#!/bin/ash
# First thing it is vital to mount the /dev and other system directories
mkdir /proc /sys /dev /tmp /boot 2>&- 1>&-
mount -t devtmpfs none /dev
mount -t proc none /proc
mount -t sysfs none /sys

# Now it is safe to print a banner
echo '====================================================='
echo ' _   _                _           ____   ___  __  __ '
echo '| | | | ___  __ _  __| |___   _  |  _ \ / _ \|  \/  |'
echo '| |_| |/ _ \/ _` |/ _` / __| (_) | |_) | | | | |\/| |'
echo '|  _  |  __/ (_| | (_| \__ \  _  |  _ <| |_| | |  | |'
echo '|_| |_|\___|\__,_|\__,_|___/ (_) |_| \_\\___/|_|  |_|'
echo ''
echo '====================================================='

echo
echo "Run './start-xen' to load the hypervisor"
echo "Run 'kexec -e' to boot it"
echo

# Load the date from the hardware clock, setting it in local time
hwclock -l -s

# Verify the user's TPM secret
echo "TPM TOTP:"
if ! unsealtotp.sh ; then
	echo '!!!!!'
	echo '!!!!! TPM TOTP secret not found.'
	echo '!!!!! This firmware can not be trusted.'
	echo '!!!!!'
fi
echo
	

# Start an interactive shell
export PATH=/sbin:/usr/sbin:/bin:/usr/bin
exec /bin/ash