- openSUSE Autoinstall

[opensuse-autoinstall] ayast_setup and/or yast autoyast
by Swartz, Patrick H 25 Jul '11

25 Jul '11

Hi, I am hoping to find a method where I can use generic VMware template/clone and then use Autoyast to apply specific requirements per usage. I found the write-up on ayast_setup (http://hedgehogpainter.livejournal.com/2568.html) but that isn't a module listed when I run "yast -l". So, I tried loading a xml profile through "yast autoyast" , however, the "Apply to system" is not selectable. What am I missing? This is on SLES11sp1. Thanks, Patrick Swartz UNIX Planning & Engineering (DSUSSE) First Data ----------------------------------------- The information in this message may be proprietary and/or confidential, and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify First Data immediately by replying to this message and deleting it from your computer. -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

2 2

Re: Antw: Re: [opensuse-autoinstall] install source on https
by Jochen Schaefer 20 Jul '11

20 Jul '11

Hi Steffen, thanks for the information. Jochen >>> Steffen Winterfeldt 07/20/11 2:04 PM >>> On Tue, 19 Jul 2011, Jochen Schaefer wrote: > There seems to be some routine which bypasses the whole netsetup when installation source is specified with HTTPS. > > When I change it to HTTP everything works like expected. And I get the add_on_product HTTPS. > > Any clue how to solve the problem with the installation source? It's not implemented. Steffen -- Give orange me give eat orange me eat orange give me eat orange give me you. (chimp Nim, using sign language) -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

1 0

[opensuse-autoinstall] install source on https
by Jochen Schaefer 20 Jul '11

20 Jul '11

Hi list, I'm trying to install SLES11SP1 via https but get errors complaining about self signed certificate in y2log: verify certificate failed. I'm wondering if the install routine should be able to verify any certificate. How can I inform the installer to accept any certificate? Thanks, Jochen -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

3 6

[opensuse-autoinstall] linuxrc udev.rule with two rules
by michael.leu＠mgb.ch 19 Jul '11

19 Jul '11

Hello How can you specify more than one udev rule with linuxrc? All examples I have found so far show only a single rule being specified. I tried it with a space, but this does not seem to work. udev.rule="mac=de:ad:00:00:be:ef,name=eth0 mac=de:ad:00:00:be:ee,name=eth1" Thanks Michael -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

4 8

[opensuse-autoinstall] PXE boot - Broadcom NIC delay causing autoyast to fail to find SLES SP1 repository (tg3.ko driver)
by Jerold Ponko 18 Jul '11

18 Jul '11

Hello, I'm setting up a PXE boot server to install SLES SP1 on Dell R5500 and HP z800 workstations that use Broadcom NICS. If I use dhcpcd to configure the NIC via the dhcp server, autoyast fails to find the SLES repository because the NIC isn't actively sending or receiving packets anywhere from 4 to 7 seconds after ifconfig says it's up. I does get a dhcp ip address before autoyast fail to find the repository. If I ping the workstation from the pxe server, I can confirm that the pings succeed only after autoyast brings up the red text screen saying it failed to find the install repository. If I use a fixed ip address using hostip=192.168.2.10 netmask=255.255.255.0, for example on the PXE server, I also have to pass NetWait=15 in the APPEND statement on the PXE server for it to work reliably. Apparently, the "NetWait" parameter doesn't work in conjunction with "Usedhcp" as I don't see the 15 second delay with "Usedhcp" as I do with a fixed ip address. Obviously I can't use a fixed ip, since only one SLES install could be done at a time. So Is there a way to delay autoyast's startup in the initrd? I've tried everything I can think of from the APPEND line on the PXE server. For example, I've tried exec="modprobe tg3*; sleep 15; /sbin/dhcpd; sleep 15", NetWait=15, Another issue is the initrd uses an old version of dhcpcd (v3.2.3) which doesn't support the whitelist feature of dhcpcd version 5.2.12. The whitelist feature allows you to specify a specific dhcp server to query for an ip address and ignore others which is what I need because we have multiple dhcp servers. Another option would be to use dhclient in the initrd and put reject statements in the dhclient.conf file for the other dhcp servers. However, until the Broadcom NIC problem is solved first modify the initrd to used either the newer dhcpcd or dhclient is moot. Any suggestions? BTW, option dhcptimeout is not a solution as the NIC does get configured with a dhcp address. It's the send/receive delay after the NIC's configured that's the problem. Regards, Jerry Ponko -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

2 1

Re: [opensuse-autoinstall] Installation Source via HTTPS and Client cert
by Jochen Schaefer 18 Jul '11

18 Jul '11

Thanks Uwe, will try the profile encryption. Jochen >>> Uwe Gansert 07/18/11 10:43 AM >>> on Friday 15 July 2011 Jochen Schaefer wrote: > for a hardening project I need the highest level of security for the > installation process. My questions are: > 1. is it possible to install via https and client certificates there is no way that I know of. AFAIK there is no place where libcurl always looks for the client certificate and there is no way to tell autoyast where to look for a client cert. > 2. are there other possibilities to secure the installation process. you can encrypt the XML file but then you have to enter a password when autoyast loads it. You can not pass that password other than with the keyboard. To encrypt a profile, check the autoyast UI in the "File" menu point. -- ciao, Uwe Gansert Uwe Gansert SUSE LINUX Products GmbH, HRB 16746 (AG Nürnberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer Home: http://www.suse.de/~ug - Blog: http://suse.gansert.net listening to: "Dystopia" by Dismantled -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

1 0

[opensuse-autoinstall] Installation Source via HTTPS and Client cert
by Jochen Schaefer 18 Jul '11

18 Jul '11

Hi List, for a hardening project I need the highest level of security for the installation process. My questions are: 1. is it possible to install via https and client certificates 2. are there other possibilities to secure the installation process. Thanks, Jochen -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

2 1

[opensuse-autoinstall] Specifying a local (i.e. on DVD) Add-On Repository in add_on_products.xml for SLES 11 SP1
by Jason Babicka 18 Jul '11

18 Jul '11

Hello! My employer is looking to move to SLES 11 SP1 for hosting one of our products. In addition to default packages that are included with the SLES 11 SP1 Installation DVD, they want to include several 3rd Party RPMs and package all of this on one DVD to send to our clients. From reading Uwe Gansert's Blog, I followed the instructions that he listed (FAQ 2.4) for setting up a YaST Repository that can be included on the DVD. After doing this, I created the add_on_products.xml per Uwe's blog (The one entitled "SLES 11 and add-ons"). After doing this, I was able to build an ISO that contained all of the original SLES 11 SP1 files and the additional 3rd Party RPMs. When we perform an onsite installation, we use a predefined autoinstall.xml file that is located on a USB Drive. Unfortunately, when I tried doing this the installation screen printed a message that said "Unable to add product cd:////updates?devices=/dev/sr0". When I saw this, my first thought was that perhaps I had the format of the add_on_products.xml file incorrect. Here is a copy of my add_on_products.xml file: <?xml version="1.0"?> <add_on_products> <product_items config:type="list"> <product_item> <name>Updates</name> <url>relurl:///updates</url> </product_item> </product_items> </add_on_products> Like I had mentioned above, I need to include the add-on repository so that it is located on the installation DVD. The updates directory-which contains the 3rd Party RPM Packages-is located at the root level of the DVD. Per Uwe's suggestion in a comment on his blog, I used "relurl://" so that AutoYaST knew to look on the installation source for the add-on repository. Also, since this is probably relevant as well. We use an autoinstall.xml file to perform an automatic installation of the OS. We do this by choosing the Installation option when the system boots up and specifying "autoyast=usb:///autoinstall.xml" as the command line option. In order to keep this email from being too long, I will not include any snippets from the /var/log/YaST2/y2log right now. If this would be useful, please let me know which parts I can provide to help with this issue. I would appreciate any help that anyone might be able to offer in helping to resolve this issue that I am seeing. -Jason This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

2 9

[opensuse-autoinstall] Finding the autoyast xml file no matter what the CD device name
by Froggatt David 17 Jun '11

17 Jun '11

Hi, Installing SLES 10.3, I'd like to pull the autoyast xml file from the small custom ISO/CD I've booted from, whilst using an FTP site as the location for the install files. For a particular machine I can do this OK with something like this in the isolinux.cfg: autoyast=device://hdc/autoinst.xml install=ftp://<server_name>/sles10.sp3.64/ However, depending on the machine the CD might actually be hda or sr0 or something else, in which case I'll get an error saying the profile can't be found. I'd therefore like a more general 'autoyast=' statement that will find the xml file no matter what the CD's device name. Using 'autoyast=default' doesn't seem to work, as I think the fact that my installation source is FTP means that it's looking there rather than the CD. I realise that I could also grab the xml file via FTP, but the way we install servers it would me much more convenient to have it on the CD. Any suggestions as to how I can always find the xml file no matter what the CD device name gratefully received. Regards, David IMPORTANT NOTICE: This message is intended for the addressee only. The content may be confidential, legally privileged and protected by law. Unauthorised use, copying or disclosure of any of it may be unlawful. If you are not the intended recipient please notify the sender and remove it from your system. Internet emails are not necessarily secure. Although we have taken steps to ensure this email and attachments are free from any virus, we advise that in keeping with good computing practice you should ensure they are actually virus free. The right to monitor email communications through our network is reserved by us. Sopra Group Limited (Registered in England, No. 1588948) with Registered Offices at: Middlesex House, Meadway Technology Park, Rutherford Close, Stevenage, Hertfordshire, SG1 2EF. VAT No. 366 9784 84. -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

2 4

[opensuse-autoinstall] Can't get online update to work in autoyast install
by winfried_mb2＠xmsnet.nl 15 Jun '11

15 Jun '11

I'm trying to let autoyast do an online update during installation. First I tried with <do_online_update config:type="boolean">true</do_online_update> but that didn't work. Moreover I read here http://lists.opensuse.org/opensuse-autoinstall/2009-04/msg00028.html that if you want to add repositories you should do the update at the end of the installation. So now I'm trying to do it in a post-install script (see below), but then I get the following feedback: +zypper ar -f http://download.opensuse.org/update/11.4 updates System management is locked by the application with pid 2579 (y2base). Close this application before trying again. +zypper ar -f ftp://download.nvidia.com/opensuse/11.4/ nvidia System management is locked by the application with pid 2579 (y2base). Close this application before trying again. +zypper --non-interactive --gpg-auto-import-keys update --auto-agree-with-licenses --force-resolution System management is locked by the application with pid 2579 (y2base). Close this application before trying again. So what is the best time to do the update? Thanks a lot in advance for any help, Winfried autoinstall.xml snippet: <scripts> <post-scripts config:type="list"> <script> <source> <![CDATA[ zypper ar -f http://download.opensuse.org/update/11.4 updates zypper ar -f ftp://download.nvidia.com/opensuse/11.4/ nvidia zypper --non-interactive --gpg-auto-import-keys update --auto-agree-with-licenses --force-resolution ]]> </source> <network_needed config:type="boolean">true</network_needed> <interpreter>shell</interpreter> <notification>Please wait while online update is running ...</notification> <feedback config:type="boolean">true</feedback> </script> </post-scripts> </scripts> -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-autoinstall+help(a)opensuse.org

3 3