tsg-tsg-os-buildimage/tools/mk-base-image

#!/usr/bin/env bash
#
# Create a base CentOS Docker image.
#
# This script is useful on systems with yum installed (e.g., building
# a CentOS image on CentOS).  See contrib/mkimage-rinse.sh for a way
# to build CentOS images on other systems.

yum_config=$1
target=$2
projectdir=$3
profile_id=$4
if [ $profile_id  == "TSG-X-NXR620G40-R01-P1403" ];then
    kernel_version="3.10.0-1160.59.1.el7.x86_64"
else
    kernel_version="5.4.159-1.el7.elrepo.x86_64"
fi

set -ex

package_to_install="@base @core @debugging @directory-client @guest-agents
                    @hardware-monitoring @network-file-system-client @performance @remote-system-management
                    grub2 epel-release efibootmgr ansible yum-utils ipmitool docker-ce docker-ce-cli containerd.io lrzsz python3 vconfig watchdog pcm git tmux fish"

locak_package_to_install="$projectdir/package/kernel-lt-$kernel_version.rpm
                          $projectdir/package/kernel-lt-devel-$kernel_version.rpm"

kernel_package_to_install="kernel-3.10.0-1160.59.1.el7.x86_64 kernel-devel-3.10.0-1160.59.1.el7.x86_64"

setopt="group_package_types=mandatory,default,optional"

yum -c "$yum_config" --installroot="$target" -y makecache
yum -c "$yum_config" --installroot="$target" -y --setopt=$setopt install $package_to_install
if [ $profile_id  != "TSG-X-NXR620G40-R01-P1403" ];then
    yum -c "$yum_config" --installroot="$target" -y --setopt=$setopt localinstall $locak_package_to_install
else
    yum -c "$yum_config" --installroot="$target" -y --setopt=$setopt install $kernel_package_to_install
fi
#git clone --depth 1 https://github.com/brendangregg/FlameGraph.git /opt/tools/FlameGraph/
#git clone --depth 1 https://github.com/brendangregg/perf-tools.git /opt/tools/perf-tools/
test -d "$target"/opt/tools/ || mkdir -p "$target"/opt/tools/
tar -zxf $projectdir/tools/FlameGraph.tar.gz -C "$target"/opt/tools/
tar -zxf $projectdir/tools/perf-tools.tar.gz -C "$target"/opt/tools/
cp $projectdir/tools/run_flamegrah.sh "$target"/opt/tools/

cat > "$target"/etc/sysconfig/network <<EOF
NETWORKING=yes
HOSTNAME=localhost.localdomain
EOF

# effectively: febootstrap-minimize --keep-zoneinfo --keep-rpmdb
# --keep-services "$target".  Stolen from mkimage-rinse.sh
#  locales
# rm -rf "$target"/usr/{{lib,share}/locale,{lib,lib64}/gconv,bin/localedef,sbin/build-locale-archive}
#  docs
# rm -rf "$target"/usr/share/{man,doc,info,gnome/help}
#  cracklib
# rm -rf "$target"/usr/share/cracklib
#  i18n
# rm -rf "$target"/usr/share/i18n
#  sln
# rm -rf "$target"/sbin/sln

#  ldconfig
rm -rf "$target"/etc/ld.so.cache
rm -rf "$target"/var/cache/ldconfig/*

cd $target/boot
ln -sf vmlinuz-$kernel_version vmlinuz
ln -sf $(ls -1 initramfs-* | tail -1) initrd.img
cd -

cp -a /dev/null $target/dev/
cp -a /dev/zero $target/dev/
cp -a /dev/urandom $target/dev/
cp -a /dev/random $target/dev/


# install ONIE helpers
chmod 0755 $projectdir/rootconf/sysroot-bin/*
chmod 0755 $projectdir/rootconf/sysroot-lib/*
cp -rf $projectdir/rootconf/sysroot-bin/* $target/bin/
cp -rf $projectdir/rootconf/sysroot-lib/* $target/lib/
cp -rf $projectdir/rootconf/sysroot-usr/service/* $target/usr/lib/systemd/system
cp -rf $projectdir/rootconf/sysroot-usr/sysctl/* $target/usr/lib/sysctl.d/

ln -vfs --relative  $target/usr/lib/systemd/system/ldconfig.service $target/usr/lib/systemd/system/sysinit.target.wants/ldconfig.service

#tty audit using pam
mv $target/etc/pam.d/system-auth $target/etc/pam.d/system-auth-local
mv $target/etc/pam.d/password-auth $target/etc/pam.d/password-auth-local
echo "session     required      pam_tty_audit.so  enable=*" >> $target/etc/pam.d/system-auth-local
echo "session     required      pam_tty_audit.so  enable=*" >> $target/etc/pam.d/password-auth-local
ln -vfs --relative $target/etc/pam.d/system-auth-local $target/etc/pam.d/system-auth
ln -vfs --relative $target/etc/pam.d/password-auth-local $target/etc/pam.d/password-auth

cp -rf $projectdir/rootconf/sysroot-usr/target/* $target/usr/lib/systemd/system
mkdir -p $target/usr/lib/systemd/system/workload.target.wants

# ansible-playbook -i tsg-9140-scripts/install_config/tsg_9140_host tsg-9140-scripts/tsg_9140_deploy.yml
yum -c "$yum_config" --installroot="$target" -y --setopt=$setopt clean all

rm -rf $target/tmp/*
rm -rf $target/core.*

# tar --numeric-owner -c -C centos_mkroot/ . | pbzip2 -p9 > input/centos-7-chroot.tar.bz2

#rm -rf "$target"