# Any hostname and domain names assigned from dhcp take precedence over
# values set here. However, setting the values still prevents the questions
# from being shown, even if values come from dhcp.
-d-i netcfg/get_hostname string testkvm1
+#d-i netcfg/get_hostname string testkvm1
d-i netcfg/get_domain string hcoop.net
# Disable that annoying WEP key dialog.
d-i passwd/make-user boolean false
# Root password, either in clear text
-d-i passwd/root-password password f00bar
+#d-i passwd/root-password password f00bar
#d-i passwd/root-password-again password r00tme
# or encrypted using an MD5 hash.
#d-i passwd/root-password-crypted password [MD5 hash]
# - atomic: all files in one partition
# - home: separate /home partition
# - multi: separate /home, /usr, /var, and /tmp partitions
-d-i partman-auto/choose_recipe select atomic
+#d-i partman-auto/choose_recipe select atomic
# Or provide a recipe of your own...
# If you have a way to get a recipe file into the d-i environment, you can
# method{ swap } format{ } \
# .
+d-i partman-auto/expert_recipe string \
+hcoop-default :: \
+ \
+1 1 1 free \
+ $iflabel{ gpt } \
+ method{ biosgrub } . \
+ \
+128 512 256 ext2 \
+ $defaultignore{ } \
+ $bootable{ } \
+ method{ format } \
+ format{ } \
+ use_filesystem{ } \
+ filesystem{ ext2 } \
+ mountpoint{ /boot } . \
+ \
+500 3000 90000000 $default_filesystem \
+ $lvmok{ } \
+ $bootable{ } \
+ method{ format } \
+ format{ } \
+ use_filesystem{ } \
+ $default_filesystem{ } \
+ mountpoint{ / } . \
+ \
+5500 5000 5500 ext3 \
+ $lvmok{ } \
+ method{ format } \
+ format{ } \
+ use_filesystem{ } \
+ filesystem{ ext3 } \
+ mountpoint{ /var/cache/openafs } . \
+ \
+96 512 150% linux-swap \
+ $lvmok{ } \
+ method{ swap } \
+ format{ } . \
+ \
+1000 300 1500 $default_filesystem \
+ $lvmok{ } \
+ method{ format } \
+ format{ } \
+ use_filesystem{ } \
+ $default_filesystem{ } \
+ mountpoint{ /tmp } .
+
+
# The full recipe format is documented in the file partman-auto-recipe.txt
# included in the 'debian-installer' package or available from D-I source
# repository. This also documents how to specify settings such as file
d-i apt-setup/volatile_host string volatile.debian.org
# Additional repositories, local[0-9] available
-#d-i apt-setup/local0/repository string \
-# http://local.server/debian stable main
-#d-i apt-setup/local0/comment string local server
+d-i apt-setup/local0/repository string \
+ http://debian.hcoop.net/ stable main hcoop-config
+d-i apt-setup/local0/comment string HCoop native packages
+# Enable deb-src lines
+d-i apt-setup/local0/source boolean true
+# backports
+d-i apt-setup/local1/repository string \
+ http://debian.hcoop.net/ squeeze-backports main
+d-i apt-setup/local1/comment string HCoop backport packages
# Enable deb-src lines
-#d-i apt-setup/local0/source boolean true
+d-i apt-setup/local1/source boolean true
+# Official backports
+d-i apt-setup/local2/repository string \
+ http://backports.debian.org/debian-backports squeeze-backports main
+d-i apt-setup/local2/comment string Debian backports
+# Enable deb-src lines
+d-i apt-setup/local2/source boolean true
+
# URL to the public key of the local repository; you must provide a key or
# apt will complain about the unauthenticated repository and so the
# sources.list line will be left commented out
# By default the installer requires that repositories be authenticated
# using a known gpg key. This setting can be used to disable that
# authentication. Warning: Insecure, not recommended.
-#d-i debian-installer/allow_unauthenticated boolean true
+# ul: THIS IS VERY VERY BAD AND MUST BE FIXME FIXME FIXME
+d-i debian-installer/allow_unauthenticated boolean true
### Package selection
tasksel tasksel/first multiselect SSH server, Standard system utilities
#tasksel tasksel/desktop multiselect kde, xfce
# Individual additional packages to install
-d-i pkgsel/include string build-essential less sudo vim emacs23-nox etckeeper changetrack openssh-server debsums logcheck bzip2 denyhosts rkhunter openafs-client ntp nscd krb5-user libpam-krb5 ssmtp libpam-afs-session openafs-krb5
+d-i pkgsel/include string build-essential less sudo vim emacs23-nox etckeeper changetrack openssh-server debsums logcheck bzip2 denyhosts rkhunter openafs-client ntp nscd krb5-user libpam-krb5 kstart ssmtp libpam-afs-session openafs-krb5 ferm libnss-afs hcoop-nsswitch-config hcoop-common-config hcoop-firewall-config hcoop-krb5-config hcoop-openssh-server-config \
+ mlton-compiler mlton-tools libssl-dev libpcre3-dev # domtool deps, a metapackage would be useful here
# Whether to upgrade packages after debootstrap.
# Allowed values: none, safe-upgrade, full-upgrade
d-i pkgsel/upgrade select safe-upgrade
libpam-runtime libpam-runtime/profiles multiselect krb5, unix, afs-session
#debconf debconf/frontend select Dialog
-debconf debconf/priority select low
+debconf debconf/priority select critical
#openafs-client openafs-client/run-client boolean true
#openafs-client openafs-client/dynroot boolean true
openafs-client openafs-client/cachesize string 500000
openafs-client openafs-client/fakestat boolean true
+# warning: used to shut the installer up, but we're actually shipping
+# a static kerberos config!
krb5-config krb5-config/add_servers_realm string HCOOP.NET
+# krb5 1.10 still does not support distributing the admin server
+# location via DNS. Remove when it does.
+krb5-config krb5-config/admin_server string kerberos-adm.hcoop.net
ssmtp ssmtp/root string logs
ssmtp ssmtp/rewritedomain string hcoop.net
HCoop / hcoop / zz_old / machine-template.git / blobdiff