890829fdbb
As referenced on the arm list [1] and as already being done on the docker image we should remove the unique /etc/machine-id file on compose artifacts to ensure it's regenerated and unique on each deployed host/device. This unifies the process across all base ks so it's inherited for each artifact. [1] https://lists.fedoraproject.org/archives/list/arm@lists.fedoraproject.org/message/Q3YZVF5P2OLLPUJQ2LYZSTKWGGDIU6QO/ Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
94 lines
2.9 KiB
Plaintext
94 lines
2.9 KiB
Plaintext
# This is a minimal Fedora install designed to serve as a Docker base image.
|
|
#
|
|
# To keep this image minimal it only installs English language. You need to change
|
|
# yum configuration in order to enable other languages.
|
|
#
|
|
### Hacking on this image ###
|
|
# This kickstart is processed using Anaconda-in-ImageFactory (via Koji typically),
|
|
# but you can run imagefactory locally too.
|
|
#
|
|
# To do so, testing local changes, first you'll need a TDL file. I store one here:
|
|
# https://git.fedorahosted.org/cgit/fedora-atomic.git/tree/fedora-atomic-rawhide.tdl
|
|
#
|
|
# Then, once you have imagefactory and imagefactory-plugins installed, run:
|
|
#
|
|
# imagefactory --debug target_image --template /path/to/fedora-atomic-rawhide.tdl --parameter offline_icicle true --file-parameter install_script $(pwd)/fedora-docker-base.ks docker
|
|
#
|
|
|
|
cmdline
|
|
bootloader --disabled
|
|
timezone --isUtc --nontp Etc/UTC
|
|
rootpw --lock --iscrypted locked
|
|
user --name=none
|
|
|
|
keyboard us
|
|
zerombr
|
|
clearpart --all
|
|
part / --fstype ext4 --grow
|
|
network --bootproto=dhcp --device=link --activate --onboot=on
|
|
reboot
|
|
|
|
%packages --excludedocs --instLangs=en --nocore
|
|
bash
|
|
fedora-release
|
|
rootfiles
|
|
vim-minimal
|
|
dnf
|
|
dnf-yum # https://fedorahosted.org/fesco/ticket/1312#comment:29
|
|
sssd-client
|
|
#fakesystemd #TODO: waiting for review https://bugzilla.redhat.com/show_bug.cgi?id=1118740
|
|
-kernel
|
|
|
|
|
|
%end
|
|
|
|
%post --log=/tmp/anaconda-post.log
|
|
|
|
set -e
|
|
|
|
# Set the language rpm nodocs transaction flag persistently in the
|
|
# image yum.conf and rpm macros
|
|
|
|
# remove the user anaconda forces us to make
|
|
userdel -r none
|
|
|
|
LANG="en_US"
|
|
echo "%_install_lang $LANG" > /etc/rpm/macros.image-language-conf
|
|
|
|
# Carry these configs for both dnf and yum for users who are calling
|
|
# yum-deprecated directly. This will keep the experience between both
|
|
# consistent
|
|
awk '(NF==0&&!done){print "override_install_langs='$LANG'\ntsflags=nodocs";done=1}{print}' \
|
|
< /etc/yum.conf > /etc/yum.conf.new
|
|
mv /etc/yum.conf.new /etc/yum.conf
|
|
|
|
awk '(NF==0&&!done){print "override_install_langs='$LANG'\ntsflags=nodocs";done=1}{print}' \
|
|
< /etc/dnf/dnf.conf > /etc/dnf/dnf.conf.new
|
|
mv /etc/dnf/dnf.conf.new /etc/dnf/dnf.conf
|
|
|
|
echo "Import RPM GPG key"
|
|
releasever=$(rpm -q --qf '%{version}\n' fedora-release)
|
|
basearch=$(uname -i)
|
|
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
|
|
|
echo "# fstab intentionally empty for containers" > /etc/fstab
|
|
rm -f /usr/lib/locale/locale-archive
|
|
|
|
#Setup locale properly
|
|
localedef -v -c -i en_US -f UTF-8 en_US.UTF-8
|
|
|
|
rm -rf /var/cache/yum/*
|
|
rm -f /tmp/ks-script*
|
|
|
|
#Mask mount units and getty service so that we don't get login prompt
|
|
systemctl mask systemd-remount-fs.service dev-hugepages.mount sys-fs-fuse-connections.mount systemd-logind.service getty.target console-getty.service
|
|
|
|
# Fix /run/lock breakage since it's not tmpfs in docker
|
|
umount /run
|
|
systemd-tmpfiles --create --boot
|
|
|
|
# Remove machine-id on pre generated images
|
|
rm -f /etc/machine-id
|
|
|
|
%end
|