X-Git-Url: https://iankelling.org/git/?p=automated-distro-installer;a=blobdiff_plain;f=faiserver-setup;h=2ecf45b69fe0b4d813d7520aaa04704047e3097f;hp=b9b6d74c8d535e25d691999154d478666137b176;hb=c2a77d08447f1ff55a23d6022a24e97b0583f1fd;hpb=affd7d3cdd0671dcca07f29de9c86b5e3b57ea1f diff --git a/faiserver-setup b/faiserver-setup index b9b6d74..2ecf45b 100755 --- a/faiserver-setup +++ b/faiserver-setup @@ -1,9 +1,27 @@ #!/bin/bash +# Copyright (C) 2016 Ian Kelling +# This program is free software; you can redistribute it and/or +# modify it under the terms of the GNU General Public License +# as published by the Free Software Foundation; either version 2 +# of the License, or (at your option) any later version. + +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. + +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. + +# Usage: faiserver-setup +# # Initial setup of a fai server on debian. works on localhost. # Set's the current ip as the tftp server. I vaguely remember -# that using a hostname does not work -# Requires changing dns to point faiserver and running fai-redep +# that using a hostname does not work. +# Separate from running this, faiserver needs to be setup in dns +# to point to whatever host this is run on. set -eE -o pipefail trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR @@ -11,47 +29,84 @@ trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR [[ $EUID == 0 ]] || exec sudo "${BASH_SOURCE}" "$@" e() { echo "$@"; "$@"; } + +# tried with stretch at one point, but jessie works for everything, +# so no point in changing it. Leaving some code to deal with +# stretch hanging around as it will eventually become stable. +base=jessie +sed="sed -ri --follow-symlinks" + + +if [[ $base == jessie ]]; then + wget -O - http://fai-project.org/download/074BCDE4.asc | apt-key add - + cat >/etc/apt/sources.list.d/fai.list <<'EOF' +deb http://fai-project.org/download jessie koeln +EOF +else + # if we use stretch, no need for fai-project repo. + rm -f /etc/apt/sources.list.d/fai.list +fi + # for ubuntu: #add-apt-repository -y ppa:fai/ppa # for debian: -wget -O - http://fai-project.org/download/074BCDE4.asc | apt-key add - -cat >/etc/apt/sources.list.d/fai.list <<'EOF' -deb http://fai-project.org/download jessie koeln -EOF + apt-get update # all the dependencies except the dhcp server deps="$(apt-cache show fai-quickstart | grep ^Depends: |head -n 1|\ sed -r 's/^Depends:|,|\|[^,]+|isc-dhcp-server//g')" -to_install=() -for pkg in $deps; do - dpkg -s $pkg &>/dev/null && continue ||: - to_install+=($pkg) - echo $pkg >>/etc/fai/fai-manually-installed-packages -done -if [[ $to_install ]]; then - apt-get -y install ${to_install[@]} + +# Relevant packages from fai-quickstart depends and fai-server recommends. +# I especially do not wait isc-dhcp-server or an inetd +apt-get install -y fai-doc nfs-kernel-server tftpd-hpa tar reprepro squashfs-tools binutils +apt-get install -y --no-recommends fai-server + +r=http://http.us.debian.org/debian +# like default, but scrap httpredir, and nonfree. +# All my systems should be able to get along without nonfree +# for a base working system afaik. +dd of=/etc/fai/apt/sources.list </etc/fai/apt/preferences <<'EOF' +Package: tar +Pin: release a=jessie-backports +Pin-Priority: 500 +EOF fi -sed="sed -ri --follow-symlinks" -$sed 's/^#deb/deb/' /etc/fai/apt/sources.list + +# tried out a stretch base, doesn't work yet. +$sed -f - /etc/fai/nfsroot.conf </dev/null; then - $sed '/^PACKAGES install$/a cryptsetup' /etc/fai/NFSROOT + $sed '/^PACKAGES install$/a cryptsetup' /etc/fai/NFSROOT fi -fai-setup -vf +e fai-setup -vf { head -n 1 /srv/fai/nfsroot/root/.ssh/known_hosts | awk '{print $1}' \ - | tr '\n' ' '; ssh-keyscan localhost | grep -o "ecdsa-sha2-nistp256.*"; \ - } >>/srv/fai/nfsroot/root/.ssh/known_hosts - -# this does not alter the config on a new install -$sed 's#^([[:space:]]*TFTP_DIRECTORY[[:space:]]*=).*#\1"/srv/tftp"#' \ - /etc/default/tftpd-hpa - -service tftpd-hpa restart + | tr '\n' ' '; ssh-keyscan localhost | grep -o "ecdsa-sha2-nistp256.*"; \ + } >>/srv/fai/nfsroot/root/.ssh/known_hosts # initially did the basic fai-chboot -Iv $std_arg default # but found in console that it wanted to mount nfsroot @@ -63,17 +118,6 @@ service tftpd-hpa restart # Add debug to -f flag for more verbose output. -std_arg="-u nfs://faiserver/srv/fai/config" -e fai-chboot -Iv $std_arg default # reset so we are idempotent -kernel=$(fai-chboot -L '^default$' | awk '{print $3}') -type -t host &>/dev/null || apt-get -y install dnsutils -# resolve host using gateway address -my_ip=$(host faiserver $(route -n | sed -rn 's/^(0\.){3}0\s+(\S+).*/\2/p') | \ - sed -rn 's/^\S+ has address //p') -k_args=$(fai-chboot -L '^default$' | \ - sed -r "s/^(\S+\s+){3}(.*root=)(.*)/\2$my_ip:\3/") -e fai-chboot -k "$k_args" -v -f verbose,sshd,createvt,reboot $std_arg $kernel default - # make the faiserver also the apt proxy server apt-get -y install apt-cacher-ng