On 1 April 2018 at 20:36, Tomasz Kłoczko <kloczko.tomasz@xxxxxxxxx> wrote:
[..]
OK here are few more things which I fund:
1) initial-setup and ssh key generation services do not work because
something is really screwed with SElinux settings and when SELinux has
enabled those services seems are not able to write keys or apply other
modifications.
With those two modifications so far I've been able to finish first boot with:
[ OK ] Started Secure Boot DBX (blacklist) updater.
[ OK ] Started Hardware RNG Entropy Gatherer Daemon.
Starting OpenSSH ecdsa Server Key Generation...
Starting Initial Setup configuration program...
Starting OpenSSH ed25519 Server Key Generation...
[ 51.795341] bridge: filtering via arp/ip/ip6tables is no longer
available by default. Update your scripts to load br_netfilter if you
need this.
[ 51.922063] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 51.933399] RTL8211E Gigabit Ethernet 0.2:07: attached PHY driver
[RTL8211E Gigabit Ethernet] (mii_bus:phy_addr=0.2:07, irq=POLL)
[ 51.974155] dwmac-sun8i 1c30000.ethernet eth0: No MAC Management
Counters available
[ 51.982348] dwmac-sun8i 1c30000.ethernet eth0: PTP not supported by HW
[ 51.994992] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 55.119566] dwmac-sun8i 1c30000.ethernet eth0: Link is Up -
100Mbps/Full - flow control off
[ 55.128530] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
================================================================================
================================================================================
1) [x] Language settings 2) [x] Time settings
(English (United States)) (US/Eastern timezone)
3) [x] Network configuration 4) [x] Root password
(Wired (eth0) connected) (Password is set.)
5) [ ] User creation
(No user will be created)
Please make a selection from the above ['c' to continue, 'q' to quit,
'r' to refresh]:
2) --norootpass option does not work because in used to generate image
ks profiles is:
rootpw --iscrypted --lock locked
so in /etc/shadow is line:
root:!locked::0:99999:7:::
when in fedora-arm-image-installer is line
sed -i 's/root:x:/root::/' /tmp/root/etc/passwd
Obviously, this is not putting empty root password and root account
still is locked.
Despite this seems this option can be removed now because anaconda
started in initial-setup service provides root password change.
I think that fedora-arm-image-installer script should be evolving now
into the direction tweaking ks profile used on first boot and/or force
as well start anaconda in non-interactive mode.
Probably the best way to fix SELinux issues is to change SELInux
settings to disabled (in ks profile used for generating images).
Seems that hostname changes are not applied because the system should
be rebooted after finish anaconda.
If in used in initial-setup ks profile would enable SELinux and before
reboot will be created /.autorelabel file all still incorrect SELinux
labels will be corrected on next reboot.
kloczek
--
Tomasz Kłoczko | LinkedIn: http://lnkd.in/FXPWxH
_______________________________________________
arm mailing list -- arm@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to arm-leave@xxxxxxxxxxxxxxxxxxxxxxx
