veewee-atlassian 0.3.11

data/templates/funtoo-latest-generic_64-stable/postinstall2.sh

@@ -0,0 +1,83 @@
+#!/bin/bash
+
+# Wanted multi-user RVM (ruby version manager) setup.  It got really hacky.
+# Couldn't get the su command to work in the chroot so split the install into two
+# phases, one in chroot, and the second phase in the installed kernel.
+# Ruby's RVM needs to be installed by a user not root for multi-user use.
+# All this would go away in single user install of RVM
+
+# A bit better security, but still your root and vagrant accounts are wide open!
+echo -e "PermitRootLogin no\nAllowUsers vagrant" >> /etc/ssh/sshd_config
+
+# Cron & Syslog
+emerge -u --oneshot metalog vixie-cron
+rc-update add metalog default
+rc-update add vixie-cron default
+
+#Kernel headers
+emerge -u --oneshot sys-kernel/linux-headers
+
+#Installing the virtualbox guest additions
+emerge app-emulation/virtualbox-guest-additions
+rc-update add virtualbox-guest-additions default
+
+# Get ruby and rvm all setup...
+emerge -u --oneshot git curl gcc automake autoconf m4
+emerge -u --oneshot libiconv readline zlib openssl libyaml sqlite libxslt
+
+# Clean up portage
+rm -rf /usr/portage/distfiles/*
+rm /stage3*.tar.xz
+
+# What a PITA, wanted to get a shared RVM setup, but that can't be installed by root
+# Starting to feel like a matryoshka doll...
+# Setup so you can SSH into the vagrant account
+wget --no-check-certificate 'https://raw.github.com/mitchellh/vagrant/master/keys/vagrant' -O /tmp/sshkey
+chmod 600 /tmp/sshkey
+
+cat <<SSHCONF > /tmp/sshvagrant
+Host me
+  HostName 127.0.0.1
+  User vagrant
+  Port 22
+  UserKnownHostsFile /dev/null
+  StrictHostKeyChecking no
+  PasswordAuthentication no
+  IdentityFile /tmp/sshkey
+  IdentitiesOnly yes
+SSHCONF
+
+cat <<GEMINST > /tmp/sshgems
+echo -e "\n***\n*** My id is yuck ***\n***\n"
+
+# Lots of problems if you install as root so we'll use sudo like to docs describe
+sudo bash -s stable < <(curl -s https://raw.github.com/wayneeseguin/rvm/master/binscripts/rvm-installer )
+sudo env-update
+source /etc/profile
+
+# Install ruby and gems into rvm
+rvm install 1.8.7
+rvm use 1.8.7 --default
+rvm gemset create global
+rvm use @global
+
+#Installing chef & puppet
+gem install chef
+gem install puppet
+
+# Cleanup
+sudo chmod 655 /tmp/sshkey
+sudo rm /tmp/ssh*
+
+echo -e "\n***\n*** Chef and Puppet installed in RVM ***\n***\n"
+GEMINST
+
+chmod 755 /tmp/sshgems
+sed -i -e 's,yuck,$(id),' /tmp/sshgems
+ssh -F /tmp/sshvagrant me /tmp/sshgems
+
+# Sometimes you don't get out of the SSH session.  Think the EOF bails out both
+# the ssh login with the vagrant account and the veewee login with the root
+# account.  So we put the RVM stuff last and its no issue.
+
+echo -e "\n***\n*** SURVIVED SSH EOF! ***\n***\n"

data/templates/funtoo-latest-x86_64/definition.rb

@@ -0,0 +1,37 @@
+password = 'vagrant'
+
+Veewee::Session.declare({
+  :hostiocache => 'off',
+  :cpu_count => '1',
+  :memory_size=> '384',
+  :disk_size => '10140',
+  :disk_format => 'VDI',
+  :os_type_id => 'Gentoo_64', # for 32bit, change to 'Gentoo'
+  :iso_file => "systemrescuecd-x86-3.0.0.iso",
+  :iso_src => "http://freefr.dl.sourceforge.net/project/systemrescuecd/sysresccd-x86/3.0.0/systemrescuecd-x86-3.0.0.iso",
+  :iso_md5 => "6bb6241af752b1d6dab6ae9e6e3e770e",
+  :iso_download_timeout => "1000",
+  :boot_wait => "4",
+  :boot_cmd_sequence => [
+        '<Wait>'*1,
+        '<Enter>',
+        '<Wait>'*9,
+        '<Enter>',
+        '<Wait>'*12,
+        '<Enter><Wait>',      # just in case we are out of sync
+        'net-setup eth0<Enter><Wait><Enter>2<Enter>1<Enter><Wait><Wait>',
+        'passwd<Enter><Wait><Wait>',
+        password + '<Enter><Wait>',
+        password + '<Enter><Wait><Wait>'
+    ],
+  :ssh_login_timeout => "10000",
+  :ssh_user => "root",
+  :ssh_password => password,
+  :ssh_key => "",
+  :ssh_host_port => "7222",
+  :ssh_guest_port => "22",
+  :sudo_cmd => "cat '%f'|su -",
+  :shutdown_cmd => "shutdown -p now",
+  :postinstall_files => ["postinstall.sh"],
+  :postinstall_timeout => "15000"
+})

data/templates/funtoo-latest-x86_64/postinstall.sh

@@ -0,0 +1,401 @@
+#!/bin/bash
+# based on http://www.funtoo.org/wiki/Funtoo_Linux_Installation
+
+### SETTINGS ###
+
+# user passwords for password based ssh logins
+password_root=vagrant
+password_vagrant=vagrant
+
+# static versions of programs we install
+ruby_version="1.9.3-p286"
+# ...these are for rbenv and its plugins ruby-builder and rbenv-bundler
+rbenv_version="v0.3.0"
+ruby_builder_version="v20121022"
+rbenv_bundler_version="0.94"
+
+# these two (configuring the compiler) and the stage3 url can be changed to build a 32 bit system
+accept_keywords="amd64"
+chost="x86_64-pc-linux-gnu"
+
+# stage 3 filename and full url
+stage3file="stage3-latest.tar.xz"
+stage3url="http://ftp.heanet.ie/mirrors/funtoo/funtoo-current/x86-64bit/generic_64/$stage3file"
+
+# the public key for vagrants ssh
+vagrant_ssh_key_url="https://raw.github.com/mitchellh/vagrant/master/keys/vagrant.pub"
+
+# timezone (as a subdirectory of /usr/share/zoneinfo)
+timezone="UTC"
+
+# number of cpus in the host system (to speed up make andfor kernel config)
+nr_cpus=$(</proc/cpuinfo grep processor|wc -l)
+
+
+### PARTITIONING AND FORMATTING ###
+
+# for sgdisk (scripted gdisk) see: http://www.rodsbooks.com/gdisk/sgdisk.html
+sgdisk -n 1:0:+128M -t 1:8300 -c 1:"linux-boot" \
+       -n 2:0:+32M  -t 2:ef02 -c 2:"bios-boot"  \
+       -n 3:0:+1G   -t 3:8200 -c 3:"swap"       \
+       -n 4:0:0     -t 4:8300 -c 4:"linux-root" \
+       -p /dev/sda
+
+sleep 1
+
+# format partitions, mount swap
+mkswap /dev/sda3
+swapon /dev/sda3
+mkfs.ext2 /dev/sda1
+mkfs.ext4 /dev/sda4
+
+# this is our chroot directory for the installation
+chroot=/mnt/gentoo
+
+# mount other partitions
+mount /dev/sda4 "$chroot" && cd "$chroot" && mkdir boot && mount /dev/sda1 boot
+
+
+### BASE-INSTALLATION ###
+
+# load stage 3, unpack it, delete the stage3 archive file
+wget -nv --tries=5 "$stage3url"
+tar xpf "$stage3file" && rm "$stage3file"
+
+# prepeare chroot, update env
+mount --bind /proc "$chroot/proc"
+mount --bind /dev "$chroot/dev"
+
+
+### INITIAL CONFIGURATION ###
+
+# copy nameserver information, save build timestamp 
+cp /etc/resolv.conf "$chroot/etc/"
+date -u > "$chroot/etc/vagrant_box_build_time"
+chroot "$chroot" env-update
+
+#" activate client side dhcp and ssh by default
+chroot "$chroot" /bin/bash <<DATAEOF
+rc-update add dhcpcd default
+rc-update add sshd default
+DATAEOF
+
+# set fstab
+cat <<DATAEOF > "$chroot/etc/fstab"
+# <fs>                  <mountpoint>    <type>          <opts>                   <dump/pass>
+/dev/sda1               /boot           ext2            noauto,noatime           1 2
+/dev/sda3               none            swap            sw                       0 0
+/dev/sda4               /               ext4            noatime                  0 1
+none                    /dev/shm        tmpfs           nodev,nosuid,noexec      0 0
+DATAEOF
+
+# set make options
+cat <<DATAEOF > "$chroot/etc/portage/make.conf"
+CHOST="$chost"
+
+CFLAGS="-mtune=generic -O2 -pipe"
+CXXFLAGS="\${CFLAGS}"
+
+ACCEPT_KEYWORDS="$accept_keywords"
+MAKEOPTS="-j$((1 + $nr_cpus)) -l$nr_cpus.5"
+EMERGE_DEFAULT_OPTS="-j$nr_cpus --quiet-build=y"
+FEATURES="\${FEATURES} parallel-fetch"
+
+# english only
+LINGUAS=""
+
+# for X support if needed
+INPUT_DEVICES="evdev"
+VIDEO_CARDS="virtualbox"
+DATAEOF
+
+# add package use flags
+cat <<DATAEOF >> "$chroot/etc/portage/package.use"
+sys-kernel/gentoo-sources symlink
+sys-kernel/genkernel -cryptsetup
+DATAEOF
+
+# add package keywords
+cat <<DATAEOF >> "$chroot/etc/portage/package.keywords"
+app-emulation/virtualbox-guest-additions
+DATAEOF
+
+# update portage tree to most current state
+chroot "$chroot" emerge --sync
+
+# set localtime
+chroot "$chroot" ln -sf "/usr/share/zoneinfo/$timezone" /etc/localtime
+
+# get, configure, compile and install the kernel and modules
+chroot "$chroot" /bin/bash <<DATAEOF
+emerge sys-kernel/gentoo-sources sys-kernel/genkernel sys-boot/boot-update
+
+# specialize for VirtualBox - use loaded modules in livecd
+cd /usr/src/linux
+# use a default configuration as a starting point, then disable all currently unused modules
+make defconfig
+#make localyesconfig
+
+# add settings for VirtualBox kernels to end of .config
+cat <<EOF >>/usr/src/linux/.config
+# dependencies
+CONFIG_EXT4_FS=y
+CONFIG_EXT4_USE_FOR_EXT23=y
+CONFIG_EXT4_FS_XATTR=y
+CONFIG_SMP=y
+CONFIG_MODULE_UNLOAD=y
+CONFIG_DMA_SHARED_BUFFER=y
+# for VirtualBox
+# see http://en.gentoo-wiki.com/wiki/Virtualbox_Guest
+CONFIG_HIGH_RES_TIMERS=n
+CONFIG_X86_MCE=n
+CONFIG_SUSPEND=n
+CONFIG_HIBERNATION=n
+CONFIG_IDE=n
+CONFIG_NO_HZ=y
+CONFIG_SMP=y
+CONFIG_ACPI=y
+CONFIG_PNP=y
+CONFIG_ATA=y
+CONFIG_SATA_AHCI=y
+CONFIG_ATA_SFF=y
+CONFIG_ATA_PIIX=y
+CONFIG_PCNET32=y
+CONFIG_E1000=y
+CONFIG_INPUT_MOUSE=y
+CONFIG_DRM=y
+CONFIG_SND_INTEL8X0=m
+# for net fs
+CONFIG_AUTOFS4_FS=m
+CONFIG_NFS_V2=m
+CONFIG_NFS_V3=m
+CONFIG_NFS_V4=m
+CONFIG_NFSD=m
+CONFIG_CIFS=m
+CONFIG_CIFS_UPCAL=y
+CONFIG_CIFS_XATTR=y
+CONFIG_CIFS_DFS_UPCALL=y
+# reduce size
+CONFIG_NR_CPUS=$nr_cpus
+CONFIG_COMPAT_VDSO=n
+# propbably nice but not in defaults
+CONFIG_MODVERSIONS=y
+CONFIG_IKCONFIG_PROC=y
+CONFIG_SQUASHFS=y
+CONFIG_SQUASHFS_XATTR=y
+CONFIG_SQUASHFS_XZ=y
+#CONFIG_EFI_STUB=y
+#CONFIG_DEFAULT_DEADLINE=y
+#CONFIG_DEFAULT_CFQ=n
+#CONFIG_PREEMPT_NONE=y
+#CONFIG_PREEMPT_VOLUNTARY=n
+#CONFIG_HZ=100=y
+#CONFIG_HZ=1000=n
+# IPSec (I want to run tests with IPSec andSamba 4)
+CONFIG_NET_IPVTI=y
+CONFIG_INET_AH=y
+CONFIG_INET_ESP=y
+CONFIG_INET_IPCOMP=y
+CONFIG_INET_XFRM_MODE_TRANSPORT=y
+CONFIG_INET_XFRM_MODE_TUNNEL=y
+CONFIG_INET_XFRM_MODE_BEET=y
+CONFIG_INET6_AH=y
+CONFIG_INET6_ESP=y
+CONFIG_INET6_IPCOMP=y
+CONFIG_INET6_XFRM_MODE_TRANSPORT=y
+CONFIG_INET6_XFRM_MODE_TUNNEL=y
+CONFIG_INET6_XFRM_MODE_BEET=y
+# and some more crypto support...
+CONFIG_CRYPTO_USER=m
+CONFIG_CRYPTO_CTS=y
+CONFIG_CRYPTO_CTR=y
+CONFIG_CRYPTO_RMD128=y
+CONFIG_CRYPTO_RMD160=y
+CONFIG_CRYPTO_RMD256=y
+CONFIG_CRYPTO_RMD320=y
+CONFIG_CRYPTO_SHA1_SSSE3=m
+CONFIG_CRYPTO_SHA256=y
+CONFIG_CRYPTO_SHA512=y
+CONFIG_CRYPTO_AES_X86_64=y
+CONFIG_CRYPTO_AES_NI_INTEL=m
+CONFIG_CRYPTO_BLOWFISH_X86_64=y
+CONFIG_CRYPTO_SALSA20_X86_64=y
+CONFIG_CRYPTO_TWOFISH_X86_64_3WAY=y
+CONFIG_CRYPTO_DEFLATE=y
+EOF
+# build and install kernel, using the config created above
+genkernel --install --symlink --oldconfig all
+DATAEOF
+
+# install the virtualbox guest additions, add vagrant and root to group vboxguest
+# PREREQUISITE: kernel - we install a module, so we use the kernel sources
+chroot "$chroot" /bin/bash <<DATAEOF
+emerge app-emulation/virtualbox-guest-additions
+# we need this as gentoo doesn't do it on its own
+groupadd -r vboxsf
+mkdir /media && chgrp vboxsf /media
+rc-update add virtualbox-guest-additions default
+DATAEOF
+
+# add default users and groups, setpasswords, configure privileges and install sudo
+mkdir -p "$chroot/home/vagrant/.ssh"
+chmod 700 "$chroot/home/vagrant/.ssh"
+wget --no-check-certificate "$vagrant_ssh_key_url" -O "$chroot/home/vagrant/.ssh/authorized_keys"
+chmod 600 "$chroot/home/vagrant/.ssh/authorized_keys"
+cp -f /root/.vbox_version "$chroot/home/vagrant/.vbox_version"
+
+# for passwordless logins
+mkdir -p "$chroot/root/.ssh" 2> /dev/null
+cat /tmp/ssh-root.pub >> "$chroot/root/.ssh/authorized_keys"
+
+# PREREQUISITE: virtualbox-guest-additions - the groups created on installation have to exist
+chroot $chroot /bin/bash <<DATAEOF
+groupadd -r vagrant
+groupadd -r rbenv
+useradd -m -r vagrant -g vagrant -G wheel,rbenv,vboxsf,vboxguest -c 'added by vagrant, veewee basebox creation'
+
+# set passwords (for after reboot)
+passwd<<EOF
+$password_root
+$password_root
+EOF
+
+passwd vagrant<<EOF
+$password_vagrant
+$password_vagrant
+EOF
+
+# to each its own... home
+chown -R vagrant /home/vagrant
+
+emerge app-admin/sudo
+
+echo 'sshd:ALL' > /etc/hosts.allow
+echo 'ALL:ALL' > /etc/hosts.deny
+echo 'vagrant ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers
+DATAEOF
+
+# configure ssh daemon
+# veewee validate uses password authentication (according to the other Funtoo-template), so we have to enable it
+cat <<DATAEOF > "$chroot/etc/ssh/sshd_config"
+HostBasedAuthentication no
+IgnoreUserKnownHosts yes
+PasswordAuthentication yes
+PermitRootLogin yes
+#PermitRootLogin without-password
+PermitUserEnvironment no
+PrintLastLog no
+PrintMotd no
+PubKeyAuthentication yes
+Subsystem sftp internal-sftp
+UseDNS no
+UsePAM yes
+UsePrivilegeSeparation sandbox
+DATAEOF
+
+# install rbenv, ruby and bundler. Configure rbenv for global usage so it's usable without home directory
+chroot "$chroot" /bin/bash <<DATAEOF
+cd /usr/local/lib
+git clone git://github.com/sstephenson/rbenv.git
+cd rbenv
+git checkout -b "$rbenv_version" "$rbenv_version"
+mkdir -p env/plugins
+cd env/plugins
+git clone git://github.com/sstephenson/ruby-build.git
+cd ruby-build
+git checkout -b "$ruby_builder_version" "$ruby_builder_version"
+cd ..
+git clone git://github.com/carsomyr/rbenv-bundler.git
+cd rbenv-bundler
+git checkout -b "$rbenv_bundler_version" "$rbenv_bundler_version"
+chgrp -R rbenv /usr/local/lib/rbenv
+DATAEOF
+libtool --finish /usr/lib64
+
+# add rbenv to profile
+cat <<DATAEOF >> "$chroot/etc/profile.d/rbenv.sh"
+# add rbenv support
+rbenv_base=/usr/local/lib/rbenv
+export PATH=\$PATH:\$rbenv_base/bin
+[ -n \$RBENV_ROOT ] && export RBENV_ROOT=\$rbenv_base/env
+eval "\$(rbenv init -)"
+DATAEOF
+
+# install ruby, bundler, chef and puppet
+chroot "$chroot" /bin/bash <<DATAEOF
+env-update && source /etc/profile
+
+# install ruby, use it as global version
+emerge dev-libs/libyaml
+rbenv install "$ruby_version"
+rbenv global "$ruby_version"
+
+# disable rdoc and ri
+mkdir -p "/usr/local/lib/rbenv/env/versions/$ruby_version/etc"
+cat <<EOF > "/usr/local/lib/rbenv/env/versions/$ruby_version/etc/gemrc"
+# disable rdoc and ri
+install: --no-rdoc --no-ri
+update:  --no-rdoc --no-ri
+EOF
+
+# install required and desired gems
+gem install bundler chef puppet
+DATAEOF
+
+# install logger and cron
+chroot "$chroot" /bin/bash <<DATAEOF
+emerge app-admin/rsyslog sys-process/vixie-cron
+rc-update add rsyslog default
+rc-update add vixie-cron default
+DATAEOF
+
+# install nfs and automount support
+# chroot "$chroot" emerge net-fs/nfs-utils net-fs/autofs
+
+# make the disk bootable
+chroot "$chroot" /bin/bash <<DATAEOF
+source /etc/profile && \
+env-update && \
+grub-install --no-floppy /dev/sda && \
+boot-update
+DATAEOF
+
+### CLEANUP TO SHRINK THE BOX ###
+
+# a fresh install probably shouldn't nag about news
+chroot "$chroot" /usr/bin/eselect news read all
+
+# cleanup time...
+chroot "$chroot" /bin/bash <<DATAEOF
+# delete temp, cached and build artifact data - some low hanging fruit...
+eclean -d distfiles
+rm /tmp/*
+rm -rf /var/log/*
+rm -rf /var/tmp/*
+
+# there's some leftover junk by gem installation in the root folder
+# don't know where this is from (/root/.gem/specs/rubygems.org%80/...), but it should go...
+# we use a global ruby by default
+# ...probably hard coded path by mistake, report to upstream? Which upstream?!?
+rm -rf /root/.gem
+
+# here's some savings crippling the usage of this box (sorted descending by damage)
+#rm -rf /usr/local/lib/rbenv/.git
+#rm -rf /usr/local/lib/rbenv/env/plugins/*/.git
+#rm -rf /usr/src/linux*
+#rm -rf /usr/portage/.git
+DATAEOF
+
+# fill all free hdd space with zeros
+dd if=/dev/zero of="$chroot/boot/EMPTY" bs=1M
+rm "$chroot/boot/EMPTY"
+
+dd if=/dev/zero of="$chroot/EMPTY" bs=1M
+rm "$chroot/EMPTY"
+
+# fill all swap space with zeros and recreate swap
+swapoff /dev/sda3
+shred -n 0 -z /dev/sda3
+mkswap /dev/sda3
+
+exit