#!/bin/sh
# Program Name: setup-zone-exclusive.sh
# Author: Alain Hoang
# Purpose: Wrapper around setting up an ipkg branded zone with
# an exclusive interface
# Notes: If you want DHCP you will need the script from the following URL
# http://www.linuxtopia.org/online_books/opensolaris_2008/SYSADV3/html/extkj.html
# Copy that to dhcp-client-event.sh
#
# Copyright (c) 2009, Alain Hoang
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
# copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
# THE SOFTWARE.
################################################
# Change the following to match what is needed
################################################
REAL_IF="bnx0"
TEMPLATE_ZONE="barebones"
################################################
# Do not modify below
################################################
if test $# -lt 2
then
echo "Usage: $0 <new zone name> <network interface>"
exit 1
fi
# Get command line args
NEW_ZONE_NAME=$1
NET_IF=$2
# Verify we can only run as root
ROOT_USER=0
REAL_USER=`id -u`
if test ${ROOT_USER} -ne ${REAL_USER}
then
echo "This must be run as root. Exiting..."
exit 2
fi
# Check to see if the zone name has already been taken
zone_prov=`zoneadm list -c | grep -c ${NEW_ZONE_NAME}`
if test ${zone_prov} -gt 0
then
echo "Zone ${NEW_ZONE_NAME} seems to be already configured"
echo "Delete ${NEW_ZONE_NAME} [y/N]?"
read answer
case ${answer} in
y|Y*)
zonecfg -z ${NEW_ZONE_NAME} delete -F
;;
*)
echo "Zone already configured. Exiting..."
exit 3
;;
esac
fi
# Test the virtual nic nam
vnic_on=`dladm show-link | grep -c ${NET_IF}`
vnic_check=`dladm show-vnic | sed -e '1d' | awk ' { print $1 } '`
if test ${vnic_on} -lt 1
then
# Ask to create a virtual nic if it is not configured
#
# TODO: Ask user which physical interface to bind to
echo "Network interface ${NET_IF} does not seem exist"
echo "Create it [y/N]?"
read answer
case ${answer} in
y|Y*)
dladm create-vnic -l ${REAL_IF} ${NET_IF}
if test $? -ne 0
then
echo "Create vnic operation failed! Exiting"
exit 5
fi
;;
*)
echo "Network interface does not seem to exist"
exit 4
;;
esac
else
# Check if the virtual nic is already in use by another zone
# and do nothing if so
no_zone='--'
zone_for_netif=`dladm show-linkprop ${NET_IF} | grep zone | awk ' { print $4 } '`
if test ${zone_for_netif} != ${no_zone}
then
echo "${NET_IF} is in use by ${zone_for_netif}. Choose another interface"
exit 5
fi
fi
cat > ${NEW_ZONE_NAME}.zonecfg <<ZONECFG_FILE
create -b
set zonepath=/zones/${NEW_ZONE_NAME}
set brand=ipkg
set autoboot=false
set ip-type=exclusive
add net
set physical=${NET_IF}
end
ZONECFG_FILE
cat > ${NEW_ZONE_NAME}.sysidcfg <<SYSIDCFG_FILE
system_locale=C
terminal=xterms
network_interface=primary {
dhcp protocol_ipv6=yes
}
security_policy=NONE
timezone=Japan
SYSIDCFG_FILE
echo "============================"
echo "Configuring ${NEW_ZONE_NAME}..."
pfexec zonecfg -z ${NEW_ZONE_NAME} -f ${NEW_ZONE_NAME}.zonecfg
echo ""
echo "============================"
echo "Configuration for ${NEW_ZONE_NAME} is..."
pfexec zonecfg -z ${NEW_ZONE_NAME} export
echo ""
echo "============================"
echo "Cloning ${NEW_ZONE_NAME} from ${TEMPLATE_ZONE}..."
pfexec zoneadm -z ${NEW_ZONE_NAME} clone ${TEMPLATE_ZONE}
echo ""
echo "============================"
echo "Detaching ${NEW_ZONE_NAME} to autoconfigure..."
pfexec zoneadm -z ${NEW_ZONE_NAME} detach
echo ""
echo "============================"
echo "Copying ${NEW_ZONE_NAME}.sysidcfg into ${NEW_ZONE_NAME}..."
pfexec cp ${NEW_ZONE_NAME}.sysidcfg /zones/${NEW_ZONE_NAME}/root/etc/sysidcfg
echo ""
echo "============================"
echo "Conriguring root password for ${NEW_ZONE_NAME}..."
pfexec cp /zones/${NEW_ZONE_NAME}/root/etc/shadow /tmp/setupzone.$$
pfexec grep -v root /tmp/setupzone.$$ > /tmp/setupzone2.$$
pfexec echo 'root:$5$EVUu5LA8$jSAMMLX4DJDQ1tMAIoScYJp2f9EdETnxcIXa/BOLL8A:14146::::::' > /tmp/setupzone.$$
pfexec cat /tmp/setupzone2.$$ >> /tmp/setupzone.$$
pfexec mv /tmp/setupzone.$$ /zones/${NEW_ZONE_NAME}/root/etc/shadow
pfexec chmod 0400 /zones/${NEW_ZONE_NAME}/root/etc/shadow
echo ""
echo "============================"
echo "Setting NFSv4 domain for ${NEW_ZONE_NAME}..."
cat /zones/${NEW_ZONE_NAME}/root/etc/default/nfs | sed -e "s/\#NFSMAPID_DOMAIN\=domain/NFSMAPID_DOMAIN=zendo\.bebear\.net/" > /tmp/nfsconfig.$$
pfexec mv /tmp/nfsconfig.$$ /zones/${NEW_ZONE_NAME}/root/etc/default/nfs
pfexec chmod 644 /zones/${NEW_ZONE_NAME}/root/etc/default/nfs
pfexec touch /zones/${NEW_ZONE_NAME}/root/etc/.NFS4inst_state.domain
echo ""
echo "============================"
echo "Removing .UNCONFIGURED for ${NEW_ZONE_NAME}..."
pfexec rm /zones/${NEW_ZONE_NAME}/root/etc/.UNCONFIGURED
echo ""
echo "============================"
echo "Setting up DHCP event hook into ${NEW_ZONE_NAME}..."
pfexec cp dhcp-client-event.sh /zones/${NEW_ZONE_NAME}/root/etc/dhcp/eventhook
pfexec chmod +x /zones/${NEW_ZONE_NAME}/root/etc/dhcp/eventhook
echo ""
echo "============================"
echo "Setting up nsswitch into ${NEW_ZONE_NAME}..."
pfexec cp /zones/${NEW_ZONE_NAME}/root/etc/nsswitch.dns \
/zones/${NEW_ZONE_NAME}/root/etc/nsswitch.conf
echo ""
echo "============================"
echo "Re-attaching ${NEW_ZONE_NAME} to autoconfigure..."
pfexec zoneadm -z ${NEW_ZONE_NAME} attach
echo ""
echo "============================"
echo "Booting ${NEW_ZONE_NAME}..."
pfexec zoneadm -z ${NEW_ZONE_NAME} boot
echo "============================"
echo "sysidconfig on ${NEW_ZONE_NAME}..."
pfexec zlogin ${NEW_ZONE_NAME} sysidconfig
echo "============================"
echo "Plumbing ${NEW_ZONE_NAME}'s interface ..."
pfexec zlogin ${NEW_ZONE_NAME} ifconfig ${NET_IF} plumb
echo "============================"
echo "DHCPing ${NEW_ZONE_NAME}'s interface ..."
pfexec zlogin ${NEW_ZONE_NAME} ifconfig ${NET_IF} auto-dhcp
echo ""
echo "============================"
echo "Showing all configured zones"
zoneadm list -cv
echo ""
echo "============================"
echo "Finish the final setup with"
echo " pfexec zlogin -C ${NEW_ZONE_NAME}"
echo " pfexec zoneadm -z ${NEW_ZONE_NAME} boot"
) is private.
