Download as PDF, PPTX
![Puppet
---
my-base-packages:
- bind-utils
- curl
my-plain-password: vetinhoR0ch3d@
my-encrypted-property: >
ENC[PKCS7,Y22exl+OvjDe+drmik2XEeD3VQtl1uZJXFFF2NnrMXDWx0csyqLB/2NOWefv
NBTZfOlPvMlAesyr4bUY4I5XeVbVk38XKxeriH69EFAD4CahIZlC8lkE/uDh
jJGQfh052eonkungHIcuGKY/5sEbbZl/qufjAtp/ufor15VBJtsXt17tXP4y
l5ZP119Fwq8xiREGOL0lVvFYJz2hZc1ppPCNG5lwuLnTekXN/OazNYpf4CMd
/HjZFXwcXRtTlzewJLc+/gox2IfByQRhsI/AgogRfYQKocZgFb/DOZoXR7wm
IZGeunzwhqfmEtGiqpvJJQ5wVRdzJVpTnANBA5qxeA==]
https://puppet.com/legal/](https://image.slidesharecdn.com/presentation-210920131246/85/EuroBSDCon-2021-auto-Installing-BSD-Systems-37-320.jpg)
Uploaded byVinícius Zavam
EuroBSDCon 2021 - (auto)Installing BSD Systems
The document outlines various auto-installation methods for BSD operating systems, detailing protocols such as RARP, BOOTP, and DHCP, along with tools like syslinux, U-Boot, and IPXE. It covers specific installers for DragonFly BSD, FreeBSD, NetBSD, and OpenBSD, highlighting scripts and configurations useful for automated deployment. Overall, it serves as a comprehensive guide for effectively setting up BSD systems.
EuroBSDCon 2021 - (auto)Installing BSD Systems
- 1. (auto)Installing BSD Systems (auto)InstallingBSD Systems The auto-installation methods you can use to set BSD operating systems up and running EuroBSDCon 2021 – https://2021.eurobsdcon.org – (auto)Installing BSD Systems – Vinícius Zavam – https://keybase.io/egypcio
- 2. ● __init__ ○ /usr/pkg/bin/flame > /dev/null cd/pub && more beer ● RARP/BOOTP/DHCP ● syslinux ● u-boot ● FTP/TFTP/HTTP ● iPXE ● all-in-one bootable software ● netboot xyz ● (auto)Installers ● DragonFlyBSD ● FreeBSD ● NetBSD ● OpenBSD ● Puppet ● r10k ● EYAML
- 3.
- 4. ● /usr/pkg/bin/flame > /dev/null ○ cloud-config; ○ dd; “favoriteclone/snapshot tool”; “dump and restore”; ○ kickstart; ○ packer; ○ preseed; ○ sim (system image manager); ○ tivoli; ... ● cd /pub && more beer ○ family, friends, and follow-the-sun; ○ hobbies; ○ plants; ○ sports; ... __init__
- 5.
- 6. ● RARP (reverse addressresolution protocol) ○ dns; gateway; ○ mac addr. table. ○ pre-configuration; ● BOOTP (bootstrap protocol) ○ dns; gateway; ○ client’s IP addr.; server’s addr.; ○ pre-configuration. ● DHCP (dynamic host configuration protocol) ○ dns; gateway; ntp; ○ client’s IP addr.; server’s addr.; ○ FQDN (full qualified domain name); ○ IPv6 (DHCPv6); ... RARP/BOOTP/DHCP
- 7.
- 8. ● bootloader (bootstrap loader); ○ lightweight; floppy; ext{2,3,4}/fat(extlinux); ○ second-stage; ○ iso-images (isolinux); ○ chain loading; memdisk; ○ PXE (pre-boot execution environment); pxelinux ● u-boot ○ first-stage; ○ it’s NOT syslinux; ○ ARM. syslinux
- 9.
- 10. ● FTP (file transferprotocol); ○ authentication ○ it’s NOT SFTP (ssh file transfer protocol) ● FTPS == RFC 4217 ○ TCP/21 ● TFTP (trivial file transfer protocol); ○ authentication; ○ encryption; ○ file size; ● 32MB ~ 4GB ○ UDP/69. ● HTTP (hypertext transfer protocol); ○ authentication; ○ encryption; ● TLS (transport layer security) ● TCP/443 ○ haproxy ♥ FTP/TFTP/HTTP
- 11.
- 12. ● full PXE implementation ○ HTTP(s); ○ IPv6; ○ iSCSI;FCoE; ○ VLAN. ● OEM (original equipment manufacturers) ● expansion ROM ○ broadcom; ○ intel; ○ vmware. ● chain loading ○ UNDI (universal network driver interface); ○ EFI (extensible firmware interface), UEFI (unified …); ○ scripting. ● iso-image iPXE
- 13. ● AIO (all-in-one bootablesoftware) ○ FreeBSD – https://www.aioboot.com/en/freebsd/ iPXE
- 15.
- 19.
- 20. ● live system ○ cd; ○ img; ● diskless ○ NFS /boot/pxeboot ○ TFTP /boot/pxeboot_tftp ○ /etc/rc.local (auto)Installers –DragonFlyBSD https://www.dragonflybsd.org/images
- 21. ● pfi (pre-flight installer) ○ /etc/defaults/pfi.conf ○ /etc/pfi.conf* ○ frontend; backend; cgi; curses; none; xorg; dfui_installer ○ pre-program; pre-script; ○ rc.conf(5) ● rconfig (remote configuration client / server) ○ /usr/share/examples/rconfig auto; encrypted_root; hammer; ○ rconfig(8) ○ UDP/257 (auto)Installers – DragonFlyBSD https://www.dragonflybsd.org/images
- 22. ● “enable headless installer” ○ 10th ofseptember 2018 ○ https://bugs.dragonflybsd.org/issues/3147 (auto)Installers – DragonFlyBSD https://www.dragonflybsd.org/images
- 23. ● diskless(8) ○ exports(5) ○ nfsd(8) ○ pxeboot(8) ○ tftpd(8) ● bsdinstall(8) ○ bsdconfig(8) defaultrouter; diskmgmt; hostname; useradd; userdel;usermgmt; timezone; ... ○ scripting; preamble setup (auto)Installers – FreeBSD https://www.freebsd.org/copyright
- 24. BSDINSTALL_DISTSITE="http://bsd/14.0-CURRENT" CUSTOM_CACHACA="jurubeba" DISTRIBUTIONS="base.txz kernel.txz minha.txz" PARTITIONS="ada0" #!/bin/sh sysrchostname=ypioca160.localdomain sysrc ifconfig_DEFAULT=DHCP sysrc sshd_enable=YES sysrc ntpd_enable=YES sysrc ntpd_sync_on_start=YES env FOO=bar freebsd-update ... env FOO=bar pkg ... env FOO=bar pkg ... sed .../sshd_config sed .../ntp.conf reboot (auto)Installers – FreeBSD https://www.freebsd.org/copyright
- 25. ● bsdinstall: fix distfetchwhile calling bsdinstall as script target ○ https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250928 ○ https://reviews.freebsd.org/D27121 (auto)Installers – FreeBSD https://www.freebsd.org/copyright
- 26. ● mfsBSD building instructions ○ MartinMatuska https://github.com/mmatuska/mfsbsd/blob/master/BUILD.md (auto)Installers – FreeBSD https://www.freebsd.org/copyright
- 27. (auto)Installers – NetBSD ● diskless(8) ○ /usr/mdec/pxeboot_ia32.bin ● sysinst(8) ○ utilitymenu ○ logging functions /tmp/sysinst.log /tmp/sysinst.sh ● rc(8) ○ rc.local https://www.dragonflybsd.org/images
- 28. (auto)Installers – NetBSD ● anita(automated netbsd installation and test application) ○ amd64; i386; ○ evbarm-aarch64; evbarm-earmv7hf; ○ QEMU; Xen https://www.dragonflybsd.org/images
- 29. (auto)Installers – NetBSD ● testingnetbsd automagically ○ EuroBSDCon 2011 ○ Martin Husemann https://2011.eurobsdcon.org/papers/husemann/Testing_NetBSD_automagically.pdf https://www.dragonflybsd.org/images
- 30.
- 31. System hostname =sapupara.domingolegal Password for root = $2b$14$Z4xRMg8vDpgYH...GVot3ySoj8yby Change the default console to com0 = yes Which speed should com0 use = 19200 Setup a user = baiacu Password for user = meuXuxuzinh0 Public ssh key for user = ssh-ed25519 AAAA...Acre What timezone are you in = America/Fortaleza Location of sets = http HTTP Server = 10.123.123.10 Use http instead = yes Set name(s) = -x* (auto)Installers – OpenBSD https://www.openbsd.org/artwork.html
- 32. ● The OpenBSD Hypervisorin the wild, a short story ○ EuroBSDCon 2019 ○ Mischa Peters https://www.youtube.com/watch?v=9TuWCR9X-wY ● OpenBSD: add VMM to ‘packer’ ○ EuroBSDCon 2019 ○ Philipp Buehler https://www.youtube.com/watch?v=GNmeFi3C1Xg (auto)Installers – OpenBSD https://www.openbsd.org/artwork.html
- 33. ● FuguIta Start Guide ○ OpenBSDLive System – FuguIta ○ Yoshihiro Kawamata http://fuguita.org (auto)Installers – OpenBSD https://www.openbsd.org/artwork.html
- 34.
- 35. ● puppet agent ○ client machines; ○ statesdefinitions; configurations; packages; services. ● r10k ○ puppet server + control repository; ○ dynamic environments; ○ VCS (version control system); ● git; ... Puppet https://puppet.com/legal/
- 36. ● eyaml ○ hiera (hierarchical database) hiera-gpgDEPRECATED hiera-eyaml ○ pkcs (public-key cryptography standards) blocks passwords ● encryption plugins ○ gpg multiple private keys ○ KMS (key management system) gkms, for Google Cloud kms, for Amazon Web Services ○ vault Puppet https://puppet.com/legal/
- 37. Puppet --- my-base-packages: - bind-utils - curl my-plain-password:vetinhoR0ch3d@ my-encrypted-property: > ENC[PKCS7,Y22exl+OvjDe+drmik2XEeD3VQtl1uZJXFFF2NnrMXDWx0csyqLB/2NOWefv NBTZfOlPvMlAesyr4bUY4I5XeVbVk38XKxeriH69EFAD4CahIZlC8lkE/uDh jJGQfh052eonkungHIcuGKY/5sEbbZl/qufjAtp/ufor15VBJtsXt17tXP4y l5ZP119Fwq8xiREGOL0lVvFYJz2hZc1ppPCNG5lwuLnTekXN/OazNYpf4CMd /HjZFXwcXRtTlzewJLc+/gox2IfByQRhsI/AgogRfYQKocZgFb/DOZoXR7wm IZGeunzwhqfmEtGiqpvJJQ5wVRdzJVpTnANBA5qxeA==] https://puppet.com/legal/
- 38. Artwork’s Artist andCopyrights Artwork’s Artist and Copyrights https://www.drachenmagier.ch https://ko-fi.com/drachenmagier/shop
- 39. (auto)Installing BSD Systems (auto)InstallingBSD Systems The auto-installation methods you can use to set BSD operating systems up and running EuroBSDCon 2021 – https://2021.eurobsdcon.org – (auto)Installing BSD Systems – Vinícius Zavam – https://keybase.io/egypcio