added seal script for vmware

This commit is contained in:
Michael Trip 2021-01-05 09:49:48 +01:00
parent 7a29d6c383
commit 378cb1d5f7

47
vmware-seal-opensuse.sh Normal file
View file

@ -0,0 +1,47 @@
#!/usr/bin/env bash
#
# This is the sys_prep script
# It will clear out all non-revelent information for a new VM
#
# 1. Force logs to rotate and clear old.
/usr/sbin/logrotate -f /etc/logrotate.conf
/bin/rm -f /var/log/*-20* /var/log/*.gz
#
# 2. Clear the audit log & wtmp.
/bin/cat /dev/null > /var/log/audit/audit.log
/bin/cat /dev/null > /var/log/wtmp
#
# 3. Remove the udev device rules.
/bin/rm -f /etc/udev/rules.d/70*
#
# 4. Remove the traces of the template MAC address and UUIDs.
/bin/sed -i '/^\(HWADDR\|UUID\|IPADDR\|NETMASK\|GATEWAY\)=/d' /etc/sysconfig/network/ifcfg-e*
#
# 5. Clean /tmp out.
/bin/rm -rf /tmp/*
/bin/rm -rf /var/tmp/*
#
# 6. Remove the SSH host keys.
/bin/rm -f /etc/ssh/*key*
#
# 7. Remove the root user's shell history.
/bin/rm -f /root/.bash_history
unset HISTFILE
#
# 8. Set hostname to localhost
/bin/hostnamectl set-hostname localhost.localdomain
#
# 9. Remove rsyslog.conf remote log server IP.
/bin/sed -i '/1.1.1.1.1/'d /etc/rsyslog.conf
rm -v /root/.ssh/known_hosts
#
# 11. Shutdown the VM. Poweron required to scan new HW addresses.
poweroff
#