]> git.madduck.net Git - code/vinst.git/commitdiff

madduck's git repository

Every one of the projects in this repository is available at the canonical URL git://git.madduck.net/madduck/pub/<projectpath> — see each project's metadata for the exact URL.

All patches and comments are welcome. Please squash your changes to logical commits before using git-format-patch and git-send-email to patches@git.madduck.net. If you'd read over the Git project's submission guidelines and adhered to them, I'd be especially grateful.

SSH access, as well as push access can be individually arranged.

If you use my repositories frequently, consider adding the following snippet to ~/.gitconfig and using the third clone URL listed for each project:

[url "git://git.madduck.net/madduck/"]
  insteadOf = madduck:

import jessie preseed
authormartin f. krafft <madduck@madduck.net>
Wed, 12 Nov 2014 21:17:37 +0000 (22:17 +0100)
committermartin f. krafft <madduck@madduck.net>
Thu, 13 Nov 2014 11:29:14 +0000 (12:29 +0100)
preseed/jessie/commands/early_command [new file with mode: 0755]
preseed/jessie/commands/late_command [new file with mode: 0755]
preseed/jessie/commands/late_commands.d/ansible_dependencies [new file with mode: 0755]
preseed/jessie/commands/late_commands.d/ansible_user [new file with mode: 0755]
preseed/jessie/commands/late_commands.d/enable_serial_console [new file with mode: 0755]
preseed/jessie/commands/late_commands.d/no_kernel_symlinks [new file with mode: 0755]
preseed/jessie/commands/late_commands.d/post_boot_cleanup [new file with mode: 0755]
preseed/jessie/commands/late_commands.d/srv-home_symlink [new file with mode: 0755]
preseed/jessie/preseed.cfg [new file with mode: 0644]

diff --git a/preseed/jessie/commands/early_command b/preseed/jessie/commands/early_command
new file mode 100755 (executable)
index 0000000..8f26221
--- /dev/null
@@ -0,0 +1,2 @@
+#!/bin/sh
+# pwd is /
diff --git a/preseed/jessie/commands/late_command b/preseed/jessie/commands/late_command
new file mode 100755 (executable)
index 0000000..3f843be
--- /dev/null
@@ -0,0 +1,4 @@
+#!/bin/sh
+cp -r /commands/late_commands.d /target
+in-target run-parts /late_commands.d
+rm -r /target/late_commands.d
diff --git a/preseed/jessie/commands/late_commands.d/ansible_dependencies b/preseed/jessie/commands/late_commands.d/ansible_dependencies
new file mode 100755 (executable)
index 0000000..8480af1
--- /dev/null
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+echo "Installing Ansible dependencies"
+export DEBCONF_FRONTEND=noninteractive
+apt-get install --no-install-recommends -y python-minimal python-apt python-yaml python-simplejson
diff --git a/preseed/jessie/commands/late_commands.d/ansible_user b/preseed/jessie/commands/late_commands.d/ansible_user
new file mode 100755 (executable)
index 0000000..10adacd
--- /dev/null
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+export DEBCONF_FRONTEND=noninteractive
+apt-get install -y sudo
+
+USER=ansible
+echo "Adding $USER user and installing SSH key"
+
+HOME=/var/lib/$USER
+adduser --home $HOME --shell /bin/sh \
+  --uid 999 --gid 65534 --disabled-password \
+  --gecos 'Remote control with ansible' $USER
+
+install -d -m 700 -o $USER -g nogroup $HOME/.ssh
+cat <<_eof > $HOME/.ssh/authorized_keys
+no-agent-forwarding,no-port-forwarding,no-user-rc,no-X11-forwarding ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGUrO3VGYap3uyphcExiA4VXjXzwyiqXA4kD3o3uLi45Lw9TFCefwa815R4JkRhaGs/4pqy4Bqcmb6kbEOEaTS6xidedQOcuHIxk6nZfDAhGm95rmx1kSxgLIBYJn0RPFvdRiFuoGC07tn4FRQ/seiTVbbTtgy7Wrb3XqFMPhBp1EFfe0ASZdEUJ/EfZl/a72y/57DTflL6RzPIWF6t0z5URURSm3caC4Uxpvx3FK37xzXOd0il7ikv1UeC5pMopwR74zb9SfFiPVEcOK64jq8xnS7ugTOrlb+H5JwchOO88eUTD1pd72+4a7XkeHzneXT8mNROQJZUU1vxoJpZXFziL0uCtnR9QVt+/mE4q3MiYjq5YYOXYCJ0vKIDKVAkxv3U71N8WpnasLmC5mal7juuj8tHXqQJc8bNt7ZxoSRESwRjhIXmoIxdkso862KTM7FL5SKPGDwE8ifog4OU3PcI8C5dfTY1vMa7mZszsO3sK1+gpiJBUlWu0nv9Q2qB3KDPoKA/VnPGBitQSIMbFgDfUs/JXJ35q4ynxO/h0NqCPGXx1bECc6meepND99qo301kYPxYLY4FVeFMVJbcdS/kn0YxbMikaRmr3SqxaRUb4vl1NDKdtoIcIyS0Gh4AvTYtxlLZwShf8ImtRzLerLwqx73WWSIeNai+pHJJNTMvw== madduck@fishbowl
+_eof
+chmod -R u=rwX,og= $HOME
+chown -R ${USER}.nogroup $HOME
+
+SUDOFILE=/etc/sudoers.d/local-ansible-user
+cat <<_eof > $SUDOFILE
+Defaults>ansible !requiretty
+$USER $(hostname --fqdn)=(root) NOPASSWD: ALL
+_eof
+chmod 440 $SUDOFILE
diff --git a/preseed/jessie/commands/late_commands.d/enable_serial_console b/preseed/jessie/commands/late_commands.d/enable_serial_console
new file mode 100755 (executable)
index 0000000..09f8acb
--- /dev/null
@@ -0,0 +1,9 @@
+#!/bin/sh
+echo "Enabling the serial console..."
+#683124 requires the cmdline patch, and #444026 is for GRUB_TERMINAL:
+sed -i -e '/^GRUB_CMDLINE_LINUX=/s/"$/ console=tty0 console=ttyS0,115200n8&/' \
+       -e '/^GRUB_CMDLINE_LINUX=/s/=" /="/' \
+       -e '/^GRUB_TERMINAL=/s/serial/"& console"/' \
+       /etc/default/grub
+update-grub
+sed -i '/ttyS0/s/^#//;/ttyS0/s/9600 vt100/115200 linux/' /etc/inittab
diff --git a/preseed/jessie/commands/late_commands.d/no_kernel_symlinks b/preseed/jessie/commands/late_commands.d/no_kernel_symlinks
new file mode 100755 (executable)
index 0000000..290cbd3
--- /dev/null
@@ -0,0 +1,4 @@
+#!/bin/sh
+echo "Removing kernel symlinks in / and disabling them..."
+rm /initrd.img /vmlinuz
+sed -i -e '/do_symlinks/s/yes/no/' /etc/kernel-img.conf
diff --git a/preseed/jessie/commands/late_commands.d/post_boot_cleanup b/preseed/jessie/commands/late_commands.d/post_boot_cleanup
new file mode 100755 (executable)
index 0000000..f1fd808
--- /dev/null
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+SCRIPT=/etc/init.d/post_boot_cleanup
+SYMLINK=/etc/rcS.d/S99post_boot_cleanup
+
+cat >> $SCRIPT <<_eof
+#!/bin/sh
+sed -i -e '/getty.*tty[12]/s/^#//' /etc/inittab
+telinit q
+rm $SCRIPT
+update-rc.d ${SCRIPT##*/} remove
+_eof
+
+chmod 755 $SCRIPT
+update-rc.d ${SCRIPT##*/} start S 99 .
diff --git a/preseed/jessie/commands/late_commands.d/srv-home_symlink b/preseed/jessie/commands/late_commands.d/srv-home_symlink
new file mode 100755 (executable)
index 0000000..56911e7
--- /dev/null
@@ -0,0 +1,7 @@
+#!/bin/sh
+echo "Making /home a bind-mount of /srv/home..."
+mkdir -m755 /srv/home
+cat >>/etc/fstab <<_eof
+/srv/home               /home           auto    defaults,bind   0       0
+_eof
+mount --bind /srv/home /home
diff --git a/preseed/jessie/preseed.cfg b/preseed/jessie/preseed.cfg
new file mode 100644 (file)
index 0000000..49f89dd
--- /dev/null
@@ -0,0 +1,137 @@
+d-i debian-installer/locale string en_NZ
+
+d-i keyboard-configuration/xkb-keymap select us
+d-i keyboard-configuration/layoutcode string us
+
+d-i netcfg/choose_interface select auto
+d-i netcfg/dhcp_options select Configure network manually
+d-i netcfg/confirm_static boolean true
+d-i netcfg/wireless_wep string
+
+d-i hw-detect/load_firmware boolean true
+
+d-i mirror/country string manual
+d-i mirror/protocol string http
+d-i mirror/http/hostname string debian.morphium.info
+d-i mirror/http/directory string /debian
+d-i mirror/http/proxy string
+d-i mirror/suite string jessie
+
+d-i anna/choose_modules string network-console
+d-i network-console/password password r00tme
+d-i network-console/password-again password r00tme
+d-i network-console/start boolean true
+d-i di-utils-shell/do-shell boolean true
+
+d-i passwd/make-user boolean false
+d-i passwd/root-password-crypted password $6$lifGZQZ9$OVYc/Z26ilx1DLCOyPSy1/xOz5o.f6weCgMHYXQZ9EE38DYt0xJBd1Z83/KMWhDyeNmKxp0TUqpJN6w.MT72//
+
+d-i time/zone string Europe/Berlin
+
+d-i clock-setup/utc boolean true
+d-i clock-setup/ntp boolean true
+
+d-i partman-basicfilesystems/choose_label string gpt
+d-i partman-basicfilesystems/default_label string gpt
+d-i partman-partitioning/choose_label string gpt
+d-i partman-partitioning/default_label string gpt
+d-i partman/choose_label string gpt
+d-i partman/default_label string gpt
+
+#d-i partman-partitioning/confirm_write_new_label boolean true
+#d-i partman-partitioning/unknown_label boolean true
+
+d-i partman-auto/disk string /dev/vda
+d-i partman-auto/method string lvm
+
+d-i partman-md/device_remove_md boolean true
+d-i partman-auto/purge_lvm_from_device boolean true
+d-i partman-lvm/device_remove_lvm boolean true
+d-i partman-lvm/confirm boolean true
+d-i partman-lvm/confirm_nooverwrite boolean true
+
+d-i partman-auto/expert_recipe string madduck :: \
+  1 1 1 free \
+  $gptonly{ } \
+  $primary{ } \
+  method{ biosgrub } \
+  . \
+  8192 32768 -1 ext3 \
+  $defaultignore{ } \
+  $primary{ } \
+  method{ lvm } \
+  . \
+  128 1024 200% linux-swap \
+  $lvmok{ } lv_name{ swap } \
+  method{ swap } format{ } \
+  . \
+  1024 1536 3072 ext3 \
+  $lvmok{ } lv_name{ root } \
+  method{ format } format{ } \
+  use_filesystem{ } filesystem{ ext4 } \
+  mountpoint{ / } label{ root } \
+  options/relatime{ relatime } \
+  options/user_xattr{ user_xattr } \
+  . \
+  2048 3072 6144 ext3 \
+  $lvmok{ } lv_name{ usr } \
+  method{ format } format{ } \
+  use_filesystem{ } filesystem{ ext4 } \
+  mountpoint{ /usr } label{ usr } \
+  options/noatime{ noatime } \
+  options/nodev{ nodev } \
+  . \
+  2048 4096 8192 ext3 \
+  $lvmok{ } lv_name{ var } \
+  method{ format } format{ } \
+  use_filesystem{ } filesystem{ ext4 } \
+  mountpoint{ /var } label{ var } \
+  options/relatime{ relatime } \
+  . \
+  512 10240 -1 ext3 \
+  $lvmok{ } lv_name{ srv } \
+  method{ format } format{ } \
+  use_filesystem{ } filesystem{ ext4 } \
+  mountpoint{ /srv } label{ srv } \
+  options/nodev{ nodev } \
+  options/nosuid{ nosuid } \
+  options/relatime{ relatime } \
+  options/user_xattr{ user_xattr } \
+  . \
+  512 768 1024 ext3 \
+  $lvmok{ } lv_name{ tmp } \
+  method{ format } format{ } \
+  use_filesystem{ } filesystem{ ext4 } \
+  mountpoint{ /tmp } label{ tmp } \
+  options/nodev{ nodev } \
+  options/nosuid{ nosuid } \
+  options/relatime{ relatime } \
+  options/user_xattr{ user_xattr } \
+  .
+d-i partman-auto/choose_recipe select madduck
+d-i partman-auto-lvm/no_boot boolean true
+
+d-i partman/choose_partition select finish
+d-i partman/confirm boolean true
+d-i partman/confirm_nooverwrite boolean true
+
+d-i apt-setup/non-free boolean false
+d-i apt-setup/contrib boolean false
+
+popularity-contest popularity-contest/participate boolean false
+
+tasksel tasksel/first multiselect
+
+#d-i pkgsel/include string openssh-server libterm-readline-gnu-perl
+
+d-i grub-installer/only_debian boolean true
+d-i grub-installer/choose_bootdev select manually
+d-i grub-installer/bootdev text /dev/vda
+
+d-i finish-install/reboot_in_progress note
+
+d-i debian-installer/exit/poweroff boolean false
+d-i debian-installer/exit/halt boolean false
+
+d-i preseed/early_command string tar -xf /commands.tar && rm /commands.tar && [ ! -x /commands/early_command ] || log-output -t early_command /commands/early_command
+d-i preseed/late_command string [ ! -x /commands/late_command ] || log-output -t late_command /commands/late_command