prepare_redhat_for_box.sh

#!/bin/bash +x

# This script should help to prepare RedHat and RedHat like OS (CentOS,
# Scientific Linux, ...) for Vagrant usage.

# To create new box image, just install minimal base system in VM. Then upload
# this script to the VM and run it. After script has finished, halt the machine
# and then create an oVirt  template, which will be used for creating new
# vagrant machines.


# We need a hostname.
if [ $# -ne 1 ]; then
  echo "Usage: $0 <hostname>"
  echo "Hostname should be in format vagrant-[os-name], e.g. vagrant-redhat63."
  exit 1
fi


# On which version of RedHet are we running?
RHEL_MAJOR_VERSION=$(sed 's/.*release \([0-9]\)\..*/\1/' /etc/redhat-release)
if [ $? -ne 0 ]; then
  echo "Is this a RedHat distro?"
  exit 1
fi
echo "* Found RedHat ${RHEL_MAJOR_VERSION} version."

ATOMIC=false
which yum >/dev/null 2>&1
[[ $? -ne 0 ]] && ATOMIC=true

# Setup hostname vagrant-something.
FQDN="$1.vagrantup.com"
if grep '^HOSTNAME=' /etc/sysconfig/network > /dev/null; then
  sed -i 's/HOSTNAME=\(.*\)/HOSTNAME='${FQDN}'/' /etc/sysconfig/network
else
  echo "HOSTNAME=${FQDN}" >> /etc/sysconfig/network
fi


# Enable EPEL and Puppet repositories.
if [[ $ATOMIC != "true" ]]; then
  yum install -y epel-release
  yum install -y ovirt-guest-agent-common
  if [[ $RHEL_MAJOR_VERSION -eq 5 ]]; then
    yum install -y \
      http://ftp.astral.ro/mirrors/fedora/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm \
      https://yum.puppetlabs.com/puppetlabs-release-el-5.noarch.rpm
  elif [[ $RHEL_MAJOR_VERSION -eq 6 ]]; then
    yum install -y \
      http://ftp.astral.ro/mirrors/fedora/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm \
      https://yum.puppetlabs.com/puppetlabs-release-el-6.noarch.rpm
  elif [[ $RHEL_MAJOR_VERSION -eq 7 ]]; then
    yum install -y \
      http://ftp.astral.ro/mirrors/fedora/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm \
      https://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm
  else
    echo "Is this a valid major release?"
    exit 1
  fi
else
  ostree remote add --set=gpg-verify=false centos-atomic-continuous https://ci.centos.org/artifacts/sig-atomic/rdgo/centos-continuous/ostree/repo/
  rpm-ostree rebase centos-atomic-continuous:centos-atomic-host/${RHEL_MAJOR_VERSION}/x86_64/devel/alpha
  rpm-ostree pkg-add epel-release
  rpm-ostree install ovirt-guest-agent-common
  systemctl reboot
fi

# Install some required software.
if [[ $ATOMIC != "true" ]]; then
  yum -y install openssh-server openssh-clients sudo curl \
  ruby ruby-devel make gcc rubygems rsync puppet ovirt-guest-agent ovirt-guest-agent-common cloud-init \
  iptables-services net-tools
fi

chkconfig sshd on

# Users, groups, passwords and sudoers.
grep 'vagrant' /etc/passwd > /dev/null
if [ $? -ne 0 ]; then
  echo '* Creating user vagrant.'
  useradd vagrant
  echo 'vagrant' | passwd --stdin vagrant
fi
grep '^admin:' /etc/group > /dev/null || groupadd admin
usermod -G admin vagrant

echo 'Defaults    env_keep += "SSH_AUTH_SOCK"' >> /etc/sudoers
echo '%admin ALL=NOPASSWD: ALL' >> /etc/sudoers
sed -i 's/Defaults\s*requiretty/Defaults !requiretty/' /etc/sudoers

# SSH setup
# Add Vagrant ssh key for root accout.
sed -i 's/.*UseDNS.*/UseDNS no/' /etc/ssh/sshd_config

vagrant_home=/home/vagrant
[ -d $vagrant_home/.ssh ] || mkdir $vagrant_home/.ssh
chmod 700 $vagrant_home/.ssh
curl -k -L --silent https://raw.githubusercontent.com/mitchellh/vagrant/master/keys/vagrant.pub > $vagrant_home/.ssh/authorized_keys
chmod 600 $vagrant_home/.ssh/authorized_keys
chown -R vagrant:vagrant $vagrant_home/.ssh


# Disable firewall and switch SELinux to permissive mode.
chkconfig iptables off
chkconfig firewalld off
chkconfig ip6tables off
for i in cloud-init ovirt-guest-agent; do chkconfig $i on; done
chkconfig NetworkManager off

sed -i 's/SELINUX=enforcing/SELINUX=permissive/' /etc/sysconfig/selinux
[ -f /etc/selinux/config ] && sed -i 's/SELINUX=enforcing/SELINUX=permissive/' /etc/selinux/config


# Don't fix ethX names to hw address.
rm -f /etc/udev/rules.d/*persistent-net.rules
rm -f /etc/udev/rules.d/*-net.rules
rm -fr /var/lib/dhclient/*

# Interface eth0 should always get IP address via dhcp.
echo $'' > /etc/sysconfig/network-scripts/ifcfg-eth0

CLOUD_CONFIG=/etc/cloud/cloud.cfg
grep  -q ' - resolv-conf' $CLOUD_CONFIG || sed -i -e 's/ - timezone/&\n - resolv-conf/' $CLOUD_CONFIG

# Chef
[[ $ATOMIC != "true" ]] && curl -L --silent https://omnitruck.chef.io/install.sh | bash


# Do some cleanup..
rm -f /root/.bash_history
rm -f /root/authorized_keys
[[ $ATOMIC != "true" ]] && yum clean all