livemedia-creator: Update example kickstarts
Update the URL, add network command where needed, make sure all auth commands are using sha512 now. Removed the fedora-livemedia-ec2 example, Fedora doesn't have grub and it has never really been tested.
This commit is contained in:
parent
f616d37f59
commit
4e495bc918
@ -1,14 +1,14 @@
|
|||||||
# Minimal Disk Image
|
# Minimal Disk Image
|
||||||
|
|
||||||
# Use network installation
|
# Use network installation
|
||||||
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/x86_64/os/"
|
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/"
|
||||||
|
|
||||||
# Root password
|
# Root password
|
||||||
rootpw --plaintext replace-this-pw
|
rootpw --plaintext replace-this-pw
|
||||||
# Network information
|
# Network information
|
||||||
network --bootproto=dhcp --activate
|
network --bootproto=dhcp --activate
|
||||||
# System authorization information
|
# System authorization information
|
||||||
auth --useshadow --enablemd5
|
auth --useshadow --passalgo=sha512
|
||||||
# System keyboard
|
# System keyboard
|
||||||
keyboard --xlayouts=us --vckeymap=us
|
keyboard --xlayouts=us --vckeymap=us
|
||||||
# System language
|
# System language
|
||||||
|
@ -1,124 +0,0 @@
|
|||||||
# Build a basic Fedora AMI using livemedia-creator
|
|
||||||
lang en_US.UTF-8
|
|
||||||
keyboard us
|
|
||||||
timezone --utc America/New_York
|
|
||||||
auth --useshadow --enablemd5
|
|
||||||
selinux --enforcing
|
|
||||||
firewall --service=ssh
|
|
||||||
bootloader --location=none
|
|
||||||
services --enabled=network,sshd,rsyslog
|
|
||||||
shutdown
|
|
||||||
|
|
||||||
# By default the root password is emptied
|
|
||||||
rootpw --plaintext removethispw
|
|
||||||
|
|
||||||
#
|
|
||||||
# Define how large you want your rootfs to be
|
|
||||||
# NOTE: S3-backed AMIs have a limit of 10G
|
|
||||||
#
|
|
||||||
clearpart --all --initlabel
|
|
||||||
part / --size 10000 --fstype ext4
|
|
||||||
part swap --size=512
|
|
||||||
|
|
||||||
#
|
|
||||||
# Repositories
|
|
||||||
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/x86_64/os/"
|
|
||||||
|
|
||||||
#
|
|
||||||
#
|
|
||||||
# Add all the packages after the base packages
|
|
||||||
#
|
|
||||||
%packages --nobase
|
|
||||||
@core
|
|
||||||
system-config-securitylevel-tui
|
|
||||||
audit
|
|
||||||
pciutils
|
|
||||||
bash
|
|
||||||
coreutils
|
|
||||||
kernel
|
|
||||||
# Make sure that DNF doesn't pull in debug kernel to satisfy kmod() requires
|
|
||||||
kernel-modules
|
|
||||||
kernel-modules-extra
|
|
||||||
|
|
||||||
e2fsprogs
|
|
||||||
passwd
|
|
||||||
policycoreutils
|
|
||||||
chkconfig
|
|
||||||
rootfiles
|
|
||||||
yum
|
|
||||||
vim-minimal
|
|
||||||
acpid
|
|
||||||
openssh-clients
|
|
||||||
openssh-server
|
|
||||||
curl
|
|
||||||
sudo
|
|
||||||
|
|
||||||
#Allow for dhcp access
|
|
||||||
dhclient
|
|
||||||
iputils
|
|
||||||
|
|
||||||
-firstboot
|
|
||||||
-biosdevname
|
|
||||||
|
|
||||||
# package to setup cloudy bits for us
|
|
||||||
cloud-init
|
|
||||||
|
|
||||||
grub
|
|
||||||
-dracut-config-rescue
|
|
||||||
%end
|
|
||||||
|
|
||||||
# more ec2-ify
|
|
||||||
%post --erroronfail
|
|
||||||
|
|
||||||
# create ec2-user
|
|
||||||
/usr/sbin/useradd ec2-user
|
|
||||||
/bin/echo -e 'ec2-user\tALL=(ALL)\tNOPASSWD: ALL' >> /etc/sudoers
|
|
||||||
|
|
||||||
# fstab mounting is different for x86_64 and i386
|
|
||||||
cat <<EOL > /etc/fstab
|
|
||||||
/dev/xvda1 / ext4 defaults 1 1
|
|
||||||
/dev/xvda2 /mnt ext3 defaults 0 0
|
|
||||||
/dev/xvda3 swap swap defaults 0 0
|
|
||||||
EOL
|
|
||||||
|
|
||||||
if [ ! -d /lib64 ] ; then
|
|
||||||
# workaround xen performance issue (bz 651861)
|
|
||||||
echo "hwcap 1 nosegneg" > /etc/ld.so.conf.d/libc6-xen.conf
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Install grub.conf
|
|
||||||
# idle=nomwait is to allow xen images to boot and not try use cpu features that are not supported
|
|
||||||
INITRD=`ls /boot/initramfs-* | head -n1`
|
|
||||||
KERNEL=`ls /boot/vmlinuz-* | head -n1`
|
|
||||||
mkdir /boot/grub
|
|
||||||
pushd /boot/grub
|
|
||||||
cat <<EOL > grub.conf
|
|
||||||
default 0
|
|
||||||
timeout 0
|
|
||||||
|
|
||||||
title Fedora Linux
|
|
||||||
root (hd0)
|
|
||||||
kernel $KERNEL root=/dev/xvda1 idle=halt
|
|
||||||
initrd $INITRD
|
|
||||||
EOL
|
|
||||||
# symlink grub.conf to menu.lst for use by EC2 pv-grub
|
|
||||||
ln -s grub.conf menu.lst
|
|
||||||
popd
|
|
||||||
|
|
||||||
# the firewall rules get saved as .old without this we end up not being able
|
|
||||||
# ssh in as iptables blocks access
|
|
||||||
rename -v .old "" /etc/sysconfig/*old
|
|
||||||
|
|
||||||
# setup systemd to boot to the right runlevel
|
|
||||||
rm /etc/systemd/system/default.target
|
|
||||||
ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target
|
|
||||||
|
|
||||||
# remove the root password
|
|
||||||
passwd -d root > /dev/null
|
|
||||||
|
|
||||||
%end
|
|
||||||
|
|
||||||
%post
|
|
||||||
# Remove random-seed
|
|
||||||
rm /var/lib/systemd/random-seed
|
|
||||||
%end
|
|
@ -286,6 +286,10 @@ echo 'File created by kickstart. See systemd-update-done.service(8).' \
|
|||||||
|
|
||||||
# Remove random-seed
|
# Remove random-seed
|
||||||
rm /var/lib/systemd/random-seed
|
rm /var/lib/systemd/random-seed
|
||||||
|
|
||||||
|
# Remove the rescue kernel and image to save space
|
||||||
|
# Installation will recreate these on the target
|
||||||
|
rm -f /boot/*-rescue*
|
||||||
%end
|
%end
|
||||||
|
|
||||||
%post --nochroot
|
%post --nochroot
|
||||||
@ -374,6 +378,7 @@ EOF
|
|||||||
@networkmanager-submodules
|
@networkmanager-submodules
|
||||||
@printing
|
@printing
|
||||||
@workstation-product
|
@workstation-product
|
||||||
|
gnome-terminal
|
||||||
aajohan-comfortaa-fonts
|
aajohan-comfortaa-fonts
|
||||||
anaconda
|
anaconda
|
||||||
dracut-config-generic
|
dracut-config-generic
|
||||||
@ -390,7 +395,6 @@ syslinux
|
|||||||
-@dial-up
|
-@dial-up
|
||||||
-@input-methods
|
-@input-methods
|
||||||
-@standard
|
-@standard
|
||||||
-dracut-config-rescue
|
|
||||||
-gfs2-utils
|
-gfs2-utils
|
||||||
-reiserfs-utils
|
-reiserfs-utils
|
||||||
|
|
||||||
|
@ -4,12 +4,14 @@ sshpw --username=root --plaintext randOmStrinGhERE
|
|||||||
# Firewall configuration
|
# Firewall configuration
|
||||||
firewall --enabled
|
firewall --enabled
|
||||||
# Use network installation
|
# Use network installation
|
||||||
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/x86_64/os/"
|
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/"
|
||||||
|
# Network information
|
||||||
|
network --bootproto=dhcp --device=link --activate
|
||||||
|
|
||||||
# Root password
|
# Root password
|
||||||
rootpw --plaintext removethispw
|
rootpw --plaintext removethispw
|
||||||
# System authorization information
|
# System authorization information
|
||||||
auth --useshadow --enablemd5
|
auth --useshadow --passalgo=sha512
|
||||||
# System keyboard
|
# System keyboard
|
||||||
keyboard --xlayouts=us --vckeymap=us
|
keyboard --xlayouts=us --vckeymap=us
|
||||||
# System language
|
# System language
|
||||||
|
@ -4,12 +4,14 @@ sshpw --username=root --plaintext randOmStrinGhERE
|
|||||||
# Firewall configuration
|
# Firewall configuration
|
||||||
firewall --enabled
|
firewall --enabled
|
||||||
# Use network installation
|
# Use network installation
|
||||||
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/x86_64/os/"
|
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/"
|
||||||
|
# Network information
|
||||||
|
network --bootproto=dhcp --device=link --activate
|
||||||
|
|
||||||
# Root password
|
# Root password
|
||||||
rootpw --plaintext removethispw
|
rootpw --plaintext removethispw
|
||||||
# System authorization information
|
# System authorization information
|
||||||
auth --useshadow --enablemd5
|
auth --useshadow --passalgo=sha512
|
||||||
# System keyboard
|
# System keyboard
|
||||||
keyboard --xlayouts=us --vckeymap=us
|
keyboard --xlayouts=us --vckeymap=us
|
||||||
# System language
|
# System language
|
||||||
@ -55,6 +57,9 @@ syslinux
|
|||||||
# dracut needs these included
|
# dracut needs these included
|
||||||
dracut-network
|
dracut-network
|
||||||
tar
|
tar
|
||||||
|
|
||||||
|
# lorax for image-minimizer
|
||||||
|
lorax
|
||||||
%end
|
%end
|
||||||
|
|
||||||
#
|
#
|
||||||
@ -107,5 +112,6 @@ droprpm sgpio
|
|||||||
droprpm syslinux
|
droprpm syslinux
|
||||||
droprpm system-config-firewall-base
|
droprpm system-config-firewall-base
|
||||||
droprpm usermode
|
droprpm usermode
|
||||||
|
# Not needed after image-minimizer is done
|
||||||
|
droprpm lorax
|
||||||
%end
|
%end
|
||||||
|
@ -3,14 +3,14 @@
|
|||||||
# Firewall configuration
|
# Firewall configuration
|
||||||
firewall --enabled
|
firewall --enabled
|
||||||
# Use network installation
|
# Use network installation
|
||||||
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/x86_64/os/"
|
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/"
|
||||||
|
|
||||||
# Root password
|
# Root password
|
||||||
rootpw --plaintext replace-this-pw
|
rootpw --plaintext replace-this-pw
|
||||||
# Network information
|
# Network information
|
||||||
network --bootproto=dhcp --activate
|
network --bootproto=dhcp --activate
|
||||||
# System authorization information
|
# System authorization information
|
||||||
auth --useshadow --enablemd5
|
auth --useshadow --passalgo=sha512
|
||||||
# System keyboard
|
# System keyboard
|
||||||
keyboard --xlayouts=us --vckeymap=us
|
keyboard --xlayouts=us --vckeymap=us
|
||||||
# System language
|
# System language
|
||||||
|
@ -4,7 +4,9 @@
|
|||||||
# Firewall configuration
|
# Firewall configuration
|
||||||
firewall --enabled
|
firewall --enabled
|
||||||
# Use network installation
|
# Use network installation
|
||||||
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/x86_64/os/"
|
url --url="http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/"
|
||||||
|
# Network information
|
||||||
|
network --bootproto=dhcp --activate
|
||||||
|
|
||||||
# Root account is locked, access via sudo from vagrant user
|
# Root account is locked, access via sudo from vagrant user
|
||||||
rootpw --lock
|
rootpw --lock
|
||||||
@ -14,7 +16,7 @@ user --name=vagrant
|
|||||||
sshkey --username=vagrant "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
|
sshkey --username=vagrant "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
|
||||||
|
|
||||||
# System authorization information
|
# System authorization information
|
||||||
auth --useshadow --enablemd5
|
auth --useshadow --passalgo=sha512
|
||||||
# System keyboard
|
# System keyboard
|
||||||
keyboard --xlayouts=us --vckeymap=us
|
keyboard --xlayouts=us --vckeymap=us
|
||||||
# System language
|
# System language
|
||||||
|
Loading…
Reference in New Issue
Block a user