- build cloud based images using livecd-rootfsubuntu/yakkety
Michael Vogt
10 years ago
commit
1167706f83
@ -0,0 +1,28 @@
|
||||
#!/bin/bash
|
||||
# Configure certain packages
|
||||
|
||||
## console-setup
|
||||
|
||||
# Select the fontface
|
||||
printf "%s\t%s\t%s\t%s\n" \
|
||||
console-setup console-setup/console-setup/fontface47 string "Fixed" debconf-set-selections ||
|
||||
{ echo "FAILED to setup console fontface"; exit 1; }
|
||||
|
||||
# Select the code page for font
|
||||
printf "%s\t%s\t%s\t%s\n" \
|
||||
console-setup console-setup/codesetcode string "Uni2" | debconf-set-selections ||
|
||||
{ echo "FAILED to setup console code page to Uni2"; exit 1; }
|
||||
|
||||
# Set Language string for codepage 47
|
||||
printf "%s\t%s\t%s\t%s\n" \
|
||||
console-setup console-setup/codeset47 string ". Combined - Latin; Slavic Cyrillic; Greek" | debconf-set-selections ||
|
||||
{ echo "FAILED to setup codeset47 to proper string"; exti 1; }
|
||||
|
||||
# Replace the console font and typ ein /etc/default/console-setup
|
||||
sed -i -e 's,^CODESET.*,CODESET="Uni2",g' \
|
||||
-e 's,^FONTFACE.*,FONTFACE="Fixed",g' \
|
||||
/etc/default/console-setup
|
||||
|
||||
# Configure the console-setup
|
||||
dpkg-reconfigure --frontend=noninteractive console-setup ||
|
||||
{ echo "FAILED to recofigure console-setup"; exit 1; }
|
||||
@ -0,0 +1,14 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# Create the necessary users and set their passwords. If needed,
|
||||
# make sure they belong to the proper groups
|
||||
#
|
||||
# Author: Ben Howard <ben.howard@canonical.com>
|
||||
# Date: 29 Jun 2011
|
||||
#
|
||||
|
||||
echo "Adding admin group..."
|
||||
addgroup --system --quiet admin
|
||||
|
||||
echo "Adding netdev group..."
|
||||
addgroup --system --quiet netdev
|
||||
@ -0,0 +1,3 @@
|
||||
#!/bin/bash
|
||||
|
||||
printf "HWCLOCKACCESS=no" >> /etc/default/rcS
|
||||
@ -0,0 +1,3 @@
|
||||
#!/bin/bash
|
||||
|
||||
sed -i "s|#PasswordAuthentication yes|PasswordAuthentication no|g" /etc/ssh/sshd_config
|
||||
@ -0,0 +1,18 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# Disable IPv6 privacy extensions on Utopic and later
|
||||
#
|
||||
|
||||
codename=$(sh -c 'lsb_release --short --codename')
|
||||
dist_ge() { [[ "$1" > "$2" || "$1" == "$2" ]]; }
|
||||
|
||||
if ! dist_ge "${codename}" "trusty"; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
cat << EOF > /etc/sysctl.d/99-cloudimg-ipv6.conf
|
||||
# Written by the Cloud Image build process
|
||||
# See https://bugs.launchpad.net/ubuntu/+source/procps/+bug/1068756
|
||||
net.ipv6.conf.all.use_tempaddr = 0
|
||||
net.ipv6.conf.default.use_tempaddr = 0
|
||||
EOF
|
||||
@ -0,0 +1,57 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Clean up extraneous log files that may be left around
|
||||
rm /etc/ssh/ssh_host*key* || echo "No SSH keys to remove"
|
||||
|
||||
# Fix LP: #1047707, 1019338
|
||||
# Truncate logs that are owned, otherwise remove
|
||||
whitelisted_logs=(/var/log/btmp /var/log/lastlog /var/log/wtmp /var/log/fsck/checkfs /var/log/fsck/checkroot)
|
||||
|
||||
for log in $(find /var/log -type f)
|
||||
do
|
||||
whitelisted=$(echo "${whitelisted_logs[@]}" | grep -o ${log})
|
||||
|
||||
if [ -n "${whitelisted}" ]; then
|
||||
: > ${log} &&
|
||||
echo "Truncated whitelisted log ${log}" ||
|
||||
echo "Failed to truncate whitelisted log ${log}"
|
||||
else
|
||||
|
||||
dpkg -S ${log} > /dev/null 2>&1 &&
|
||||
{ : > ${log} ||
|
||||
echo "Failed to truncate $f"; } ||
|
||||
{ rm ${log} &&
|
||||
echo "Removed ${log} as an orphaned log file" ||
|
||||
echo "Failed to remove unnecessary log $f"; }
|
||||
fi
|
||||
done
|
||||
|
||||
# Remove un-owned log directories
|
||||
whitelisted_dirs=(/var/log/fsck)
|
||||
|
||||
for log_d in $(find /var/log/* -type d)
|
||||
do
|
||||
whitelisted=$(echo "${whitelisted_dirs[@]}" | grep -o "${log_d}")
|
||||
if [ -z "${whitelisted}" ]; then
|
||||
dpkg -S ${log_d} > /dev/null 2>&1 &&
|
||||
echo "Preserving log directory ${log_d}" ||
|
||||
{ rm -rf ${log_d} &&
|
||||
echo "Removed log directory ${log_d} as orphaned log dir" ||
|
||||
echo "Failed to remove unnessasary log dir ${log_d}"; }
|
||||
|
||||
else
|
||||
echo "Preserving whitelisted directory ${log_d}"
|
||||
fi
|
||||
|
||||
done
|
||||
|
||||
|
||||
rm -rf /var/run/* || echo "Failed to clean /var/run/*"
|
||||
rm /etc/passwd- || echo "No spare passwd file to cleanup"
|
||||
rm /etc/shadow- || echo "No spare shadow file to cleanup"
|
||||
rm /etc/gshadow- || echo "No spare gshadow file to cleanup"
|
||||
rm /etc/group- || echo "No spare group file to clenaup"
|
||||
rm -f /etc/apt/conf.d/00secure || echo "No apt cache to cleanup"
|
||||
|
||||
# Truncate instead of delete, LP: #707311
|
||||
truncate --size=0 -c /etc/popularity-contest.conf
|
||||
@ -0,0 +1,281 @@
|
||||
#!/bin/bash
|
||||
rootd="${1:-/}"
|
||||
root_fs_label=cloudimg-rootfs
|
||||
set -ex
|
||||
|
||||
CLOUD_IMG_STR="# CLOUD_IMG: This file was created/modified by the Cloud Image build process"
|
||||
|
||||
LANG=C
|
||||
|
||||
_xchroot() {
|
||||
# Prevent multiple chroots
|
||||
if [ "$1" = "/" ]; then
|
||||
shift;
|
||||
"$@"
|
||||
else
|
||||
chroot "$@"
|
||||
fi
|
||||
}
|
||||
|
||||
#### COMMON architecture independent functions
|
||||
arch=$(_xchroot "${rootd}" dpkg --print-architecture)
|
||||
|
||||
add_serial_console() {
|
||||
condev=$1
|
||||
idir="$rootd/etc/init"
|
||||
cat << EOF > "${idir}/${condev}.conf"
|
||||
# CONDEV - getty
|
||||
#
|
||||
# This service maintains a getty on CONDEV from the point the system is
|
||||
# started until it is shut down again.
|
||||
|
||||
start on stopped rc RUNLEVEL=[2345] and (
|
||||
not-container or
|
||||
container CONTAINER=lxc or
|
||||
container CONTAINER=lxc-libvirt)
|
||||
|
||||
stop on runlevel [!2345]
|
||||
|
||||
pre-start script
|
||||
# getty will not be started if the serial console is not present
|
||||
stty -F /dev/CONDEV -a 2> /dev/null > /dev/null || { stop ; exit 0; }
|
||||
end script
|
||||
|
||||
respawn
|
||||
script
|
||||
exec /sbin/getty -L CONDEV 115200 vt102
|
||||
end script
|
||||
${CLOUD_IMG_STR}
|
||||
EOF
|
||||
sed -i "s/CONDEV/${condev}/g" "$idir/${condev}.conf"
|
||||
}
|
||||
|
||||
## --------------
|
||||
# remove 127.0.1.1 entry (LP: #440757)
|
||||
_xchroot "${rootd}" sh -c 'sed -i "/^127.0.1.1/d" /etc/hosts'
|
||||
|
||||
## --------------
|
||||
# remove ssh pregenerated keys (LP: #512377)
|
||||
|
||||
_xchroot "${rootd}" sh -c 'rm -f /etc/ssh/ssh_host_[rd]sa_key*'
|
||||
|
||||
## --------------
|
||||
_xchroot "${rootd}" locale-gen en_US.utf8
|
||||
|
||||
## --------------
|
||||
# set cloud-init to be on
|
||||
values="NoCloud, ConfigDrive, AltCloud, OVF, MAAS, Ec2, None"
|
||||
printf "%s\t%s\t%s\t%s\n" \
|
||||
cloud-init cloud-init/datasources multiselect "$values" |
|
||||
_xchroot "${rootd}" debconf-set-selections
|
||||
_xchroot "${rootd}" dpkg-reconfigure --frontend=noninteractive cloud-init
|
||||
|
||||
## --------------
|
||||
# write some build information to the guest
|
||||
# the idea is that given runtime info and this info, the instance
|
||||
# can at least determine if there is a newer build available
|
||||
# these variables are passed in in environment from cloudimg-build-launcher
|
||||
if [ -n "${build_name}" -o -n "${serial}" ]; then
|
||||
d="${rootd}/etc/cloud"
|
||||
[ -d "$d" ] || mkdir -p "${d}"
|
||||
{
|
||||
[ -n "${build_name}" ] && echo "build_name: ${build_name}"
|
||||
[ -n "${serial}" ] && echo "serial: ${serial}"
|
||||
} > "$d/build.info"
|
||||
fi
|
||||
|
||||
## --------------
|
||||
# for maverick and newer, use LABEL= for the '/' entry in fstab
|
||||
if [ -n "${root_fs_label}" ]; then
|
||||
bl="[:blank:]"
|
||||
lstr="LABEL=${root_fs_label}"
|
||||
sed -i "s,^[^#${bl}]*\([${bl}]*/[${bl}].*\),${lstr}\1," "${rootd}/etc/fstab"
|
||||
fi
|
||||
cat > /etc/fstab << EOM
|
||||
LABEL=cloudimg-rootfs / ext4 defaults 0 0
|
||||
EOM
|
||||
|
||||
## Make sure that the update-motd.d directory exists
|
||||
[ ! -e "${rootd}/etc/update-motd.d" ] &&
|
||||
mkdir -p "${rootd}/etc/update-motd.d"
|
||||
|
||||
## write a MOTD file advertising support for images
|
||||
cat > "${rootd}/etc/update-motd.d/51-cloudguest" << EOF
|
||||
#!/bin/sh
|
||||
#
|
||||
${CLOUD_IMG_STR}
|
||||
# This file is not managed by a package. If you no longer want to
|
||||
# see this message you can safely remove the file.
|
||||
echo ""
|
||||
echo " Get cloud support with Ubuntu Advantage Cloud Guest:"
|
||||
echo " http://www.ubuntu.com/business/services/cloud"
|
||||
EOF
|
||||
|
||||
chmod +x "${rootd}/etc/update-motd.d/51-cloudguest"
|
||||
|
||||
# for quantal and newer, add /etc/overlayroot.local.conf
|
||||
# but do not overwrite anything that somehow got there
|
||||
if [ -f "${rootd}/etc/overlayroot.conf" ] &&
|
||||
[ ! -f "${rootd}/etc/overlayroot.local.conf" ]; then
|
||||
{
|
||||
echo "${CLOUD_IMG_STR}"
|
||||
echo "overlayroot_cfgdisk=LABEL=OROOTCFG"
|
||||
} > "${rootd}/etc/overlayroot.local.conf"
|
||||
fi
|
||||
|
||||
|
||||
#### END COMMON ARCH FUNCTIONS
|
||||
|
||||
if [ "$arch" = "ppc64el" ]; then
|
||||
add_serial_console hvc0
|
||||
exit 0
|
||||
fi
|
||||
|
||||
# ARM images are special
|
||||
if [[ "$arch" =~ (arm|arm64|aarch64) ]]; then
|
||||
|
||||
echo "Configuring ARM Serial Port"
|
||||
add_serial_console ttyAMA0
|
||||
|
||||
echo "Image architecture is ARM. Existing vmbuilder-fixups"
|
||||
|
||||
exit 0
|
||||
fi
|
||||
|
||||
## Add ttyS0 for i386/amd64 for Trusty and newer
|
||||
if [ "$arch" = "i386" -o "$arch" = "amd64" ]; then
|
||||
add_serial_console ttyS0
|
||||
fi
|
||||
|
||||
|
||||
psuedo_grub_probe() {
|
||||
cat <<"PSUEDO_GRUB_PROBE"
|
||||
#!/bin/sh
|
||||
Usage() {
|
||||
cat <<EOF
|
||||
Usage: euca-psuedo-grub-probe
|
||||
this is a wrapper around grub-probe to provide the answers for an ec2 guest
|
||||
EOF
|
||||
}
|
||||
bad_Usage() { Usage 1>&2; fail "$@"; }
|
||||
|
||||
short_opts=""
|
||||
long_opts="device-map:,target:,device"
|
||||
getopt_out=$(getopt --name "${0##*/}" \
|
||||
--options "${short_opts}" --long "${long_opts}" -- "$@") &&
|
||||
eval set -- "${getopt_out}" ||
|
||||
bad_Usage
|
||||
|
||||
device_map=""
|
||||
target=""
|
||||
device=0
|
||||
arg=""
|
||||
|
||||
while [ $# -ne 0 ]; do
|
||||
cur=${1}; next=${2};
|
||||
case "$cur" in
|
||||
--device-map) device_map=${next}; shift;;
|
||||
--device) device=1;;
|
||||
--target) target=${next}; shift;;
|
||||
--) shift; break;;
|
||||
esac
|
||||
shift;
|
||||
done
|
||||
arg=${1}
|
||||
|
||||
case "${target}:${device}:${arg}" in
|
||||
device:*:/*) echo "/dev/sda1"; exit 0;;
|
||||
fs:*:*) echo "ext2"; exit 0;;
|
||||
partmap:*:*)
|
||||
# older versions of grub (lucid) want 'part_msdos' written
|
||||
# rather than 'msdos'
|
||||
legacy_pre=""
|
||||
grubver=$(dpkg-query --show --showformat '${Version}\n' grub-pc 2>/dev/null) &&
|
||||
dpkg --compare-versions "${grubver}" lt 1.98+20100804-5ubuntu3 &&
|
||||
legacy_pre="part_"
|
||||
echo "${legacy_pre}msdos";
|
||||
exit 0;;
|
||||
abstraction:*:*) echo ""; exit 0;;
|
||||
drive:*:/dev/sda) echo "(hd0)";;
|
||||
drive:*:/dev/sda*) echo "(hd0,1)";;
|
||||
fs_uuid:*:*) exit 1;;
|
||||
esac
|
||||
PSUEDO_GRUB_PROBE
|
||||
}
|
||||
|
||||
## install / setup grub2
|
||||
gprobe="${rootd}/usr/sbin/grub-probe"
|
||||
moved=0
|
||||
if [ -f "${gprobe}" ]; then
|
||||
mv "${gprobe}" "${gprobe}.dist"
|
||||
moved=1
|
||||
fi
|
||||
psuedo_grub_probe > "${gprobe}"
|
||||
chmod 755 "${gprobe}"
|
||||
|
||||
# for Quantal and later, use /etc/default/grub.d functionality
|
||||
# rather than modifying the grub configuration itself.
|
||||
# This avoids the mess of having to do dpkg stuff
|
||||
# LP: 1179940
|
||||
mkdir -p "${rootd}/etc/default/grub.d"
|
||||
cat << EOF > "${rootd}/etc/default/grub.d/50-cloudimg-settings.cfg"
|
||||
# Cloud Image specific Grub settings for Generic Cloud Images
|
||||
${CLOUD_IMG_STR}
|
||||
|
||||
# Set the recordfail timeout
|
||||
GRUB_RECORDFAIL_TIMEOUT=0
|
||||
|
||||
# Do not wait on grub prompt
|
||||
GRUB_TIMEOUT=0
|
||||
|
||||
# Set the default commandline
|
||||
GRUB_CMDLINE_LINUX_DEFAULT="console=tty1 console=ttyS0"
|
||||
|
||||
# Set the grub console type
|
||||
GRUB_TERMINAL=console
|
||||
EOF
|
||||
_xchroot "${rootd}" update-grub2
|
||||
|
||||
# since this is a disk image, we technically don't need to install all the
|
||||
# grub modules, as the image itself is not bootable. This makes for a small
|
||||
# disk image
|
||||
_xchroot "${rootd}" update-grub
|
||||
|
||||
# reconfigure grub so that upgrades to grub-pc do not force a debconf config
|
||||
# changed prompt (LP: #1009294). This re-runs update-grub
|
||||
_xchroot "${rootd}" env DEBIAN_FRONTEND=noninteractive \
|
||||
dpkg-reconfigure grub-pc
|
||||
|
||||
grub2cfg="${rootd}/boot/grub/grub.cfg"
|
||||
[ ! -f "${grub2cfg}" ] ||
|
||||
sed -i -e "s,root=/dev/sda1,root=LABEL=${root_fs_label}," "${grub2cfg}"
|
||||
|
||||
[ ${moved} -eq 0 ] || mv "${gprobe}.dist" "${gprobe}"
|
||||
|
||||
## modify /boot/grub/menu.lst if it exists
|
||||
## this is generated at install time by grub-legacy-ec2, but will have
|
||||
## devices as found from the _xchroot. Here we write what it will be on ec2
|
||||
if [ -f "${rootd}/boot/grub/menu.lst" ]; then
|
||||
grub_root="(hd0)"
|
||||
linux_root=/dev/sda1
|
||||
[ -n "${root_fs_label}" ] && linux_root="LABEL=${root_fs_label}"
|
||||
# the sed code below basically fixes/sets the following lines in a
|
||||
# /boot/grub/menu.lst file:
|
||||
# # kopt=root=xxxxxxx ro
|
||||
# kernel /boot/vmlinuz-... root=xxxxxx ....
|
||||
# # groot=xxxxx
|
||||
# root xxxxx
|
||||
# uuuid xxxxx
|
||||
sed -i "${rootd}/boot/grub/menu.lst" \
|
||||
-e "s|^\(# kopt=root=\)[^ ]*|\1${linux_root}|" \
|
||||
-e "s|^\(kernel.*root=\)[^ ]*|\1${linux_root}|" \
|
||||
-e "s|^\(# groot=\)[^ ]*|\1${grub_root}|" \
|
||||
-e "s|^\(root\|uuid\)\([[:space:]]*\).*|root\2${grub_root}|"
|
||||
|
||||
# grub-legacy-ec2 writes this ucf entry. since we've modified
|
||||
# /boot/grub/menu.lst, we have to remove it, or the user will
|
||||
# get prompted for a 3 way merge of the changes the first time this runs
|
||||
_xchroot "${rootd}" /usr/bin/ucfr --purge grub /var/run/grub/menu.lst
|
||||
fi
|
||||
|
||||
# vi: ts=3 expandtab
|
||||
@ -0,0 +1 @@
|
||||
ubuntu
|
||||
@ -0,0 +1,9 @@
|
||||
127.0.0.1 localhost
|
||||
|
||||
# The following lines are desirable for IPv6 capable hosts
|
||||
::1 ip6-localhost ip6-loopback
|
||||
fe00::0 ip6-localnet
|
||||
ff00::0 ip6-mcastprefix
|
||||
ff02::1 ip6-allnodes
|
||||
ff02::2 ip6-allrouters
|
||||
ff02::3 ip6-allhosts
|
||||
@ -0,0 +1,15 @@
|
||||
# This file describes the network interfaces available on your system
|
||||
# and how to activate them. For more information, see interfaces(5).
|
||||
|
||||
# The loopback network interface
|
||||
auto lo
|
||||
iface lo inet loopback
|
||||
|
||||
# Source interfaces
|
||||
# Please check /etc/network/interfaces.d before changing this file
|
||||
# as interfaces may have been defined in /etc/network/interfaces.d
|
||||
# NOTE: the primary ethernet device is defined in
|
||||
# /etc/network/interfaces.d/eth0
|
||||
# See LP: #1262951
|
||||
source /etc/network/interfaces.d/*.cfg
|
||||
|
||||
@ -0,0 +1,3 @@
|
||||
# The primary network interface
|
||||
auto eth0
|
||||
iface eth0 inet dhcp
|
||||
Loading…
Reference in new issue