Backport sig_core/rocky-kiwi-descriptions#3 and mod readme

Reviewed-on: #8

README.md

@@ -0,0 +1,82 @@
+# R9 specific kickstarts
+
+This branch has Rocky Linux 9 specific kickstarts. These kickstarts vary
+between cloud images and live images provided in our repositories and
+mirrors.
+
+If you are looking for the kiwi version of these configurations, check
+out [this repo](https://git.resf.org/sig_core/rocky-kiwi-descriptions/src/branch/r9).
+
+## Structure
+
+In the root of the repository are the general kickstarts in use that any
+user can pick up, use, or modify to their liking to make their own Rocky
+Linux live images, cloud images, and so on. These kickstarts are generated
+by templates that live in the various directories in this repository.
+
+* `cloud` -> Cloud image templates
+* `live` -> Live image templates
+* `container` -> Container image templates
+
+These kickstarts are generated using `ksflatten`. Changes made to the
+kickstarts generally match between the templates and the full kickstarts
+in the root.
+
+For SIG/Core's usage, we use the `live` area as a "working" directory,
+where we use the split parts in our automation for the images and the
+pre-flattened versions are there for the convenience of all users. This
+is easier than using the pre-made ones in empanadas.
+
+## Building Live Images
+
+To build live images, you will need to use `livecd-creator` or
+`livemedia-creator`. The former is simpler to use and generally works without
+many issues. The latter can be a bit more tricky to work with and typically
+runs the installer virtually. However, it can be used without a virtual machine
+like in a mock shell.
+
+Optionally, it is possible to use `empanadas` found in the SIG/Core toolkit.
+
+### Automatic: Using empanadas
+
+To be filled.
+
+### Manual: Using livemedia-creator
+
+To use livemedia-creator without using virt, you can use a mock shell. To
+setup a mock chroot for the purpose of building a live image, you would
+set it up like so:
+
+```
+# Install mock if you haven't already
+% dnf install epel-release -y
+% dnf install mock -y
+
+# Add a user to the mock group
+% usermod -a -G mock user
+
+# As the user, setup the mock environment
+% mock -r rocky-9-x86_64 --init
+% mock -r rocky-9-x86_64 --install lorax-lmc-novirt vim-minimal pykickstart git
+# You may need to be in permissive mode temporarily if you have issues
+% setenforce 0
+# Enter the shell
+% mock -r rocky-9-x86_64 --shell --isolation=simple --enable-network
+
+# Clone the kickstarts and run an installation
+% git clone https://github.com/rocky-linux/kickstarts -b r9
+% cd kickstarts
+% livemedia-creator --ks Rocky-9-Workstation.ks \
+  --no-virt \
+  --resultdir /var/lmc \
+  --project="Rocky Linux" \
+  --make-iso \
+  --volid Rocky-Workstation-9 \
+  --iso-only \
+  --iso-name Rocky-Workstation-9-x86_64.iso \
+  --releasever=9 \
+  --nomacboot  # This option is important to set, mkfs.hfsplus is not available
+```
+
+With the example above, all of the results will appear in
+`/var/lib/mock/rocky-9-x86_64/root/var/lmc`.

Rocky-9-Azure-Base.ks

@@ -0,0 +1,274 @@
+#version=DEVEL
+# Keyboard layouts
+keyboard 'us'
+# Root password
+rootpw --iscrypted thereisnopasswordanditslocked
+# System language
+lang en_US.UTF-8
+# Shutdown after installation
+shutdown
+# System timezone
+timezone UTC --isUtc
+# Use text mode install
+text
+# Network information
+network  --bootproto=dhcp --device=link --activate
+# Use network installation
+url --url="https://download.rockylinux.org/stg/rocky/9/BaseOS/$basearch/os/"
+# System authorization information
+auth --enableshadow --passalgo=sha512
+# Firewall configuration
+firewall --enabled --service=ssh
+firstboot --disable
+# SELinux configuration
+selinux --enforcing
+
+# System services
+services --disabled="kdump,rhsmcertd" --enabled="NetworkManager,sshd,rsyslog,chronyd,cloud-init,cloud-init-local,cloud-config,cloud-final,rngd"
+# System bootloader configuration
+bootloader --append="rootdelay=300 console=ttyS0 earlyprintk=ttyS0  no_timer_check crashkernel=1G-4G:192M,4G-64G:256M,64G-:512M net.ifnames=0" --location=mbr --timeout=1
+
+# Disk partitioning information
+# NOTE(neil): 2023-05-12 NONE of reqpart, clearpart, zerombr can be used. We
+# are creating partitions manually in %pre to ensure proper ordering as
+# Anaconda does NOT ensure the ordering `part` commands.
+part /boot/efi --fstype="efi" --onpart=vda1
+part /boot --fstype="xfs" --label=boot --onpart=vda2
+part prepboot --fstype="prepboot" --onpart=vda3
+part biosboot --fstype="biosboot" --onpart=vda4
+part /         --size=8000 --fstype="xfs"    --mkfsoptions "-m bigtime=0,inobtcount=0" --grow --onpart=vda5
+
+%pre
+# Clear the Master Boot Record
+dd if=/dev/zero of=/dev/vda bs=512 count=1
+# Create a new GPT partition table
+parted /dev/vda mklabel gpt
+# Create a partition for /boot/efi
+parted /dev/vda mkpart primary fat32 1MiB 100MiB
+parted /dev/vda set 1 boot on
+# Create a partition for /boot
+parted /dev/vda mkpart primary xfs 100MiB 1100MiB
+# Create a partition for prep
+parted /dev/vda mkpart primary 1100MiB 1104MiB
+# Create a partition for bios_grub
+parted /dev/vda mkpart primary 1104MiB 1105MiB
+# Create a partition for LVM
+parted /dev/vda mkpart primary xfs 1106MiB 10.7GB
+
+%end
+
+%post --erroronfail
+passwd -d root
+passwd -l root
+
+systemctl enable waagent
+
+# Attempting to force legacy BIOS boot if we boot from UEFI
+if [ "$(arch)" = "x86_64"  ]; then
+  dnf install grub2-pc-modules grub2-pc -y
+  grub2-install --target=i386-pc /dev/vda
+fi
+
+# Ensure that the pmbr_boot flag is off
+parted /dev/vda disk_set pmbr_boot off
+
+# Common Cloud Tweaks
+# setup systemd to boot to the right runlevel
+rm -f /etc/systemd/system/default.target
+ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target
+echo .
+
+# remove linux-firmware as we're virt and it's half a gig
+dnf -C -y remove linux-firmware
+
+# Remove firewalld; it is required to be present for install/image building.
+# but we dont ship it in cloud
+dnf -C -y remove firewalld --setopt="clean_requirements_on_remove=1"
+dnf -C -y remove avahi\* 
+sed -i '/^#NAutoVTs=.*/ a\
+NAutoVTs=0' /etc/systemd/logind.conf
+
+echo "virtual-guest" > /etc/tuned/active_profile
+
+cat << EOF | tee -a /etc/NetworkManager/conf.d/dhcp-timeout.conf
+# Configure dhcp timeout to 300s by default
+[connection]
+ipv4.dhcp-timeout=300
+EOF
+
+cat > /etc/sysconfig/network << EOF
+NETWORKING=yes
+NOZEROCONF=yes
+EOF
+
+# Remove build-time resolvers to fix #16948
+truncate -s 0 /etc/resolv.conf
+
+# generic localhost names
+cat > /etc/hosts << EOF
+127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
+::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
+
+EOF
+echo .
+
+# azure settings
+# Configure waagent for cloud-init
+sed -i 's/Provisioning.UseCloudInit=n/Provisioning.UseCloudInit=y/g' /etc/waagent.conf
+sed -i 's/Provisioning.Enabled=y/Provisioning.Enabled=n/g' /etc/waagent.conf
+
+# Azure: handle sr-iov and networkmanaeger
+cat << EOF | tee -a /etc/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
+# Accelerated Networking on Azure exposes a new SRIOV interface to the VM.
+# This interface is transparently bonded to the synthetic interface,
+# so NetworkManager should just ignore any SRIOV interfaces.
+SUBSYSTEM=="net", DRIVERS=="hv_pci", ACTION=="add", ENV{NM_UNMANAGED}="1"
+EOF
+
+# Azure: Time sync for linux
+## Setup udev rule for ptp_hyperv
+cat << EOF | tee -a /etc/udev/rules.d/98-hyperv-ptp.rules
+## See: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/time-sync#check-for-ptp-clock-source
+SUBSYSTEM=="ptp", ATTR{clock_name}=="hyperv", SYMLINK += "ptp_hyperv"
+EOF
+
+# Configure chrony to use ptp_hyperv
+cat << EOF | tee -a /etc/chrony.conf
+# Setup hyperv PTP device as refclock
+refclock PHC /dev/ptp_hyperv poll 3 dpoll -2 offset 0 stratum 2
+EOF
+
+# Azure: Blacklist modules
+cat << EOF | tee -a /etc/modprobe.d/azure-blacklist.conf
+blacklist amdgpu
+blacklist nouveau
+blacklist radeon
+EOF
+
+# Azure: cloud-init customizations for Hyperv
+cat << EOF | tee /etc/cloud/cloud.cfg.d/10-azure-kvp.cfg
+# Enable logging to the Hyper-V kvp in Azure
+reporting:
+  logging:
+    type: log
+  telemetry:
+    type: hyperv
+EOF
+
+# Kernel and Drivers
+# Add drivers when building in VMWare, Vbox, or KVM (KVM)
+cat << EOF | tee -a /etc/dracut.conf.d/80-azure.conf
+add_drivers+=" hv_vmbus hv_netvsc hv_storvsc "
+EOF
+
+dracut -f -v
+
+cat <<EOL > /etc/sysconfig/kernel
+# UPDATEDEFAULT specifies if new-kernel-pkg should make
+# new kernels the default
+UPDATEDEFAULT=yes
+
+# DEFAULTKERNEL specifies the default kernel package type
+DEFAULTKERNEL=kernel
+EOL
+
+# make sure firstboot doesn't start
+echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot
+
+# rocky cloud user
+sed -i '1i # Modified for cloud image' /etc/cloud/cloud.cfg
+sed -i 's/name: cloud-user/name: rocky/g' /etc/cloud/cloud.cfg
+echo -e 'rocky\tALL=(ALL)\tNOPASSWD: ALL' >> /etc/sudoers
+
+# this shouldn't be the case, but we'll do it anyway
+sed -i 's|^enabled=1|enabled=0|' /etc/yum/pluginconf.d/product-id.conf
+sed -i 's|^enabled=1|enabled=0|' /etc/yum/pluginconf.d/subscription-manager.conf
+
+dnf clean all
+truncate -c -s 0 /var/log/dnf.log
+
+# XXX instance type markers - MUST match Rocky Infra expectation
+echo 'azure' > /etc/yum/vars/infra
+
+# Azure Cleanup
+sudo rm -f /var/log/waagent.log
+sudo cloud-init clean
+waagent -force -deprovision+user
+
+# Common cleanup
+rm -f ~/.bash_history
+export HISTSIZE=0
+
+rm -f /var/lib/systemd/random-seed
+rm -rf /root/anaconda-ks.cfg
+rm -rf /root/install.log
+rm -rf /root/install.log.syslog
+rm -rf "/var/lib/yum/*"
+rm -rf "/var/log/anaconda*"
+rm -rf /var/log/yum.log
+
+# Wipe machineid
+cat /dev/null > /etc/machine-id
+
+# Fix selinux
+touch /var/log/cron
+touch /var/log/boot.log
+mkdir -p /var/cache/yum
+/usr/sbin/fixfiles -R -a restore
+
+true
+
+%end
+
+%packages
+@core
+NetworkManager
+WALinuxAgent
+chrony
+cloud-init
+cloud-utils-growpart
+dhcp-client
+dnf-utils
+dracut-config-generic
+firewalld
+gdisk
+grub2
+hyperv-daemons
+kernel
+rng-tools
+rocky-release
+rsync
+tar
+yum-utils
+-aic94xx-firmware
+-alsa-firmware
+-alsa-lib
+-alsa-tools-firmware
+-biosdevname
+-iprutils
+-ivtv-firmware
+-iwl100-firmware
+-iwl1000-firmware
+-iwl105-firmware
+-iwl135-firmware
+-iwl2000-firmware
+-iwl2030-firmware
+-iwl3160-firmware
+-iwl3945-firmware
+-iwl4965-firmware
+-iwl5000-firmware
+-iwl5150-firmware
+-iwl6000-firmware
+-iwl6000g2a-firmware
+-iwl6000g2b-firmware
+-iwl6050-firmware
+-iwl7260-firmware
+-langpacks-*
+-langpacks-en
+-libertas-sd8686-firmware
+-libertas-sd8787-firmware
+-libertas-usb8388-firmware
+-plymouth
+-qemu-guest-agent
+
+%end

Rocky-9-Azure-LVM.ks

@@ -0,0 +1,280 @@
+#version=DEVEL
+# Keyboard layouts
+keyboard 'us'
+# Root password
+rootpw --iscrypted thereisnopasswordanditslocked
+# System language
+lang en_US.UTF-8
+# Shutdown after installation
+shutdown
+# System timezone
+timezone UTC --isUtc
+# Use text mode install
+text
+# Network information
+network  --bootproto=dhcp --device=link --activate
+# Use network installation
+url --url="https://download.rockylinux.org/stg/rocky/9/BaseOS/$basearch/os/"
+# System authorization information
+auth --enableshadow --passalgo=sha512
+# Firewall configuration
+firewall --enabled --service=ssh
+firstboot --disable
+# SELinux configuration
+selinux --enforcing
+
+# System services
+services --disabled="kdump,rhsmcertd" --enabled="NetworkManager,sshd,rsyslog,chronyd,cloud-init,cloud-init-local,cloud-config,cloud-final,rngd"
+# System bootloader configuration
+bootloader --append="rootdelay=300 console=ttyS0 earlyprintk=ttyS0  no_timer_check crashkernel=1G-4G:192M,4G-64G:256M,64G-:512M net.ifnames=0" --location=mbr --timeout=1
+# Clear the Master Boot Record
+#zerombr
+# Partition clearing information
+#clearpart --all --initlabel --disklabel=gpt
+# Disk partitioning information
+part /boot/efi --fstype="efi" --onpart=vda1
+part /boot --fstype="xfs" --label=boot --onpart=vda2
+part prepboot --fstype="prepboot" --onpart=vda3
+part biosboot --fstype="biosboot" --onpart=vda4
+part pv.01 --grow --ondisk=vda --onpart=vda5
+volgroup rocky pv.01
+logvol / --grow --size=8000 --mkfsoptions="-m bigtime=0,inobtcount=0" --name=root --vgname=rocky
+
+%pre
+# Clear the Master Boot Record
+dd if=/dev/zero of=/dev/vda bs=512 count=1
+# Create a new GPT partition table
+parted /dev/vda mklabel gpt
+# Create a partition for /boot/efi
+parted /dev/vda mkpart primary fat32 1MiB 100MiB
+parted /dev/vda set 1 boot on
+# Create a partition for /boot
+parted /dev/vda mkpart primary xfs 100MiB 1100MiB
+# Create a partition for prep
+parted /dev/vda mkpart primary 1100MiB 1104MiB
+# Create a partition for bios_grub
+parted /dev/vda mkpart primary 1104MiB 1105MiB
+# Create a partition for LVM
+parted /dev/vda mkpart primary ext2 1106MiB 10.7GB
+parted /dev/vda set 5 lvm on
+
+%end
+
+%post --erroronfail
+passwd -d root
+passwd -l root
+
+systemctl enable waagent
+
+# Attempting to force legacy BIOS boot if we boot from UEFI
+if [ "$(arch)" = "x86_64"  ]; then
+  dnf install grub2-pc-modules grub2-pc -y
+  grub2-install --target=i386-pc /dev/vda
+fi
+
+# Ensure that the pmbr_boot flag is off
+parted /dev/vda disk_set pmbr_boot off
+
+# Common Cloud Tweaks
+# setup systemd to boot to the right runlevel
+rm -f /etc/systemd/system/default.target
+ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target
+echo .
+
+# remove linux-firmware as we're virt and it's half a gig
+dnf -C -y remove linux-firmware
+
+# Remove firewalld; it is required to be present for install/image building.
+# but we dont ship it in cloud
+dnf -C -y remove firewalld --setopt="clean_requirements_on_remove=1"
+dnf -C -y remove avahi\* 
+sed -i '/^#NAutoVTs=.*/ a\
+NAutoVTs=0' /etc/systemd/logind.conf
+
+echo "virtual-guest" > /etc/tuned/active_profile
+
+cat << EOF | tee -a /etc/NetworkManager/conf.d/dhcp-timeout.conf
+# Configure dhcp timeout to 300s by default