File config.sh of Package OBS-WorkerOnly-pxe

Overview Repositories Revisions Requests Users Attributes Meta

File config.sh of Package OBS-WorkerOnly-pxe

#!/bin/bash
#======================================
# Functions...
#--------------------------------------
test -f /.kconfig && . /.kconfig
test -f /.profile && . /.profile

#======================================
# Greeting...
#--------------------------------------
echo "Configure image: [$kiwi_iname]..."
#======================================
# Activate services
#--------------------------------------
ifup lo

#systemctl enable --now dbus.service
for i in network cron sshd chronyd ipmi mcelog smartd obsstoragesetup obsworker multipathd nrpe cpi numad irqbalance kdump ; do
    echo "enabling service $i"
    systemctl enable $i
done

sed -i -e "s@^allowed_hosts.*@allowed_hosts=192.168.128.17,192.168.128.18,192.168.1.17,192.168.1.18@" -e "s@^command\[@#command\[@" -e "s@command_timeout=.*@command_timeout=120@" /etc/nrpe.cfg

cat << EOF > /etc/nrpe.d/checks.cfg
command[check_autobuild]=/usr/lib/nagios/plugins/check_procs --command=autobuild -u root -w 1:32
command[check_bonding]=/usr/lib/nagios/plugins/./check_bonding
command[check_fan]=/usr/lib/nagios/plugins/check_ipmi_sensor1 -H localhost -T Fan
command[check_iostat_bs]=/usr/lib/nagios/plugins/check_iostat -d /var/cache/obs/worker -w 20000,1500000,1500000 -c 30000,2000000,2000000 -W 50 -C 70
command[check_load]=/usr/lib/nagios/plugins/check_load -w 800,700,600 -c 900,800,700
command[check_mailq]=/usr/lib/nagios/plugins/check_mailq -w 30 -c 50 -M postfix
command[check_mem]=/usr/lib/nagios/plugins/check_mem.pl -f -C -w 1 -c 0.5
command[check_multipath]=/usr/lib/nagios/plugins/check_multipath
command[check_ntp]=/usr/lib/nagios/plugins/check_ntp_time -H obs-admin-1.obsworker.opensuse.org -w 0.06 -c 0.12
command[check_partition_root]=/usr/lib/nagios/plugins/./check_disk -u GB -w 8% -c 4% -p /
command[check_partition_space]=/usr/lib/nagios/plugins/./check_disk -u GB -w 5% -c 2% -p /var/cache/obs/worker
command[check_partition_srv]=/usr/lib/nagios/plugins/./check_disk -u GB -w 5% -c 2% -p /srv
command[check_power_supply]=/usr/lib/nagios/plugins/check_ipmi_sensor1 -H localhost -T 'Power Supply'
command[check_proc_cron]=/usr/lib/nagios/plugins/./check_procs --command=cron -u root -c 1:1024
command[check_swap]=/usr/lib/nagios/plugins/check_swap -w 10 -c 5 -n ok
command[check_temperature]=/usr/lib/nagios/plugins/check_ipmi_sensor1 -H localhost -T Temperature
command[check_tftp]=/usr/lib/nagios/plugins/check_tftp 192.168.1.9 yaboot.conf
command[check_total_procs]=/usr/lib/nagios/plugins/check_procs -w 3000 -c 3500
command[check_users]=/usr/lib/nagios/plugins/check_users -w 100 -c 120
command[check_voltage]=/usr/lib/nagios/plugins/check_ipmi_sensor1 -H localhost -T Voltage
command[check_zombie_procs]=/usr/lib/nagios/plugins/check_procs -w 80 -c 90 -s Z
command[check_zypper]=sudo /usr/sbin/suse-online-update ; /usr/lib/nagios/plugins/check_zypper -vrt 120 -s -ui /etc/nagios/check_zypper-ignores.txt
command[check_smart_ssd_nvme0]=/usr/lib/nagios/plugins/check_smart --device=/dev/nvme0 --interface=nvme --ssd-lifetime -w Reallocated_Sector_Ct=10,Percent_Lifetime_Remain=90
command[check_smart_ssd_nvme1]=/usr/lib/nagios/plugins/check_smart --device=/dev/nvme1 --interface=nvme --ssd-lifetime -w Reallocated_Sector_Ct=10,Percent_Lifetime_Remain=90
command[check_smart_ssd_sda]=/usr/lib/nagios/plugins/check_smart --device=/dev/sda --interface=auto --ssd-lifetime -w Reallocated_Sector_Ct=10,Percent_Lifetime_Remain=90
command[check_smart_ssd_sdb]=/usr/lib/nagios/plugins/check_smart --device=/dev/sdb --interface=auto --ssd-lifetime -w Reallocated_Sector_Ct=10,Percent_Lifetime_Remain=90
command[check_smart_ssd_sdc]=/usr/lib/nagios/plugins/check_smart --device=/dev/sdc --interface=auto --ssd-lifetime -w Reallocated_Sector_Ct=10,Percent_Lifetime_Remain=90
EOF

echo 'command[check_bs_worker]=/usr/lib/nagios/plugins/./check_procs --command=bs_worker -u root -p $(pgrep -o screen) -c $(. /etc/buildhost.config; echo $OBS_WORKER_INSTANCES):$(. /etc/buildhost.config; echo $OBS_WORKER_INSTANCES)' > /etc/nrpe.d/check_bs_worker.cfg

cat << EOF > /etc/sudoers.d/nagios 
nagios  ALL=(ALL) NOPASSWD: /usr/bin/ipmitool,\
                            /usr/sbin/smartctl,\
                            /etc/cron.daily/suse.de-abuild-online-update, \
                            /usr/sbin/zypp-refresh, \
                            /usr/bin/zypper sl, \
                            /usr/bin/zypper --xmlout --non-interactive list-updates -t package -t patch
EOF

mkdir /etc/nagios
touch /etc/nagios/check_zypper-ignores.txt
for i in abuild atftp autofs bcache-tools be2net-kmp-default bsdtar build build-initvm-aarch64 build-initvm-armv7hl build-initvm-powerpc64le build-initvm-s390x build-initvm-x86_64 build-mkbaselibs build-mkdrpms ca-certificates-buildops ca-certificates-suse deltarpm dracut dracut-kiwi-lib dracut-kiwi-oem-dump dracut-kiwi-oem-repart dropbear GeoIP-data guestfs-data guestfs-tools kdump kernel-default kernel-default-debuginfo kernel-firmware kernel-lpae kernel-obs-build kiwi kiwi-hooks-for-obs-worker kiwi-instsource kiwi-tools libarchive13 libarchive2 libassuan0 libestr0 libev4 libfastjson4 libGeoIP1 libguestfs0 libjson-c2 liblogging0 libnis1 libprotobuf-c1 libprotobuf-lite25_1_0 libssh4 libtirpc1 libzck1 libzstd1 lpfc-kmp-default monitoring-plugins monitoring-plugins-bonding monitoring-plugins-common monitoring-plugins-cpu_stats monitoring-plugins-disk monitoring-plugins-files monitoring-plugins-ipmi-sensor1 monitoring-plugins-load monitoring-plugins-mem monitoring-plugins-multipath monitoring-plugins-ntp_time monitoring-plugins-procs monitoring-plugins-sar-perf monitoring-plugins-smart monitoring-plugins-swap monitoring-plugins-users monitoring-plugins-zypper nrpe OBS-Addon-release OBS-Addon-release-cd obs-common obs-gzip-go obs-worker perl-Class-Singleton perl-common-sense perl-common-sense perl-File-Slurp perl-HTML-Parser perl-HTML-Tagset perl-JSON perl-JSON-XS perl-JSON-XS perl-Sys-Guestfs perl-Types-Serialiser perl-XML-Parser perl-XML-Structured prepend-timestamp python3-appdirs python3-packaging python3-ply python3-pyparsing python3-setuptools python3-six python-deltarpm python-rpm-macros qemu-linux-user rpcbind rsync ruby2.5-rubygem-gem2rpm ruby-common screen suse-online-update sysstat system-user-nagios system-user-obsrun system-user-obsservicerun ucode-am ucode-amd update-alternatives zstd ; do
    echo "whitelist:$i" >> /etc/nagios/check_zypper-ignores.txt
done

if test -f /boot/grub/menu.lst ; then
 # no gfx boot menu, no error message please
 sed -i /^gfxmenu/d /boot/grub/menu.lst
fi

# setup initrd
# similar to kernel-obs-build package

# a longer list to have them also available for qemu cross builds where x86_64 kernel runs in eg. arm env.
# this list of modules where available on build workers of build.opensuse.org, so we stay compatible.
export KERNEL_MODULES="loop dm-mod dm-snapshot binfmt-misc fuse squashfs ext2 ext3 ext4 binfmt_misc virtio_pci virtio_mmio virtio_blk virtio-rng fat vfat nls_cp437 nls_iso8859-1 ibmvscsi ibmvscsic"
echo "force_drivers+=\" $KERNEL_MODULES \"" > /etc/dracut.conf.d/03-my-obs.conf
echo "nowaitforswap=yes" >> /etc/dracut.conf.d/03-my-obs.conf
echo "options loop max_loop=64" > /etc/modprobe.d/50-obs.conf

# configure network
cat >> /etc/sysconfig/network/config <<EOF

NETCONFIG_MODULES_ORDER="dns-resolver dns-bind ntp-runtime"
NETCONFIG_DNS_POLICY="auto"
NETCONFIG_DNS_FORWARDER="resolver"
NETCONFIG_NIS_SETDOMAINNAME="yes"
NETCONFIG_NTP_POLICY="auto"
EOF

# worker greeting string
echo 'Welcome to OBS Worker Appliance, based on \S - Kernel \r (\l).' > /etc/issue
echo >> /etc/issue

# runlevel 3 as default
#sed -i 's/^id:5:initdefault:/id:3:initdefault:/' /etc/inittab

# enable autosetup
sed -i 's,OBS_API_AUTOSETUP=.*,OBS_API_AUTOSETUP="yes",' /etc/sysconfig/obs-server
sed -i 's,OBS_STORAGE_AUTOSETUP=.*,OBS_STORAGE_AUTOSETUP="yes",' /etc/sysconfig/obs-*
sed -i 's,OBS_SETUP_WORKER_PARTITIONS=.*,OBS_SETUP_WORKER_PARTITIONS="use_obs_vg",' /etc/sysconfig/obs-*

# set the security level for this worker appliance
sed -i 's,OBS_WORKER_SECURITY_LEVEL=.*,OBS_WORKER_SECURITY_LEVEL="4",' /etc/sysconfig/obs-*

# hardwired ntp server config, in case dhcp distribution of ntp config is not working
cat << EOF > /etc/chrony.conf
server 192.168.128.9 iburst
server 192.168.128.17 iburst
server 192.168.128.18 iburst

# Record the rate at which the system clock gains/losses time.
driftfile /var/lib/chrony/drift

# In first three updates step the system clock instead of slew
# if the adjustment is larger than 1 second.
makestep 1.0 3

allow 192.168.128.9
allow 192.168.128.17
allow 192.168.128.18

# Serve time even if not synchronized to any NTP server.
local stratum 10

# Specify file containing keys for NTP authentication.
keyfile /etc/chrony.keys

# Specify directory for log files.
logdir /var/log/chrony

# Select which information is logged.
log measurements statistics tracking
EOF

# allow root login via serial console for debugging
echo "" >> /etc/securetty
echo "# for debugging purposes" >> /etc/securetty
echo ttyS0 >> /etc/securetty
echo ttyS1 >> /etc/securetty
echo ttyS2 >> /etc/securetty

echo "*.* @@obs-admin.obsworker.opensuse.org" >> /etc/rsyslog.d/remote.conf

# bug ?
chown root.root /var/lib/empty

#======================================
# Add Default Repositories
#--------------------------------------

SERVER="http://download.opensuse.org/"
SERVER="http://obs-admin.obsworker.opensuse.org/obs/"

ARC=`uname -m`
. /etc/os-release
VERSION=${VERSION// */}
VER_UND=${VERSION//-/_}
VLEAP=$VERSION
PORTS=""
O_PREFIX=""
OL_PREFIX=""

rm -fv /etc/zypp/repos.d/repo-*.repo

case `uname -m` in
	x86_64)
if grep -qi tumbleweed /etc/os-release ; then
zypper ar -f ${SERVER}/tumbleweed/repo/oss                                              tumbleweed
zypper ar -f ${SERVER}repositories/server:/monitoring/openSUSE_Tumbleweed               server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/openSUSE_Factory               OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/openSUSE_Factory                     openSUSE:Tools
else
zypper ar -f ${SERVER}distribution/leap/$VERSION/repo/oss                                   openSUSE:Leap:$VERSION
zypper ar -f ${SERVER}update/leap/$VERSION/oss                                              openSUSE:Leap:$VERSION:Update
zypper ar -f ${SERVER}update/leap/$VERSION/sle                                              openSUSE:Leap:$VERSION:SLE:Update
zypper ar -f ${SERVER}update/leap/$VERSION/backports                                        openSUSE:Leap:$VERSION:Backports:Update
zypper ar -f ${SERVER}repositories/server:/monitoring/$OL_PREFIX$VERSION                    server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/$O_PREFIX$VLEAP                    OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/$O_PREFIX$VLEAP                          openSUSE:Tools
fi
		;;
	s390x)
if grep -qi tumbleweed /etc/os-release ; then
zypper ar -f ${SERVER}ports/zsystems/tumbleweed/repo/oss                                tumbleweed
zypper ar -f ${SERVER}repositories/server:/monitoring/openSUSE_Factory_zSystems         server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/openSUSE_Factory_zSystems      OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/openSUSE_Factory_zSystems            openSUSE:Tools
else
zypper ar -f ${SERVER}distribution/leap/$VERSION/repo/oss                                   openSUSE:Leap:$VERSION
zypper ar -f ${SERVER}update/leap/$VERSION/oss                                              openSUSE:Leap:$VERSION:Update
zypper ar -f ${SERVER}update/leap/$VERSION/sle                                              openSUSE:Leap:$VERSION:SLE:Update
zypper ar -f ${SERVER}update/leap/$VERSION/backports                                        openSUSE:Leap:$VERSION:Backports:Update
zypper ar -f ${SERVER}repositories/server:/monitoring/$OL_PREFIX${VERSION}${PORTS}          server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/$O_PREFIX$VLEAP                    OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/$O_PREFIX$VLEAP                          openSUSE:Tools
fi
		;;
	ppc64le)
if grep -qi tumbleweed /etc/os-release ; then
zypper ar -f ${SERVER}ports/ppc/tumbleweed/repo/oss                                     tumbleweed
zypper ar -f ${SERVER}repositories/server:/monitoring/openSUSE_Factory_PowerPC_standard server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/openSUSE_Factory_PPC           OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/openSUSE_Factory_PPC                 openSUSE:Tools
else
zypper ar -f ${SERVER}distribution/leap/$VERSION/repo/oss                                   openSUSE:Leap:$VERSION
zypper ar -f ${SERVER}update/leap/$VERSION/oss                                              openSUSE:Leap:$VERSION:Update
zypper ar -f ${SERVER}update/leap/$VERSION/sle                                              openSUSE:Leap:$VERSION:SLE:Update
zypper ar -f ${SERVER}update/leap/$VERSION/backports                                        openSUSE:Leap:$VERSION:Backports:Update
zypper ar -f ${SERVER}repositories/server:/monitoring/$OL_PREFIX${VERSION}${PORTS}          server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/$O_PREFIX$VLEAP                    OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/$O_PREFIX$VLEAP                          openSUSE:Tools
fi
		;;
	armv7l)
if grep -qi tumbleweed /etc/os-release ; then
zypper ar -f ${SERVER}ports/aarch64/tumbleweed/repo/oss                                 tumbleweed
zypper ar -f ${SERVER}repositories/server:/monitoring/openSUSE_Factory_ARM              server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/openSUSE_Factory_ARM           OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/openSUSE_Factory_ARM                 openSUSE:Tools
else
zypper ar -f ${SERVER}ports/armv7hl/distribution/leap/$VERSION/repo/oss                     openSUSE:Leap:$VERSION
zypper ar -f ${SERVER}ports/armv7hl/update/leap/$VERSION/oss                                openSUSE:Leap:$VERSION:Update
zypper ar -f ${SERVER}repositories/server:/monitoring/$OL_PREFIX${VERSION}${PORTS}          server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/$O_PREFIX$VERSION                  OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/$O_PREFIX$VLEAP                          openSUSE:Tools
fi
		;;
	aarch64)
if grep -qi tumbleweed /etc/os-release ; then
zypper ar -f ${SERVER}ports/aarch64/tumbleweed/repo/oss                                 tumbleweed
zypper ar -f ${SERVER}repositories/server:/monitoring/openSUSE_Factory_ARM              server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/openSUSE_Factory_ARM           OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/openSUSE_Factory_ARM                 openSUSE:Tools
else
zypper ar -f ${SERVER}distribution/leap/$VERSION/repo/oss                                   openSUSE:Leap:$VERSION
zypper ar -f ${SERVER}update/leap/$VERSION/oss                                              openSUSE:Leap:$VERSION:Update
zypper ar -f ${SERVER}update/leap/$VERSION/sle                                              openSUSE:Leap:$VERSION:SLE:Update
zypper ar -f ${SERVER}update/leap/$VERSION/backports                                        openSUSE:Leap:$VERSION:Backports:Update
zypper ar -f ${SERVER}repositories/server:/monitoring/$OL_PREFIX${VERSION}${PORTS}          server:monitoring
zypper ar -f ${SERVER}repositories/OBS:/Server:/Unstable/$O_PREFIX$VLEAP                    OBS:Server:Unstable
zypper ar -f ${SERVER}repositories/openSUSE:/Tools/$O_PREFIX$VLEAP                          openSUSE:Tools
fi
		;;
esac

#
# import keys
#
rm -rf /tmp/keys
mkdir /tmp/keys
# import key  c5c219e7 (OBS:Server:Unstable)
cat << EOF > /tmp/keys/t1
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.11.2 (NSS-3)
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=JONN
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key 3dbdc284 (openSUSE)
cat << EOF > /tmp/keys/t2
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.11.2 (NSS-3)
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=i2TA
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key 013e5b65 (openSUSE:Tools)
cat << EOF > /tmp/keys/t3
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.1 (NSS-3)
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=dmC6
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key ee454f98 (server:monitoring)
cat << EOF > /tmp/keys/t4
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.13.0.1 (NSS-3)
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=tgRA
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key f6ab3975 (openSUSE:Factory:zSystems)
cat << EOF > /tmp/keys/t5
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.13.0.1 (NSS-3)
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=DPeJ
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key 65176565 (openSUSE:Backports)
cat << EOF > /tmp/keys/t6
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.1 (NSS-3)
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=mq0p
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key 39db7c82 (SLE)
cat << EOF > /tmp/keys/t7
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.1 (NSS-3)
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=cJ/8
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key 29b700a4 (4k openSUSE)
cat << EOF > /tmp/keys/t8
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.3 (NSS-3)
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=nMh8
-----END PGP PUBLIC KEY BLOCK-----
EOF

# import key 3fa1d6ce (4k SLE)
cat << EOF > /tmp/keys/t9
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.3 (NSS-3)
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=umXA
-----END PGP PUBLIC KEY BLOCK-----
EOF

rpm --import /tmp/keys/t1
rpm --import /tmp/keys/t2
rpm --import /tmp/keys/t3
rpm --import /tmp/keys/t4
rpm --import /tmp/keys/t5
rpm --import /tmp/keys/t6
rpm --import /tmp/keys/t7
rpm --import /tmp/keys/t8
rpm --import /tmp/keys/t9
rm -rf /tmp/keys

#sed -i -e "s@^PROXY_ENABLED=.*@PROXY_ENABLED=\"yes\"@" \
#       -e "s@^HTTP_PROXY=.*@HTTP_PROXY=\"http://192.168.128.17:3128\"@" /etc/sysconfig/proxy

echo "DefaultTasksMax=infinity" >> /etc/systemd/system.conf
echo "DefaultTasksAccounting=no" >> /etc/systemd/system.conf
echo "ForwardToSyslog=yes" >> /etc/systemd/journald.conf

mkdir -p /etc/systemd/system/nrpe.service.d
cat << EOF > /etc/systemd/system/nrpe.service.d/override.conf
[Service]
OOMScoreAdjust=-1000
Restart=on-failure
EOF

cat << EOF > /usr/lib/systemd/system/worker_bootup.service
[Install]
WantedBy=default.target

[Unit]
Description=finish worker setup
After=basic.target

[Service]
Type=forking
ExecStart=/usr/sbin/worker_finish

EOF

cat << EOF > /usr/sbin/worker_finish
#!/bin/bash
echo "finishing worker setup"
grep -q "GRUB_DISABLE_OS_PROBER" /etc/default/grub || echo "GRUB_DISABLE_OS_PROBER=true" >> /etc/default/grub

EOF

case $(uname -m) in
  s390*)
cat << EOF >> /usr/sbin/worker_finish
if test -e /proc/sys/vm/allocate_pgste ; then
    echo 1 > /proc/sys/vm/allocate_pgste
fi
if test -e /sys/firmware/cpi/system_name ; then
        . /etc/os-release
        NAME=\${NAME//openSUSE Leap/OSUL}
        SNAME=\$(echo \${NAME}\${VERSION_ID}| tr -d \.-)
        SNAME=\${SNAME:0:8}
        sed -i -e "s@CPI_SYSTEM_NAME=.*@CPI_SYSTEM_NAME=\"\$SNAME\"@" /etc/sysconfig/cpi
fi

killall -HUP /usr/sbin/rsyslogd || true

EOF
  ;;
  ppc*)
cat << EOF >> /usr/sbin/worker_finish
if grep -q 'PowerNV' /proc/cpuinfo ; then
        ppc64_cpu --smt=off
        modprobe kvm
        modprobe kvm-hv
fi
if grep -q 'pSeries' /proc/cpuinfo ; then
        modprobe kvm
        modprobe kvm-pr
fi
EOF
  ;;
esac

chmod a+x /usr/sbin/worker_finish

systemctl enable worker_bootup.service

if test `uname -m` != "s390x" ; then
   rm -rf /boot/zipl
fi
if test `uname -m` != "ppc64le" ; then
   rm -f /boot/vmlinuxbe
   rm -f /boot/initrdbe
fi
if test `uname -m` != "aarch64" ; then
   rm -f /boot/Image.guest32
   rm -f /boot/initrd.guest32
fi
if test -e /.build.kernel.kvm -a -e /.build.initrd.kvm ; then
   cp -a /.build.kernel.kvm /boot/kernel.obs.guest
   cp -a /.build.initrd.kvm /boot/initrd.obs.guest
fi
if test `uname -m` = "armv7l" ; then
   mkimage -A arm -O linux -a 0 -e 0 -T script -C none -n "Boot-Script" -d /boot/boot.script  /boot/boot.scr
else
   rm -f /boot/boot.script
fi
if test `uname -m` = "s390x" ; then
        . /etc/os-release
        SNAME=$(echo ${NAME}${VERSION_ID}| tr -d \.-)
        SNAME=${SNAME:0:8}
        sed -i -e "s@CPI_SYSTEM_NAME=.*@CPI_SYSTEM_NAME=\"$SNAME\"@" /etc/sysconfig/cpi
fi

cat << EOF >> /etc/sysctl.conf
# Set swappiness 
vm.swappiness=5
EOF

rm -rf /lib/firmware/iwlwifi* /lib/firmware/netronomem /lib/firmware/brcm /lib/firmware/dvb* /lib/firmware/v4l*
rm -rf /lib/modules/*/kernel/sound /lib/modules/*/kernel/net/infiniband /lib/modules/*/kernel/net/isdn
rm -rf /usr/share/icons /usr/share/doc /usr/share/locale/[a-df-z]* /usr/share/locale/es*
rm -rf /usr/lib/locale/[a-df-z]* /usr/lib/locale/es* /usr/share/man /usr/share/info /usr/share/X11/locale/[a-df-z]*

exit 0

Places

File config.sh of Package OBS-WorkerOnly-pxe

Places