#version=DEVEL # Keyboard layouts keyboard --vckeymap=us # Root password rootpw --plaintext vagrant # System language lang en_US # Reboot after installation reboot user --name=vagrant --password=vagrant # System timezone timezone UTC --isUtc # Use text mode install text # Network information network --bootproto=dhcp --device=link --activate # Use network installation url --url="https://download.rockylinux.org/stg/rocky/9/BaseOS/$basearch/os/" # Firewall configuration firewall --disabled # Do not configure the X Window System skipx # System services services --enabled="vmtoolsd" # System bootloader configuration bootloader --append="no_timer_check console=tty0 console=ttyS0,115200n8 net.ifnames=0 biosdevname=0 elevator=noop" --location=mbr --timeout=1 # Partition stuff zerombr clearpart --all --initlabel --disklabel=gpt #reqpart # This should allow BIOS, UEFI, and PReP booting. Trying to be as universal as # possible. This is a similar setup to Fedora without the btrfs. part prepboot --size=4 --fstype=prepboot --asprimary part biosboot --size=1 --fstype=biosboot --asprimary part /boot/efi --size=100 --fstype=efi --asprimary part /boot --size=1000 --fstype=xfs --label=boot part / --size=8000 --fstype="xfs" --mkfsoptions "-m bigtime=0,inobtcount=0" %post # Attempting to force legacy BIOS boot if we boot from UEFI if [ "$(arch)" = "x86_64" ]; then dnf install grub2-pc-modules grub2-pc -y grub2-install --target=i386-pc /dev/vda fi # Ensure that the pmbr_boot flag is off parted /dev/vda disk_set pmbr_boot off # configure swap to a file fallocate -l 2G /swapfile chmod 600 /swapfile mkswap /swapfile echo "/swapfile none swap defaults 0 0" >> /etc/fstab # sudo echo "%vagrant ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/vagrant chmod 0440 /etc/sudoers.d/vagrant # Fix for https://github.com/CentOS/sig-cloud-instance-build/issues/38 cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF DEVICE="eth0" BOOTPROTO="dhcp" ONBOOT="yes" TYPE="Ethernet" PERSISTENT_DHCLIENT="yes" EOF # sshd: disable password authentication and DNS checks # for virtualbox we're disabling it after provisioning cat >>/etc/sysconfig/sshd <> /home/vagrant/.ssh/authorized_keys chmod 600 /home/vagrant/.ssh/authorized_keys chown -R vagrant:vagrant /home/vagrant/.ssh # Fix for issue #76, regular users can gain admin privileges via su ex -s /etc/pam.d/su <<'EOF' # allow vagrant to use su, but prevent others from becoming root or vagrant /^account\s\+sufficient\s\+pam_succeed_if.so uid = 0 use_uid quiet$/ :append account [success=1 default=ignore] \\ pam_succeed_if.so user = vagrant use_uid quiet account required pam_succeed_if.so user notin root:vagrant . :update :quit EOF # Install VBoxGuestAdditions for installed kernel kver=$(rpm -q --queryformat="%{VERSION}-%{RELEASE}.%{ARCH}" kernel) echo "stg/rocky" > /etc/dnf/vars/contentdir sed -i 's/^#baseurl/baseurl/g;s/^mirrorlist/#mirrorlist/g' /etc/yum.repos.d/rocky*repo dnf -y install kernel-headers-$kver kernel-devel gcc make perl elfutils-libelf-devel sed -i 's/^baseurl/#baseurl/g;s/^#mirrorlist/mirrorlist/g' /etc/yum.repos.d/rocky*repo echo "pub/rocky" > /etc/dnf/vars/contentdir curl -L -o /tmp/vboxadditions.iso https://download.virtualbox.org/virtualbox/7.0.16/VBoxGuestAdditions_7.0.16.iso mkdir -p /media/VBoxGuestAdditions mount -o loop,ro /tmp/vboxadditions.iso /media/VBoxGuestAdditions mkdir -p /tmp/VBoxGuestAdditions sh /media/VBoxGuestAdditions/VBoxLinuxAdditions.run --nox11 --noexec --keep --target /tmp/VBoxGuestAdditions pushd /tmp/VBoxGuestAdditions ./install.sh /sbin/rcvboxadd quicksetup all popd ls "/lib/modules/${kver}/misc/" modinfo "/lib/modules/${kver}/misc/vboxsf.ko" rm -rf /tmp/VBoxGuestAdditions umount /media/VBoxGuestAdditions rm -f /tmp/vboxadditions.iso rmdir /media/VBoxGuestAdditions dnf -y remove kernel-devel gcc make perl elfutils-libelf-devel # systemd should generate a new machine id during the first boot, to # avoid having multiple Vagrant instances with the same id in the local # network. /etc/machine-id should be empty, but it must exist to prevent # boot errors (e.g. systemd-journald failing to start). :>/etc/machine-id echo 'vag' > /etc/yum/vars/infra # Blacklist the floppy module to avoid probing timeouts echo blacklist floppy > /etc/modprobe.d/nofloppy.conf chcon -u system_u -r object_r -t modules_conf_t /etc/modprobe.d/nofloppy.conf # Customize the initramfs pushd /etc/dracut.conf.d # Enable VMware PVSCSI support for VMware Fusion guests. echo 'add_drivers+=" vmw_pvscsi "' > vmware-fusion-drivers.conf echo 'add_drivers+=" hv_netvsc hv_storvsc hv_utils hv_vmbus hid-hyperv "' > hyperv-drivers.conf # There's no floppy controller, but probing for it generates timeouts echo 'omit_drivers+=" floppy "' > nofloppy.conf popd # Fix the SELinux context of the new files restorecon -f - <