GRUB failing install after encryption

2018-03-12 Diskussionsfäden Davinder Chandhok
After I configured the disk with LVM and encryption as shown below (and
suggested by another member in a previous thread, suddenly my GRUB was not
installing correctly. I'm not sure what could be causing this, as I don't
know what an error code of 127 means (and couldn't find it inside the
script, although I did just note that my second primary partition is of
127G, but that might just be a coincidence). Could someone help shed some
light on this?

# example of new config file for setup-storage
#
#

# this is a copy of FAIBASE, but with metadata_csum disabled.
# Ubuntu XENIAL does not yet suport this option

disk_config /dev/sdb disklabel:msdos bootable:1 fstabkey:uuid

primary   /boot 255M   ext2rw
primary   - 127G-  -   -

disk_config cryptsetup
luks:"secret" - /dev/sdb2   -  -

disk_config lvm
vg automni /dev/sdb2

automni-_root / 40Gext4rw
createopts="-O ^metadata_csum"
automni-_home /home 40Gext4rw,nodev
createopts="-O ^metadata_csum"
automni-_tmp  /tmp  10Gext4
rw,nodev,nosuid,noexec createopts="-O ^metadata_csum"
automni-_var  /var  10Gext4rw
createopts="-O ^metadata_csum"
automni-_var_log  /var/log  10Gext4rw
createopts="-O ^metadata_csum"
automni-_var_log_audit/var/log/audit1G ext4rw
createopts="-O ^metadata_csum"
automni-_swap swap  16Gswapsw


Some packages not installing, but are in Ubuntu repos!

2018-03-12 Diskussionsfäden Davinder Chandhok
I configured a file with all of the packages from another manual install I
have, named it after a class I use for this profile, and ran the
installation. However, it seems that a large number of these packages fail
to install, and yet I see these packages as current in the Trusty repos.
Maybe I'm looking in the wrong place, but I'm not seeing any warnings about
the repos I'm using or the packages I will install just before the
"unrecognized package removed" messages. Can someone help me figure this
out? (by the way, I do realize that the ROS packages need a repo added, so
I will fix that when the time comes).

Package list file (named for one of my classes):
https://pastebin.com/mQmsVs7p

Below is my fai.log:

https://pastebin.com/DLZKxCDq


Re: Some packages not installing, but are in Ubuntu repos!

2018-03-14 Diskussionsfäden Davinder Chandhok
 Message-ID: <23207.57669.455031.281...@informatik.uni-koeln.de>


> >> Package list file (named for one of my classes):
> >> https://pastebin.com/mQmsVs7p
> >Wow, I never saw someone who's using a version number for every
> package. Any reason why you did this? In case of any minor package
> updates, you have to change this file.
>

Ah, this is a beginner mistake then. We wanted to create an identical
install and some packages needed specific versions, so we were lazy and got
all of the specific versions. Removing version numbers resolved most of the
issues (including grub install). It's strange though that some packages had
those exact versions in the repos.


> >IMO this is a minor bug in FAI. FAI does not expect an uppercase
> letter in the version number.
>
Yes, this was not a problem for us, just a nice warning.


> >>WARNING: These unknown packages are removed from the installation list:
> collada-dom-dev=2.4.4.7-ubuntu1~trusty1 collada-dom2.4-dp-base=2.4.4.7
> -ubuntu1~trusty1
> >Another minor bug in FAI. When install_packages tries to check if the
> package name is correct this does not seem to work with =
>
> >I strongly recommend to remove the version numbers from the
> package_config file.
>

So these errors above here are because the packages come from ROS
repositories and I didn't include those. I tried to include them in
/etc/fai/apt/sources.list but the repo was not recognized. I thought this
was the sources.list to adjust. Am I mistaken?

>E: Version '2.02~beta2-9ubuntu1.14' for 'grub-common' was not found
> >E: Version '2.02~beta2-9ubuntu1.14' for 'grub-pc' was not found
> >E: Version '2.02~beta2-9ubuntu1.14' for 'grub-pc-bin' was not found
> >E: Version '2.02~beta2-9ubuntu1.14' for 'grub2-common' was not found
>
> >That's why grub was not installed.
>
> >Didn't you read the log file yourself?
>

I apologize, I didn't realize forcing specific versions would cause this
problem. Now i have fixed it and I appreciate your help a lot!

PS: I replied to one of the earlier messages I received to thank the author
for helping, but it seems it did not go through. Should I be sending the
message directly to the server or to the message ID email?

Thanks again!
Davinder


Re: LVM+Encryption

2018-03-14 Diskussionsfäden Davinder Chandhok
>
> <1520279826.4589.269.ca...@etc.gen.nz>
>


> In case it's helpful, here's what I use for laptops, we also have some
> other scripts to set a random passphrase and email it encrypted to
> certain people.
>
> Thank you so much Andrew! Your example was exactly what I needed. I
thought I needed to set up LVM and then pass a new resulting label to
create the partitions, but /dev/sdb2 worked perfectly for both cases.

Regards,
Davinder


Adding ROS repos

2018-03-14 Diskussionsfäden Davinder Chandhok
I want to thank Andrew Ruthven and Thomas Lange for responding so quickly
and being very helpful (it seems my replies to the threads aren't going
through, probably a mistake on my part)

I am attempting to include the ROS repos to install packages from there on
my client. I added entries to /etc/fai/apt/sources.list. Am I mistaken?
Also, can I use the following command to add the keys?

sudo apt-key adv --keyserver hkp://ha.pool.sks-keyservers.net:80
--recv-key 421C365BD9FF1F717815A3895523BAEEB01FA116


And I tried to run a bash script I wrote to download miniconda and run it
to install it, but even chmod +x responds with permission denied. Would it
be better for me to run these commands after the system boots for the first
time?

I apologize for these newbie questions. I am trying to learn how to work
with FAI (almost out of university).


Re: Re: Adding ROS repos (Thomas Lange)

2018-03-16 Diskussionsfäden Davinder Chandhok
>That's the correct file you need to edit. Have a look at the log
>files, if some other sources.list will be copied before starting
>installing the packages.

So it seems that it does not find a class file with the correct
sources.list file and instead copies the sources.list from
/etc/apt/sources.list
"fcopy: no matching file for any class for etc/apt/sources.list defined"

I attempted to add the repository directly to /etc/apt/sources.list, but I
think then it will add this repo to the server also and then it fails to
add the key (even after installing dirmngr)

I searched the guide and could not find how to set up a sources.list file
based on a class name.

>No, just download the key into a file for e.g. ROS.asc and put this
>file into package_config/ROS.asc. FAI will the use it.

This seems to have worked fine, as the key is copied from my ROS.asc file.


>> And I tried to run a bash script I wrote to download miniconda and
run it to
>> install it, but even chmod +x responds with permission denied. Would
it be
   >> better for me to run these commands after the system boots for the
first time?
>maybe chmod a+rx

This resolved the permissions, but I now it does not access python or
conda. Maybe I don't have the right directory or path set?




>


LVM+Encryption

2018-03-05 Diskussionsfäden Davinder Chandhok
Hi,

I've set up an Ubuntu install profile that configures the disk in the
following way:

First the /boot partition is created. Then an LVM is set up for the rest of
the partitions and swap space. I would like to encrypt all of these
partitions, and have tried to insert disk_config cryptsetup and another
line for the settings between the boot partition lines and the LVM settings
lines. (I used the LVM example at the link below and added lines for the
extra volumes I needed inside LVM).

However, I'm getting an error during the disk formatting/partitioning part
of the install ("expected device name" or something similar, right after
the /boot partition lines). Is there more detailed information on how to
write the disk_config class files? I'm currently looking at both LVM and
encryption examples at the link below, but the fields necessary for
encryption are a bit unclear:
https://fai-project.org/doc/man/setup-storage.html

Thanks!
Davinder Chandhok