mirror of
https://git.proxmox.com/git/mirror_lxc
synced 2025-06-05 09:55:53 +00:00
add lxc-altlinux template
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
This commit is contained in:
Alexey Shabalin
Daniel Lezcano
parent
be58c6b5b4
commit
262f4e48a5
1
.gitignore
vendored
1
.gitignore
vendored
@ -30,6 +30,7 @@ templates/lxc-maverick
|
|||||||
templates/lxc-natty
|
templates/lxc-natty
|
||||||
templates/lxc-oneiric
|
templates/lxc-oneiric
|
||||||
templates/lxc-fedora
|
templates/lxc-fedora
|
||||||
|
templates/lxc-altlinux
|
||||||
templates/lxc-sshd
|
templates/lxc-sshd
|
||||||
templates/lxc-busybox
|
templates/lxc-busybox
|
||||||
|
|
||||||
|
|||||||
@ -143,6 +143,7 @@ AC_CONFIG_FILES([
|
|||||||
templates/lxc-opensuse
|
templates/lxc-opensuse
|
||||||
templates/lxc-busybox
|
templates/lxc-busybox
|
||||||
templates/lxc-fedora
|
templates/lxc-fedora
|
||||||
|
templates/lxc-altlinux
|
||||||
templates/lxc-sshd
|
templates/lxc-sshd
|
||||||
|
|
||||||
src/Makefile
|
src/Makefile
|
||||||
|
|||||||
@ -6,5 +6,6 @@ templates_SCRIPTS = \
|
|||||||
lxc-ubuntu \
|
lxc-ubuntu \
|
||||||
lxc-opensuse \
|
lxc-opensuse \
|
||||||
lxc-fedora \
|
lxc-fedora \
|
||||||
|
lxc-altlinux \
|
||||||
lxc-busybox \
|
lxc-busybox \
|
||||||
lxc-sshd
|
lxc-sshd
|
||||||
|
|||||||
380
templates/lxc-altlinux.in
Normal file
380
templates/lxc-altlinux.in
Normal file
@ -0,0 +1,380 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
#
|
||||||
|
# template script for generating altlinux container for LXC
|
||||||
|
#
|
||||||
|
|
||||||
|
#
|
||||||
|
# lxc: linux Container library
|
||||||
|
|
||||||
|
# Authors:
|
||||||
|
# Alexey Shabalin <shaba@altlinux.org>
|
||||||
|
|
||||||
|
# This library is free software; you can redistribute it and/or
|
||||||
|
# modify it under the terms of the GNU Lesser General Public
|
||||||
|
# License as published by the Free Software Foundation; either
|
||||||
|
# version 2.1 of the License, or (at your option) any later version.
|
||||||
|
|
||||||
|
# This library is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||||
|
# Lesser General Public License for more details.
|
||||||
|
|
||||||
|
# You should have received a copy of the GNU Lesser General Public
|
||||||
|
# License along with this library; if not, write to the Free Software
|
||||||
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
||||||
|
|
||||||
|
#Configurations
|
||||||
|
arch=$(arch)
|
||||||
|
cache_base=/var/cache/lxc/altlinux/$arch
|
||||||
|
default_path=/var/lib/lxc
|
||||||
|
default_profile=default
|
||||||
|
profile_dir=/etc/lxc/profiles
|
||||||
|
root_password=rooter
|
||||||
|
lxc_network_type=veth
|
||||||
|
lxc_network_link=virbr0
|
||||||
|
|
||||||
|
# is this altlinux?
|
||||||
|
[ -f /etc/altlinux-release ] && is_altlinux=true
|
||||||
|
|
||||||
|
configure_altlinux()
|
||||||
|
{
|
||||||
|
|
||||||
|
# disable selinux in altlinux
|
||||||
|
mkdir -p $rootfs_path/selinux
|
||||||
|
echo 0 > $rootfs_path/selinux/enforce
|
||||||
|
|
||||||
|
# configure the network using the dhcp
|
||||||
|
mkdir -p ${rootfs_path}/etc/net/ifaces/eth0
|
||||||
|
cat <<EOF > ${rootfs_path}/etc/net/ifaces/eth0/options
|
||||||
|
BOOTPROTO=dhcp
|
||||||
|
ONBOOT=yes
|
||||||
|
NM_CONTROLLED=no
|
||||||
|
TYPE=eth
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# set the hostname
|
||||||
|
cat <<EOF > ${rootfs_path}/etc/sysconfig/network
|
||||||
|
NETWORKING=yes
|
||||||
|
CONFMETHOD=etcnet
|
||||||
|
HOSTNAME=${UTSNAME}
|
||||||
|
RESOLV_MODS=yes
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# set minimal hosts
|
||||||
|
cat <<EOF > $rootfs_path/etc/hosts
|
||||||
|
127.0.0.1 localhost.localdomain localhost $name
|
||||||
|
EOF
|
||||||
|
# Allow to login at virsh console. loginuid.so doen't work in the absence of auditd.
|
||||||
|
sed -i 's/^.*loginuid.so.*$/\#&/' ${rootfs_path}/etc/pam.d/common-login
|
||||||
|
|
||||||
|
# Allow root to login at virsh console
|
||||||
|
echo "pts/0" >> ${rootfs_path}/etc/securetty
|
||||||
|
|
||||||
|
chroot ${rootfs_path} chkconfig network on
|
||||||
|
chroot ${rootfs_path} chkconfig syslogd on
|
||||||
|
chroot ${rootfs_path} chkconfig random on
|
||||||
|
chroot ${rootfs_path} chkconfig rawdevices off
|
||||||
|
chroot ${rootfs_path} chkconfig fbsetfont off
|
||||||
|
# chroot ${rootfs_path} chkconfig keytable off
|
||||||
|
|
||||||
|
subst 's/^\([0-9]\+:[0-9]\+:respawn:\/sbin\/mingetty.*\)/#\1/' ${rootfs_path}/etc/inittab
|
||||||
|
subst 's,\/dev\/tty12,/var/log/syslog/console,' ${rootfs_path}/etc/syslog.conf
|
||||||
|
|
||||||
|
dev_path="${rootfs_path}/dev"
|
||||||
|
rm -rf $dev_path
|
||||||
|
mkdir -p $dev_path
|
||||||
|
mknod -m 666 ${dev_path}/null c 1 3
|
||||||
|
mknod -m 666 ${dev_path}/zero c 1 5
|
||||||
|
mknod -m 644 ${dev_path}/random c 1 8
|
||||||
|
mknod -m 644 ${dev_path}/urandom c 1 9
|
||||||
|
mkdir -m 755 ${dev_path}/pts
|
||||||
|
mkdir -m 1777 ${dev_path}/shm
|
||||||
|
mknod -m 666 ${dev_path}/tty c 5 0
|
||||||
|
mknod -m 666 ${dev_path}/tty0 c 4 0
|
||||||
|
mknod -m 666 ${dev_path}/tty1 c 4 1
|
||||||
|
mknod -m 666 ${dev_path}/tty2 c 4 2
|
||||||
|
mknod -m 666 ${dev_path}/tty3 c 4 3
|
||||||
|
mknod -m 666 ${dev_path}/tty4 c 4 4
|
||||||
|
mknod -m 600 ${dev_path}/console c 5 1
|
||||||
|
mknod -m 666 ${dev_path}/full c 1 7
|
||||||
|
mknod -m 600 ${dev_path}/initctl p
|
||||||
|
mknod -m 666 ${dev_path}/ptmx c 5 2
|
||||||
|
|
||||||
|
echo "setting root passwd to $root_password"
|
||||||
|
echo "root:$root_password" | chroot $rootfs_path chpasswd
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
download_altlinux()
|
||||||
|
{
|
||||||
|
|
||||||
|
# check the mini altlinux was not already downloaded
|
||||||
|
INSTALL_ROOT=$cache/partial
|
||||||
|
mkdir -p $INSTALL_ROOT
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "Failed to create '$INSTALL_ROOT' directory"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# download a mini altlinux into a cache
|
||||||
|
echo "Downloading altlinux minimal ..."
|
||||||
|
APT_GET="apt-get -o RPM::RootDir=$INSTALL_ROOT -y"
|
||||||
|
PKG_LIST="$(grep -hs '^[^#]' "$profile_dir/$profile")"
|
||||||
|
# PKG_LIST="basesystem apt apt-conf-sisyphus etcnet openssh-server passwd sysklogd net-tools e2fsprogs"
|
||||||
|
|
||||||
|
mkdir -p $INSTALL_ROOT/var/lib/rpm
|
||||||
|
rpm --root $INSTALL_ROOT --initdb
|
||||||
|
$APT_GET install $PKG_LIST
|
||||||
|
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "Failed to download the rootfs, aborting."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
mv "$INSTALL_ROOT" "$cache/rootfs"
|
||||||
|
echo "Download complete."
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
copy_altlinux()
|
||||||
|
{
|
||||||
|
|
||||||
|
# make a local copy of the minialtlinux
|
||||||
|
echo -n "Copying rootfs to $rootfs_path ..."
|
||||||
|
#cp -a $cache/rootfs-$arch $rootfs_path || return 1
|
||||||
|
# i prefer rsync (no reason really)
|
||||||
|
mkdir -p $rootfs_path
|
||||||
|
rsync -a $cache/rootfs/ $rootfs_path/
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
update_altlinux()
|
||||||
|
{
|
||||||
|
chroot $cache/rootfs apt-get update
|
||||||
|
chroot $cache/rootfs apt-get -y dist-upgrade
|
||||||
|
}
|
||||||
|
|
||||||
|
install_altlinux()
|
||||||
|
{
|
||||||
|
mkdir -p /var/lock/subsys/
|
||||||
|
(
|
||||||
|
flock -n -x 200
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "Cache repository is busy."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Checking cache download in $cache/rootfs ... "
|
||||||
|
if [ ! -e "$cache/rootfs" ]; then
|
||||||
|
download_altlinux
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "Failed to download 'altlinux base'"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Cache found. Updating..."
|
||||||
|
update_altlinux
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "Failed to update 'altlinux base', continuing with last known good cache"
|
||||||
|
else
|
||||||
|
echo "Update finished"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Copy $cache/rootfs to $rootfs_path ... "
|
||||||
|
copy_altlinux
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "Failed to copy rootfs"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 0
|
||||||
|
|
||||||
|
) 200>/var/lock/subsys/lxc
|
||||||
|
|
||||||
|
return $?
|
||||||
|
}
|
||||||
|
|
||||||
|
copy_configuration()
|
||||||
|
{
|
||||||
|
|
||||||
|
mkdir -p $config_path
|
||||||
|
cat <<EOF >> $config_path/config
|
||||||
|
lxc.utsname = $name
|
||||||
|
lxc.tty = 4
|
||||||
|
lxc.pts = 1024
|
||||||
|
lxc.rootfs = $rootfs_path
|
||||||
|
lxc.mount = $config_path/fstab
|
||||||
|
#networking
|
||||||
|
lxc.network.type = $lxc_network_type
|
||||||
|
lxc.network.flags = up
|
||||||
|
lxc.network.link = $lxc_network_link
|
||||||
|
lxc.network.name = eth0
|
||||||
|
lxc.network.mtu = 1500
|
||||||
|
#cgroups
|
||||||
|
lxc.cgroup.devices.deny = a
|
||||||
|
# /dev/null and zero
|
||||||
|
lxc.cgroup.devices.allow = c 1:3 rwm
|
||||||
|
lxc.cgroup.devices.allow = c 1:5 rwm
|
||||||
|
# consoles
|
||||||
|
lxc.cgroup.devices.allow = c 5:1 rwm
|
||||||
|
lxc.cgroup.devices.allow = c 5:0 rwm
|
||||||
|
lxc.cgroup.devices.allow = c 4:0 rwm
|
||||||
|
lxc.cgroup.devices.allow = c 4:1 rwm
|
||||||
|
# /dev/{,u}random
|
||||||
|
lxc.cgroup.devices.allow = c 1:9 rwm
|
||||||
|
lxc.cgroup.devices.allow = c 1:8 rwm
|
||||||
|
lxc.cgroup.devices.allow = c 136:* rwm
|
||||||
|
lxc.cgroup.devices.allow = c 5:2 rwm
|
||||||
|
# rtc
|
||||||
|
lxc.cgroup.devices.allow = c 254:0 rwm
|
||||||
|
EOF
|
||||||
|
|
||||||
|
cat <<EOF > $config_path/fstab
|
||||||
|
proc $rootfs_path/proc proc nodev,noexec,nosuid 0 0
|
||||||
|
devpts $rootfs_path/dev/pts devpts defaults 0 0
|
||||||
|
sysfs $rootfs_path/sys sysfs defaults 0 0
|
||||||
|
EOF
|
||||||
|
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "Failed to add configuration"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
clean()
|
||||||
|
{
|
||||||
|
|
||||||
|
if [ ! -e $cache ]; then
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
# lock, so we won't purge while someone is creating a repository
|
||||||
|
(
|
||||||
|
flock -n -x 200
|
||||||
|
if [ $? != 0 ]; then
|
||||||
|
echo "Cache repository is busy."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo -n "Purging the download cache for ALTLinux-$release..."
|
||||||
|
rm --preserve-root --one-file-system -rf $cache && echo "Done." || exit 1
|
||||||
|
exit 0
|
||||||
|
|
||||||
|
) 200>/var/lock/subsys/lxc
|
||||||
|
}
|
||||||
|
|
||||||
|
usage()
|
||||||
|
{
|
||||||
|
cat <<EOF
|
||||||
|
usage:
|
||||||
|
$1 -n|--name=<container_name>
|
||||||
|
[-p|--path=<path>] [-c|--clean] [-R|--release=<ALTLinux_release>]
|
||||||
|
[-P|--profile=<name of the profile>]
|
||||||
|
[-A|--arch=<arch of the container>]
|
||||||
|
[-h|--help]
|
||||||
|
Mandatory args:
|
||||||
|
-n,--name container name, used to as an identifier for that container from now on
|
||||||
|
Optional args:
|
||||||
|
-p,--path path to where the container rootfs will be created, defaults to /var/lib/lxc. The container config will go under /var/lib/lxc in and case
|
||||||
|
-c,--clean clean the cache
|
||||||
|
-R,--release ALTLinux release for the new container. if the host is ALTLinux, then it will defaultto the host's release.
|
||||||
|
-P,--profile Profile name is the file name in /etc/lxc/profiles contained packages name for install to cache.
|
||||||
|
-A,--arch NOT USED YET. Define what arch the container will be [i686,x86_64]
|
||||||
|
-h,--help print this help
|
||||||
|
EOF
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
options=$(getopt -o hp:n:P:cR: -l help,path:,name:,profile:,clean,release: -- "$@")
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
usage $(basename $0)
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
eval set -- "$options"
|
||||||
|
|
||||||
|
while true
|
||||||
|
do
|
||||||
|
case "$1" in
|
||||||
|
-h|--help) usage $0 && exit 0;;
|
||||||
|
-p|--path) path=$2; shift 2;;
|
||||||
|
-n|--name) name=$2; shift 2;;
|
||||||
|
-P|--profile) profile=$2; shift 2;;
|
||||||
|
-c|--clean) clean=$2; shift 2;;
|
||||||
|
-R|--release) release=$2; shift 2;;
|
||||||
|
--) shift 1; break ;;
|
||||||
|
*) break ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ ! -z "$clean" -a -z "$path" ]; then
|
||||||
|
clean || exit 1
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
type apt-get >/dev/null 2>&1
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "'apt-get' command is missing"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$path" ]; then
|
||||||
|
path=$default_path
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$profile" ]; then
|
||||||
|
profile=$default_profile
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$release" ]; then
|
||||||
|
if [ "$is_altlinux" ]; then
|
||||||
|
release=$(cat /etc/altlinux-release |awk '/^ALT/ {print $3}')
|
||||||
|
else
|
||||||
|
echo "This is not a ALTLinux host and release missing, use -R|--release to specify release"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$(id -u)" != "0" ]; then
|
||||||
|
echo "This script should be run as 'root'"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
rootfs_path=$path/$name/rootfs
|
||||||
|
config_path=$default_path/$name
|
||||||
|
cache=$cache_base/$release/$profile
|
||||||
|
|
||||||
|
if [ -f $config_path/config ]; then
|
||||||
|
echo "A container with that name exists, chose a different name"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
install_altlinux
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "failed to install altlinux"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
configure_altlinux
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "failed to configure altlinux for a container"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
copy_configuration
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "failed write configuration file"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -z $clean ]; then
|
||||||
|
clean || exit 1
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
echo "container rootfs and config created"
|
||||||
|
echo "container is configured for lxc.network.type=veth and lxc.network.link=virbr0 (which is default if you have libvirt runnig)"
|
||||||
Loading…
Reference in New Issue
Block a user