From 99da5a442929d8e9a31af3133e19f347ce34b64e Mon Sep 17 00:00:00 2001 From: Matthieu Bessat Date: Tue, 19 Dec 2023 13:28:22 +0100 Subject: [PATCH] initial commit --- .gitignore | 2 + debian_install_config_default | 7 ++ files_to_serve/authorized_keys | 2 + files_to_serve/preseed.cfg | 180 +++++++++++++++++++++++++++++++++ install_machine.sh | 21 ++++ run_usernet.sh | 11 ++ setup_workspace.sh | 20 ++++ 7 files changed, 243 insertions(+) create mode 100644 .gitignore create mode 100644 debian_install_config_default create mode 100644 files_to_serve/authorized_keys create mode 100644 files_to_serve/preseed.cfg create mode 100755 install_machine.sh create mode 100755 run_usernet.sh create mode 100755 setup_workspace.sh diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..2993413 --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +tftp_container +machines/* diff --git a/debian_install_config_default b/debian_install_config_default new file mode 100644 index 0000000..d5a1e3c --- /dev/null +++ b/debian_install_config_default @@ -0,0 +1,7 @@ +serial 0 +prompt 0 +default autoinst +label autoinst +kernel debian-installer/amd64/linux +append initrd=debian-installer/amd64/initrd.gz auto=true priority=critical passwd/root-password-crypted=$1$xyz$DmhsqGaszAgaWtFIa9J... DEBIAN_FRONTEND=text url=http://10.0.2.2:4321/preseed.cfg log_host=10.0.2.2 log_port=10514 --- console=ttyS0 + diff --git a/files_to_serve/authorized_keys b/files_to_serve/authorized_keys new file mode 100644 index 0000000..aab0184 --- /dev/null +++ b/files_to_serve/authorized_keys @@ -0,0 +1,2 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG8+oYEPbYEZMfYF5EnFc70FgMJavh52eVCaqYWE9rZw mail@matthieubessat.fr + diff --git a/files_to_serve/preseed.cfg b/files_to_serve/preseed.cfg new file mode 100644 index 0000000..c9deebe --- /dev/null +++ b/files_to_serve/preseed.cfg @@ -0,0 +1,180 @@ +#_preseed_V1 +#### Contents of the preconfiguration file (for buster) +### Localization +# Preseeding only locale sets language, country and locale. +d-i debian-installer/locale string en_US + +# Keyboard selection. +d-i keyboard-configuration/xkb-keymap select us +# d-i keyboard-configuration/toggle select No toggling + +# netcfg will choose an interface that has link if possible. This makes it +# skip displaying a list if there is more than one interface. +d-i netcfg/choose_interface select auto + +# Any hostname and domain names assigned from dhcp take precedence over +# values set here. However, setting the values still prevents the questions +# from being shown, even if values come from dhcp. +d-i netcfg/get_hostname string unassigned-hostname +d-i netcfg/get_domain string unassigned-domain + +### Mirror settings +# If you select ftp, the mirror/country string does not need to be set. +#d-i mirror/protocol string ftp +d-i mirror/country string manual +d-i mirror/http/hostname string deb.debian.org +d-i mirror/http/directory string /debian +d-i mirror/http/proxy string + +# NOTICE +# WHY it say HTTP instead of HTTPS ?? + +# Suite to install. +d-i mirror/suite string bookworm + +### Account setup +# create root account for later +d-i passwd/root-login boolean true +# foobaristhebestpassword +d-i passwd/root-password-crypted password $1$xyz$22TskSoY/HlFnsqCYCaNx1 + +# Alternatively, to skip creation of a normal user account. +d-i passwd/make-user boolean false + +### Clock and time zone setup +# Controls whether or not the hardware clock is set to UTC. +d-i clock-setup/utc boolean true + +# You may set this to any valid setting for $TZ; see the contents of +# /usr/share/zoneinfo/ for valid values. +d-i time/zone string Europe/Paris + +# Controls whether to use NTP to set the clock during the install +d-i clock-setup/ntp boolean true +# NTP server to use. The default is almost always fine here. +#d-i clock-setup/ntp-server string ntp.example.com + +### Partitioning +## Partitioning example + +# Alternatively, you may specify a disk to partition. If the system has only +# one disk the installer will default to using that, but otherwise the device +# name must be given in traditional, non-devfs format (so e.g. /dev/sda +# and not e.g. /dev/discs/disc0/disc). +# For example, to use the first SCSI/SATA hard disk: +d-i partman-auto/disk string /dev/sda +# In addition, you'll need to specify the method to use. +# The presently available methods are: +# - regular: use the usual partition types for your architecture +# - lvm: use LVM to partition the disk +# - crypto: use LVM within an encrypted partition +d-i partman-auto/method string regular + +# If one of the disks that are going to be automatically partitioned +# contains an old LVM configuration, the user will normally receive a +# warning. This can be preseeded away... +d-i partman-lvm/device_remove_lvm boolean true +# The same applies to pre-existing software RAID array: +d-i partman-md/device_remove_md boolean true +# And the same goes for the confirmation to write the lvm partitions. +d-i partman-lvm/confirm boolean true +d-i partman-lvm/confirm_nooverwrite boolean true + +# You can choose one of the three predefined partitioning recipes: +# - atomic: all files in one partition +# - home: separate /home partition +# - multi: separate /home, /var, and /tmp partitions +d-i partman-auto/choose_recipe select atomic + +# This makes partman automatically partition without confirmation. +d-i partman-md/confirm boolean true +d-i partman-partitioning/confirm_write_new_label boolean true +d-i partman/choose_partition select finish +d-i partman/confirm boolean true +d-i partman/confirm_nooverwrite boolean true + +### Apt setup +# You can choose to install non-free and contrib software. +d-i apt-setup/non-free boolean true +d-i apt-setup/contrib boolean true + +d-i debian-installer/allow_unauthenticated boolean true + +# Add GPG keys +d-i debian-installer/cdrom/keyring-path string /usr/share/keyrings/debian-archive-keyring.gpg +d-i debian-installer/allow_unauthenticated_ssl boolean true +d-i debian-installer/allow_untrusted_ssl boolean true + +### Package selection + +# Individual additional packages to install, customise this for your needs +d-i pkgsel/include string binfmt-support debian-keyring openssh-server qemu-user-static + +### Boot loader installation + +# This is fairly safe to set, it makes grub install automatically to the MBR +# if no other operating system is detected on the machine. +d-i grub-installer/only_debian boolean true + +# This one makes grub-installer install to the MBR if it also finds some other +# OS, which is less safe as it might not be able to boot that other OS. +d-i grub-installer/with_other_os boolean true + +# Due notably to potential USB sticks, the location of the MBR can not be +# determined safely in general, so this needs to be specified: +d-i grub-installer/bootdev string /dev/sda +# To install to the first device (assuming it is not a USB stick): +#d-i grub-installer/bootdev string default + +### Finishing up the installation + +# Avoid that last message about the install being complete. +d-i finish-install/reboot_in_progress note + +# This is how to make the installer shutdown when finished, but not +# reboot into the installed system. +#d-i debian-installer/exit/halt boolean true +# This will power off the machine instead of just halting it. +d-i debian-installer/exit/poweroff boolean true + +### Preseeding other packages + +# Linux default command line: +grub-pc grub2/linux_cmdline_default string +# GRUB timeout; for internal use +grub-pc grub-pc/timeout string 1 + +#### Advanced options +### Running custom commands during the installation +# d-i preseeding is inherently not secure. Nothing in the installer checks +# for attempts at buffer overflows or other exploits of the values of a +# preconfiguration file like this one. Only use preconfiguration files from +# trusted locations! To drive that home, and because it's generally useful, +# here's a way to run any shell command you'd like inside the installer, +# automatically. + +# This first command is run as early as possible, just after +# preseeding is read. +#d-i preseed/early_command string anna-install some-udeb +# This command is run immediately before the partitioner starts. It may be +# useful to apply dynamic partitioner preseeding that depends on the state +# of the disks (which may not be visible when preseed/early_command runs). +#d-i partman/early_command \ +# string debconf-set partman-auto/disk "$(list-devices disk | head -n1)" +# This command is run just before the install finishes, but when there is +# still a usable /target directory. You can chroot to /target and use it +# directly, or use the apt-install and in-target commands to easily install +# packages and run commands in the target system. +d-i preseed/late_command string in-target mkdir /root/.ssh ; in-target chmod 0700 /root/.ssh ; in-target wget -O /root/.ssh/authorized_keys http://10.0.2.2:4321/authorized_keys + + +tasksel tasksel/first multiselect standard, ssh-server + +d-i base-installer/install-recommends boolean false + +d-i base-installer/kernel/image select linux-image-amd64 +d-i base-installer/initramfs-tools/driver-policy select dep + +d-i popularity-contest/participate boolean false + + diff --git a/install_machine.sh b/install_machine.sh new file mode 100755 index 0000000..a9204b0 --- /dev/null +++ b/install_machine.sh @@ -0,0 +1,21 @@ +#!/usr/bin/sh +# start http server +tmux new-session -d -s machine_install_log_server 'nc -ul 10514' + +# start http server +tmux new-session -d -s machine_install_http_server 'python3 -m http.server 4321' + +# run once qemu to install the system + +qemu-system-x86_64 \ + -accel kvm \ + -hda ./main.qcow \ + -cpu host \ + -netdev user,id=net0,net=10.0.2.0/24,hostname=sandboxhost,domainname=localdomain,tftp=./tftpserver_container,bootfile=/pxelinux.0 \ + -device e1000,netdev=net0,mac=52:54:98:76:54:32 \ + -boot once=n \ + -m 2048 \ + -nographic + +tmux kill-session -t machine_install_log_server +tmux kill-session -t machine_install_http_server diff --git a/run_usernet.sh b/run_usernet.sh new file mode 100755 index 0000000..3e8e28f --- /dev/null +++ b/run_usernet.sh @@ -0,0 +1,11 @@ +#!/usr/bin/bash +qemu-system-x86_64 \ + -accel kvm \ + -hda ./snapshot_02_working.img.qcow \ + -cpu host \ + -m 2048 \ + -nographic \ + -net user,hostfwd=tcp::42022-:22,hostfwd=tcp::42080-:80,hostfwd=tcp::42043-:443 \ + -net nic + +# foobaristhebestpassword diff --git a/setup_workspace.sh b/setup_workspace.sh new file mode 100755 index 0000000..3e09514 --- /dev/null +++ b/setup_workspace.sh @@ -0,0 +1,20 @@ +#!/usr/bin/sh + +# Download and extract netboot image + +mkdir -p machines/machine01.local + +mkdir machines/machine01.local/tftp_container + +wget \ + -O ./machines/machine01.local/tftp_container/netboot.tar.gz \ + https://deb.debian.org/debian/dists/bookworm/main/installer-amd64/current/images/netboot/netboot.tar.gz + +tar -xzvf ./machines/machine01.local/tftp_container/netboot.tar.gz -C ./machines/machine01.local/tftp_container/ + +# create base image +qemu-img create -f qcow2 ./machines/machine01.local/main.qcow 5G + +cp ./install_machine.sh ./machines/machine01.local/ + +cp ./debian_install_config_default ./machines/machine01.local/tftp_container/debian-installer/amd64/pxelinux.cfg/default