openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File config.sh of Package jeos (Revision 0ae0a105527f7ee6179400115e3f9e18)

Currently displaying revision 0ae0a105527f7ee6179400115e3f9e18 , Show latest

#!/bin/bash
#================
# FILE          : config.sh
#----------------
# PROJECT       : OpenSuSE KIWI Image System
# COPYRIGHT     : (c) 2006 SUSE LINUX Products GmbH. All rights reserved
#               :
# AUTHOR        : Marcus Schaefer <ms@suse.de>
#               :
# BELONGS TO    : Operating System images
#               :
# DESCRIPTION   : configuration script for SUSE based
#               : operating systems
#               :
#               :
# STATUS        : BETA
#----------------
#======================================
# Variables...
#--------------------------------------
DISTVERSION='15.3'
DISTURL='http://download.infra.opensuse.org'
GATEWAY='192.168.47.254'
DNS='192.168.47.101 192.168.47.102'
SYSLOG_SERVER='192.168.47.7'
MONITORING_SERVER="$SYSLOG_SERVER"
MAIL_SERVER='192.168.47.4'
#======================================
# Functions...
#--------------------------------------
test -f /.kconfig && . /.kconfig
test -f /.profile && . /.profile

#======================================
# Greeting...
#--------------------------------------
echo "Configure image: [$kiwi_iname]..."

#======================================
# add missing fonts
#--------------------------------------
# Systemd controls the console font now
echo FONT="eurlatgr.psfu" >> /etc/vconsole.conf

#======================================
# prepare for setting root pw, timezone
#--------------------------------------
echo "** reset machine settings"
rm -f /var/lib/zypp/AnonymousUniqueId \
      /var/lib/systemd/random-seed

#======================================
# Specify default systemd target
#--------------------------------------
baseSetRunlevel multi-user.target

#======================================
# Add missing gpg keys to rpm
#--------------------------------------
suseImportBuildKey

#======================================
# Setup baseproduct link
#--------------------------------------
suseSetupProduct

#======================================
# Remove all locales beside:
#--------------------------------------
baseStripLocales en de

#======================================
# Remove all translations beside:
#--------------------------------------
baseStripTranslations en de

#
# Repos
#
# /etc/zypp/zypp.conf
sed -e "s@# download.use_deltarpm.*@download.use_deltarpm = false@" \
    -e "s@.*solver.dupAllowVendorChange.*@solver.dupAllowVendorChange = false@" \
    -e "s@.*solver.onlyRequires.*@solver.onlyRequires = true@" \
    -i /etc/zypp/zypp.conf

# RPM keys
rm -rf /tmp/keys
mkdir /tmp/keys
# openSUSE:infrastructure key eae4fd92
cat << EOF >> /tmp/keys/t1
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.11.2 (NSS-3)
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=Bvhx
-----END PGP PUBLIC KEY BLOCK-----
EOF
rpm --import /tmp/keys/t1
rm -rf /tmp/keys

# add repos
rm -rf /etc/zypp/repos.d/
# standard repos (non-oss just added disabled)
zypper ar        --no-check           "${DISTURL}/distribution/leap/\$releasever/repo/oss/" repo-oss
zypper ar        --no-check --disable "${DISTURL}/distribution/leap/\$releasever/repo/non-oss/" repo-non-oss
zypper ar        --no-check --refresh "${DISTURL}/update/leap/\$releasever/backports/" repo-backports-update
zypper ar        --no-check --refresh "${DISTURL}/update/leap/\$releasever/oss/" repo-update-oss
zypper ar        --no-check --refresh "${DISTURL}/update/leap/\$releasever/sle/" repo-sle-update
zypper ar        --no-check --refresh --disable "${DISTURL}/update/leap/\$releasever/non-oss/" repo-update-non-oss
# special openSUSE heroes repo
zypper ar -p 100 --no-check --refresh "${DISTURL}/repositories/openSUSE:/infrastructure/openSUSE_Leap_\$releasever/" openSUSE_infrastructure

#
# Network
#
ifup lo

# DNS
# DNS
echo "Configuring DNS resolver options nd static DNS servers in /etc/sysconfig/network/config"
sed -e "s@NETCONFIG_DNS_RESOLVER_OPTIONS=@\"$.*$\"@NETCONFIG_DNS_RESOLVER_OPTIONS=\"attempts:1 timeout:1\"@" \
    -e "s@NETCONFIG_DNS_STATIC_SERVERS=@\"$.*$\"@NETCONFIG_DNS_STATIC_SERVERS=\"$DNS\"@" \
    -e "s@NETCONFIG_DNS_STATIC_SEARCHLIST=@\"$.*$\"@NETCONFIG_DNS_STATIC_SEARCHLIST=\"\"@" \
    -i /etc/sysconfig/network/config
echo "search infra.opensuse.org opensuse.org" >> /etc/resolv.conf
for server in $DNS; do 
  echo "nameserver $server" >> /etc/resolv.conf
done
echo "options attempts:1 timeout:1" >> /etc/resolv.conf

#
# Boot setup
#
# adapt dracut
echo "Don't wait for swap during boot"
echo "nowaitforswap=yes" >> /etc/dracut.conf.d/10-disable_swap.conf

# allow root login via serial console for debugging
echo "Allow root login vi serial console for debugging"
echo "" >> /etc/securetty
echo "# for debugging purposes" >> /etc/securetty
echo ttyS0 >> /etc/securetty
echo ttyS1 >> /etc/securetty
echo ttyS2 >> /etc/securetty
echo hvc0 >> /etc/securetty
echo console >> /etc/securetty

#
# Services
#
# remote logging
# /etc/hosts entry has to be done in the overlay-fs, not in kiwi
# echo "${SYSLOG_SERVER}    syslog.infra.opensuse.org syslog monitor" >> /etc/hosts
cat << EOF >> /etc/rsyslog.d/remote.conf
\$WorkDirectory /var/spool/rsyslogi
\$ActionQueueFileName uniqName
\$ActionQueueMaxDiskSpace 1g
\$ActionQueueSaveOnShutdown on
\$ActionQueueType LinkedList
\$ActionResumeRetryCount -1

*.* @@syslog.infra.opensuse.org
EOF

# Monitoring (nrpe)
sed -e "s@.*only_from.*@    only_from       = 127.0.0.1 $MONITORING_SERVER@" \
    -e "s@.*disable.*@    disable         = no@" -i /etc/xinetd.d/nrpe

#
# /etc/sysconfig
#
# security
echo "Configuring default file permissions"
sed -e "s@PERMISSION_SECURITY=.*@PERMISSION_SECURITY=\"secure local\"@" \
    -i /etc/sysconfig/security
chkstat --system --set

# cron
echo "Configuring cron to run each day at 19:30 local time"
sed -e "s@DAILY_TIME=.*@DAILY_TIME=\"19:30\"@" \
    -i /etc/sysconfig/cron

# postfix
echo "Setup postfix to  run locally"
sed -e "s@POSTFIX_RELAYHOST=.*@POSTFIX_RELAYHOST=\"[$MAIL_SERVER]\"@" \
    -e "s@POSTFIX_NULLCLIENT=.*@POSTFIX_NULLCLIENT=\"yes\"@" \
    -e "s@POSTFIX_BASIC_SPAM_PREVENTION=.*@POSTFIX_BASIC_SPAM_PREVENTION=\"hard\"@" \
    -e "s@POSTFIX_REGISTER_SLP=.*@POSTFIX_REGISTER_SLP=\"no\"@" \
    -e "s@POSTFIX_ADD_MYNETWORKS_STYLE=.*@POSTFIX_ADD_MYNETWORKS_STYLE=\"host\"@" \
    -i /etc/sysconfig/postfix
/usr/sbin/config.postfix

# enable important services
echo "enable important services"
for i in \
         chronyd.service \
         haveged.service \
         numad.service \
         postfix.service \
         rsyslogd.service \
         sshd.service \
         tuned.service \
         xinetd.service \
; do
    echo "enabling $i"
    baseInsertService $i
    /usr/bin/systemctl enable $i
done
echo "disable non-important services"
for i in \
         dbus-org.opensuse.Network.AUTO4.service \
         dbus-org.opensuse.Network.DHCP4.service \
         dbus-org.opensuse.Network.DHCP6.service \
         dbus-org.opensuse.Network.Nanny.service \
         mdcheck_continue.timer  \
         mdcheck_start.timer  \
         mdmonitor-oneshot.timer \
         lvm2-lvmpolld.socket \
         lvm2-lvmetad.service \
         lvm2-monitor.service \
         check-battery.timer \
; do
    echo "disabling $i"
    baseRemoveService $i
    /usr/bin/systemctl disable $i
done

exit 0

Places

File config.sh of Package jeos (Revision 0ae0a105527f7ee6179400115e3f9e18)

Places