From ed645ac0020c2777cb77f95acd0689ee64fc8a90 Mon Sep 17 00:00:00 2001
From: dave <dave@davepedu.com>
Date: Sat, 6 Apr 2019 16:50:54 -0700
Subject: [PATCH] More elaborate example

---
 samples/default/menu.default |   2 +-
 samples/lvm/ks.default       | 141 ++++++++++++++++++++++++++++++-----
 samples/lvm/menu.default     |   2 +-
 3 files changed, 126 insertions(+), 19 deletions(-)

diff --git a/samples/default/menu.default b/samples/default/menu.default
index 7efcef8..3fb4a2b 100644
--- a/samples/default/menu.default
+++ b/samples/default/menu.default
@@ -14,7 +14,7 @@ label custom_seed
   kernel /install/vmlinuz
   append initrd=/install/initrd.gz file=/cdrom/preseed/custom.seed --
 
-label minimap_vm
+label minimal_vm
   menu label ^Minimal VM
   kernel /install/vmlinuz
   append initrd=/install/initrd.gz file=/cdrom/preseed/ubuntu-server-minimalvm.seed --
diff --git a/samples/lvm/ks.default b/samples/lvm/ks.default
index 0cf3fdf..dca9737 100644
--- a/samples/lvm/ks.default
+++ b/samples/lvm/ks.default
@@ -66,21 +66,128 @@ htop
 %post
 # Add arbitrary shell code to execute in the installer environment below here
 
-# run upgrades at first boot
+# Ubuntu user
+useradd --create-home --groups sudo --shell /bin/bash ubuntu
+echo "ubuntu:ubuntu" | chpasswd
+touch /home/ubuntu/.sudo_as_admin_successful
+
+
+# First time startup script
+cat <<"EOF" > /usr/local/sbin/vm-firstboot.sh
+#!/bin/bash
+set +x
+sed -i -E "s/^#?PermitRootLogin .+/PermitRootLogin yes/" /etc/ssh/sshd_config
+apt-get update
+apt-get dist-upgrade -y
+apt-get install -y open-vm-tools
+rm /etc/firstboot
+reboot
+EOF
+
+chmod +x /usr/local/sbin/vm-firstboot.sh
+# and systemd unit to call it
+cat <<"EOF" > /etc/systemd/system/vm-firstboot.service
+[Unit]
+Description=Initialize this template-created VM
+ConditionPathExists=/etc/firstboot
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/vm-firstboot.sh
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+ln -s /etc/systemd/system/vm-firstboot.service /etc/systemd/system/multi-user.target.wants/vm-firstboot.service
 touch /etc/firstboot
-sed -i -e "s/exit\s*0//" /etc/rc.local
-cat <<EOT >> /etc/rc.local
-# Below this line can be removed after first boot
-if [ -f /etc/firstboot ] ; then
-    set +e
-    sed -i -E "s/^PermitRootLogin .+/PermitRootLogin yes/" /etc/ssh/sshd_config
-    apt-get update
-    apt-get dist-upgrade -y
-    # Install new kernel on 14.04
-    #apt-get install -y linux-generic-lts-xenial open-vm-tools
-    # revert to upstart on 16.04
-    #apt-get install -y  upstart-sysv
-    rm /etc/firstboot
-    reboot
-fi
-EOT
+
+
+# Template cleanup helper script
+cat <<"EOF" > /usr/local/sbin/vm-clean.sh
+#!/bin/bash
+touch /etc/firstboot
+rm -f /etc/ssh/*key*
+rm -f /etc/machine-id
+EOF
+
+chmod +x /usr/local/sbin/vm-clean.sh
+
+
+# First boot ssh key regen
+cat <<"EOF" > /lib/systemd/system/ssh.service
+[Unit]
+Description=OpenBSD Secure Shell server
+After=network.target auditd.service
+ConditionPathExists=!/etc/ssh/sshd_not_to_be_run
+
+[Service]
+EnvironmentFile=-/etc/default/ssh
+ExecStartPre=/bin/bash -c "test -f /etc/ssh/ssh_host_rsa_key || ssh-keygen -A"
+ExecStartPre=/usr/sbin/sshd -t
+ExecStart=/usr/sbin/sshd -D $SSHD_OPTS
+ExecReload=/usr/sbin/sshd -t
+ExecReload=/bin/kill -HUP $MAINPID
+KillMode=process
+Restart=on-failure
+RestartPreventExitStatus=255
+Type=notify
+RuntimeDirectory=sshd
+RuntimeDirectoryMode=0755
+
+[Install]
+WantedBy=multi-user.target
+Alias=sshd.service
+EOF
+
+
+
+# First boot machine uuidgen
+cat <<"EOF" > /etc/systemd/system/machineidgen.service
+[Unit]
+Description=Regen machine-id on first boot
+Before=systemd-networkd.service systemd-journald.service
+After=local-fs.target
+ConditionPathExists=!/etc/machine-id
+
+[Service]
+Type=oneshot
+ExecStart=/bin/systemd-machine-id-setup
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+ln -s /etc/systemd/system/machineidgen.service /etc/systemd/system/multi-user.target.wants/machineidgen.service
+rm /etc/machine-id
+
+
+# Show IP address on console
+cp /etc/issue /etc/issue.tpl
+
+cat <<"EOF" > /usr/local/sbin/console-set-ip.sh
+#!/bin/bash
+cat /etc/issue.tpl > /etc/issue
+(ip addr | grep inet | awk '{print $2}' | grep -vE '^(::|fe80|127\.0\.0)') 2>&1 >> /etc/issue
+echo "" >> /etc/issue
+EOF
+
+chmod +x /usr/local/sbin/console-set-ip.sh
+
+
+cat <<"EOF" > /etc/systemd/system/consoleip.service
+[Unit]
+Description=Display machine ip on console
+After=network.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/console-set-ip.sh
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+ln -s /etc/systemd/system/consoleip.service /etc/systemd/system/multi-user.target.wants/consoleip.service
+
+rm -f /etc/update-motd.d/50-motd-news /etc/update-motd.d/80-livepatch
diff --git a/samples/lvm/menu.default b/samples/lvm/menu.default
index 7efcef8..3fb4a2b 100644
--- a/samples/lvm/menu.default
+++ b/samples/lvm/menu.default
@@ -14,7 +14,7 @@ label custom_seed
   kernel /install/vmlinuz
   append initrd=/install/initrd.gz file=/cdrom/preseed/custom.seed --
 
-label minimap_vm
+label minimal_vm
   menu label ^Minimal VM
   kernel /install/vmlinuz
   append initrd=/install/initrd.gz file=/cdrom/preseed/ubuntu-server-minimalvm.seed --