[Thincrust-devel] Issues with Thincrust in F11

[David P. Quigley]

On Thu, 2009-10-22 at 17:54 -0400, Bryan Kearney wrote:
> On 10/20/2009 05:24 PM, David P. Quigley wrote:
> > Hello,
> >      I am working on trying to make extremely light weight SELinux
> > enabled VMs with Thincrust and I have run into an issue. It works well
> > with the base configuration and I am able to get an SELinux enabled
> > system up and running however when I try to remove packages they endup
> > in the installed system anyway. Even the packages that are initial
> > listed in the kickstart file as being excluded are still there. For
> > example the fedora-aos.ks file has a -wireless-tools line indicating
> > that wireless-tools shouldn't be installed. However in the final image
> > wireless-tools and all of the other packages marked with a - are there.
> > I tried adding new packages such as plymouth but it seems to be ignored
> > as well. Any suggestions on what I should try. I added a -v to the
> > appliance-creator line and it didn't provide much information.
> 
> 
> Once the image is built, can you try and remove the rpms (such as 
> wireless-tools) and see what the dependencies are?
> 
> can you send along the ks you are using?
> 
> -- bk
> 
> _______________________________________________
> Thincrust-devel mailing list
> Thincrust-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/thincrust-devel

I tried to remove an rpm and find its dependencies but it seems that all
images I build at this point freeze with some sort of video corruption
at the end of the boot process. One example of a package with no
dependencies is the rhpl package. I'm not sure what pulled it in but
there is a -rhpl line in the kick start file so it should be removed but
is in the final image.

You'll find the kick start that I am using attached to the email. The
few differences is that I've enabled SELinux and installed the necessary
selinux packages.
-------------- next part --------------
# Kickstart file to build the appliance operating
# system for fedora.
# This is based on the work at http://www.thincrust.net
lang C
keyboard us
timezone US/Eastern
auth --useshadow --enablemd5
selinux --enforcing
firewall --disabled
bootloader --timeout=1 --append="acpi=force"
network --bootproto=dhcp --device=eth0 --onboot=on
services --enabled=network

# Uncomment the next line
# to make the root password be thincrust
# By default the root password is emptied
#rootpw --iscrypted $1$uw6MV$m6VtUWPed4SqgoW6fKfTZ/

#
# Partition Information. Change this as necessary
# This information is used by appliance-tools but
# not by the livecd tools.
#
part / --size 1024 --fstype ext3 --ondisk sda

#
# Repositories
#
# To compose against the current release tree, use the following "repo" (enabled by default)
repo --name=released --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-11&arch=$basearch
# To include updates, use the following "repo" (enabled by default)
repo --name=updates --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f11&arch=$basearch

# To compose against rawhide, use the following "repo" (disabled by default)
#repo --name=rawhide --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch

# To compose against local trees, (edit and) use:
#repo --name=f11 --baseurl=http://localrepo/fedora/releases/11/Everything/$basearch/os/
#repo --name=f11-updates --baseurl=http://localrepo/fedora/updates/11/$basearch/

#
# Add all the packages after the base packages
#
%packages --excludedocs --nobase
bash
kernel
grub
e2fsprogs
passwd
policycoreutils
chkconfig
rootfiles
yum
vim-minimal
acpid
checkpolicy
selinux-policy-minimum
libselinux-python
libselinux
policycoreutils-python

#Allow for dhcp access
dhclient
iputils

#
# Packages to Remove
#

# no need for kudzu if the hardware doesn't change
-kudzu
-prelink
-setserial
-ed

# Remove the authconfig pieces
-authconfig
-rhpl
-wireless-tools

# Remove the kbd bits
-kbd
-usermode

# these are all kind of overkill but get pulled in by mkinitrd ordering
-mkinitrd
-kpartx
-dmraid
-mdadm
-lvm2
-tar

# Packages in base or in some other package that aren't needed
-plymouth
-crda
-newt-python

# Things it would be nice to loose
-fedora-logos
generic-logos
-fedora-release-notes
%end

#
# Add custom post scripts after the base post.
#
%post

%end