Update Fedora
This commit is contained in:
Greg Hellings
+14
-4
@@ -25,10 +25,20 @@
|
||||
retries: 3
|
||||
until: _update_atomic is success
|
||||
|
||||
- name: Restart the machine
|
||||
become: true
|
||||
ansible.builtin.reboot:
|
||||
when: (_update_atomic is changed) or (_update_all is changed)
|
||||
- name: Reboot, but don't care if it doesn't
|
||||
block:
|
||||
- name: Restart the machine
|
||||
become: true
|
||||
ansible.builtin.reboot:
|
||||
when: (_update_atomic is changed) or (_update_all is changed)
|
||||
|
||||
- name: Wait for reboot to finish
|
||||
ansible.builtin.wait_for_connection:
|
||||
delay: 15
|
||||
rescue:
|
||||
- name: Reboot failed? lol
|
||||
ansible.builtin.debug:
|
||||
msg: Reboot failed. lol.
|
||||
roles:
|
||||
- role: devroles.system.epel
|
||||
- role: virtualbox
|
||||
|
||||
@@ -0,0 +1,182 @@
|
||||
# Like the Cloud Base image, but tuned for vagrant. Enable
|
||||
# the vagrant user, disable cloud-init.
|
||||
|
||||
# So, to be clear, this gaping security hole is an integral part of how
|
||||
# Vagrant works - These images are _not_ supposed to be run in any public-
|
||||
# Internet facing way - They are for use on developer setups, almost always
|
||||
# with NAT
|
||||
user --name=vagrant --password=vagrant
|
||||
|
||||
# Suggestion from @purpleidea that most/many vagrant boxes also set root PW
|
||||
# to "vagrant" for ease of use. Again, see comments above.
|
||||
rootpw vagrant
|
||||
|
||||
# The addition of the net.ifnames=0 and biosdevnames=0 option ensures that
|
||||
# even on VirtualBox virt, we get a primary network device with "eth0" as the name
|
||||
# This simplifies things and allows a single disk image for both supported Vagrant
|
||||
# platforms (virtualbox and kvm)
|
||||
bootloader --timeout=1 --location=mbr --append="no_timer_check console=tty1 console=ttyS0,115200n8 net.ifnames=0 biosdevnames=0"
|
||||
|
||||
repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
|
||||
repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
|
||||
url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
|
||||
|
||||
text
|
||||
lang en_US.UTF-8
|
||||
keyboard us
|
||||
timezone --utc Etc/UTC
|
||||
|
||||
selinux --enforcing
|
||||
|
||||
firewall --disabled
|
||||
|
||||
services --enabled=sshd
|
||||
|
||||
# Configure for gpt with bios+uefi
|
||||
clearpart --all --initlabel --disklabel=gpt
|
||||
part prepboot --size=4 --fstype=prepboot
|
||||
part biosboot --size=1 --fstype=biosboot
|
||||
part /boot/efi --size=100 --fstype=efi
|
||||
part /boot --size=1000 --fstype=ext4 --label=boot
|
||||
part btrfs.007 --size=2000 --fstype=btrfs --grow
|
||||
btrfs none --label=fedora btrfs.007
|
||||
btrfs /home --subvol --name=home LABEL=fedora
|
||||
btrfs / --subvol --name=root LABEL=fedora
|
||||
|
||||
reboot
|
||||
|
||||
##### begin package list #############################################
|
||||
%packages --inst-langs=en
|
||||
|
||||
# Include packages for the cloud-server-environment group
|
||||
@^cloud-server-environment
|
||||
|
||||
# Don't include the kernel toplevel package since it pulls in
|
||||
# kernel-modules. We're happy for now with kernel-core.
|
||||
-kernel
|
||||
kernel-core
|
||||
|
||||
# Don't include dracut-config-rescue. It will have dracut generate a
|
||||
# "rescue" entry in the grub menu, but that also means there is a
|
||||
# rescue kernel and initramfs that get created, which (currently) add
|
||||
# about another 40MiB to the /boot/ partition. Also the "rescue" mode
|
||||
# is generally not useful in the cloud.
|
||||
-dracut-config-rescue
|
||||
|
||||
# Plymouth provides a graphical boot animation. In the cloud we don't
|
||||
# need a graphical boot animation. This also means anaconda won't put
|
||||
# rhgb/quiet on kernel command line
|
||||
-plymouth
|
||||
|
||||
# Install qemu-guest-agent https://pagure.io/cloud-sig/issue/319 To
|
||||
# improve the integration with OpenStack and other VM management
|
||||
# systems (oVirt, KubeVirt).
|
||||
qemu-guest-agent
|
||||
|
||||
|
||||
# No need for firewalld for now. We don't have a firewall on by default.
|
||||
-firewalld
|
||||
|
||||
# Don't include the geolite2 databases, which end up with 66MiB
|
||||
# in /usr/share/GeoIP
|
||||
-geolite2-country
|
||||
-geolite2-city
|
||||
dnf-yum
|
||||
rsync
|
||||
fuse-sshfs
|
||||
%end
|
||||
##### end package list ###############################################
|
||||
|
||||
|
||||
##### begin kickstart post ###########################################
|
||||
%post --erroronfail
|
||||
if [ -e /dev/vda ]; then
|
||||
device="/dev/vda"
|
||||
elif [ -e /dev/sda ]; then
|
||||
device="/dev/sda"
|
||||
else
|
||||
echo "No device found"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ "$(arch)" = "x86_64" ]; then
|
||||
# Set up legacy BIOS boot if we booted from UEFI
|
||||
grub2-install --target=i386-pc "${device}"
|
||||
fi
|
||||
|
||||
# Blivet sets pmbr_boot flag erroneously and we need to purge it
|
||||
# otherwise it'll fail to boot
|
||||
parted "${device}" disk_set pmbr_boot off
|
||||
|
||||
# linux-firmware is installed by default and is quite large. As of mid 2020:
|
||||
# Total download size: 97 M
|
||||
# Installed size: 268 M
|
||||
# So far we've been fine shipping without it so let's continue.
|
||||
# More discussion about this in #1234504.
|
||||
echo "Removing linux-firmware package."
|
||||
rpm -e linux-firmware
|
||||
|
||||
# See the systemd-random-seed.service man page that says:
|
||||
# " It is recommended to remove the random seed from OS images intended
|
||||
# for replication on multiple systems"
|
||||
echo "Removing random-seed so it's not the same in every image."
|
||||
rm -f /var/lib/systemd/random-seed
|
||||
|
||||
echo "Import RPM GPG key"
|
||||
releasever=$(rpm --eval '%{fedora}')
|
||||
basearch=$(uname -i)
|
||||
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
||||
|
||||
echo "Zeroing out empty space."
|
||||
# Create zeros file with nodatacow and no compression
|
||||
touch /var/tmp/zeros
|
||||
chattr +C /var/tmp/zeros
|
||||
# This forces the filesystem to reclaim space from deleted files
|
||||
dd bs=1M if=/dev/zero of=/var/tmp/zeros || :
|
||||
echo "(Don't worry -- that out-of-space error was expected.)"
|
||||
# Force sync to disk (Cf. https://pagure.io/cloud-sig/issue/340#comment-743430)
|
||||
btrfs filesystem sync /
|
||||
rm -f /var/tmp/zeros
|
||||
btrfs filesystem sync /
|
||||
|
||||
# When we build the image a networking config file gets left behind.
|
||||
# Let's clean it up.
|
||||
echo "Cleanup leftover networking configuration"
|
||||
rm -f /etc/NetworkManager/system-connections/*.nmconnection
|
||||
|
||||
# Truncate the /etc/resolv.conf left over from NetworkManager during the
|
||||
# kickstart. This causes delays in boot with cloud-init because the
|
||||
# 192.168.122.1 DNS server cannot be reached.
|
||||
truncate -s 0 /etc/resolv.conf
|
||||
|
||||
# Clear machine-id on pre generated images
|
||||
truncate -s 0 /etc/machine-id
|
||||
|
||||
# Vagrant setup
|
||||
sed -i 's,Defaults\\s*requiretty,Defaults !requiretty,' /etc/sudoers
|
||||
echo 'vagrant ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/vagrant-nopasswd
|
||||
sed -i 's/.*UseDNS.*/UseDNS no/' /etc/ssh/sshd_config
|
||||
mkdir -m 0700 -p ~vagrant/.ssh
|
||||
cat > ~vagrant/.ssh/authorized_keys << EOKEYS
|
||||
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key
|
||||
EOKEYS
|
||||
chmod 600 ~vagrant/.ssh/authorized_keys
|
||||
chown -R vagrant:vagrant ~vagrant/.ssh/
|
||||
|
||||
cat > /etc/ssh/sshd_config.d/10-vagrant-insecure-rsa-key.conf <<EOF
|
||||
# For now the vagrant insecure key is an rsa key
|
||||
# https://github.com/hashicorp/vagrant/issues/11783
|
||||
PubkeyAcceptedKeyTypes=+ssh-rsa
|
||||
EOF
|
||||
|
||||
# Further suggestion from @purpleidea (James Shubin) - extend key to root users as well
|
||||
mkdir -m 0700 -p /root/.ssh
|
||||
cp /home/vagrant/.ssh/authorized_keys /root/.ssh/authorized_keys
|
||||
chmod 600 /root/.ssh/authorized_keys
|
||||
chown -R root:root /root/.ssh
|
||||
|
||||
ssh-keygen -A
|
||||
|
||||
%end
|
||||
|
||||
##### end kickstart post ############################################
|
||||
@@ -6,5 +6,8 @@ iso = {
|
||||
}
|
||||
boot_command = [
|
||||
"<up>e<down><down><end> ",
|
||||
"net.ifnames=0 biosdevnames=0 inst.ks=cdrom:/http/fedora/37-x86_64.ks console=tty0 console=ttyS0<f10>"
|
||||
"net.ifnames=0 biosdevnames=0 inst.ks=cdrom:/x86_64.ks console=tty0<f10>"
|
||||
]
|
||||
cd_files = [
|
||||
"distros/fedora/37/*.ks"
|
||||
]
|
||||
|
||||
@@ -0,0 +1,175 @@
|
||||
user --name=vagrant --password=vagrant
|
||||
rootpw vagrant
|
||||
|
||||
text # don't use cmdline -- https://github.com/rhinstaller/anaconda/issues/931
|
||||
lang en_US.UTF-8
|
||||
keyboard us
|
||||
timezone --utc Etc/UTC
|
||||
|
||||
selinux --enforcing
|
||||
rootpw --lock --iscrypted locked
|
||||
|
||||
firewall --disabled
|
||||
|
||||
# We pass net.ifnames=0 because we always want to use eth0 here on all the cloud images.
|
||||
bootloader --timeout=1 --location=mbr --append="no_timer_check net.ifnames=0 console=tty1 console=ttyS0,115200n8 biosdevnames=0"
|
||||
|
||||
services --enabled=sshd
|
||||
|
||||
# Configure for gpt with bios+uefi
|
||||
clearpart --all --initlabel --disklabel=gpt
|
||||
part prepboot --size=4 --fstype=prepboot
|
||||
part biosboot --size=1 --fstype=biosboot
|
||||
part /boot/efi --size=100 --fstype=efi
|
||||
part /boot --size=1000 --fstype=ext4 --label=boot
|
||||
part btrfs.007 --size=2000 --fstype=btrfs --grow
|
||||
btrfs none --label=fedora btrfs.007
|
||||
btrfs /home --subvol --name=home LABEL=fedora
|
||||
btrfs / --subvol --name=root LABEL=fedora
|
||||
|
||||
repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
|
||||
repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
|
||||
url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
|
||||
|
||||
reboot
|
||||
|
||||
##### begin package list #############################################
|
||||
%packages --inst-langs=en
|
||||
|
||||
# Include packages for the cloud-server-environment group
|
||||
@^cloud-server-environment
|
||||
|
||||
# Don't include the kernel toplevel package since it pulls in
|
||||
# kernel-modules. We're happy for now with kernel-core.
|
||||
-kernel
|
||||
kernel-core
|
||||
|
||||
# Don't include dracut-config-rescue. It will have dracut generate a
|
||||
# "rescue" entry in the grub menu, but that also means there is a
|
||||
# rescue kernel and initramfs that get created, which (currently) add
|
||||
# about another 40MiB to the /boot/ partition. Also the "rescue" mode
|
||||
# is generally not useful in the cloud.
|
||||
-dracut-config-rescue
|
||||
|
||||
# Plymouth provides a graphical boot animation. In the cloud we don't
|
||||
# need a graphical boot animation. This also means anaconda won't put
|
||||
# rhgb/quiet on kernel command line
|
||||
-plymouth
|
||||
|
||||
# Install qemu-guest-agent https://pagure.io/cloud-sig/issue/319 To
|
||||
# improve the integration with OpenStack and other VM management
|
||||
# systems (oVirt, KubeVirt).
|
||||
qemu-guest-agent
|
||||
|
||||
|
||||
# No need for firewalld for now. We don't have a firewall on by default.
|
||||
-firewalld
|
||||
|
||||
# Don't include the geolite2 databases, which end up with 66MiB
|
||||
# in /usr/share/GeoIP
|
||||
-geolite2-country
|
||||
-geolite2-city
|
||||
|
||||
# Specific to vagrant
|
||||
dnf-yum
|
||||
rsync
|
||||
fuse-sshfs
|
||||
%end
|
||||
##### end package list ###############################################
|
||||
|
||||
|
||||
##### begin kickstart post ###########################################
|
||||
%post --erroronfail
|
||||
#!/bin/bash
|
||||
set -x
|
||||
if [ -e /dev/vda ]; then
|
||||
device="/dev/vda"
|
||||
elif [ -e /dev/sda ]; then
|
||||
device="/dev/sda"
|
||||
else
|
||||
echo "No device found"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
|
||||
if [ "$(arch)" = "x86_64" ]; then
|
||||
# Set up legacy BIOS boot if we booted from UEFI
|
||||
grub2-install --target=i386-pc "${device}"
|
||||
fi
|
||||
|
||||
# Blivet sets pmbr_boot flag erroneously and we need to purge it
|
||||
# otherwise it'll fail to boot
|
||||
parted "${device}" disk_set pmbr_boot off
|
||||
|
||||
# linux-firmware is installed by default and is quite large. As of mid 2020:
|
||||
# Total download size: 97 M
|
||||
# Installed size: 268 M
|
||||
# So far we've been fine shipping without it so let's continue.
|
||||
# More discussion about this in #1234504.
|
||||
echo "Removing linux-firmware package."
|
||||
rpm -e linux-firmware
|
||||
|
||||
# See the systemd-random-seed.service man page that says:
|
||||
# " It is recommended to remove the random seed from OS images intended
|
||||
# for replication on multiple systems"
|
||||
echo "Removing random-seed so it's not the same in every image."
|
||||
rm -f /var/lib/systemd/random-seed
|
||||
|
||||
echo "Import RPM GPG key"
|
||||
releasever=$(rpm --eval '%{fedora}')
|
||||
basearch=$(uname -i)
|
||||
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
||||
|
||||
echo "Zeroing out empty space."
|
||||
# Create zeros file with nodatacow and no compression
|
||||
touch /var/tmp/zeros
|
||||
chattr +C /var/tmp/zeros
|
||||
# This forces the filesystem to reclaim space from deleted files
|
||||
dd bs=1M if=/dev/zero of=/var/tmp/zeros || :
|
||||
echo "(Don't worry -- that out-of-space error was expected.)"
|
||||
# Force sync to disk (Cf. https://pagure.io/cloud-sig/issue/340#comment-743430)
|
||||
btrfs filesystem sync /
|
||||
rm -f /var/tmp/zeros
|
||||
btrfs filesystem sync /
|
||||
|
||||
# When we build the image a networking config file gets left behind.
|
||||
# Let's clean it up.
|
||||
echo "Cleanup leftover networking configuration"
|
||||
rm -f /etc/NetworkManager/system-connections/*.nmconnection
|
||||
|
||||
# Truncate the /etc/resolv.conf left over from NetworkManager during the
|
||||
# kickstart. This causes delays in boot with cloud-init because the
|
||||
# 192.168.122.1 DNS server cannot be reached.
|
||||
truncate -s 0 /etc/resolv.conf
|
||||
|
||||
# Clear machine-id on pre generated images
|
||||
truncate -s 0 /etc/machine-id
|
||||
|
||||
# Vagrant setup
|
||||
sed -i 's,Defaults\\s*requiretty,Defaults !requiretty,' /etc/sudoers
|
||||
echo 'vagrant ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/vagrant-nopasswd
|
||||
sed -i 's/.*UseDNS.*/UseDNS no/' /etc/ssh/sshd_config
|
||||
mkdir -m 0700 -p ~vagrant/.ssh
|
||||
cat > ~vagrant/.ssh/authorized_keys << EOKEYS
|
||||
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key
|
||||
EOKEYS
|
||||
chmod 600 ~vagrant/.ssh/authorized_keys
|
||||
chown -R vagrant:vagrant ~vagrant/.ssh/
|
||||
|
||||
cat > /etc/ssh/sshd_config.d/10-vagrant-insecure-rsa-key.conf <<EOF
|
||||
# For now the vagrant insecure key is an rsa key
|
||||
# https://github.com/hashicorp/vagrant/issues/11783
|
||||
PubkeyAcceptedKeyTypes=+ssh-rsa
|
||||
EOF
|
||||
|
||||
# Further suggestion from @purpleidea (James Shubin) - extend key to root users as well
|
||||
mkdir -m 0700 -p /root/.ssh
|
||||
cp /home/vagrant/.ssh/authorized_keys /root/.ssh/authorized_keys
|
||||
chmod 600 /root/.ssh/authorized_keys
|
||||
chown -R root:root /root/.ssh
|
||||
|
||||
ssh-keygen -A
|
||||
|
||||
%end
|
||||
##### end kickstart post ############################################
|
||||
|
||||
@@ -5,6 +5,9 @@ iso = {
|
||||
checksum = "66b52d7cb39386644cd740930b0bef0a5a2f2be569328fef6b1f9b3679fdc54d"
|
||||
}
|
||||
boot_command = [
|
||||
"<up>e<down><down><end> ",
|
||||
"net.ifnames=0 biosdevnames=0 inst.ks=cdrom:/http/fedora/38-x86_64.ks console=tty0 console=ttyS0<f10>"
|
||||
"<up>e<down><down><end> ",
|
||||
"net.ifnames=0 biosdevnames=0 inst.ks=cdrom:/x86_64.ks console=tty0<f10>"
|
||||
]
|
||||
cd_files = [
|
||||
"distros/fedora/38/*.ks"
|
||||
]
|
||||
|
||||
@@ -0,0 +1,168 @@
|
||||
user --name=vagrant --password=vagrant
|
||||
rootpw vagrant
|
||||
|
||||
text # don't use cmdline -- https://github.com/rhinstaller/anaconda/issues/931
|
||||
lang en_US.UTF-8
|
||||
keyboard us
|
||||
timezone --utc Etc/UTC
|
||||
|
||||
selinux --enforcing
|
||||
rootpw --lock --iscrypted locked
|
||||
|
||||
firewall --disabled
|
||||
|
||||
# We pass net.ifnames=0 because we always want to use eth0 here on all the cloud images.
|
||||
bootloader --timeout=1 --location=mbr --append="no_timer_check net.ifnames=0 console=tty1 console=ttyS0,115200n8 biosdevnames=0"
|
||||
|
||||
services --enabled=sshd
|
||||
|
||||
# Configure for gpt with bios+uefi
|
||||
clearpart --all --initlabel --disklabel=gpt
|
||||
part prepboot --size=4 --fstype=prepboot
|
||||
part biosboot --size=1 --fstype=biosboot
|
||||
part /boot/efi --size=100 --fstype=efi
|
||||
part /boot --size=1000 --fstype=ext4 --label=boot
|
||||
part btrfs.007 --size=2000 --fstype=btrfs --grow
|
||||
btrfs none --label=fedora btrfs.007
|
||||
btrfs /home --subvol --name=home LABEL=fedora
|
||||
btrfs / --subvol --name=root LABEL=fedora
|
||||
|
||||
repo --name=rawhide --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch
|
||||
url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch
|
||||
|
||||
reboot
|
||||
|
||||
##### begin package list #############################################
|
||||
%packages --instLangs=en
|
||||
|
||||
# Include packages for the cloud-server-environment group
|
||||
@^cloud-server-environment
|
||||
|
||||
# Install the tracer dnf plugin to enable automatic reboots
|
||||
# IF the user requests package updates
|
||||
# AND requests a reboot
|
||||
# AND the packages updated require a reboot.
|
||||
# https://fedoraproject.org/wiki/Changes/Automatic_Cloud_Reboot_On_Updates
|
||||
python3-dnf-plugin-tracer
|
||||
|
||||
# Don't include the kernel toplevel package since it pulls in
|
||||
# kernel-modules. We're happy for now with kernel-core.
|
||||
-kernel
|
||||
kernel-core
|
||||
|
||||
# Don't include dracut-config-rescue. It will have dracut generate a
|
||||
# "rescue" entry in the grub menu, but that also means there is a
|
||||
# rescue kernel and initramfs that get created, which (currently) add
|
||||
# about another 40MiB to the /boot/ partition. Also the "rescue" mode
|
||||
# is generally not useful in the cloud.
|
||||
-dracut-config-rescue
|
||||
|
||||
# Plymouth provides a graphical boot animation. In the cloud we don't
|
||||
# need a graphical boot animation. This also means anaconda won't put
|
||||
# rhgb/quiet on kernel command line
|
||||
-plymouth
|
||||
|
||||
# Install qemu-guest-agent https://pagure.io/cloud-sig/issue/319 To
|
||||
# improve the integration with OpenStack and other VM management
|
||||
# systems (oVirt, KubeVirt).
|
||||
qemu-guest-agent
|
||||
|
||||
|
||||
# No need for firewalld for now. We don't have a firewall on by default.
|
||||
-firewalld
|
||||
|
||||
# Don't include the geolite2 databases, which end up with 66MiB
|
||||
# in /usr/share/GeoIP
|
||||
-geolite2-country
|
||||
-geolite2-city
|
||||
rsync
|
||||
fuse-sshfs
|
||||
%end
|
||||
##### end package list ###############################################
|
||||
|
||||
|
||||
##### begin kickstart post ###########################################
|
||||
%post --erroronfail
|
||||
set -x
|
||||
|
||||
if [ "$(arch)" = "x86_64" ]; then
|
||||
# Set up legacy BIOS boot if we booted from UEFI
|
||||
grub2-install --target=i386-pc /dev/vda
|
||||
fi
|
||||
|
||||
# Blivet sets pmbr_boot flag erroneously and we need to purge it
|
||||
# otherwise it'll fail to boot
|
||||
parted /dev/vda disk_set pmbr_boot off
|
||||
|
||||
# linux-firmware is installed by default and is quite large. As of mid 2020:
|
||||
# Total download size: 97 M
|
||||
# Installed size: 268 M
|
||||
# So far we've been fine shipping without it so let's continue.
|
||||
# More discussion about this in #1234504.
|
||||
echo "Removing linux-firmware package."
|
||||
rpm -e linux-firmware
|
||||
|
||||
# See the systemd-random-seed.service man page that says:
|
||||
# " It is recommended to remove the random seed from OS images intended
|
||||
# for replication on multiple systems"
|
||||
echo "Removing random-seed so it's not the same in every image."
|
||||
rm -f /var/lib/systemd/random-seed
|
||||
|
||||
echo "Import RPM GPG key"
|
||||
releasever=$(rpm --eval '%{fedora}')
|
||||
basearch=$(uname -i)
|
||||
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
||||
|
||||
echo "Zeroing out empty space."
|
||||
# Create zeros file with nodatacow and no compression
|
||||
touch /var/tmp/zeros
|
||||
chattr +C /var/tmp/zeros
|
||||
# This forces the filesystem to reclaim space from deleted files
|
||||
dd bs=1M if=/dev/zero of=/var/tmp/zeros || :
|
||||
echo "(Don't worry -- that out-of-space error was expected.)"
|
||||
# Force sync to disk (Cf. https://pagure.io/cloud-sig/issue/340#comment-743430)
|
||||
btrfs filesystem sync /
|
||||
rm -f /var/tmp/zeros
|
||||
btrfs filesystem sync /
|
||||
|
||||
# When we build the image a networking config file gets left behind.
|
||||
# Let's clean it up.
|
||||
echo "Cleanup leftover networking configuration"
|
||||
rm -f /etc/NetworkManager/system-connections/*.nmconnection
|
||||
|
||||
# Truncate the /etc/resolv.conf left over from NetworkManager during the
|
||||
# kickstart. This causes delays in boot with cloud-init because the
|
||||
# 192.168.122.1 DNS server cannot be reached.
|
||||
truncate -s 0 /etc/resolv.conf
|
||||
|
||||
# Clear machine-id on pre generated images
|
||||
truncate -s 0 /etc/machine-id
|
||||
|
||||
# Vagrant setup
|
||||
sed -i 's,Defaults\\s*requiretty,Defaults !requiretty,' /etc/sudoers
|
||||
echo 'vagrant ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/vagrant-nopasswd
|
||||
sed -i 's/.*UseDNS.*/UseDNS no/' /etc/ssh/sshd_config
|
||||
mkdir -m 0700 -p ~vagrant/.ssh
|
||||
cat > ~vagrant/.ssh/authorized_keys << EOKEYS
|
||||
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key
|
||||
EOKEYS
|
||||
chmod 600 ~vagrant/.ssh/authorized_keys
|
||||
chown -R vagrant:vagrant ~vagrant/.ssh/
|
||||
|
||||
cat > /etc/ssh/sshd_config.d/10-vagrant-insecure-rsa-key.conf <<EOF
|
||||
# For now the vagrant insecure key is an rsa key
|
||||
# https://github.com/hashicorp/vagrant/issues/11783
|
||||
PubkeyAcceptedKeyTypes=+ssh-rsa
|
||||
EOF
|
||||
|
||||
# Further suggestion from @purpleidea (James Shubin) - extend key to root users as well
|
||||
mkdir -m 0700 -p /root/.ssh
|
||||
cp /home/vagrant/.ssh/authorized_keys /root/.ssh/authorized_keys
|
||||
chmod 600 /root/.ssh/authorized_keys
|
||||
chown -R root:root /root/.ssh
|
||||
|
||||
ssh-keygen -A
|
||||
|
||||
%end
|
||||
##### end kickstart post ############################################
|
||||
|
||||
@@ -0,0 +1,13 @@
|
||||
distro = "fedora"
|
||||
version = "rawhide"
|
||||
iso = {
|
||||
url = "https://download.fedoraproject.org/pub/fedora/linux/development/rawhide/Server/x86_64/iso/Fedora-Server-dvd-x86_64-Rawhide-20230811.n.0.iso"
|
||||
checksum = "5e369dbac97ea9abd77802dc316949bb6caa593b6a434cda93214c430a97b84e"
|
||||
}
|
||||
boot_command = [
|
||||
"<up>e<down><down><end><bs><bs><bs><bs><bs>",
|
||||
"net.ifnames=0 biosdevnames=0 inst.ks=cdrom:/x86_64.ks console=tty0 console=ttyS0<f10>"
|
||||
]
|
||||
cd_files = [
|
||||
"distros/fedora/rawhide/*.ks"
|
||||
]
|
||||
@@ -35,7 +35,10 @@ iso = {
|
||||
}
|
||||
boot_command = [
|
||||
"<up>e<down><down><end><bs><bs><bs><bs><bs>",
|
||||
"net.ifnames=0 biosdevnames=0 inst.ks=cdrom:/http/fedora/rawhide-x86_64.ks console=tty0 console=ttyS0<f10>"
|
||||
"net.ifnames=0 biosdevnames=0 inst.ks=cdrom:/x86_64.ks console=tty0 console=ttyS0<f10>"
|
||||
]
|
||||
cd_files = [
|
||||
"distros/fedora/rawhide/*.ks"
|
||||
]
|
||||
EOF
|
||||
|
||||
|
||||
@@ -0,0 +1,7 @@
|
||||
37: &supp
|
||||
- arch: x86_64
|
||||
provider: qemu
|
||||
- arch: x86_64
|
||||
provider: virtualbox-iso
|
||||
38: *supp
|
||||
rawhide: []
|
||||
Reference in New Issue
Block a user