xref: /src/release/tools/vagrant.conf (revision 54e006369c9aab4f3a22f026eb6924c0f9cafda8)
1#!/bin/sh
2#
3#
4
5# The default of 3GB is too small for Vagrant, so override the size here.
6export VMSIZE=8g
7
8# Packages to install into the image we're creating.  This is a deliberately
9# minimalist set, providing only the packages necessary to bootstrap.
10export VM_EXTRA_PACKAGES="${VM_EXTRA_PACKAGES} shells/bash \
11	firstboot-freebsd-update firstboot-pkgs"
12
13# Set to a list of third-party software to enable in rc.conf(5).
14export VM_RC_LIST="firstboot_freebsd_update firstboot_pkgs growfs"
15
16vagrant_common () {
17	if [ -z "${NO_ROOT}" ]; then
18		echo "ERROR: NO_ROOT not set" >&2
19		exit 1
20	fi
21
22	# Vagrant instances use DHCP to get their network configuration.
23	echo 'ifconfig_DEFAULT="SYNCDHCP"' >> ${DESTDIR}/etc/rc.conf
24
25	# Enable sshd by default
26	echo 'sshd_enable="YES"' >> ${DESTDIR}/etc/rc.conf
27	# Disable DNS lookups by default to make SSH connect quickly
28	echo 'UseDNS no' >> ${DESTDIR}/etc/ssh/sshd_config
29
30	# Create the vagrant user with a password of vagrant
31	/usr/sbin/pw -R ${DESTDIR} \
32		groupadd vagrant -g 1001
33	/usr/sbin/pw -R ${DESTDIR} -M ${DESTDIR}/METALOG \
34		useradd vagrant \
35		-m -M 0755 -w yes -n vagrant -u 1001 -g 1001 -G 0 \
36		-c 'Vagrant User' -d '/home/vagrant' -s '/bin/sh'
37
38	# Change root's password to vagrant
39	echo 'vagrant' | /usr/sbin/pw -R ${DESTDIR} usermod root -h 0
40
41	# Configure sudo to allow the vagrant user
42	echo 'vagrant ALL=(ALL:ALL) NOPASSWD: ALL' >> ${DESTDIR}/usr/local/etc/sudoers
43
44	# Configure the vagrant ssh keys
45	mkdir ${DESTDIR}/home/vagrant/.ssh
46
47	echo "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key" > ${DESTDIR}/home/vagrant/.ssh/authorized_keys
48	echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN1YdxBpNlzxDqfJyw/QKow1F+wvG9hXGoqiysfJOn5Y vagrant insecure public key" >> ${DESTDIR}/home/vagrant/.ssh/authorized_keys
49	chmod 600 ${DESTDIR}/home/vagrant/.ssh/authorized_keys
50
51	chmod 700 ${DESTDIR}/home/vagrant/.ssh
52	chown -R 1001 ${DESTDIR}/home/vagrant/.ssh
53	echo "./home/vagrant/.ssh type=dir uid=1001 gid=1001 mode=0700" >> ${DESTDIR}/METALOG
54	echo "./home/vagrant/.ssh/authorized_keys type=file uid=1001 gid=1001 mode=0600" >> ${DESTDIR}/METALOG
55
56	# Reboot quickly, Don't wait at the panic screen
57	echo 'debug.trace_on_panic=1' >> ${DESTDIR}/etc/sysctl.conf
58	echo 'debug.debugger_on_panic=0' >> ${DESTDIR}/etc/sysctl.conf
59	echo 'kern.panic_reboot_wait_time=0' >> ${DESTDIR}/etc/sysctl.conf
60
61	# The console is not interactive, so we might as well boot quickly.
62	echo 'autoboot_delay="-1"' >> ${DESTDIR}/boot/loader.conf
63	metalog_add_data ./boot/loader.conf
64
65	# The first time the VM boots, the installed "first boot" scripts
66	# should be allowed to run:
67	# * growfs (expand the filesystem to fill the provided disk)
68	# * firstboot_freebsd_update (install critical updates)
69	# * firstboot_pkgs (install packages)
70	touch ${DESTDIR}/firstboot
71
72	return 0
73}
74