Attachment 853511 Details for Bug 1056315 – File: ks.cfg

File: ks.cfg

ks.cfg (text/plain), 21.01 KB, created by Orion Poplawski on 2014-01-22 00:04:17 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Orion Poplawski

Created: 2014-01-22 00:04:17 UTC

Size: 21.01 KB

patch

obsolete

>install
>vnc
>url --url=http://fedora.cora.nwra.com/releases/20/Fedora/x86_64/os
>repo --name=rpmfusion-free-f20-updates-testing-x86_64 --baseurl=http://rpmfusion.cora.nwra.com/free/fedora/updates/testing/20/x86_64 
>repo --name=rpmfusion-nonfree-f20-x86_64 --baseurl=http://rpmfusion.cora.nwra.com/nonfree/fedora/releases/20/Everything/x86_64/os 
>repo --name=rpmfusion-nonfree-f20-updates-x86_64 --baseurl=http://rpmfusion.cora.nwra.com/nonfree/fedora/updates/20/x86_64 
>repo --name=rpmfusion-free-f20-x86_64 --baseurl=http://rpmfusion.cora.nwra.com/free/fedora/releases/20/Everything/x86_64/os 
>repo --name=rpmfusion-free-f20-updates-x86_64 --baseurl=http://rpmfusion.cora.nwra.com/free/fedora/updates/20/x86_64 
>repo --name=fedora-20-updates-x86_64 --baseurl=http://fedora.cora.nwra.com/updates/20/x86_64 
>repo --name=fedora-20-everything-x86_64 --baseurl=http://fedora.cora.nwra.com/releases/20/Everything/x86_64/os 
>repo --name=cora-f20-x86_64 --baseurl=http://corpms.cora.nwra.com/fedora/20/x86_64 
>repo --name=adobe-linux-x86_64 --baseurl=http://adobe.cora.nwra.com/linux/x86_64/ 
>repo --name=adobe-linux-i386 --baseurl=http://adobe.cora.nwra.com/linux/i386/ 
>
>lang en_US.UTF-8
>keyboard us
>rootpw --iscrypted xxxx
>firewall --disabled
># firstboot --disable
>selinux --enforcing
>authconfig --enablemd5 --enableshadow --enableldap --enableldapauth --ldapserver=ldap.cora.nwra.com,ldap2.cora.nwra.com --ldapbasedn=dc=nwra,dc=com --enableldaptls --ldaploadcacert=http://www.cora.nwra.com/cgi-bin/getca.pl --enablemkhomedir
>timezone --utc America/Denver
>xconfig --startxonboot --defaultdesktop=KDE
># This is needed to get the onpart to work
># https://bugzilla.redhat.com/show_bug.cgi?id=752216
>clearpart --none
>part / --onpart=LABEL=root --label=root
>part /export --onpart=LABEL=export --label=export --noformat
>part swap --recommended --onpart=LABEL=swap --label=swap
>
>zerombr
>bootloader --location=mbr
># Network information
># Using "new" style networking config, by matching networking information to the physical interface's 
># MAC-address
>%include /tmp/pre_install_network_config
>
># reboot
>
>%packages
>#%base
># @base
>-ccid
>-dump
># -firstboot-tui
>-initial-setup
>-irda-utils
>logwatch
>mcelog
>-prelink
>-rsh
>-setuptool
>-system-config-firewall-tui
>-system-config-network-tui
>-ypbind
># @core
>-gnu-efi
>-iprutils
>-pcsc-lite
># semanage
>policycoreutils-python
># @development-libs
>strace
># @development-tools
>memtest86+
># @dial-up
>-isdn4k-utils
># @directory-client
>krb5-workstation
># @editors
>vim-enhanced
># @hardware-support
>-b43-fwcutter
>-b43-openfwwf
># @mail-server
>-exim
>-postfix
># Be explicit to avoid ssmtp
>sendmail
>sendmail-cf
>-ssmtp
># @network-server
>koan
># @system-tools
>autofs
>freeipmi
>ntpdate
>puppet
># Needed for koan --replace-self
>python-ethtool
>sysstat
>-yum-updatesd
># Other
>bash-completion
>dmidecode
>gdisk
># Force this over jruby
>ruby-libs
>yum-cron
># CoRA
>CoRA
>CoRA-release
>
>#%base-fedora
># @admin-tools
>abrt
>-gnome-packagekit
>-kpackagekit
># Brings in firstboot
>-system-config-boot
>-system-config-keyboard
># @core
># Needed explicity for live images apparently
>selinux-policy-targeted
>-yum-presto
>@standard
>chrony
>-finger
>-PackageKit-yum-plugin
># sss autofs maps
>libsss_autofs
># For 32-bit apps
>glibc.i686
>libgcc.i686
>
>#%base-fedora20
># Error: no snippet data for pkg/base-fedora20
>
>#%xwin
># @authoring-and-publishing
>kbibtex
>kile
>xdvik
># @development-tools
>vim-X11
># @eclipse
>eclipse-photran
>eclipse-photran-intel
>eclipse-ptp
>eclipse-subclipse
># @engineering-and-scientific
>ncl
>paraview
>tgif
>xfig
># @fonts
>cjkuni-uming-fonts
>dejavu-sans-fonts
>dejavu-sans-mono-fonts
>dejavu-serif-fonts
>liberation-mono-fonts
>liberation-sans-fonts
>liberation-serif-fonts
>stix-fonts
>un-core-dotum-fonts
># @gnome-software-development
>ddd
>@graphics
>djvulibre
>gimp
>inkscape
>poppler-data
># GNOME apps
>-shotwell
>-simple-scan
>@java
># Firefox
># nspluginwrapper.i686
># nspluginwrapper.x86_64
># For now - 64-bit flash plugin crashes when wrapped and we are not
># using 32-bit acroread plugin at the moment
>-nspluginwrapper
># @kde-apps 
>-kdegames
>-kdegames-minimal
>@kde-desktop
>-apper
>kdeadmin
>-kdeedu
>keepassx
>#Uses okular in firefox - not very good
>#kpartsplugin
># @kde-media
>kdesdk
>kdesvn
>kdewebdev
>rsibreak
># office
>lyx
>openoffice.org-ooolatex
>pdfedit
>xournal
># @remote-desktop-clients
>rdesktop
>tigervnc
># @text-internet
>alpine
># Other
>aspell
>aspell-en
># Needed for idlde
>libXtst.i686
># Adobe
>adobe-release-i386
>adobe-release-x86_64
>flash-plugin
># CoRA
># May be discontinued, downloaded and put into CoRA repo for now
>AdobeReader_enu
>ds9
># mplayer-codecs
># msttcorefonts
>skype
># Does not compile with assimp 3
>VirtualGL
>x2goclient
># rpmfusion
>gstreamer-ffmpeg
>-totem
>-totem-mozplugin
>-totem-xine
>xine-ui
>
>#%xwin-fedora20
># Error: no snippet data for pkg/xwin-fedora20
>
>#%xwin-fedora
>@base-x
># @eclipse
>eclipse-egit
>@firefox
>@graphical-internet
>-empathy
>-evolution
>-evolution-help
>-evolution-perl
>-evolution-webcal
>-evolution-NetworkManager
>filezilla
>gftp
>thunderbird-lightning
>-transmission
>@kde-apps
>@kde-media
>@libreoffice
>libreoffice-kde
># @mysql
># We want to pull in mariadb-server, not community-mysql-server for akonadi-mysql
>mariadb-server
># @sound-and-video
>pavucontrol
># -rhythmbox
># -sound-juicer
># @system-tools
># pam_keyring
>gnome-keyring-pam
>@x-software-development
>-alsa-lib-devel
>-SDL-devel
># rpmfusion
>gecko-mediaplayer
>
>#%user
># @development-tools
>bison-devel
>bison
>byacc
>ccache
>cvs
>flex
>gdb
>git
>ipython
>libjpeg-devel
>make
>openssl-devel
>subversion
>subversion-perl
>valgrind
>zlib-devel
># @editors
>vim-enhanced
># @engineering-and-scientific
>atlas-devel
>grads
>hdf
>hdf-devel
>netcdf4-python
>octave-image
>octave-octcdf
>pyfits
>python-basemap
>python-matplotlib
>python-numdisplay
>R-multcomp
>R-systemfit
>scipy
>wgrib2
># @system-tools
>environment-modules
># @legacy-software-support
># For ifort
>compat-libstdc++-33
># @mysql
>perl-DBD-MySQL
># Other
>cfitsio-devel
>enscript
>GMT
>gsi-openssh-clients
>myproxy
>ncl-devel
>nco
>ncompress
>ncview
>openmpi-devel
># For NetDRMS
>perl-CGI
>perl-Text-Template
>postgresql
>ps2eps
>psutils-perl
>pypy
>subversion-kde
>svnmailer
># CoRA
>CoRA-workstation
>ftnchek
>gdl
>gridengine
>hpcmp-krb5
>hpcmp-openssh
>intel-compiler-libs
>ncftp
># rompy
># PyTables
># For SRD HARDAC compNodes.pl script
>perl-XML-Simple
>shtools-intel-devel
>#WPS
># RPMFusion
># For convert to mpeg
>ffmpeg
>mencoder
>
>#%user-fedora20
># Error: no snippet data for pkg/user-fedora20
>
>#%user-fedora
># @authoring-and-publishing
>BibTool
>texlive-epstopdf
>texlive-latex
>tex(emulateapj.cls)
>tex(groff.enc)
>tex(revtex4.cls)
>texlive-subfigure
>texlive-sidecap
>texlive-sectsty
>texlive-titlesec
>texlive-wrapfig
># @development-tools
>flex-static
>gcc-c++
>gcc-gfortran
># @editors
>emacs
>@engineering-and-scientific
>fpack
># PyTables
># rompy
>@printing
># Use system-config-printer-kde instead
>-system-config-printer
>@text-internet
># Other
>fftw-devel
>netcdf-fortran-devel
>pdftk
>tetex-prosper
># rpmfusion
>transcode
>unrar
># For IDLDE
>gtk2.i686
>libXmu.i686
>libXpm.i686
># For acroread
>sssd-client.x86_64
>sssd-client.i686
>
>#%laptop
>acpid
>-biosdevname
>@dial-up
>-mdadm
>vpnc
># @gnome-desktop
>seahorse
># @graphics
>gv
># @kde-desktop
># @system-tools
>rfkill
>oddjob-mkhomedir
>openldap-clients
>powertop
>samba
># CoRA
># kde-settings-cora
># Doug has an Epson NX430
>epson-inkjet-printer-escpr
>
>#%laptop-fedora20
># Error: no snippet data for pkg/laptop-fedora20
>
>#%laptop-fedora
>@hardware-support
>
>#%host specific
>
>
>
>%end
>
>%pre
>set -x -v
>exec 1>/tmp/ks-pre.log 2>&1
>
># Once root's homedir is there, copy over the log.
>while : ; do
>    sleep 10
>    if [ -d /mnt/sysimage/root ]; then
>        cp /tmp/ks-pre.log /mnt/sysimage/root/
>        logger "Copied %pre section log to system"
>        break
>    fi
>done &
>
>
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/trig/mode/pre/system/quetzal" -O /dev/null
># Start pre_install_network_config generated code
># generic functions to be used later for discovering NICs
>mac_exists() {
>  if which ip 2>/dev/null >/dev/null; then
>    ip -o link | grep -i "$1" 2>/dev/null >/dev/null
>    return $?
>  elif which esxcfg-nics 2>/dev/null >/dev/null; then
>    esxcfg-nics -l | grep -i "$1" 2>/dev/null >/dev/null
>    return $?
>  else
>    ifconfig -a | grep -i "$1" 2>/dev/null >/dev/null
>    return $?
>  fi
>}
>get_ifname() {
>  if which ip 2>/dev/null >/dev/null; then
>    IFNAME=$(ip -o link | grep -i "$1" | sed -e 's/^[0-9]*: //' -e 's/:.*//')
>  elif which esxcfg-nics 2>/dev/null >/dev/null; then
>    IFNAME=$(esxcfg-nics -l | grep -i "$1" | cut -d " " -f 1)
>  else
>    IFNAME=$(ifconfig -a | grep -i "$1" | cut -d " " -f 1)
>    if [ -z $IFNAME ]; then
>      IFNAME=$(ifconfig -a | grep -i -B 2 "$1" | sed -n '/flags/s/:.*$//p')
>    fi
>  fi
>}
>
># Start of code to match cobbler system interfaces to physical interfaces by their mac addresses
>#  Start eth0
># Configuring eth0 (00:26:b9:c9:41:00)
>if mac_exists 00:26:b9:c9:41:00
>then
>  get_ifname 00:26:b9:c9:41:00
>  echo "network --device=$IFNAME --bootproto=dhcp" >> /tmp/pre_install_network_config
>fi
># End pre_install_network_config generated code
>
># Enable installation monitoring
>wget -O /tmp/anamon "http://cobbler.cora.nwra.com:80/cobbler/aux/anamon"
>python /tmp/anamon --name "quetzal" --server "cobbler.cora.nwra.com" --port "80"
>
>#%base
># More space for yum downloads
>mount -o remount,size=100% /tmp
>
># Setup login.defs
># Once the /etc directory is there, setup login.defs
>while :
>do
>  sleep 10
>  if [ -d /mnt/sysimage/etc ]
>  then
>    cat > /mnt/sysimage/etc/login.defs <<EOF
>#
># Please note that the parameters in this configuration file control the
># behavior of the tools from the shadow-utils component. None of these
># tools uses the PAM mechanism, and the utilities that use PAM (such as the
># passwd command) should therefore be configured elsewhere. Refer to
># /etc/pam.d/system-auth for more information.
>#
>
># *REQUIRED*
>#   Directory where mailboxes reside, _or_ name of file, relative to the
>#   home directory.  If you _do_ define both, MAIL_DIR takes precedence.
>#   QMAIL_DIR is for Qmail
>#
>#QMAIL_DIR      Maildir
>MAIL_DIR        /var/spool/mail
>#MAIL_FILE      .mail
>
># Password aging controls:
>#
>#       PASS_MAX_DAYS   Maximum number of days a password may be used.
>#       PASS_MIN_DAYS   Minimum number of days allowed between password changes.
>#       PASS_MIN_LEN    Minimum acceptable password length.
>#       PASS_WARN_AGE   Number of days warning given before a password expires.
>#
>PASS_MAX_DAYS   365
>PASS_MIN_DAYS   5
>PASS_MIN_LEN    10
>PASS_WARN_AGE   14
>
>#
># Min/max values for automatic uid selection in useradd
>#
>UID_MIN                   500
>UID_MAX                 60000
># System accounts
>SYS_UID_MIN               201
>SYS_UID_MAX               999
>
>#
># Min/max values for automatic gid selection in groupadd
>#
>GID_MIN                   500
>GID_MAX                 60000
># System accounts
>SYS_GID_MIN               201
>SYS_GID_MAX               999
>
>#
># If defined, this command is run when removing a user.
># It should remove any at/cron/print jobs etc. owned by
># the user to be removed (passed as the first argument).
>#
>#USERDEL_CMD    /usr/sbin/userdel_local
>
>#
># If useradd should create home directories for users by default
># On RH systems, we do. This option is overridden with the -m flag on
># useradd command line.
>#
>CREATE_HOME     yes
>
># The permission mask is initialized to this value. If not specified, 
># the permission mask will be initialized to 022.
>UMASK           027
>
># This enables userdel to remove user groups if no members exist.
>#
>USERGROUPS_ENAB yes
>
># Use SHA512 to encrypt password.
>ENCRYPT_METHOD MD5
>
>MD5_CRYPT_ENAB yes
>EOF
>    logger "Setup /etc/login.defs"
>    break
>  fi
>done &
>
># Load nfs kernel module for nfs4 (needed for EL6)
>modprobe nfs
>
># F20?
>modprobe nfsv4
>
># Debug idmapping
># sed -i -e 's/nfsidmap/nfsidmap -vvvv/' /etc/request-key.d/id_resolver.conf
># Remove the installer's request-key config, preempts rpc.idmapd in %post
>rm /etc/request-key.d/id_resolver.conf
>
>
>%end
>
>%post
>set -x -v
>exec 1>/root/ks-post.log 2>&1
>
>ls -l /etc/systemd/system/default.target
># Cobbler standard
>
>
>
># Start post_install_network_config generated code
>
># create a working directory for interface scripts
>mkdir /etc/sysconfig/network-scripts/cobbler
>cp /etc/sysconfig/network-scripts/ifcfg-lo /etc/sysconfig/network-scripts/cobbler/
>
># Start configuration for eth0
>echo "DEVICE=eth0" > /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>echo "ONBOOT=yes" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>echo "HWADDR=00:26:B9:C9:41:00" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>IFNAME=$(ip -o link | grep -i '00:26:B9:C9:41:00' | sed -e 's/^[0-9]*: //' -e 's/:.*//')
>if [ -f "/etc/modprobe.conf" ] && [ $IFNAME ]; then
>    grep $IFNAME /etc/modprobe.conf | sed "s/$IFNAME/eth0/" >> /etc/modprobe.conf.cobbler
>    grep -v $IFNAME /etc/modprobe.conf >> /etc/modprobe.conf.new
>    rm -f /etc/modprobe.conf
>    mv /etc/modprobe.conf.new /etc/modprobe.conf
>fi
>echo "TYPE=Ethernet" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>echo "BOOTPROTO=dhcp" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
># End configuration for eth0
>
>sed -i 's/ONBOOT=yes/ONBOOT=no/g' /etc/sysconfig/network-scripts/ifcfg-eth*
>
>rm -f /etc/sysconfig/network-scripts/ifcfg-eth0
>mv /etc/sysconfig/network-scripts/cobbler/* /etc/sysconfig/network-scripts/
>rm -r /etc/sysconfig/network-scripts/cobbler
>if [ -f "/etc/modprobe.conf" ]; then
>cat /etc/modprobe.conf.cobbler >> /etc/modprobe.conf
>rm -f /etc/modprobe.conf.cobbler
>fi
># End post_install_network_config generated code
>
>
>
>
># Start download cobbler managed config files (if applicable)
># End download cobbler managed config files (if applicable)
>
># Start koan environment setup
>echo "export COBBLER_SERVER=cobbler.cora.nwra.com" > /etc/profile.d/cobbler.sh
>echo "setenv COBBLER_SERVER cobbler.cora.nwra.com" > /etc/profile.d/cobbler.csh
># End koan environment setup
>
># begin Red Hat management server registration
># not configured to register to any Red Hat management server (ok)
># end Red Hat management server registration
>
># Begin cobbler registration
># skipping for system-based installation
># End cobbler registration
>
># CoRA post
>echo hosttype=laptop >> /etc/system_facts
>
>#%base
># Time
>ntpdate earth
>
>ln -s /nfs/local /opt/local
>
># Cleanup /etc/hosts
>cat /etc/hosts
>sed -i -e '/^192\.168/d' /etc/hosts
>sed -i -e '/^10\.10/d' /etc/hosts
># sed -i -e "s/ *quetzal//" /etc/hosts
>
># Check names
>uname -n
>hostname
>
>/sbin/chkconfig --del btseed
>/sbin/chkconfig --del bttrack
>/sbin/chkconfig --del pcscd
>
># Memtest
>if [ -x /usr/sbin/memtest-setup ]
>then
>   sh -x /usr/sbin/memtest-setup
>fi
>
># Backup over ssh
>ssh-keygen -N '' -f /root/.ssh/backup_rsa
>
># NetDRMS
>ln -s /data/cora/SUMS /SUM0
>
>#IB only
>lspci | grep -q InfiniBand && chkconfig rdma on
>
>#%laptop
># Laptop mods
>
># grub2
>sed -i -e s/TIMEOUT=.*/TIMEOUT=4/ /etc/default/grub
>sed -i -e '/^GRUB_CMDLINE_LINUX=/s/"$/ ipv6.disable=1"/' /etc/default/grub
>grub2-mkconfig -o /boot/grub2/grub.cfg
>sed -i -e 's/^set default=.*/set default=0/' /boot/grub2/grub.cfg
>
># Initial keys
>cat > /root/.ssh/known_hosts << 'EOF'
>earth,10.10.10.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAoQe1AFMKyY1X3PbHc1lWif6Iww0qEAZ5HoO378lOx7u5KA+ubT1lunF2fTdlvOAMYdYMlW21OWtaKSMgJ8DvF2UQbPIM5spWmapdXNyAGB4aHpjhIt09qZoRuEJ2d2bdlVtNS/s2kT2iPNVKCgf0QAQOisfYmbv3AMRhDXTPVxM=
>saga.cora.nwra.com,10.10.10.2 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA4zt9FPWLohLWjeddHnpWuLeEh64Rf6G5HtLuq8fZ/uW2RLNcSxVtw4vOPojDgBPuzuBiuen1ExXxCqQCK06V0nKY3w10Y8B39/Chc+0jsm6s8ZpKLUCNeVYZ8wGiI3hOTuzVnmPH2nUjEM+tKV5OwqNRwutgG6sXhXqew5uQPp8=
>EOF
>
># SELinux contexts for /export
>semanage fcontext -a -f -d -t home_root_t /export
>chcon -t home_root_t /export
>semanage fcontext -a -t usr_t '/export/local(/.*)'
>semanage fcontext -a -f -d -t tmp_t /export/tmp
>semanage fcontext -a -f -d -t lost_found_t '/export/lost\+found'
>semanage fcontext -a -f -d -t virt_image_t /export/images
>
>#  Matlab permissions
>semanage fcontext -a -t textrel_shlib_t '/export/local/[Mm]atlab.*/bin/glnx.*/(libmw(blas|lapack|ma57|mathutil|services)|lapack|libmkl|libtbb|mkl|mllapack).so.*'
>semanage fcontext -a -t textrel_shlib_t '/export/local/[Mm]matlab.*/sys/os/glnx86/libtermcap.so'
>semanage fcontext -a -t java_exec_t '/export/local/[Mm]atlab.*/bin/(.*/)?MATLAB'
>semanage fcontext -a -t textrel_shlib_t '/export/local/[Mm]atlab.*/sys/java/(.*/)?libjvm.so'
># Allow virt machine users to access home dirs
>setsebool -P samba_enable_home_dirs=1
>
># ifort
>semanage fcontext -a -t textrel_shlib_t '/opt/intel/Compiler/.*/lib(GuiMgr|DebuggerData|DebuggerServices|PostOffice|mkl_(mc|mc3|avx|def|p4n|pgi_thread)|omp_db).so'
>
># Setup directories
>mkdir -p /export/home /export/local /export/local/bin /export/tmp /nfs /export/images
>chmod 1777 /export/tmp
>ln -s /export/tmp /scratch
>
># Unneeded services
>chkconfig --del dnsmasq
>chkconfig --del gpsd
>chkconfig --del mdmonitor
>
>#%install
># Bug https://bugzilla.redhat.com/show_bug.cgi?id=874806 workaround
>/usr/sbin/authconfig --update --nostart --ldaploadcacert=http://www.cora.nwra.com/cgi-bin/getca.pl
>
># Make sure the rpc_pipefs filesystem is available for rpc.idmapd
>/bin/mount -t rpc_pipefs sunrpc /var/lib/nfs/rpc_pipefs
># Start rpc.idmapd for nfs4
>rpc.idmapd -v
># Start sssd for username lookup
>sssd
># Someday maybe with kerberos?
># rpc.gssd -v
># Mount with nfs4
>nfsopts="-t nfs4"
>
># Make /tmp a tmpfs filesystem
>echo "tmpfs                   /tmp                    tmpfs   defaults        0 0" >> /etc/fstab
>
># Forward login info to earth
>if [ -f /etc/syslog.conf ]
>then
>   echo -e "\n#Forward login info to earth\nauthpriv.*\t\t\t\t@loghost" >> /etc/syslog.conf
>else
>   cat >> /etc/rsyslog.d/forward.conf <<'EOF'
>
># sysklogd template for forwarding to sysklogd server
>$template sysklogd,"<%PRI%>%TIMESTAMP% %syslogtag%%msg%"
>
># Forward login info to earth
>authpriv.*				@loghost;sysklogd
>EOF
>fi
>
># Root key
>mkdir /root/.ssh
>cat > /root/.ssh/authorized_keys <<EOF
>ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxygs+sZRxQY7c4VnwP3/rTdNQNAn8pIY8eOhvE+z0gKs/175v1A2G0fBAwpRFdZeqDQVzrUAkNA0bK5sqQkJAkwHSDQh7Il1kMdqnPgxeQjTYrAR+W0WA3q9eLEu1eWn4Dp8g1Os59dJrahxORFDgcAMK0pM4TCgxcy0WlBmCWMjzci286AJo5LUIH8WuZ5B/O8r7azR8MplPO+zQeevbmG7APIKigu/m7zlA5eoQmB0u9ErrBywzVhv4si5fDw61V/quDfEvZITGUDIcXRaWK8H2jVSR4ANT+jf9aIOUpXf83mtcNyI0G1cz37bJGvcp0pbTq+GKlGI9ogpMzK1rw==
>EOF
>/sbin/restorecon -r -v /root/.ssh
>
># Updates
>/sbin/chkconfig yum-cron on
>
># Puppet
>/sbin/chkconfig puppet on
>systemctl enable puppetagent.service
>
># Setup NTP
>/sbin/chkconfig ntpdate on
>/sbin/chkconfig ntpd on
>
># Kerberized NFSv4
>#/sbin/chkconfig rpcgssd on
>#/bin/systemctl enable nfs-secure.service
>
># Autofs
>/sbin/chkconfig autofs on
>
># lm_sensors
>/usr/sbin/sensors-detect < /dev/null
>
># Autofs krb5 NFSv4, NFS homedirs, silence vbetool
>time setsebool -P allow_gssd_read_tmp=1 use_nfs_home_dirs=1 vbetool_mmap_zero_ignore=1
>
># Mount /data/backup
>cat /etc/resolv.conf
>mkdir -p /data/backup
>if [ quetzal != saga ]
>then
>  mount -v $nfsopts saga:/backup /data/backup
>else
>  mount -v $nfsopts earth:/export/backup /data/backup
>fi
>
># Mount /nfs/local
>mkdir -p /nfs/local
>mount -v $nfsopts saga:/local /nfs/local
>
># Restore unique state from backup
>if [ ! -d /export/home ]
>then
>   sysonly="-s"
>fi
>sh -x /nfs/local/sbin/restore $sysonly
>
># Unmount NFS mounts
>umount -l /nfs/local /data/backup
>rm -rf --one-file-system /data
>
># Debug
>ls -l /etc/mtab
>
># Make link if needed
>if [ -d /export/local ]
>then
>   rmdir /nfs/local
>   ln -s /export/local /nfs/local
>fi
>
># Cleanup old yum repos
>rm -r /var/cache/yum/*
>
># Firewalld issue in Fedora 18+
>systemctl disable firewalld.service
>
># Turn on printer browsing F19+
>systemctl enable cups-browsed.service
>
>#%host specific
>
># Setup RAID1 grub boot
># This determines if /boot is on a raid1 device, and if so installs grub on the second device.
># Get the device of the /boot filesystem, if any
>bootdev=`mount | awk '$3 == "/boot" { print $1 }'`
># Check that it is an md device
>if [ "${bootdev/[0123456789]/}" = /dev/md ]
>then
>   # Get the md name - used in /proc/mdstat
>   md=`basename $bootdev`
>
>   # Get the second device in the array, assuming 0,1 order and first in all set
>   dev=`awk -v md=$md '$1 == md { gsub("\\\[[01]\\\]","",$6); print $6 }' /proc/mdstat`
>
>   # Get the partition number, grub partition number is 1 less
>   grubpart=$((${dev/sd[a-z]/} - 1))
>
>   # Get the grub disk name from the device.map
>   grubdisk=`awk -v disk=${dev/[0-9]/} '$2 ~ disk { print $1 }' /boot/grub/device.map`
>
>   # Insert the grub partition number into the disk name to get the grub root name
>   grubroot=${grubdisk/)/,$grubpart)}
>
>   # Run grub to install onto the second device
>   /sbin/grub --device-map=/boot/grub/device.map <<EOF
>root $grubroot
>setup $grubdisk
>EOF
>fi
>
># Enable post-install boot notification
>
>wget -O /usr/local/sbin/anamon "http://cobbler.cora.nwra.com:80/cobbler/aux/anamon"
>wget -O /etc/rc.d/init.d/anamon "http://cobbler.cora.nwra.com:80/cobbler/aux/anamon.init"
>
>chmod 755 /etc/rc.d/init.d/anamon /usr/local/sbin/anamon
>test -d /selinux && restorecon /etc/rc.d/init.d/anamon /usr/local/sbin/anamon
>
>chkconfig --add anamon
>
>cat << __EOT__ > /etc/sysconfig/anamon
>COBBLER_SERVER="cobbler.cora.nwra.com"
>COBBLER_PORT="80"
>COBBLER_NAME="quetzal"
>LOGFILES="/var/log/boot.log /var/log/messages /var/log/dmesg"
>__EOT__
>
>
># Temp fix for F16 Alpha
># Start final steps
>
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/ks/system/quetzal" -O /root/cobbler.ks
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/trig/mode/post/system/quetzal" -O /dev/null
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/nopxe/system/quetzal" -O /dev/null
># End final steps
>ls -l /etc/systemd/system/default.target
>%end

Actions: View

Attachments on bug 1056315: 853508 | 853509 | 853510 | 853511 | 853512 | 853513 | 853514 | 853515 | 853516 | 853517 | 853518