Add Munich InternetX configuration

authorized_keys

@@ -2,3 +2,4 @@ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5MAMmMmojqNRoOnGc7xGoJWWAzYo2f2zO2K4elsZh
 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5qVcd6gclQmxL9i0Vsasy6vMiVaIjKHHNAwVBRjx0Ie+sDxaCZRJHrRGJmbDMMJBSV2vO08DgureHdDkXoLpR4M7LjgjPW/gAP3nQ9w0b8L1VixXvXiIDWIdgeD+beHrMJyZM0cbEWN1nGL0eMP8C9PWIZDvxPvAGDwW1uSDKdBtfQuLTcByWQa0IP9I/tJaC5gov8IOdWS6x7pqZW29SYoRd0HOQJfODoq8lFhtCrpMbzgXEaXTglSTXPI92URqSAqY2WXW1Aqm3baZSU5eM9HfU7a6OYC8RQ0Lywxw276uHRribLSPZelWO+HiIEu7jQ3VUIe0bXu5tgcMsuswd luke@nexedi.com-chronos
 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHMFf/eh931HRskwFHRHg28Cajic6jdxVIH/gRMaxBFI+FgYOeb1ovehBa/C6vQGYqhlJf+Kuz9HsXyebVqH55yg/2BsSh6QQolgWwwwoWvTTFY2QRQwhkNSykWdHJhURNU2BGpPi0qTWnYj/jGN2hJFvOMbHtwzuMtKSLeFXh6d8A4cTWmme0FTKNqJfMYX2bOsnKWleLB25DDrs50IN2+bVThVt/70M24yervnyxhqnGpyTm9XJEI7nnLoWCK0UVr78kpQlikjSwhRggTjPRx1SrqRNNotHbbMEb5rCBTZc0s0klwKVzr77g3AOgAYRz9QM/l995Npm987AgbFuj rafael@localhost
 ssh-rsa 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 lu.xu@nexedi.com
+ssh-rsa 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 klaus@nexedi.com

dnsmasq_muc_internetx.sh

+#!/bin/sh
+set -e
+
+SCRIPT_DIR=$(realpath `dirname "$0"`)
+
+
+. $SCRIPT_DIR/download_boot_systems.sh
+
+download_debian_10_if_needed
+#download_sysrescuecd_if_needed
+
+#UPDATE THOSE VARIABLES DEPENDING ON YOUR SITE
+MY_IF_NAME=eth0
+MY_IP_ADDR=192.168.46.2
+DHCP_RANGE=192.168.46.100,static,255.255.255.0
+ROUTER_ADDR=192.168.46.2
+DNS_SERVER=1.1.1.1
+
+#This is to make linux output visible in IPMI SOL. Remove if you are using a graphical card.
+common=console=ttyS1,57600
+
+mac='
+00:22:4d:dd:64:f8
+00:22:4d:dd:65:38
+00:22:4d:dd:64:4a
+00:22:4d:dd:64:f0
+'
+i=1
+hostname_prefix=muc-internetx-capri-
+
+(
+#echo set timeout=0
+echo if false
+echo then true
+for mac in $mac; do
+  echo "elif [ \$net_default_mac = $mac ]"
+  echo then set i=`printf %03u $i`
+  i=`expr $i + 1`
+done
+cat <<EOF
+else unset timeout
+fi
+
+menuentry 'Install Debian' {
+  linux /debian-installer/amd64/linux vga=788 url=tftp://\$pxe_default_server/preseed_muc_internetx.cfg language=C country=DE keymap=de hostname=${hostname_prefix}\$i domain= --- mitigations=off $common
+  initrd /debian-installer/amd64/initrd.gz
+}
+#menuentry 'SystemRescueCd' {
+#  linux /sysresccd/sysresccd/boot/x86_64/vmlinuz archisobasedir=sysresccd archiso_http_srv=http://\$pxe_default_server:69/sysresccd/ checksum ip=dhcp $common
+#  initrd /sysresccd/sysresccd/boot/intel_ucode.img /sysresccd/sysresccd/boot/amd_ucode.img /sysresccd/sysresccd/boot/x86_64/sysresccd.img
+#}
+menuentry 'Exit' {
+  exit
+}
+EOF
+) >debian-installer/amd64/grub/grub.cfg
+
+i=1
+for mac in $mac
+do
+  hostname=${hostname_prefix}$(printf %03u $i)
+  mkdir -p $hostname
+  cat > $hostname/interfaces <<EOF
+# This file describes the network interfaces available on your system
+# and how to activate them. For more information, see interfaces(5).
+
+source /etc/network/interfaces.d/*
+
+# The loopback network interface
+auto lo
+iface lo inet loopback
+
+# The Rj45 interace
+allow-hotplug eno1
+iface eno1 inet dhcp
+
+# The first SFP+ interface
+allow-hotplug enp193s0f0
+iface enp193s0f0 inet static
+  address 85.236.52.$(( 76 + $i ))/29
+  gateway 85.236.52.73
+  dns-nameservers 62.116.162.126 62.116.130.3 85.236.36.4
+
+# The second SFP+ interace (not used)
+#iface-hotplug enp193s0f1
+#iface enp193s0f1 inet dhcp
+
+EOF
+  i=`expr $i + 1`
+done
+
+exec dnsmasq -d --port=0 --log-dhcp \
+  --interface=$MY_IF_NAME \
+  --bind-interfaces \
+  --except-interface=lo \
+  --listen-address=$MY_IP_ADDR \
+  --dhcp-range=$DHCP_RANGE \
+  --dhcp-option=option:router,$ROUTER_ADDR \
+  --dhcp-option=option:dns-server,$DNS_SERVER \
+  --dhcp-boot=debian-installer/amd64/grubx64.efi \
+  --enable-tftp --tftp-root=$(realpath `dirname "$0"`) \
+  --conf-file=/dev/null \
+  --dhcp-host=00:22:4d:dd:64:f9,192.168.46.102,1h \
+  --dhcp-host=00:22:4d:dd:65:39,192.168.46.103,1h \
+  --dhcp-host=00:22:4d:dd:64:4b,192.168.46.104,1h \
+  --dhcp-host=00:22:4d:dd:64:f1,192.168.46.105,1h \
+  --dhcp-host=00:22:4d:dd:64:f8,192.168.46.106,1h \
+  --dhcp-host=00:22:4d:dd:65:38,192.168.46.107,1h \
+  --dhcp-host=00:22:4d:dd:64:4a,192.168.46.108,1h \
+  --dhcp-host=00:22:4d:dd:64:f0,192.168.46.109,1h \

preseed_muc_internetx.cfg

+#d-i anna/choose_modules string network-console
+#d-i network-console/password password jsdlhhil
+#d-i network-console/password-again password jsdlhhil
+
+d-i apt-setup/enable-source-repositories string false
+d-i auto-install/enable string true
+d-i base-installer/install-recommends string false
+d-i debconf/priority string critical
+#d-i finish-install/reboot_in_progress string note
+d-i grub-installer/force-efi-extra-removable string true
+d-i mirror/country string manual
+d-i mirror/http/hostname string ftp.de.debian.org
+d-i mirror/http/directory string /debian
+d-i mirror/http/proxy string
+d-i partman/early_command string set -e; x=`grep -l 468862128 /sys/block/*/size`; x=${x%/*}; x=/dev/${x##*/}; debconf-set partman-auto/disk $x; debconf-set grub-installer/bootdev $x # TODO
+d-i partman-auto/expert_recipe string : 36 1 36 free method{ efi } format{ } . 1 1 -1 xfs method{ format } format{ } use_filesystem{ } filesystem{ xfs } mountpoint{ / } options/noatime{ } .
+d-i partman-auto/method string regular
+d-i partman-basicfilesystems/no_swap string false
+d-i partman/choose_partition string finish
+d-i partman/confirm string true
+d-i partman/confirm_nooverwrite string true
+d-i partman-efi/non_efi_system boolean true
+d-i passwd/make-user string false
+d-i passwd/root-login string true
+d-i passwd/root-password string willbedeleted
+d-i passwd/root-password-again string willbedeleted
+d-i pkgsel/include string ssh aptitude bwm-ng ca-certificates dbus-user-session debian-goodies dnsutils eatmydata efibootmgr gdb git gnupg host htop iotop linux-cpupower linux-perf lm-sensors lsof man-db ndisc6 netcat-openbsd python resolvconf rsync screen smartmontools socat strace systemd-coredump vim wget xz-utils
+# - fix UTF-8 (C.UTF-8 globally, no C override for root)
+# - only login with a ssh-key
+# - restore network settings
+# - ignore other OS (in particular if there are VM using whole physical drives)
+# - I don't like 'quiet' on servers (https://bugs.launchpad.net/bugs/581796)
+# - enable page up/down to search the history
+d-i preseed/late_command string set -e; \
+  cd /target/root; sed -i /^mesg/q .profile; \
+  mkdir -m 0700 .ssh; cd .ssh; tftp -g -r authorized_keys 192.168.46.2; \
+  cd ../../etc; rm -f grub.d/30_otheros; echo LANG=C.UTF-8 >default/locale; \
+  sed -i '/history-search-/s/# //' inputrc; \
+  cd network; tftp -g -r `hostname`/interfaces 192.168.46.2; \
+  in-target sh -ec 'passwd -ld root; sed -i /^GRUB_CMDLINE_LINUX_DEFAULT=/s/quiet// /etc/default/grub; update-grub'
+d-i time/zone string UTC
+tasksel tasksel/first string

[Klaus Wölfel]

@tomo @luke this is the intial configuration. It should edited once final configuration is made.