我对 initramfs 进行了更改,但是当我重新打包时,获得的文件与原始文件不同
我在 dd 的帮助下提取了启动映像dd if=INITRD.GZ of=main bs=1 skip=2092032
这是原版的 binwalkINITRD.GZ
供参考:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 ASCII cpio archive (SVR4 with no CRC), file name: ".", file name length: "0x00000002", file size: "0x00000000"
112 0x70 ASCII cpio archive (SVR4 with no CRC), file name: "kernel", file name length: "0x00000007", file size: "0x00000000"
232 0xE8 ASCII cpio archive (SVR4 with no CRC), file name: "kernel/x86", file name length: "0x0000000B", file size: "0x00000000"
356 0x164 ASCII cpio archive (SVR4 with no CRC), file name: "kernel/x86/microcode", file name length: "0x00000015", file size: "0x00000000"
488 0x1E8 ASCII cpio archive (SVR4 with no CRC), file name: "kernel/x86/microcode/AuthenticAMD.bin", file name length: "0x00000026", file size: "0x00007752"
31184 0x79D0 ASCII cpio archive (SVR4 with no CRC), file name: "TRAILER!!!", file name length: "0x0000000B", file size: "0x00000000"
31744 0x7C00 ASCII cpio archive (SVR4 with no CRC), file name: "kernel", file name length: "0x00000007", file size: "0x00000000"
31864 0x7C78 ASCII cpio archive (SVR4 with no CRC), file name: "kernel/x86", file name length: "0x0000000B", file size: "0x00000000"
31988 0x7CF4 ASCII cpio archive (SVR4 with no CRC), file name: "kernel/x86/microcode", file name length: "0x00000015", file size: "0x00000000"
32120 0x7D78 ASCII cpio archive (SVR4 with no CRC), file name: "kernel/x86/microcode/.enuineIntel.align.0123456789abc", file name length: "0x00000036", file size: "0x00000000"
32284 0x7E1C ASCII cpio archive (SVR4 with no CRC), file name: "kernel/x86/microcode/GenuineIntel.bin", file name length: "0x00000026", file size: "0x001F6C00"
2091696 0x1FEAB0 ASCII cpio archive (SVR4 with no CRC), file name: "TRAILER!!!", file name length: "0x0000000B", file size: "0x00000000"
2092032 0x1FEC00 gzip compressed data, from Unix, last modified: 2019-04-18 20:46:45
11747186 0xB33F72 gzip compressed data, ASCII, from HPFS filesystem (OS/2, NT), last modified: 2068-09-07 18:42:10 (bogus date)
49031581 0x2EC299D xz compressed data
main
有 74796 个块并file -s main
打印出来
main: gzip compressed data, last modified: Thu Apr 18 20:46:45 2019, from Unix, original size modulo 2^32 222015488 gzip compressed data, reserved method, has comment, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 222015488
我如何获得“gzip 压缩数据,ASCII,来自 HPFS 文件系统(OS/2、NT),最后修改时间:2068-09-07 18:42:10(伪造日期)“在我的输出中?从看来,--ascii
在制作 gzip 存档时可能使用了该选项。但是 --ascii 选项仅适用于 Windows(仅非 UNIX 系统),并且它还会更改主文件的大小这样做(在 FAT 上测试).. 而在 Ubuntu 上甚至不支持 --ascii
我的提取环境是一个带有 FAT 和一个 ext3 分区的 Ubuntu VM
当我使用 gzip 进行最大压缩时,我得到:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 gzip compressed data, maximum compression, has original file name: "tmpnew", from Unix, last modified: 2021-11-27 16:37:03
49103704 0x2ED4358 xz compressed data
59437120 0x38AF040 Nagra Constant_KEY IDEA_Key: 10192431 49690929 AED9EB82
使用默认压缩我得到“MySQL MISAM 压缩数据文件版本 2”在底部
请指导我在这里做错了什么