VoxIP Kiosk OS 1.0.0: Raspberry Pi kiosk with web management

Chromium kiosk without a desktop for the Raspberry Pi 3, a Flask web
interface on port 8080 (kiosk, system and network management), a
restricted root helper, network changes with automatic rollback, a
healthcheck timer, install/update/uninstall scripts and a pi-gen image
build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

image/stage-voxip/00-voxip/00-run.sh

@@ -0,0 +1,23 @@
+#!/bin/bash -e
+# Install VoxIP Kiosk OS into the image with the same install.sh that is
+# used on existing Raspberry Pi OS installations.
+
+# shellcheck disable=SC1091
+source files/build.env
+
+rm -rf "${ROOTFS_DIR}/usr/src/voxip-kiosk"
+install -d "${ROOTFS_DIR}/usr/src/voxip-kiosk"
+cp -a files/voxip-kiosk/. "${ROOTFS_DIR}/usr/src/voxip-kiosk/"
+
+on_chroot << EOF_CHROOT
+/usr/src/voxip-kiosk/install.sh --image --url $(printf %q "${VOXIP_DEFAULT_URL}") --name $(printf %q "${VOXIP_DEVICE_NAME}")
+install -m 0644 /usr/src/voxip-kiosk/BUILD-INFO /usr/share/voxip-kiosk/BUILD-INFO
+# No usable default password: unlocked only by Raspberry Pi Imager credentials.
+passwd -l ${FIRST_USER_NAME}
+systemctl disable ssh.service 2>/dev/null || true
+apt-get clean
+EOF_CHROOT
+
+# Instructions next to config.txt for whoever opens the boot partition.
+install -m 0644 files/voxip-kiosk/image/boot-README.txt "${ROOTFS_DIR}/boot/firmware/VOXIP-LEESMIJ.txt"
+install -m 0644 files/voxip-kiosk/image/voxip-config.example.json "${ROOTFS_DIR}/boot/firmware/voxip-config.example.json"

image/stage-voxip/EXPORT_IMAGE

@@ -0,0 +1,4 @@
+IMG_SUFFIX=""
+if [ "${USE_QEMU}" = "1" ]; then
+	export IMG_SUFFIX="${IMG_SUFFIX}-qemu"
+fi

image/stage-voxip/prerun.sh

@@ -0,0 +1,5 @@
+#!/bin/bash -e
+# Start from the root filesystem of the previous stage (stage2 = Raspberry Pi OS Lite).
+if [ ! -d "${ROOTFS_DIR}" ]; then
+	copy_previous
+fi