W!%s<*B3eQg0c->BtIy-Bus+l51=BM
z0C47YLprG6zCzwGuK)n}-l?;%zX5*$K7Sg280Z!Lx39iLU%l(sS+w-A1@&{!X#?=f
z1p!P-;PcNN-~R^uV!2*)ljmSn<`bBNU|DsblQ)Z%PGH>x?ZSUS{(Kqv9k}pX@WTrH
z4=`$i8hjaV;HxixSa|&P)gQqw4jyzD$_v^;eHmItUV&eIwGc|mE_{azz5>7d4urdZ
zqK4mejnl^PTOk7fF+WU}|3Ch5`SXMPA>z^mUGS5Hi&R5W_3fkg{=8-AJ*l3of04(}
zBweV#Cutk_;7bC&Zs9+>uivfh^`BiBe*IsO`1jvD`hgc$;H#&+%Rayhhd+R0Q<V|e
zw@wr+dllT1?(LkQbv)p&izc7D-3-BhkLvt)@a3^#=qvCq54pVh$Ic=W`qwwrVnDB+
zla@JM)x4dv?7-V;KOupC`DwYu0KUBZ&DisLF_j>1g9V`}z?UZc>F%<sg~JyQ0Qu4f
zt7Yq#kOg)X=mwzQ*L9wFP8U4vX}MQdZTI5k%ZazI!LR-5ttE9q^Sf_=hvDmgfuA&i
z*MV*4SN$@!&<vWUYT5@$uPWOr4?w2{8}H4J#_Lx>`y`WB(Skm8aZ*M=a1T5X{chRT
z0e&|N`|c|g02Z_;Xuy}Y1Hb$M`QnS;!;7u4&&TAToRs|?d>4Je$5(jmqRJW^zI^Lb
zpgX<w!o^#PY!UW-jXzcpHIBPMsBl?vHRNEJ<U#2a0T?z_0s2MIM!<4^aksC3?ET~>
z75G}N96xy)z#?E9bluWvf1LT|_kVc3pgLm)zW(9qDU(?aMt^}-4{qoZae^oI^}Q<j
z-)@E0_l;;IdDwwqU#a41g+?Lb3-0(VfNH(5OZyyp0h{{9MHrjQm3j}u5fjc9Xn|Ra
z-$uk0ZUqohlqNDgd&?tO^O#3dFQC|mHPQR?P)oU5EYnRr%SVT8hAICmG|qeEHc|(e
z47~{i+l1p?%zqO|c0mlxLxff8R8zC#h5Qi|ae}LjyN$-}@~*hBCS&HdO_B31Him%G
z@>_7FYU_z=E1Jl)DX}}9jM%BEtYnS3&bLSm7QcC#GT%JWhdwu{x>)4<i(%o}NVg(L
z808lvt&+VSd+BAxjZ#zG+Gm4_?Fg@5mO$5aN-^+Ggnu!vv+9l$vU)fR>!xFbA#Dn|
z)bfy*Wa0XPiTCcEHEIve_ikhfgGeIZ(v*ljd{{er^IVjcVy(!j#st}>ipAttTkN<h
zrQnomJbz%ASDGBgit>X<?;AWCt(~JaGW}w1Q^#;)b|TnT^v$?p+<}0TaIkiD!0jX3
zlw%BpM1K%aCTlkIPD^j-t$M4Ij9#JuO^w-Nw3!lgSu!aYmh+rz8OCA?rBRs;0mkm@
z-JafRwdk*WxIuq~N)h!Oj_Yy}@DdBW3n>hSp5u5^`s6NU)P6-HNy{|1lsM=)A_-QB
zIpm%OSLU0Y&(r1~SnYXkM3YqtsEHh|G^vnNeSg%x!xKLewn(Z>t{ll?lNygX+eslx
zDpAD8KGIPzV|08H8)b*u2EquoyN|R6loEzm!P=$!-gBzCEcCGR0TMAF8{0wJ@%+g4
zT*D!h>s{Lx2O7TOGl4~nYtOdWC3ksX&@5)eVnPB@Jq?&4vZ1;~sq%c_b)ba2nc~O3
z)_(=5gFst;0$oR2NOMrY3&JS3g0}H^LdiWM>;>6gBPDqj!6Z1`#t9F`c62oMquEKU
zg^<lC^5n=VH1#_vN?v?oxY%O`*bc-cO$N{wi)T<`*QQ3`9#$%eyCg+P-#a_&hd$h-
ze|{c#$(Q|e_!Bg2*2gG=5h~N^o5SiO?SBk+pT4QE8pk?~801O@I{_DS1=_TQ{)6e}
zZcaNzLPIy-4)!$dgEztF8Q8l5-O7FgX+ngH4inGe9)K@O7H0t$rLp>jB);iugut{N
zxU)dUumqzdH>N~}8jh9iXv8M25k=gEr?JosY(GNp2gC($8v9f>UEBAm=xK@aV}E~5
zyk2;y0SU(5wE*7i^zmz<3V1jbeem+!?TF+Mje&(_h&yKb@BqVw=P>C>%t7u%^tgPA
zVvqQq+Q1v+TXc8q{a^y6%l+<ZuZ}+ac65C4_K(NMPmc~O!YwU3GzJc*_Ze`{;fxRr
zT8;YBOAmWAWiMklop$-s{foMSd4E7Ma{|f7a;rOVZba``^vjDq?Gi*P#dVcsmUCGW
zTx5>8c_q*>r(hv&b3NHY9s>DLN}r&TKydpDl`zs6i6=U)p^c2N-~e%q&ldM#?<T87
zGaqP*)r2E$=fv8E^9$bdHsKS~7tI=au`&%}G-n4OsWK!A1!cshv`L~%{C^cUe&%TG
zS&VRI2~T=St&E2(Z40Gk8K44w1t`l~=UJJ05@B@F6~V9N604-djTaF06-=0RuA;Z?
zZkrmvn4`&}p49JZM&p%*B&qD3X{7Ky)kU3<dCAw{D|9B4>Xd1iKB5UmgPR;^Ao-bB
zfZd@iIB~;>XfZv1hDbmPw|`wI4^26oHb&maU00k~O<a?LDb&PqhRe3=e{SuGCSKo*
zTk>lC)35%v+(q%(WG=^Mq|O(r(s{*(e@esHP;KH%BhSw<%Bp65LZ)iUhLO&3=2bX9
zeWgZmvC2~0nO&@?Wy{Y=(AgrA5n>Z4x8`_;1<@}rP`G&zqtMhO6o1PBU!Gt>R~AJv
zNf;lG$gV26yV#Ce=3r>iMkeJ*4@c>9q9n2Q4i3I{i?Dj;8tz`c$d-?4*w1Czq~P|r
zSULv0dL)Y;BxTg3T?V4J7UlKi<umrNx+#-RiQhe=(!5D?M1_@k@0ZWz{wvO!%DsEV
z^WU6hf5;j0YQO*Mv?Y4&UZ>lj=Rd7>Pd)#+6Z%SIuZ@Rz|Fc{E{&&0CPT5~P|LGo+
zyA*JL;d-;(JZP%?e;0HM{96l;Tl0Ubm)O54fB(}_zyG-t`WNJXEa8M63;3srjaG$O
zk$24l$Cw>jQ?td;K`vO(BT934sYjn9hDBrxM&C4z=4!F)u8e*aiH8mo*WuUP34hQV
zV5`0VmHz)<T5Xm8?}oDWkK6V&`@y%{zfEu`LD~NfsM!AEv}SEQB>wBIZvR%J(P{t0
pTH@r$cI^nLWW6FK^gp-1li3v~lkOD;4Wj=R{SC-o643y7004A8>qGzm

delta 5440
zcmV-G6~F3=EQ~CW7zSdqzu`XQkscR+F2{-OJ;t+}s(DpX)AZ~2UiUj22s#h`<aY*S
z0h%PA?E*h<pVugXQ5cHi6oq|)pa_m*pMd1=E!YG4wsRT~{G_R>?$_{sYy4jnf<^yt
z{2+Aty!*~w*7#i;G(+MA?fc{LP%uRh{|)^U6peoZBJWRxUxttRhub#(U1Pw1)Bow;
z@_(GbaU8`EYSBN6V&q5v{}Av_|I6>YxN5uan%4O)3#K=9@4hb{zv2HVLQ_A}Klx}r
z`u_)jMei?*%0YI4HLlJMhfW^GKe`+C$gUr^qvK|6XzN=ZA#z0E(p4rCAK!$NFpOP+
zXE&qdt+j;6+c@dX;f$n&PD00jb8bbk5m{Phgyya{IK|FVkLFhE?HT6$-AajFK{`Z-
zU7YFJy)?K)_j-)OdRU>nb_1Qaw7R;dw0!CA=b@)g?Q~|)k?>_*>h~<WOC@hIj@#>j
z<7nC+nnt{E{B?icX#;|!hxCB$58SwC?!8&ZC3Yc>`iuxMB+6vEiS^)rCSqnMmBJ29
zVk9kic(=WgYtL`hA?jfskNUlfN|<ptx(9ThN{4F`><4!5-%0`w*7|N3sBOz-a9kvn
zzdzr^u+I9mp{j?|O5bkJ5d&c)nw&kgN*ibD&v^%JiyCb=JCC0dej5A^pH~iV&bsTE
zXMAmnTu_S2IG--~6y&adi_OMfnQ1!+{J}RXSIRGKbPfe5)H>uqq3a#u2_}79AKVpr
z*ZF~GcHXX_<0?4rp_aVe1t{m-dk{(cgd;c1ZsQh4ddY5Zh<ihEVGt{|wdS57$lb2S
z+}da7xW`?-W45j=Pibr7?Kj}V{{QUcby5Z|ap3rQ(6+$;we@~~g#Ru4L;MeXj3m+3
zBL}=M9?$syk8%IU{7>Qd&*DEpVaUh${~_Sz0c&2ARPdnjs$pzFO_$EB$%A{|dX54v
zzRun9nHw7Wnst8q%n$5ZBnP)RJuZ2-SoQXieFu-c!7Ah9zneWQ>g)?}oK*94KRl4Q
z^^x4fgE%uRZfWO#Erv2WXZb@rQ&z(^o4c#~3UsU@$O|4cc8OxtYLN0b6Szh{rTRZ5
z3Ot17iauX^N+?A4^wda6ua$?C&qmeT)+<OobWt=X-9Y$+fNrvb$hg|L@uSr#bgy@Q
z7h@1GYjx6cttNB=GLu}gA@9UPK4H5XTwG_Z%YAe%WG-KS;@rCEt$kHz_V~>=z;kPP
zb@R*H{z3HrYySVfYQWz*|1IwR^ZJiKiI4vOA>dK}y;b?M2IPLI0dspJp{mJ~k9(5v
z&yD||+5X2m;a>}W>HPOTdHhEHClM0+dHyF5`lJ7U2>2cI|2lu>fB%`Oy%JF4=g_!J
zejr*rJD$>i(Wxz!BM#~$OpsOjBhJJwBikLh&+5C#8Y*`utR|yTUxN4`%mBf@NYbei
zHzZ#olbc1UXiNBE9F95~j^%RJlrDE;Q*9E<=557BqAI(}UDP$hd?;lW&UI)G0ndUa
zwDHa^-RH8BhpKnj8i*k$5zATAR>`t8I!93t;Vwmg-Sa3Grra>;l`75E+$Cw$a)aUm
z8D-h4yytmuwYI`Ifvk}@U2k!h(Z=p>_*UghWUNg()gP~0cjFTBa90UADOQG>rI|Q)
zMl}JOoWhf4<VvT8G(0*PE)B&rTWf?}-L^*V#3g0R(J3{}Ts!G^)Y7!B_pSW8aU=?B
zo7{GP!x$iMzROP6wNk}OgS$QhUt*p?E?9>8<LMri^*vP-ROpzpzF?~sNm2#Eu4U=s
zCrX@l=SC8)cOWch+TZlu(eStH6NIp40SDemm+u;P<?Nntwi!1x2dCA;`dBd6isP!N
zKf>G*BeM#v_XEDd0h!DPRg^H3Vr*4aE{?K)yKuE&xgB<w!!<TdOhxl6`cW<=s&*Qo
zt%)jH{P)iyfQPY(YgQ2?M!a1%$9|J~@p5wA;hqXh7nsA`z^M109`Wh14a7ZpSX~V*
z-j?M0a!xp5zm6as*sYX;l%#uMsB<eLynkhO$YMc4dx|KQC`4T}MPJ(Qgo(Cfhi2w~
zdKxwI6t*}nYD<*Bg$qOjwK4Cm^K}y=9iI>t%N9yJ?{=*35t2M~7}U46CFx#$${^S@
z6iT73ijdi67Rf^)hPE58w;FJ~Yzb>9l!G8pm1`f6#5<Lj{nj{GCX)qCCfu<RgE*Qo
z1CFSNQ))}(x}{GyB_e~4xG`*v-GDHET@eCbKyVd|dlM3!eT>wX%7zMq5Tqrxnkeu2
zm(5JO<z;ssvE<M-d-8I@iNGl@qmqy2UINVh3d2JUt#nNlx>~(@f@19`&zd)??uI++
z+zqZORkPORB#EuiL)<23XIh_`E6G6kk#0_W3FzZl>sX!~@KWFn#vJppaC<R-CfSCX
zi-x~ar`;e>Y;=?4OdB(`xA&@JG%MJjAlsewM9rW95KYq*ij+G?H~k{gerw>P-?qd4
zaMyxoOi`Bj@-z$f;^P-03%5j%oidEs6rtnYuPeHPfa$h##Fev$0(%lC4xc%jKMiN~
zI>)GJZ1!tGoy6f{QEZ=Ssowg3M3NSBL~>#(B2|3PsvD!W0A1i+A(q~KGY2Rg2qAw*
z(qrGNmM@`Gl&$fer8KO)lCVt%WiF@=mAhVBl85?6Q^=m5oj3*#jJBGlIaBt?bwH#M
z5e{<E7<*PgQMA%JN#eU<t&s9~@XW1tlNn;dm|HS4>6(yyD6@`!JOd1WUP@(gmMi9p
z-dr<C?O7|X9CbQr30EK!aZHc4oSN7u-?!JRR3f6LDM=Du1mqrOs{{#7xB<X?Pq^%M
zY!poyM|8yb4YIb+ra)=?4!`+{Y;@AOR<sEAHR{;oGTFyNWL!5m@0W0VboY^M0QWMx
z9HE1$Vl#r}M3wZS+(){9V2_M0Sz_AQE7C)^(<<%fb-h(oX^Cmq*%nzYhQh0m3`R@c
z08x!8n;$p)x|KJ@Nxn{KYrF7qbl`Bd)7h5LbraF20Xas2725P>cg3I~PdA$y!lTfz
zA4UNTXi!|vb%<IR&98Y0af}3!h|OK{rn%gkSmtj@jd0x1yX#ti$lWH+J!38$mjgvn
zf{4x@p{l@!7OxOiQWf0Hj4!WFDYV5g4>u}o;1yFeR>tNmZU+*zj<*333F_u-D@J2l
z`&O>;$+{ep%m;QS+l4N7*B~((Q)^Lj0?Mm;yV{tCJn1_*E_P<pBWw8_M;uWUIue;d
zR+*75RfWA;rCX+d3jkI_hQb%Enj~PC-mY#HOPtqmYz|JuGSu4Nv3I$S4qmQgef3PR
z$IWWkn#apNUNwz6n%jZ^M58>05sx?R*<Bah;e1k6RDq8H)LBvk-JuIqFLWeDlC<@T
z#;$yT5;7_Cdej{+F~nYXDM<jd>s&*Uy-QM2&Gc;y0{mcqsHED@n<OmGTXeMW)^074
zW>5-6ruZZsX8N>-cdL4ECFICVsnr0bkkcz@Qd!uFE9peCL+c+8GNsd7Cb*J5ydzE3
z+B)XJb;D6MF_y_}_jubW{G*`osf1PUH2|xu#mbn{G;Ed+(*!~GFpGk!k6YDyJi%VF
zhQc`qz0Vwfz04D`ZeTYj1X7Gvs5n;_=9<Dd5b5YFOe=nsW_)q8f-CJFTN1ym14xCb
zq8?WD%<(Z9xc)h;Ys+3NG?+8H)s-k-MfdHlE;R+%`tV#QqchiLxjk<7m36CHa%>sa
zEa#Ci$=2IYg$}hTsvk?f$XFJ`#)i0X#YJK-x6RdmW>N{Lclb_XqpL)pD5imT`clyt
zE80BY+C8<xI%gZw>sq&*fsa;gtN60UsMjganJww+^->s7!U+eC6Tdr_REY23N42%q
zCl^~GM^R`!G4E{yt?Y}Cx#D^D#{WN$BR;|hhR69YuRJGz<Nt2&fS>PwfAjkf0!Ju%
zIsPGkkN3Y6@$vod2Z5jJ|J~!7H;*lOkBj|v{i7I-qwn;O(lq)w|C9K~?>{~WeD(*}
zO-i_p0pK%`tLmvqqPPPw1jE3WM}z+xSU6r$C(F2@ZLTkJ;ss?Jyhwgfc1f57&DWqJ
znE-I+bwfI+-@HQJ(60ah_|B=bKYj^*4}AK6G%(OB{BK@;j=p-=ud`_BV+-o1p3?^4
z=L-Uul)$H-I==rU_}Oy3=qAs>s>~-a3Bj`JKqqe&E1kf)3EGAKg8b<+@&|C?wcv*p
z_#a@@1U2|F-oRI%f4}hf+p9l;T^u~<E|eFvh59nIjJyKB_+lZHlwJ4^7kmYN`z;86
zcSQ}q=^Cev;kQBr{$qZaEdPJ{)AHvB`9s8|3A*4%2^Xn`r0Uy8@2B&Yp`S?gWc^Qh
z{7lk?`cEWn10Q@zz}GGO7x(qMwY~m}3&XGfD-wV8<)a^XaRt75%De0Xym0s$9Gj|)
zz`k{&VA-qSo^)^L1g+x%e_J&9-0fz62!2rKzk@H24MSgne|^a1)jxC=k<h=rsTKoz
z^_;ZK>8j@KoMi{zPWurF{Oga)Ee7!A<?qIx*NdqHc^fPUO#!|%;g5HhRV^GodjQCn
zK3FYVzl1EXt3WpZ{l2dA#B;jfVNc7wx@x-@FJDf)eGUH6uijcx7c_tP5_lMYz8?5V
z6L=lic7D|_V++loX{x4uko2mut?~eLTCnln{9wF(6|_$>c@-__Qx_*?1O)fM1JQ4n
zZ5`luv#@W!KmlMui-HDxX*=-q?~%_w`wCucjeR~Q2j!&f@8G-W3qHQWYZq14;PCld
zp90<KtrsrdQe=y;Kh^kS1ySQbxQhyx6<0$JhDjcjP7#1%Qx%|J1Z@N?_ZN5j;}5+b
z-J}9v%a!9NPXky4Y=f>_I_(cL-+cA;>jl*rGw}8IlUfc&e?deFs~+6YCE^56?CX0~
z^1s~*t?wJrNb;})!M;+()e4P5#24K0Spd~~W0&?h^a3{Zjf*fgmn-!ih9f4NEzkn9
z7Qc;%E8Geoq$o{fdiIt_u;ww3rd~j?4{M_L=b@HzwOFQ`dX|q4+YD3wS7@B~$Zez!
zFd2Fi2(}5wf4i6`knDmOn1=|f)TyRs#|!x*DB=WH8+RLx+vQzxVNJ%&ZJQ$JU2F^i
zrRBHaO4ZgA)mAi-Yg1x(IvKH3Q(4IxbDeLI7%YDCG-bYdq7Qv;QgyM&_ZP#$vypB^
zkTA+GNLnR(J@(SeiW{Y-xV6s)6WbA9zbt{S>y%>Pf1L<pTxZoCCuH?-7S>J22t(Qw
za;fDZFUi971rzVxJ8RS)obTPp5(be(zNIM<d-$++^yaxJEyY@qQ;i9-O%;pDueR86
zRZ77r)p-8EFt0Q@j1}bvk={3WG+H}HYh?Px+@_A<#_U9}t>~L^#kd0jC*ff2>VVrv
zwkgLLe+Y>npiI_m=$)3{&|CFZCmFp&0h$`K#b`4n=(1!|Ff8Xe*D{R76iTBq8v=~o
z*SkHv)oRgS`EY~&3Y8-2IULvJBH$$!co$L_3_Zv3ru4~O%BcN{Mv|6kZYgolb3_uX
z5_8Bs4X(^LJD;b`Kd{>K+=wQt6i^d6Txn7vf2aDWeTOH0By5pXnOr%N#U?c#bGDO0
zlvJXKkA0-0V8-b9BsR(pwGD(3Y<C}N4JaiHv4XWr_r2#-b6MzN=K~~SKsL66wBz}a
z?YV|SDA&8TEe<q%#b*MG7}uU{u}kjqz@S;oh{c2iqIw!ILu5mBi&EwJ!0SK>c{9b2
ze|@bBQU`&y`~<p=wvgtafER>OZUt@Q@r06lMA!?my+%s%EP_dJxQ!DYjP2-X>_@Yc
zSPLPWQRK;yQ)udUQk1;-#Bj0446q%DOPUOzEf&w9#I8+^z&)%~5_d_8lD>C#)(?HS
zN&oyj@RBe4=kO<J*sPCH1|w9a(>I6Je@EIG?mm4}VKt6*8ZpR~40Zx8<_ffF3;hSv
z&E1@KiiC!4z8&mo+6Qlf&oi)h1-g~}2GWEG7ab;^!#x0Blq}8yE=ptd3rT#_*9d`W
zJ8)-#jA02zNp4Ju3^g1p+tG+kTqBCO3r}OA8Q6Y=-VcZi-Zb{9Y`V7ZQ_<5Bf91#i
zns~kNPy-T-y=wuy+3DlgLKX0ED*E8%x!V!RAsPb<%Mf?W^x*-93(sNFlbD0tiRf|p
z6vZC#J+*;1$hYY3*!#f*N|*cH)m|Na`0eQU;_V-gkDneLR)kwxc4!P7PVY0|p2Ha-
z7_=JorI#M|Xv$v3ZaVGqrTZ6ke+Bb^Wab2tkL6Z(;M|DbvFMi<d)g(4REp~=%Pi-z
zB)G^Naq~)`V@|<B+~#_+g**iEp_D#BC4u1f7b;<-F%nO7TtgcfVZj077@sZf!`@9+
zi)KF16srkG+Rll!4d)lU=WW6#rZ1W`^kQWi#AwbAKvHE$6bj0SO=*)vf0y_xZv4#A
z*s~bn%o3jTl3E!LS=ts#%Q8R({0dN(x6ZRN^(4aRqAP-5%OzGxi5o8<>MNKq?Oa7~
z+ub%belbUrMLntC)r`g~3rSMhJJU$vd#Z~%A@h>2!B^-^Ce<m^FnvT5j0QJ3&_MDt
zuK>G4S#aWp5z%6L{tS_Te-v)JP#&6cIBkr)k-M%qv6{Fh1yiVr;|!N=*Z<tw6HUCn
z7q{fq`lnz0ZMlo$v&meJ%}AXuRHgHZ4gZvev7y?;mqwnSW0Y0R{De%^lno=D<IJmY
ze)>v{;$oGhwllj}QOlN}lc2LjBqPKoP;Slf3=5)PUZ8OEAV#67e@Q5o1HL@Lgsv=#
zVv;aE9+6#Da(A&EwamfLqK!<-ksglH=R`?j?HwF^?G|D6%r)G-e3305)v%w-vPr@1
zaj|p^c=bpYJxI!^NxKY0Z!OB}$;)T#V|7y|of5x$Mx}X^=7<U_^WHC?%l%iJHI;k!
zis!#M%l?ov=GA`xDA#HA+PzM<fqBhVyVq6Ef9`_564`6xA>RM&mcReqZnjhQZ;Ri5
z9Fw^eaDUPB|911Bsq+6_&@J$9Ej(_`|E*qP|EB!?Pe=X!=T7KfkpHoS6M8J*pC&e1
z6=p@=H4hwPc4$q_7DETQU_p;4&EcgUeU2Cwku4Z~(=?i^#jd+D`c)(zI!s)LUvnq?
zL2rPq_WoD;|9@$<RsO#l%Gy6}+t=&|-){dl!6*e~|2v>!`-{_>wegVnueZAWTa8Ai
q{S#}6lOx-;BcPJ?ij>g*-2Ri>6(W=C6$}jiTl6>i)^|SucmM!MNyyy*

diff --git a/overlay/etc/local.d/headless.start b/overlay/etc/local.d/headless.start
index 847d3f7..0ad1ec6 100755
--- a/overlay/etc/local.d/headless.start
+++ b/overlay/etc/local.d/headless.start
@@ -3,7 +3,7 @@
 # Copyright 2022 - 2023, macmpi
 # SPDX-License-Identifier: MIT
 
-VERSION="0.7"
+VERSION="0.8"
 
 
 _apk() {