mirror of
https://github.com/xcat2/confluent.git
synced 2024-11-28 12:29:40 +00:00
b7ea27b939
Get most things automated for the targeted use case. Still need to handle partitioning and end of install question, add firstboot and add staged and complete step.
44 lines
2.3 KiB
Bash
Executable File
44 lines
2.3 KiB
Bash
Executable File
#!/bin/sh
|
|
## Use the following option to add additional boot parameters for the
|
|
## installed system (if supported by the bootloader installer).
|
|
## Note: options passed to the installer will be added automatically.
|
|
#d-i debian-installer/add-kernel-opts string [from profile.yaml]
|
|
deploycfg=/etc/confluent/confluent.deploycfg
|
|
mgr=$(cat /etc/confluent/deployer)
|
|
|
|
cryptboot=$(grep encryptboot: $deploycfg|sed -e 's/^encryptboot: //')
|
|
if [ "$cryptboot" != "" ] && [ "$cryptboot" != "none" ] && [ "$cryptboot" != "null" ]; then
|
|
echo "****Encrypted boot requested, but not implemented for this OS, halting install" > /dev/console
|
|
[ -f '/tmp/autoconsdev' ] && (echo "****Encryptod boot requested, but not implemented for this OS,halting install" >> $(cat /tmp/autoconsdev))
|
|
while :; do sleep 86400; done
|
|
fi
|
|
cat > /usr/lib/live-installer.d/confluent-certs << EOF
|
|
#!/bin/sh
|
|
cp /tls/* /target/etc/ssl/certs/
|
|
cat /tls/*.pem >> /target/etc/ssl/certs/ca-certificates.crt
|
|
EOF
|
|
chmod a+x /usr/lib/live-installer.d/confluent-certs
|
|
mkdir -p /.ssh/
|
|
cat /ssh/*pubkey > /.ssh/authorized_keys
|
|
mkdir -p /etc/ssh
|
|
nodename=$(grep ^NODENAME: /etc/confluent/confluent.info|cut -d ' ' -f 2)
|
|
apikey=$(cat /etc/confluent/confluent.apikey)
|
|
ssh-keygen -A
|
|
for pubkey in /etc/ssh/ssh_host*key.pub; do
|
|
certfile=$(echo $pubkey | sed -e s/.pub/-cert.pub/)
|
|
keyfile=${pubkey%.pub}
|
|
wget --header="CONFLUENT_NODENAME: $nodename" --header="CONFLUENT_APIKEY: $apikey" --post-file=$pubkey https://$mgr/confluent-api/self/sshcert -O $certfile --quiet
|
|
echo HostKey $keyfile >> /etc/ssh/sshd_config
|
|
echo HostCertificate $certfile >> /etc/ssh/sshd_config
|
|
done
|
|
echo HostbasedAuthentication yes >> /etc/ssh/sshd_config
|
|
echo HostbasedUsesNameFromPacketOnly yes >> /etc/ssh/sshd_config
|
|
echo IgnoreRhosts no >> /etc/ssh/sshd_config
|
|
echo sshd:x:1:1::/run/sshd:/bin/false >> /etc/passwd
|
|
/usr/sbin/sshd
|
|
wget --header="CONFLUENT_NODENAME: $nodename" --header="CONFLUENT_APIKEY: $apikey" https://$mgr/confluent-api/self/nodelist -O /tmp/allnodes --quiet
|
|
#kill -HUP $(ps | grep -v grep | grep /usr/sbin/sshd | sed -e 's/^ *//'|cut -d ' ' -f 1)
|
|
#curl -f https://$confluent_mgr/confluent-public/os/$confluent_profile/scripts/getinstalldisk > /tmp/getinstalldisk
|
|
#python3 /tmp/getinstalldisk
|
|
#sed -i s!%%INSTALLDISK%%!/dev/$(cat /tmp/installdisk)! /autoinstall.yaml
|