ansible/roles/preseed/templates/preseed_debian-buster.cfg.j2

   1 #########################################################################
   2 #  realraum preseed file for Debian buster based VMs
   3 #########################################################################
   4
   5 d-i debian-installer/language string en
   6 d-i debian-installer/country string AT
   7 d-i debian-installer/locale string en_US.UTF-8
   8 d-i keyboard-configuration/xkb-keymap select us
   9
  10 d-i hw-detect/load_firmware boolean false
  11
  12 d-i netcfg/disable_dhcp boolean true
  13 d-i netcfg/choose_interface select {{ install_interface | default(hostvars[hostname].network_cooked.primary.interface) }}
  14 d-i netcfg/disable_autoconfig boolean false
  15 d-i netcfg/get_ipaddress string {{ hostvars[hostname].network_cooked.primary.ip }}
  16 d-i netcfg/get_netmask string {{ hostvars[hostname].network_cooked.primary.mask }}
  17 d-i netcfg/get_gateway string {{ hostvars[hostname].network_cooked.primary.gateway }}
  18 d-i netcfg/get_nameservers string {{ hostvars[hostname].network_cooked.nameservers | join(' ') }}
  19 d-i netcfg/confirm_static boolean true
  20
  21 d-i netcfg/hostname string {{ hostname }}
  22 d-i netcfg/get_hostname string {{ hostname }}
  23 d-i netcfg/domain string {{ hostvars[hostname].network_cooked.domain }}
  24 d-i netcfg/get_domain string {{ hostvars[hostname].network_cooked.domain }}
  25 d-i netcfg/wireless_wep string
  26
  27
  28 d-i mirror/country string manual
  29 d-i mirror/http/hostname string debian.ffgraz.net
  30 d-i mirror/http/directory string /debian
  31 d-i mirror/http/proxy string
  32
  33
  34 d-i passwd/make-user boolean false
  35 d-i passwd/root-password password this-very-very-secure-password-will-be-removed-by-latecommand
  36 d-i passwd/root-password-again password this-very-very-secure-password-will-be-removed-by-latecommand
  37
  38
  39 d-i clock-setup/utc boolean true
  40 d-i time/zone string Europe/Vienna
  41 d-i clock-setup/ntp boolean false
  42
  43
  44 d-i partman/early_command string \
  45     debconf-set partman-auto/disk "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
  46     debconf-set grub-installer/bootdev "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
  47     umount -l /media || true
  48
  49 d-i grub-installer/choose_bootdev string manual
  50 d-i grub-installer/bootdev seen true
  51
  52 d-i partman-auto/method string lvm
  53 d-i partman-auto/purge_lvm_from_device boolean true
  54 d-i partman-auto-lvm/new_vg_name string {{ hostname }}
  55 d-i partman-auto-lvm/guided_size string max
  56
  57 d-i partman-lvm/device_remove_lvm boolean true
  58 d-i partman-md/device_remove_md boolean true
  59
  60 d-i partman-lvm/confirm boolean true
  61 d-i partman-lvm/confirm_nooverwrite boolean true
  62
  63 d-i partman-auto/expert_recipe string                                    \
  64       boot-root ::                                                       \
  65               1000 10000 -1 ext4                                         \
  66                       $defaultignore{ } $primary{ } $bootable{ }         \
  67                       method{ lvm } vg_name{ {{ hostname }} }            \
  68               .                                                          \
  69               2048 10000 2560 ext4                                       \
  70                       $lvmok{ } in_vg{ {{ hostname }} }                  \
  71                       method{ format } format{ }                         \
  72                       use_filesystem{ } filesystem{ ext4 }               \
  73                       mountpoint{ / }                                    \
  74               .                                                          \
  75               1024 11000 1280 ext4                                       \
  76                       $lvmok{ } in_vg{ {{ hostname }} }                  \
  77                       method{ format } format{ }                         \
  78                       use_filesystem{ } filesystem{ ext4 }               \
  79                       mountpoint{ /var }                                 \
  80               .                                                          \
  81               768 10000 768 ext4                                         \
  82                       $lvmok{ } in_vg{ {{ hostname }} }                  \
  83                       method{ format } format{ }                         \
  84                       use_filesystem{ } filesystem{ ext4 }               \
  85                       mountpoint{ /var/log }                             \
  86                       options/nodev{ nodev } options/noatime{ noatime }  \
  87                       options/noexec{ noexec }                           \
  88               .                                                          \
  89               16 20000 -1 ext4                                           \
  90                       $lvmok{ } in_vg{ {{ hostname }} } lv_name{ dummy } \
  91               .
  92
  93 d-i partman-auto-lvm/no_boot boolean true
  94 d-i partman-basicfilesystems/no_swap true
  95 d-i partman-partitioning/confirm_write_new_label boolean true
  96 d-i partman/choose_partition select finish
  97 d-i partman/confirm boolean true
  98 d-i partman/confirm_nooverwrite boolean true
  99
 100
 101 d-i base-installer/install-recommends boolean false
 102 d-i apt-setup/security_host string debian.ffgraz.net
 103
 104 tasksel tasksel/first multiselect
 105 d-i pkgsel/include string openssh-server python3 python3-apt
 106 d-i pkgsel/upgrade select safe-upgrade
 107 popularity-contest popularity-contest/participate boolean false
 108
 109 d-i grub-installer/only_debian boolean true
 110 d-i grub-installer/with_other_os boolean false
 111
 112 d-i finish-install/reboot_in_progress note
 113
 114
 115 d-i preseed/late_command string \
 116     lvremove -f {{ hostname }}/dummy; \
 117     in-target bash -c "apt-get update -q && apt-get full-upgrade -y -q"; \
 118     in-target bash -c "passwd -d root && passwd -l root"; \
 119     in-target bash -c "sed -e 's/^allow-hotplug/auto/' -i /etc/network/interfaces"; \
 120 {% if preseed_force_net_ifnames_policy is defined %}
 121     mkdir -p /target/etc/systemd/network; \
 122     in-target bash -c "echo '[Link]' > /etc/systemd/network/90-namepolicy.link"; \
 123     in-target bash -c "echo 'NamePolicy={{ preseed_force_net_ifnames_policy }}' >> /etc/systemd/network/90-namepolicy.link"; \
 124     in-target bash -c "update-initramfs -u"; \
 125 {% endif %}
 126 {% if hostvars[hostname].ansible_port is defined %}
 127     in-target bash -c "sed -e 's/^\(\s*#*\s*Port.*\)/Port {{ hostvars[hostname].ansible_port }}/' -i /etc/ssh/sshd_config"; \
 128 {% endif %}
 129     mkdir -p -m 0700 /target/root/.ssh; \
 130     cp /authorized_keys /target/root/.ssh/