Difference between revisions of "Creating a CentOS 5.0 Template"

From OpenVZ Virtuozzo Containers Wiki
Jump to: navigation, search
 
(16 intermediate revisions by 8 users not shown)
Line 1: Line 1:
<div class=Section1>
+
[[Category: HOWTO]]
 +
[[Category: Templates]]
 +
{{wikify}}
  
<ol style='margin-top:0in' start=1 type=1>
+
# Install a system (virtual or physical) with the default CentOS installation that you wish to package. This could be a minimal distro or the default distro or even something custom.
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
+
## It's generally quicker to bootstrap a CentOS system on another yum/rpm-based, or Debian based system by following the instructions in [http://faiwiki.informatik.uni-koeln.de/index.php/FAI_multi-distribution#bootstrapping_the_base_images__for_other_distributions]
    style='font-size:10.0pt;font-family:Tahoma'>Install a system (virtual or
+
# Once the OS has been installed, you need to '''tar''' the contents of the OS.
    physical) with the default <span class=SpellE>CentOS</span> installation
+
## First, create a file called '''/tmp/exclude''' and add the following lines to it:
    that you wish to package.<span style='mso-spacerun:yes'>  </span>This
+
#:  .bash_history
    could be a minimal <span class=SpellE>distro</span> or the default <span
+
#:  lost+found
    class=SpellE>distro</span> or even something custom.</span></li>
+
#:  /dev/*
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
+
#:  /mnt/*
    style='font-size:10.0pt;font-family:Tahoma'>Once the OS has been
+
#:  /tmp/*
    installed, you need to <b style='mso-bidi-font-weight:normal'>tar</b> the
+
#:  /proc/*
    contents of the OS.</span></li>
+
#:  /sys/*
  <ol style='margin-top:0in' start=1 type=a>
+
#:  /usr/src/*
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
+
## Now, tar the OS file up by typing: '''tar --numeric-owner -czvf /tmp/centos-5.0-<ARCH>-<DISTRO>-image.tar.gz -X /tmp/exclude /''' where <'''ARCH'''> represents the system architecture ('''i386''' or
      style='font-size:10.0pt;font-family:Tahoma'>First, create a file called <b
+
#: '''x86_64''') and <'''DISTRO'''> represents the distribution (default, minimal, etc.).
      style='mso-bidi-font-weight:normal'>/<span class=SpellE>tmp</span>/exclude
+
## Now transfer the file over to the OpenVZ server into '''/vz/template/cache''' folder.
      </b>and add the following lines to it:</span></li>
+
# On the OpenVZ server create a “dummy” container by creating a folder called '''/vz/private/50'''
  </ol>
+
#: and copying the '''/etc/vz/conf/ve-vps.basic.conf-sample''' to '''/etc/vz/conf/50.conf'''.
</ol>
+
#: '''NOTE''': 50 is the CTID for the container. You can choose any unused CTID on the OpenVZ server.
 +
# Now create a new folder called '''/vz/template/centos/5/<ARCH>/config''' again where
 +
#: <'''ARCH'''> represents the system architecture.
 +
# Create a file in the folder called rpm and add the following line:
 +
#:  43
 +
# Create a file called '''yum.conf''' in the folder and add the following lines:
 +
#:  [main]
 +
#: 
 +
#:  cachedir=/vz/template/centos/5/<ARCH>/yum-cache/
 +
#: 
 +
#:  reposdir=/dev/null
 +
#: 
 +
#:  installonlypkgs=
 +
#: 
 +
#:  [centos5-base]
 +
#:  name=CentOS 5 - <ARCH> - Base
 +
#: 
 +
#:  baseurl=http://mirror.centos.org/centos/5/os/<ARCH>/
 +
#: 
 +
#: enabled=1
 +
#: 
 +
#: gpgcheck=1
 +
#: 
 +
#:  [centos5-updates-released]
 +
#: 
 +
#:  name=CentOS 5 - <ARCH> - Released Updates
 +
#: 
 +
#:  baseurl=http://mirror.centos.org/centos/5/updates/<ARCH>/
 +
#: 
 +
#:  enabled=1
 +
#: 
 +
#:  gpgcheck=1
 +
# Copy '''/etc/vz/dists/centos-4.conf''' to '''/etc/vz/dists/centos-5.conf'''.
 +
# Copy '''/vz/template/centos/4/i386/config/minimal.list''' to ''' /vz/template/centos/5/i386/config/minimal.list'''.  
 +
# Change to the '''/vz/private/50''' folder and then run the command '''gunzip –dc /vz/template/cache/centos-5-<ARCH>-<DISTRO>-image.tar.gz | tar –xvf –'''  to unpack the base image to the folder.
 +
# Make sure you are in the '''/vz/private/50''' folder.
 +
# Edit '''etc/shadow''' and remove the replace the '''root''' password with !! instead of the hashed value.
 +
# Edit the '''etc/inittab''' file and comment out the lines that respawn '''/sbin/mingetty''' on '''tty1''' through '''tty6'''. Just put a # at the beginning of the line.
 +
# Remove the '''etc/mtab''' file and then create a symbolic link by typing '''ln -s /proc/mounts etc/mtab'''.
 +
# Remove all of the lines from '''etc/fstab''' except for the line that mounts '''/dev/pts'''.
 +
# Edit '''etc/rc.d/rc.sysinit''' and comment out the line that starts '''/sbin/start_udev''' by placing a # at the beginning of the line.
 +
# Now create device nodes by typing:
 +
#:  mknod dev/ptmx c 5 2
 +
#:  mkdir dev/pts
 +
#:  /sbin/MAKEDEV –d/vz/private/50/dev ttyp ptyp
 +
#:  mknod dev/null c 1 3
 +
#:  mknod -m 644 dev/random c 1 8
 +
#: mknod dev/urandom c 1 9
 +
# Create the '''var/lock/rpm''' folder.
 +
# If you wish to disable IPv6, do the following:
 +
## Edit '''etc/sysconfig/network''' and set '''NETWORKING_IPV6''' to '''no'''.
 +
## Add the following lines to '''etc/modprobe.d/blacklist''':
 +
#:  blacklist ipv6
 +
#: blacklist net-pf-10
 +
# Disable any physical NICs by modifying the '''etc/sysconfig/network-scripts/ifcfg-ethX''' files (where '''X''' is the interface number starting from '''0''') and setting '''ONBOOT''' to '''no'''.
 +
# Check etc/sysconfig/init to see if PROMPT=yes, and then change to no. Otherwise when startup init script rc will enter interactive mode and wait there forever
  
<p class=MsoNormal style='margin-left:.75in;text-indent:-.25in'><span
+
# Now you’re ready to start the template. Type '''vzctl start 50''' and wait for it to start.
style='font-size:10.0pt;font-family:"Courier New"'>&nbsp;</span></p>
+
# You can install additional packages into the container by typing '''vzyum 50 install <package>''' at the prompt where <'''package'''> represents the name of the software package you wish to install.
 
+
# Finally, you should turn off unnecessary services.
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
+
## Enter the container by typing '''vzctl enter 50'''.
style='font-size:10.0pt;font-family:"Courier New"'>.<span class=SpellE>bash_history</span></span></p>
+
## View the services that are set to run at startup by typing '''chkconfig --list | grep 5:on'''.
 
+
## Disable any unwanted service by typing '''chkconfig --levels 2345 <service>''' off where <'''service'''> represents the service to disable.
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
+
#: Services that you can (and should) turn off without harm are acpid, apmd, kudzu, and microcode_ctl.
class=SpellE><span style='font-size:10.0pt;font-family:"Courier New"'>lost+found</span></span><span
+
# Exit the container by typing '''exit''' at the prompt.
style='font-size:10.0pt;font-family:"Courier New"'></span></p>
+
# Stop the container by typing '''vzctl stop 50'''.
 
+
# Make sure you are in the '''/vz/private/50''' folder.
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
+
# Finally, package up the new template by typing '''tar –czvf /vz/template/cache/centos-5-<ARCH>-<DISTRO>.tar.gz ./'''.
style='font-size:10.0pt;font-family:"Courier New"'>/dev/*</span></p>
+
# The template is ready for use.
 
 
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:"Courier New"'>/<span class=SpellE>mnt</span>/*</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:"Courier New"'>/<span class=SpellE>tmp</span>/*</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:"Courier New"'>/proc/*</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:"Courier New"'>/sys/*</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:"Courier New"'>/<span class=SpellE>usr/src</span>/*</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.75in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:Tahoma'>&nbsp;</span></p>
 
 
 
<ol style='margin-top:0in' start=2 type=1>
 
<ol style='margin-top:0in' start=2 type=a>
 
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
 
      style='font-size:10.0pt;font-family:Tahoma'>Now, <b style='mso-bidi-font-weight:
 
      normal'>tar </b>the OS file up by typing:</span></li>
 
</ol>
 
</ol>
 
 
 
<p class=MsoNormal style='margin-left:.75in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.0in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>tar –<span class=SpellE>czvf</span>
 
/tmp/centos-5.0-&lt;ARCH&gt;-&lt;DISTRO&gt;-<span class=SpellE>image.tar.gz</span>
 
/ –X<span style='mso-spacerun:yes'>  </span>/<span class=SpellE>tmp</span>/exclude</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.75in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:"Courier New"'><span style='mso-tab-count:
 
2'>      </span></span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.0in'><span style='font-size:10.0pt;
 
font-family:Tahoma'>where <b style='mso-bidi-font-weight:normal'>&lt;ARCH&gt;</b>
 
represents the system architecture (<b style='mso-bidi-font-weight:normal'>i386</b>
 
or <b style='mso-bidi-font-weight:normal'>x86_64</b>) and <b style='mso-bidi-font-weight:
 
normal'>&lt;DISTRO&gt;</b> represents the distribution (<b style='mso-bidi-font-weight:
 
normal'>default</b>, <b style='mso-bidi-font-weight:normal'>minimal</b>, etc.).</span></p>
 
 
 
<ol style='margin-top:0in' start=2 type=1>
 
<ol style='margin-top:0in' start=3 type=a>
 
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
 
      style='font-size:10.0pt;font-family:Tahoma'>Now transfer the file over to
 
      the <span class=SpellE>OpenVZ</span> server into <b style='mso-bidi-font-weight:
 
      normal'>/<span class=SpellE>vz</span>/template/cache </b>folder.</span></li>
 
</ol>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>On the <span class=SpellE>OpenVZ</span>
 
    server create a “dummy” VPS by creating a folder called <b
 
    style='mso-bidi-font-weight:normal'>/vz/private/50</b> and copying the <b
 
    style='mso-bidi-font-weight:normal'>/<span class=SpellE>etc/vz/conf/ve-vps.basic.conf-sample</span></b>
 
    to <b style='mso-bidi-font-weight:normal'>/etc/vz/conf/50.conf</b>.</span></li>
 
</ol>
 
 
 
<p class=MsoNormal style='margin-left:.25in'><span style='font-size:10.0pt;
 
font-family:Tahoma'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><b style='mso-bidi-font-weight:
 
normal'><span style='font-size:8.0pt;font-family:Tahoma;color:red'>NOTE:</span></b></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><b style='mso-bidi-font-weight:
 
normal'><span style='font-size:8.0pt;font-family:Tahoma;color:red'>50</span></b><span
 
style='font-size:8.0pt;font-family:Tahoma;color:red'> is the VEID for the
 
VPS.<span style='mso-spacerun:yes'>  </span>You can choose any unused VEID on
 
the <span class=SpellE>OpenVZ</span> server.</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:8.0pt;
 
font-family:Tahoma'>&nbsp;</span></p>
 
 
 
<ol style='margin-top:0in' start=4 type=1>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Now create a new folder called
 
    <b style='mso-bidi-font-weight:normal'>/vz/template/centos/5.0/&lt;ARCH&gt;/<span
 
    class=SpellE>config</span></b> again where <b style='mso-bidi-font-weight:
 
    normal'>&lt;ARCH&gt;</b> represents the system architecture.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Create a file in the folder
 
    called <b style='mso-bidi-font-weight:normal'>rpm</b> and add the
 
    following line:</span></li>
 
</ol>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>43</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<ol style='margin-top:0in' start=6 type=1>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Create a file called <span
 
    class=SpellE><b style='mso-bidi-font-weight:normal'>yum.conf</b></span> in
 
    the folder and add the following lines:</span></li>
 
</ol>
 
 
 
<p class=MsoNormal style='margin-left:.25in'><span style='font-size:10.0pt;
 
font-family:Tahoma'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>[main]</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>cachedir</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'>=/vz/template/centos/5.0/&lt;ARCH&gt;/yum-cache/</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>reposdir</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'>=/dev/null</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>installonlypkgs</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'>=''</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>[centos5-base]</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>name=<span class=SpellE>CentOS</span> 5 - &lt;ARCH&gt;
 
- Base</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>baseurl</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'>=http://mirror.centos.org/centos/5/os/&lt;ARCH&gt;/</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>enabled=1</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>gpgcheck</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'>=1</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>[centos5-updates-released]</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>name=<span class=SpellE>CentOS</span> 5 - &lt;ARCH&gt;
 
- Released Updates</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>baseurl</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'>=http://mirror.centos.org/centos/5/updates/&lt;ARCH&gt;/</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>enabled=1</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>gpgcheck</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'>=1</span></p>
 
 
 
<ol style='margin-top:0in' start=7 type=1>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Copy <b style='mso-bidi-font-weight:
 
    normal'>/etc/vz/dists/centos-4.conf</b> to <b style='mso-bidi-font-weight:
 
    normal'>/etc/vz/dists/centos-5.0.conf</b>.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Change to the <b
 
    style='mso-bidi-font-weight:normal'>/vz/private/50</b> folder and then run
 
    the command </span><span class=SpellE><span style='font-size:10.0pt;
 
    font-family:"Courier New"'>gunzip</span></span><span style='font-size:
 
    10.0pt;font-family:"Courier New"'> –dc
 
    /vz/template/cache/centos-5.0-&lt;ARCH&gt;-&lt;DISTRO&gt;-<span
 
    class=SpellE>image.tar.gz</span> | tar –<span class=SpellE>xvf</span> –<b
 
    style='mso-bidi-font-weight:normal'> </b></span><span style='font-size:
 
    10.0pt;font-family:Tahoma'>to unpack the base image to the folder.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Make sure you are in the <b
 
    style='mso-bidi-font-weight:normal'>/vz/private/50</b> folder.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Edit <b style='mso-bidi-font-weight:
 
    normal'>etc/shadow</b> and remove the replace the <b style='mso-bidi-font-weight:
 
    normal'>root</b> password with <b style='mso-bidi-font-weight:normal'>!!</b>
 
    instead of the hashed value.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Edit the <b style='mso-bidi-font-weight:
 
    normal'>etc/<span class=SpellE>inittab</span></b> file and comment out the
 
    lines that <span class=SpellE>respawn</span> <b style='mso-bidi-font-weight:
 
    normal'>/<span class=SpellE>sbin/mingetty</span></b> on <b
 
    style='mso-bidi-font-weight:normal'>tty1</b> through <b style='mso-bidi-font-weight:
 
    normal'>tty6</b>.<span style='mso-spacerun:yes'>  </span>Just put a <b
 
    style='mso-bidi-font-weight:normal'>#</b> at the beginning of the line.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Remove the <b
 
    style='mso-bidi-font-weight:normal'>etc/<span class=SpellE>mtab</span></b>
 
    file and then create a symbolic link by typing </span><span class=SpellE><span
 
    style='font-size:10.0pt;font-family:"Courier New"'>ln</span></span><span
 
    style='font-size:10.0pt;font-family:"Courier New"'> –s /proc/mounts etc/<span
 
    class=SpellE>mtab</span></span><span style='font-size:10.0pt;font-family:
 
    Tahoma'>.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Remove all of the lines from <b
 
    style='mso-bidi-font-weight:normal'>etc/<span class=SpellE>fstab</span></b>
 
    except for the line that mounts <b style='mso-bidi-font-weight:normal'>/dev/pts</b>.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Edit <b style='mso-bidi-font-weight:
 
    normal'>etc/<span class=SpellE>rc.d/rc.sysinit</span></b> and comment out
 
    the line that starts <b style='mso-bidi-font-weight:normal'>/<span
 
    class=SpellE>sbin/start_udev</span></b> by placing a <b style='mso-bidi-font-weight:
 
    normal'>#</b> at the beginning of the line.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Now create device nodes by
 
    typing:</span></li>
 
</ol>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>mknod</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'> dev/<span class=SpellE>ptmx</span>
 
c 5 2</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>mkdir</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'> dev/pts</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>/<span class=SpellE>sbin</span>/MAKEDEV –d
 
/vz/private/50/dev <span class=SpellE>ttyp</span> <span class=SpellE>ptyp</span></span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>mknod</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'> dev/null c 1 3</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span class=SpellE><span
 
style='font-size:10.0pt;font-family:"Courier New"'>mknod</span></span><span
 
style='font-size:10.0pt;font-family:"Courier New"'> dev/<span class=SpellE>urandom</span>
 
c 1 9</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<ol style='margin-top:0in' start=16 type=1>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Create the <span class=SpellE><b
 
    style='mso-bidi-font-weight:normal'>var</b></span><b style='mso-bidi-font-weight:
 
    normal'>/lock/rpm</b> folder.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>If you wish to disable IPv6,
 
    do the following:</span></li>
 
<ol style='margin-top:0in' start=1 type=a>
 
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
 
      style='font-size:10.0pt;font-family:Tahoma'>Edit <b style='mso-bidi-font-weight:
 
      normal'>etc/<span class=SpellE>sysconfig</span>/network</b> and set <b
 
      style='mso-bidi-font-weight:normal'>NETWORKING_IPV6</b> to <b
 
      style='mso-bidi-font-weight:normal'>no</b>.</span></li>
 
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
 
      style='font-size:10.0pt;font-family:Tahoma'>Add the following lines to <b
 
      style='mso-bidi-font-weight:normal'>etc/<span class=SpellE>modprobe.d</span>/blacklist</b>:</span></li>
 
</ol>
 
</ol>
 
 
 
<p class=MsoNormal style='margin-left:1.0in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.0in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>blacklist ipv6</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.0in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>blacklist net-pf-10</span></p>
 
 
 
<p class=MsoNormal style='margin-left:1.0in'><span style='font-size:10.0pt;
 
font-family:"Courier New"'>&nbsp;</span></p>
 
 
 
<ol style='margin-top:0in' start=18 type=1>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Disable any physical <span
 
    class=SpellE>NICs</span> by modifying the <span class=SpellE><b
 
    style='mso-bidi-font-weight:normal'>etc/sysconfig/network-scripts/ifcfg-ethX</b></span>
 
    files (where <b style='mso-bidi-font-weight:normal'>X</b> is the interface
 
    number starting from <b style='mso-bidi-font-weight:normal'>0</b>) and
 
    setting <b style='mso-bidi-font-weight:normal'>ONBOOT</b> to <b
 
    style='mso-bidi-font-weight:normal'>no</b>.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Now you’re ready to start the
 
    template.<span style='mso-spacerun:yes'>  </span>Type </span><span
 
    class=SpellE><span style='font-size:10.0pt;font-family:"Courier New"'>vzctl</span></span><span
 
    style='font-size:10.0pt;font-family:"Courier New"'> start 50</span><span
 
    style='font-size:10.0pt;font-family:Tahoma'> and wait for it to start.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>You can install additional
 
    packages into the VPS by typing</span><span style='font-size:10.0pt;
 
    font-family:"Courier New"'> <span class=SpellE>vzyum</span> 50 install
 
    &lt;package&gt;</span><span style='font-size:10.0pt;font-family:Tahoma'>
 
    at the prompt where <b style='mso-bidi-font-weight:normal'>&lt;package&gt;</b>
 
    represents the name of the software package you wish to install.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Finally, you should turn off
 
    unnecessary services.</span></li>
 
<ol style='margin-top:0in' start=1 type=a>
 
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
 
      style='font-size:10.0pt;font-family:Tahoma'>Enter the VPS by typing </span><span
 
      class=SpellE><span style='font-size:10.0pt;font-family:"Courier New"'>vzctl</span></span><span
 
      style='font-size:10.0pt;font-family:"Courier New"'> enter 50</span><span
 
      style='font-size:10.0pt;font-family:Tahoma'>.</span></li>
 
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
 
      style='font-size:10.0pt;font-family:Tahoma'>View the services that are
 
      set to run at startup by typing </span><span class=SpellE><span
 
      style='font-size:10.0pt;font-family:"Courier New"'>chkconfig</span></span><span
 
      style='font-size:10.0pt;font-family:"Courier New"'> --list | <span
 
      class=SpellE>grep</span> 5:on</span><span style='font-size:10.0pt;
 
      font-family:Tahoma'>.</span></li>
 
  <li class=MsoNormal style='mso-list:l0 level2 lfo1;tab-stops:list 1.0in'><span
 
      style='font-size:10.0pt;font-family:Tahoma'>Disable any unwanted service
 
      by typing </span><span class=SpellE><span style='font-size:10.0pt;
 
      font-family:"Courier New"'>chkconfig</span></span><span style='font-size:
 
      10.0pt;font-family:"Courier New"'> --levels 2345 &lt;service&gt; off</span><span
 
      style='font-size:10.0pt;font-family:Tahoma'> where <b style='mso-bidi-font-weight:
 
      normal'>&lt;service&gt;</b> represents the service to disable.</span></li>
 
</ol>
 
</ol>
 
 
 
<p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;
 
font-family:Tahoma'>Services that you can (and should) turn off without harm
 
are <span class=SpellE><b style='mso-bidi-font-weight:normal'>acpid</b></span>,
 
<span class=SpellE><b style='mso-bidi-font-weight:normal'>apmd</b></span>, <b
 
style='mso-bidi-font-weight:normal'>kudzu</b>, and <span class=SpellE><b
 
style='mso-bidi-font-weight:normal'>microcode_ctl</b></span>.</span></p>
 
 
 
<ol style='margin-top:0in' start=22 type=1>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Exit the VPS by typing </span><span
 
    style='font-size:10.0pt;font-family:"Courier New"'>exit</span><span
 
    style='font-size:10.0pt;font-family:Tahoma'> at the prompt.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Stop the VPS by typing <span
 
    class=SpellE>vzctl</span> stop 50.</span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>Finally, package up the new
 
    template by typing </span><span style='font-size:10.0pt;font-family:"Courier New"'>tar
 
    –<span class=SpellE>czvf</span>
 
    /vz/template/cache/centos-5.0-&lt;ARCH&gt;-&lt;DISTRO&gt;.<span
 
    class=SpellE>tar.gz</span> .</span><span style='font-size:10.0pt;
 
    font-family:Tahoma'></span></li>
 
<li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list .5in'><span
 
    style='font-size:10.0pt;font-family:Tahoma'>The template is ready for use.</span></li>
 
</ol>
 
 
 
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Tahoma'>&nbsp;</span></p>
 
 
 
<p class=MsoNormal style='margin-left:.75in;text-indent:-.25in'><span
 
style='font-size:10.0pt;font-family:Tahoma'>&nbsp;</span></p>
 
 
 
</div>
 

Latest revision as of 04:54, 7 August 2011

Yellowpin.svg Note: this article is not formatted according to this Wiki standards. Please help reformatting it in a better way.
  1. Install a system (virtual or physical) with the default CentOS installation that you wish to package. This could be a minimal distro or the default distro or even something custom.
    1. It's generally quicker to bootstrap a CentOS system on another yum/rpm-based, or Debian based system by following the instructions in [1]
  2. Once the OS has been installed, you need to tar the contents of the OS.
    1. First, create a file called /tmp/exclude and add the following lines to it:
    .bash_history
    lost+found
    /dev/*
    /mnt/*
    /tmp/*
    /proc/*
    /sys/*
    /usr/src/*
    1. Now, tar the OS file up by typing: tar --numeric-owner -czvf /tmp/centos-5.0-<ARCH>-<DISTRO>-image.tar.gz -X /tmp/exclude / where <ARCH> represents the system architecture (i386 or
    x86_64) and <DISTRO> represents the distribution (default, minimal, etc.).
    1. Now transfer the file over to the OpenVZ server into /vz/template/cache folder.
  3. On the OpenVZ server create a “dummy” container by creating a folder called /vz/private/50
    and copying the /etc/vz/conf/ve-vps.basic.conf-sample to /etc/vz/conf/50.conf.
    NOTE: 50 is the CTID for the container. You can choose any unused CTID on the OpenVZ server.
  4. Now create a new folder called /vz/template/centos/5/<ARCH>/config again where
    <ARCH> represents the system architecture.
  5. Create a file in the folder called rpm and add the following line:
    43
  6. Create a file called yum.conf in the folder and add the following lines:
    [main]
    cachedir=/vz/template/centos/5/<ARCH>/yum-cache/
    reposdir=/dev/null
    installonlypkgs=
    [centos5-base]
    name=CentOS 5 - <ARCH> - Base
    baseurl=http://mirror.centos.org/centos/5/os/<ARCH>/
    enabled=1
    gpgcheck=1
    [centos5-updates-released]
    name=CentOS 5 - <ARCH> - Released Updates
    baseurl=http://mirror.centos.org/centos/5/updates/<ARCH>/
    enabled=1
    gpgcheck=1
  7. Copy /etc/vz/dists/centos-4.conf to /etc/vz/dists/centos-5.conf.
  8. Copy /vz/template/centos/4/i386/config/minimal.list to /vz/template/centos/5/i386/config/minimal.list.
  9. Change to the /vz/private/50 folder and then run the command gunzip –dc /vz/template/cache/centos-5-<ARCH>-<DISTRO>-image.tar.gz | tar –xvf – to unpack the base image to the folder.
  10. Make sure you are in the /vz/private/50 folder.
  11. Edit etc/shadow and remove the replace the root password with !! instead of the hashed value.
  12. Edit the etc/inittab file and comment out the lines that respawn /sbin/mingetty on tty1 through tty6. Just put a # at the beginning of the line.
  13. Remove the etc/mtab file and then create a symbolic link by typing ln -s /proc/mounts etc/mtab.
  14. Remove all of the lines from etc/fstab except for the line that mounts /dev/pts.
  15. Edit etc/rc.d/rc.sysinit and comment out the line that starts /sbin/start_udev by placing a # at the beginning of the line.
  16. Now create device nodes by typing:
    mknod dev/ptmx c 5 2
    mkdir dev/pts
    /sbin/MAKEDEV –d/vz/private/50/dev ttyp ptyp
    mknod dev/null c 1 3
    mknod -m 644 dev/random c 1 8
    mknod dev/urandom c 1 9
  17. Create the var/lock/rpm folder.
  18. If you wish to disable IPv6, do the following:
    1. Edit etc/sysconfig/network and set NETWORKING_IPV6 to no.
    2. Add the following lines to etc/modprobe.d/blacklist:
    blacklist ipv6
    blacklist net-pf-10
  19. Disable any physical NICs by modifying the etc/sysconfig/network-scripts/ifcfg-ethX files (where X is the interface number starting from 0) and setting ONBOOT to no.
  20. Check etc/sysconfig/init to see if PROMPT=yes, and then change to no. Otherwise when startup init script rc will enter interactive mode and wait there forever
  1. Now you’re ready to start the template. Type vzctl start 50 and wait for it to start.
  2. You can install additional packages into the container by typing vzyum 50 install <package> at the prompt where <package> represents the name of the software package you wish to install.
  3. Finally, you should turn off unnecessary services.
    1. Enter the container by typing vzctl enter 50.
    2. View the services that are set to run at startup by typing chkconfig --list | grep 5:on.
    3. Disable any unwanted service by typing chkconfig --levels 2345 <service> off where <service> represents the service to disable.
    Services that you can (and should) turn off without harm are acpid, apmd, kudzu, and microcode_ctl.
  4. Exit the container by typing exit at the prompt.
  5. Stop the container by typing vzctl stop 50.
  6. Make sure you are in the /vz/private/50 folder.
  7. Finally, package up the new template by typing tar –czvf /vz/template/cache/centos-5-<ARCH>-<DISTRO>.tar.gz ./.
  8. The template is ready for use.