WIP: Setup for douai

authorized_keys

 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5MAMmMmojqNRoOnGc7xGoJWWAzYo2f2zO2K4elsZhHfG6l2SQJTmna0DuUi8qEtBbA9+TN1HAOeEXQKMsQyydG8dAE9vT41Lj5y8kXQDDquQxcpTIrqjmSqxjG42Olk+sT+XvcdyqA//29OHhhrKdhIf9LAOsIPHDYW06hRMf7kXIgt3MNi8ayPpA9coTHIscvV8MzwbF2q8Owrkj5UpPmSd/cjmFTcijT3rXmN0E1d3lrCvIuqxFBsFB47o0q53rFZMc5HoHQjJbg6dB4E0GNT0Ujl9ZaIDEzQbe1/T5BVWXrwDfYXbj8UlqtXeFQlo2dB+au2tHw56s4boqDxIl thomas.gambier@nexedi.com
 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5qVcd6gclQmxL9i0Vsasy6vMiVaIjKHHNAwVBRjx0Ie+sDxaCZRJHrRGJmbDMMJBSV2vO08DgureHdDkXoLpR4M7LjgjPW/gAP3nQ9w0b8L1VixXvXiIDWIdgeD+beHrMJyZM0cbEWN1nGL0eMP8C9PWIZDvxPvAGDwW1uSDKdBtfQuLTcByWQa0IP9I/tJaC5gov8IOdWS6x7pqZW29SYoRd0HOQJfODoq8lFhtCrpMbzgXEaXTglSTXPI92URqSAqY2WXW1Aqm3baZSU5eM9HfU7a6OYC8RQ0Lywxw276uHRribLSPZelWO+HiIEu7jQ3VUIe0bXu5tgcMsuswd luke@nexedi.com-chronos
 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHMFf/eh931HRskwFHRHg28Cajic6jdxVIH/gRMaxBFI+FgYOeb1ovehBa/C6vQGYqhlJf+Kuz9HsXyebVqH55yg/2BsSh6QQolgWwwwoWvTTFY2QRQwhkNSykWdHJhURNU2BGpPi0qTWnYj/jGN2hJFvOMbHtwzuMtKSLeFXh6d8A4cTWmme0FTKNqJfMYX2bOsnKWleLB25DDrs50IN2+bVThVt/70M24yervnyxhqnGpyTm9XJEI7nnLoWCK0UVr78kpQlikjSwhRggTjPRx1SrqRNNotHbbMEb5rCBTZc0s0klwKVzr77g3AOgAYRz9QM/l995Npm987AgbFuj rafael@localhost
-ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7WOChMVI7f6YBd9cNvbJWvDRZWxoKIhC0S10tHcG2Iod8Fge5WXrQb9XwkwI/LtpZh6NASzIvIBg0mJ0r4b8JniH2IJ96rXC6bcPAvVHU6ULAgCSoFXtkLG3leXJNshVuganCYHpu4rhgZ8ZR5Esq2V/DED7FBkoq4R7dlEpegb1r1HR8JWOVVlJbUO2+3wEDAo0gKfm900vwzqHZJJbLOXWXPmGFqMgWwV4sRx3MkOEr4dTXYvMtdZsy7vc+NftpebV+rV6CcZO6lkXDgR6EpPIVmlVeoWXfc/KnTtAz81GmazXaMpRgDb8A1KIm4fzmvVpYGkxXOD/d1YtwkAMRQ== ivan@thinkpad
+ssh-rsa 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 lu.xu@nexedi.com

dnsmasq_douai.sh

+#!/bin/sh
+set -e
+
+SCRIPT_DIR=$(realpath `dirname "$0"`)
+
+
+. $SCRIPT_DIR/download_boot_systems.sh
+
+download_debian_10_if_needed
+#download_sysrescuecd_if_needed
+
+#UPDATE THOSE VARIABLES DEPENDING ON YOUR SITE
+MY_IF_NAME=eth0
+MY_IP_ADDR=192.168.46.2
+DHCP_RANGE=192.168.46.100,static,255.255.255.0
+ROUTER_ADDR=192.168.46.2
+DNS_SERVER=1.1.1.1
+
+common=console=ttyS1,57600
+
+mac='
+0C:42:A1:34:9A:89
+0C:42:A1:34:9B:B1
+0C:42:A1:34:99:58
+0C:42:A1:34:9B:A1
+0C:42:A1:34:9B:99
+0C:42:A1:34:9B:D1
+0C:42:A1:34:9C:11
+0C:42:A1:34:99:C1
+0C:42:A1:34:9A:81
+0C:42:A1:34:99:69
+0C:42:A1:34:9A:69
+0C:42:A1:34:9A:79
+0C:42:A1:34:9A:71
+0C:42:A1:34:9B:91
+0C:42:A1:34:9C:09
+'
+i=0
+hostname_prefix=douai-capri
+
+(
+#echo set timeout=0
+echo if false
+echo then true
+for mac in $mac; do
+  echo "elif [ \$net_default_mac = $mac ]"
+  echo then set i=`printf %03u $i`
+  i=`expr $i + 1`
+done
+cat <<EOF
+else unset timeout
+fi
+
+menuentry 'Install Debian' {
+  linux /debian-installer/amd64/linux vga=788 url=tftp://\$pxe_default_server/preseed_douai.cfg language=C country=FR keymap=fr hostname=${hostname_prefix}\$i domain= --- mitigations=off $common
+  initrd /debian-installer/amd64/initrd.gz
+}
+menuentry 'SystemRescueCd' {
+  linux /sysresccd/sysresccd/boot/x86_64/vmlinuz archisobasedir=sysresccd archiso_http_srv=http://\$pxe_default_server:69/sysresccd/ checksum ip=dhcp $common
+  initrd /sysresccd/sysresccd/boot/intel_ucode.img /sysresccd/sysresccd/boot/amd_ucode.img /sysresccd/sysresccd/boot/x86_64/sysresccd.img
+}
+menuentry 'Exit' {
+  exit
+}
+EOF
+) >debian-installer/amd64/grub/grub.cfg
+
+
+for mac in $mac
+do
+  hostname=${hostname_prefix}$(printf %03u $i)
+  mkdir -p $hostname
+  cat > $hostname/interfaces <<EOF
+# This file describes the network interfaces available on your system
+# and how to activate them. For more information, see interfaces(5).
+
+source /etc/network/interfaces.d/*
+
+# The loopback network interface
+auto lo
+iface lo inet loopback
+
+# The primary network interface
+allow-hotplug eno1
+#iface eno1 inet dhcp
+iface eno1 inet static
+  address 192.168.46.$(( 50 + $i ))/24
+
+allow-hotplug ens9f1
+iface ens9f1 inet static
+  address 195.90.118.$(( 194 + $i ))/27
+  gateway 195.90.118.193
+  dns-nameservers 1.1.1.1 8.8.8.8
+
+#allow-hotplug ens9f0
+##iface ens9f0 inet dhcp
+#iface ens9f0 inet static
+#  address 113.24.192.26/30
+#  gateway 113.24.192.25
+EOF
+  i=`expr $i + 1`
+done
+
+
+
+
+exec dnsmasq -d --port=0 --log-dhcp \
+  --interface=$MY_IF_NAME \
+  --bind-interfaces \
+  --except-interface=lo \
+  --listen-address=$MY_IP_ADDR \
+  --dhcp-range=$DHCP_RANGE \
+  --dhcp-option=option:router,$ROUTER_ADDR \
+  --dhcp-option=option:dns-server,$DNS_SERVER \
+  --dhcp-boot=debian-installer/amd64/grubx64.efi \
+  --enable-tftp --tftp-root=$(realpath `dirname "$0"`) \
+  --conf-file=/dev/null \
+  --dhcp-host=00:22:4D:DD:64:39,192.168.46.101,1h
+

preseed_douai.cfg

+#d-i anna/choose_modules string network-console
+#d-i network-console/password password jsdlhhil
+#d-i network-console/password-again password jsdlhhil
+
+d-i apt-setup/enable-source-repositories string false
+d-i auto-install/enable string true
+d-i base-installer/install-recommends string false
+d-i debconf/priority string critical
+#d-i finish-install/reboot_in_progress string note
+d-i grub-installer/force-efi-extra-removable string true
+d-i mirror/country string manual
+d-i mirror/http/hostname string ftp.fr.debian.org
+d-i mirror/http/directory string /debian
+d-i mirror/http/proxy string
+d-i partman/early_command string set -e; x=`grep -l 234441648 /sys/block/*/size`; x=${x%/*}; x=/dev/${x##*/}; debconf-set partman-auto/disk $x; debconf-set grub-installer/bootdev $x # TODO
+d-i partman-auto/expert_recipe string : 36 1 36 free method{ efi } format{ } . 1 1 -1 xfs method{ format } format{ } use_filesystem{ } filesystem{ xfs } mountpoint{ / } options/noatime{ } .
+d-i partman-auto/method string regular
+d-i partman-basicfilesystems/no_swap string false
+d-i partman/choose_partition string finish
+d-i partman/confirm string true
+d-i partman/confirm_nooverwrite string true
+d-i partman-efi/non_efi_system boolean true
+d-i passwd/make-user string false
+d-i passwd/root-login string true
+d-i passwd/root-password string willbedeleted
+d-i passwd/root-password-again string willbedeleted
+d-i pkgsel/include string ssh aptitude bwm-ng ca-certificates dbus-user-session debian-goodies dnsutils eatmydata efibootmgr gdb git gnupg host htop iotop linux-cpupower linux-perf lm-sensors lsof man-db ndisc6 netcat-openbsd python resolvconf rsync screen smartmontools socat strace systemd-coredump vim wget xz-utils
+# - fix UTF-8 (C.UTF-8 globally, no C override for root)
+# - only login with a ssh-key
+# - restore network settings
+# - ignore other OS (in particular if there are VM using whole physical drives)
+# - I don't like 'quiet' on servers (https://bugs.launchpad.net/bugs/581796)
+# - enable page up/down to search the history
+d-i preseed/late_command string set -e; \
+  cd /target/root; sed -i /^mesg/q .profile; \
+  mkdir -m 0700 .ssh; cd .ssh; tftp -g -r authorized_keys 192.168.46.2; \
+  cd ../../etc; rm -f grub.d/30_otheros; echo LANG=C.UTF-8 >default/locale; \
+  sed -i '/history-search-/s/# //' inputrc; \
+  cd network; tftp -g -r `hostname`/interfaces 192.168.46.2; \
+  in-target sh -ec 'passwd -ld root; sed -i /^GRUB_CMDLINE_LINUX_DEFAULT=/s/quiet// /etc/default/grub; update-grub'
+d-i time/zone string UTC
+tasksel tasksel/first string