lorax/share/composer/qcow2.ks

# Lorax Composer qcow2 output kickstart template

# Firewall configuration
firewall --enabled

# NOTE: The root account is locked by default
# Network information
network  --bootproto=dhcp --onboot=on --activate
# System keyboard
keyboard --xlayouts=us --vckeymap=us
# System language
lang en_US.UTF-8
# SELinux configuration
selinux --enforcing
# Installation logging level
logging --level=info
# Shutdown after installation
shutdown
# System bootloader configuration
bootloader --location=mbr
# Clear the Master Boot Record
zerombr

%post
# Remove random-seed
rm /var/lib/systemd/random-seed

# Clear /etc/machine-id
rm /etc/machine-id
touch /etc/machine-id
%end

%packages
kernel
-dracut-config-rescue
selinux-policy-targeted
grub2
# Enable networking by removing the config file that disables it
-NetworkManager-config-server

# Make sure virt guest agents are installed
qemu-guest-agent
spice-vdagent

# NOTE lorax-composer will add the blueprint packages below here, including the final %end
Add qcow2 image type Very similar to partitioned-disk, image is named disk.qcow2 instead of disk.img 2018-03-20 21:07:49 +00:00			`# Lorax Composer qcow2 output kickstart template`

			`# Firewall configuration`
			`firewall --enabled`

Lock the root account, except on live-iso If we leave the root account w/o a password people will use it that way, leading to insecure images. Also if we use a default password. So lock the root account in the templates. Users will need to do one of these things: 1. Use [[customizations.user]] in their blueprint to configure root or another user. 2. Use [[customizations.sshkey]] to set a key for root 2. Install a package that configures a user at install time 3. Install a package that sets up a user at boot time (eg. cloud-init) This also drops the auth line from the kickstart templates, allowing it to use the default password algoritm instead of md5. Resolves: rhbz#1626120 2018-08-08 22:46:16 +00:00			`# NOTE: The root account is locked by default`
Add qcow2 image type Very similar to partitioned-disk, image is named disk.qcow2 instead of disk.img 2018-03-20 21:07:49 +00:00			`# Network information`
			`network --bootproto=dhcp --onboot=on --activate`
			`# System keyboard`
			`keyboard --xlayouts=us --vckeymap=us`
			`# System language`
			`lang en_US.UTF-8`
			`# SELinux configuration`
			`selinux --enforcing`
			`# Installation logging level`
			`logging --level=info`
			`# Shutdown after installation`
			`shutdown`
			`# System bootloader configuration`
			`bootloader --location=mbr`
			`# Clear the Master Boot Record`
			`zerombr`

			`%post`
			`# Remove random-seed`
			`rm /var/lib/systemd/random-seed`
Replace /etc/machine-id with an empty file Since these images can be used to create multiple machines, they should not have a unique machine-id attached to them. Replace /etc/machine-id with an empty file so that it will be regenerated at boot time. (cherry picked from commit 6fab72d894cd0c59ff798502d5c30f814f1a4948) Related: rhbz#1656105 2018-10-05 18:27:28 +00:00
			`# Clear /etc/machine-id`
			`rm /etc/machine-id`
			`touch /etc/machine-id`
Add qcow2 image type Very similar to partitioned-disk, image is named disk.qcow2 instead of disk.img 2018-03-20 21:07:49 +00:00			`%end`

			`%packages`
			`kernel`
			`-dracut-config-rescue`
lorax-composer: Install selinux-policy-targeted in images This is required to ensure that SELinux is configured properly while building. It fixes the problem with building tar, and should be installed in the other image types for consistency. Resolves: rhbz#1654795 2018-11-27 21:56:00 +00:00			`selinux-policy-targeted`
Add qcow2 image type Very similar to partitioned-disk, image is named disk.qcow2 instead of disk.img 2018-03-20 21:07:49 +00:00			`grub2`
Enable networking in lorax-composer templates Because anaconda --dirinstall is used the kickstart's network like isn't processed at all. So we need to remove the NetworkManager-server-config package which disables networking. Resolves: rhbz#1710877 2019-06-17 18:24:27 +00:00			`# Enable networking by removing the config file that disables it`
			`-NetworkManager-config-server`
Add qcow2 image type Very similar to partitioned-disk, image is named disk.qcow2 instead of disk.img 2018-03-20 21:07:49 +00:00
Add virt guest agents to the qcow2 compose (cherry picked from commit d5a1993640c5025d3781378f0000cd84374fa928) Resolves: rhbz#1656105 2018-09-28 19:25:21 +00:00			`# Make sure virt guest agents are installed`
			`qemu-guest-agent`
			`spice-vdagent`

Lock the root account, except on live-iso If we leave the root account w/o a password people will use it that way, leading to insecure images. Also if we use a default password. So lock the root account in the templates. Users will need to do one of these things: 1. Use [[customizations.user]] in their blueprint to configure root or another user. 2. Use [[customizations.sshkey]] to set a key for root 2. Install a package that configures a user at install time 3. Install a package that sets up a user at boot time (eg. cloud-init) This also drops the auth line from the kickstart templates, allowing it to use the default password algoritm instead of md5. Resolves: rhbz#1626120 2018-08-08 22:46:16 +00:00			`# NOTE lorax-composer will add the blueprint packages below here, including the final %end`