X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=faiserver-setup;h=cf0da93e24d49b00eadba6e267ee7b1cce4c6d18;hb=0d7f79362d601b278236cd1c533c7333e342b54a;hp=bbc4f50c27fd2e83d2778f3a67579d53ec274f90;hpb=ee5c5007f3426705012f2943c345b1194a988c62;p=automated-distro-installer diff --git a/faiserver-setup b/faiserver-setup index bbc4f50..cf0da93 100755 --- a/faiserver-setup +++ b/faiserver-setup @@ -17,7 +17,7 @@ x="$(readlink -f "$BASH_SOURCE")"; source "${x%/*}/bash-trace" -[[ $EUID == 0 ]] || exec sudo "${BASH_SOURCE}" "$@" +[[ $EUID == 0 ]] || exec sudo -i "${BASH_SOURCE}" "$@" usage() { cat </dev/null; then apt-get install -y wget fi @@ -83,15 +90,15 @@ EOF elif grep -xFq 'VERSION="8 (jessie)"' /etc/os-release; then gpg -a --recv-keys 2BF8D9FE074BCDE4; gpg -a --export 2BF8D9FE074BCDE4 | apt-key add - cat >/etc/apt/sources.list.d/fai.list <<'EOF' -deb http://fai-project.org/download jessie koeln +deb https://fai-project.org/download jessie koeln EOF elif grep -xFq 'VERSION="9 (stretch)"' /etc/os-release || grep -iE 'flidas|xenail' /etc/os-release ; then # fai on ubuntu only has official support using the universe repo, but newer # tends to have less bugs. - gpg -a --recv-keys 2BF8D9FE074BCDE4; gpg -a --export 2BF8D9FE074BCDE4 | apt-key add - + gpg --keyserver hkp://pool.sks-keyservers.net -a --recv-keys 2BF8D9FE074BCDE4; gpg -a --export 2BF8D9FE074BCDE4 | apt-key add - cat >/etc/apt/sources.list.d/fai.list <<'EOF' -deb http://fai-project.org/download stretch koeln +deb https://fai-project.org/download stretch koeln EOF else rm -f /etc/apt/sources.list.d/fai.list @@ -104,6 +111,7 @@ apt-get update # nfs-kernel-server. On an android chroot, we don\'t have nfs in the # kernel, or the ability to install it. # xorriso is for running fai-cd -a, not strictly need for fai-server +# perl-tk is for fai-monitor-gui pkgs=(fai-doc tftpd-hpa tar reprepro squashfs-tools binutils xorriso) if modprobe nfsd &>/dev/null; then pkgs+=(nfs-kernel-server) @@ -113,7 +121,9 @@ fi apt-get install -y ${pkgs[@]} -apt-get install --no-install-recommends -y fai-server +# confnew since we edit /etc/fai/NFSROOT in an automated way +# fai-client is already a fai-server dependency, but make sure it gets upgraded +apt-get install --no-install-recommends -y -o Dpkg::Options::="--force-confnew" fai-server fai-client r=http://http.us.debian.org/debian # like default, but scrap httpredir, and nonfree. @@ -173,13 +183,17 @@ echo "FAI_FLAGS=verbose" >>/etc/fai/fai.conf if ! grep cryptsetup /etc/fai/NFSROOT &>/dev/null; then - $sed '/^PACKAGES install$/a cryptsetup' /etc/fai/NFSROOT + cat >>/etc/fai/NFSROOT <<'EOF' +# inserted by faserver-setup +PACKAGES install +cryptsetup +EOF fi if armhf; then cd /srv/fai rm -rf nfsroot - tar Jxf /a/bin/fai-basefiles/basefiles/STRETCH64.tar.xz + tar Jxf $BASEFILE_DIR/STRETCH64.tar.xz # background: Can't build the nfsroot on my arm system now. First, # fai-make-nfsroot won't work out of the box. One idea to make it work # is by installing qemu-user-static, then copying qemu-x86_64-static @@ -208,7 +222,10 @@ if armhf; then rm -f $NFSROOT/boot/*.bak mkdir -p $TFTPROOT/pxelinux.cfg - chmod a+r $NFSROOT/boot/initrd.img-* || die 9 "No initrd was created. Check the package name of the linux-image package in /etc/fai/NFSROOT." + if ! chmod a+r $NFSROOT/boot/initrd.img-*; then + echo "$0: error: No initrd was created. Check the package name of the linux-image package in /etc/fai/NFSROOT." + exit 1 + fi cp -p $v $NFSROOT/boot/vmlinu?-* $NFSROOT/boot/initrd.img-* $TFTPROOT cp -u $pxebin $TFTPROOT if [ -f $NFSROOT/usr/lib/syslinux/modules/bios/ldlinux.c32 ]; then @@ -232,14 +249,37 @@ EOF else # not armhf # note, this copies the -B arg to # /srv/fai/nfsroot/var/tmp/base.tar.xz - e fai-setup -evf -B /a/bin/fai-basefiles/basefiles/STRETCH64.tar.xz + e fai-setup -evf -B $BASEFILE_DIR/STRETCH64.tar.gz + # fai-setup expert mode avoids writing to /var/log/fai/variables + # at least config_src is needed for autodiscover + $sed '/^FAI_CONFIGDIR|^FAI_CONFIG_SRC|^LOGUSER/d' /var/log/fai/variables + tee -a /var/log/fai/variables <<'EOF' +LOGUSER=fai +FAI_CONFIGDIR=/srv/fai/config +FAI_CONFIG_SRC=nfs://faiserver/srv/fai/config +EOF # make the faiserver also the apt proxy server apt-get -y install apt-cacher-ng fi -{ head -n 1 /srv/fai/nfsroot/root/.ssh/known_hosts | awk '{print $1}' \ - | tr '\n' ' '; ssh-keyscan localhost |& grep -o "ecdsa-sha2-nistp256.*"; \ - } >>/srv/fai/nfsroot/root/.ssh/known_hosts +rm -f /srv/fai/nfsroot/root/.ssh/known_hosts +key=$(ssh-keyscan localhost |& grep -o "ecdsa-sha2-nistp256.*") +for ip in faiserver $(ip addr show up| grep -w '^ *inet' | awk '{print $2}'| cut -d / -f 1 | grep -vF 127.0.0.1); do + echo "$ip $key" >>/srv/fai/nfsroot/root/.ssh/known_hosts +done + + +# serial console +# mainly from +# https://wiki.archlinux.org/index.php/working_with_the_serial_console +# at runtime, running this from ssh worked: +# https://unix.stackexchange.com/questions/242778/what-is-the-easiest-way-to-configure-serial-port-on-linux +# stty -F /dev/ttyS0 115200 cs8 -cstopb -parenb +# /sbin/agetty 115200 ttyS0 linux +# dated info, but validation that this might work on debian: +# https://help.ubuntu.com/community/SerialConsoleHowto +# note in the nfsroot, systemd is not running. +echo "c0:2345:respawn:/sbin/agetty 115200 ttyS0 linux" >>/srv/fai/nfsroot/etc/inittab # initially did the basic fai-chboot -Iv $std_arg default # but found in console that it wanted to mount nfsroot