From 59393410a693a3776f26f2def702d5e8f4ac6c99 Mon Sep 17 00:00:00 2001 From: David King Date: Tue, 5 Apr 2016 08:39:25 +0200 Subject: Initial commit --- config.ini | 20 ++++ fedora-atomic-workstation-foo-host.json | 166 ++++++++++++++++++++++++++++++++ fedora-rawhide.repo | 7 ++ group | 50 ++++++++++ passwd | 32 ++++++ treecompose-post.sh | 10 ++ 6 files changed, 285 insertions(+) create mode 100644 config.ini create mode 100644 fedora-atomic-workstation-foo-host.json create mode 100644 fedora-rawhide.repo create mode 100644 group create mode 100644 passwd create mode 100755 treecompose-post.sh diff --git a/config.ini b/config.ini new file mode 100644 index 0000000..b2c529c --- /dev/null +++ b/config.ini @@ -0,0 +1,20 @@ +[DEFAULT] + +outputdir = /home/david/checkout/atomic-workstation +# workdir = os.getcwd() +# srcdir = os.path.join(os.path.dirname(sys.argv[0], '..') +# rpmostree_cache_dir = %(workdir)s/%(release)s/cache +ostree_repo = %(outputdir)s/repo +os_name = fedora-atomic-workstation +os_pretty_name = Fedora Atomic Workstation +tree_name = foo-host +tree_file = %(os_name)s-%(tree_name)s.json +arch = x86_64 +release = rawhide +ref = %(os_name)s/%(release)s/%(arch)s/%(tree_name)s +# Force use of a closeish and fastish HTTP mirror, so that the HTTP proxy works +yum_baseurl = http://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/fedora/linux/development/rawhide/%(arch)s/os/ +yum_baseurl = http://dl.fedoraproject.org/pub/fedora/linux//development/rawhide/%(arch)s/os/ +# lorax_additional_repos = http://127.0.0.1/fedora-atomic/local-overrides +lorax_include_packages = fedora-productimg-atomic +docker_os_name = fedora diff --git a/fedora-atomic-workstation-foo-host.json b/fedora-atomic-workstation-foo-host.json new file mode 100644 index 0000000..4441174 --- /dev/null +++ b/fedora-atomic-workstation-foo-host.json @@ -0,0 +1,166 @@ +{ + "ref": "fedora-atomic-workstation/rawhide/x86_64/foo-host", + + "repos": ["fedora-rawhide"], + + "selinux": true, + + "documentation": true, + + "automatic_version_prefix": "23", + + "initramfs-args": ["--no-hostonly", "--add", "iscsi"], + + "install-langs": ["en_US"], + + "postprocess-script": "treecompose-post.sh", + + "etc-group-members": ["wheel"], + + "ignore-removed-users": ["root"], + "ignore-removed-groups": ["root"], + "check-passwd": { "type": "file", "filename": "passwd" }, + "check-groups": { "type": "file", "filename": "group" }, + + "packages": ["control-center", + "dconf", + "mesa-dri-drivers", + "xorg-x11-drv-ati", + "xorg-x11-drv-evdev", + "xorg-x11-drv-fbdev", + "xorg-x11-drv-intel", + "xorg-x11-drv-nouveau", + "xorg-x11-drv-qxl", + "xorg-x11-drv-synaptics", + "xorg-x11-drv-vesa", + "xorg-x11-server-Xorg", + "xorg-x11-xauth", + "xorg-x11-xinit", + "pulseaudio-module-x11", + "at-spi2-atk", + "at-spi2-core", + "avahi", + "baobab", + "caribou", + "caribou-gtk2-module", + "caribou-gtk3-module", + "cheese", + "control-center", + "dconf", + "evince", + "evince-djvu", + "evince-nautilus", + "file-roller", + "file-roller-nautilus", + "fprintd-pam", + "gdm", + "gedit", + "glib-networking", + "gnome-backgrounds", + "gnome-bluetooth", + "gnome-calculator", + "gnome-characters", + "gnome-classic-session", + "gnome-clocks", + "gnome-color-manager", + "gnome-contacts", + "gnome-disk-utility", + "gnome-documents", + "gnome-font-viewer", + "gnome-getting-started-docs", + "gnome-initial-setup", + "gnome-logs", + "gnome-maps", + "gnome-screenshot", + "gnome-session-wayland-session", + "gnome-session-xsession", + "gnome-settings-daemon", + "gnome-shell", + "gnome-software", + "gnome-system-monitor", + "gnome-terminal", + "gnome-themes-standard", + "gnome-user-docs", + "gnome-user-share", + "gnome-weather", + "gvfs-afc", + "gvfs-afp", + "gvfs-archive", + "gvfs-fuse", + "gvfs-goa", + "gvfs-gphoto2", + "gvfs-mtp", + "gvfs-smb", + "libcanberra-gtk2", + "libcanberra-gtk3", + "libproxy-mozjs", + "librsvg2", + "libsane-hpaio", + "ModemManager", + "mousetweaks", + "nautilus", + "nautilus-sendto", + "NetworkManager-adsl", + "NetworkManager-openconnect", + "NetworkManager-openvpn-gnome", + "NetworkManager-pptp-gnome", + "NetworkManager-vpnc-gnome", + "orca", + "PackageKit-command-not-found", + "PackageKit-gtk3-module", + "polkit", + "rygel", + "sane-backends-drivers-scanners", + "seahorse", + "sushi", + "totem", + "totem-nautilus", + "vinagre", + "xdg-user-dirs-gtk", + "yelp", + "xdg-app", + "glibc", "nss-altfiles", "shadow-utils", + "fedora-release", + "dracut-config-generic", "kernel", + "dracut-network", + "dracut-live", + "rpm-ostree", "lvm2", + "cryptsetup", + "authconfig", + "btrfs-progs", "e2fsprogs", "xfsprogs", + "grub2", "grub2-efi", "ostree-grub2", + "efibootmgr", "shim", + "gnupg2", + "basesystem", + "python", + "bash", + "xz", "gzip", "bzip2", + "coreutils", + "which", + "nfs-utils", + "curl", + "iptables-services", + "NetworkManager", + "hostname", "initscripts", "iproute", "iputils", "less", + "sos", + "openssh-clients", "openssh-server", "passwd", "plymouth", + "policycoreutils", "procps-ng", "rootfiles", "rpm", + "selinux-policy-targeted", "setup", "shadow-utils", + "sudo", "systemd", "util-linux", "vim-minimal", + "less", + "tar", + "rsync", + "bash-completion", + "tmux", "screen", + "strace", "lsof", "tcpdump", "nmap-ncat", + "policycoreutils-python", + "policycoreutils-python-utils", + "setools-console", + "audit", + "etcd", + "iscsi-initiator-utils", + "oddjob-mkhomedir", + "atomic-devmode"], + + "default_target": "multi-user.target" +} diff --git a/fedora-rawhide.repo b/fedora-rawhide.repo new file mode 100644 index 0000000..f7df67c --- /dev/null +++ b/fedora-rawhide.repo @@ -0,0 +1,7 @@ +[fedora-rawhide] +name=Fedora rawhide $basearch +baseurl=http://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/fedora/linux/development/rawhide/$basearch/os/ +mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=rawhide&arch=$basearch +enabled=0 +gpgcheck=0 +metadata_expire=1d diff --git a/group b/group new file mode 100644 index 0000000..95224b4 --- /dev/null +++ b/group @@ -0,0 +1,50 @@ +root:x:0: +bin:x:1: +daemon:x:2: +sys:x:3: +adm:x:4: +tty:x:5: +disk:x:6: +lp:x:7: +mem:x:8: +kmem:x:9: +wheel:x:10: +cdrom:x:11: +mail:x:12: +man:x:15: +dialout:x:18: +floppy:x:19: +games:x:20: +tape:x:30: +video:x:39: +ftp:x:50: +lock:x:54: +audio:x:63: +nobody:x:99: +users:x:100: +utmp:x:22: +utempter:x:35: +ssh_keys:x:999: +systemd-journal:x:190: +dbus:x:81: +polkitd:x:998: +etcd:x:997: +dip:x:40: +cgred:x:996: +tss:x:59: +avahi-autoipd:x:170: +rpc:x:32: +sssd:x:993: +dockerroot:x:986: +rpcuser:x:29: +nfsnobody:x:65534: +kube:x:994: +sshd:x:74: +chrony:x:992: +tcpdump:x:72: +input:x:995: +systemd-timesync:x:991: +systemd-network:x:990: +systemd-resolve:x:989: +systemd-bus-proxy:x:988: +cockpit-ws:x:987: diff --git a/passwd b/passwd new file mode 100644 index 0000000..6f45acb --- /dev/null +++ b/passwd @@ -0,0 +1,32 @@ +root:x:0:0:root:/root:/bin/bash +bin:x:1:1:bin:/bin:/sbin/nologin +daemon:x:2:2:daemon:/sbin:/sbin/nologin +adm:x:3:4:adm:/var/adm:/sbin/nologin +lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin +sync:x:5:0:sync:/sbin:/bin/sync +shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown +halt:x:7:0:halt:/sbin:/sbin/halt +mail:x:8:12:mail:/var/spool/mail:/sbin/nologin +operator:x:11:0:operator:/root:/sbin/nologin +games:x:12:100:games:/usr/games:/sbin/nologin +ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin +nobody:x:99:99:Nobody:/:/sbin/nologin +dbus:x:81:81:System message bus:/:/sbin/nologin +polkitd:x:999:998:User for polkitd:/:/sbin/nologin +etcd:x:998:997:etcd user:/var/lib/etcd:/sbin/nologin +tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/sbin/nologin +avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/sbin/nologin +rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin +sssd:x:995:993:User for sssd:/:/sbin/nologin +dockerroot:x:997:986:Docker User:/var/lib/docker:/sbin/nologin +rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin +nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin +kube:x:996:994:Kubernetes user:/:/sbin/nologin +sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin +chrony:x:994:992::/var/lib/chrony:/sbin/nologin +tcpdump:x:72:72::/:/sbin/nologin +systemd-timesync:x:993:991:systemd Time Synchronization:/:/sbin/nologin +systemd-network:x:991:990:systemd Network Management:/:/sbin/nologin +systemd-resolve:x:990:989:systemd Resolver:/:/sbin/nologin +systemd-bus-proxy:x:989:988:systemd Bus Proxy:/:/sbin/nologin +cockpit-ws:x:988:987:User for cockpit-ws:/:/sbin/nologin diff --git a/treecompose-post.sh b/treecompose-post.sh new file mode 100755 index 0000000..73b6573 --- /dev/null +++ b/treecompose-post.sh @@ -0,0 +1,10 @@ +#!/usr/bin/env bash + +set -e + +# See: https://bugzilla.redhat.com/show_bug.cgi?id=1051816 +KEEPLANG=en_US +find /usr/share/locale -mindepth 1 -maxdepth 1 -type d -not -name "${KEEPLANG}" -exec rm -rf {} + +localedef --list-archive | grep -a -v ^"${KEEPLANG}" | xargs localedef --delete-from-archive +mv -f /usr/lib/locale/locale-archive /usr/lib/locale/locale-archive.tmpl +build-locale-archive -- cgit