bootstra-centos6.3.sh

#!/bin/sh

#----
# bootstrap centos6

#release=$(cat /etc/fedora-release | awk '/^Fedora/ {print $3}')
#arch=$(arch)
release=6.3
arch=x86_64
ROOTFS=/rootfs/centos$release-$arch
ROOT_PASSWORD=toor
UTSNAME=centos6.3

# -- prepare rootfs directory
rm -rf $ROOTFS
mkdir -p $ROOTFS

# -- download base system
TMPROOT=/tmp
mkdir -p $TMPROOT

PKG_LIST="yum initscripts passwd rsyslog vim dhclient chkconfig rootfiles policycoreutils openssh-server net-tools nc traceroute"
MIRRORLIST_URL="http://mirrorlist.centos.org/?release=$release&arch=$arch&repo=os"

echo "Fetching release mirror"
MIRROR_URL=$(curl -s -S -f "$MIRRORLIST_URL" | head -n2 | tail -n1)

RELEASE_URL="$MIRROR_URL/Packages/centos-release-$(echo $release | tr '.' '-').el6.centos.9.$arch.rpm"
echo "Fetching from $RELEASE_URL"

curl -sf "$RELEASE_URL" > $TMPROOT/$(basename $RELEASE_URL)
mkdir -p $ROOTFS/var/lib/rpm
rpm --root $ROOTFS --initdb
rpm --root $ROOTFS -ivh $TMPROOT/$(basename $RELEASE_URL)
yum --releasever=$release --installroot $ROOTFS -y --nogpgcheck install $PKG_LIST

# continue only on success
if [ $? -gt 0 ]; then
    exit 1
fi

# -- configure centos

# configure selinux

mkdir -p $ROOTFS/selinux
echo 0 > $ROOTFS/selinux/enforce

# configure /dev
DEV_PATH=${ROOTFS}/dev
rm -rf $DEV_PATH
mkdir -p $DEV_PATH
mknod -m 666 ${DEV_PATH}/null c 1 3
mknod -m 666 ${DEV_PATH}/zero c 1 5
mknod -m 666 ${DEV_PATH}/random c 1 8
mknod -m 666 ${DEV_PATH}/urandom c 1 9
mkdir -m 755 ${DEV_PATH}/pts
mkdir -m 1777 ${DEV_PATH}/shm
mknod -m 666 ${DEV_PATH}/tty c 5 0
mknod -m 666 ${DEV_PATH}/tty0 c 4 0
mknod -m 666 ${DEV_PATH}/tty1 c 4 1
mknod -m 666 ${DEV_PATH}/tty2 c 4 2
mknod -m 666 ${DEV_PATH}/tty3 c 4 3
mknod -m 666 ${DEV_PATH}/tty4 c 4 4
mknod -m 600 ${DEV_PATH}/console c 5 1
mknod -m 666 ${DEV_PATH}/full c 1 7
mknod -m 600 ${DEV_PATH}/initctl p
mknod -m 666 ${DEV_PATH}/ptmx c 5 2

# configure fstab
cat <<EOF > ${ROOTFS}/etc/fstab
proc            /proc         proc    nodev,noexec,nosuid 0 0
devpts          /dev/pts      devpts  defaults 0 0
sysfs           /sys          sysfs   defaults  0 0
EOF

# configure default eth interface
cat <<EOF > ${ROOTFS}/etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=dhcp
ONBOOT=yes
NM_CONTROLLED=no
TYPE=Ethernet
EOF

# configure
cat <<EOF > ${ROOTFS}/etc/sysconfig/network
NETWORKING=yes
HOSTNAME=${UTSNAME}
EOF

# configure host
cat <<EOF > ${ROOTFS}/etc/hosts
127.0.0.1 localhost ${UTSNAME}
EOF

# config resolv.conf
cat <<EOF > ${ROOTFS}/etc/resolv.conf
nameserver 8.8.8.8
search wyrls.net
EOF

# configure init.d
sed -i 's|.sbin.start_udev||' ${ROOTFS}/etc/rc.sysinit
sed -i 's|.sbin.start_udev||' ${ROOTFS}/etc/rc.d/rc.sysinit
# don't mount devpts, for pete's sake
sed -i 's/^.*dev.pts.*$/#\0/' ${ROOTFS}/etc/rc.sysinit
sed -i 's/^.*dev.pts.*$/#\0/' ${ROOTFS}/etc/rc.d/rc.sysinit
# remove loginuid.so from PAM
sed -i 's/^Defaults\ *requiretty/\#&/' ${ROOTFS}/etc/sudoers
sed -i 's/^.*loginuid.so.*$/\#&/' ${ROOTFS}/etc/pam.d/atd
sed -i 's/^.*loginuid.so.*$/\#&/' ${ROOTFS}/etc/pam.d/login
sed -i 's/^.*loginuid.so.*$/\#&/' ${ROOTFS}/etc/pam.d/sshd
sed -i 's/^.*loginuid.so.*$/\#&/' ${ROOTFS}/etc/pam.d/crond
sed -i 's/^.*loginuid.so.*$/\#&/' ${ROOTFS}/etc/pam.d/remote
sed -i 's/^.*loginuid.so.*$/\#&/' ${ROOTFS}/etc/pam.d/ssh-keycat

chroot ${ROOTFS} chkconfig udev-post off
chroot ${ROOTFS} chkconfig network on

# -- set default root password
echo "setting root passwd to '$ROOT_PASSWORD'"
echo "root:$ROOT_PASSWORD" | chroot $ROOTFS chpasswd

# -- enable sshd
chroot $ROOTFS chkconfig sshd on

# -- end
exit

# -- sample lxc config
LXC_ROOT_PATH=/usr/local/var/lib/lxc
LXC_NETWORK_TYPE=veth
LXC_NETWORK_LINK=br1

cat <<EOF >> ${LXC_ROOT_PATH}/${UTSNAME}/config
lxc.utsname = ${UTSNAME}
lxc.tty = 4
lxc.pts = 1024
lxc.rootfs = $ROOTFS
lxc.mount  = ${ROOTFS}/etc/fstab

#networking
lxc.network.type = ${LXC_NETWORK_TYPE}
lxc.network.flags = up
lxc.network.link = ${LXC_NETWORK_LINK}
lxc.network.name = eth0
lxc.network.mtu = 1500

#cgroups
lxc.cgroup.devices.deny = a

# /dev/null and zero
lxc.cgroup.devices.allow = c 1:3 rwm
lxc.cgroup.devices.allow = c 1:5 rwm

# consoles
lxc.cgroup.devices.allow = c 5:1 rwm
lxc.cgroup.devices.allow = c 5:0 rwm
lxc.cgroup.devices.allow = c 4:0 rwm
lxc.cgroup.devices.allow = c 4:1 rwm

# /dev/{,u}random
lxc.cgroup.devices.allow = c 1:9 rwm
lxc.cgroup.devices.allow = c 1:8 rwm
lxc.cgroup.devices.allow = c 136:* rwm
lxc.cgroup.devices.allow = c 5:2 rwm

# rtc
lxc.cgroup.devices.allow = c 254:0 rwm
EOF


# -- end sample config