install

#!/usr/bin/env bash
#
# Copyright (c) 2017 Joyent Inc., All rights reserved.
#
# Install CentOS into a directory, modify the installation, then tar it up.
#

# shellcheck disable=2154
if [[ -n "$TRACE" ]]; then
  export PS4='[\D{%FT%TZ}] ${BASH_SOURCE}:${LINENO}: ${FUNCNAME[0]:+${FUNCNAME[0]}(): }'
  set -o xtrace
fi

set -euo pipefail
IFS=$'\n\t'

GUESTTOOLS=guesttools
BUILD_DATE=$(date +%Y%m%d)

export PATH=$PATH:/sbin:/bin

usage() {
cat <<EOF

Install and modify CentOS in a given directory in a given directory using a given mirror

Usage:
  $0 -d <INSTALL_DIR> -m <MIRROR> -r <RELEASE_PACKAGE> -i <IMAGE_NAME> -p <NAME> -D <DESC> -u <DOCS>

Example:
  $0 -d /data/chroot -m http://mirror.centos.org/centos/6/os/x86_64/Packages -r centos-release-6-6.el6.centos.12.2.x86_64.rpm -i lx-centos-6 -p "CentOS 6.6 LX Brand" -D "CentOS 6.6 64-bit lx-brand image." -u https://docs.joyent.com/images/container-native-linux

OPTIONS:
  -d A path to the install directory
  -m A URL for the desired archive mirror
  -r The release package used for installing CentOS
  -i The name of the image. This is used for naming the tarball.
  -p The proper name of the image. Use quotes. This is used in the MOTD and /etc/product file.
  -D A description for the image. This is used in the image manifest and the /etc/product file.
  -u A URL to the image docs [optional]
  -h Show this message

EOF
}

INSTALL_DIR=
MIRROR=
RELEASE_PACKAGE=
IMAGE_NAME=
NAME=
DESC=
DOCS=

while getopts "hd:m:r:i:p:D:u:" OPTION
do
	case $OPTION in
		h)
			usage
			exit
			;;
		d)
			INSTALL_DIR=${OPTARG%/}
			;;
		m)
			MIRROR=${OPTARG}
			;;
		r)
		  RELEASE_PACKAGE=${OPTARG}
		  ;;
		i)
			IMAGE_NAME=${OPTARG}
			;;
		p)
			NAME=${OPTARG}
			;;
		D)
			DESC=${OPTARG}
			;;
		u)
			DOCS=${OPTARG}
			;;
		*)
			usage
			exit 1
			;;
	esac
done

if [[ $# -eq 0 ]]; then
	usage
	exit 1
fi

if [[ ! -e ${INSTALL_DIR} ]] ; then
  echo "Directory $INSTALL_DIR not found"
  exit 1
fi

if [[ -z ${INSTALL_DIR} ]]; then
	echo "Error: missing install directory (-d) value"
	exit 1
fi

if [[ -z ${MIRROR} ]]; then
	echo "Error: missing mirror (-m) value"
	exit 1
fi

if [[ -z ${RELEASE_PACKAGE} ]]; then
	echo "Error: missing release package (-r) value"
	exit 1
fi

if [[ -z ${IMAGE_NAME} ]]; then
	echo "Error: missing image name (-i) value"
	exit 1
fi

if [[ -z ${NAME} ]]; then
	echo "Error: missing proper name (-p) value"
	exit 1
fi

if [[ -z ${DESC} ]]; then
	echo "Error: missing image description (-D) value"
	exit 1
fi

TARGET="${IMAGE_NAME}-${BUILD_DATE}.tar.gz"

if [[ -z ${DOCS} ]]; then
	DOCS="https://docs.joyent.com/images/container-native-linux"
fi

echo "==> Installing CentOS into $INSTALL_DIR"

if [[ -d $INSTALL_DIR ]]; then
	echo "====> Found previous chroot. Deleting and creating a new one."
	rm -rf "$INSTALL_DIR"
	mkdir -p "$INSTALL_DIR"
	mkdir -p "$INSTALL_DIR/var/lib/rpm"
fi

rpm --rebuilddb --root="$INSTALL_DIR"

echo "==> Getting $RELEASE_PACKAGE..."
curl -sS -o "/var/tmp/$RELEASE_PACKAGE" "$MIRROR/$RELEASE_PACKAGE"

echo "==> Downloading and installing signing keys"
RELEASES=( 6 7 )
URL=https://www.centos.org/keys

for RELEASE in "${RELEASES[@]}"; do
	curl -sS -o "/etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-$RELEASE" "$URL/RPM-GPG-KEY-CentOS-$RELEASE"
done
rpm --import /etc/pki/rpm-gpg/*

echo "==> Veryfying $RELEASE_PACKAGE..."
rpm -K "/var/tmp/$RELEASE_PACKAGE"

echo "==> Installing rpm package..."
rpm -i --root="$INSTALL_DIR" --nodeps "/var/tmp/$RELEASE_PACKAGE"

echo "==> Installing Core package group..."
yum --installroot="$INSTALL_DIR" --setopt=group_package_types=mandatory \
	-y groupinstall "Core"

echo "==> Setting TZ to UTC"
if [[ -f $INSTALL_DIR/etc/localtime ]]; then
	rm "$INSTALL_DIR/etc/localtime"
fi
cp "$INSTALL_DIR/usr/share/zoneinfo/UTC" "$INSTALL_DIR/etc/localtime"

# Set locale.
# CentOS 6 does not have a /etc/os-release file
echo "==> Setting locale to en_US.UTF-8"
if [[ -f $INSTALL_DIR/etc/os-release ]]; then
	# Set locale for CentOS 7 and up using /etc/locale.conf
	# shellcheck source=/dev/null
	CHECK_VERSION=$(. "$INSTALL_DIR/etc/os-release" && echo "$VERSION_ID")
	if [[ "$CHECK_VERSION" -ge 7 ]]; then
		echo "LANG=\"en_US.UTF-8\"" > "$INSTALL_DIR/etc/locale.conf"
	fi
else
	# Assume this must be CentOS 6 or earlier so we use /etc/sysconfig/i18n
	echo "LANG=\"en_US.UTF-8\"" > "$INSTALL_DIR/etc/sysconfig/i18n"
fi

echo "==> Installing Base package group and additional packages..."
yum --installroot="$INSTALL_DIR" -y groupinstall "Base"
yum --installroot="$INSTALL_DIR" -y install gettext

echo "==> Updating packages..."
yum --installroot="$INSTALL_DIR" -y update

echo "==> Cleaning up yum cache..."
yum --installroot="$INSTALL_DIR" clean all

echo "==> Removing /var/tmp/$RELEASE_PACKAGE"
rm -rf "/var/tmp/$RELEASE_PACKAGE"

# Get release version via os-release
# CentOS 6 does not have this file
if [[ -f $INSTALL_DIR/etc/os-release ]]; then
	# shellcheck source=/dev/null
	CHECK_VERSION=$(. "$INSTALL_DIR/etc/os-release" && echo "$VERSION_ID")

	if [[ "$CHECK_VERSION" -ge 7 ]]; then
		# Systemd overrides in CentOS 7 and newer
		#
		# See:
		#   - https://github.com/joyent/centos-lx-brand-image-builder/issues/5
		#   - https://github.com/joyent/centos-lx-brand-image-builder/issues/7
		#   - https://smartos.org/bugview/OS-5304
		#
		# TODO: This should be removed when the relevant cgroup etc support is in
		# the platform.
		SERVICES=( systemd-hostnamed systemd-localed systemd-timedated )

		for SERVICE in "${SERVICES[@]}"; do
			echo "==> Adding systemd overrides for: ${SERVICE}"
			OVERRIDE_DIR="$INSTALL_DIR/etc/systemd/system/${SERVICE}.service.d"
			mkdir -p "$OVERRIDE_DIR"

			cat << OVERRIDE > "${OVERRIDE_DIR}/override.conf"
[Service]
PrivateTmp=no
PrivateDevices=no
PrivateNetwork=no
ProtectSystem=no
ProtectHome=no
OVERRIDE
	  done

		# Override for httpd (apache) service
		# See IMAGE-926 and OS-5304
		SERVICES=( httpd )

		for SERVICE in "${SERVICES[@]}"; do
			echo "==> Adding systemd overrides for: ${SERVICE}"
			OVERRIDE_DIR="$INSTALL_DIR/etc/systemd/system/${SERVICE}.service.d"
			mkdir -p "$OVERRIDE_DIR"

			cat << OVERRIDE > "${OVERRIDE_DIR}/override.conf"
[Service]
PrivateTmp=no
OVERRIDE
		done
	fi
fi

echo "==> Disabling PasswordAuthentication"
sed -ri s/^#?PasswordAuthentication\ no/PasswordAuthentication\ no/ -i "$INSTALL_DIR"/etc/ssh/sshd_config
sed -ri s/^#?PasswordAuthentication\ yes/PasswordAuthentication\ no/ -i "$INSTALL_DIR"/etc/ssh/sshd_config

echo "==> Setting UsePrivilegeSeparation"
# The sandbox value causes an issue with lx-brand. Change to "yes"
sed s/UsePrivilegeSeparation\ sandbox/UsePrivilegeSeparation\ yes/ -i "$INSTALL_DIR"/etc/ssh/sshd_config
sed s/^#UsePrivilegeSeparation\ yes/UsePrivilegeSeparation\ yes/ -i "$INSTALL_DIR"/etc/ssh/sshd_config

echo "==> Creating /etc/motd"
cat << MOTD > "$INSTALL_DIR/etc/motd"
   __        .                   .
 _|  |_      | .-. .  . .-. :--. |-
|_    _|     ;|   ||  |(.-' |  | |
  |__|   \`--'  \`-' \`;-| \`-' '  ' \`-'
                   /  ;  Instance ($NAME $BUILD_DATE)
                   \`-'   $DOCS

MOTD

echo "==> Creating /etc/product file"
cat << PRODUCT > "$INSTALL_DIR/etc/product"
Name: Joyent Instance
Image: $NAME $BUILD_DATE
Documentation: $DOCS
Description: $DESC
PRODUCT

echo "==> Installing Guest tools in $INSTALL_DIR"
echo "====> Initiallizing and fetching submodule $GUESTTOOLS"
git submodule init
git submodule update
echo "====> Running ./install.sh -i $INSTALL_DIR"
(
	cd $GUESTTOOLS
	./install.sh -i "$INSTALL_DIR"
)

echo "==> Saving installation as $TARGET. This may take a few minutes."
tar czf "$TARGET" --exclude-from=exclude.txt "$INSTALL_DIR/"

echo "==> Installation complete!"
echo "==> $TARGET"

exit 0