lxc-ubuntu-cloud.in revision 52c8f624b5f9ef665f33a7aa80e0aa18b91daa4a
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# template script for generating ubuntu container for LXC based on daily cloud
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# Copyright © 2012 Serge Hallyn <serge.hallyn@canonical.com>
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# This program is free software; you can redistribute it and/or modify
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# it under the terms of the GNU General Public License version 2, as
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# published by the Free Software Foundation.
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# This program is distributed in the hope that it will be useful,
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# but WITHOUT ANY WARRANTY; without even the implied warranty of
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# GNU General Public License for more details.
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# You should have received a copy of the GNU General Public License along
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# with this program; if not, write to the Free Software Foundation, Inc.,
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn # if there is exactly one veth network entry, make sure it has an
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn nics=`grep -e '^lxc\.network\.type[ \t]*=[ \t]*veth' $path/config | wc -l`
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn if [ $nics -eq 1 ]; then
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn grep -q "^lxc.network.hwaddr" $path/config || cat <<EOF >> $path/config
4759162d078d86628956cae4846c6efccf548e67Serge Hallynlxc.network.hwaddr= 00:16:3e:$(openssl rand -hex 3| sed 's/\(..\)/\1:/g; s/.$//')
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.utsname = $name
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.pts = 1024
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.rootfs = $rootfs
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.mount = $path/fstab
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.arch = $arch
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cap.drop = sys_module mac_admin
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.deny = a
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# Allow any mknod (but not using the node)
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c *:* m
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = b *:* m
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# /dev/null and zero
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 1:3 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 1:5 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 5:1 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 5:0 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn#lxc.cgroup.devices.allow = c 4:0 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn#lxc.cgroup.devices.allow = c 4:1 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# /dev/{,u}random
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 1:9 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 1:8 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 136:* rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 5:2 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 254:0 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 10:229 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 10:200 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 1:7 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 10:228 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynlxc.cgroup.devices.allow = c 10:232 rwm
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynproc $rootfs/proc proc nodev,noexec,nosuid 0 0
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynsysfs $rootfs/sys sysfs defaults 0 0
4759162d078d86628956cae4846c6efccf548e67Serge HallynLXC Container configuration for Ubuntu Cloud images.
4759162d078d86628956cae4846c6efccf548e67Serge HallynGeneric Options
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn[ -r | --release <release> ]: Release name of container, defaults to host
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn[ -a | --arch ]: Arhcitecture of container, defaults to host arcitecture
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn[ -C | --cloud ]: Configure container for use with meta-data service, defaults to no
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn[ -T | --tarball ]: Location of tarball
52c8f624b5f9ef665f33a7aa80e0aa18b91daa4aSerge Hallyn[ -d | --debug ]: Run with 'set -x' to debug errors
4759162d078d86628956cae4846c6efccf548e67Serge HallynOptions, mutually exclusive of "-C" and "--cloud":
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn [ -i | --hostid ]: HostID for cloud-init, defaults to random string
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn [ -u | --userdata ]: Cloud-init user-data file to configure container on start
52c8f624b5f9ef665f33a7aa80e0aa18b91daa4aSerge Hallyn [ -S | --auth-key ]: SSH Public key file to inject into container
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn [ -L | --nolocales ]: Do not copy host's locales into container
52c8f624b5f9ef665f33a7aa80e0aa18b91daa4aSerge Hallynoptions=$(getopt -o a:hp:r:n:Fi:CLS:T:d -l arch:,help,path:,release:,name:,flush-cache,hostid:,auth-key:,cloud,no_locales,tarball:,debug -- "$@")
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# Code taken from debootstrap
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynif [ -x /usr/bin/dpkg ] && /usr/bin/dpkg --print-architecture >/dev/null 2>&1; then
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynelif type udpkg >/dev/null 2>&1 && udpkg --print-architecture >/dev/null 2>&1; then
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn --) shift 1; break ;;
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynif [ $hostarch = "i386" -a $arch = "amd64" ]; then
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "can't create amd64 container on i386"
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynif [ $arch != "i386" -a $arch != "amd64" ]; then
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "Only i386 and amd64 are supported by the ubuntu cloud template."
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynif [ -z "$path" ]; then
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "'path' parameter is required"
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "This script should be run as 'root'"
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# determine the url, tarball, and directory names
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn# download if needed
4759162d078d86628956cae4846c6efccf548e67Serge Hallynif [ -n "$tarball" ]; then
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn url1=`ubuntu-cloudimg-query precise daily $arch --format "%{url}\n"`
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn url2=`echo $url1 | sed -e 's/.tar.gz/-root\0/'`
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn if [ $flushcache -eq 1 ]; then
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn if [ ! -f $filename ]; then
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn if [ $cloud -eq 0 ]; then
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "Configuring for running outside of a cloud environment"
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "If you want to configure for a cloud evironment, please use '-- -C' to create the container"
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyninstance_id: lxc-$host_id
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn if [ $locales -eq 1 ]; then
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn cp /usr/lib/locale/locale-archive $rootfs/usr/lib/locale/locale-archive
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn echo "Inserted SSH public key from $auth_key into /home/ubuntu/.ssh/authorized_keys"
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn if [ ! -f $userdata ]; then
4759162d078d86628956cae4846c6efccf548e67Serge Hallyn#cloud-config
4759162d078d86628956cae4846c6efccf548e67Serge Hallynoutput: {all: '| tee -a /var/log/cloud-init-output.log'}
4759162d078d86628956cae4846c6efccf548e67Serge Hallynapt-mirror: $MIRROR
4759162d078d86628956cae4846c6efccf548e67Serge Hallynmanage_etc_hosts: localhost
4759162d078d86628956cae4846c6efccf548e67Serge Hallynlocale: $(/usr/bin/locale | awk -F= '/LANG=/ {print$NF}')
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "Please login as user ubuntu with password ubuntu."
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "Configured for running in a cloud environment."
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallyn echo "If you do not have a meta-data service, this container will likely be useless."
d1458ac8d13880f83fa2d1e08623b97c50d311d7Serge Hallynecho "Container $name created."