aboutsummaryrefslogtreecommitdiff
path: root/kvmx-create
blob: f2709f66644dd8c2ecf0c6615113514e69efb1c6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
#!/bin/bash
#
# System installer, vmdebootstrap version.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License along with this program.  If not, see
# <http://www.gnu.org/licenses/>.


# Parameters
BASENAME="`basename $0`"
DIRNAME="`dirname $0`"

# Load configuration
function kvmx_config_load {
  if [ ! -z "$1" ] && [ -e "$1" ]; then
    source $1
  fi
}

# Read a parameter from user
function kvmx_user_input {
  local input
  local param="$1"
  local default="$2"
  shift 2

  if echo $param | grep -q 'passwd'; then
    read -s -rep "$* (defaults to $default): " input
  else
    read -rep "$* (defaults to $default): " input
  fi

  if [ -z "$input" ]; then
    export $param="$default"
  else
    export $param="$input"
  fi
}

# Get a configuration parameter if not previously defined by a sourced file
function kvmx_user_config {
  local param="$1"
  local default="$2"
  shift 2

  if [ -z "`eval echo '$'$param`" ]; then
    kvmx_user_input $param $default $*
  fi
}

# Install a package
function kvmx_install_package {
  if [ -z "$1" ]; then
    return
  fi

  dpkg -s $1 &> /dev/null

  if [ "$?" == "1" ]; then
    echo "Installing package $1..."
    DEBIAN_FRONTEND=noninteractive $SUDO apt-get install $1 -y || exit 1
  fi
}

# Abort on error
function kvmx_exit_on_error {
  if [ "$?" != "0" ]; then
    echo "Error: $*"
    exit 1
  fi
}

# Run a command using sudo and abort on error
function kvmx_sudo_run {
  if [ "`whoami`" != 'root' ]; then
    SUDO="sudo"
  fi

  $SUDO $*
  kvmx_exit_on_error $*
}

# Make sure there is provision config.
function kvmx_config {
  kvmx_user_config   image             /var/cache/qemu/debian/box.img   "Destination image"
  kvmx_user_config   size              3G                               "Image size"
  kvmx_user_config   format            qcow2                            "Image format: raw or qcow2"
  kvmx_user_config   method            custom                           "Bootstrap method: custom or vmdeboostrap"
  kvmx_user_config   hostname          machine                          "Hostname"
  kvmx_user_config   domain            example.org                      "Domain"
  kvmx_user_config   arch              amd64                            "System arch"
  kvmx_user_config   version           stretch                          "Distro version"
  kvmx_user_config   mirror            http://http.debian.net/debian/   "Debian mirror"
}

# Load config file
kvmx_config_load $1

# Get config parameters
kvmx_config

# Check
if [ -e "$image" ]; then
  echo "error: $image already exists."
  exit 1
fi

# Ensure base folder exists
kvmx_sudo_run mkdir -p `dirname $image`

#
# vmdebootstrap version
#
function kvmx_create_vmdebootstrap {
  # Check for requirements
  for req in vmdebootstrap mbr; do
    kvmx_install_package $req
  done

  # Image format
  if [ "$format" == "qcow2" ]; then
    format="--convert-qcow2"
  else
    formt=""
  fi

  # Run
  kvmx_sudo_run vmdebootstrap --verbose --image=$image --size=$size --distribution=$version \
    --mirror=$mirror --arch=$arch --hostname=$hostname.$domain    \
    --grub $format

  # Fix permissions
  kvmx_sudo_run chown -R `whoami`. `dirname $image`

  # Cleanup
  kvmx_sudo_run rm debootstrap.log
  kvmx_sudo_run rm ${image}.raw
}

#
# Custom version
#
function kvmx_create_custom {
  WORK="`mktemp -d`"

  # Check for requirements.
  for req in debootstrap grub-pc parted; do
    kvmx_install_package $req
  done

  echo "Creating image..."
  #kvmx_sudo_run dd if=/dev/zero of=$image bs=$size count=1
  kvmx_sudo_run qemu-img create -f raw $image $size
  device="`sudo losetup --find --show $image`"

  echo "Partitioning image at $device..."
  kvmx_sudo_run parted -s -- $device mklabel gpt
  kvmx_sudo_run parted -s -- $device unit    MB mkpart    non-fs 2  3
  kvmx_sudo_run parted -s -- $device set     1  bios_grub on
  kvmx_sudo_run parted -s -- $device unit    MB mkpart    ext2   3 -1
  kvmx_sudo_run parted -s -- $device set     2  boot on
  kvmx_sudo_run mkfs.ext4 ${device}p2
  kvmx_sudo_run mount ${device}p2 $WORK/

  # Non-interactive installation
  APT_INSTALL="kvmx_sudo_run LC_ALL=C DEBIAN_FRONTEND=noninteractive chroot $WORK/ apt-get install -y"

  # Initial system install.
  echo "Installing base system..."
  kvmx_sudo_run LC_ALL=C DEBIAN_FRONTEND=noninteractive debootstrap --arch=$arch $version $WORK/ $mirror

  # Initial configuration.
  echo "Applying initial configuration..."
  kvmx_sudo_run mount none -t proc  $WORK/proc
  kvmx_sudo_run mount none -t sysfs $WORK/sys
  kvmx_sudo_run mount -o bind /dev/ $WORK/dev

  # Hostname configuration.
  echo $hostname.$domain     | $SUDO tee    $WORK/etc/hostname > /dev/null
  echo "127.0.0.1 localhost" | $SUDO tee -a $WORK/etc/hosts    > /dev/null

  # This ordering is important for facter correctly guess the domain name
  echo "127.0.0.1 $hostname.$domain $hostname" | $SUDO tee -a $WORK/etc/hosts > /dev/null

  # Invert hostname contents to avoid http://projects.puppetlabs.com/issues/2533
  tac $WORK/etc/hosts | $SUDO tee $WORK/etc/hosts.new > /dev/null
  kvmx_sudo_run mv $WORK/etc/hosts.new $WORK/etc/hosts

  # Fstab
  echo "/dev/vda2 / ext4 errors=remount-ro 0 1" | $SUDO tee $WORK/etc/fstab > /dev/null

  # Locale
  $APT_INSTALL locales
  echo "LANG=$LANG"  | $SUDO tee    $WORK/etc/default/locale > /dev/null
  echo "$LANG UTF-8" | $SUDO tee -a $WORK/etc/locale.gen     > /dev/null
  kvmx_sudo_run chroot $WORK/ locale-gen

  # Initial upgrade
  echo "Applying initial upgrades..."
  kvmx_sudo_run chroot $WORK/ apt-get update
  kvmx_sudo_run chroot $WORK/ apt-get upgrade -y

  if [ "$arch" == "i386" ]; then
    kernel_arch="686"
  else
    kernel_arch="$arch"
  fi

  # Basic packages
  $APT_INSTALL screen cron lsb-release openssl -y
  $APT_INSTALL spice-vdagent qemu-guest-agent

  # Kernel
  $APT_INSTALL linux-image-$kernel_arch -y

  # OpenSSH
  $APT_INSTALL openssh-server -y
  kvmx_sudo_run chroot $WORK/ service ssh stop

  # Sudo
  echo "Installing sudo..."
  $APT_INSTALL sudo -y
  echo "%sudo ALL=NOPASSWD: ALL" | $SUDO tee $WORK/etc/sudoers.d/local > /dev/null
  kvmx_sudo_run chmod 440 $WORK/etc/sudoers.d/local

  # Initscript
  cat <<-EOF | $SUDO tee $WORK/etc/rc.local > /dev/null
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

# Somehow it is starting before DBUS and then crashing, so we try to start again
/usr/sbin/service spice-vdagent start

# Ensure file sharing between host and guest
if [ ! -z "$shared_folder_mountpoint" ]; then
  /bin/mkdir -p $shared_folder_mountpoint
  /bin/mount -t 9p -o trans=virtio shared $shared_folder_mountpoint -oversion=9p2000.L,posixacl,cache=loose
fi

exit 0
EOF

  # Root password
  echo 'root:root' | kvmx_sudo_run chroot $WORK/ chpasswd

  # Initial user
  kvmx_sudo_run chroot $WORK/ useradd user -G sudo -s /bin/bash
  kvmx_sudo_run chroot $WORK/ mkdir -p /home/user/.ssh
  kvmx_sudo_run chroot $WORK/ chmod 700 /home/user/.ssh
  kvmx_sudo_run cp $DIRNAME/ssh/insecure_private_key.pub $WORK/home/user/.ssh/authorized_keys
  kvmx_sudo_run chroot $WORK/ chmod 600 /home/user/.ssh/authorized_keys
  kvmx_sudo_run touch  $WORK/home/user/.hushlogin
  kvmx_sudo_run chroot $WORK/ chown -R user.user /home/user
  echo 'user:user' | kvmx_sudo_run chroot $WORK/ chpasswd

  # Networking
  cat <<-EOF | $SUDO tee $WORK/etc/network/interfaces.d/ens3 > /dev/null
allow-hotplug ens3
iface ens3 inet dhcp
EOF

  # Grub
  $APT_INSTALL grub-pc -y
  kvmx_sudo_run chroot $WORK/ update-grub
  kvmx_sudo_run chroot $WORK/ grub-install $device

  # Teardown
  kvmx_sudo_run umount $WORK/proc
  kvmx_sudo_run umount $WORK/sys
  kvmx_sudo_run umount $WORK/dev
  kvmx_sudo_run umount $WORK
  kvmx_sudo_run rmdir  $WORK
  kvmx_sudo_run losetup -d $device

  # Image conversion
  if [ "$format" == "qcow2" ]; then
    echo "Converting raw image to qcow2..."
    kvmx_sudo_run mv $image $image.raw
    kvmx_sudo_run qemu-img convert -O qcow2 ${image}.raw $image
    kvmx_sudo_run rm ${image}.raw
  fi

  # Fix permissions
  kvmx_sudo_run chown -R `whoami`. `dirname $image`
}

# Dispatch
if [ "$method" == "custom" ]; then
  kvmx_create_custom
elif [ "$method" == "vmdebootstrap" ]; then
  kvmx_create_vmdebootstrap
else
  echo "$BASENAME: invalid method $method"
  exit 1
fi