jeos/install.JeOS/JeOS-postconfig.sh

#!/bin/bash

# We will tail outputs to file, so we need get correctly errors from pipe

set -o pipefail

#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.

# Get if we are on x86 or SPARC

ALTROOT=$1
HARDERN=$2

ISA_INFO=`/sbin/uname -p`

echo "INFO: We are on platform: $ISA_INFO"

echo "START: JeOS customization and Fast Fixes"

# JeOS default Customizations and FastFixes here

# Load ssh key (hack for now, will be service loading key from instance zpool in future)

echo "Getting logic to load user specifics ssh authorized keys (Skipped - now SMF service)"

# Note: We need disable sshd by default !!!

# Will set them later to now if SSH keys based will work OK

echo "Disable password login in SSHD"

gsed -i -e 's/PasswordAuthentication yes/PasswordAuthentication no/g' \
       -e 's/PAMAuthenticationViaKBDInt yes/PAMAuthenticationViaKBDInt no/g' \
       ${ALTROOT}/etc/ssh/sshd_config

if [ $ISA_INFO = "sparc" ] ; then
  echo "No direct drivers Fast Fixes for Ldoms (SPARC), so (skipping)"
else

 # Fast fix for ide timetouts in Parallels and some QEMU versions and drivates
 # This in addtion to DMA disable options in VA GRUB menu

 echo "FastFix [2368]: for some IDE CD-ROM timetous"

 # Bug 2368 - Install from CD "hangs" on Ferrari 5000, CD medium is not selectable
 # http://defect.opensolaris.org/bz/show_bug.cgi?id=2368

 gsed -i -e 's/timing_flags=0x0/timing_flags=0x1/g' \
   ${ALTROOT}/kernel/drv/ata.conf

 # Make a fastfix for dnet driver issues from SXDE B113 (Binary Kernel Compatility)
 # 6768204 osol_2009.06u2 Updated, P2 driver/dnet dnet interface takes a long
 #     time to resume after plumb/unplumb in Hyper-V virtual machine
 # http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6768204


 echo "FastFix [6768204]: 'dnet' driver timeous (for now from SXDE B113)"

 cp /usr/share/distro_const/virt_assist/fastfixes/SUNWos86r.sxce.b113/archive/kernel/drv/dnet \
  ${ALTROOT}/kernel/drv/dnet

 cp /usr/share/distro_const/virt_assist/fastfixes/SUNWos86r.sxce.b113/archive/kernel/drv/amd64/dnet \
  ${ALTROOT}/kernel/drv/amd64/dnet
fi

echo "FastFix [4994422]: for time message in virtualizations [4994422]"

# 4994422 WARNING: Time of Day clock error: reason [Jumped by 0x79].
# http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=4994422

# In virtualizations clocks are often moved in time, so we will disable harmelss TOD waring
cat <<EOF >>${ALTROOT}/etc/system
set tod_validate_enable=0
EOF

# Copy license file (TBD - finalize license)

echo "Copy updated license file"

# For now same lincese for x86 and SPARC
# We wil try to use common install base and only support LDoms (SPARC),
# so no SPARC specifics packages will be presend (To drives tight to SUN4V)

if [ $ISA_INFO = "sparc" ] ; then
 cp /usr/share/virt_assist/install.JeOS/license.media/LICENSE.sparc.JeOS \
  ${ALTROOT}/etc/notices/LICENSE
 cp /usr/share/virt_assist/install.JeOS/license.media/LICENSE.sparc.JeOS \
  ${ALTROOT}/etc/notices/LICENSE.JeOS
else
 cp /usr/share/virt_assist/install.JeOS/license.media/LICENSE.i386.JeOS \
  ${ALTROOT}/etc/notices/LICENSE
 cp /usr/share/virt_assist/install.JeOS/license.media/LICENSE.i386.JeOS \
  ${ALTROOT}/etc/notices/LICENSE.JeOS
fi

# Setting up default system language to have setup all locale stuff on boot
# AI will do this for JeOS

echo "FASTFIX for LOCALES (Now default LANG=C,LC_ALL=C)"

# cat <<EOF >>${ALTROOT}/etc/default/init
# LANG=en_US.UTF-8
# LC_ALL=en_US.UTF-8
# EOF

# Open Source ni driver for ne2000 rtl8029 for Parrallels (or QEMU) (skipped)
# Will add it as local IPS package VGURUni (only for 32 bit) to have it in license file

# This step is skipped, becuase for JeOS user can install driver from Parralles ISO media.

echo "FASTFIX for ZFS ARCH cache (skiped)"

# Do we realy need this for JeOS or for final image ?
# Modify /etc/system to make ZFS less mem hungry
# We target 512MB RAM (ZFS Cache: 65MB 68157440 0x4100000)
# $CAT <<EOF >>${ALTROOT}/etc/system
# set zfs:zfs_arc_max=0x4100000
# set zfs:zfs_vdev_cache_size=0
# EOF

# FastFix for Bug 5394 "OSOL1108 RC2 SUNWbeadm missing file and dependency, can't make Pure CLI"
# http://defect.opensolaris.org/bz/show_bug.cgi?id=5394
# Wee include in JeOS a SUNWinstall to fix it
#  but for plain recovery console we will need it

echo "FastFix [5394]: Make beadm functional (Skipped, included SUNWinstall)"

# Get IP on boot (Chanlenge in NWAM, because it is runing on backgroud :-( )

echo "Adding logic to show IP from NWAM DHCP on console"

mkdir -p ${ALTROOT}/etc/nwam/ulp/vm-instance

cp /usr/share/virt_assist/install.JeOS/addons/etc/nwam/ulp/check-conditions \
 ${ALTROOT}/etc/nwam/ulp/check-conditions

chmod 0755 ${ALTROOT}/etc/nwam/ulp/check-conditions

cp /usr/share/virt_assist/install.JeOS/addons/etc/nwam/ulp/vm-instance/bringup \
  ${ALTROOT}/etc/nwam/ulp/vm-instance/bringup

chmod 0755 ${ALTROOT}/etc/nwam/ulp/vm-instance/bringup

cp /usr/share/virt_assist/install.JeOS/addons/etc/nwam/ulp/vm-instance/teardown \
  ${ALTROOT}/etc/nwam/ulp/vm-instance/teardown

chmod 0755 ${ALTROOT}/etc/nwam/ulp/vm-instance/teardown

# Hiding ssh new keys, becaue svc "-c" first configrations don't use deps ???

## gsed -i -e 's/echo Creating/#echo Creating/g' ${ALTROOT}/lib/svc/method/sshd

# Placholder for /etc/issues , last mepty line is for NWAM IP !!!

echo "Filling up /etc/issues as first touch informations"

cp /usr/share/virt_assist/install.JeOS/addons/etc/issue \
  ${ALTROOT}/etc/issue

# Placholder for /issues , last mepty line is for NWAM IP !!!

echo "Filling up /etc/issues as first touch informations"

cp /usr/share/virt_assist/install.JeOS/addons/etc/issue \
  ${ALTROOT}/etc/issue


# Placeholder for /etc/motd

echo "Filling up /etc/motd as second touch informations"

# Add build info and version here (Version will be taken from SC when we integrate)

. /usr/share/distro_const/virt_assist/.build

if [ $ISA_INFO = "sparc" ] ; then

gsed -e "s/#BUILD#/${BUILD}/g" \
 /usr/share/virt_assist/install.JeOS/addons/etc/motd.sparc \
 >${ALTROOT}/etc/motd

else

gsed -e "s/#BUILD#/${BUILD}/g" \
 /usr/share/virt_assist/install.JeOS/addons/etc/motd.i386 \
 >${ALTROOT}/etc/motd

fi

echo "Filling up /export/home/osol/README.txt as second touch informations"

gsed -e "s/#BUILD#/${BUILD}/g" \
 /usr/share/virt_assist/install.JeOS/addons/export/home/osol/README.txt \
 >${ALTROOT}/export/home/osol/README.txt

echo "Filling up /export/home/osol/.links/startpage.html web based informations"

mkdir ${ALTROOT}/export/home/osol/.links

cp /usr/share/virt_assist/install.JeOS/addons/export/home/osol/.links/startpage.html \
  ${ALTROOT}/export/home/osol/.links/startpage.html

if [ $ISA_INFO = "sparc" ] ; then
  echo "No grub menu for SPARC (skipping)"
else

# Generate apropriate GRUB JeOS menus
# 6739497 GRUB Splashimage in OpenSolaris causes broken serial console boot
# http://defect.opensolaris.org/bz/show_bug.cgi?id=5721#c9

  echo "Generating CLI JeOS oriented GRUB menus"
  # YES, not altroot here
  cp /usr/share/virt_assist/install.JeOS/addons/rpool/boot/grub/menu.lst \
    /rpool/boot/grub/menu.lst
fi

echo "FastFix [4336]: Createing links for '/usr/has/bin/vi'"

# FastFix for: 4336 AI image should have link to /usr/has/bin/vi
# http://defect.opensolaris.org/bz/show_bug.cgi?id=4336

ln -s ../has/bin/vi  ${ALTROOT}/usr/bin/vim
ln -s ../has/bin/vi  ${ALTROOT}/usr/bin/vi

echo "Add some FasFixes defaults to system variables"

echo "FastFix [2188],[6561]: Increasing a PKG network timeouts and retries"

# [2188] Client must fail gracefully when network timeout occurs
# http://defect.opensolaris.org/bz/show_bug.cgi?id=2188
# [6561] Ability to tune number of retries for pkg during net install
# http://defect.opensolaris.org/bz/show_bug.cgi?id=6561

# Put Solaris system VI to path as default and direclty to users
cat <<EOF >>${ALTROOT}/etc/profile
# PKG_CLIENT_TIMEOUT - (30s) integer value in seconds to wait before timing out (socket timeout)
export PKG_CLIENT_TIMEOUT=120
# PKG_TIMEOUT_MAX - (4) integer value representing the number of times to retry before failing (retries)
export PKG_TIMEOUT_MAX=16
EOF

# Make small scrip to mount ISO images, becuase removal media manager is dependent on GNOME

echo "Copy ISO mounting scripts"

cp /usr/share/virt_assist/install.JeOS/fastfix/sbin/mountisos \
 ${ALTROOT}/sbin/mountisos

echo "Preload SMF service for faster boot in ${ALTROOT}"
echo " ! 'svccfg' and 'svcadm' errors bellow are harmless and can be ignored !"

/usr/share/virt_assist/install.JeOS/svcrepo.JeOS ${ALTROOT} \
 /usr/share/virt_assist/install.JeOS/jeos_site_smf.xml

if [ "x$HARDERN" == "x--harden" ] ;  then
  echo "Calling Security Hardening from ISC Kit in ${ALTROOT}"
  /usr/share/virt_assist/secure.JeOS.isc/run.sh ${ALTROOT}
  echo "Finished Security Hardening from ISC Kit in ${ALTROOT}"
fi

echo "Add vm-instance smf service - will handle ssh keys, sshd and instance data"
echo "Default opensolaris service 'network/ssh' now depend on this service"

cp /usr/share/virt_assist/install.JeOS/addons/lib/svc/method/vm-instance \
 ${ALTROOT}/lib/svc/method/vm-instance

chmod 0755 ${ALTROOT}/lib/svc/method/vm-instance

cp /usr/share/virt_assist/install.JeOS/addons/var/svc/manifest/site/vm-instance.xml \
 ${ALTROOT}/var/svc/manifest/site/vm-instance.xml

echo "Updating boot archive in ${ALTROOT} so changed system values are in boot image"
bootadm update-archive -R ${ALTROOT}

# Fix issues to match JeOS needs

if [ "x$HARDERN" == "x--harden" ] ;  then
cp /usr/share/virt_assist/install.JeOS/addons/etc/issue.harden \
  ${ALTROOT}/etc/issue
fi

# Add free line thre sowe can put message there
echo >> ${ALTROOT}/etc/issue

# Take full FMRI snapshot of installed pkages, so we reproduce it in future
# By direct install of by creating of local repository snapshots

echo "Generating list of install packages for future references"

pkg -R ${ALTROOT}/ list -s |sort -u >${ALTROOT}/.pkgsnames-JeOS.$ISA_INFO.lst

pkg -R ${ALTROOT}/ list -Hv | awk '{print $1}'| sed s%\pkg:/%%|sort -u >${ALTROOT}/.pkgsfmris-JeOS.$ISA_INFO.lst

# pkg size cleanup

echo "Setting up official OpenSolaris IPS repositories"

pkg -R ${ALTROOT} set-publisher -P -O http://pkg.opensolaris.org/release/ opensolaris.org
pkg -R ${ALTROOT} set-publisher  -O http://pkg.opensolaris.org/contrib/ contrib

echo "Setting up pkg to automaticaly cleanup download cache"
pkg -R ${ALTROOT} set-property flush-content-cache-on-success True

echo "Cleaing iPKG database (Cache)"

rm -r ${ALTROOT}/var/pkg/download/* >/dev/null 2>&1

echo "Cleaing iPKG database (Deep [Indexes and Calalogs]), review it ?"
rm -r ${ALTROOT}/var/pkg/catalog/* >/dev/null 2>&1
rm -r ${ALTROOT}/var/pkg/index/*  >/dev/null 2>&1

echo "FINISH: JeOS customization and Fast Fixes"

exit 0