2017-03-02 15:42:13 +00:00
|
|
|
# This is a basic Fedora cloud spin designed to work in OpenStack and other
|
2013-10-26 08:41:43 -05:00
|
|
|
# private cloud environments. It's configured with cloud-init so it will
|
|
|
|
# take advantage of ec2-compatible metadata services for provisioning ssh
|
|
|
|
# keys. Cloud-init creates a user account named "fedora" with passwordless
|
|
|
|
# sudo access. The root password is empty and locked by default.
|
|
|
|
#
|
2015-04-22 16:46:43 -04:00
|
|
|
# This kickstart file is designed to be used with ImageFactory (in Koji).
|
|
|
|
#
|
|
|
|
# To do a local build, you'll need to install ImageFactory. See
|
|
|
|
# http://worknotes.readthedocs.org/en/latest/cloudimages.html for some notes.
|
|
|
|
#
|
|
|
|
# For a TDL file, I store one here:
|
2017-07-07 15:58:34 -04:00
|
|
|
# https://pagure.io/fedora-atomic/raw/master/f/fedora-atomic-rawhide.tdl
|
2015-04-22 16:46:43 -04:00
|
|
|
# (Koji generates one internally...what we really want is Koji to publish it statically)
|
2018-07-12 15:52:52 -05:00
|
|
|
#
|
2015-04-22 16:46:43 -04:00
|
|
|
# Once you have imagefactory and imagefactory-plugins installed, run:
|
2018-07-12 15:52:52 -05:00
|
|
|
#
|
2017-07-07 15:58:34 -04:00
|
|
|
# curl -O https://pagure.io/fedora-atomic/raw/master/f/fedora-atomic-rawhide.tdl
|
2015-04-22 16:46:43 -04:00
|
|
|
# tempfile=$(mktemp --suffix=.ks)
|
2015-04-27 14:10:55 +10:00
|
|
|
# ksflatten -v F22 -c fedora-cloud-base.ks > ${tempfile}
|
2015-04-22 16:46:43 -04:00
|
|
|
# imagefactory --debug base_image --file-parameter install_script ${tempfile} fedora-atomic-rawhide.tdl
|
|
|
|
#
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2017-01-19 15:46:44 -05:00
|
|
|
text # don't use cmdline -- https://github.com/rhinstaller/anaconda/issues/931
|
2013-10-26 08:41:43 -05:00
|
|
|
lang en_US.UTF-8
|
|
|
|
keyboard us
|
|
|
|
timezone --utc Etc/UTC
|
|
|
|
|
|
|
|
selinux --enforcing
|
2014-05-30 08:30:17 -05:00
|
|
|
rootpw --lock --iscrypted locked
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2013-11-18 12:15:19 -05:00
|
|
|
firewall --disabled
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2018-03-19 16:23:29 -07:00
|
|
|
# We pass net.ifnames=0 because we always want to use eth0 here on all the cloud images.
|
|
|
|
bootloader --timeout=1 --append="no_timer_check net.ifnames=0 console=tty1 console=ttyS0,115200n8"
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2016-08-24 11:11:01 -07:00
|
|
|
services --enabled=sshd,cloud-init,cloud-init-local,cloud-config,cloud-final
|
2013-10-26 08:41:43 -05:00
|
|
|
|
|
|
|
zerombr
|
|
|
|
clearpart --all
|
2017-05-15 17:30:43 +01:00
|
|
|
autopart --noboot --nohome --noswap --nolvm
|
2013-10-26 08:41:43 -05:00
|
|
|
|
|
|
|
%include fedora-repo.ks
|
|
|
|
|
|
|
|
reboot
|
|
|
|
|
2020-09-02 17:10:07 -04:00
|
|
|
##### begin package list #############################################
|
2020-09-02 17:07:06 -04:00
|
|
|
%packages --instLangs=en
|
2014-07-11 11:01:56 -04:00
|
|
|
|
2020-09-02 17:10:07 -04:00
|
|
|
# Include packages for the cloud-server-environment group
|
2014-09-11 18:41:58 -05:00
|
|
|
@^cloud-server-environment
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2020-09-02 17:10:07 -04:00
|
|
|
# Don't include the kernel toplevel package since it pulls in
|
|
|
|
# kernel-modules. We're happy for now with kernel-core.
|
|
|
|
-kernel
|
|
|
|
kernel-core
|
2016-05-04 14:15:07 -04:00
|
|
|
|
2020-09-02 17:10:07 -04:00
|
|
|
# Don't include dracut-config-rescue. It will have dracut generate a
|
|
|
|
# "rescue" entry in the grub menu, but that also means there is a
|
|
|
|
# rescue kernel and initramfs that get created, which (currently) add
|
|
|
|
# about another 40MiB to the /boot/ partition. Also the "rescue" mode
|
|
|
|
# is generally not useful in the cloud.
|
2013-10-26 08:41:43 -05:00
|
|
|
-dracut-config-rescue
|
|
|
|
|
2020-09-02 17:10:07 -04:00
|
|
|
# Plymouth provides a graphical boot animation. In the cloud we don't
|
|
|
|
# need a graphical boot animation. This also means anaconda won't put
|
|
|
|
# rhgb/quiet on kernel command line
|
2017-05-24 01:41:20 -04:00
|
|
|
-plymouth
|
2020-09-02 17:10:07 -04:00
|
|
|
|
2020-09-02 17:13:36 -04:00
|
|
|
# No need for firewalld for now. We don't have a firewall on by default.
|
|
|
|
-firewalld
|
|
|
|
|
2020-07-09 11:48:03 -06:00
|
|
|
# noswap on Cloud for now
|
|
|
|
-zram-generator-defaults
|
2020-09-02 17:18:18 -04:00
|
|
|
|
|
|
|
# Don't include the geolite2 databases, which end up with 66MiB
|
|
|
|
# in /usr/share/GeoIP
|
|
|
|
-geolite2-country
|
|
|
|
-geolite2-city
|
2013-10-26 08:41:43 -05:00
|
|
|
%end
|
2020-09-02 17:10:07 -04:00
|
|
|
##### end package list ###############################################
|
2013-10-26 08:41:43 -05:00
|
|
|
|
|
|
|
|
2020-09-02 17:16:28 -04:00
|
|
|
##### begin kickstart post ###########################################
|
2013-10-26 08:41:43 -05:00
|
|
|
%post --erroronfail
|
|
|
|
|
2020-09-02 17:16:28 -04:00
|
|
|
# linux-firmware is installed by default and is quite large. As of mid 2020:
|
|
|
|
# Total download size: 97 M
|
|
|
|
# Installed size: 268 M
|
|
|
|
# So far we've been fine shipping without it so let's continue.
|
|
|
|
# More discussion about this in #1234504.
|
2015-09-23 07:16:18 +01:00
|
|
|
echo "Removing linux-firmware package."
|
|
|
|
rpm -e linux-firmware
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2020-09-02 17:16:28 -04:00
|
|
|
# See the systemd-random-seed.service man page that says:
|
|
|
|
# " It is recommended to remove the random seed from OS images intended
|
|
|
|
# for replication on multiple systems"
|
2013-10-26 08:41:43 -05:00
|
|
|
echo "Removing random-seed so it's not the same in every image."
|
2017-02-17 15:05:13 -05:00
|
|
|
rm -f /var/lib/systemd/random-seed
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2013-12-06 12:16:02 -05:00
|
|
|
echo "Import RPM GPG key"
|
2019-07-17 10:49:05 +02:00
|
|
|
releasever=$(rpm --eval '%{fedora}')
|
2013-12-12 04:12:29 -06:00
|
|
|
basearch=$(uname -i)
|
2013-12-06 12:16:02 -05:00
|
|
|
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
|
|
|
|
2014-11-03 15:27:08 -05:00
|
|
|
echo "Zeroing out empty space."
|
|
|
|
# This forces the filesystem to reclaim space from deleted files
|
|
|
|
dd bs=1M if=/dev/zero of=/var/tmp/zeros || :
|
|
|
|
rm -f /var/tmp/zeros
|
|
|
|
echo "(Don't worry -- that out-of-space error was expected.)"
|
2013-10-26 08:41:43 -05:00
|
|
|
|
2020-09-02 17:02:18 -04:00
|
|
|
# When we build the image a networking config file gets left behind.
|
|
|
|
# Let's clean it up.
|
|
|
|
echo "Cleanup leftover networking configuration"
|
|
|
|
rm -f /etc/NetworkManager/system-connections/*.nmconnection
|
2015-10-15 13:44:41 +05:30
|
|
|
|
2020-09-02 17:16:28 -04:00
|
|
|
# Clear machine-id on pre generated images
|
|
|
|
truncate -s 0 /etc/machine-id
|
2017-03-28 14:56:51 -04:00
|
|
|
|
2013-10-26 08:41:43 -05:00
|
|
|
%end
|
2020-09-02 17:16:28 -04:00
|
|
|
##### end kickstart post ############################################
|