#!/bin/sh -x

# vserver-fc1
# Creates a Fedora Core 1 vserver using yum.
# Note that it won't work as-is -- before running it you'll need to
# read and understand it all (perhaps run it line-by-line), and then
# make appropriate modifications to suit your local conditions.

# Geoffrey D. Bennett <g@netcraft.com.au>

# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

# location of fedora-core-1 RPMs
FEDORA=/vservers/somewhere/var/ftp/pub/fedora
FC1=$FEDORA/linux/core/1/i386/os/Fedora/RPMS

# location of fixed glibc
FC73=/vservers/somewhere/var/ftp/pub/netcraft/fedora73

# name of our vserver and where it will go
VSERVER=fc1-test
VSERVERDIR=/vservers/$VSERVER

# create vserver /dev
mkdir -p $VSERVERDIR/dev
cd /dev
cp -a fd full null ptmx random tty urandom zero $VSERVERDIR/dev/

# initialise the RPM database
mkdir -p $VSERVERDIR/var/lib/rpm
rpm --root $VSERVERDIR --initdb

# create a minimal /etc/mtab
mkdir -p $VSERVERDIR/etc
cat > $VSERVERDIR/etc/mtab <<EOT
/dev/root / ext3 rw 0 0
none /proc proc rw 0 0
EOT

# ick!  silence the "cannot determine current run level" warnings
# this utmp file has just a runlevel record in it
mkdir -p $VSERVERDIR/var/run
cp /tmp/utmp $VSERVERDIR/var/run

# install the minimum necessary to get yum working
cd $FC1
rpm --root $VSERVERDIR -ivh --nodeps --noorder \
  setup-2.5.27-1.1.noarch.rpm \
  filesystem-2.2.1-5.i386.rpm \
  basesystem-8.0-2.noarch.rpm \
  $FC73/glibc-common-2.3.2-101.1nc1.i386.rpm \
  $FC73/glibc-2.3.2-101.1nc1.i386.rpm \
  libtermcap-2.0.8-36.i386.rpm \
  bash-2.05b-31.i386.rpm \
  zlib-1.2.0.7-2.i386.rpm \
  info-4.5-2.i386.rpm \
  findutils-4.1.7-17.i386.rpm \
  pcre-4.4-1.i386.rpm \
  grep-2.5.1-17.i386.rpm \
  shadow-utils-4.0.3-12.i386.rpm \
  coreutils-5.0-24.i386.rpm \
  rpm-4.2.1-0.30.i386.rpm \
  popt-1.8.1-0.30.i386.rpm \
  elfutils-libelf-0.89-2.i386.rpm \
  beecrypt-3.0.1-0.20030630.1.i386.rpm \
  bzip2-libs-1.0.2-10.i386.rpm \
  chkconfig-1.3.9-1.i386.rpm \
  initscripts-7.42-1.i386.rpm \
  python-2.2.3-7.i386.rpm \
  rpm-python-4.2.1-0.30.i386.rpm \
  libxml2-2.5.11-1.i386.rpm \
  libxml2-python-2.5.11-1.i386.rpm \
  yum-2.0.4-2.noarch.rpm \
  e2fsprogs-1.34-1.i386.rpm \
  openssl-0.9.7a-23.i686.rpm \
  krb5-libs-1.3.1-6.i386.rpm

# make our RPMs available from within the chroot environment
mkdir $VSERVERDIR/mnt/fedora
mount --bind $FEDORA $VSERVERDIR/mnt/fedora

# create a yum config to access our local RPMs
cat > $VSERVERDIR/etc/yum.conf <<EOT
[main]
cachedir=/var/cache/yum
debuglevel=2
logfile=/var/log/yum.log
pkgpolicy=newest
distroverpkg=fedora-release
tolerant=1
exactarch=1

[base]
name=FC1 base
baseurl=file:/mnt/fedora/linux/core/1/i386/os/

[updates]
name=FC1 updates
baseurl=file:/mnt/fedora/linux/updates/1/
EOT

# the resolv.conf for the base server is presumably fine for our vserver
cp /etc/resolv.conf $VSERVERDIR/etc

# set up and run the post-install script
cat > $VSERVERDIR/tmp/post-install <<EOT
#!/bin/sh -x

# install any other packages we want
yum -y install \
  SysVinit \
  psmisc \
  man \
  gzip \
  passwd \
  which \
  rootfiles \
  vim-enhanced \
  openssh-server \
  openssh-clients \
  net-tools \
  procps \
  sendmail \
  at \
  anacron \
  vixie-cron \
  mailx \
  strace \
  bc \
  rsync

# disable init.d services that are useless in a vserver
for service in gpm netfs network random rawdevices; do
  if [ -e /etc/init.d/\$service ]; then
    /sbin/chkconfig \$service off
  fi
done
rm -f /etc/rc.d/rc0.d/S01halt
rm -f /etc/rc.d/rc6.d/S01reboot

# turn on sshd
/sbin/chkconfig sshd on

# convert to shadow passwords and set a root password
pwconv
echo "root:fedora" | chpasswd
EOT

chmod +x $VSERVERDIR/tmp/post-install
chroot $VSERVERDIR /tmp/post-install
rm -f $VSERVERDIR/tmp/post-install

# the vserver is presumably in the same timezone as the base server
cp -f /etc/localtime $VSERVERDIR/etc

umount $VSERVERDIR/mnt/fedora