fix
This commit is contained in:
parent
66983b7cb3
commit
c5a3f6749b
GPG Key ID:
931C79A9747F5F82
5
.gitignore
vendored
Normal file
5
.gitignore
vendored
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
# Object file
|
||||||
|
*.o
|
||||||
|
|
||||||
|
# Ada Library Information
|
||||||
|
*.ali
|
||||||
36
README.md
36
README.md
@ -1,4 +1,34 @@
|
|||||||
# debian_11-bullseye-preseed
|
# Debian fully automatic install through ISO remastering
|
||||||
|
Script and configuration to remaster a debian netinst ISO for 100% unattended install
|
||||||
|
|
||||||
编写 debian 11 的自定义应答文件
|
Usage:
|
||||||
从https://github.com/JaeGerW2016/debian_11-bullseye-preseed 转载
|
1. Download a [debian "netinst"](https://www.debian.org/CD/netinst/) image (tested with bullseye)
|
||||||
|
2. Adapt the preseed.cfg file to your needs. (This one installs just SSH and sudo)
|
||||||
|
3. Add grub config `ipv6.disable=1 cgroup_enable=memory swapaccount=1`
|
||||||
|
4. Adapt the ssh public key and root password to your own
|
||||||
|
5. Adapt the locale and timezone in your favor
|
||||||
|
6. Run:
|
||||||
|
```
|
||||||
|
./make-preseed-iso.sh debian-11.0.0-amd64-netinst.iso
|
||||||
|
```
|
||||||
|
This will create a new ISO image named `preseed-debian-11.0.0-amd64-netinst.iso` that
|
||||||
|
installs debian on the first available disk without intervention, not even a boot menu prompt.
|
||||||
|
|
||||||
|
### WARNING: This deletes stuff!
|
||||||
|
|
||||||
|
The preseed.cfg that in this repository ***completely erases the first disk\*\****
|
||||||
|
|
||||||
|
> ** as returned by `list-devices disk`, excluding usb
|
||||||
|
|
||||||
|
Also... open the script and read what it does. I made this for myself because I'm tired of hitting
|
||||||
|
enter 40 times everytime I need to install debian.
|
||||||
|
|
||||||
|
The location of the initrd is hardcoded to 'install.amd', this needs to be changed if you are using an iso
|
||||||
|
for other than amd64.
|
||||||
|
|
||||||
|
The configuration for the boot menu options is specific to bullseye in the case of a UEFI system because grub uses the position of the entry to specify the default option.
|
||||||
|
|
||||||
|
### More on how to preseed
|
||||||
|
* https://wiki.debian.org/DebianInstaller/Preseed
|
||||||
|
* https://wiki.debian.org/DebianInstaller/Preseed/EditIso
|
||||||
|
* https://wiki.debian.org/RepackBootableISO
|
||||||
|
|||||||
90
make-preseed-iso.sh
Normal file
90
make-preseed-iso.sh
Normal file
@ -0,0 +1,90 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
function extract_iso() {
|
||||||
|
echo "Extracting iso: $1..."
|
||||||
|
mkdir isofiles
|
||||||
|
7z x $1 -oisofiles
|
||||||
|
}
|
||||||
|
|
||||||
|
function add_preseed_to_initrd() {
|
||||||
|
echo "Adding preseed.cfg to initrd..."
|
||||||
|
chmod +w isofiles/install.amd/ -R
|
||||||
|
gunzip isofiles/install.amd/initrd.gz
|
||||||
|
echo preseed.cfg | cpio -H newc -o -A -F isofiles/install.amd/initrd
|
||||||
|
gzip isofiles/install.amd/initrd
|
||||||
|
chmod -w isofiles/install.amd/ -R
|
||||||
|
}
|
||||||
|
|
||||||
|
function make_auto_the_default_isolinux_boot_option() {
|
||||||
|
tmp_isolinux_cfg=$(mktemp --tmpdir isolinux.XXXXX)
|
||||||
|
|
||||||
|
echo "Setting 'auto' as default ISOLINUX boot entry..."
|
||||||
|
sed 's/timeout 0/timeout 3/g' isofiles/isolinux/isolinux.cfg >$tmp_isolinux_cfg
|
||||||
|
echo "default auto" >>$tmp_isolinux_cfg
|
||||||
|
chmod +w isofiles/isolinux/isolinux.cfg
|
||||||
|
cat $tmp_isolinux_cfg >isofiles/isolinux/isolinux.cfg
|
||||||
|
chmod -w isofiles/isolinux/isolinux.cfg
|
||||||
|
rm $tmp_isolinux_cfg
|
||||||
|
}
|
||||||
|
|
||||||
|
function make_auto_the_default_grub_boot_option() {
|
||||||
|
echo "Setting 'auto' as default GRUB boot entry..."
|
||||||
|
chmod +w isofiles/boot/grub/grub.cfg
|
||||||
|
# The index for the grub menus is zero-based for the
|
||||||
|
# Root menu, but 1-based for the rest, so 2>5 is the
|
||||||
|
# second menu (advanced options) => fifth option (auto)
|
||||||
|
echo 'set default="2>5"' >>isofiles/boot/grub/grub.cfg
|
||||||
|
echo "set timeout=3" >>isofiles/boot/grub/grub.cfg
|
||||||
|
chmod -w isofiles/boot/grub/grub.cfg
|
||||||
|
}
|
||||||
|
|
||||||
|
function recompute_md5_checksum() {
|
||||||
|
echo "Calculating new md5 checksum..."
|
||||||
|
echo " -- You can safely ignore the warning about a 'file system loop' below"
|
||||||
|
cd isofiles
|
||||||
|
chmod +w md5sum.txt
|
||||||
|
find . -follow -type f ! -name md5sum.txt -print0 | xargs -0 md5sum >md5sum.txt
|
||||||
|
chmod -w md5sum.txt
|
||||||
|
cd ..
|
||||||
|
}
|
||||||
|
|
||||||
|
function generate_new_iso_and_cleanup() {
|
||||||
|
local orig_iso="$1"
|
||||||
|
local new_iso="$2"
|
||||||
|
|
||||||
|
echo "Generating new iso: $new_iso..."
|
||||||
|
dd if="$orig_iso" bs=1 count=432 of=mbr_template.bin
|
||||||
|
|
||||||
|
chmod +w isofiles/isolinux/isolinux.bin
|
||||||
|
xorriso -as mkisofs -r \
|
||||||
|
-V 'Debian AUTO amd64' \
|
||||||
|
-o "$new_iso" \
|
||||||
|
-J -joliet-long \
|
||||||
|
-cache-inodes \
|
||||||
|
-isohybrid-mbr mbr_template.bin \
|
||||||
|
-b isolinux/isolinux.bin \
|
||||||
|
-c isolinux/boot.cat \
|
||||||
|
-boot-load-size 4 -boot-info-table \
|
||||||
|
-no-emul-boot -eltorito-alt-boot \
|
||||||
|
-e boot/grub/efi.img -no-emul-boot \
|
||||||
|
-isohybrid-gpt-basdat \
|
||||||
|
-isohybrid-apm-hfsplus \
|
||||||
|
isofiles
|
||||||
|
|
||||||
|
chmod +w isofiles -R
|
||||||
|
rm -rf isofiles mbr_template.bin
|
||||||
|
}
|
||||||
|
|
||||||
|
orig_iso="$1"
|
||||||
|
new_iso="./preseed-$(basename $orig_iso)"
|
||||||
|
|
||||||
|
extract_iso "$orig_iso"
|
||||||
|
add_preseed_to_initrd
|
||||||
|
make_auto_the_default_isolinux_boot_option
|
||||||
|
make_auto_the_default_grub_boot_option
|
||||||
|
recompute_md5_checksum
|
||||||
|
generate_new_iso_and_cleanup "$orig_iso" "$new_iso"
|
||||||
|
|
||||||
|
echo "DONE."
|
||||||
122
preseed.cfg
Normal file
122
preseed.cfg
Normal file
@ -0,0 +1,122 @@
|
|||||||
|
#_preseed_V1
|
||||||
|
|
||||||
|
#
|
||||||
|
# Preseed configuration for debian 11/bullseye
|
||||||
|
#
|
||||||
|
# ATTENTION: This preseed configuration ERASES the target disks
|
||||||
|
# without any confirmation whatsoever.
|
||||||
|
#
|
||||||
|
|
||||||
|
# Locale
|
||||||
|
d-i debian-installer/locale string en_US
|
||||||
|
d-i debian-installer/locale string en_US.UTF-8
|
||||||
|
d-i keyboard-configuration/xkb-keymap select us
|
||||||
|
|
||||||
|
|
||||||
|
# Network
|
||||||
|
d-i hw-detect/load_firmware boolean false
|
||||||
|
d-i netcfg/enable boolean true
|
||||||
|
d-i netcfg/choose_interface select auto
|
||||||
|
d-i netcfg/hostname string unassigned-preseed
|
||||||
|
d-i netcfg/get_hostname string unassigned-preseed
|
||||||
|
d-i netcfg/get_domain string local
|
||||||
|
|
||||||
|
|
||||||
|
# Apt
|
||||||
|
d-i apt-setup/cdrom/set-first boolean false
|
||||||
|
d-i apt-setup/cdrom/set-next boolean false
|
||||||
|
d-i apt-setup/cdrom/set-failed boolean false
|
||||||
|
d-i mirror/country string manual
|
||||||
|
d-i mirror/http/hostname string ftp.cn.debian.org
|
||||||
|
d-i mirror/http/directory string /debian
|
||||||
|
d-i mirror/http/proxy string
|
||||||
|
|
||||||
|
|
||||||
|
# Users/passwords
|
||||||
|
d-i passwd/root-login boolean true
|
||||||
|
d-i passwd/make-user boolean false
|
||||||
|
d-i passwd/root-password password Xking123456;a
|
||||||
|
d-i passwd/root-password-again password Xking123456;a
|
||||||
|
|
||||||
|
|
||||||
|
# Clock
|
||||||
|
d-i clock-setup/cst boolean true
|
||||||
|
d-i time/zone string Asia/Shanghai
|
||||||
|
d-i clock-setup/ntp boolean true
|
||||||
|
|
||||||
|
|
||||||
|
# Disk partition
|
||||||
|
d-i partman/early_command string \
|
||||||
|
BOOT_DEV=$(list-devices disk | head -1) ; \
|
||||||
|
debconf-set partman-auto/disk $BOOT_DEV
|
||||||
|
|
||||||
|
d-i partman-auto/method string regular
|
||||||
|
d-i partman-auto/choose_recipe select atomic
|
||||||
|
d-i partman-auto/expert_recipe string \
|
||||||
|
50 100 50 fat32 \
|
||||||
|
$primary{ } \
|
||||||
|
method{ efi } \
|
||||||
|
format{ } \
|
||||||
|
. \
|
||||||
|
1000 8000 -1 ext4 \
|
||||||
|
$primary{ } \
|
||||||
|
method{ format } \
|
||||||
|
format{ } \
|
||||||
|
use_filesystem{ } \
|
||||||
|
filesystem{ ext4 } \
|
||||||
|
mountpoint{ / } \
|
||||||
|
. \
|
||||||
|
2048 2048 2048 linux-swap \
|
||||||
|
$primary{ } \
|
||||||
|
method{ swap } \
|
||||||
|
format{ } \
|
||||||
|
.
|
||||||
|
|
||||||
|
|
||||||
|
d-i partman-lvm/device_remove_lvm boolean true
|
||||||
|
d-i partman-md/device_remove_md boolean true
|
||||||
|
d-i partman/confirm_nooverwrite boolean true
|
||||||
|
d-i partman-efi/non_efi_system boolean true
|
||||||
|
d-i partman/confirm_write_new_label boolean true
|
||||||
|
d-i partman/confirm boolean true
|
||||||
|
d-i partman/choose_partition select Finish partitioning and write changes to disk
|
||||||
|
|
||||||
|
|
||||||
|
# Packages
|
||||||
|
d-i base-installer/install-recommends boolean false
|
||||||
|
d-i base-installer/kernel/image string linux-image-amd64
|
||||||
|
d-i apt-setup/use_mirror boolean true
|
||||||
|
tasksel tasksel/first multiselect standard, ssh-server
|
||||||
|
d-i pkgsel/include string vim sudo
|
||||||
|
d-i pkgsel/upgrade select safe-upgrade
|
||||||
|
popularity-contest popularity-contest/participate boolean true
|
||||||
|
|
||||||
|
|
||||||
|
# Boot
|
||||||
|
d-i grub-installer/only_debian boolean true
|
||||||
|
d-i debian-installer/add-kernel-opts string cgroup_enable=memory swapaccount=1
|
||||||
|
d-i grub-installer/with_other_os boolean true
|
||||||
|
d-i grub-installer/force-efi-extra-removable boolean true
|
||||||
|
d-i grub-installer/progress/step_force_efi_removable boolean true
|
||||||
|
d-i grub-installer/bootdev string default
|
||||||
|
|
||||||
|
|
||||||
|
# Custom late commands
|
||||||
|
d-i preseed/late_command string \
|
||||||
|
HOST_SERIAL="debian-$(head /dev/urandom | tr -dc a-z | head -c10)" ; \
|
||||||
|
sed -i "s/unassigned-preseed/$HOST_SERIAL/g" /target/etc/hostname ; \
|
||||||
|
sed -i "s/unassigned-preseed/$HOST_SERIAL/g" /target/etc/hosts ; \
|
||||||
|
in-target sh -c 'mkdir -pv --mode=0700 /root/.ssh'; \
|
||||||
|
in-target sh -c 'echo "ssh-rsa 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 XkingServer" > /root/.ssh/authorized_keys'; \
|
||||||
|
in-target chown --recursive root:root /root/.ssh; \
|
||||||
|
in-target chmod 0600 /root/.ssh/authorized_keys; \
|
||||||
|
in-target update-alternatives --set editor /usr/bin/vim.basic; \
|
||||||
|
in-target sed -i -e 's/^\(PasswordAuthentication\).*/\1 yes/g' -e 's/^\(PermitRootLogin\).*/\1 yes/g' /etc/ssh/sshd_config; \
|
||||||
|
in-target sed -i -e '/^GRUB_HIDDEN_TIMEOUT=/d' -e 's/^\(GRUB_HIDDEN_TIMEOUT_QUIET\)=true/\1=false/' /etc/default/grub; \
|
||||||
|
in-target dhclient -6 eth0
|
||||||
|
in-target systemctl enable --now sshd; \
|
||||||
|
in-target update-grub
|
||||||
|
|
||||||
|
|
||||||
|
# Finish
|
||||||
|
d-i finish-install/reboot_in_progress note
|
||||||
Loading…
x
Reference in New Issue
Block a user