X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=faiserver-setup;h=f60ec4791a5c58d0fda16878136cfc8db7e8ac1b;hb=645ab36988f8eed2e85d066bdf1ad8a12e7aabc0;hp=951ec8812ac609a7cde61911ac4d47bcffb731a2;hpb=1885f9677fdf2bfeac95285cf13a7d60273d096a;p=automated-distro-installer diff --git a/faiserver-setup b/faiserver-setup index 951ec88..f60ec47 100755 --- a/faiserver-setup +++ b/faiserver-setup @@ -30,6 +30,10 @@ Set's the current ip as the tftp server. I vaguely remember that using a hostname does not work. Separate from running this, faiserver needs to be setup in dns to point to whatever host this is run on. + +For running on arm, it expects Ian's fai-basefiles repository at +/a/bin/fai-basefiles + EOF exit $1 } @@ -41,18 +45,49 @@ esac e() { echo "$@"; "$@"; } # When stretch becomes stable, change this to stretch. -# I've tested this with stretch, it works, but notably, +# I\'ve tested this with stretch, it works, but notably, # the automatic basefile getting will be for stretch # instead of jessie, so if you install jessie, you need -# to setup the basefile and it's corresponding class. +# to setup the basefile and it\'s corresponding class. base=jessie sed="sed -ri --follow-symlinks" +if ! type -p wget &>/dev/null; then + apt-get install -y wget +fi + +armhf() { + [[ $(dpkg --print-architecture) == armhf ]] +} + if grep -xFq 'VERSION="9 (stretch)"' /etc/os-release; then # if we use stretch, no need for fai-project repo. # this will need to be updated when there is a codename # for stretch+1 rm -f /etc/apt/sources.list.d/fai.list +elif armhf; then + if apt-cache policy | grep o=Debian,a=testing,n=stretch &>/dev/null; then + cat >/etc/apt/sources.list.d/testing.list <<'EOF' +deb http://http.us.debian.org/debian testing main contrib non-free +deb-src http://http.us.debian.org/debian testing main contrib non-free + +deb http://security.debian.org/ testing/updates main contrib non-free +deb-src http://security.debian.org/ testing/updates main contrib non-free + +deb http://http.us.debian.org/debian testing-updates main contrib non-free +deb-src http://http.us.debian.org/debian testing-updates main contrib non-free +EOF + + cat >/etc/apt/preferences.d/fai <<'EOF' +Package: fai-server fai-client fai-doc +Pin: release a=testing +Pin-Priority: 500 + +Package: * +Pin: release a=testing +Pin-Priority: -10 +EOF + fi else wget -O - http://fai-project.org/download/074BCDE4.asc | apt-key add - cat >/etc/apt/sources.list.d/fai.list <<'EOF' @@ -69,21 +104,31 @@ fi apt-get update # Relevant packages from fai-quickstart depends and fai-server recommends. -# I especially do not wait isc-dhcp-server or an inetd -apt-get install -y fai-doc nfs-kernel-server tftpd-hpa tar reprepro squashfs-tools binutils +# I especially do not wait isc-dhcp-server or an inetd. Also excludes +# nfs-kernel-server. On an android chroot, we don\'t have nfs in the +# kernel, or the ability to install it. +pkgs=(fai-doc tftpd-hpa tar reprepro squashfs-tools binutils) +if modprobe nfsd &>/dev/null; then + pkgs+=(nfs-kernel-server) +else + pkgs+=(apache2) +fi + + +apt-get install -y ${pkgs[@]} apt-get install --no-install-recommends -y fai-server r=http://http.us.debian.org/debian # like default, but scrap httpredir, and nonfree. # All my systems should be able to get along without nonfree # for a base working system afaik. -dd of=/etc/fai/apt/sources.list </etc/fai/apt/sources.list <>/etc/fai/apt/sources.list <<'EOF' # uncommenting this from the defaults. it's got bug fixes. # repository that may contain newer fai packages for jessie deb http://fai-project.org/download jessie koeln @@ -91,7 +136,7 @@ deb http://fai-project.org/download jessie koeln deb http://ftp.debian.org/debian jessie-backports main EOF - # note, fai doesn't look at /etc/fai/apt/preferences.d + # note, fai doesn\'t look at /etc/fai/apt/preferences.d cat >/etc/fai/apt/preferences <<'EOF' Package: tar Pin: release a=jessie-backports @@ -101,8 +146,16 @@ fi # tried out a stretch base, doesn't work yet. +# $sed -f - /etc/fai/nfsroot.conf </dev/null; then $sed '/^PACKAGES install$/a cryptsetup' /etc/fai/NFSROOT fi -e fai-setup -e -vf + +if armhf; then + cd /srv/fai + rm -rf nfsroot + tar Jxf /a/bin/fai-basefiles/base.tar.xz + # background: Can't build the nfsroot on my arm system now. First, + # fai-make-nfsroot won't work out of the box. One idea to make it work + # is by installing qemu-user-static, then copying qemu-x86_64-static + # into the nfsroot, and prepending it to chroot commands in + # fai-make-nfsroot, but that fails in odd ways. ls has permissions + # problems on reading directories, various programs segfault + # immediately, cat can't open a file, etc. + + NFSROOT=/srv/fai/nfsroot + TFTPROOT=/srv/tftp/fai + + # test if our copy of setup_tftp has changed in fai-make-nfsroot, + # and if not, run it. + setup_tftp(){ + + # tftp environment + local pxebin + + # wheezy path + if [ -f $NFSROOT/usr/lib/PXELINUX/pxelinux.0 ]; then + pxebin=$NFSROOT/usr/lib/PXELINUX/pxelinux.0 + else + # jessie/stretch path + pxebin=$NFSROOT/usr/lib/syslinux/pxelinux.0 + fi + + rm -f $NFSROOT/boot/*.bak + mkdir -p $TFTPROOT/pxelinux.cfg + chmod a+r $NFSROOT/boot/initrd.img-* || die 9 "No initrd was created. Check the package name of the linux-image package in /etc/fai/NFSROOT." + cp -p $v $NFSROOT/boot/vmlinu?-* $NFSROOT/boot/initrd.img-* $TFTPROOT + cp -u $pxebin $TFTPROOT + if [ -f $NFSROOT/usr/lib/syslinux/modules/bios/ldlinux.c32 ]; then + cp -u $NFSROOT/usr/lib/syslinux/modules/bios/ldlinux.c32 $TFTPROOT + fi + if [ X$verbose = X1 ]; then + echo "TFTP environment prepared. Enable DHCP and start the TFTP daemon on root $TFTPROOT." + fi + } + diff -u <(type setup_tftp) <(cat <(sed -n '/^setup_tftp(){/,/^}/p' $(which fai-make-nfsroot) ) - <<'EOF' |bash +type setup_tftp +EOF +) + setup_tftp + + # -g causes skipping set_root_pw() in fai-make-nfsroot, -ag + # is the only way to make it run without chrooting. the options + # seem contradictory, but it works. + fai-setup -evag + +else + e fai-setup -e -vf + # make the faiserver also the apt proxy server + apt-get -y install apt-cacher-ng +fi + { head -n 1 /srv/fai/nfsroot/root/.ssh/known_hosts | awk '{print $1}' \ - | tr '\n' ' '; ssh-keyscan localhost | grep -o "ecdsa-sha2-nistp256.*"; \ + | tr '\n' ' '; ssh-keyscan localhost |& grep -o "ecdsa-sha2-nistp256.*"; \ } >>/srv/fai/nfsroot/root/.ssh/known_hosts # initially did the basic fai-chboot -Iv $std_arg default @@ -128,22 +240,20 @@ e fai-setup -e -vf # Add debug to -f flag for more verbose output. -# make the faiserver also the apt proxy server -apt-get -y install apt-cacher-ng # background on choosing apt-cacher-ng: # googling around a bit finds 2 main solutions: # http://askubuntu.com/questions/3503/best-way-to-cache-apt-downloads-on-a-lan -# apt-cacher-ng doesn't have zeroconf. -# It touts having minimal dependencies, but I don't care. -# The downside to squid-deb-proxy is that it's config is for specific repos, +# apt-cacher-ng doesn\'t have zeroconf. +# It touts having minimal dependencies, but I don\'t care. +# The downside to squid-deb-proxy is that it\'s config is for specific repos, # you have to add all the repos you use. # That is the main reason I use apt-cacher-ng. # It has a web portal, at http://faiserver:3142/acng-report.html # random fai note: as far as I can tell, profiles are just for putting -# in a selectable boot menu, which I don't want. +# in a selectable boot menu, which I don\'t want. # the logsave prompted because the hostname faiserver was uknown. # Here it was faiserver.lan when running from a faiserver vm.