first commit

centos7/ks.cfg

@@ -0,0 +1,97 @@
+# based on work by Jeff Geerling - https://github.com/geerlingguy/packer-boxes/blob/master/centos7/http/ks.cfg
+install
+cdrom
+lang en_US.UTF-8
+keyboard us
+network --bootproto=dhcp
+rootpw Packer
+firewall --disabled
+selinux --permissive
+timezone UTC
+bootloader --location=mbr
+text
+skipx
+zerombr
+clearpart --all --initlabel
+# systems will often run better with a bit of swap
+part / --fstype xfs --grow --size=6144
+part swap --fstype swap --size=512
+auth --enableshadow --passalgo=sha512 --kickstart
+firstboot --disabled
+eula --agreed
+services --enabled=NetworkManager,sshd
+reboot
+
+%packages --ignoremissing --excludedocs
+@Core
+openssh-clients
+openssh-server
+sudo
+net-tools
+curl
+
+# unnecessary firmware
+-aic94xx-firmware
+-atmel-firmware
+-b43-openfwwf
+-bfa-firmware
+-ipw2100-firmware
+-ipw2200-firmware
+-ivtv-firmware
+-iwl100-firmware
+-iwl1000-firmware
+-iwl3945-firmware
+-iwl4965-firmware
+-iwl5000-firmware
+-iwl5150-firmware
+-iwl6000-firmware
+-iwl6000g2a-firmware
+-iwl6050-firmware
+-libertas-usb8388-firmware
+-ql2100-firmware
+-ql2200-firmware
+-ql23xx-firmware
+-ql2400-firmware
+-ql2500-firmware
+-rt61pci-firmware
+-rt73usb-firmware
+-xorg-x11-drv-ati-firmware
+-zd1211-firmware
+%end
+
+%post
+yum update -y
+
+# set virtual-guest as default profile for tuned
+echo "virtual-guest" > /etc/tuned/active_profile
+
+# Because memory is scarce resource in most cloud/virt environments,
+# and because this impedes forensics, we are differing from the Fedora
+# default of having /tmp on tmpfs.
+echo "Disabling tmpfs for /tmp."
+systemctl mask tmp.mount
+
+cat <<EOL > /etc/sysconfig/kernel
+# UPDATEDEFAULT specifies if new-kernel-pkg should make
+# new kernels the default
+UPDATEDEFAULT=yes
+
+# DEFAULTKERNEL specifies the default kernel package type
+DEFAULTKERNEL=kernel
+EOL
+
+# make sure firstboot doesn't start
+echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot
+
+echo "Fixing SELinux contexts."
+touch /var/log/cron
+touch /var/log/boot.log
+mkdir -p /var/cache/yum
+/usr/sbin/fixfiles -R -a restore
+
+yum -y remove firewalld
+
+sed -i "s/^.*requiretty/#Defaults requiretty/" /etc/sudoers
+
+yum clean all
+%end

centos7/packer.json

@@ -0,0 +1,77 @@
+{
+  "variables": {
+    "proxmox_username": "",
+    "proxmox_password": "",
+    "proxmox_url": "",
+    "proxmox_node": "",
+    "proxmox_storage_pool": "local-lvm",
+    "proxmox_storage_pool_type": "lvm-thin",
+    "proxmox_storage_format": "raw",
+    "proxmox_iso_pool": "local:iso",
+    "centos_image": "CentOS-7-x86_64-DVD-1908.iso",
+    "template_name": "CentOS7-Template",
+    "template_description": "CentOS 7 Template",
+    "version": ""
+  },
+  "builders": [
+    {
+      "type": "proxmox",
+      "username": "{{user `proxmox_username`}}",
+      "password": "{{user `proxmox_password`}}",
+      "proxmox_url": "{{ user `proxmox_url`}}",
+      "insecure_skip_tls_verify": true,
+      "node": "{{user `proxmox_node`}}",
+      "os": "l26",
+      "boot_command": [
+        "<tab> text ks=http://{{ .HTTPIP }}:{{ .HTTPPort }}/ks.cfg<enter><wait>"
+      ],
+      "network_adapters": [
+        {
+          "bridge": "vmbr0",
+          "model": "virtio"
+        }
+      ],
+      "disks": [
+        {
+          "type": "scsi",
+          "disk_size": "8G",
+          "storage_pool": "{{user `proxmox_storage_pool`}}",
+          "storage_pool_type": "{{user `proxmox_storage_pool_type`}}",
+          "format": "{{user `proxmox_storage_format`}}"
+        }
+      ],
+      "scsi_controller": "virtio-scsi-single",
+      "iso_file": "{{user `proxmox_iso_pool`}}/{{user `centos_image`}}",
+      "boot_wait": "10s",
+      "cores": "2",
+      "memory": "2048",
+      "http_directory": "centos7",
+      "ssh_username": "root",
+      "ssh_password": "Packer",
+      "ssh_port": 22,
+      "ssh_timeout": "15m",
+      "unmount_iso": true,
+      "template_name": "{{user `template_name`}}",
+      "template_description": "{{user `template_description`}}"
+    }
+  ],
+  "provisioners": [
+    {
+      "type": "shell",
+      "inline": [
+        "yum install -y cloud-init qemu-guest-agent cloud-utils-growpart gdisk",
+        "shred -u /etc/ssh/*_key /etc/ssh/*_key.pub",
+        "rm -f /var/run/utmp",
+        ">/var/log/lastlog",
+        ">/var/log/wtmp",
+        ">/var/log/btmp",
+        "rm -rf /tmp/* /var/tmp/*",
+        "unset HISTFILE; rm -rf /home/*/.*history /root/.*history",
+        "rm -f /root/*ks",
+        "passwd -d root",
+        "passwd -l root"
+      ],
+      "only": ["proxmox"]
+    }
+  ]
+}