lxc/templates/lxc-plamo.in

	lxc-plamo.in revision 92cbfdaf682dca9cf60243f23c2e911181bfc7ab
#!/bin/bash

#
# template script for generating Plamo Linux container for LXC
#

#
# lxc: linux Container library

# Authors:
# KATOH Yasufumi <karma@jazz.email.ne.jp>
# TAMUKI Shoichi <tamuki@linet.gr.jp>

# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.

# This library is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# Lesser General Public License for more details.

# You should have received a copy of the GNU Lesser General Public
# License along with this library; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA

# ref. https://github.com/Ponce/lxc-slackware/blob/master/lxc-slackware
#      lxc-ubuntu script

[ -r /etc/default/lxc ] && . /etc/default/lxc

MIRRORSRV=${MIRRORSRV:-"ftp.ne.jp"}
MIRRORPATH=${MIRRORPATH:-"/Linux/distributions/plamolinux"}
CATEGORY[0]=${CATEGORY:-"00_base"}
PACKAGES[0]=${PACKAGES:-"aaa_base acl at attr bash btrfs_progs bzip2
    coreutils cracklib dcron devs dhcp dialog dosfstools dump e2fsprogs
    ed eject etc extipl file findutils gawk glibc grep groff grub gzip
    hdsetup hibernate_script iproute2 iputils kbd kmod less libcap
    libgcc libtirpc lilo linux_pam logrotate lvm2 man
    mdadm microcode_ctl mlocate ncurses net_tools netkit_combo
    network_configs nvi openbsd_inetd openssh openssl os_prober pciutils
    pm_utils procinfo_ng procps_ng readline reiserfsprogs rsyslog sed
    shadow sudo sysfsutils syslinux sysvinit tar tcp_wrappers tcsh
    timezone traceroute udev unicon_tools util_linux xz zlib"}
CATEGORY[1]="01_minimum"
PACKAGES[1]="FDclone autofs bc berkeley_db bsd_games cpio cpufreqd
    cpufrequtils fortune_mod gc gdbm gpm hddtemp hdparm keyutils libelf
    libieee1284 libusb libusb_compat libxml2 libzip linux_howto lm_sensors
    lshw lsof lv man_pages man_pages_ja nilfs_utils nkf pcre perl popt
    psmisc python recode rpm2targz ruby screen sg3_utils sharutils sqlite
    squashfs_lzma sysstat texinfo time tree unzip usbutils utempter which
    yaml zip zsh"
CATEGORY[2]="01_minimum/alsa.txz"
PACKAGES[2]="alsa_lib alsa_plugins alsa_utils"
CATEGORY[3]="01_minimum/aspell.txz"
PACKAGES[3]="aspell aspell6_en"
CATEGORY[4]="01_minimum/devel.txz"
PACKAGES[4]="autoconf automake binutils bison cloog cvs diffutils flex
    g++ gcc gdb gettext gmp indent intltool kernel_headers libc libtool
    m4 make mpc mpfr onig patch pkg_config ppl pth slang strace yasm"
CATEGORY[5]="01_minimum/gnupg_tls.txz"
PACKAGES[5]="gnupg gnutls gpgme libassuan libgcrypt libgpg_error libksba
    libtasn1"
CATEGORY[6]="01_minimum/network.txz"
PACKAGES[6]="bind bridge_utils curl cyrus_sasl dnsmasq ethtool fetchmail
    heimdal hostapd iptables iw libidn libiec61883 libnl3 libpcap
    libraw1394 libssh2 mailx metamail ncftp ntrack parprouted postfix
    ppp procmail rsync setserial uml_utilities w3m wget wireless_tools
    wpa_supplicant"
CATEGORY[7]="01_minimum/nfs.txz"
PACKAGES[7]="libevent libnfsidmap nfs_utils rpcbind"
CATEGORY[8]="01_minimum/tcl.txz"
PACKAGES[8]="expect itcl tcl tclx"

download_plamo() {
  # check the mini plamo was not already downloaded
  if ! mkdir -p $ptcache ; then
    echo "Failed to create '$ptcache' directory."
    return 1
  fi
  # download a mini plamo into a cache
  echo "Downloading Plamo-$release minimal..."
  echo "open $MIRRORSRV" > /tmp/getpkg
  for i in `seq 0 $((${#CATEGORY[@]} - 1))` ; do
    for p in ${PACKAGES[$i]} ; do
      cat <<- EOF >> /tmp/getpkg
    mget $MIRRORPATH/Plamo-$release/$arch/plamo/${CATEGORY[$i]}/$p-*.t?z
    EOF
    done
  done
  echo "close" >> /tmp/getpkg
  cd $ptcache
  if ! lftp -f /tmp/getpkg ; then
    echo "Failed to download the rootfs, aborting."
    return 1
  fi
  rm -f /tmp/getpkg
  mv $ptcache $dlcache
  echo "Download complete."
  return 0
}

copy_plamo() {
  # make a local copy of the mini plamo
  echo "Copying $rtcache to $rootfs..."
  mkdir -p $rootfs
  find $rtcache -mindepth 1 -maxdepth 1 -exec cp -a {} $rootfs \; || return 1
  return 0
}

install_plamo() {
  mkdir -p @LOCALSTATEDIR@/lock/subsys
  (
    if ! flock -n 200 ; then
      echo "Cache repository is busy."
      return 1
    fi
    echo "Checking cache download in $dlcache..."
    if [ ! -d $dlcache ] ; then
      if ! download_plamo ; then
        echo "Failed to download plamo $release base packages."
        return 1
      fi
    fi
    if [ ! -x /sbin/installpkg  ] ; then
      echo "'installpkg' command is missing."
      echo "Installing 'installpkg' command into $dlcache/sbin..."
      ( cd $dlcache ; tar xpJf hdsetup-*.txz ; rm -rf tmp usr var )
      sed -i "/ldconfig/!s@/sbin@$dlcache&@g" $dlcache/sbin/installpkg*
      PATH=$dlcache/sbin:$PATH
    fi
    echo "Installing packages to $rtcache..."
    if [ ! -d $rtcache ] ; then
      mkdir -p $rtcache
      for i in `seq 0 $((${#CATEGORY[@]} - 1))` ; do
        for p in ${PACKAGES[$i]} ; do
          installpkg -root $rtcache -priority ADD $dlcache/$p-*.t?z
        done
      done
    fi
    echo "Copy $rtcache to $rootfs..."
    if ! copy_plamo ; then
      echo "Failed to copy rootfs."
      return 1
    fi
    return 0
  ) 200> @LOCALSTATEDIR@/lock/subsys/lxc
}

configure_plamo() {
  # create /dev
  mknod -m 666 $rootfs/dev/zero c 1 5
  chmod    666 $rootfs/dev/random
  mknod -m 666 $rootfs/dev/urandom c 1 9
  mkdir -m 755 $rootfs/dev/pts
  chmod    666 $rootfs/dev/tty
  chmod    600 $rootfs/dev/console
  mknod -m 666 $rootfs/dev/tty0 c 4 0
  mknod -m 666 $rootfs/dev/tty1 c 4 1
  mknod -m 666 $rootfs/dev/tty2 c 4 2
  mknod -m 666 $rootfs/dev/tty3 c 4 3
  mknod -m 666 $rootfs/dev/tty4 c 4 4
  mknod -m 666 $rootfs/dev/full c 1 7
  mknod -m 600 $rootfs/dev/initctl p
  mknod -m 666 $rootfs/dev/ptmx c 5 2
  # suppress log level output for udev
  sed -i 's/="err"/=0/' $rootfs/etc/udev/udev.conf
  # /etc/fstab
  cat <<- "EOF" > $rootfs/etc/fstab
    none             /proc    proc        defaults   0   0
    none             /sys     sysfs       defaults   0   0
    none             /dev     tmpfs       defaults   0   0
    none            /tmp     tmpfs       defaults   0   0
    none            /dev/pts        devpts  gid=5,mode=620    0 0
    none            /proc/bus/usb             usbfs        noauto   0   0
    none             /var/lib/nfs/rpc_pipefs rpc_pipefs  defaults   0   0
    EOF
  # /etc/inittab
  cat <<- "EOF" | patch $rootfs/etc/inittab
    47a48
    > 1:1235:respawn:/sbin/agetty 38400 console
    52,53d52
    < c5:1235:respawn:/sbin/agetty 38400 tty5 linux
    < c6:12345:respawn:/sbin/agetty 38400 tty6 linux
    EOF
  # set the hostname
  echo "$name" > $rootfs/etc/HOSTNAME
  # set minimal hosts
  echo "127.0.0.1 localhost $name" > $rootfs/etc/hosts
  # configure the network using the dhcp
  echo "DHCP" > $rootfs/var/run/inet1-scheme
  # localtime (JST)
  ln -s ../usr/share/zoneinfo/Asia/Tokyo $rootfs/etc/localtime
  # disable pam_loginuid.so in /etc/pam.d/login (for libvirt's lxc driver)
  sed -i '/pam_loginuid/s/^/#/' $rootfs/etc/pam.d/login
  # root password
  echo "Setting root password to 'root'..."
  echo "root:root" | chroot $rootfs chpasswd
  echo "Please change root password!"
  # /etc/rc.d/rc.S
  ed - $rootfs/etc/rc.d/rc.S <<- "EOF"
    230,261d
    156,163d
    26,147d
    16,22d
    w
    EOF
  # /etc/rc.d/rc.M
  ed - $rootfs/etc/rc.d/rc.M <<- "EOF"
    247,248d
    56,79d
    31,38d
    w
    EOF
  # /etc/rc.d/rc.inet1.tradnet
  head -n-93 $rootfs/sbin/netconfig.tradnet > /tmp/netconfig.rconly
  cat <<- EOF >> /tmp/netconfig.rconly
    PCMCIA=n
    RC=$rootfs/etc/rc.d/rc.inet1.tradnet
    IFCONFIG=sbin/ifconfig
    ROUTE=sbin/route
    INET1SCHEME=var/run/inet1-scheme
    IPADDR=127.0.0.1
    NETWORK=127.0.0.0
    DHCPCD=usr/sbin/dhclient
    LOOPBACK=y
    make_config_file
    EOF
  rm -f $rootfs/etc/rc.d/rc.inet1.tradnet
  sh /tmp/netconfig.rconly
  rm -f /tmp/netconfig.rconly
  return 0
}

copy_configuration() {
  if ! cat <<- EOF >> $path/config ; then
    lxc.utsname = $name

    lxc.tty = 4
    lxc.pts = 1024
    lxc.mount.auto = proc sys cgroup
    lxc.arch = $arch
    lxc.cap.drop = sys_module mac_admin mac_override sys_time

    lxc.cgroup.devices.deny = a
    # /dev/null and zero
    lxc.cgroup.devices.allow = c 1:3 rwm
    lxc.cgroup.devices.allow = c 1:5 rwm
    # consoles
    lxc.cgroup.devices.allow = c 5:0 rwm
    lxc.cgroup.devices.allow = c 5:1 rwm
    # /dev/{,u}random
    lxc.cgroup.devices.allow = c 1:8 rwm
    lxc.cgroup.devices.allow = c 1:9 rwm
    lxc.cgroup.devices.allow = c 5:2 rwm
    lxc.cgroup.devices.allow = c 136:* rwm
    # rtc
    lxc.cgroup.devices.allow = c 254:0 rm
    # fuse
    lxc.cgroup.devices.allow = c 10:229 rwm
    EOF
    echo "Failed to add configuration."
    return 1
  fi
  return 0
}

post_process() {
  # nothing do in Plamo Linux
  true
}

do_bindhome() {
  # bind-mount the user's path into the container's /home
  h=`getent passwd $bindhome | cut -d: -f6`
  mkdir -p $rootfs/$h
  echo "$h $rootfs/$h none bind 0 0" >> $path/fstab
  # copy /etc/passwd, /etc/shadow, and /etc/group entries into container
  if ! pwd=`getent passwd $bindhome` ; then
    echo "Warning: failed to copy password entry for $bindhome."
  else
    echo $pwd >> $rootfs/etc/passwd
  fi
  echo `getent shadow $bindhome` >> $rootfs/etc/shadow
}

cleanup() {
  [ -d $dlcache -a -d $rtcache ] || return 0
  # lock, so we won't purge while someone is creating a repository
  (
    if ! flock -n 200 ; then
      echo "Cache repository is busy."
      return 1
    fi
    echo "Purging the download cache..."
    rm -rf --one-file-system $dlcache $rtcache || return 1
    echo "Done."
    return 0
  ) 200> @LOCALSTATEDIR@/lock/subsys/lxc
}

usage() {
  cat <<- EOF
    $prog [-h|--help] -p|--path=<path> -n|--name=<name> --rootfs=<rootfs>
              [--clean] [-r|--release=<release>] [-b|--bindhome=<user>]
              [-a|--arch=<arch>]
    release: $release
    bindhome: bind <user>'s home into the container
    arch: x86 or x86_64: defaults to host arch
    EOF
}

prog=`basename $0`
path="" ; name="" ; rootfs=""
clean=0
release=${release:-5.x}
bindhome=""
arch=`uname -m | sed 's/i.86/x86/'` ; hostarch=$arch
sopts=hp:n:cr:b:a:
lopts=help,path:,name:,rootfs:,clean,release:,bindhome:,arch:
if ! options=`getopt -o $sopts -l $lopts -- "$@"` ; then
  usage
  exit 1
fi
eval set -- "$options"
while true ; do
  case "$1" in
  -h|--help) usage && exit 0 ;;
  -p|--path) path=$2 ; shift 2 ;;
  -n|--name) name=$2 ; shift 2 ;;
  --rootfs) rootfs=$2 ; shift 2 ;;
  -c|--clean) clean=1 ; shift 1 ;;
  -r|--release) release=$2 ; shift 2 ;;
  -b|--bindhome) bindhome=$2 ; shift 2 ;;
  -a|--arch) arch=$2 ; shift 2 ;;
  --) shift 1 ; break ;;
  *) break ;;
  esac
done
if [ $clean -eq 1 -a -z "$path" ] ; then
  cleanup || exit 1
  exit 0
fi
if [ $hostarch == "x86" -a $arch == "x86_64" ] ; then
  echo "Can't create x86_64 container on x86."
  exit 1
fi
if [ -z "$path" ] ; then
  echo "'path' parameter is required."
  exit 1
fi
if [ -z "$name" ] ; then
  echo "'name' parameter is required."
  exit 1
fi
if [ `id -u` -ne 0 ] ; then
  echo "This script should be run as 'root'."
  exit 1
fi
cache=@LOCALSTATEDIR@/cache/lxc
ptcache=$cache/partial-${prog##*-}-$release-$arch
dlcache=$cache/cache-${prog##*-}-$release-$arch
rtcache=$cache/rootfs-${prog##*-}-$release-$arch
if [ -z "$rootfs" ] ; then
  if grep -q "^lxc.rootfs" $path/config ; then
    rootfs=`grep "^lxc.rootfs" $path/config | awk -F= '{print $2}'`
  else
    rootfs=$path/rootfs
  fi
fi
if ! install_plamo ; then
  echo "Failed to install plamo $release."
  exit 1
fi
if ! configure_plamo ; then
  echo "Failed to configure plamo $release for a container."
  exit 1
fi
if ! copy_configuration ; then
  echo "Failed to write configuration file."
  exit 1
fi
post_process
if [ -n "$bindhome" ] ; then
  do_bindhome
fi
if [ $clean -eq 1 ] ; then
  cleanup || exit 1
  exit 0
fi