lxc-opensuse.in revision ba4c42597399c72fbb0b8f99e6ded79f738a6ac3
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat#!/bin/bash
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat#
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# template script for generating suse container for LXC
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat#
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat#
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# lxc: linux Container library
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# Authors:
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# Daniel Lezcano <daniel.lezcano@free.fr>
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# Frederic Crozat <fcrozat@suse.com>
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# This library is free software; you can redistribute it and/or
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# modify it under the terms of the GNU Lesser General Public
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# License as published by the Free Software Foundation; either
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# version 2.1 of the License, or (at your option) any later version.
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# This library is distributed in the hope that it will be useful,
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# but WITHOUT ANY WARRANTY; without even the implied warranty of
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# Lesser General Public License for more details.
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# You should have received a copy of the GNU Lesser General Public
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# License along with this library; if not, write to the Free Software
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatDISTRO=12.1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatconfigure_opensuse()
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat{
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat rootfs=$1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat hostname=$2
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # set network as static, but everything is done by LXC outside the container
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF > $rootfs/etc/sysconfig/network/ifcfg-eth0
ba4c42597399c72fbb0b8f99e6ded79f738a6ac3Frederic CrozatSTARTMODE='manual'
ba4c42597399c72fbb0b8f99e6ded79f738a6ac3Frederic CrozatBOOTPROTO='none'
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # set default route
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat IP=$(/sbin/ip route | awk '/default/ { print $3 }')
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "default $IP - -" > $rootfs/etc/sysconfig/network/routes
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # create empty fstab
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat touch $rootfs/etc/fstab
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # create minimal /dev
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/random c 1 8
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/urandom c 1 9
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mkdir -m 755 $rootfs/dev/pts
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mkdir -m 1777 $rootfs/dev/shm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/tty c 5 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 600 $rootfs/dev/console c 5 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/tty0 c 4 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/tty1 c 4 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/tty2 c 4 2
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/tty3 c 4 3
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/tty4 c 4 4
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat ln -s null $rootfs/dev/tty10
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/full c 1 7
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/ptmx c 5 2
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat ln -s /proc/self/fd $rootfs/dev/fd
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat ln -s /proc/kcore $rootfs/dev/core
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mkdir -m 755 $rootfs/dev/mapper
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 600 $rootfs/dev/mapper/control c 10 60
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mkdir -m 755 $rootfs/dev/net
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $rootfs/dev/net/tun c 10 200
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # set the hostname
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF > $rootfs/etc/HOSTNAME
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat$hostname
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
ba4c42597399c72fbb0b8f99e6ded79f738a6ac3Frederic Crozat # ensure /etc/hostname is available too
ba4c42597399c72fbb0b8f99e6ded79f738a6ac3Frederic Crozat ln -s -f HOSTNAME $rootfs/etc/hostname
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # do not use hostname from HOSTNAME variable
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF >> $rootfs/etc/sysconfig/cron
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatunset HOSTNAME
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # set minimal hosts
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF > $rootfs/etc/hosts
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat127.0.0.1 localhost $hostname
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # disable various services
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # disable yast->bootloader in container
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF > $rootfs/etc/sysconfig/bootloader
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatLOADER_TYPE=none
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatLOADER_LOCATION=none
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # cut down inittab
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF > $rootfs/etc/inittab
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatid:3:initdefault:
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatsi::bootwait:/etc/init.d/boot
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatl0:0:wait:/etc/init.d/rc 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatl1:1:wait:/etc/init.d/rc 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatl2:2:wait:/etc/init.d/rc 2
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatl3:3:wait:/etc/init.d/rc 3
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatl6:6:wait:/etc/init.d/rc 6
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatls:S:wait:/etc/init.d/rc S
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat~~:S:respawn:/sbin/sulogin
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatp6::ctrlaltdel:/sbin/init 6
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatp0::powerfail:/sbin/init 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatcons:2345:respawn:/sbin/mingetty --noclear console screen
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatc1:2345:respawn:/sbin/mingetty --noclear tty1 screen
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat # set /dev/console as securetty
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat cat << EOF >> $rootfs/etc/securetty
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozatconsole
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF >> $rootfs/etc/sysconfig/boot
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# disable root fsck
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatROOTFS_FSCK="0"
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatROOTFS_BLKDEV="/dev/null"
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # remove pointless services in a container
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat chroot $rootfs /sbin/insserv -r -f boot.udev boot.loadmodules boot.device-mapper boot.clock boot.swap boot.klog kbd
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "Please change root-password !"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "root:root" | chroot $rootfs chpasswd
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat return 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat}
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatdownload_opensuse()
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat{
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cache=$1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat arch=$2
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat if [ ! -x /usr/bin/build ]; then
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat echo "Could not create openSUSE template :"
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat echo "you need to install \"build\" package"
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat return 1
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat fi
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # check the mini opensuse was not already downloaded
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mkdir -p "$cache/partial-$arch"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat if [ $? -ne 0 ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Failed to create '$cache/partial-$arch' directory"
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber return 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat fi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # download a mini opensuse into a cache
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "Downloading opensuse minimal ..."
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat mkdir -p "$cache/partial-$arch-packages"
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat zypper --quiet --root $cache/partial-$arch-packages --non-interactive ar http://download.opensuse.org/distribution/$DISTRO/repo/oss/ repo-oss
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat zypper --quiet --root $cache/partial-$arch-packages --non-interactive ar http://download.opensuse.org/update/$DISTRO/ update
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat zypper --quiet --root $cache/partial-$arch-packages --non-interactive --gpg-auto-import-keys update
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat zypper --root $cache/partial-$arch-packages --non-interactive in --auto-agree-with-licenses --download-only zypper lxc patterns-openSUSE-base sysvinit-init
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat cat > $cache/partial-$arch-packages/opensuse.conf << EOF
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatPreinstall: aaa_base bash coreutils diffutils
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatPreinstall: filesystem fillup glibc grep insserv libacl1 libattr1
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatPreinstall: libbz2-1 libgcc46 libxcrypt libncurses5 pam
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatPreinstall: permissions libreadline6 rpm sed tar zlib libselinux1
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatPreinstall: liblzma5 libcap2 libpcre0
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatPreinstall: libpopt0 libelf1 liblua5_1
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatRunScripts: aaa_base
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatSupport: zypper
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatSupport: patterns-openSUSE-base
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatSupport: lxc
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatPrefer: sysvinit-init
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatIgnore: patterns-openSUSE-base:patterns-openSUSE-yast2_install_wf
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic CrozatEOF
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat CLEAN_BUILD=1 BUILD_ROOT="$cache/partial-$arch" BUILD_DIST="$cache/partial-$arch-packages/opensuse.conf" /usr/lib/build/init_buildsystem --clean --cachedir $cache/partial-$arch-cache --repository $cache/partial-$arch-packages/var/cache/zypp/packages/repo-oss/suse/$arch --repository $cache/partial-$arch-packages/var/cache/zypp/packages/repo-oss/suse/noarch
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat chroot $cache/partial-$arch /usr/bin/zypper --quiet --non-interactive ar http://download.opensuse.org/distribution/$DISTRO/repo/oss repo-oss
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat chroot $cache/partial-$arch /usr/bin/zypper --quiet --non-interactive ar http://download.opensuse.org/update/$DISTRO/ update
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat chroot $cache/partial-$arch rpm -e patterns-openSUSE-base
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat umount $cache/partial-$arch/proc
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat# really clean the image
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat rm -fr $cache/partial-$arch/{.build,.guessed_dist,.srcfiles*,installed-pkg}
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat rm -fr $cache/partial-$arch/dev
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat# make sure we have a minimal /dev
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mkdir -p "$cache/partial-$arch/dev"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $cache/partial-$arch/dev/null c 1 3
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mknod -m 666 $cache/partial-$arch/dev/zero c 1 5
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat# create mtab symlink
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat rm -f $cache/partial-$arch/etc/mtab
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat ln -sf /proc/self/mounts $cache/partial-$arch/etc/mtab
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat if [ $? -ne 0 ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Failed to download the rootfs, aborting."
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber return 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat fi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
44ee8a102e3d8052631fbb119f58a55ce678d039Frederic Crozat rm -fr "$cache/partial-$arch-packages"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat mv "$1/partial-$arch" "$1/rootfs-$arch"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "Download complete."
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat return 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat}
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatcopy_opensuse()
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat{
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cache=$1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat arch=$2
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat rootfs=$3
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # make a local copy of the mini opensuse
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo -n "Copying rootfs to $rootfs ..."
6d8ac56b658a7aa35a46580c2df060c58ef02821Serge Hallyn mkdir -p $rootfs
44d397891e691ab994a69766cc72e57265b62da1Serge Hallyn rsync -Ha $cache/rootfs-$arch/ $rootfs/ || return 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat return 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat}
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatinstall_opensuse()
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat{
e29bf450cafa2ce2564aeb0b64d2014c17228407Dwight Engen cache="@LOCALSTATEDIR@/cache/lxc/opensuse"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat rootfs=$1
e29bf450cafa2ce2564aeb0b64d2014c17228407Dwight Engen mkdir -p @LOCALSTATEDIR@/lock/subsys/
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat (
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber flock -x 200
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber if [ $? -ne 0 ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Cache repository is busy."
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber return 1
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber fi
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber arch=$(arch)
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Checking cache download in $cache/rootfs-$arch ... "
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber if [ ! -e "$cache/rootfs-$arch" ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber download_opensuse $cache $arch
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber if [ $? -ne 0 ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Failed to download 'opensuse base'"
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber return 1
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber fi
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber fi
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Copy $cache/rootfs-$arch to $rootfs ... "
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber copy_opensuse $cache $arch $rootfs
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber if [ $? -ne 0 ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Failed to copy rootfs"
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber return 1
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber fi
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber return 0
fe253caa8b98854445aaf6ee253545ee1f13beb1Stéphane Graber ) 200>@LOCALSTATEDIR@/lock/subsys/lxc-opensuse
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat return $?
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat}
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatcopy_configuration()
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat{
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat path=$1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat rootfs=$2
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat name=$3
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
ba4c42597399c72fbb0b8f99e6ded79f738a6ac3Frederic Crozat # only disable network if no network configuration was passed
ba4c42597399c72fbb0b8f99e6ded79f738a6ac3Frederic Crozat grep -q "^lxc.network.type" $path/config || echo 'lxc.network.type = empty' >> $path/config
ba4c42597399c72fbb0b8f99e6ded79f738a6ac3Frederic Crozat
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallyn grep -q "^lxc.rootfs" $path/config 2>/dev/null || echo "lxc.rootfs = $rootfs" >> $path/config
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF >> $path/config
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.utsname = $name
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.tty = 4
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.pts = 1024
eba7df9ee0a1963984ef212e7ddfc0e0835af288Stéphane Graberlxc.mount = $path/fstab
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
f02ce27d4b1a9d01b88d0ffaf626e5bafa671bf0Stéphane Graber# When using LXC with apparmor, uncomment the next line to run unconfined:
f02ce27d4b1a9d01b88d0ffaf626e5bafa671bf0Stéphane Graber#lxc.aa_profile = unconfined
f02ce27d4b1a9d01b88d0ffaf626e5bafa671bf0Stéphane Graber
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.deny = a
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# /dev/null and zero
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 1:3 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 1:5 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# consoles
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 5:1 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 5:0 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 4:0 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 4:1 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# /dev/{,u}random
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 1:9 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 1:8 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 136:* rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 5:2 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat# rtc
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatlxc.cgroup.devices.allow = c 254:0 rwm
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF > $path/fstab
80a881b232b8955b85b360d4def99e6e680ff61bSerge Hallynproc proc proc nodev,noexec,nosuid 0 0
80a881b232b8955b85b360d4def99e6e680ff61bSerge Hallynsysfs sys sysfs defaults 0 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat if [ $? -ne 0 ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Failed to add configuration"
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber return 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat fi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat return 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat}
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatclean()
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat{
e29bf450cafa2ce2564aeb0b64d2014c17228407Dwight Engen cache="@LOCALSTATEDIR@/cache/lxc/opensuse"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat if [ ! -e $cache ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber exit 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat fi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat # lock, so we won't purge while someone is creating a repository
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat (
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber flock -x 200
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber if [ $? != 0 ]; then
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo "Cache repository is busy."
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber exit 1
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber fi
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber echo -n "Purging the download cache..."
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber rm --preserve-root --one-file-system -rf $cache && echo "Done." || exit 1
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber exit 0
fe253caa8b98854445aaf6ee253545ee1f13beb1Stéphane Graber ) 200>@LOCALSTATEDIR@/lock/subsys/lxc-opensuse
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat}
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatusage()
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat{
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat cat <<EOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat$1 -h|--help -p|--path=<path> --clean
c840b37de865195a8742e219b4374d961a21d4d9Frederic CrozatEOF
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat return 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat}
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatoptions=$(getopt -o hp:n:c -l help,path:,name:,clean -- "$@")
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ $? -ne 0 ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat usage $(basename $0)
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozateval set -- "$options"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatwhile true
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatdo
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat case "$1" in
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber -h|--help) usage $0 && exit 0;;
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber -p|--path) path=$2; shift 2;;
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber -n|--name) name=$2; shift 2;;
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber -c|--clean) clean=$2; shift 2;;
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber --) shift 1; break ;;
14d9c0f09d1a55d124ef210a4b4e205c9fe7596cStéphane Graber *) break ;;
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat esac
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatdone
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ ! -z "$clean" -a -z "$path" ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat clean || exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozattype zypper > /dev/null
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ $? -ne 0 ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "'zypper' command is missing"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ -z "$path" ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "'path' parameter is required"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ "$(id -u)" != "0" ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "This script should be run as 'root'"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallyn# detect rootfs
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallynconfig="$path/config"
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallynif grep -q '^lxc.rootfs' $config 2>/dev/null ; then
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallyn rootfs=`grep 'lxc.rootfs =' $config | awk -F= '{ print $2 }'`
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallynelse
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallyn rootfs=$path/rootfs
1881820ae4ff9004beef1bf7f04553580840441dSerge Hallynfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatinstall_opensuse $rootfs
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ $? -ne 0 ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "failed to install opensuse"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatconfigure_opensuse $rootfs $name
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ $? -ne 0 ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "failed to configure opensuse for a container"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatcopy_configuration $path $rootfs $name
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ $? -ne 0 ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat echo "failed write configuration file"
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatif [ ! -z $clean ]; then
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat clean || exit 1
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozat exit 0
c840b37de865195a8742e219b4374d961a21d4d9Frederic Crozatfi