Fork isogenerator, edit the ks here, build it using the action, update the release-please workflow t

Fork isogenerator, edit the ks here, build it using the action, update the release-please workflow to use your fork:

https://github.com/ublue-os/isogenerator/blob/main/installer/kickstart/ublue-os.ks

EEyeCantCU Fork isogenerator, edit the ks here, build it using the action, update the relea...

xyny•12/3/23, 2:33 PM

discussed this in #

custom-image-support and this is what i think alex ended up doing / thinking of doing

Alextrical•12/3/23, 3:04 PM

Indeed it is, I wasn't sure of the right thred to post the question into, sorry. The problem I see is that I will likely end up posting the WiFi password and SSID into a public fork. (Though that's likely a problem either way)

Alextrical•12/3/23, 3:08 PM

It may be that editing the ISO post download to inject the Kickstart for a Root Password and WiFi details is the best way to go, without storing those details in the cloud. Maybe reworking this to prompt the user for input could be the safest way to go. https://github.com/alextrical/Fedora-Kinonite-Fablab-Kickstart

GitHub

GitHub - alextrical/Fedora-Kinonite-Fablab-Kickstart: Fedora Kinoni...

Fedora Kinonite Fablab Kickstart and Configuration - GitHub - alextrical/Fedora-Kinonite-Fablab-Kickstart: Fedora Kinonite Fablab Kickstart and Configuration

akdev•12/3/23, 3:11 PM

Putting credentials inside the installer image is a bad idea

akdev•12/3/23, 3:13 PM

Asking for wifi password after install is basically what gnome/kde already do no?

Aakdev Asking for wifi password after install is basically what gnome/kde already do no...

Alextrical•12/3/23, 3:16 PM

It's for deployment inside a Makerspace, so I'm hoping to minimise effort required to restore a working system. The problem is that it asks for the WiFi details after installing, but if the user doesn't enter them in Anaconda the install fails to fetch the built os, and as a result can't install the OS

akdev•12/3/23, 3:17 PM

Oh you’re trying to install the OS using wifi

akdev•12/3/23, 3:17 PM

create a temporary ssid/password and hardcode it in

akdev•12/3/23, 3:17 PM

Destroy after deployment

Aakdev Putting credentials inside the installer image is a bad idea

Alextrical•12/3/23, 3:18 PM

Out of curiosity, Is there a way you would recommend setting up both a Admin account and a Kiosk (public user) account?

Aakdev create a temporary ssid/password and hardcode it in

Alextrical•12/3/23, 3:19 PM

That could work, they now have a Draytek router which allows up to 4 SSID's and we could set the last one to be enabled when re-provisioning.
Though is there really that much danger having the Kickstart configured on a pendrive, when it's kept securely in the owners office drawer?

Alextrical•12/3/23, 3:30 PM

I suppose I'm aiming to do the equivalent of as close as possible to a preconfigured OS deployment. Back in the XP days, Sysprep was amazing for getting a monoculture of PC's setup identically with minimal input of the technicians. I'm hoping to make something as elegant as that for the Makerspace, Ideally, insert a USB key, reboot, select HDD to install to and select install. Once done ideally have WiFi, Admin and Kiosk user accounts created, all the software installed and configured ready to go, including connection to the central owncloud file share

j0rge•12/3/23, 3:32 PM

I think @Caleb Woodbine wants something similar, maybe you can compare notes

j0rge•12/3/23, 3:36 PM

Once the tooling lands the oci support that shouldn't be a problem. I was doing that at an edu with the full automation, automated pxe install, zero config other than turning the machine on. That was 2006, so it'll be at least that good, hahah.

Jj0rge Once the tooling lands the oci support that shouldn't be a problem. I was doing ...

Alextrical•12/3/23, 3:54 PM

Actually it may be possible to do a PXE install, as I'm going to be setting up a local storage server in some form. Though WiFi only could be the killer for that idea

Jj0rge I think @Caleb Woodbine wants something similar, maybe you can compare notes

Alextrical•12/3/23, 3:54 PM

Good shout, thank you for the heads up. Hopefully we can collaborate

j0rge•12/3/23, 3:55 PM

the stick will come first, this is the tooling we're going to be using: https://github.com/osbuild/osbuild

j0rge•12/3/23, 3:55 PM

upstream is in the middle of adding a bunch of the features/fixes needed

AAlextrical That could work, they now have a Draytek router which allows up to 4 SSID's and ...

akdev•12/3/23, 4:23 PM

Yeah I would say so, it’s just a password laying down somewhere in plaintext

akdev•12/3/23, 4:23 PM

Anyway if you plan to have recurring provisioning you should definitely setup a separate network for that process

akdev•12/3/23, 4:23 PM

Separate ssid/vlan isolated from production traffic

Aakdev Yeah I would say so, it’s just a password laying down somewhere in plaintext

Alextrical•12/3/23, 4:24 PM

The password is encrypted in the Kickstart, though I'm not sure how hard it would be to crack it

akdev•12/3/23, 4:25 PM

The key would be with the encrypted password

akdev•12/3/23, 4:25 PM

Unless you require manual intervention to decrypt it

Alextrical•12/3/23, 4:25 PM

Ah, good point

Alextrical•12/3/23, 4:26 PM

It's trying to find the right amount of work to secure a setup of 10 machines in a small Makerspace. Having a dedicated network is probably a bit overkill for the workshop setup

akdev•12/3/23, 4:27 PM

10 machines you could also just use the usb approach

akdev•12/3/23, 4:27 PM

And then destroy it right after

akdev•12/3/23, 4:27 PM

If it’s 1 usb

Aakdev And then destroy it right after

Alextrical•12/3/23, 4:44 PM

Hmm, yeah erasing the USB is probably the best way to go then. I will get a script to inject the Kickstart and prompt the admin to enter the Root password and WiFi credentials

Alextrical•12/3/23, 4:45 PM

Out of curiosity is there a central account database fedora can use similar to Active directory to synchronise user accounts (i.e. one place to change an admin password instead of per machine)

Alextrical•12/3/23, 4:46 PM

Hec, even something like windows live login would be awesome

akdev•12/3/23, 4:47 PM

FreeIPA

Aakdev FreeIPA

Alextrical•12/3/23, 4:55 PM

Will add that to the list of reading materials, thank you

AAlextrical Out of curiosity is there a central account database fedora can use similar to A...

Bigpod•12/3/23, 5:05 PM

Active directory, freeipa, so on there are few options

BBigpod Active directory, freeipa, so on there are few options

Alextrical•12/3/23, 5:08 PM

If I can enroll an admin account to FreeIPA running on a Docker based server, with minimal human interaction for the workstation OS install, that's the route that's probably best. I'm hoping a single point to change the Admin/Root password across all machines would be pretty useful

Alextrical•12/3/23, 5:10 PM

I'm familiar enough with setting up a Windows domain, just doing something similar on Linux is rather new to me

Just want to fully get rid of M$ rubbish from my life and the communities I'm helping out, where possible

AAlextrical Good shout, thank you for the heads up. Hopefully we can collaborate

le_melon•12/3/23, 6:58 PM

Howdy! I've got some public discussion over here
https://universal-blue.discourse.group/t/building-a-bootable-qcow2-virtual-disk-image-from-an-oci-ostree-image/67

Universal Blue

Building a bootable qcow2 virtual disk image from an OCI OSTree image

Hi folks

I’m with ii.nz

and am trying to build bootable USB drives for things like education for classes and shared team development environments. Recently I came across GitHub - osbuild/osbuild-deploy-container, where a qcow2 image can be built, given an OCI OSTree image (i.e: a Universal Blue image). I built a qcow2 image for my u imag...

Lle_melon Howdy! I've got some public discussion over here https://universal-blue.discours...

Alextrical•12/4/23, 12:19 PM

Awesome, Is the intended application you are aiming to achieve something similar to a LiveBoot (On par with Windows to Go?)

Alextrical•12/4/23, 1:48 PM

Can anyone advise how to apply a RPM file hosted in GitHub into the Recipe.yml

I'm trying to get "STL Thumb" intergrated into the system.

Alextrical•12/4/23, 2:11 PM

To answer my own question, Looking at the Bling for devpod shows how to use rpm-ostree to install a RPM file directly from a URL

Alextrical•12/4/23, 3:52 PM

So. It's installed, as it shows as a conflict if I try to install from the updated OS image, woop. However I cannot get the command to run from terminal, presumably wherever it's installed to isn't the correct location.

The counter problem is it's also an application I've had to compile as a rpm too, so that is also a likely place for the issue. Why do rabbit holes always go so deep in projects

AAlextrical Awesome, Is the intended application you are aiming to achieve something similar...

le_melon•12/4/23, 6:40 PM

I think so!
Not completely familiar with Windows to Go but it sounds familiar.

Pretty much an install preloaded with a default user and default software for a specific purpose, being an education resource

Lle_melon I think so! Not completely familiar with Windows to Go but it sounds familiar. ...

Alextrical•12/4/23, 8:04 PM

I would be happy to collaborate, it could be useful for some makerspaces out there wanting to allow users to use their own laptops with a pre-loaded system too.

Making an atomic Live USB boot device with persistent storage should be pretty useful to some people ^_^

AAlextrical I would be happy to collaborate, it could be useful for some makerspaces out the...

le_melon•12/4/23, 8:11 PM

That sounds great!

I'm keeping track of progress here
https://github.com/ii/uedu/issues/1 and the discourse as linked before.
Also talking to folks in the image-builder channel of the Fedora project Matrix
https://matrix.to/#/#image-builder:fedoraproject.org
Some of which are here too I think

GitHub

Goals · Issue #1 · ii/uedu

build a bootable Fedora/OSTree based image include the following software Scratch Sonic Pi Minecraft Forge an IDE? include a PDF or webpage for course instructions webserver? current issues include...

Matrix - Decentralised and secure communication

You're invited to talk on Matrix. If you don't already have a client this link will help you pick one, and join the conversation. If you already have one, this link will help you join the conversation

Alextrical•12/4/23, 8:34 PM

at the moment im going down a rabbit hole trying to get a STL thumbnail generator working. (good news, it works for Fedora KDE Workstation, but not Kinoite)

j0rge•12/4/23, 9:36 PM

@bsherman tomorrow is 37 day but if we wanna start nuking from orbit asap that wouldn't hurt either

j0rge•12/4/23, 9:36 PM

(It's the only way to be sure)

j0rge•12/4/23, 9:38 PM

@beekabop I tried the new release-please action in kera and it broke with the major upgrade

j0rge•12/4/23, 9:38 PM

I was hoping we could skip all that breaking change stuff

Fork isogenerator, edit the ks here, build it using the action, update the release-please workflow t

Similar Threads

Similar Threads

Similar Threads