diff options
author | Richard W.M. Jones <rjones@redhat.com> | 2011-10-11 18:04:46 +0100 |
---|---|---|
committer | Richard W.M. Jones <rjones@redhat.com> | 2011-10-11 18:04:46 +0100 |
commit | 92dc3748b6c236f09e7c699d4f841459fff4851c (patch) | |
tree | ed5fe81656b41b4704d0e5e76e04cc7b53d3d8d8 /TODO | |
parent | e6ed656c98f4c0781090a7ee4337267923754dbd (diff) | |
download | libguestfs-92dc3748b6c236f09e7c699d4f841459fff4851c.tar.gz libguestfs-92dc3748b6c236f09e7c699d4f841459fff4851c.tar.xz libguestfs-92dc3748b6c236f09e7c699d4f841459fff4851c.zip |
virt-sysprep: Update TODO list (thanks Steve Grubb, Dan Berrange).
Diffstat (limited to 'TODO')
-rw-r--r-- | TODO | 15 |
1 files changed, 15 insertions, 0 deletions
@@ -549,3 +549,18 @@ virt-sysprep ideas . install a firstboot script virt-sysprep --script=/tmp/foo.sh . run an external shell script . run external guestfish script virt-sysprep --fish=/tmp/foo.fish + - log files (thanks Steve Grubb) + . as well as the obvious log files, also + utmp/wtmp/btmp/tallylog and pam_faillock's data files + - RNG seed (Steve Grubb) + - homedirs/.ssh directory, especially /root/.ssh (Steve Grubb) + - if drives are encrypted, then dm-crypt key should be changed + and drives all re-encrypted + - /etc/pki + (Steve says ...) + Rpm uses nss. Nss sets up its crypto database in + /etc/pki. Depending on how long the machine ran before cloning, you + may have picked up some certificates or things. This is an area + that you would want to look into. + - secure erase of inodes etc using scrub (Steve Grubb) + - touch /.autorelabel if we create any new files (thanks Dan Berrange) |