almalinux/lorax
13
0
Fork 0
Code Issues Pull Requests Releases Activity
f35-branch
lorax/share/templates.d/99-generic/runtime-postinstall.tmpl

123 lines
4.6 KiB
Cheetah
Raw Permalink Normal View History

move stuff around in runtime-postinstall, add comments no actual code changes here.
2011-08-09 21:37:43 +00:00
## runtime-postinstall.tmpl
## post-install setup required to make the system work.
Add <%page args="..."/> to templates
2011-07-25 23:39:48 +00:00
<%page args="root, basearch, libdir, configdir"/>
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
<%
clean up config_files dir (and fix templates to match) move arch-specific stuff to arch-specific subdirs and move all the common stuff to a subdir named 'common'. Also, rename '.profile' and '.bash_history' so you actually see them when you 'ls' the 'common' dir. also added some helpful(?) comments to the templates.
2011-10-21 20:12:12 +00:00
configdir = configdir + "/common"
Drop non-determinism from default templates Some files are created in non-reproducible way, including including random data explicitly (/etc/machine-id), timestamps (fontconfig cache, ldconfig aux-cache, certs cache), or entries in random order (groups, systemd catalog, package list). Fix this by either making the files reproducible, or removing them.
2018-10-06 16:34:40 +00:00
import os, time
SOURCE_DATE_EPOCH = os.environ.get('SOURCE_DATE_EPOCH', str(int(time.time())))
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
%>
## move_stubs()
move usr/share/anaconda/restart-anaconda usr/bin
runtime-postinstall: Drop raidstart/stop stub code Anaconda hasn't included these since Fedora 10. Stop trying to install them. (cherry picked from commit 5d9830e88dc6538179904263be7a824c1e48f8d5)
2021-11-03 20:53:27 +00:00
move usr/share/anaconda/list-harddrives-stub usr/bin/list-harddrives
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
## move_repos()
move etc/yum.repos.d etc/anaconda.repos.d
Setup mdadm to turn off homehost (#1156614)
2014-10-28 17:29:38 +00:00
## Setup mdadm config to turn off homehost
remove etc/mdadm.conf
append etc/mdadm.conf "HOMEHOST <ignore>\n"
remove sysinit setup stuff for Fedora 15 and earlier
2011-09-08 00:36:22 +00:00
## Configure systemd to start anaconda
remove etc/systemd/system/default.target
symlink /lib/systemd/system/anaconda.target etc/systemd/system/default.target
add 'systemctl' command and use it in postinstall The 'systemctl' command can be used to enable, disable, or mask systemd units inside the runtime being modified. Modify runtime-postinstall.tmpl to use the 'systemctl' command. We also no longer remove quota*.service or kexec*.service, since these aren't enabled by default. And systemd-remount-api-vfs.service should work correctly now, so we can leave it alone as well.
2012-06-19 19:14:27 +00:00
Make sure tmpfs is enabled (#908253)
2013-02-14 17:50:19 +00:00
## Make sure tmpfs is enabled
mkdir etc/systemd/system/local-fs.target.wants/
symlink /lib/systemd/system/tmp.mount etc/systemd/system/local-fs.target.wants/tmp.mount
Add rng-tools and start rngd.service by default (#1258516) This will help improve the entropy situation with non-x86 hardware. rngd will add entropy from hardware rng sources. Resolves: rhbz#1258516
2016-01-28 22:52:10 +00:00
## Start rngd
templates: Enusre basic.target.wants dir exists for rngd There's something racy here; in my Atomic Workstation CI/CD I'm seeing: ``` 01:12:43 symlink /lib/systemd/system/rngd.service etc/systemd/system/basic.target.wants/rngd.service 01:12:43 FileNotFoundError: [Errno 2] No such file or directory: '/lib/systemd/system/rngd.service' -> '/var/tmp/lorax.7cgdtz1_/installtree/etc/systemd/system/basic.target.wants/rngd.service' ``` Rather than debug this right now, let's just make sure it exists, like we do right above for `tmp.mount`.
2016-09-13 01:36:03 +00:00
mkdir etc/systemd/system/basic.target.wants/
Add rng-tools and start rngd.service by default (#1258516) This will help improve the entropy situation with non-x86 hardware. rngd will add entropy from hardware rng sources. Resolves: rhbz#1258516
2016-01-28 22:52:10 +00:00
symlink /lib/systemd/system/rngd.service etc/systemd/system/basic.target.wants/rngd.service
add 'systemctl' command and use it in postinstall The 'systemctl' command can be used to enable, disable, or mask systemd units inside the runtime being modified. Modify runtime-postinstall.tmpl to use the 'systemctl' command. We also no longer remove quota*.service or kexec*.service, since these aren't enabled by default. And systemd-remount-api-vfs.service should work correctly now, so we can leave it alone as well.
2012-06-19 19:14:27 +00:00
## Disable unwanted systemd services
systemctl disable systemd-readahead-collect.service \
systemd-readahead-replay.service \
Disable dnf-makecache.timer (#1120368) We don't want to update the dnf cache in the installation image. The metadata will be downloaded when it is needed.
2014-07-18 21:17:08 +00:00
lvm2-monitor.service \
dnf-makecache.timer
add 'systemctl' command and use it in postinstall The 'systemctl' command can be used to enable, disable, or mask systemd units inside the runtime being modified. Modify runtime-postinstall.tmpl to use the 'systemctl' command. We also no longer remove quota*.service or kexec*.service, since these aren't enabled by default. And systemd-remount-api-vfs.service should work correctly now, so we can leave it alone as well.
2012-06-19 19:14:27 +00:00
## These services can't be disabled normally (they're linked into place in
## /usr/lib/systemd rather than /etc/systemd), so we have to mask them.
systemctl mask fedora-configure.service fedora-loadmodules.service \
fedora-autorelabel.service fedora-autorelabel-mark.service \
Disable systemd-tmpfiles-clean (#1202545) When the time changes dramatically it cleans up the files in /tmp/ causing problems with the installation. Resolves: rhbz#1202545
2015-06-12 22:56:12 +00:00
fedora-wait-storage.service media.mount \
Revert "Revert "Turn off ldconfig"" We really shouldn't need to run ldconfig on boot from read-only media, unless someone messed up %post in a package. And the verify step will catch that. This reverts commit 3981ff5b795401f26a7c76b20b6d1141ea5e8bfa.
2015-07-19 14:58:48 +00:00
systemd-tmpfiles-clean.service systemd-tmpfiles-clean.timer \
ldconfig.service
move stuff around in runtime-postinstall, add comments no actual code changes here.
2011-08-09 21:37:43 +00:00
Fix systemctl command (#1478247) When multiple units are passed to systemctl and one fails it doesn't finish the others. Change the template command to call systemctl for each unit individually. This also removes the lvm2-activation-generator in runtime-cleanup.tmpl
2017-08-14 20:58:25 +00:00
## remove because it cannot be disabled
remove usr/lib/systemd/system-generators/lvm2-activation-generator
Do not let systemd-tmpfiles set up /etc on boot The etc portion of systemd-tmpfiles creates a broken /etc/resolv.conf, which breaks networking, and the rest of the stuff in the there is already installed to the stage2.
2015-10-06 15:47:17 +00:00
## Remove the more terrible parts of systemd-tmpfiles.
## etc.conf is written with the assumption that /etc/ is empty, which is
## ridiculous, and it also creates a broken /etc/resolv.conf, which breaks
## networking.
remove usr/lib/tmpfiles.d/etc.conf
Activate anaconda-shell@.service on switch to empty VT (#980062) Right now, logind reserves tty6 for a login shell, which is not what we want - normally anaconda puts Xorg there, and there's no need for a login prompt anyway. This configures logind to activate "anaconda-shell@.service" when a user switches to an unused tty, and reserves tty2 for that purpose (which is where users expect a shell anyway). This will avoid us having login prompts that users don't know what to do with. It also probably saves us a little bit of RAM.
2014-01-10 19:54:26 +00:00
## Make logind activate anaconda-shell@.service on switch to empty VT
symlink anaconda-shell@.service lib/systemd/system/autovt@.service
replace "#ReserveVT=6" "ReserveVT=2" etc/systemd/logind.conf
Remove /var/log/journal so journald won't write to overlay It's pretty pointless to copy data from /run/log/journal to /var/log/journal, since both of those are in-memory filesystems. This should somewhat reduce RAM use during installation.
2013-04-23 18:29:00 +00:00
## Don't write the journal to the overlay, just keep it in RAM
remove var/log/journal
move stuff around in runtime-postinstall, add comments no actual code changes here.
2011-08-09 21:37:43 +00:00
## install some basic configuration files
Create missing /etc/fstab Some things (e.g. systemd-remount-api-vfs) fail if /etc/fstab is missing, but work fine if it's empty. So create it.
2012-06-19 23:48:13 +00:00
append etc/fstab ""
Set a default font for systemd to load.
2011-10-31 14:55:15 +00:00
install ${configdir}/i18n etc/sysconfig
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
install ${configdir}/rsyslog.conf etc
clean up config_files dir (and fix templates to match) move arch-specific stuff to arch-specific subdirs and move all the common stuff to a subdir named 'common'. Also, rename '.profile' and '.bash_history' so you actually see them when you 'ls' the 'common' dir. also added some helpful(?) comments to the templates.
2011-10-21 20:12:12 +00:00
install ${configdir}/bash_history root/.bash_history
install ${configdir}/profile root/.profile
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
install ${configdir}/libuser.conf etc
Add /etc/sysctl.d/anaconda.conf, set kernel.printk=1 (#816022) We use this to set various sysctl settings, like setting kernel.printk=1 so we don't get the screen all crudded up with kernel messages during text-mode installs.
2012-04-25 20:21:27 +00:00
install ${configdir}/sysctl.conf etc/sysctl.d/anaconda.conf
Run spice-vdagentd without systemd-logind integration (#969405) The system-wide spice guest agent, spice-vdagentd, normally uses systemd-logind to determine which of the per-session spice-vdagent instances it should be communicating with. On the non-live media, the X session isn't registered with systemd-logind, so instead start spice-vdagentd with -X to disable the systemd-logind integration and serve instead to a single spice-vdagent.
2013-08-05 17:11:05 +00:00
install ${configdir}/spice-vdagentd etc/sysconfig
network: turn slaves autoconnection on So we can activate master connection instead of searching for and activating slave connections. Makes turning bond/team device on in network spoke work. Resolves: rhbz#1172751 It also causes a device configured in dracut to be properly reactivated as a slave if it is configured so by kickstart. Resolves: rhbz#1134090
2015-06-25 12:22:01 +00:00
mkdir etc/NetworkManager/conf.d
install ${configdir}/91-anaconda-autoconnect-slaves.conf etc/NetworkManager/conf.d
Add a default vconsole.conf to the boot.iso (#1250260) This is needed so that the initial console will use the correct font (eurlatgr). See https://fedoraproject.org//wiki/Changes/NewDefaultConsoleFont for more detail.
2015-08-04 21:11:56 +00:00
install ${configdir}/vconsole.conf etc
configure NetworkManager to loglevel=DEBUG (#1274647) Resolves: rhbz#1274647
2015-10-23 09:09:19 +00:00
install ${configdir}/92-anaconda-loglevel-debug.conf etc/NetworkManager/conf.d
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
move stuff around in runtime-postinstall, add comments no actual code changes here.
2011-08-09 21:37:43 +00:00
## set up sshd
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
install ${configdir}/sshd_config.anaconda etc/ssh
install ${configdir}/pam.sshd etc/pam.d/sshd
install ${configdir}/pam.sshd etc/pam.d/login
install ${configdir}/pam.sshd etc/pam.d/remote
fix postinstall user creation/modification (fixes #750907) We were appending to /etc/shadow when previous versions of lorax overwrote it, so we ended up with two conflicting entries for "root". Instead: - keep existing /etc/shadow and /etc/passwd contents - add new entries for "install" user - remove password from existing "root" entry in /etc/shadow Also, we don't need to create the 'sshd' user, because the openssh-server %post script does that for us.
2011-11-02 18:48:13 +00:00
## set up "install" user account
Change the install user's shell for tmux
2012-10-11 17:18:17 +00:00
append etc/passwd "install:x:0:0:root:/root:/usr/libexec/anaconda/run-anaconda"
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
append etc/shadow "install::14438:0:99999:7:::"
fix postinstall user creation/modification (fixes #750907) We were appending to /etc/shadow when previous versions of lorax overwrote it, so we ended up with two conflicting entries for "root". Instead: - keep existing /etc/shadow and /etc/passwd contents - add new entries for "install" user - remove password from existing "root" entry in /etc/shadow Also, we don't need to create the 'sshd' user, because the openssh-server %post script does that for us.
2011-11-02 18:48:13 +00:00
## remove root password
postinstall: fix root account password (#750907) 'replace' uses regexes, so that '*' needs to be escaped... Signed-off-by: Will Woods <wwoods@redhat.com>
2011-11-07 15:58:51 +00:00
replace "root:\*:" "root::" etc/shadow
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
Enable gtk inspector. Gtk turned off the inspector keybindings by default, because they were interfering with applications that use a lot of complicated keyboard shortcuts. This is not a concern for anaconda, and the inspector is pretty handy, so turn it back on.
2015-10-14 18:54:33 +00:00
## gsettings settings
install ${configdir}/org.gtk.Settings.Debug.gschema.override usr/share/glib-2.0/schemas
runcmd chroot ${root} glib-compile-schemas /usr/share/glib-2.0/schemas
WIP: port ramdisk.ltmpl and installtree to TemplateRunner
2011-05-05 22:24:58 +00:00
move usr/libexec/anaconda/auditd sbin
symlink /lib/{modules,firmware} to / Anaconda expects /firmware and /modules because of Ancient Tradition. Set up the symlinks for compatibility's sake.
2011-10-18 20:31:50 +00:00
## for compatibility with Ancient Anaconda Traditions
Fix /firmware and /modules symlinks
2011-10-26 17:57:46 +00:00
symlink lib/modules /modules
symlink lib/firmware /firmware
add symlink from /mnt/install -> /run/install Since noloader mounts stuff under /run/install, but anaconda (and people's scripts etc.) look under /mnt/install, make a symlink so everything works as expected.
2012-03-19 18:22:52 +00:00
symlink ../run/install mnt/install
fixup: add module stuff to runtime-postinstall
2011-05-14 07:25:44 +00:00
postinstall.tmpl cleanups
2011-05-27 15:03:38 +00:00
## create_depmod_conf()
append etc/depmod.d/dd.conf "search updates built-in"
add TODO comment
2011-06-30 20:05:43 +00:00
Let devices get detected and started automatically. Also stop masking fedora-storage-* units as they no longer exist.
2013-03-06 22:20:49 +00:00
## create multipath.conf so multipath gets auto-started
Use smarter multipath detection logic. This new setting for 'find_multipaths' tries to prevent things like LVM from going ahead and activating LVM on the individual disks/paths until there is reasonable certainty (via a timeout) that the device is not a component of a multipath set. NOTE: 'smart' is supported by device-mapper-multipath v0.7.7 and later.
2019-08-19 18:10:14 +00:00
append etc/multipath.conf "defaults {\n\tfind_multipaths smart\n\tuser_friendly_names yes\n}\n"
Add blacklist_exceptions to multipath.conf Resolves: rhbz#1685363
2019-03-05 18:07:59 +00:00
append etc/multipath.conf "blacklist_exceptions {\n\tproperty \"(SCSI_IDENT_|ID_WWN)\"\n}\n"
Let devices get detected and started automatically. Also stop masking fedora-storage-* units as they no longer exist.
2013-03-06 22:20:49 +00:00
## make lvm auto-activate
Keep the /etc/lvm/profiles directory in the image Profile definitions are needed e.g. for creation of thin pools with specific profile. Related: rhbz#869456
2014-09-19 11:28:40 +00:00
remove etc/lvm/archive/*
remove etc/lvm/archive
remove etc/lvm/backup/*
remove etc/lvm/backup
remove etc/lvm/cache/*
remove etc/lvm/cache
Don't include the stock lvm.conf. (#1157864) We started including it as an unintended side-effect of commit 9ca487f8. lvm doesn't like it when there are multiple 'global' sections in lvm.conf, and we add one right at the end of that block. We expect ours to be the file's only content.
2014-10-28 17:41:24 +00:00
remove etc/lvm/lvm.conf
Let devices get detected and started automatically. Also stop masking fedora-storage-* units as they no longer exist.
2013-03-06 22:20:49 +00:00
append etc/lvm/lvm.conf "global {\n\tuse_lvmetad = 1\n}\n"
add TODO comment
2011-06-30 20:05:43 +00:00
## TODO: we could run prelink here if we wanted?
Drop non-determinism from default templates Some files are created in non-reproducible way, including including random data explicitly (/etc/machine-id), timestamps (fontconfig cache, ldconfig aux-cache, certs cache), or entries in random order (groups, systemd catalog, package list). Fix this by either making the files reproducible, or removing them.
2018-10-06 16:34:40 +00:00
## fix fonconfig cache containing timestamps
runcmd chroot ${root} /usr/bin/find /usr/share/fonts /usr/share/X11/fonts -newermt "@${SOURCE_DATE_EPOCH}" -exec \
touch --no-dereference --date="@${SOURCE_DATE_EPOCH}" {} +
runcmd chroot ${root} /usr/bin/fc-cache -f
Reference in New Issue Copy Permalink