Repack OpenPHT images to update certificate authority

repack.sh

#!/bin/bash

set -e

echo "Checking required dependencies..."

which wget >& /dev/null
which parted >& /dev/null
which mksquashfs >& /dev/null
which unsquashfs >& /dev/null

image_url=$1

currdir=$(pwd)
workdir=$(mktemp -d)
imagegz=$(basename ${image_url})
image=$(echo ${imagegz} | sed 's/\.gz//g')

cd $workdir
mkdir img target

echo "Getting new CA certs"
wget https://github.com/RasPlex/RasPlex/files/7270212/cacert.pem.txt
mv cacert.pem.txt cacert.pem

echo "Retrieving target image"
wget $image_url
gunzip $imagegz

offset=$(parted ${image} -s "unit B print" | grep fat16 | awk '{print $2}' | cut -d B -f 1)
sudo mount -o loop,offset=${offset} ${image} img

cp img/SYSTEM* target
cd target
unsquashfs SYSTEM


echo "Installing fixed certificates"
cp ../cacert.pem squashfs-root/etc/ssl/cert.pem
cp ../cacert.pem squashfs-root/usr/share/XBMC/system/cacert.pem

rm SYSTEM

echo "Repackaging image"
sudo mksquashfs squashfs-root SYSTEM -comp gzip

cd ..
md5sum target/SYSTEM > target/SYSTEM.md5

sudo cp target/SYSTEM* img
sudo umount img

target="${currdir}/FIXED-${image}"
cp ${image} ${target}
cd ${currdir}

rm -rf ${workdir}

echo "Repacked image is at ${target}"

you basically need to run this on any linux machine, the script itself is written in BASH, but you'll need to have a few tools installed (gparted, squashfs-tools, wget). If you don't have a linux computer, you can try installing ubuntu in Virtualbox or with Vagrant.