Projet

Général

Profil

Preseed » Historique » Version 5

Laurent GUERBY, 16/06/2015 19:13

1 1 Laurent GUERBY
{{>toc}}
2 1 Laurent GUERBY
3 1 Laurent GUERBY
h1. Preseed
4 1 Laurent GUERBY
5 1 Laurent GUERBY
h2. Documentation
6 1 Laurent GUERBY
7 1 Laurent GUERBY
This page document a preseed setup in an environment where you already have a DHCP server. The idea is to add a PXE server that will do only the PXE part of the work.
8 1 Laurent GUERBY
9 1 Laurent GUERBY
Assuming :
10 1 Laurent GUERBY
* on the PXE server : apt-get install dnsmasq 
11 1 Laurent GUERBY
* you have a DHCP (no PXE) server at 10.2.255.254
12 1 Laurent GUERBY
* your PXE server interface is eth0
13 1 Laurent GUERBY
* your PXE server IP on eth0 is 10.2.137.101
14 1 Laurent GUERBY
* you have an http proxy which will be useful to cache locally all downloaded packages, here : http://cache.ut-capitole.fr:3128
15 5 Laurent GUERBY
* the machine to be installed have an "sda" large enough for a 20GB (20000000) bootable root partition
16 1 Laurent GUERBY
17 1 Laurent GUERBY
h2. Files
18 1 Laurent GUERBY
19 2 Laurent GUERBY
h3. dnsmasq
20 2 Laurent GUERBY
21 1 Laurent GUERBY
<pre>
22 1 Laurent GUERBY
root@c1:~# cat /etc/dnsmasq.d/pxeu.conf
23 1 Laurent GUERBY
# disable dns
24 1 Laurent GUERBY
port=0
25 1 Laurent GUERBY
26 1 Laurent GUERBY
interface=eth0
27 1 Laurent GUERBY
28 1 Laurent GUERBY
# replace with real dhcp server
29 1 Laurent GUERBY
#dhcp-range=192.168.1.0,proxy
30 1 Laurent GUERBY
dhcp-range=10.2.255.254,proxy
31 1 Laurent GUERBY
32 1 Laurent GUERBY
# Tell PXE clients not to use multicast discovery
33 1 Laurent GUERBY
dhcp-option=vendor:PXEClient,6,2b
34 1 Laurent GUERBY
dhcp-no-override
35 1 Laurent GUERBY
36 1 Laurent GUERBY
# Enable this for better debugging
37 1 Laurent GUERBY
#log-dhcp
38 1 Laurent GUERBY
39 1 Laurent GUERBY
enable-tftp
40 1 Laurent GUERBY
tftp-root=/var/lib/tftpboot
41 1 Laurent GUERBY
pxe-service=x86PC, "Install Linux", pxelinux
42 1 Laurent GUERBY
</pre>
43 1 Laurent GUERBY
44 2 Laurent GUERBY
h3. tftpboot
45 2 Laurent GUERBY
46 2 Laurent GUERBY
Run the following script:
47 2 Laurent GUERBY
48 1 Laurent GUERBY
<pre>
49 1 Laurent GUERBY
root@c1:~# cat pxe-setup.sh 
50 1 Laurent GUERBY
#!/bin/bash
51 1 Laurent GUERBY
set -x
52 1 Laurent GUERBY
 
53 1 Laurent GUERBY
YOURMIRROR=archive.ubuntu.com
54 1 Laurent GUERBY
ARCH=amd64
55 1 Laurent GUERBY
VENDOR=ubuntu
56 1 Laurent GUERBY
DIST=trusty
57 1 Laurent GUERBY
DEST=/var/lib/tftpboot
58 1 Laurent GUERBY
 
59 1 Laurent GUERBY
mkdir -p $DEST
60 1 Laurent GUERBY
cd $DEST
61 1 Laurent GUERBY
 
62 1 Laurent GUERBY
rm -rf netboot.tar.gz Release* SHA* ${VENDOR}-installer version.info pxelinux.0 pxelinux.cfg ldlinux.c32
63 1 Laurent GUERBY
wget -q http://"$YOURMIRROR"/${VENDOR}/dists/${DIST}/main/installer-"$ARCH"/current/images/netboot/netboot.tar.gz
64 1 Laurent GUERBY
wget -q http://"$YOURMIRROR"/${VENDOR}/dists/${DIST}/main/installer-"$ARCH"/current/images/SHA256SUMS
65 1 Laurent GUERBY
wget -q http://"$YOURMIRROR"/${VENDOR}/dists/${DIST}/Release
66 1 Laurent GUERBY
wget -q http://"$YOURMIRROR"/${VENDOR}/dists/${DIST}/Release.gpg
67 1 Laurent GUERBY
tar -xzf netboot.tar.gz
68 1 Laurent GUERBY
</pre>
69 1 Laurent GUERBY
70 2 Laurent GUERBY
h3. preseed.cfg
71 2 Laurent GUERBY
72 1 Laurent GUERBY
<pre>
73 1 Laurent GUERBY
root@c1:/var/lib/tftpboot# cat preseed.cfg
74 1 Laurent GUERBY
### Localization
75 1 Laurent GUERBY
# Preseeding only locale sets language, country and locale.
76 1 Laurent GUERBY
d-i debian-installer/locale string en_US.UTF-8
77 1 Laurent GUERBY
78 1 Laurent GUERBY
# Keyboard selection.
79 1 Laurent GUERBY
# Disable automatic (interactive) keymap detection.
80 1 Laurent GUERBY
d-i console-setup/ask_detect boolean false
81 1 Laurent GUERBY
d-i keyboard-configuration/layoutcode string fr
82 1 Laurent GUERBY
83 1 Laurent GUERBY
### Network configuration
84 1 Laurent GUERBY
# netcfg will choose an interface that has link if possible. This makes it
85 1 Laurent GUERBY
# skip displaying a list if there is more than one interface.
86 1 Laurent GUERBY
d-i netcfg/choose_interface select auto
87 1 Laurent GUERBY
88 1 Laurent GUERBY
# Just in case our DHCP server is busy.
89 1 Laurent GUERBY
d-i netcfg/dhcp_timeout string 60
90 1 Laurent GUERBY
91 1 Laurent GUERBY
# Any hostname and domain names assigned from dhcp take precedence over
92 1 Laurent GUERBY
# values set here. However, setting the values still prevents the questions
93 1 Laurent GUERBY
# from being shown, even if values come from dhcp.
94 1 Laurent GUERBY
d-i netcfg/get_hostname string unassigned-hostname
95 1 Laurent GUERBY
d-i netcfg/get_domain string unassigned-domain
96 1 Laurent GUERBY
97 1 Laurent GUERBY
# Disable that annoying WEP key dialog.
98 1 Laurent GUERBY
d-i netcfg/wireless_wep string
99 1 Laurent GUERBY
100 1 Laurent GUERBY
# Always install the server kernel
101 1 Laurent GUERBY
d-i	base-installer/kernel/override-image string linux-server
102 1 Laurent GUERBY
103 1 Laurent GUERBY
### Mirror settings
104 1 Laurent GUERBY
# Alternatively: by default, the installer uses CC.archive.ubuntu.com where
105 1 Laurent GUERBY
# CC is the ISO-3166-2 code for the selected country. You can preseed this
106 1 Laurent GUERBY
# so that it does so without asking.
107 1 Laurent GUERBY
d-i mirror/http/mirror select archive.ubuntu.com
108 1 Laurent GUERBY
d-i mirror/http/proxy string http://cache.ut-capitole.fr:3128
109 1 Laurent GUERBY
110 1 Laurent GUERBY
### Clock and time zone setup
111 1 Laurent GUERBY
# Controls whether or not the hardware clock is set to UTC.
112 1 Laurent GUERBY
d-i clock-setup/utc boolean true
113 1 Laurent GUERBY
114 1 Laurent GUERBY
# You may set this to any valid setting for $TZ; see the contents of
115 1 Laurent GUERBY
# /usr/share/zoneinfo/ for valid values.
116 1 Laurent GUERBY
d-i time/zone string Etc/UTC
117 1 Laurent GUERBY
118 1 Laurent GUERBY
# Controls whether to use NTP to set the clock during the install
119 1 Laurent GUERBY
d-i clock-setup/ntp boolean true
120 1 Laurent GUERBY
121 1 Laurent GUERBY
### Partitioning
122 1 Laurent GUERBY
d-i partman-auto/disk string /dev/sda
123 1 Laurent GUERBY
124 1 Laurent GUERBY
# The presently available methods are:
125 1 Laurent GUERBY
# - regular: use the usual partition types for your architecture
126 1 Laurent GUERBY
# - lvm:     use LVM to partition the disk
127 1 Laurent GUERBY
# - crypto:  use LVM within an encrypted partition
128 1 Laurent GUERBY
d-i partman-auto/method string regular
129 1 Laurent GUERBY
130 1 Laurent GUERBY
# If one of the disks that are going to be automatically partitioned
131 1 Laurent GUERBY
# contains an old LVM configuration, the user will normally receive a
132 1 Laurent GUERBY
# warning. This can be preseeded away...
133 1 Laurent GUERBY
d-i partman-lvm/device_remove_lvm boolean true
134 1 Laurent GUERBY
# The same applies to pre-existing software RAID array:
135 1 Laurent GUERBY
d-i partman-md/device_remove_md boolean true
136 1 Laurent GUERBY
# And the same goes for the confirmation to write the lvm partitions.
137 1 Laurent GUERBY
d-i partman-lvm/confirm boolean true
138 1 Laurent GUERBY
139 1 Laurent GUERBY
# For LVM partitioning, you can select how much of the volume group to use
140 1 Laurent GUERBY
# for logical volumes.
141 1 Laurent GUERBY
#d-i partman-auto-lvm/guided_size string max
142 1 Laurent GUERBY
143 1 Laurent GUERBY
# You can choose one of the three predefined partitioning recipes:
144 1 Laurent GUERBY
# - atomic: all files in one partition
145 1 Laurent GUERBY
# - home:   separate /home partition
146 1 Laurent GUERBY
# - multi:  separate /home, /usr, /var, and /tmp partitions
147 1 Laurent GUERBY
# d-i partman-auto/choose_recipe select atomic
148 1 Laurent GUERBY
d-i partman-auto/expert_recipe string root :: 2048 30720 20000000 ext4 \
149 1 Laurent GUERBY
			$primary{ } $bootable{ } \
150 1 Laurent GUERBY
			method{ format } format{ } \
151 1 Laurent GUERBY
			use_filesystem{ } filesystem{ ext4 } \
152 1 Laurent GUERBY
			mountpoint{ / } .
153 1 Laurent GUERBY
154 1 Laurent GUERBY
partman-basicfilesystems partman-basicfilesystems/no_swap boolean false
155 1 Laurent GUERBY
d-i partman-basicfilesystems partman-basicfilesystems/no_swap boolean false 
156 1 Laurent GUERBY
157 1 Laurent GUERBY
# If you just want to change the default filesystem from ext3 to something
158 1 Laurent GUERBY
# else, you can do that without providing a full recipe.
159 1 Laurent GUERBY
d-i partman/default_filesystem string ext4
160 1 Laurent GUERBY
161 1 Laurent GUERBY
# This makes partman automatically partition without confirmation, provided
162 1 Laurent GUERBY
# that you told it what to do using one of the methods above.
163 1 Laurent GUERBY
d-i partman-partitioning/confirm_write_new_label boolean true
164 1 Laurent GUERBY
d-i partman/choose_partition select finish
165 1 Laurent GUERBY
d-i partman/confirm boolean true
166 1 Laurent GUERBY
d-i partman/confirm_nooverwrite boolean true
167 1 Laurent GUERBY
168 1 Laurent GUERBY
### Base system installation
169 1 Laurent GUERBY
### Account setup
170 1 Laurent GUERBY
171 1 Laurent GUERBY
d-i passwd/root-password password root
172 1 Laurent GUERBY
d-i passwd/root-password-again password root
173 1 Laurent GUERBY
174 1 Laurent GUERBY
# To create a normal user account.
175 1 Laurent GUERBY
d-i passwd/user-fullname string guest
176 1 Laurent GUERBY
d-i passwd/username string guest
177 1 Laurent GUERBY
d-i passwd/user-password password guest
178 1 Laurent GUERBY
d-i passwd/user-password-again password guest
179 1 Laurent GUERBY
180 1 Laurent GUERBY
181 1 Laurent GUERBY
182 1 Laurent GUERBY
# The installer will warn about weak passwords. If you are sure you know
183 1 Laurent GUERBY
# what you're doing and want to override it, uncomment this.
184 1 Laurent GUERBY
d-i user-setup/allow-password-weak boolean true
185 1 Laurent GUERBY
186 1 Laurent GUERBY
# Set to true if you want to encrypt the first user's home directory.
187 1 Laurent GUERBY
d-i user-setup/encrypt-home boolean false
188 1 Laurent GUERBY
189 1 Laurent GUERBY
### Apt setup
190 1 Laurent GUERBY
# You can choose to install restricted and universe software, or to install
191 1 Laurent GUERBY
# software from the backports repository.
192 1 Laurent GUERBY
#d-i apt-setup/restricted boolean true
193 1 Laurent GUERBY
#d-i apt-setup/universe boolean true
194 1 Laurent GUERBY
#d-i apt-setup/backports boolean true
195 1 Laurent GUERBY
# Uncomment this if you don't want to use a network mirror.
196 1 Laurent GUERBY
#d-i apt-setup/use_mirror boolean false
197 1 Laurent GUERBY
# Select which update services to use; define the mirrors to be used.
198 1 Laurent GUERBY
# Values shown below are the normal defaults.
199 1 Laurent GUERBY
#d-i apt-setup/services-select multiselect security
200 1 Laurent GUERBY
#d-i apt-setup/security_host string security.ubuntu.com
201 1 Laurent GUERBY
#d-i apt-setup/security_path string /ubuntu
202 1 Laurent GUERBY
203 1 Laurent GUERBY
# Additional repositories, local[0-9] available
204 1 Laurent GUERBY
#d-i apt-setup/local0/repository string \
205 1 Laurent GUERBY
#       http://local.server/ubuntu squeeze main
206 1 Laurent GUERBY
#d-i apt-setup/local0/comment string local server
207 1 Laurent GUERBY
# Enable deb-src lines
208 1 Laurent GUERBY
#d-i apt-setup/local0/source boolean true
209 1 Laurent GUERBY
# URL to the public key of the local repository; you must provide a key or
210 1 Laurent GUERBY
# apt will complain about the unauthenticated repository and so the
211 1 Laurent GUERBY
# sources.list line will be left commented out
212 1 Laurent GUERBY
#d-i apt-setup/local0/key string http://local.server/key
213 1 Laurent GUERBY
214 1 Laurent GUERBY
### Package selection
215 1 Laurent GUERBY
tasksel	tasksel/force-tasks	string standard,server,desktop
216 1 Laurent GUERBY
tasksel tasksel/first multiselect standard,server,desktop
217 1 Laurent GUERBY
218 1 Laurent GUERBY
# Individual additional packages to install
219 1 Laurent GUERBY
d-i pkgsel/include string openssh-server tftp-hpa software-properties-common python-apt python-pycurl python-setuptools
220 1 Laurent GUERBY
# Whether to upgrade packages after debootstrap.
221 1 Laurent GUERBY
# Allowed values: none, safe-upgrade, full-upgrade
222 1 Laurent GUERBY
d-i pkgsel/upgrade select full-upgrade
223 1 Laurent GUERBY
224 1 Laurent GUERBY
# Language pack selection
225 1 Laurent GUERBY
d-i pkgsel/language-packs multiselect en
226 1 Laurent GUERBY
227 1 Laurent GUERBY
# No language support packages
228 1 Laurent GUERBY
d-i	pkgsel/install-language-support	boolean false
229 1 Laurent GUERBY
230 1 Laurent GUERBY
# Policy for applying updates. May be "none" (no automatic updates),
231 1 Laurent GUERBY
# "unattended-upgrades" (install security updates automatically), or
232 1 Laurent GUERBY
# "landscape" (manage system with Landscape).
233 1 Laurent GUERBY
d-i pkgsel/update-policy select unattended-upgrades
234 1 Laurent GUERBY
235 1 Laurent GUERBY
# Verbose output and no boot splash screen
236 1 Laurent GUERBY
d-i	debian-installer/quiet	boolean false
237 1 Laurent GUERBY
d-i	debian-installer/splash	boolean false
238 1 Laurent GUERBY
239 1 Laurent GUERBY
### Boot loader installation
240 1 Laurent GUERBY
# This is fairly safe to set, it makes grub install automatically to the MBR
241 1 Laurent GUERBY
# if no other operating system is detected on the machine.
242 1 Laurent GUERBY
d-i grub-installer/only_debian boolean true
243 1 Laurent GUERBY
244 1 Laurent GUERBY
# This one makes grub-installer install to the MBR if it also finds some other
245 1 Laurent GUERBY
# OS, which is less safe as it might not be able to boot that other OS.
246 1 Laurent GUERBY
d-i grub-installer/with_other_os boolean true
247 1 Laurent GUERBY
248 1 Laurent GUERBY
# Wait for two seconds in grub
249 1 Laurent GUERBY
d-i	grub-installer/timeout string 2
250 1 Laurent GUERBY
251 1 Laurent GUERBY
# Use the following option to add additional boot parameters for the
252 1 Laurent GUERBY
# installed system (if supported by the bootloader installer).
253 1 Laurent GUERBY
# Note: options passed to the installer will be added automatically.
254 1 Laurent GUERBY
# d-i debian-installer/add-kernel-opts string vga=normal nomodeset audit=0 intel_idle.max_cstate=0 processor.max_cstate=1 cgroup_enable=memory swapaccount=1
255 1 Laurent GUERBY
256 1 Laurent GUERBY
### Finishing up the installation
257 1 Laurent GUERBY
# Avoid that last message about the install being complete.
258 1 Laurent GUERBY
d-i finish-install/reboot_in_progress note
259 1 Laurent GUERBY
260 1 Laurent GUERBY
#### Advanced options
261 1 Laurent GUERBY
### Running custom commands during the installation
262 1 Laurent GUERBY
# d-i preseeding is inherently not secure. Nothing in the installer checks
263 1 Laurent GUERBY
# for attempts at buffer overflows or other exploits of the values of a
264 1 Laurent GUERBY
# preconfiguration file like this one. Only use preconfiguration files from
265 1 Laurent GUERBY
# trusted locations! To drive that home, and because it's generally useful,
266 1 Laurent GUERBY
# here's a way to run any shell command you'd like inside the installer,
267 1 Laurent GUERBY
# automatically.
268 1 Laurent GUERBY
269 1 Laurent GUERBY
# This first command is run as early as possible, just after
270 1 Laurent GUERBY
# preseeding is read.
271 1 Laurent GUERBY
#d-i preseed/early_command string anna-install some-udeb
272 1 Laurent GUERBY
# This command is run immediately before the partitioner starts. It may be
273 1 Laurent GUERBY
# useful to apply dynamic partitioner preseeding that depends on the state
274 1 Laurent GUERBY
# of the disks (which may not be visible when preseed/early_command runs).
275 1 Laurent GUERBY
#d-i partman/early_command \
276 1 Laurent GUERBY
#       string debconf-set partman-auto/disk "$(list-devices disk | head -n1)"
277 1 Laurent GUERBY
# This command is run just before the install finishes, but when there is
278 1 Laurent GUERBY
# still a usable /target directory. You can chroot to /target and use it
279 1 Laurent GUERBY
# directly, or use the apt-install and in-target commands to easily install
280 1 Laurent GUERBY
# packages and run commands in the target system.
281 1 Laurent GUERBY
#d-i preseed/late_command string \
282 1 Laurent GUERBY
#    in-target tftp 172.16.0.1 -c get postpreseed.sh; \
283 1 Laurent GUERBY
#    in-target chmod +x postpreseed.sh; \
284 1 Laurent GUERBY
#    in-target /bin/bash -x postpreseed.sh; \
285 1 Laurent GUERBY
#    in-target rm -f postpreseed.sh;
286 1 Laurent GUERBY
</pre>
287 2 Laurent GUERBY
288 3 Laurent GUERBY
h3. default
289 3 Laurent GUERBY
290 3 Laurent GUERBY
<pre>
291 3 Laurent GUERBY
root@c1:/var/lib/tftpboot/pxelinux.cfg# cat default 
292 3 Laurent GUERBY
DEFAULT ubuntu-installer/amd64/boot-screens/vesamenu.c32
293 3 Laurent GUERBY
294 3 Laurent GUERBY
label Boot local disk
295 3 Laurent GUERBY
	LOCALBOOT 0x80
296 3 Laurent GUERBY
297 3 Laurent GUERBY
label install
298 3 Laurent GUERBY
	kernel ubuntu-installer/amd64/linux
299 3 Laurent GUERBY
	append auto=true priority=critical initrd=ubuntu-installer/amd64/initrd.gz locale=en_GB.UTF-8 kbd-chooser/method=gb netcfg/choose_interface=auto url=tftp://10.2.137.101/preseed.cfg
300 3 Laurent GUERBY
</pre>