spins June 2014

spins@lists.fedoraproject.org

7 participants
28 discussions

[spin-kickstarts] update exl. pkg list
by Fabian Affolter 05 Jun '14

05 Jun '14

commit b9f6e8b3e12e807a78741cdf9baa031d0b09739e Author: Fabian Affolter <mail(a)fabian-affolter.ch> Date: Thu Jun 5 14:39:06 2014 +0200 update exl. pkg list fedora-livecd-security.ks | 4 ---- 1 files changed, 0 insertions(+), 4 deletions(-) --- diff --git a/fedora-livecd-security.ks b/fedora-livecd-security.ks index 7776f07..23a10ef 100644 --- a/fedora-livecd-security.ks +++ b/fedora-livecd-security.ks @@ -76,9 +76,6 @@ gnome-keyring-pam -pads -pdfcrack -picviz-gui --prelude-lml --prelude-manager --prewikka -proxychains -pyrit -raddump @@ -86,7 +83,6 @@ gnome-keyring-pam -safecopy -samdump2 -scalpel --sshscan -sslstrip -tcpreen -tcpreplay

1 0

[spin-kickstarts] Disable gnome-software automatic updates downloading
by Kalev Lember 03 Jun '14

03 Jun '14

commit f844fe279174500fcc8f0dbca7600156d4c8a82b Author: Kalev Lember <kalevlember(a)gmail.com> Date: Tue Jun 3 13:25:11 2014 +0200 Disable gnome-software automatic updates downloading The gnome-settings-daemon updates plugin is gone and update downloading is handled by gnome-software instead. Adapt the live image schema overrides for the changes. fedora-live-base.ks | 2 +- fedora-live-desktop.ks | 6 +++--- fedora-live-workstation.ks | 6 +++--- fedora-livedvd-robotics.ks | 6 +++--- 4 files changed, 10 insertions(+), 10 deletions(-) --- diff --git a/fedora-live-base.ks b/fedora-live-base.ks index 3e29713..54197df 100644 --- a/fedora-live-base.ks +++ b/fedora-live-base.ks @@ -193,7 +193,7 @@ systemctl stop mdmonitor.service 2> /dev/null || : systemctl stop mdmonitor-takeover.service 2> /dev/null || : # don't enable the gnome-settings-daemon packagekit plugin -gsettings set org.gnome.settings-daemon.plugins.updates active 'false' || : +gsettings set org.gnome.software download-updates 'false' || : # don't start cron/at as they tend to spawn things which are # disk intensive that are painful on a live image diff --git a/fedora-live-desktop.ks b/fedora-live-desktop.ks index 0108c6b..8bf92e9 100644 --- a/fedora-live-desktop.ks +++ b/fedora-live-desktop.ks @@ -12,9 +12,9 @@ cat >> /etc/rc.d/init.d/livesys << EOF # disable updates plugin -cat >> /usr/share/glib-2.0/schemas/org.gnome.settings-daemon.plugins.updates.gschema.override << FOE -[org.gnome.settings-daemon.plugins.updates] -active=false +cat >> /usr/share/glib-2.0/schemas/org.gnome.software.gschema.override << FOE +[org.gnome.software] +download-updates=false FOE # don't run gnome-initial-setup diff --git a/fedora-live-workstation.ks b/fedora-live-workstation.ks index 00ee9fd..4a0fe16 100644 --- a/fedora-live-workstation.ks +++ b/fedora-live-workstation.ks @@ -16,9 +16,9 @@ cat >> /etc/rc.d/init.d/livesys << EOF # disable updates plugin -cat >> /usr/share/glib-2.0/schemas/org.gnome.settings-daemon.plugins.updates.gschema.override << FOE -[org.gnome.settings-daemon.plugins.updates] -active=false +cat >> /usr/share/glib-2.0/schemas/org.gnome.software.gschema.override << FOE +[org.gnome.software] +download-updates=false FOE # don't run gnome-initial-setup diff --git a/fedora-livedvd-robotics.ks b/fedora-livedvd-robotics.ks index 1c1f263..51a314f 100644 --- a/fedora-livedvd-robotics.ks +++ b/fedora-livedvd-robotics.ks @@ -103,9 +103,9 @@ disable-lock-screen=true FOE # disable updates plugin -cat >> /usr/share/glib-2.0/schemas/org.gnome.settings-daemon.plugins.updates.gschema.override << FOE -[org.gnome.settings-daemon.plugins.updates] -active=false +cat >> /usr/share/glib-2.0/schemas/org.gnome.software.gschema.override << FOE +[org.gnome.software] +download-updates=false FOE # make the installer show up

1 0

[spin-kickstarts] workstation: Add back the HighContrast cache removal
by Kalev Lember 03 Jun '14

03 Jun '14

commit c42ccad98768c7ec6f766180adb9d3a85e091d9e Author: Kalev Lember <kalevlember(a)gmail.com> Date: Tue Jun 3 13:18:14 2014 +0200 workstation: Add back the HighContrast cache removal It was lost in the desktop -> workstation conversion. fedora-live-workstation.ks | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) --- diff --git a/fedora-live-workstation.ks b/fedora-live-workstation.ks index 8951d44..00ee9fd 100644 --- a/fedora-live-workstation.ks +++ b/fedora-live-workstation.ks @@ -8,6 +8,10 @@ part / --size 6144 %post + +# This is a huge file and things work ok without it +rm -f /usr/share/icons/HighContrast/icon-theme.cache + cat >> /etc/rc.d/init.d/livesys << EOF

1 0

[spin-kickstarts] don't include and remove firewalld -- anaconda can now handle that
by Matthew Miller 02 Jun '14

02 Jun '14

commit e8e1e59fb08b60c0443eb63e57bf14514d2d03ab Author: Matthew Miller <mattdm(a)mattdm.org> Date: Mon Jun 2 14:51:48 2014 -0400 don't include and remove firewalld -- anaconda can now handle that fedora-cloud-experimental.ks | 10 ++-------- 1 files changed, 2 insertions(+), 8 deletions(-) --- diff --git a/fedora-cloud-experimental.ks b/fedora-cloud-experimental.ks index 2ce3081..575d67b 100644 --- a/fedora-cloud-experimental.ks +++ b/fedora-cloud-experimental.ks @@ -50,9 +50,6 @@ dracut-config-generic syslinux-extlinux -# Needed initially, but removed below. -firewalld - # cherry-pick a few things from @standard tar rsync @@ -65,6 +62,8 @@ rsync -kbd -uboot-tools -kernel +-authconfig +-firewalld %end @@ -120,11 +119,6 @@ echo . echo "Removing linux-firmware package." yum -C -y remove linux-firmware -# Remove firewalld; was supposed to be optional in F18+, but is required to -# be present for install/image building. -echo "Removing firewalld." -yum -C -y remove firewalld --setopt="clean_requirements_on_remove=1" - # Another one needed at install time but not after that, and it pulls # in some unneeded deps (like, newt and slang) echo "Removing authconfig."

1 0

[spin-kickstarts] experimental cloud spin: use min-cloud-agent instead of cloud-init
by Matthew Miller 02 Jun '14

02 Jun '14

commit 26cce5f5dc341feb40fb2a7702b13192a6f85349 Author: Matthew Miller <mattdm(a)mattdm.org> Date: Mon Jun 2 14:48:31 2014 -0400 experimental cloud spin: use min-cloud-agent instead of cloud-init fedora-cloud-experimental.ks | 7 +++---- 1 files changed, 3 insertions(+), 4 deletions(-) --- diff --git a/fedora-cloud-experimental.ks b/fedora-cloud-experimental.ks index 6a67090..2ce3081 100644 --- a/fedora-cloud-experimental.ks +++ b/fedora-cloud-experimental.ks @@ -17,7 +17,7 @@ firewall --disabled bootloader --timeout=1 --append="console=tty1 console=ttyS0,115200n8" extlinux network --bootproto=dhcp --device=eth0 --activate --onboot=on -services --enabled=network,sshd,rsyslog,cloud-init,cloud-init-local,cloud-config,cloud-final +services --enabled=network,sshd,min-cloud-agent zerombr clearpart --all @@ -34,9 +34,8 @@ kernel-core @core grubby -# cloud-init does magical things with EC2 metadata, including provisioning -# a user account with ssh keys. -cloud-init +# experimental light-weight replacement for cloud-init +min-cloud-agent # this is used by openstack's cloud orchestration framework (and it's small) heat-cfntools

1 0

[spin-kickstarts] the future Fedora Atomic, although this is currently just regular. it will diverge soon
by Matthew Miller 02 Jun '14

02 Jun '14

commit a272436f455447cae4337369ac37161331f5361d Author: Matthew Miller <mattdm(a)mattdm.org> Date: Mon Jun 2 12:04:23 2014 -0400 the future Fedora Atomic, although this is currently just regular. it will diverge soon fedora-cloud-atomic.ks | 226 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 226 insertions(+), 0 deletions(-) --- diff --git a/fedora-cloud-atomic.ks b/fedora-cloud-atomic.ks new file mode 100644 index 0000000..69ff3f2 --- /dev/null +++ b/fedora-cloud-atomic.ks @@ -0,0 +1,226 @@ +# Fedora Atomic is a cloud-focused spin implementing the Project Atomic +# patterns. +# +# RIGHT NOW, this is very like the traditional cloud image -- this is +# just a starting point. + +text +lang en_US.UTF-8 +keyboard us +timezone --utc Etc/UTC + +auth --useshadow --enablemd5 +selinux --enforcing +rootpw --lock --iscrypted locked +user --name=none + +firewall --disabled + +bootloader --timeout=1 --append="console=tty1 console=ttyS0,115200n8" extlinux + +network --bootproto=dhcp --device=eth0 --activate --onboot=on +services --enabled=network,sshd,rsyslog,cloud-init,cloud-init-local,cloud-config,cloud-final + +zerombr +clearpart --all +part / --size 3000 --fstype ext4 + +%include fedora-repo.ks + + +reboot + +# Package list. +%packages +kernel-core +@core +grubby + +# cloud-init does magical things with EC2 metadata, including provisioning +# a user account with ssh keys. +cloud-init + +# this is used by openstack's cloud orchestration framework (and it's small) +heat-cfntools + +# need this for growpart, because parted doesn't yet support resizepart +# https://bugzilla.redhat.com/show_bug.cgi?id=966993 +cloud-utils-growpart + +# We need this image to be portable; also, rescue mode isn't useful here. +dracut-config-generic +-dracut-config-rescue + +syslinux-extlinux + +# Needed initially, but removed below. +firewalld + +# cherry-pick a few things from @standard +tar +rsync + +# Some things from @core we can do without in a minimal install +-biosdevname +-plymouth +-NetworkManager +-iprutils +-kbd +-uboot-tools +-kernel + +%end + + + +%post --erroronfail + +# Create grub.conf for EC2. This used to be done by appliance creator but +# anaconda doesn't do it. And, in case appliance-creator is used, we're +# overriding it here so that both cases get the exact same file. +# Note that the console line is different -- that's because EC2 provides +# different virtual hardware, and this is a convenient way to act differently +echo -n "Creating grub.conf for pvgrub" +rootuuid=$( awk '$2=="/" { print $1 };' /etc/fstab ) +mkdir /boot/grub +echo -e 'default=0\ntimeout=0\n\n' > /boot/grub/grub.conf +for kv in $( ls -1v /boot/vmlinuz* |grep -v rescue |sed s/.*vmlinuz-// ); do + echo "title Fedora ($kv)" >> /boot/grub/grub.conf + echo -e "\troot (hd0)" >> /boot/grub/grub.conf + echo -e "\tkernel /boot/vmlinuz-$kv ro root=$rootuuid console=hvc0 LANG=en_US.UTF-8" >> /boot/grub/grub.conf + echo -e "\tinitrd /boot/initramfs-$kv.img" >> /boot/grub/grub.conf + echo +done + + +#link grub.conf to menu.lst for ec2 to work +echo -n "Linking menu.lst to old-style grub.conf for pv-grub" +ln -sf grub.conf /boot/grub/menu.lst +ln -sf /boot/grub/grub.conf /etc/grub.conf + +# older versions of livecd-tools do not follow "rootpw --lock" line above +# https://bugzilla.redhat.com/show_bug.cgi?id=964299 +passwd -l root +# remove the user anaconda forces us to make +userdel -r none + +# Kickstart specifies timeout in seconds; syslinux uses 10ths. +# 0 means wait forever, so instead we'll go with 1. +sed -i 's/^timeout 10/timeout 1/' /boot/extlinux/extlinux.conf + +# setup systemd to boot to the right runlevel +echo -n "Setting default runlevel to multiuser text mode" +rm -f /etc/systemd/system/default.target +ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target +echo . + +# If you want to remove rsyslog and just use journald, remove this! +echo -n "Disabling persistent journal" +rmdir /var/log/journal/ +echo . + +# this is installed by default but we don't need it in virt +echo "Removing linux-firmware package." +yum -C -y remove linux-firmware + +# Remove firewalld; was supposed to be optional in F18+, but is required to +# be present for install/image building. +echo "Removing firewalld." +yum -C -y remove firewalld --setopt="clean_requirements_on_remove=1" + +# Another one needed at install time but not after that, and it pulls +# in some unneeded deps (like, newt and slang) +echo "Removing authconfig." +yum -C -y remove authconfig --setopt="clean_requirements_on_remove=1" + +echo -n "Getty fixes" +# although we want console output going to the serial console, we don't +# actually have the opportunity to login there. FIX. +# we don't really need to auto-spawn _any_ gettys. +sed -i '/^#NAutoVTs=.*/ a\ +NAutoVTs=0' /etc/systemd/logind.conf + +echo -n "Network fixes" +# initscripts don't like this file to be missing. +cat > /etc/sysconfig/network << EOF +NETWORKING=yes +NOZEROCONF=yes +EOF + +# For cloud images, 'eth0' _is_ the predictable device name, since +# we don't want to be tied to specific virtual (!) hardware +rm -f /etc/udev/rules.d/70* +ln -s /dev/null /etc/udev/rules.d/80-net-name-slot.rules + +# simple eth0 config, again not hard-coded to the build hardware +cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF +DEVICE="eth0" +BOOTPROTO="dhcp" +ONBOOT="yes" +TYPE="Ethernet" +PERSISTENT_DHCLIENT="yes" +EOF + +# generic localhost names +cat > /etc/hosts << EOF +127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 +::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 + +EOF +echo . + + +# Because memory is scarce resource in most cloud/virt environments, +# and because this impedes forensics, we are differing from the Fedora +# default of having /tmp on tmpfs. +echo "Disabling tmpfs for /tmp." +systemctl mask tmp.mount + +# make sure firstboot doesn't start +echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot + +# Uncomment this if you want to use cloud init but suppress the creation +# of an "ec2-user" account. This will, in the absence of further config, +# cause the ssh key from a metadata source to be put in the root account. +#cat <<EOF > /etc/cloud/cloud.cfg.d/50_suppress_ec2-user_use_root.cfg +#users: [] +#disable_root: 0 +#EOF + +echo "Removing random-seed so it's not the same in every image." +rm -f /var/lib/random-seed + +echo "Cleaning old yum repodata." +yum history new +yum clean all +truncate -c -s 0 /var/log/yum.log + +echo "Import RPM GPG key" +releasever=$(rpm -q --qf '%{version}\n' fedora-release) +basearch=$(uname -i) +rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch + +echo "Packages within this cloud image:" +echo "-----------------------------------------------------------------------" +rpm -qa +echo "-----------------------------------------------------------------------" +# Note that running rpm recreates the rpm db files which aren't needed/wanted +rm -f /var/lib/rpm/__db* + + +echo "Fixing SELinux contexts." +touch /var/log/cron +touch /var/log/boot.log +mkdir -p /var/cache/yum +chattr -i /boot/extlinux/ldlinux.sys +/usr/sbin/fixfiles -R -a restore +chattr +i /boot/extlinux/ldlinux.sys + +echo "Zeroing out empty space." +# This forces the filesystem to reclaim space from deleted files +dd bs=1M if=/dev/zero of=/var/tmp/zeros || : +rm -f /var/tmp/zeros +echo "(Don't worry -- that out-of-space error was expected.)" + +%end +

1 0

[spin-kickstarts] add cloud big data kickstart (currently same as the base)
by Matthew Miller 02 Jun '14

02 Jun '14

commit 6cc4bb9b192a2af44af122d3dd3bb85abddaabf6 Author: Matthew Miller <mattdm(a)mattdm.org> Date: Mon Jun 2 11:48:17 2014 -0400 add cloud big data kickstart (currently same as the base) fedora-cloud-bigdata.ks | 233 +++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 233 insertions(+), 0 deletions(-) --- diff --git a/fedora-cloud-bigdata.ks b/fedora-cloud-bigdata.ks new file mode 100644 index 0000000..debd1bc --- /dev/null +++ b/fedora-cloud-bigdata.ks @@ -0,0 +1,233 @@ +# This is a Fedora 21 spin designed based on the Fedora Cloud Base Image +# but tailored specifically for Big Data processing out-of-the-box. +# Primarily, it builds on that image but adds extra packages, but over +# time may have additional focus. +# +# It's configured with cloud-init so it will take advantage of +# ec2-compatible metadata services for provisioning ssh keys. Cloud-init +# creates a user account named "fedora" with passwordless sudo access. The +# root password is empty and locked by default. +# +# Note that unlike the standard F20 install, this image has /tmp on disk +# rather than in tmpfs, since memory is usually at a premium. + +text +lang en_US.UTF-8 +keyboard us +timezone --utc Etc/UTC + +auth --useshadow --enablemd5 +selinux --enforcing +rootpw --lock --iscrypted locked +user --name=none + +firewall --disabled + +bootloader --timeout=1 --append="console=tty1 console=ttyS0,115200n8" extlinux + +network --bootproto=dhcp --device=eth0 --activate --onboot=on +services --enabled=network,sshd,rsyslog,cloud-init,cloud-init-local,cloud-config,cloud-final + +zerombr +clearpart --all +part / --size 3000 --fstype ext4 + +%include fedora-repo.ks + + +reboot + +# Package list. +%packages +kernel-core +@core +grubby + +# cloud-init does magical things with EC2 metadata, including provisioning +# a user account with ssh keys. +cloud-init + +# this is used by openstack's cloud orchestration framework (and it's small) +heat-cfntools + +# need this for growpart, because parted doesn't yet support resizepart +# https://bugzilla.redhat.com/show_bug.cgi?id=966993 +cloud-utils-growpart + +# We need this image to be portable; also, rescue mode isn't useful here. +dracut-config-generic +-dracut-config-rescue + +syslinux-extlinux + +# Needed initially, but removed below. +firewalld + +# cherry-pick a few things from @standard +tar +rsync + +# Some things from @core we can do without in a minimal install +-biosdevname +-plymouth +-NetworkManager +-iprutils +-kbd +-uboot-tools +-kernel + +%end + + + +%post --erroronfail + +# Create grub.conf for EC2. This used to be done by appliance creator but +# anaconda doesn't do it. And, in case appliance-creator is used, we're +# overriding it here so that both cases get the exact same file. +# Note that the console line is different -- that's because EC2 provides +# different virtual hardware, and this is a convenient way to act differently +echo -n "Creating grub.conf for pvgrub" +rootuuid=$( awk '$2=="/" { print $1 };' /etc/fstab ) +mkdir /boot/grub +echo -e 'default=0\ntimeout=0\n\n' > /boot/grub/grub.conf +for kv in $( ls -1v /boot/vmlinuz* |grep -v rescue |sed s/.*vmlinuz-// ); do + echo "title Fedora ($kv)" >> /boot/grub/grub.conf + echo -e "\troot (hd0)" >> /boot/grub/grub.conf + echo -e "\tkernel /boot/vmlinuz-$kv ro root=$rootuuid console=hvc0 LANG=en_US.UTF-8" >> /boot/grub/grub.conf + echo -e "\tinitrd /boot/initramfs-$kv.img" >> /boot/grub/grub.conf + echo +done + + +#link grub.conf to menu.lst for ec2 to work +echo -n "Linking menu.lst to old-style grub.conf for pv-grub" +ln -sf grub.conf /boot/grub/menu.lst +ln -sf /boot/grub/grub.conf /etc/grub.conf + +# older versions of livecd-tools do not follow "rootpw --lock" line above +# https://bugzilla.redhat.com/show_bug.cgi?id=964299 +passwd -l root +# remove the user anaconda forces us to make +userdel -r none + +# Kickstart specifies timeout in seconds; syslinux uses 10ths. +# 0 means wait forever, so instead we'll go with 1. +sed -i 's/^timeout 10/timeout 1/' /boot/extlinux/extlinux.conf + +# setup systemd to boot to the right runlevel +echo -n "Setting default runlevel to multiuser text mode" +rm -f /etc/systemd/system/default.target +ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target +echo . + +# If you want to remove rsyslog and just use journald, remove this! +echo -n "Disabling persistent journal" +rmdir /var/log/journal/ +echo . + +# this is installed by default but we don't need it in virt +echo "Removing linux-firmware package." +yum -C -y remove linux-firmware + +# Remove firewalld; was supposed to be optional in F18+, but is required to +# be present for install/image building. +echo "Removing firewalld." +yum -C -y remove firewalld --setopt="clean_requirements_on_remove=1" + +# Another one needed at install time but not after that, and it pulls +# in some unneeded deps (like, newt and slang) +echo "Removing authconfig." +yum -C -y remove authconfig --setopt="clean_requirements_on_remove=1" + +echo -n "Getty fixes" +# although we want console output going to the serial console, we don't +# actually have the opportunity to login there. FIX. +# we don't really need to auto-spawn _any_ gettys. +sed -i '/^#NAutoVTs=.*/ a\ +NAutoVTs=0' /etc/systemd/logind.conf + +echo -n "Network fixes" +# initscripts don't like this file to be missing. +cat > /etc/sysconfig/network << EOF +NETWORKING=yes +NOZEROCONF=yes +EOF + +# For cloud images, 'eth0' _is_ the predictable device name, since +# we don't want to be tied to specific virtual (!) hardware +rm -f /etc/udev/rules.d/70* +ln -s /dev/null /etc/udev/rules.d/80-net-name-slot.rules + +# simple eth0 config, again not hard-coded to the build hardware +cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF +DEVICE="eth0" +BOOTPROTO="dhcp" +ONBOOT="yes" +TYPE="Ethernet" +PERSISTENT_DHCLIENT="yes" +EOF + +# generic localhost names +cat > /etc/hosts << EOF +127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 +::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 + +EOF +echo . + + +# Because memory is scarce resource in most cloud/virt environments, +# and because this impedes forensics, we are differing from the Fedora +# default of having /tmp on tmpfs. +echo "Disabling tmpfs for /tmp." +systemctl mask tmp.mount + +# make sure firstboot doesn't start +echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot + +# Uncomment this if you want to use cloud init but suppress the creation +# of an "ec2-user" account. This will, in the absence of further config, +# cause the ssh key from a metadata source to be put in the root account. +#cat <<EOF > /etc/cloud/cloud.cfg.d/50_suppress_ec2-user_use_root.cfg +#users: [] +#disable_root: 0 +#EOF + +echo "Removing random-seed so it's not the same in every image." +rm -f /var/lib/random-seed + +echo "Cleaning old yum repodata." +yum history new +yum clean all +truncate -c -s 0 /var/log/yum.log + +echo "Import RPM GPG key" +releasever=$(rpm -q --qf '%{version}\n' fedora-release) +basearch=$(uname -i) +rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch + +echo "Packages within this cloud image:" +echo "-----------------------------------------------------------------------" +rpm -qa +echo "-----------------------------------------------------------------------" +# Note that running rpm recreates the rpm db files which aren't needed/wanted +rm -f /var/lib/rpm/__db* + + +echo "Fixing SELinux contexts." +touch /var/log/cron +touch /var/log/boot.log +mkdir -p /var/cache/yum +chattr -i /boot/extlinux/ldlinux.sys +/usr/sbin/fixfiles -R -a restore +chattr +i /boot/extlinux/ldlinux.sys + +echo "Zeroing out empty space." +# This forces the filesystem to reclaim space from deleted files +dd bs=1M if=/dev/zero of=/var/tmp/zeros || : +rm -f /var/tmp/zeros +echo "(Don't worry -- that out-of-space error was expected.)" + +%end +

1 0

[spin-kickstarts] experimental cloud kickstart, initially based on cloud-base
by Matthew Miller 02 Jun '14

02 Jun '14

commit f8d6e01d070d37d5238b9e2c6649ec24a9e66122 Author: Matthew Miller <mattdm(a)mattdm.org> Date: Mon Jun 2 11:21:24 2014 -0400 experimental cloud kickstart, initially based on cloud-base fedora-cloud-experimental.ks | 224 ++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 224 insertions(+), 0 deletions(-) --- diff --git a/fedora-cloud-experimental.ks b/fedora-cloud-experimental.ks new file mode 100644 index 0000000..6a67090 --- /dev/null +++ b/fedora-cloud-experimental.ks @@ -0,0 +1,224 @@ +# This is a spin of the Fedora cloud image designed for trying out new +# images in rawhide. It won't be built for non-rawhide trees, let alone +# actual releases. + +text +lang en_US.UTF-8 +keyboard us +timezone --utc Etc/UTC + +auth --useshadow --enablemd5 +selinux --enforcing +rootpw --lock --iscrypted locked +user --name=none + +firewall --disabled + +bootloader --timeout=1 --append="console=tty1 console=ttyS0,115200n8" extlinux + +network --bootproto=dhcp --device=eth0 --activate --onboot=on +services --enabled=network,sshd,rsyslog,cloud-init,cloud-init-local,cloud-config,cloud-final + +zerombr +clearpart --all +part / --size 3000 --fstype ext4 + +%include fedora-repo.ks + + +reboot + +# Package list. +%packages +kernel-core +@core +grubby + +# cloud-init does magical things with EC2 metadata, including provisioning +# a user account with ssh keys. +cloud-init + +# this is used by openstack's cloud orchestration framework (and it's small) +heat-cfntools + +# need this for growpart, because parted doesn't yet support resizepart +# https://bugzilla.redhat.com/show_bug.cgi?id=966993 +cloud-utils-growpart + +# We need this image to be portable; also, rescue mode isn't useful here. +dracut-config-generic +-dracut-config-rescue + +syslinux-extlinux + +# Needed initially, but removed below. +firewalld + +# cherry-pick a few things from @standard +tar +rsync + +# Some things from @core we can do without in a minimal install +-biosdevname +-plymouth +-NetworkManager +-iprutils +-kbd +-uboot-tools +-kernel + +%end + + + +%post --erroronfail + +# Create grub.conf for EC2. This used to be done by appliance creator but +# anaconda doesn't do it. And, in case appliance-creator is used, we're +# overriding it here so that both cases get the exact same file. +# Note that the console line is different -- that's because EC2 provides +# different virtual hardware, and this is a convenient way to act differently +echo -n "Creating grub.conf for pvgrub" +rootuuid=$( awk '$2=="/" { print $1 };' /etc/fstab ) +mkdir /boot/grub +echo -e 'default=0\ntimeout=0\n\n' > /boot/grub/grub.conf +for kv in $( ls -1v /boot/vmlinuz* |grep -v rescue |sed s/.*vmlinuz-// ); do + echo "title Fedora ($kv)" >> /boot/grub/grub.conf + echo -e "\troot (hd0)" >> /boot/grub/grub.conf + echo -e "\tkernel /boot/vmlinuz-$kv ro root=$rootuuid console=hvc0 LANG=en_US.UTF-8" >> /boot/grub/grub.conf + echo -e "\tinitrd /boot/initramfs-$kv.img" >> /boot/grub/grub.conf + echo +done + + +#link grub.conf to menu.lst for ec2 to work +echo -n "Linking menu.lst to old-style grub.conf for pv-grub" +ln -sf grub.conf /boot/grub/menu.lst +ln -sf /boot/grub/grub.conf /etc/grub.conf + +# older versions of livecd-tools do not follow "rootpw --lock" line above +# https://bugzilla.redhat.com/show_bug.cgi?id=964299 +passwd -l root +# remove the user anaconda forces us to make +userdel -r none + +# Kickstart specifies timeout in seconds; syslinux uses 10ths. +# 0 means wait forever, so instead we'll go with 1. +sed -i 's/^timeout 10/timeout 1/' /boot/extlinux/extlinux.conf + +# setup systemd to boot to the right runlevel +echo -n "Setting default runlevel to multiuser text mode" +rm -f /etc/systemd/system/default.target +ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target +echo . + +# If you want to remove rsyslog and just use journald, remove this! +echo -n "Disabling persistent journal" +rmdir /var/log/journal/ +echo . + +# this is installed by default but we don't need it in virt +echo "Removing linux-firmware package." +yum -C -y remove linux-firmware + +# Remove firewalld; was supposed to be optional in F18+, but is required to +# be present for install/image building. +echo "Removing firewalld." +yum -C -y remove firewalld --setopt="clean_requirements_on_remove=1" + +# Another one needed at install time but not after that, and it pulls +# in some unneeded deps (like, newt and slang) +echo "Removing authconfig." +yum -C -y remove authconfig --setopt="clean_requirements_on_remove=1" + +echo -n "Getty fixes" +# although we want console output going to the serial console, we don't +# actually have the opportunity to login there. FIX. +# we don't really need to auto-spawn _any_ gettys. +sed -i '/^#NAutoVTs=.*/ a\ +NAutoVTs=0' /etc/systemd/logind.conf + +echo -n "Network fixes" +# initscripts don't like this file to be missing. +cat > /etc/sysconfig/network << EOF +NETWORKING=yes +NOZEROCONF=yes +EOF + +# For cloud images, 'eth0' _is_ the predictable device name, since +# we don't want to be tied to specific virtual (!) hardware +rm -f /etc/udev/rules.d/70* +ln -s /dev/null /etc/udev/rules.d/80-net-name-slot.rules + +# simple eth0 config, again not hard-coded to the build hardware +cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF +DEVICE="eth0" +BOOTPROTO="dhcp" +ONBOOT="yes" +TYPE="Ethernet" +PERSISTENT_DHCLIENT="yes" +EOF + +# generic localhost names +cat > /etc/hosts << EOF +127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 +::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 + +EOF +echo . + + +# Because memory is scarce resource in most cloud/virt environments, +# and because this impedes forensics, we are differing from the Fedora +# default of having /tmp on tmpfs. +echo "Disabling tmpfs for /tmp." +systemctl mask tmp.mount + +# make sure firstboot doesn't start +echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot + +# Uncomment this if you want to use cloud init but suppress the creation +# of an "ec2-user" account. This will, in the absence of further config, +# cause the ssh key from a metadata source to be put in the root account. +#cat <<EOF > /etc/cloud/cloud.cfg.d/50_suppress_ec2-user_use_root.cfg +#users: [] +#disable_root: 0 +#EOF + +echo "Removing random-seed so it's not the same in every image." +rm -f /var/lib/random-seed + +echo "Cleaning old yum repodata." +yum history new +yum clean all +truncate -c -s 0 /var/log/yum.log + +echo "Import RPM GPG key" +releasever=$(rpm -q --qf '%{version}\n' fedora-release) +basearch=$(uname -i) +rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch + +echo "Packages within this cloud image:" +echo "-----------------------------------------------------------------------" +rpm -qa +echo "-----------------------------------------------------------------------" +# Note that running rpm recreates the rpm db files which aren't needed/wanted +rm -f /var/lib/rpm/__db* + + +echo "Fixing SELinux contexts." +touch /var/log/cron +touch /var/log/boot.log +mkdir -p /var/cache/yum +chattr -i /boot/extlinux/ldlinux.sys +/usr/sbin/fixfiles -R -a restore +chattr +i /boot/extlinux/ldlinux.sys + +echo "Zeroing out empty space." +# This forces the filesystem to reclaim space from deleted files +dd bs=1M if=/dev/zero of=/var/tmp/zeros || : +rm -f /var/tmp/zeros +echo "(Don't worry -- that out-of-space error was expected.)" + +%end +

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

spins June 2014