2017-03-02 15:42:13 +00:00
|
|
|
# This is a basic Fedora cloud spin designed to work in OpenStack and other
|
2013-10-26 13:41:43 +00:00
|
|
|
# private cloud environments. It's configured with cloud-init so it will
|
|
|
|
# take advantage of ec2-compatible metadata services for provisioning ssh
|
|
|
|
# keys. Cloud-init creates a user account named "fedora" with passwordless
|
|
|
|
# sudo access. The root password is empty and locked by default.
|
|
|
|
#
|
2015-04-22 20:46:43 +00:00
|
|
|
# This kickstart file is designed to be used with ImageFactory (in Koji).
|
|
|
|
#
|
|
|
|
# To do a local build, you'll need to install ImageFactory. See
|
|
|
|
# http://worknotes.readthedocs.org/en/latest/cloudimages.html for some notes.
|
|
|
|
#
|
|
|
|
# For a TDL file, I store one here:
|
2017-07-07 19:58:34 +00:00
|
|
|
# https://pagure.io/fedora-atomic/raw/master/f/fedora-atomic-rawhide.tdl
|
2015-04-22 20:46:43 +00:00
|
|
|
# (Koji generates one internally...what we really want is Koji to publish it statically)
|
2018-07-12 20:52:52 +00:00
|
|
|
#
|
2015-04-22 20:46:43 +00:00
|
|
|
# Once you have imagefactory and imagefactory-plugins installed, run:
|
2018-07-12 20:52:52 +00:00
|
|
|
#
|
2017-07-07 19:58:34 +00:00
|
|
|
# curl -O https://pagure.io/fedora-atomic/raw/master/f/fedora-atomic-rawhide.tdl
|
2015-04-22 20:46:43 +00:00
|
|
|
# tempfile=$(mktemp --suffix=.ks)
|
2015-04-27 04:10:55 +00:00
|
|
|
# ksflatten -v F22 -c fedora-cloud-base.ks > ${tempfile}
|
2015-04-22 20:46:43 +00:00
|
|
|
# imagefactory --debug base_image --file-parameter install_script ${tempfile} fedora-atomic-rawhide.tdl
|
|
|
|
#
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2017-01-19 20:46:44 +00:00
|
|
|
text # don't use cmdline -- https://github.com/rhinstaller/anaconda/issues/931
|
2013-10-26 13:41:43 +00:00
|
|
|
lang en_US.UTF-8
|
|
|
|
keyboard us
|
|
|
|
timezone --utc Etc/UTC
|
|
|
|
|
|
|
|
selinux --enforcing
|
2014-05-30 13:30:17 +00:00
|
|
|
rootpw --lock --iscrypted locked
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2013-11-18 17:15:19 +00:00
|
|
|
firewall --disabled
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2018-03-19 23:23:29 +00:00
|
|
|
# We pass net.ifnames=0 because we always want to use eth0 here on all the cloud images.
|
|
|
|
bootloader --timeout=1 --append="no_timer_check net.ifnames=0 console=tty1 console=ttyS0,115200n8"
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2016-08-24 18:11:01 +00:00
|
|
|
services --enabled=sshd,cloud-init,cloud-init-local,cloud-config,cloud-final
|
2013-10-26 13:41:43 +00:00
|
|
|
|
|
|
|
zerombr
|
|
|
|
clearpart --all
|
2017-05-15 16:30:43 +00:00
|
|
|
autopart --noboot --nohome --noswap --nolvm
|
2013-10-26 13:41:43 +00:00
|
|
|
|
|
|
|
%include fedora-repo.ks
|
|
|
|
|
|
|
|
reboot
|
|
|
|
|
|
|
|
# Package list.
|
2014-11-08 18:29:50 +00:00
|
|
|
# FIXME: instLangs does not work, so there's a hack below
|
|
|
|
# (see https://bugzilla.redhat.com/show_bug.cgi?id=1051816)
|
2015-09-11 13:17:49 +00:00
|
|
|
# FIXME: instLangs bug has been fixed but now having instLangs
|
|
|
|
# with an arg causes no langs to get installed because of BZ1262040
|
|
|
|
# which yields the errors in BZ1261249. For now fix by not using
|
|
|
|
# --instLangs at all
|
|
|
|
#%packages --instLangs=en
|
|
|
|
%packages
|
2014-07-11 15:01:56 +00:00
|
|
|
|
2014-05-20 17:44:01 +00:00
|
|
|
kernel-core
|
2014-09-11 23:41:58 +00:00
|
|
|
@^cloud-server-environment
|
2016-04-13 09:54:01 +00:00
|
|
|
# Need to pull in the udev subpackage
|
|
|
|
systemd-udev
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2016-05-04 18:15:07 +00:00
|
|
|
# after move away from grub2 - let's add 'which' back
|
|
|
|
which
|
|
|
|
|
2014-09-09 18:07:02 +00:00
|
|
|
# rescue mode generally isn't useful in the cloud context
|
2013-10-26 13:41:43 +00:00
|
|
|
-dracut-config-rescue
|
|
|
|
|
|
|
|
# Some things from @core we can do without in a minimal install
|
|
|
|
-biosdevname
|
2015-10-17 17:00:12 +00:00
|
|
|
# Need to also add back plymouth in order to mask failure of
|
|
|
|
# systemd-vconsole-setup.service. BZ#1272684. Comment out for now
|
|
|
|
#-plymouth
|
2013-10-26 13:41:43 +00:00
|
|
|
-iprutils
|
2015-10-17 17:00:12 +00:00
|
|
|
# Now that BZ#1199868 is fixed kbd really gets removed but it breaks
|
|
|
|
# systemd-vconsole-setup.service on boot. Comment out for now
|
|
|
|
#-kbd
|
2014-04-02 16:54:01 +00:00
|
|
|
-uboot-tools
|
2014-05-20 17:44:01 +00:00
|
|
|
-kernel
|
2017-05-24 05:41:20 +00:00
|
|
|
# No need for plymouth. Also means anaconda won't put rhgb/quiet
|
|
|
|
# on kernel command line
|
|
|
|
-plymouth
|
2020-07-09 17:48:03 +00:00
|
|
|
# noswap on Cloud for now
|
|
|
|
-zram-generator-defaults
|
2013-10-26 13:41:43 +00:00
|
|
|
|
|
|
|
%end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%post --erroronfail
|
|
|
|
|
|
|
|
|
|
|
|
# this is installed by default but we don't need it in virt
|
2015-07-15 14:12:16 +00:00
|
|
|
# Commenting out the following for #1234504
|
2015-09-23 06:16:18 +00:00
|
|
|
# rpm works just fine for removing this, no idea why dnf can't cope
|
|
|
|
echo "Removing linux-firmware package."
|
|
|
|
rpm -e linux-firmware
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2014-10-02 17:22:33 +00:00
|
|
|
# Remove firewalld; was supposed to be optional in F18+, but is pulled in
|
|
|
|
# in install/image building.
|
|
|
|
echo "Removing firewalld."
|
2014-11-03 17:30:23 +00:00
|
|
|
# FIXME! clean_requirements_on_remove is the default with DNF, but may
|
|
|
|
# not work when package was installed by Anaconda instead of command line.
|
|
|
|
# Also -- check if this is still even needed with new anaconda -- disabled
|
|
|
|
# firewall should _not_ pull in this package.
|
2019-02-26 10:38:44 +00:00
|
|
|
# dnf -C -y remove "firewalld*" --setopt="clean_requirements_on_remove=1"
|
2014-11-03 17:30:23 +00:00
|
|
|
dnf -C -y erase "firewalld*"
|
2014-10-02 17:22:33 +00:00
|
|
|
|
2014-11-08 18:29:50 +00:00
|
|
|
# instlang hack. (Note! See bug referenced above package list)
|
|
|
|
find /usr/share/locale -mindepth 1 -maxdepth 1 -type d -not -name en_US -exec rm -rf {} +
|
|
|
|
localedef --list-archive | grep -v ^en_US | xargs localedef --delete-from-archive
|
|
|
|
# this will kill a live system (since it's memory mapped) but should be safe offline
|
|
|
|
mv -f /usr/lib/locale/locale-archive /usr/lib/locale/locale-archive.tmpl
|
|
|
|
build-locale-archive
|
2014-11-14 15:19:21 +00:00
|
|
|
echo '%_install_langs C:en:en_US:en_US.UTF-8' >> /etc/rpm/macros.image-language-conf
|
2014-11-13 19:10:18 +00:00
|
|
|
|
2014-11-08 18:29:50 +00:00
|
|
|
|
2013-10-26 13:41:43 +00:00
|
|
|
|
|
|
|
|
|
|
|
echo "Removing random-seed so it's not the same in every image."
|
2017-02-17 20:05:13 +00:00
|
|
|
rm -f /var/lib/systemd/random-seed
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2013-12-06 17:16:02 +00:00
|
|
|
echo "Import RPM GPG key"
|
2019-07-17 08:49:05 +00:00
|
|
|
releasever=$(rpm --eval '%{fedora}')
|
2013-12-12 10:12:29 +00:00
|
|
|
basearch=$(uname -i)
|
2013-12-06 17:16:02 +00:00
|
|
|
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
|
|
|
|
2014-11-03 20:27:08 +00:00
|
|
|
echo "Zeroing out empty space."
|
|
|
|
# This forces the filesystem to reclaim space from deleted files
|
|
|
|
dd bs=1M if=/dev/zero of=/var/tmp/zeros || :
|
|
|
|
rm -f /var/tmp/zeros
|
|
|
|
echo "(Don't worry -- that out-of-space error was expected.)"
|
2013-10-26 13:41:43 +00:00
|
|
|
|
2020-09-02 21:02:18 +00:00
|
|
|
# When we build the image a networking config file gets left behind.
|
|
|
|
# Let's clean it up.
|
|
|
|
echo "Cleanup leftover networking configuration"
|
|
|
|
rm -f /etc/NetworkManager/system-connections/*.nmconnection
|
2015-10-15 08:14:41 +00:00
|
|
|
|
2016-09-13 07:55:44 +00:00
|
|
|
# Remove machine-id on pre generated images
|
|
|
|
rm -f /etc/machine-id
|
2016-09-27 19:17:46 +00:00
|
|
|
touch /etc/machine-id
|
2016-09-13 07:55:44 +00:00
|
|
|
|
2017-03-28 18:56:51 +00:00
|
|
|
|
2013-10-26 13:41:43 +00:00
|
|
|
%end
|
|
|
|
|