shanemcc / pxe-manager Goto Github PK

:net0
isset ${net0/mac} || goto no_nic
dhcp net0 || goto net1
chain http://${next-server}:80/pxe/pxedata/${net0/mac} || goto net1

#!pxelinux
default install
prompt 0
timeout 50

menu title PXE Boot
menu tabmsg Press [Tab] to edit arguments

{% block label %}
label install
 menu default
 menu label Install {{ getServerInfo('image') }} on {{ getServerInfo('name') }}
 kernel rhel9/vmlinuz
 append initrd=rhel9/initrd.img ip=dhcp nameserver=nameserver={{ nameservers|replace({"\n": "", "\r": ",", " ": ","})|split(',')|first}} inst.ks={{ getScriptURL() }} BOOTIF=01-{{ getServerInfo('mac')|replace({':': '-'}) }} ks.sendmac inst.ks.sendmac
 ipappend 2
{% endblock %}

#!ipxe

set base http://ks.domain.com/redhat/9AS/os

{% if pxe_static_ip == "Yes" and bond_iface_name and bond_members and bond_mode and ip and netmask and gateway and nameservers %}
kernel ${base}/images/pxeboot/vmlinuz initrd=initrd.img inst.repo=${base} inst.ks={{ getScriptURL() }} BOOTIF=01-{{ getServerInfo('mac')|replace({':': '-'}) }} ks.sendmac inst.ks.sendmac ip={{ ip }}::{{ gateway }}:{{ netmask }}:{{ getServerInfo('name') }}:{{ bond_iface_name}}:{{ bond_members|replace({"\n": "", "\r": ",", " ": ","}) }}:mode={{ getVariable('bond_mode') }} nameserver={{ nameservers|replace({"\n": "", "\r": ",", " ": ","})|split(',')|first}} ksdevice=bootif
{% elseif pxe_static_ip == "Yes" and iface_name and ip and netmask and gateway and nameservers %}
kernel ${base}/images/pxeboot/vmlinuz initrd=initrd.img inst.repo=${base} inst.ks={{ getScriptURL() }} BOOTIF=01-{{ getServerInfo('mac')|replace({':': '-'}) }} ks.sendmac inst.ks.sendmac ip={{ ip }}::{{ gateway }}:{{ netmask }}:{{ getServerInfo('name') }}:{{ iface_name }}:none nameserver={{ nameservers|replace({"\n": "", "\r": ",", " ": ","})|split(',')|first}} ksdevice=bootif
{% else %}
kernel ${base}/images/pxeboot/vmlinuz initrd=initrd.img inst.repo=${base} inst.ks={{ getScriptURL() }}
{% endif %}
initrd ${base}/images/pxeboot/initrd.img
imgstat
boot

%pre
{% if wipefs == "Yes" %}
udevadm settle
dmsetup remove_all

# De-activate any exiting Volume Groups
vgchange -an system
vgchange -an os
vgchange -an data
vgchange -an rhel

# Clear software raid devices if any
raid_devices=$(mktemp /tmp/mdstat.XXXXXXXXX)
cat /proc/mdstat | grep ^md | cut -d : -f 1 > $raid_devices

if [ -s $raid_devices ];then
   for raid in `cat $raid_devices`;do
       wipefs -f -a /dev/$raid
       mdadm --stop -f /dev/$raid
       if [ $? != "0" ];then
          udevadm settle
          dmsetup remove_all
          mdadm --stop -f /dev/$raid
       fi
   done
else
   echo "All raid devices are cleared"
fi

rm -vf $raid_devices

# Wipe any partitions if found
available_disks=$(mktemp /tmp/disks.XXXXXXXXX)
ls -r /dev/sd* > $available_disks

for disk in `cat $available_disks`;do
   wipefs -f -a $disk
done

rm -vf $available_disks
{% endif %}
%end

### Performs the kickstart installation in text mode.
### By default, kickstart installations are performed in graphical mode.
text

### Accepts the End User License Agreement.
eula --agreed

{% block installsource %}
### Installs from
url --url http://ks.domain.com/redhat/9AS/os
{% endblock %}

### Sets the language to use during installation and the default language to use on the installed system.
lang en_US.UTF-8

### Sets the default keyboard type for the system.
keyboard --vckeymap={{ keyboard|default('us')  }} --xlayouts={{ keyboard|default('us')  }}

### Sets the system time zone.
{% if ntpservers %}
{% for ntpserver in ntpservers|split(',') %}
timesource --ntp-server={{ ntpserver }}
{% endfor %}
{% else %}
timesource --ntp-server=0.pool.ntp.org
timesource --ntp-server=1.pool.ntp.org
{% endif %}
timezone Europe/Zurich --utc

{% block network %}
{% if bond_iface_name and bond_members and bond_mode and ip and netmask and gateway and nameservers %}
network --noipv6 --bootproto=static --ip={{ getVariable('ip') }} --netmask={{ getVariable('netmask') }} --gateway={{ getVariable('gateway') }} --nameserver={{ nameservers|replace({"\n": "", "\r": ",", " ": ","}) }} --device={{ getVariable('bond_iface_name') }} --bondslaves={{ bond_members|replace({"\n": "", "\r": ",", " ": ","}) }} --bondopts=mode={{ getVariable('bond_mode') }} --hostname={{ getServerInfo('name') }} --activate
{% for member in bond_members|split(',') %}
network --noipv6 --noipv4 --device={{ member }} --onboot=no --no-activate
{% endfor %}
{% elseif ip and netmask and gateway and nameservers %}
network --noipv6 --bootproto=static --ip={{ getVariable('ip') }} --netmask={{ getVariable('netmask') }} --gateway={{ getVariable('gateway') }} --nameserver={{ nameservers|replace({"\n": "", "\r": ",", " ": ","}) }} --hostname={{ getServerInfo('name') }} --device={{ getServerInfo('mac') }} --bindto=mac
{% else %}
network --bootproto=dhcp --hostname={{ getServerInfo('name') }}
{% endif %}
{% endblock %}

### Root password (Default is: admin)
rootpw --iscrypted {{ root_password|default('$6$OpP07KPb4vK1q7RT$FEhgJKEIlVH2oKaIFhAqs9HOFslGfKqs1DSTrLgHaJ.BWruYgDAAkFZDXcZNn06c6zj3Yq5NXmS4Lqckd5y.8/') }}

### Do not configure X on the installed system.
skipx

{% block firewall %}
### Configure firewall settings for the system.
### --enabled reject incoming connections that are not in response to outbound requests
### --ssh   allow sshd service through the firewall
firewall --enabled --service=ssh
{% endblock %}

{% block authselect %}
### Sets up the authentication options for the system.
### The SSDD profile sets sha512 to hash passwords. Passwords are shadowed by default
### See the manual page for authselect-profile for a complete list of possible options.
authselect --enableshadow --passalgo=sha512 --kickstart select sssd
{% endblock %}

{% block selinux %}
{% if selinux == "Yes" %}
selinux --enforcing
{% else %}
selinux --disabled
{% endif %}
{% endblock %}

{% block partition %}
### Sets how the boot loader should be installed.
{% if install_disk %}
bootloader --location=mbr --boot-drive={{install_disk}} --append="nofb quiet splash=quiet" 
{% else %}
bootloader --location=mbr --boot-drive=sda --append="nofb quiet splash=quiet" 
{% endif %}

### Initialize any invalid partition tables found on disks.
zerombr

### Removes partitions from the system, prior to creation of new partitions.
### By default, no partitions are removed.
### --linux erases all Linux partitions.
### --initlabel Initializes a disk (or disks) by creating a default disk label for all disks in their respective architecture.
{% if install_disk %}
clearpart --all --initlabel --drives={{install_disk}}
ignoredisk --only-use={{install_disk}}
{% else %}
clearpart --all --initlabel --drives=sda
{% endif %}

### Create primary system partitions.

# /!\ This partitioning require a disk size that has at least 80Gb /!\

part /boot --fstype xfs --size=1024 --label=BOOTFS
part /boot/efi --fstype vfat --size=1024 --label=EFIFS
part pv.01 --size=100 --grow

### Create logical volumes
volgroup rhel --pesize=4096 pv.01

logvol swap --fstype swap --name=lv_swap --vgname=rhel --size=4096 --label=SWAPFS
logvol / --fstype xfs --name=lv_root --vgname=rhel --size=12288 --label=ROOTFS
logvol /home --fstype xfs --name=lv_home --vgname=rhel --size=4096 --label=HOMEFS --fsoptions="nodev,nosuid"
logvol /opt --fstype xfs --name=lv_opt --vgname=rhel --size=8192 --label=OPTFS --fsoptions="nodev"
logvol /tmp --fstype xfs --name=lv_tmp --vgname=rhel --size=10240 --label=TMPFS --fsoptions="nodev,noexec,nosuid"
logvol /var/log --fstype xfs --name=lv_log --vgname=rhel --size=10240 --label=LOGFS --fsoptions="nodev,noexec,nosuid"
logvol /var/log/audit --fstype xfs --name=lv_audit --vgname=rhel --size=4096 --label=AUDITFS --fsoptions="nodev,noexec,nosuid"
logvol /var --fstype xfs --name=lv_var --vgname=rhel --size=20480 --label=VARFS --fsoptions="nodev"
{% endblock %}

{% block systempackages %}
%packages --ignoremissing --excludedocs
@core
@^minimal-environment
iotop
nfs-utils
setroubleshoot
system-storage-manager
traceroute
telnet
net-tools
kexec-tools
chrony
perl
wget
curl
cloud-init
vim
%end
{% endblock %}

{% block syspurpose %}
{% if rhel_subscription_org and rhel_subscription_key %}
### System Purpose
syspurpose --role="Red Hat Enterprise Linux Server"
syspurpose --sla="Standard"
syspurpose --usage="Production"
{% endif %}
{% endblock %}

%pre-install
wget -qO /dev/null "{{ getLogUrl('info', 'Started "PRE-INSTALL"') }}"
%end

%post --log=/root/post-install.log

echo "Start post installation process"
wget -qO /dev/null "{{ getLogUrl('info', 'Started "POST"') }}"

# Sync time
echo "Updating system time"
chronyc makestep
hwclock --systohc

{% block subscriptionmanager %}
echo "Subscribing to RHEL"
{% if rhel_subscription_org and rhel_subscription_key %}
subscription-manager register --org={{ rhel_subscription_org }} --activationkey={{ rhel_subscription_key }}
subscription-manager repos --enable codeready-builder-for-rhel-9-x86_64-rpms
{% endif %}
{% endblock %}

{% block epelrepo %}
echo "Install epel repo"
dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
{% endblock %}

{% block cloudinit %}
echo "Get cloud-init config"
wget -qO /etc/cloud/cloud.cfg.d/10_post-install.cfg -Y off {{ getPostInstallURL() }}
{% endblock %}

{% block packages %}
{% if packages %}
echo "Install additional packages"
dnf -y install {{ packages|replace({"\n": "", "\r": " "}) }}
{% endif %}
dnf makecache
dnf -y update
{% endblock %}

{% block aliases %}
{% if emailadmin %}
echo "Set email admin alias"
cat <<EOF >>/etc/aliases
root:           {{ emailadmin }}
EOF
newaliases
{% endif %}
{% endblock %}

{% block ndns %}
echo "Disable auto-update of /etc/resolv.conf by NetworManager"
echo -e "[main]\ndns=none" > /etc/NetworkManager/conf.d/99-local.conf
{% endblock %}

{% block resolvconf %}
echo "Set default domain"
echo "search {{ domain|default('domain.com')}}" >> /etc/resolv.conf
{% endblock %}

{% block hosts %}
{% if ip and domain %}
echo "Set {{ getServerInfo('name') }}.{{ domain }} to /etc/hosts"
echo "{{ ip }} {{ getServerInfo('name') }}.{{ domain }} {{ getServerInfo('name') }}" >> /etc/hosts
{% endif%}
{% endblock %}

{% block authorizedkeys %}
echo "Configure SSH authorized_keys"
{% if remote_ssh_user and remote_ssh_keys %}
user_exists=false
getent passwd {{ remote_ssh_user }} >/dev/null 2>&1 && user_exists=true

{%  if ssh_user != 'root' %}
{% set home_dir="/home" %}
if ! $user_exists; then
useradd -m {{ remote_ssh_user }} && user_exists=true
fi
{% endif %}

if $user_exists; then
mkdir -p "{{home_dir}}/{{ remote_ssh_user }}/.ssh"
cat << EOF >> {{home_dir}}/{{ remote_ssh_user }}/.ssh/authorized_keys
{{ remote_ssh_keys }}
EOF
chmod 0700 "{{home_dir}}/{{ remote_ssh_user }}/.ssh"
chmod 0600 "{{home_dir}}/{{ remote_ssh_user }}/.ssh/authorized_keys"
chown -R "{{ remote_ssh_user }}" "{{home_dir}}/{{ remote_ssh_user }}/.ssh"
{% if selinux == "Yes" %}
command -v restorecon && restorecon -RvF "{{home_dir}}/{{ remote_ssh_user }}/.ssh" || true
{% endif %}
{%  if ssh_user != 'root' %}
cat << EOF > /etc/sudoers.d/20_{{ remote_ssh_user }}
{{ remote_ssh_user }} ALL = (root) NOPASSWD : ALL
Defaults:{{ remote_ssh_user }} !requiretty
EOF
{% endif %}
fi
{% endif %}
{% endblock %}

{% block puppet %}
{% if puppet == "Yes" %}
echo "Installing puppet agent"
curl -k https://puppet.domain.com/packages/current/install.bash | /usr/bin/sudo bash -s main:server=puppet.domain.com agent:certname={{ getServerInfo('name') }} agent:environment=production
{% endif %}
{% endblock %}

{% block selinuxautorelabel %}
{% if selinux == "Yes" %}
echo "Enforce complete relabel"
selinuxenabled && /bin/touch /.autorelabel
{% endif %}
{% endblock %}

# Enable locate database
/usr/bin/systemctl enable mlocate-updatedb.timer
/usr/bin/systemctl start mlocate-updatedb.timer

echo "Build done!"
wget -qO /dev/null "{{ getLogUrl('info', 'Ended "POST"') }}"

# Disable host provisioning after installation
echo "Disabling {{ getServerInfo('name') }} in host provisioning server"
wget -Y off -qO /dev/null {{ getServiceURL() }}/disable

sync
grub2-mkconfig
%end

### Reboot after the installation is complete.
reboot

{% block cloudinit %}
### This yaml formated config file handles cloud-init config
disable_ec2_metadata: false
datasource_list: [ "ConfigDrive", "None"]
datasource:
  None:
    userdata_raw: |
      #!/bin/bash
      touch /etc/cloud/cloud-init.disabled
      touch /var/run/reboot-required
      rm -f /etc/cloud/cloud.cfg.d/10_post-install.cfg
{% if remove_install_logs == "Yes" %}
      rm -f /root/original-ks.cfg
      rm -f /root/anaconda-ks.cfg
      rm -f /root/post-install.log
{% endif %}
    metadata:
      instance-id: {{ getServerInfo('name') }}
      local-hostname: {{ getServerInfo('name') }}

network:
  config: disabled

{% endblock %}

    KERNEL ipxe.lkrn
    APPEND dhcp && chain --autofree {{ getServiceURL() }}/pxedata