Debian Administration

I don't mind at all - there are 3 interesting scripts here:

• xen_make_base.sh - the script used to generate the initial image
• xen_config_base.sh - a basic config script called from a chroot in the image created above
• xen_new_host.sh - clones the base image, creates host specific info, xen config file and a few others.

  xen_make_bash.sh

  #!/bin/sh
  #
  echo '$Id: xen_make_base.sh 72 2006-04-11 08:00:27Z admin $'
  
  cnf=/hoeg/share/xen.conf
  if [ -e $cnf ] ; then
      source $cnf
  else
      echo "Configuration $cnf not found. Aborting..."
      exit 1
  fi
  source $(dirname $0)/$shared
  
  echo "Setting up..."
  
  lv="${lv}_base"
  dev=/dev/$vg/$lv
  mnt=$(mktemp -d)
  
  if [ -e $dev ] ; then
      echo "Removing old LV..."
      oldmnt=$(mount | grep $lv | cut -f3 -d ' ')
      if [ x"$oldmnt" != "x" ] ; then
  	umount $oldmnt
  	rmdir $oldmnt
      fi
      remove_LV $dev
  fi
  
  echo "Creating and mounting LV..."
  /sbin/lvcreate -L${xen_root_size} -n $lv $vg
  create_FS $dev $fs_type
  mount -t $fs_type $dev $mnt
  
  if [ ! -d $src/pool ] ; then
      echo "Mounting $src..."
      mount $src
  fi
  
  echo "Bootstrapping ${distribution}/${flavour}..."
  cdebootstrap -q -f $flavour $distribution $mnt $aptsrc
  
  echo "Copying packages and scripts for installation..."
  cp $debsrc/stage? $mnt/tmp -R
  cp $bin/$config_script $mnt/tmp/
  lists=/var/lib/apt/lists
  cp $lists/*Packages ${mnt}${lists}
  cp $lists/*Release  ${mnt}${lists}
  kernel=$(uname -r | sed 's/xen0/xenU/')
  mkdir $mnt/lib/modules
  cp /lib/modules/*-xenUphh $mnt/lib/modules/ -R
  touch $mnt/CONFIGURE_ME
  
  echo "Calling configure script in chroot"
  chroot $mnt /tmp/$config_script $fs_type $xen_domain $xen_net
  
  echo "Making tarball..."
  if [ -e $tarsrc ] ; then
      rm $tarsrc
  fi
  cd $mnt
  tar -czf $tarsrc *
  cd /
  
  echo "Umounting and removing ${mnt}..."
  umount $mnt
  rmdir $mnt
  
  echo "Removing LV ${dev}..."
  remove_LV $dev
  
  echo "Done!"
  
  exit 0
  

  xen_config_base.sh

  #!/bin/sh
  #
  echo '$Id: xen_config_base.sh 186 2006-06-08 20:40:52Z admin $'
  
  pkglist="/tmp/packages.list"
  fs_type=$1
  domain=$2
  net=$3
  
  if [ ! -e /CONFIGURE_ME ] ; then
      echo "Do not run me on anything but a fresh XEN host. Aborting."
      exit 1
  else
      rm /CONFIGURE_ME
  fi
  
  function log()
  {
      echo "Fixing ${1}..."
  }
  
  unset LANGUAGE LC_ALL LANG
  
  log "/lib/tls"
  mv /lib/tls /lib/tls.disabled
  
  log "/etc/fstab"
  cat > /etc/fstab << _END_
  #              	  
  proc            /proc           proc	defaults		0 0
  /dev/hda1       /               $fs_type	noatime,errors=remount-ro,data=writeback 0 1
  /dev/hda2       none            swap    sw              	0 0
  /dev/hda3	/srv		$fs_type	noatime,data=writeback			0 0
  _END_
  
  log "shadow passwords"
  /sbin/shadowconfig on
  
  log "host name"
  echo "BASE_SYSTEM_NOT_CONFIGURED" > /etc/hostname
  
  log "network settings"
  mkdir /etc/network
  
  cat > /etc/network/interfaces << _END_
  auto lo
  iface lo inet loopback
  _END_
  
  cat > /etc/network/options << _END_
  ip_forward=no
  spoofprotect=yes
  syncookies=no
  _END_
  
  cat > /etc/resolv.conf << _END_
  search $domain
  nameserver ${net}.2
  nameserver 10.0.0.1
  _END_
  
  cat > /etc/hosts << _END_
  127.0.0.1	localhost.localdomain	localhost
  10.0.0.1	doris.lan.tz.hoeg.com	doris
  ${net}.1	doris.$domain	doris
  ${net}.2	donna.$domain	doris
  ${net}.3	debbie.$domain	doris
  ${net}.4	diana.$domain	doris
  _END_
  
  log "APT"
  cat > /etc/apt/sources.list << _END_
  deb http://security.debian.org/ stable/updates main contrib non-free
  deb http://ftp.us.debian.org/debian/ stable main non-free contrib
  deb http://www.backports.org/debian/ sarge-backports main
  _END_
  
  cat > /etc/apt/preferences << _END_
  Package: *
  Pin: release a=sarge-backports
  Pin-Priority: 90
  _END_
  
  log "CFengine"
  mkdir /etc/cfengine
  cat > /etc/cfengine/update.conf << _END_
  # Basic update.conf to get us started
  control:
      any::
  	actionsequence	= ( copy )
          domain		= ( tz.hoeg.com )
  	SplayTime	= ( 0 )
  
  ignore:
      .svn
  
  copy:
      /srv/cfengine.tz/cfengine
  	dest=/etc/cfengine
  	r=inf
  	mode=644
  	type=binary
  	exclude=*~
  	exclude=#*
  	server=doris.$domain
  _END_
  
  log "consoles"
  inittemp=$(mktemp)
  cat /etc/inittab | grep -v "^[2-6]:23:respawn" > $inittemp
  mv $inittemp /etc/inittab
  
  log "bootstrap script"
  cat > /boot_strap.sh << _END_
  #!/bin/sh
  passwd
  cfagent -q -v > ~/cf.log
  _END_
  chmod 755 /boot_strap.sh
  
  log "MOTD"
  cat > /etc/motd << _END_
  Run /boot_strap.sh to:
   - change the root password
   - run cfagent -q -v > ~/cf.log
  _END_
  
  log "packages"
  /usr/bin/dpkg -P cdebootstrap-helper-diverts
  cd /tmp
  for s in stage? ; do
      cd $s
      /usr/bin/dpkg -i *.deb
      cd ..
  done
  /usr/bin/dpkg --configure -a
  
  log "invalid keys"
  rm /var/lib/cfengine2/ppkeys/*
  rm /etc/ssh/ssh_host*key*
  
  log "clean up"
  rm /var/cache/apt/srcpkgcache.bin
  rm /tmp/stage? -R
  
  exit 0

  xen_new_host.sh

  #!/bin/bash
  
  echo '$Id: xen_new_host.sh 205 2006-06-17 14:19:10Z admin $'
  
  force=0
  go_from="lv"
  
  cnf="/hoeg/share/xen.conf"
  if [ -e $cnf ] ; then
      source $cnf
  else
      echo "Configuration $cnf not found. Aborting..."
      exit 1
  fi
  source $(dirname $0)/$shared
  
  # mandatory parameters
  name=""
  ip=""
  
  # optional parms
  data_size=""
  make_data=0
  
  # defaults
  header='$Id: xen_new_host.sh 205 2006-06-17 14:19:10Z admin $'
  
  function print_help() {
      echo "Usage: $0 [options]"
      cat << _END_
  Required:
   -i IP address (example: -i 20  for ${xen_net}.20)
   -n name of VM (example: -n doris)
   -m memory in MB (default: -m $xen_mem)
  
  Optional:
   -g start from section [lv|base|config|xen]
      lv     = create LVs
      base   = unpack base system
      config = configure base system
      xen    = create XEN configuration file
   -f force overwrite of existing LVs (DANGEROUS)
   -r size of root LV in GB (default: -r $xen_root_size)
   -s size of data LV in GB (example: -s 2)
   -t file system type (default: -t $fs_type)
   -v name of VG (default: -v $vg)
      
  _END_
  }
  
  function check_LV() {
      if [ -e $1 ] ; then
  	if [ $force -eq 1 ] ; then
  	    remove_LV $1
  	else
  	    echo "LV $1 already exists. Aborting..."
  	    exit 3
  	fi
      fi
  }
  
  if [ "$#" -lt 4 ] ; then
      print_help
      exit 1
  fi
  
  until [ -z "$1" ] ; do
      case "$1" in
      # mandatory
      "-i")
          shift
          ip="${xen_net}.${1}"
  	shift
          ;;
      "-n")
          shift
          name=$1
          shift
          ;;
      "-m")
          shift
          mem=$1
  	shift
          ;;
      # optional
      "-g")
          shift
  	go_from=$1
          shift
          ;;
      "-f")
  	force=1
          shift
          ;;
      "-r")
          shift
          xen_root_size=$1
          shift
          ;;
      "-s")
          shift
          data_size=$1
  	make_data=1
          shift
          ;;
      "-t")
          shift
          fs_type=$1
          shift
          ;;
      "-v")
          shift
          vg=$1
          shift
          ;;
      *)
  	echo "Unknown parameter!"
  	echo "Error: $1"
  	exit 2
      esac
  done
  	
  lv_root_name=${lv}_${name}_root
  lv_swap_name=${lv}_${name}_swap
  lv_data_name=${lv}_${name}_data
  
  lv_root_dev=/dev/${vg}/${lv_root_name}
  lv_swap_dev=/dev/${vg}/${lv_swap_name}
  lv_data_dev=/dev/${vg}/${lv_data_name}
  
  function do_LV_and_FS() {
      echo "Creating LVs..."
      # root
      check_LV $lv_root_dev
      /sbin/lvcreate -L${xen_root_size} -n ${lv_root_name} ${vg}
      create_FS ${lv_root_dev} ${fs_type}
  
      # swap
      check_LV $lv_swap_dev
      /sbin/lvcreate -L${xen_swap_size} -n ${lv_swap_name} ${vg}
      create_FS ${lv_swap_dev} "swap"
  
      # data
      check_LV $lv_data_dev
      if [ $make_data == 1 ] ; then
          /sbin/lvcreate -L${data_size}G -n ${lv_data_name} ${vg}
          create_FS ${lv_data_dev} ${fs_type}
      fi
  }
  
  
  function do_base_system() {
      echo "Creating base file system..."
      mntdir=$(mktemp -d)
      /bin/mount -t ${fs_type} ${lv_root_dev} ${mntdir}
      cd $mntdir
      tar xfz $tarsrc
  }
  
  function do_base_config() {
      echo "Configuring ${name}..."
      echo $name > $mntdir/etc/hostname
  
      echo "Setting XEN identifier..."
      echo $(date) > $mntdir/etc/xenU
  
      echo "Configuring network at ${ip}..."
      cat > $mntdir/etc/network/interfaces << _END_
  auto lo
  iface lo inet loopback
  
  auto eth0
  iface eth0 inet static
      address $ip
      netmask 255.255.255.0
      gateway ${xen_net}.1
  _END_
  
      echo "Configuring host file..."
      cat > $mntdir/etc/hosts << _END_
  127.0.0.1	localhost.localdomain	localhost
  10.0.0.1	doris.lan.tz.hoeg.com	doris
  ${xen_net}.1	doris.$xen_domain	doris
  ${ip}	${name}.${xen_domain}	${name}
  _END_
  
      echo "Creating SSH keys..."
      auth=/root/.ssh/authorized_keys
      /usr/bin/ssh-keygen -q -t dsa -f $mntdir/etc/ssh/ssh_host_dsa_key -N ''
      if [ ! -d $mntdir/root/.ssh ] ; then
  	mkdir $mntdir/root/.ssh
      fi
      /usr/bin/ssh-keygen -q -t dsa -f $mntdir/root/.ssh/id_dsa -N ''
      if [ "$(grep root@${name}$ $auth | wc -l)" -gt 0 ] ; then
  	tempfile=$(mktemp)
  	grep -v root@${name}$ $auth > $tempfile
  	mv $tempfile $auth
      fi
      cat $mntdir/root/.ssh/id_dsa.pub >> $auth
  
      echo "Creating CFengine keys..."
      cfdir=/var/lib/cfengine2/ppkeys
      cd $mntdir/$cfdir
      cp $cfdir/localhost.pub root-10.0.0.1.pub
      ln -s root-10.0.0.1.pub root-10.0.1.1.pub
      ln -s root-10.0.0.1.pub root-10.0.2.1.pub
      # rm $mntdir/var/lib/cfengine2/ppkeys/localhost.*
      cd / ; chroot $mntdir /bin/sh -c "cfkey ; exit"
      cp $mntdir/$cfdir/localhost.pub $cfdir/root-$ip.pub
  }
  
  function do_xen_config() {
      echo "Creating XEN configuration file for ${name}..."
      disk="'phy:$vg/$lv_root_name,hda1,w', 'phy:$vg/$lv_swap_name,hda2,w'"
      if [ $make_data == 1 ] ; then
          disk="[ ${disk}, 'phy:$vg/$lv_data_name,hda3,w' ]"
      else
  	disk="[ ${disk} ]"
      fi
      # restart values: always, onreboot, never
      cat > $xen_cfgdir/config-$name << _END_
  # Autogenerated by: $header
  #
  kernel = "/boot/vmlinuz-2.6-xenU"
  ramdisk = "/boot/initrd-2.6-xenU"
  memory = $xen_mem
  name = "$name"
  vif = [ 'ip=$ip' ]
  disk = $disk
  root = "/dev/hda1 ro"
  extra = "2"
  restart = 'onreboot'
  _END_
  }
  
  case "$go_from" in
      lv)
  	do_LV_and_FS
  	do_base_system
  	do_base_config
  	do_xen_config
  	;;
      base)
  	do_base_system
  	do_base_config
  	do_xen_config
  	;;
      config)
  	do_base_config
  	do_xen_config
  	;;
      xen)
  	do_xen_config
  	;;
      *)
  	echo "Unknown option. Aborting..."
  	exit 1
  esac
  
  /bin/umount -l $mntdir
  
  echo "To fire up your new domain: xm create -c $xen_cfgdir/config-$name"
  
  exit 0

Generally people don't install a kernel package in a chroot environment.

Still if you do you'll want to make sure that /proc and /sys are mounted in the chrrot environment. Something like this:

mount --bind /proc /path/to/chroot/proc
mount --bind /sys /path/to/chroot/sys
chroot /path/to/chroot
umount /path/to/chroot/sys
umount /path/to/chroot/proc

With these two mounts the kernel script will be able to detect your root drive, etc, and install.

Steve