aif-ng/examples/aif.xml

165 lines
7.7 KiB
XML
Raw Normal View History

2017-03-06 07:32:34 -05:00
<?xml version="1.0" encoding="UTF-8" ?>
<aif xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://aif-ng.io/"
2019-10-28 06:05:57 -04:00
xsi:schemaLocation="AIF http://aif-ng.io/aif.xsd"
2019-10-28 03:40:26 -04:00
version="0.2.0">
2017-03-06 07:48:42 -05:00
<storage>
2019-10-28 03:40:26 -04:00
<blockDevices>
<disk device="/dev/sda" diskFormat="gpt">
<!-- Partitions are numbered *in the order they are specified*. -->
<part id="boot" name="BOOT" label="/boot" start="0%" stop="10%"
fsType="fat32"/><!-- e.g. this would be /dev/sda1 -->
<part id="secrets1" name="crypted" label="shh" start="10%" stop="20%" fsType="ext4"/>
<part id="lvm_member1" name="jbod" label="dynamic" start="20%" stop="30%" fsType="ext4"/>
<part id="raid1_d1" start="30%" stop="55%" fsType="ext4"/>
<part id="raid1_d2" start="55%" stop="80%" fsType="ext4"/>
<part id="swap" start="80%" stop="100%" fsType="linux-swap(v1)"/>
</disk>
</blockDevices>
<!-- "Special" devices are processed *in the order they are specified*. This is important if you wish to
e.g. layer LUKS on top of LVM - you would specify <lvm> before <luks> and reference the
2019-10-28 03:40:26 -04:00
<luksDev id="SOMETHING" ... > as <lvmLogical source="SOMETHING" ... />.
Of course, a limitation of this is you cannot e.g. first assemble a LUKS volume, then an LVM
group, and then another LUKS volume - so plan accordingly and/or perform this in a <post> script. -->
<luks>
2019-10-28 01:26:31 -04:00
<luksDev id="luks_secrets" name="secrets" source="secrets1">
<!-- You can assign multiple secrets (or "keys") to a LUKS volume. -->
<secrets>
<!-- A simple passphrase. -->
<passphrase>secrets1</passphrase>
</secrets>
<secrets>
<!-- A key that uses a keyfile on a mounted path. This example uses the passphrase in
a plaintext file, which is in turn read by LUKS. -->
<passphrase>secrets1</passphrase>
<keyFile>/boot/.decrypt.plaintext</keyFile>
</secrets>
<secrets>
<!-- This will generate a 4096-byte file of random data. -->
<keyFile size="4096">/root/.decrypt.key</keyFile>
</secrets>
</luksDev>
</luks>
<lvm>
<lvmGroup id="vg1" name="GroupName">
<lvmLogical id="lv1" name="LogicalName" source="lvm_member1"/>
</lvmGroup>
</lvm>
<mdadm>
2019-10-28 01:26:31 -04:00
<!-- level can be 0, 1, 4, 5, or 6. RAID 10 would be done by creating an array with members of a
previously assembled array. -->
<array id="mdadm1" name="md0" meta="1.2" level="1">
<member source="raid1_d1"/>
<member source="raid1_d2"/>
</array>
</mdadm>
<fileSystems>
<fs source="boot" type="vfat">
<!-- Supports mkfs arguments. Leave off the filesystem type and device name, obviously;
those are handled by the above attributes. -->
<opt name="-F">32</opt>
<opt name="-n">ESP</opt>
</fs>
<fs source="luks_secrets" type="ext4">
<opt name="-L">seekrit</opt>
</fs>
</fileSystems>
2019-10-28 01:26:31 -04:00
<mountPoints>
<!-- And you use the id to reference mountpoints as well. -->
<mount source="luks_secrets" target="/mnt/aif">
<opt name="rw"/>
<opt name="relatime"/>
<opt name="compress">lzo</opt>
<opt name="ssd"/>
<opt name="space_cache"/>
<opt name="subvolid">5</opt>
<opt name="subvol">/</opt>
</mount>
<mount source="boot" target="/mnt/aif/boot"/>
<mount source="swap" target="swap"/>
<mount source="vg1" target="/mnt/aif/mnt/pool"/>
<mount source="mdadm1" target="/mnt/aif/mnt/raid"/>
</mountPoints>
2017-03-06 07:48:42 -05:00
</storage>
2017-03-06 08:30:31 -05:00
<network hostname="aiftest.square-r00t.net">
2019-10-28 01:26:31 -04:00
<iface device="auto">
<addresses>
<ipv4>
<address>dhcp</address>
</ipv4>
<ipv6>
<address>slaac</address>
<address>fde4:16b9:654b:bbfa::15/64</address>
</ipv6>
</addresses>
<resolvers>
<resolver>8.8.8.8</resolver>
</resolvers>
</iface>
2017-03-06 08:30:31 -05:00
</network>
2019-10-28 01:26:31 -04:00
<system timezone="EST5EDT" chrootPath="/mnt/aif" reboot="0">
2019-10-28 03:40:26 -04:00
<rootPassword>
<passwordPlain>1ns3cur3p4ssw0rd</passwordPlain>
</rootPassword>
2019-10-28 01:26:31 -04:00
<locales>
<locale name="LANG">en_US.UTF-8</locale>
</locales>
2019-10-28 03:40:26 -04:00
<!-- Note: The password hashe below is "test"; don't waste your time trying to crack. :) -->
<users>
2017-03-08 11:50:06 -05:00
<user name="aifusr"
2019-10-28 01:26:31 -04:00
home="/opt/aifusr"
2017-03-08 11:50:06 -05:00
sudo="true"
comment="A test user for AIF.">
2019-10-28 03:40:26 -04:00
<password>
<passwordHash hashType="(detect)">
$6$WtxZKOyaahvvWQRG$TUys60kQhF0ffBdnDSJVTA.PovwCOajjMz8HEHL2H0ZMi0bFpDTQvKA7BqzM3nA.ZMAUxNjpJP1dG/eA78Zgw0
</passwordHash>
</password>
2019-10-28 01:26:31 -04:00
<xGroup name="admins" create="true"/>
<xGroup name="wheel"/>
<xGroup name="users"/>
2017-03-08 11:50:06 -05:00
</user>
</users>
2019-10-28 03:40:26 -04:00
<services>
<service status="1">sshd</service>
</services>
2017-03-08 11:50:06 -05:00
</system>
2017-03-06 08:30:31 -05:00
<pacman>
<repos>
2019-10-28 01:26:31 -04:00
<repo name="core" enabled="true" sigLevel="default" mirror="file:///etc/pacman.d/mirrorlist"/>
<repo name="extra" enabled="true" sigLevel="default" mirror="file:///etc/pacman.d/mirrorlist"/>
<repo name="community" enabled="true" sigLevel="default" mirror="file:///etc/pacman.d/mirrorlist"/>
<repo name="multilib" enabled="true" sigLevel="default" mirror="file:///etc/pacman.d/mirrorlist"/>
<repo name="testing" enabled="false" sigLevel="default" mirror="file:///etc/pacman.d/mirrorlist"/>
<repo name="multilib-testing" enabled="false" sigLevel="default" mirror="file:///etc/pacman.d/mirrorlist"/>
<repo name="archlinuxfr" enabled="false" sigLevel="Optional TrustedOnly"
mirror="http://repo.archlinux.fr/$arch"/>
2017-03-06 08:30:31 -05:00
</repos>
<mirrorList>
<mirror>http://arch.mirror.square-r00t.net/$repo/os/$arch</mirror>
2017-03-08 11:50:06 -05:00
<mirror>http://mirror.us.leaseweb.net/archlinux/$repo/os/$arch</mirror>
<mirror>http://ftp.osuosl.org/pub/archlinux/$repo/os/$arch</mirror>
<mirror>http://arch.mirrors.ionfish.org/$repo/os/$arch</mirror>
<mirror>http://mirrors.gigenet.com/archlinux/$repo/os/$arch</mirror>
<mirror>http://mirror.jmu.edu/pub/archlinux/$repo/os/$arch</mirror>
</mirrorList>
2017-03-06 08:30:31 -05:00
<software>
2019-10-28 03:40:26 -04:00
<package repo="core">sed</package>
<package>python</package>
<package>perl</package>
<package>openssh</package>
2017-03-06 08:30:31 -05:00
</software>
</pacman>
2019-10-28 01:26:31 -04:00
<bootloader type="grub" target="/boot" efi="true"/>
<scripts>
2019-10-28 03:40:26 -04:00
<pre>
<script>https://aif.square-r00t.net/sample-scripts/pre/first.sh</script>
<script>https://aif.square-r00t.net/sample-scripts/pre/second.pl</script>
</pre>
<post>
<script>https://aif.square-r00t.net/sample-scripts/post/first.sh</script>
<script>https://aif.square-r00t.net/sample-scripts/post/second.py</script>
</post>
</scripts>
2017-03-07 18:36:56 -05:00
</aif>