diff --git a/http/encrypt_preseed.cfg.template b/http/encrypt_preseed.cfg.template new file mode 100644 index 0000000..5854909 --- /dev/null +++ b/http/encrypt_preseed.cfg.template @@ -0,0 +1,188 @@ +### Localization + +# Preseeding language, country and locale +d-i debian-installer/country string US +d-i debian-installer/language string en +d-i debian-installer/locale string en_US.UTF-8 +#d-i localechooser/supported-locales multiselect en_US.UTF-8,de_DE.UTF-8 +d-i debian-installer/region string Europe + +# Keyboard selection + +# Disable automatic (interactive) keymap detection. +d-i console-setup/ask_detect boolean false +d-i keyboard-configuration/layout select us +d-i keyboard-configuration/xkb-keymap string us +d-i keyboard-configuration/layout select us +d-i keyboard-configuration/variant select us + +d-i keymap select us + + +## Network configuration + +# Skip network configuration +d-i netcfg/enable boolean true +# Set hostname and domain +d-i netcfg/get_hostname string install-host +d-i netcfg/get_domain string osism.customer +# Disable that annoying WEP key dialog. +d-i netcfg/wireless_wep string + +### Missing drivers and firmware + +d-i hw-detect/load_firmware boolean true + +### Mirror +d-i mirror/http/proxy string +d-i mirror/country string manual +d-i mirror/http/hostname string de.archive.ubuntu.com +d-i mirror/http/directory string /ubuntu + +### Account setup + +# Skip creation of a root account +d-i passwd/root-login boolean false +d-i passwd/make-user boolean true +# User install with password +d-i passwd/user-fullname string install +d-i passwd/username string install +# Normal user's password +d-i passwd/user-password password install +d-i passwd/user-password-again password install +d-i user-setup/encrypt-home boolean false +# The installer will not warn about weak passwords. +d-i user-setup/allow-password-weak boolean true + +### Clock and time zone setup + +# Set hardware clock to UTC. +d-i clock-setup/utc boolean true +# Europe/Berlin +d-i time/zone select Europe/Berlin +# No NTP during installation +d-i clock-setup/ntp boolean false + +### Partitioning + +#d-i partman-auto/disk string /dev/sda +# Choose LVM +d-i partman-auto/method string lvm +d-i partman-auto/method string crypto +# Remove pre-existing LVM +d-i partman-lvm/device_remove_lvm boolean true +# Remove pre-existing software RAID array +d-i partman-md/device_remove_md boolean true +# Confirm to write the lvm partitions +d-i partman-lvm/confirm boolean true +d-i partman-lvm/confirm_nooverwrite boolean true +# Crypto +d-i partman-auto/method string crypto +d-i partman-crypto/allow-passphrase-weak boolean true +d-i partman-crypto/passphrase password installer +d-i partman-crypto/passphrase-again password installer +# Select the whole disk +d-i partman-auto-lvm/guided_size string max +d-i partman-auto-lvm/new_vg_name string crypt +d-i partman-partitioning/confirm_write_new_label boolean true +d-i partman/choose_partition select boot-crypto + +d-i partman/confirm_nooverwrite boolean true +d-i partman/confirm boolean true +d-i partman-auto/expert_recipe string \ +boot-crypto :: \ + 512 512 512 fat32 \ + $defaultignore{ } \ + $reusemethod{ } \ + method{ efi } \ + format{ } \ + . \ + 10240 1000 10240 ext4 \ + $lvmok{ } \ + lv_name{ root } \ + method{ lvm } format{ } \ + use_filesystem{ } filesystem{ ext4 } \ + mountpoint{ / } \ + . \ + 2048 1000 2048 ext4 \ + $lvmok{ } \ + lv_name{ home } \ + method{ lvm } format{ } \ + use_filesystem{ } filesystem{ ext4 } \ + mountpoint{ /home } \ + . \ + 5120 1000 5120 ext4 \ + $lvmok{ } \ + lv_name{ tmp } \ + method{ lvm } format{ } \ + use_filesystem{ } filesystem{ ext4 } \ + mountpoint{ /tmp } \ + . \ + 1024 1000 1024 ext4 \ + $lvmok{ } \ + lv_name{ audit } \ + method{ lvm } format{ } \ + use_filesystem{ } filesystem{ ext4 } \ + mountpoint{ /var/log/audit } \ + . \ + 10240 1000 10240 ext4 \ + $lvmok{ } \ + lv_name{ var } \ + method{ lvm } format{ } \ + use_filesystem{ } filesystem{ ext4 } \ + mountpoint{ /var } \ + . \ + 8192 1000 8192 linux-swap \ + $lvmok{ } \ + lv_name{ swap } \ + method{ swap } format{ } \ + use_filesystem{ } filesystem{ swap } \ + . \ + 30720 2000 30720 ext4 \ + $lvmok{ } \ + lv_name{ docker } \ + method{ lvm } format{ } \ + use_filesystem{ } filesystem{ ext4 } \ + mountpoint{ /var/lib/docker } \ + . + +### Apt setup + +# Repositories +d-i apt-setup/restricted boolean true +d-i apt-setup/universe boolean true +d-i apt-setup/backports boolean true + +### Package selection + +tasksel tasksel/first multiselect standard +# Individual additional packages to install +d-i pkgsel/include string openssh-server, cloud-init, dropbear-bin, dropbear-initramfs +# No update during installation +d-i pkgsel/upgrade select none +# Language pack selection +d-i pkgsel/language-packs multiselect en +# No language support packages +d-i pkgsel/install-language-support boolean false +# No automatic updates +d-i pkgsel/update-policy select none +# Verbose output and no boot splash screen +d-i debian-installer/quiet boolean false +d-i debian-installer/splash boolean true + +# install specieals + +d-i preseed/late_command string \ +in-target wget https://github.com/.keys -O /etc/dropbear-initramfs/authorized_keys + +### Boot loader installation + +d-i grub-installer/grub2_instead_of_grub_legacy boolean true +d-i grub-installer/only_debian boolean false +d-i grub-installer/with_other_os boolean true +d-i grub-installer/bootdev string default +d-i grub-installer/timeout string 5 + +# Avoid that last message about the install being complete. +d-i finish-install/reboot_in_progress note +