Fabian Vogt
33954f9c22
- Add rw to the default boot options to fix /etc/machine-id setup (bsc#1194484, see also gh#OSInside/kiwi#1650) - Install AppArmor pattern and audit (jsc#SLE-22705) OBS-URL: https://build.opensuse.org/package/show/Virtualization:Appliances:Images:openSUSE-Tumbleweed/kiwi-templates-JeOS?expand=0&rev=67
127 lines
4.4 KiB
Bash
127 lines
4.4 KiB
Bash
#!/bin/bash
|
|
# Copyright (c) 2021 SUSE LLC
|
|
#
|
|
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
# of this software and associated documentation files (the "Software"), to deal
|
|
# in the Software without restriction, including without limitation the rights
|
|
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
# copies of the Software, and to permit persons to whom the Software is
|
|
# furnished to do so, subject to the following conditions:
|
|
#
|
|
# The above copyright notice and this permission notice shall be included in
|
|
# all copies or substantial portions of the Software.
|
|
#
|
|
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
# SOFTWARE.
|
|
#
|
|
#======================================
|
|
# Functions...
|
|
#--------------------------------------
|
|
test -f /.kconfig && . /.kconfig
|
|
test -f /.profile && . /.profile
|
|
|
|
set -euxo pipefail
|
|
|
|
#======================================
|
|
# Greeting...
|
|
#--------------------------------------
|
|
echo "Configure image: [$kiwi_iname]-[$kiwi_profiles]..."
|
|
|
|
#======================================
|
|
# add missing fonts
|
|
#--------------------------------------
|
|
# Systemd controls the console font now
|
|
echo FONT="eurlatgr.psfu" >> /etc/vconsole.conf
|
|
|
|
#======================================
|
|
# prepare for setting root pw, timezone
|
|
#--------------------------------------
|
|
echo "** reset machine settings"
|
|
rm -f /etc/machine-id \
|
|
/var/lib/zypp/AnonymousUniqueId \
|
|
/var/lib/systemd/random-seed
|
|
|
|
#======================================
|
|
# Specify default systemd target
|
|
#--------------------------------------
|
|
baseSetRunlevel multi-user.target
|
|
|
|
#======================================
|
|
# Import trusted rpm keys
|
|
#--------------------------------------
|
|
suseImportBuildKey
|
|
|
|
#======================================
|
|
# Enable sshd
|
|
#--------------------------------------
|
|
systemctl enable sshd.service
|
|
|
|
if [ -e /etc/cloud/cloud.cfg ]; then
|
|
# not useful for cloud
|
|
systemctl mask systemd-firstboot.service
|
|
|
|
systemctl enable cloud-init-local
|
|
systemctl enable cloud-init
|
|
systemctl enable cloud-config
|
|
systemctl enable cloud-final
|
|
else
|
|
# Enable jeos-firstboot
|
|
mkdir -p /var/lib/YaST2
|
|
touch /var/lib/YaST2/reconfig_system
|
|
|
|
systemctl mask systemd-firstboot.service
|
|
systemctl enable jeos-firstboot.service
|
|
fi
|
|
|
|
# Enable firewalld if installed
|
|
if [ -x /usr/sbin/firewalld ]; then
|
|
systemctl enable firewalld.service
|
|
fi
|
|
|
|
#======================================
|
|
# Add repos from control.xml
|
|
#--------------------------------------
|
|
if grep -q opensuse /usr/lib/os-release; then
|
|
add-yast-repos
|
|
zypper --non-interactive rm -u live-add-yast-repos
|
|
fi
|
|
|
|
#=====================================
|
|
# Configure snapper
|
|
#-------------------------------------
|
|
if [ "${kiwi_btrfs_root_is_snapshot-false}" = 'true' ]; then
|
|
echo "creating initial snapper config ..."
|
|
# we can't call snapper here as the .snapshots subvolume
|
|
# already exists and snapper create-config doesn't like
|
|
# that.
|
|
cp /etc/snapper/config-templates/default /etc/snapper/configs/root \
|
|
|| cp /usr/share/snapper/config-templates/default /etc/snapper/configs/root
|
|
# Change configuration to match SLES12-SP1 values
|
|
sed -i -e '/^TIMELINE_CREATE=/s/yes/no/' /etc/snapper/configs/root
|
|
sed -i -e '/^NUMBER_LIMIT=/s/50/10/' /etc/snapper/configs/root
|
|
|
|
baseUpdateSysConfig /etc/sysconfig/snapper SNAPPER_CONFIGS root
|
|
fi
|
|
|
|
#=====================================
|
|
# Enable chrony if installed
|
|
#-------------------------------------
|
|
if [ -f /etc/chrony.conf ]; then
|
|
systemctl enable chronyd
|
|
fi
|
|
|
|
#======================================
|
|
# Disable recommends on virtual images (keep hardware supplements, see bsc#1089498)
|
|
#--------------------------------------
|
|
sed -i 's/.*solver.onlyRequires.*/solver.onlyRequires = true/g' /etc/zypp/zypp.conf
|
|
|
|
#======================================
|
|
# Disable installing documentation
|
|
#--------------------------------------
|
|
sed -i 's/.*rpm.install.excludedocs.*/rpm.install.excludedocs = yes/g' /etc/zypp/zypp.conf
|