laptop_install

Those are my personal playbooks and scripts to install a laptop from scratch including some dotfiles.

Based on Fedora 30

Getting the OS

./get_release.sh

Writing the iso to an USB

# Replace /dev/null with your drive
sudo dd if=${ISO} of=/dev/null status=progress

Kickstart

Simple kickstart with just the minimum to get started. Modify as you see fit and upload it to some http server.

I have mines here and used a goo.gl shortened version to avoid typing too much (use the raw version).

Boot from pendrive

Lenovo x230/w541

Press enter to abort regular booting, then press F12 to show the boot menu. Select the USB with the arrow keys and press enter to boot

Others

F12 or ESC should work for almost any computer.

Modify the boot parameters to include kickstart

Select the regular boot option
Press "e" to edit the boot option
Add inst.ks=<yourks_url> to the kernel line
Save and boot

Process

Prerrequisites

$ sh -c "$(curl -sSL https://raw.githubusercontent.com/e-minguez/laptop_install/master/bootstrap.sh)"

Or:

$ sudo dnf install -y ansible git dnf-plugins-core libselinux-python
$ mkdir -p ~/git
$ git clone https://github.com/e-minguez/laptop_install.git ~/git/laptop_install
$ cd ~/git/laptop_install

Configure wifi connection:

$ ./basic_network <ap> <password>

Edit myvars.yaml to fit your needs and run

$ ansible-playbook -i inventory -e @myvars.yaml ansible/all.yaml

Configure your password:

$ passwd

Root's password

$ sudo passwd

Encrypted device password

$ sudo cryptsetup luksChangeKey /dev/$(lsblk --fs -l | awk '/crypto_LUKS/ { print $1 }') -S 0

Restore cryptoluks password prompt (as root)

$ sudo mv /etc/default/grub{.old,}
$ sudo mv /etc/crypttab{.old,}
$ sudo grub2-mkconfig -o /boot/grub2/grub.cfg
$ sudo grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
$ sudo dracut -f --regenerate-all
$ sudo rm -f /boot/keyfile

Disable passwordless sudo:

# rm -f /etc/sudoers.d/wheel

Configure Firefox

Menu -> Add-ons -> Plugins and enable OpenH264 plugin

Configure all the accounts, etc. (like google account, kerberos, etc.)
Restore your backups
Relabel and reboot!

$ sudo touch /.autorelabel
$ sudo reboot

Local testing

Packer is used to create a VM simulating the different environments

x230

$ cd packer/
$ PACKER_LOG=1 packerio build fedora-30-x230.json

t480s

TO DO

Idempotent ansible roles
Single playbook instead small roles ?
Tests (shellcheck for bash? ansible lint?)

e-minguez/laptop_install