Devuan preseed, July 2023 edition
And here's the latest version of my [un?]popular series on Devuan GNU+Linux preseed virtual machine installations. I don't think a whole lot has changed really, except of course the Devuan release number.
# File: /mnt/public/Support/Platforms/devuan/preseed/preseed.cfg # Locations: # /mnt/public/Support/Platforms/devuan/preseed/preseed.cfg # Author: bgstack15 # Startdate: 2019-06-25 # Title: Preseed for devuan vms for ipa.internal.com # Purpose: To provide an easy installation for VMs and other systems in the Internal network # History: # 2017-06 I learned how to use kickstart files for the RHCSA EX-200 exam # 2017-08-08 Added notifyemail to --extra-args # 2017-10-29 major revision to use local repository # 2019-06-25 fork from centos7-ks.cfg # 2018-12-29 fix up repos and in-target conclusion stuff # 2020-02-27 heavy rewrite to use ascii 2.1 # 2021-05-16 bump to chimaera which upgrades self to ceres # 2023-01-20 kernel cmdline, remove newmoon # 2023-02-28 add ssh_config EnableEscapeCommandline yes, disable apparmor for sssd # 2023-06-26 add configure-postfix.sh # Usage with virt-install: # vm=d2-04a ; time sudo virt-install -n "${vm}" --memory 2048 --vcpus=1 --os-variant=debiantesting -v --disk path=/var/lib/libvirt/images/"${vm}".qcow2,size=20 -l /mnt/public/Support/SetupsBig/Linux/devuan_daedalus_5.0.preview-20230116_amd64_netinstall.iso --initrd-inject=/mnt/public/Support/Platforms/devuan/preseed/preseed.cfg --extra-args "NOTIFYEMAIL=bgstack15@gmail.com interface=auto netcfg/get_hostname=${vm}" --debug --network type=bridge,source=br0 --noautoconsole # vm=d2-04a; sudo virsh destroy "${vm}"; sudo virsh undefine --remove-all-storage "${vm}"; # Reference: # https://sysadmin.compxtreme.ro/automatically-set-the-hostname-during-kickstart-installation/ # /mnt/public/Support/Platforms/CentOS7/install-vm.txt # https://serverfault.com/questions/481244/preseed-command-string-fail-with-newline-character-using-virt-install-initrd-inj # https://www.debian.org/releases/stable/i386/apbs01.html.en # https://github.com/jameswthorne/preseeds/blob/master/debian-7-wheezy-unattended.seed # syntax for --location https://www.queryxchange.com/q/1_908324/virt-install-preseed-not-working/ # example preseed https://www.debian.org/releases/stable/example-preseed.txt # skip next dvd question https://unix.stackexchange.com/questions/409212/preseed-directive-to-skip-another-cd-dvd-scanning # grub problem caused by consolekit:amd64 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915947#10 # https://stackoverflow.com/questions/39861614/how-to-fully-automate-unattended-virt-install # https://www.debian.org/releases/stable/i386/apbs03.html.en # https://dev1galaxy.org/viewtopic.php?id=1853 # https://www.cyberciti.biz/faq/howto-setup-serial-console-on-debian-linux/ # https://github.com/virt-manager/virt-manager/blob/master/virtinst/install/urldetect.py # /mnt/public/Support/Platforms/devuan/fix-virt-manager.txt # https://dev1galaxy.org/viewtopic.php?id=3332 # https://ubuntuforums.org/showthread.php?t=2387570 # sudo debconf-get-selections -c /mnt/public/Support/Platforms/devuan/preseed/preseed.cfg # on d2-03a: sudo debconf-get-selections --installer # https://serverfault.com/questions/593388/unable-to-nfs-mount-in-debian-preseed-target/593389 # https://preseed.debian.net/debian-preseed/sid/amd64-main-full.txt # https://bgstack15.ddns.net/blog/posts/2020/12/03/disable-apparmor-for-sssd/ # Improve: # discover how to send email, using postfix or sendmail. Don't care which, but exclude exim4. # echo "$( hostname ) has IP $( ip -4 -o a s eth0 | awk '{print $4}' | sed -r -e 's/\/.*$//' )" | # Dependencies: # configure-postfix uses my gmail+smtp+oauth2 postfix relay d-i debian-installer/country string US d-i debian-installer/keymap select us d-i debian-installer/language string en d-i debian-installer/locale string en_US d-i localechooser/supported-locales string en_US.UTF-8 d-i keyboard-configuration/layoutcode string us d-i keyboard-configuration/variantcode string d-i keyboard-configuration/xkb-keymap select us d-i netcfg/disable_autoconfig boolean false # The hostname is supposed to come from the kernel cmdline in the virt-install invocation #d-i netcfg/get_hostname string NONE d-i netcfg/get_domain string ipa.internal.com d-i netcfg/wireless_wep string # disable asking for non-free firmware, because this is a vm and has none d-i hw-detect/load_firmware boolean false #d-i apt-setup/enable-source-repositories boolean false # ORIGINAL d-i apt-setup/services-select multiselect security updates, release updates, backported software d-i apt-setup/services-select multiselect release updates d-i apt-setup/contrib boolean true d-i apt-setup/disable-cdrom-entries boolean true d-i apt-setup/non-free boolean true d-i apt-setup/use_mirror boolean true d-i mirror/country string manual d-i mirror/http/directory string /merged d-i mirror/http/hostname string deb.devuan.org d-i mirror/http/proxy string d-i mirror/protocol string http d-i mirror/suite string testing d-i apt-setup/cdrom/set-failed boolean false d-i apt-setup/cdrom/set-first boolean false d-i apt-setup/cdrom/set-next boolean false ## my repos and ceres d-i apt-setup/local0/comment string internaldeb d-i apt-setup/local0/key string http://www.example.com/internal/repo/deb/internaldeb.gpg d-i apt-setup/local0/repository string http://www.example.com/internal/repo/deb/ / d-i apt-setup/local1/comment string devuan-deb d-i apt-setup/local1/key string http://www.example.com/internal/repo/deb/internaldeb.gpg d-i apt-setup/local1/repository string http://www.example.com/internal/repo/devuan-deb/ / d-i apt-setup/local2/comment string ceres d-i apt-setup/local2/key string http://www.example.com/mirror/devuan/dists/ceres/Release.gpg d-i apt-setup/local2/repository string http://www.example.com/mirror/devuan ceres main contrib non-free #d-i apt-setup/local2/key string http://pkgmaster.devuan.org/merged/dists/ceres/Release.gpg #d-i apt-setup/local2/repository string http://pkgmaster.devuan.org/merged ceres main contrib non-free d-i apt-setup/local3/comment string obsmirror d-i apt-setup/local3/key string http://www.example.com/mirror/obs/Release.key d-i apt-setup/local3/repository string http://www.example.com/mirror/obs/ / d-i apt-setup/local4/comment string obsmirror-gtk3-classic d-i apt-setup/local4/key string http://www.example.com/mirror/obs-gtk3-classic/Release.key d-i apt-setup/local4/repository string http://www.example.com/mirror/obs-gtk3-classic/ / # if for some reason I really need to turn off the gpg key check: #d-i debian-installer/allow_unauthenticated boolean false #tasksel tasksel/first multiselect standard, ssh-server tasksel tasksel/first multiselect none # adapted from /mnt/public/Support/Platforms/devuan/devuan.txt, main fluxbox desktop, but for a vm # no xscreensaver, for a vm. #d-i pkgsel/include string \ # alsamixergui alttab apt-transport-https bgconf bgscripts bgscripts-core \ # cifs-utils curl fluxbox freeipa-client git grub lightdm lightdm-gtk-greeter \ # mlocate net-tools nfs-common ntpdate openssh-server \ # p7zip palemoon palemoon-ublock-origin parted qemu-guest-agent rsync scite \ # screen spice-vdagent strace sudo tcpdump vim vlc volumeicon-alsa waterfox \ # xfce4-terminal xfe xserver-xorg-video-qxl fluxbox-themes-stackrpms #d-i pkgsel/include string cifs-utils curl grub lightdm vim sudo vlc screen p7zip nfs-common d-i pkgsel/include string openssh-server wget curl d-i pkgsel/upgrade select none popularity-contest popularity-contest/participate boolean true d-i clock-setup/ntp boolean true d-i clock-setup/ntp-server string dns1.ipa.internal.com d-i time/zone string America/New_York # skip grub during main part, because we will do it in late_command #d-i grub-installer/skip boolean true #d-i grub-installer/skip-again boolean true #d-i grub-installer/skip-confirm boolean true #d-i grub-installer/confirm_skip boolean true #d-i nobootloader/confirmation_common boolean true d-i choose-init/select_init select sysvinit d-i choose-init/selected_sysvinit bool true grub-installer grub-installer/choose_bootdev select /dev/vda d-i lilo-installer/skip boolean true #d-i grub-installer/with_other_os boolean true d-i grub-installer/only_debian boolean true d-i grub-installer/grub2_instead_of_grub_legacy boolean true #d-i grub-installer/bootdev string /dev/vda #d-i grub-installer/choose_bootdev select /dev/vda #grub-installer grub-installer/force-efi-extra-removable boolean false d-i passwd/root-password password plaintextexamplepw d-i passwd/root-password-again password plaintextexamplepw d-i partman-auto/choose_recipe select home d-i partman-auto-crypto/erase_disks boolean false d-i partman-auto/disk string /dev/vda d-i partman-auto/init_automatically_partition select biggest_free d-i partman-auto/method string lvm d-i partman/choose_label string gpt d-i partman/choose_partition select finish d-i partman/confirm boolean true d-i partman/confirm_nooverwrite boolean true d-i partman/confirm_write_new_label boolean true d-i partman/default_label string gpt #d-i partman-lvm/confirm boolean true d-i partman-lvm/confirm_nooverwrite boolean true d-i partman-md/confirm_nooverwrite boolean true #d-i partman/mount_style select uuid d-i partman-partitioning/confirm_write_new_label boolean true d-i partman-auto-lvm/guided_size string 100% # Uncomment this to add multiarch configuration for i386 #d-i apt-setup/multiarch string i386 d-i passwd/make-user boolean true d-i passwd/user-fullname string bgstack15-local d-i passwd/username string bgstack15-local d-i passwd/user-password-crypted password $6$BxyYQfM7A1TEeS6X$SEXAMPLE6.n6SU21s.ojeQ9F06AMcnEXAMPLEHTufeWXLpNu6EmpsDN7eEXAMPLEU4moiXVgzIiTJYXatdGBz0/ d-i passwd/user-default-groups string audio cdrom video d-i finish-install/reboot_in_progress note d-i cdrom-detect/eject boolean true # additional application stuff just in case it works and is useful # LDAP server URI: d-i shared/ldapns/ldap-server string ldapi:///ipa.internal.com d-i openssh-server/password-authentication boolean true d-i openssh-server/permit-root-login boolean false # Sometimes the update-devuan has to happen before the laundry list of packages, because upgrading from some stable release to Ceres causes package numbering-name mismatches. d-i preseed/late_command string mkdir -p /target/etc/apt/sources.list.d /target/mnt/bgstack15 /target/mnt/public /target/etc/apt/sources.list.d /target/root/input ; touch /target/etc/apt/sources.list.d/empty ; cd /target/etc/apt ; \ in-target apt-get install -q -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" gpg grub-pc sudo ; \ in-target curl --no-progress-meter --output /root/set-local-devuan-repo.sh http://www.example.com/internal/Support/Platforms/devuan/scripts/set-local-devuan-repo.sh ; in-target sh /root/set-local-devuan-repo.sh ; \ in-target curl --no-progress-meter --output /root/input/52apt-file-stackrpms.conf http://www.example.com/internal/Support/Platforms/devuan/scripts/input/52apt-file-stackrpms.conf ; in-target curl --no-progress-meter --output /root/set-my-repos.sh http://www.example.com/internal/Support/Platforms/devuan/scripts/set-my-repos.sh ; in-target sh /root/set-my-repos.sh || : ; \ in-target rm /etc/apt/trusted.gpg.d/ceres.gpg || : ; \ in-target curl --no-progress-meter http://www.example.com/internal/certs/ca-ipa.internal.com.crt --output /usr/local/share/ca-certificates/ca-ipa.internal.com.crt && in-target update-ca-certificates || : ; \ in-target wget -O /root/update-devuan.sh http://www.example.com/internal/Support/Platforms/devuan/scripts/update-devuan.sh ; in-target sh /root/update-devuan.sh preseed ; \ in-target apt-get install -q -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" alsamixergui alttab bgconf bgscripts bgscripts-core ca-certificates cifs-utils curl desktop-base fluxbox fluxbox-themes-stackrpms freeipa-client freeipa-helper git grub-pc gtk3-automnemonics gtk3-nocsd gtk3-nooverlayscrollbar krb5-auth-dialog librewolf logout-manager man mlocate net-tools nfs-common ntpdate p7zip parted postfix qemu-guest-agent rsync scite screen spice-vdagent strace sudo tcpdump ublock-origin-combined vim vlc volumeicon-alsa xdgmenumaker xfce4-terminal xfe xserver-xorg-input-libinput xserver-xorg-video-qxl ; \ rm -f /target/etc/apt/sources.list.d/empty || : ; \ in-target sed -i -r -e '/^\s*linux/s/(\s*console=.{1,7}[0-9])*\s*$/ console=tty0 console=ttyS0/;' /boot/grub/grub.cfg || : ; \ in-target sed -i -r -e '/^\s*kernel/s/(\s*console=.{1,7}[0-9])*\s*$/ console=tty0 console=ttyS0/;' /boot/grub/menu.lst || : ; \ in-target sed -i -r -e '$aT0:23:respawn:/sbin/getty -L ttyS0 9600 vt100' /etc/inittab ; \ in-target apt-get update ; \ in-target apt-get purge -q -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" consolekit exim4\* lxqt\* udev ; \ in-target curl --no-progress-meter --output /root/lightdm-elogind.sh http://www.example.com/internal/Support/Platforms/devuan/scripts/lightdm-elogind.sh ; in-target sh /root/lightdm-elogind.sh -y ; \ in-target su bgstack15-local -c "sudo /usr/bin/bgconf.py -d 10 1>/home/bgstack15-local/clone.log 2>&1" ; \ in-target updateval -a -v /etc/ssh/ssh_config '^\s*EnableEscapeCommandline.*' 'EnableEscapeCommandline yes' ; \ in-target ln -sf /etc/apparmor.d/usr.sbin.sssd /etc/apparmor.d/disable/ ; \ in-target apparmor_parser -R /etc/apparmor.d/usr.sbin.sssd ; \ in-target curl --no-progress-meter --output /root/configure-postfix.sh http://www.example.com/internal/Support/Platforms/devuan/scripts/configure-postfix.sh ; in-target sh /root/configure-postfix.sh ; \ in-target curl --no-progress-meter --output /root/send-mail-ip-address.sh http://www.example.com/internal/Support/Platforms/devuan/scripts/send-mail-ip-address.sh ; in-target sh /root/send-mail-ip-address.sh bgstack15@gmail.com ;
Explanations
And of course, most of the logic is in all the included scripts.
File set-local-devuan-repo.sh
File set-my-repos.sh
And supporting file 52apt-file-stackrpms.conf:
# File: /etc/apt/apt.preferences.d/52apt-file-stackrpms.conf # Part of support devuan scripts # This enables the flat apt repos in internal to be supported by apt-file Acquire::IndexTargets { deb::Contents-stackrpms { MetaKey "Contents-$(ARCHITECTURE)"; ShortDescription "Contents-$(ARCHITECTURE)"; Description "$(RELEASE) $(ARCHITECTURE) Contents (deb)"; flatMetaKey "Contents-$(ARCHITECTURE)"; flatDescription "$(RELEASE) Contents (deb)"; PDiffs "true"; KeepCompressed "true"; DefaultEnabled "false"; Identifier "Contents-deb"; }; };
File update-devuan.sh
I've talked about this before, but here's the current version in case it's different. You think I QA this stuff before I paste+scrub this contents?
And dbus-on is a shell script from bgscripts that runs:
dbus-uuidgen | sudo tee /var/lib/dbus/machine-id 1>/dev/null 2>&1
File lightdm-elogind.sh
I'm not sure this script is necessary. It was necessary in the past, and it doesn't hurt anyway, so I still just run it.
File configure-postfix.sh
This is the newest thing I can think of. It sets up postfix to connect to my smtp relay on my network that handles the gmail oauth2 authentication.
File send-email-ip-address.sh
Looking at this now, I'm shocked and embarrassed in the complexity I've wrapped around sending an email.
Comments