X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai%2Fconfig%2Fscripts%2FCLOUD%2F99-cleanup;fp=fai%2Fconfig%2Fscripts%2FCLOUD%2F99-cleanup;h=35a104c253c79ef7268f2ad2b26408cbb85691bf;hb=056eb4e90e13b2d8f7cbb8c3b875f35bf0fa207e;hp=0000000000000000000000000000000000000000;hpb=a6f3eaed0a1eebb5c58853fb9faa8bfbec404de3;p=automated-distro-installer

diff --git a/fai/config/scripts/CLOUD/99-cleanup b/fai/config/scripts/CLOUD/99-cleanup
new file mode 100755
index 0000000..35a104c
--- /dev/null
+++ b/fai/config/scripts/CLOUD/99-cleanup
@@ -0,0 +1,20 @@
+#! /bin/bash
+
+fcopy /etc/init.d/expand-root
+if [ -f $target/files/etc/init.d/expand-root ]; then
+    $ROOTCMD insserv --default expand-root
+fi
+
+sed -i "s/PermitRootLogin yes/PermitRootLogin without-password/" $target/etc/ssh/sshd_config
+ainsl /etc/ssh/sshd_config 'ClientAliveInterval 120'
+
+ainsl -a /etc/modprobe.d/blacklist.conf 'blacklist pcspkr'
+ainsl -a /etc/modprobe.d/blacklist.conf 'blacklist floppy'
+
+rm -f $target/etc/resolv.conf $target/etc/udev/rules.d/70-persistent-net.rules $target/lib/udev/write_net_rules
+shred --remove $target/etc/ssh/ssh_host_*
+
+# FIXME: DHCP RFC3442 is used incorrect in Azure
+if [ -f $target/etc/dhcp/dhclient.conf ]; then
+    sed -ie 's,rfc3442-classless-static-routes,disabled-\0,' $target/etc/dhcp/dhclient.conf
+fi