custom cd loads

[fedora]

Well the kind of customizations i did with RH8 and 9 were as follows:

1. Create a core load of only the baseline rpms needed to boot and put on 
the network. 
2. Replace old rpms with new ones, rerun genhdlist to reflect the changes
3. Install the test load on system and run bastille-linux against it, 
record the changes and apply them via ks.cfg into the core load.
4. Add extra ks.cfg options from other security sources to complete the 
core load hardening.

Now lets say I am making a secondary dns server. I copy the core load 
over to another directory, call it sec-dns-load, add the rpms for bind and 
snort, update the ks.cfg to reflect the 
rpms and have it copy my secondary configs over the default rpm configs. 

I rebuild using anaconda and burn the cd. I can now go to any one of our 
pcs in the warehouse (since they are all from the same manufacturer and 
load spec), insert the cd and have the entire system rebuilt in under 6 
minutes. Then I restore from backup any changes made since the last load 
update.

Ive done this with dns, sendmail, ftp, web, squid and other server 
configurations and its worked great. Plus since its all automagic, any 
tech can read my one page procedural document and restore service without 
having to page my lazy butt back into work :)

I learned the basic procedure from a Linux Journal by Brett Schwarz and 
then added my own procedures into the mix. So what I am looking for is 
another baseline doc to build ISOs similar to mr Swarz's so I can begin 
rebuilding my loads to reflect the changes made in Fedora.

thanks,

Greg

On Thu, 27 Nov 2003, Alexandre Strube wrote:

> Em Qua, 2003-11-26 às 15:05, fedora escreveu:
> > ive been making my own customized isos since RH8 using the example from 
> > Brett Schwarz article in the Linux Journal. Some mods were necessary for 
> > RH9 to work but still no big problems.
> > Now I am wanting to start migrating my work to Fedora but I am looking for 
> > some set of procedures to do this. Anyone have a good set they want to 
> > publish or a link to a good site?
> 
> What kind of customization? I REALLY wish to make a updated iso, so
> every time I install it on a client, I do not need to download 200mb of
> updated packages...
> 
> It's like installing a boxed norton antivirus... You always have to
> update everything before running.... quite different from
> www.freeav.com, where the executable at the site is always up-to-date...
> 
>