Attachment 943467 Details for Bug 1148923 – File: ks.cfg

File: ks.cfg

ks.cfg (text/plain), 16.31 KB, created by Orion Poplawski on 2014-10-02 16:12:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Orion Poplawski

Created: 2014-10-02 16:12:39 UTC

Size: 16.31 KB

patch

obsolete

>install
>text
>url --url=http://fedora.cora.nwra.com/development/rawhide/x86_64/os
>repo --name=cora-fdev-x86_64 --baseurl=http://corpms.cora.nwra.com/fedora/development/x86_64 
>repo --name=adobe-linux-x86_64 --baseurl=http://adobe.cora.nwra.com/linux/x86_64/ 
>repo --name=adobe-linux-i386 --baseurl=http://adobe.cora.nwra.com/linux/i386/ 
>
>lang en_US.UTF-8
>keyboard us
>rootpw --iscrypted $1$9DQYCOkm$mX1ytTm6CBkdZGAfy4hmj.
>firewall --enabled --ssh
>firstboot --disable
>selinux --enforcing
>authconfig --enablemd5 --enableshadow --disablefingerprint --enableldap --enableldapauth --ldapserver=ldap.cora.nwra.com,ldap2.cora.nwra.com --ldapbasedn=dc=nwra,dc=com --enableldaptls --ldaploadcacert=http://www.cora.nwra.com/cgi-bin/getca.pl --disablefingerprint
>timezone --utc America/Denver
>skipx
>clearpart --all --initlabel
># part biosboot --fstype=biosboot --size=1
>part / --size=3000 --grow
>part swap --recommended
>
>zerombr
>bootloader --location=mbr
># Network information
># Using "new" style networking config, by matching networking information to the physical interface's 
># MAC-address
>%include /tmp/pre_install_network_config
>
>reboot
>
>%packages --instLangs=en_US
>#%base
># @base
>-ccid
>-dump
>-firstboot-tui
>-initial-setup
>-irda-utils
>logwatch
>-lvm2
>-prelink
>-rsh
>-setuptool
>-system-config-firewall-tui
>-system-config-network-tui
>-ypbind
># @core
>-gnu-efi
>-iprutils
>-pcsc-lite
># semanage
>policycoreutils-python
># @development-libs
>strace
># @development-tools
># @dial-up
>-isdn4k-utils
># @directory-client
>krb5-workstation
>sssd
>sssd-client
># @editors
>vim-enhanced
># @hardware-support
>-b43-fwcutter
>-b43-openfwwf
># @mail-server
>-exim
>-postfix
># Be explicit to avoid ssmtp
>sendmail
>sendmail-cf
>-ssmtp
># @network-server
># @system-tools
>autofs
>freeipmi
>ntpdate
>puppet
># Needed for koan --replace-self
>python-ethtool
>sysstat
>-yum-updatesd
># Other
>bash-completion
># Force this over jruby
>ruby-libs
>yum-cron
># CoRA
>CoRA
>CoRA-release
>
>#%base-fedora
># @admin-tools
>abrt
>-gnome-packagekit
>-kpackagekit
># Brings in firstboot
>-system-config-boot
>-system-config-keyboard
># @core
># Needed explicity for live images apparently
>selinux-policy-targeted
>-yum-presto
>@standard
>chrony
>-finger
>-PackageKit-yum-plugin
># sss autofs maps
>libsss_autofs
># For 32-bit apps
>glibc.i686
>libgcc.i686
>
>#%base-fedorarawhide
># Error: no snippet data for pkg/base-fedorarawhide
>
>#%server
># @core
>-hotplug
>-system-config-mouse
># Firmware we don't need
>-aic94xx-firmware
>-atmel-firmware
>-b43-openfwwf
>-bfa-firmware
>-ipw2100-firmware
>-ipw2200-firmware
>-ivtv-firmware
>-iwl100-firmware
>-iwl1000-firmware
>-iwl3945-firmware
>-iwl4965-firmware
>-iwl5000-firmware
>-iwl5150-firmware
>-iwl6000-firmware
>-iwl6000g2a-firmware
>-iwl6050-firmware
>-libertas-usb8388-firmware
>-ql2100-firmware
>-ql2200-firmware
>-ql23xx-firmware
>-ql2400-firmware
>-ql2500-firmware
>-rt61pci-firmware
>-rt73usb-firmware
>-xorg-x11-drv-ati-firmware
>-zd1211-firmware
># @base
>-NetworkManager
>-alsa-utils
>-bluez
>-bluez-utils
>-coolkey
>-dosfstools
>-eject
>-fbset
>-finger
>-fprintd-pam
>-gpm
>-hunspell
>-hunspell-en
>kexec-tools
>-irda-utils
>-lftp
>-man-pages
>-mlocate
>-nano
>-parted
>-pcmciautils
>-pinfo
>-rdate
>-rfkill
>-redhat-lsb
>-rp-pppoe
>-sl-release-notes
>-specspo
>-stunnel
>-system-config-network-tui
>-talk
>-telnet
>-wireless-tools
>-words
># @dial-up
>-isdn4k-utils
>-lrzsz
>-minicom
>-ppp
>-statserial
>-wvdial
># @hardware-monitoring
># @mail-server
># Be explicit to avoid ssmtp
>sendmail
>sendmail-cf
># @sound-and-video
>-sox
># @system-tools
># Other
>pigz
>sysstat
># CoRA
>-idl
>-idl-common
># rpmfusion
>-rpmfusion-free-release
>-rpmfusion-nonfree-release
>
>#%server-fedorarawhide
># Error: no snippet data for pkg/server-fedorarawhide
>
>#%server-fedora
>zabbix-agent
>
>#%host specific
>
>dracut-modules-growroot
>-smartmontools
>
>
>
>%end
>
>%pre
>set -x -v
>exec 1>/tmp/ks-pre.log 2>&1
>
># Once root's homedir is there, copy over the log.
>while : ; do
>    sleep 10
>    if [ -d /mnt/sysimage/root ]; then
>        cp /tmp/ks-pre.log /mnt/sysimage/root/
>        logger "Copied %pre section log to system"
>        break
>    fi
>done &
>
>
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/trig/mode/pre/system/vmrawhide" -O /dev/null
># Start pre_install_network_config generated code
># generic functions to be used later for discovering NICs
>mac_exists() {
>  [ -z "$1" ] && return 1
>
>  if which ip 2>/dev/null >/dev/null; then
>    ip -o link | grep -i "$1" 2>/dev/null >/dev/null
>    return $?
>  elif which esxcfg-nics 2>/dev/null >/dev/null; then
>    esxcfg-nics -l | grep -i "$1" 2>/dev/null >/dev/null
>    return $?
>  else
>    ifconfig -a | grep -i "$1" 2>/dev/null >/dev/null
>    return $?
>  fi
>}
>get_ifname() {
>  if which ip 2>/dev/null >/dev/null; then
>    IFNAME=$(ip -o link | grep -i "$1" | sed -e 's/^[0-9]*: //' -e 's/:.*//')
>  elif which esxcfg-nics 2>/dev/null >/dev/null; then
>    IFNAME=$(esxcfg-nics -l | grep -i "$1" | cut -d " " -f 1)
>  else
>    IFNAME=$(ifconfig -a | grep -i "$1" | cut -d " " -f 1)
>    if [ -z $IFNAME ]; then
>      IFNAME=$(ifconfig -a | grep -i -B 2 "$1" | sed -n '/flags/s/:.*$//p')
>    fi
>  fi
>}
>
># Start of code to match cobbler system interfaces to physical interfaces by their mac addresses
>#  Start eth0
># Configuring eth0 (00:16:3e:47:dd:f8)
>if mac_exists 00:16:3e:47:dd:f8
>then
>  get_ifname 00:16:3e:47:dd:f8
>  echo "network --device=$IFNAME --bootproto=dhcp" >> /tmp/pre_install_network_config
>fi
># End pre_install_network_config generated code
>
># Enable installation monitoring
>wget -O /tmp/anamon "http://cobbler.cora.nwra.com:80/cobbler/aux/anamon"
>python /tmp/anamon --name "vmrawhide" --server "cobbler.cora.nwra.com" --port "80"
>
>#%base
># More space for yum downloads
>mount -o remount,size=100% /tmp
>
># Setup login.defs
># Once the /etc directory is there, setup login.defs
>while :
>do
>  sleep 10
>  if [ -d /mnt/sysimage/etc ]
>  then
>    cat > /mnt/sysimage/etc/login.defs <<EOF
>#
># Please note that the parameters in this configuration file control the
># behavior of the tools from the shadow-utils component. None of these
># tools uses the PAM mechanism, and the utilities that use PAM (such as the
># passwd command) should therefore be configured elsewhere. Refer to
># /etc/pam.d/system-auth for more information.
>#
>
># *REQUIRED*
>#   Directory where mailboxes reside, _or_ name of file, relative to the
>#   home directory.  If you _do_ define both, MAIL_DIR takes precedence.
>#   QMAIL_DIR is for Qmail
>#
>#QMAIL_DIR      Maildir
>MAIL_DIR        /var/spool/mail
>#MAIL_FILE      .mail
>
># Password aging controls:
>#
>#       PASS_MAX_DAYS   Maximum number of days a password may be used.
>#       PASS_MIN_DAYS   Minimum number of days allowed between password changes.
>#       PASS_MIN_LEN    Minimum acceptable password length.
>#       PASS_WARN_AGE   Number of days warning given before a password expires.
>#
>PASS_MAX_DAYS   365
>PASS_MIN_DAYS   5
>PASS_MIN_LEN    10
>PASS_WARN_AGE   14
>
>#
># Min/max values for automatic uid selection in useradd
>#
>UID_MIN                   500
>UID_MAX                 60000
># System accounts
>SYS_UID_MIN               201
>SYS_UID_MAX               999
>
>#
># Min/max values for automatic gid selection in groupadd
>#
>GID_MIN                   500
>GID_MAX                 60000
># System accounts
>SYS_GID_MIN               201
>SYS_GID_MAX               999
>
>#
># If defined, this command is run when removing a user.
># It should remove any at/cron/print jobs etc. owned by
># the user to be removed (passed as the first argument).
>#
>#USERDEL_CMD    /usr/sbin/userdel_local
>
>#
># If useradd should create home directories for users by default
># On RH systems, we do. This option is overridden with the -m flag on
># useradd command line.
>#
>CREATE_HOME     yes
>
># The permission mask is initialized to this value. If not specified, 
># the permission mask will be initialized to 022.
>UMASK           027
>
># This enables userdel to remove user groups if no members exist.
>#
>USERGROUPS_ENAB yes
>
># Use SHA512 to encrypt password.
>ENCRYPT_METHOD MD5
>
>MD5_CRYPT_ENAB yes
>EOF
>    logger "Setup /etc/login.defs"
>    break
>  fi
>done &
>
># English only
>mkdir -p /mnt/sysimage/etc/rpm
>echo '%_install_langs C:en_US:en_US.UTF-8' > /mnt/sysimage/etc/rpm/macros
>
># Load nfs kernel module for nfs4 (needed for EL6)
>modprobe nfs
>
># F20?
>modprobe nfsv4
>
># Debug idmapping
># sed -i -e 's/nfsidmap/nfsidmap -vvvv/' /etc/request-key.d/id_resolver.conf
># Remove the installer's request-key config, preempts rpc.idmapd in %post
>rm /etc/request-key.d/id_resolver.conf
>
>
>%end
>
>%post
>set -x -v
>exec 1>/root/ks-post.log 2>&1
>
>ls -l /etc/systemd/system/default.target
># Cobbler standard
>
>
>
># Start post_install_network_config generated code
>
># create a working directory for interface scripts
>mkdir /etc/sysconfig/network-scripts/cobbler
>cp /etc/sysconfig/network-scripts/ifcfg-lo /etc/sysconfig/network-scripts/cobbler/
>
># Start configuration for eth0
>echo "DEVICE=eth0" > /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>echo "ONBOOT=yes" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>echo "HWADDR=00:16:3E:47:DD:F8" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>IFNAME=$(ip -o link | grep -i '00:16:3E:47:DD:F8' | sed -e 's/^[0-9]*: //' -e 's/:.*//')
>if [ -f "/etc/modprobe.conf" ] && [ $IFNAME ]; then
>    grep $IFNAME /etc/modprobe.conf | sed "s/$IFNAME/eth0/" >> /etc/modprobe.conf.cobbler
>    grep -v $IFNAME /etc/modprobe.conf >> /etc/modprobe.conf.new
>    rm -f /etc/modprobe.conf
>    mv /etc/modprobe.conf.new /etc/modprobe.conf
>fi
>echo "TYPE=Ethernet" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
>echo "BOOTPROTO=dhcp" >> /etc/sysconfig/network-scripts/cobbler/ifcfg-eth0
># End configuration for eth0
>
>sed -i 's/ONBOOT=yes/ONBOOT=no/g' /etc/sysconfig/network-scripts/ifcfg-eth*
>
>rm -f /etc/sysconfig/network-scripts/ifcfg-eth0
>mv /etc/sysconfig/network-scripts/cobbler/* /etc/sysconfig/network-scripts/
>rm -r /etc/sysconfig/network-scripts/cobbler
>if [ -f "/etc/modprobe.conf" ]; then
>cat /etc/modprobe.conf.cobbler >> /etc/modprobe.conf
>rm -f /etc/modprobe.conf.cobbler
>fi
># End post_install_network_config generated code
>
>
>
>
># Start download cobbler managed config files (if applicable)
># End download cobbler managed config files (if applicable)
>
># Start koan environment setup
>echo "export COBBLER_SERVER=cobbler.cora.nwra.com" > /etc/profile.d/cobbler.sh
>echo "setenv COBBLER_SERVER cobbler.cora.nwra.com" > /etc/profile.d/cobbler.csh
># End koan environment setup
>
># begin Red Hat management server registration
># not configured to register to any Red Hat management server (ok)
># end Red Hat management server registration
>
># Begin cobbler registration
># skipping for system-based installation
># End cobbler registration
>
># CoRA post
>echo hosttype=server >> /etc/system_facts
>
>#%base
># Time
>ntpdate earth
>
>ln -s /nfs/local /opt/local
>
># Cleanup /etc/hosts
>cat /etc/hosts
>sed -i -e '/^192\.168/d' /etc/hosts
>sed -i -e '/^10\.10/d' /etc/hosts
># sed -i -e "s/ *vmrawhide//" /etc/hosts
>
># Check names
>uname -n
>hostname
>
>/sbin/chkconfig --del btseed
>/sbin/chkconfig --del bttrack
>/sbin/chkconfig --del pcscd
>
># Memtest
>if [ -x /usr/sbin/memtest-setup ]
>then
>   sh -x /usr/sbin/memtest-setup
>fi
>
># Backup over ssh
>ssh-keygen -N '' -f /root/.ssh/backup_rsa
>
># NetDRMS
>ln -s /data/SOLDAT/SUMS /SUM0
>
>#IB only
>lspci | grep -q InfiniBand && chkconfig rdma on
>
>#%server
># Faster boot
>#sed -i -e '/timeout=/s/=.*/=0/' /boot/grub/grub.conf
>
># No rhgb
>sed -i -e 's/ rhgb//' /boot/grub/grub.conf
>sed -i -e 's/ quiet//' /boot/grub/grub.conf
>
># grub2
>sed -i -e s/TIMEOUT=.*/TIMEOUT=0/ -e 's/ rhgb//' /etc/default/grub
>grub2-mkconfig -o /boot/grub2/grub.cfg
>sed -i -e 's/^set default=.*/set default=0/' /boot/grub2/grub.cfg
>
># Use old style networking
>chkconfig network on
>
>
># Samba sharing
>semanage fcontext -a -t samba_share_t '/export(/.*)'
>
># Dell OMSA
>if [ `facter manufacturer` = Dell ]
>then
>  wget -q -O - http://linux.dell.com/repo/hardware/latest/bootstrap.cgi | bash
>  yum -y install firmware-tools firmware-addon-dell
>  yum -y install $(bootstrap_firmware)
>fi
>
>#%install
># Bug https://bugzilla.redhat.com/show_bug.cgi?id=874806 workaround
>/usr/sbin/authconfig --update --nostart --ldaploadcacert=http://www.cora.nwra.com/cgi-bin/getca.pl
>
># Make sure the rpc_pipefs filesystem is available for rpc.idmapd
>/bin/mount -t rpc_pipefs sunrpc /var/lib/nfs/rpc_pipefs
># Start rpc.idmapd for nfs4
>rpc.idmapd -v
># Start sssd for username lookup
>sssd
># Someday maybe with kerberos?
># rpc.gssd -v
># Mount with nfs4
>nfsopts="-t nfs4"
>
># Make /tmp a tmpfs filesystem
>echo "tmpfs                   /tmp                    tmpfs   defaults        0 0" >> /etc/fstab
>
># Forward login info to earth
>if [ -f /etc/syslog.conf ]
>then
>   echo -e "\n#Forward login info to earth\nauthpriv.*\t\t\t\t@loghost" >> /etc/syslog.conf
>else
>   cat >> /etc/rsyslog.d/forward.conf <<'EOF'
>
># sysklogd template for forwarding to sysklogd server
>$template sysklogd,"<%PRI%>%TIMESTAMP% %syslogtag%%msg%"
>
># Forward login info to earth
>authpriv.*				@loghost;sysklogd
>EOF
>fi
>
># Root key
>mkdir /root/.ssh
>cat > /root/.ssh/authorized_keys <<EOF
>ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxygs+sZRxQY7c4VnwP3/rTdNQNAn8pIY8eOhvE+z0gKs/175v1A2G0fBAwpRFdZeqDQVzrUAkNA0bK5sqQkJAkwHSDQh7Il1kMdqnPgxeQjTYrAR+W0WA3q9eLEu1eWn4Dp8g1Os59dJrahxORFDgcAMK0pM4TCgxcy0WlBmCWMjzci286AJo5LUIH8WuZ5B/O8r7azR8MplPO+zQeevbmG7APIKigu/m7zlA5eoQmB0u9ErrBywzVhv4si5fDw61V/quDfEvZITGUDIcXRaWK8H2jVSR4ANT+jf9aIOUpXf83mtcNyI0G1cz37bJGvcp0pbTq+GKlGI9ogpMzK1rw==
>EOF
>/sbin/restorecon -r -v /root/.ssh
>
># Updates
>/sbin/chkconfig yum-cron on
>
># Puppet
>/sbin/chkconfig puppet on
>systemctl enable puppetagent.service
>
># Setup NTP
>/sbin/chkconfig ntpdate on
>/sbin/chkconfig ntpd on
>
># Kerberized NFSv4
>#/sbin/chkconfig rpcgssd on
>#/bin/systemctl enable nfs-secure.service
>
># Autofs
>/sbin/chkconfig autofs on
>
># lm_sensors
>/usr/sbin/sensors-detect < /dev/null
>
># Autofs krb5 NFSv4, NFS homedirs
>time setsebool -P allow_gssd_read_tmp=1 use_nfs_home_dirs=1
>
># Restore from backup
>cat /etc/resolv.conf
>mkdir -p /data/backup /nfs/local
>if [ vmrawhide != saga ]
>then
>  mount -v $nfsopts saga:/backup /data/backup
>  mount -v $nfsopts saga:/local /nfs/local
>else
>  mount -v $nfsopts earth:/export/backup /data/backup
>  mount -v $nfsopts earth:/export/backup/saga/export/local /nfs/local
>fi
>
>
># Restore unique state from backup
>if [ ! -d /export/home ]
>then
>   sysonly="-s"
>fi
>sh -x /nfs/local/sbin/restore $sysonly
>
># Unmount NFS mounts
>umount -l /nfs/local /data/backup
>rm -rf --one-file-system /data
>
># Debug
>ls -l /etc/mtab
>
># Make link if needed
>if [ -d /export/local ]
>then
>   rmdir /nfs/local
>   ln -s /export/local /nfs/local
>fi
>
># Cleanup old yum repos
>rm -r /var/cache/yum/*
>
># Firewalld issue in Fedora 18+
>systemctl disable firewalld.service
>
># Turn on printer browsing F19+
>systemctl enable cups-browsed.service
>
>#%host specific
>
># Setup RAID1 grub boot
># This determines if /boot is on a raid1 device, and if so installs grub on the second device.
># Get the device of the /boot filesystem, if any
>bootdev=`mount | awk '$3 == "/boot" { print $1 }'`
># Check that it is an md device
>if [ "${bootdev/[0123456789]/}" = /dev/md ]
>then
>   # Get the md name - used in /proc/mdstat
>   md=`basename $bootdev`
>
>   # Get the second device in the array, assuming 0,1 order and first in all set
>   dev=`awk -v md=$md '$1 == md { gsub("\\\[[01]\\\]","",$6); print $6 }' /proc/mdstat`
>
>   # Get the partition number, grub partition number is 1 less
>   grubpart=$((${dev/sd[a-z]/} - 1))
>
>   # Get the grub disk name from the device.map
>   grubdisk=`awk -v disk=${dev/[0-9]/} '$2 ~ disk { print $1 }' /boot/grub/device.map`
>
>   # Insert the grub partition number into the disk name to get the grub root name
>   grubroot=${grubdisk/)/,$grubpart)}
>
>   # Run grub to install onto the second device
>   /sbin/grub --device-map=/boot/grub/device.map <<EOF
>root $grubroot
>setup $grubdisk
>EOF
>fi
>
># Enable post-install boot notification
>
>wget -O /usr/local/sbin/anamon "http://cobbler.cora.nwra.com:80/cobbler/aux/anamon"
>wget -O /etc/rc.d/init.d/anamon "http://cobbler.cora.nwra.com:80/cobbler/aux/anamon.init"
>
>chmod 755 /etc/rc.d/init.d/anamon /usr/local/sbin/anamon
>test -d /selinux && restorecon /etc/rc.d/init.d/anamon /usr/local/sbin/anamon
>
>chkconfig --add anamon
>
>cat << __EOT__ > /etc/sysconfig/anamon
>COBBLER_SERVER="cobbler.cora.nwra.com"
>COBBLER_PORT="80"
>COBBLER_NAME="vmrawhide"
>LOGFILES="/var/log/boot.log /var/log/messages /var/log/dmesg /root/ks-post.log"
>__EOT__
>
>
># Temp fix for F16 Alpha
># Start final steps
>
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/ks/system/vmrawhide" -O /root/cobbler.ks
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/trig/mode/post/system/vmrawhide" -O /dev/null
>wget "http://cobbler.cora.nwra.com/cblr/svc/op/nopxe/system/vmrawhide" -O /dev/null
># End final steps
>ls -l /etc/systemd/system/default.target
>%end

Actions: View

Attachments on bug 1148923: 943464 | 943465 | 943466 | 943467 | 943468 | 943469 | 943470 | 943471 | 943472 | 943473 | 943474 | 943475