@@ -93,7 +93,7 @@ sudo LANG=C chroot $FILESYSTEM_ROOT mount proc /proc -t proc
93
93
94
94
# # Pointing apt to public apt mirrors and getting latest packages, needed for latest security updates
95
95
sudo cp files/apt/sources.list $FILESYSTEM_ROOT /etc/apt/
96
- sudo cp files/apt/apt.conf.d/{81norecommends,apt-{clean,gzip-indexes,no-languages}} $FILESYSTEM_ROOT /etc/apt/apt.conf.d/
96
+ sudo cp files/apt/apt.conf.d/{81norecommends,apt-{clean,gzip-indexes,no-languages},no-check-valid-until } $FILESYSTEM_ROOT /etc/apt/apt.conf.d/
97
97
sudo LANG=C chroot $FILESYSTEM_ROOT bash -c ' apt-mark auto `apt-mark showmanual`'
98
98
99
99
# # Note: set lang to prevent locale warnings in your chroot
@@ -120,7 +120,7 @@ sudo dpkg --root=$FILESYSTEM_ROOT -i target/debs/initramfs-tools_*.deb || \
120
120
sudo LANG=C DEBIAN_FRONTEND=noninteractive chroot $FILESYSTEM_ROOT apt-get -y install -f
121
121
sudo dpkg --root=$FILESYSTEM_ROOT -i target/debs/linux-image-${LINUX_KERNEL_VERSION} -amd64_* .deb || \
122
122
sudo LANG=C DEBIAN_FRONTEND=noninteractive chroot $FILESYSTEM_ROOT apt-get -y install -f
123
- sudo LANG=C DEBIAN_FRONTEND=noninteractive chroot $FILESYSTEM_ROOT apt-get -y install acl
123
+ sudo LANG=C DEBIAN_FRONTEND=noninteractive chroot $FILESYSTEM_ROOT apt-get -y install acl dmidecode hdparm
124
124
125
125
# # Update initramfs for booting with squashfs+overlay
126
126
cat files/initramfs-tools/modules | sudo tee -a $FILESYSTEM_ROOT /etc/initramfs-tools/modules > /dev/null
@@ -169,13 +169,13 @@ sudo LANG=C chroot $FILESYSTEM_ROOT apt-get -y install apt-transport-https \
169
169
curl \
170
170
gnupg2 \
171
171
software-properties-common
172
- sudo LANG=C chroot $FILESYSTEM_ROOT curl -o /tmp/docker.gpg -fsSL https://download.docker.com/linux/debian/gpg
172
+ sudo https_proxy= $https_proxy LANG=C chroot $FILESYSTEM_ROOT curl -o /tmp/docker.gpg -fsSL https://download.docker.com/linux/debian/gpg
173
173
sudo LANG=C chroot $FILESYSTEM_ROOT apt-key add /tmp/docker.gpg
174
174
sudo LANG=C chroot $FILESYSTEM_ROOT rm /tmp/docker.gpg
175
175
sudo LANG=C chroot $FILESYSTEM_ROOT add-apt-repository \
176
176
" deb [arch=amd64] https://download.docker.com/linux/debian stretch stable"
177
177
sudo LANG=C chroot $FILESYSTEM_ROOT apt-get update
178
- sudo LANG=C chroot $FILESYSTEM_ROOT apt-get -y install docker-ce=${DOCKER_VERSION}
178
+ sudo LANG=C chroot $FILESYSTEM_ROOT apt-get -y install docker-ce=${DOCKER_VERSION} docker-ce-cli= ${DOCKER_VERSION}
179
179
sudo LANG=C chroot $FILESYSTEM_ROOT apt-get -y remove software-properties-common gnupg2
180
180
181
181
# # Add docker config drop-in to select aufs, otherwise it may select other storage driver
@@ -215,7 +215,6 @@ sudo LANG=C DEBIAN_FRONTEND=noninteractive chroot $FILESYSTEM_ROOT apt-get -y in
215
215
openssh-server \
216
216
python \
217
217
python-setuptools \
218
- monit \
219
218
python-apt \
220
219
traceroute \
221
220
iputils-ping \
@@ -274,10 +273,6 @@ sudo mv $FILESYSTEM_ROOT/grub-pc-bin*.deb $FILESYSTEM_ROOT/$PLATFORM_DIR/x86_64-
274
273
# # Disable kexec supported reboot which was installed by default
275
274
sudo sed -i ' s/LOAD_KEXEC=true/LOAD_KEXEC=false/' $FILESYSTEM_ROOT /etc/default/kexec
276
275
277
- # # Modifty ntp default configuration: disable initial jump (add -x), and disable
278
- # # jump when time difference is greater than 1000 seconds (remove -g).
279
- sudo sed -i " s/NTPD_OPTS='-g'/NTPD_OPTS='-x'/" $FILESYSTEM_ROOT /etc/default/ntp
280
-
281
276
# # Fix ping tools permission so non root user can directly use them
282
277
# # Note: this is a workaround since aufs doesn't support extended attributes
283
278
# # Ref: https://github.com/moby/moby/issues/5650#issuecomment-303499489
313
308
sudo sed -i ' s/^ListenAddress ::/#ListenAddress ::/' $FILESYSTEM_ROOT /etc/ssh/sshd_config
314
309
sudo sed -i ' s/^#ListenAddress 0.0.0.0/ListenAddress 0.0.0.0/' $FILESYSTEM_ROOT /etc/ssh/sshd_config
315
310
316
- # # Config monit
317
- sudo cp files/image_config/monit/monitrc $FILESYSTEM_ROOT /etc/monit/
318
- sudo chmod 600 $FILESYSTEM_ROOT /etc/monit/monitrc
319
-
320
311
# # Config sysctl
321
312
sudo mkdir -p $FILESYSTEM_ROOT /var/core
322
313
sudo augtool --autosave "
@@ -344,6 +335,12 @@ set /files/etc/sysctl.conf/net.ipv4.conf.all.arp_ignore 2
344
335
345
336
set /files/etc/sysctl.conf/net.ipv4.neigh.default.base_reachable_time_ms 1800000
346
337
set /files/etc/sysctl.conf/net.ipv6.neigh.default.base_reachable_time_ms 1800000
338
+ set /files/etc/sysctl.conf/net.ipv4.neigh.default.gc_thresh1 1024
339
+ set /files/etc/sysctl.conf/net.ipv6.neigh.default.gc_thresh1 1024
340
+ set /files/etc/sysctl.conf/net.ipv4.neigh.default.gc_thresh2 2048
341
+ set /files/etc/sysctl.conf/net.ipv6.neigh.default.gc_thresh2 2048
342
+ set /files/etc/sysctl.conf/net.ipv4.neigh.default.gc_thresh3 4096
343
+ set /files/etc/sysctl.conf/net.ipv6.neigh.default.gc_thresh3 4096
347
344
348
345
set /files/etc/sysctl.conf/net.ipv6.conf.default.forwarding 1
349
346
set /files/etc/sysctl.conf/net.ipv6.conf.all.forwarding 1
0 commit comments