Ovirt 3.5 is running well for me and I have freeIPA controlling access to the user portal. I would like to provide templates of various linux setups that all have freeipa for user authentication in the VM for my developers to be able to create a new VM from and then log in using their freeIPA access and sudo control. I'm wanting to group developers by project and use freeIPA to set sudo commands as needed (group A get oracle, group B get postgresql, etc). Wanting to maximize developer ability while minimizing my clean up time :-) They will be able to delete VMs they create. It's possible to do a kickstart deploy with freeIPA registration but a template from that will be a problem as it will have the same keys for all VMs. Is there a post-creation scripting process I can attach to in ovirt or should I look at a default root user and script that personalizes the new VM? -- -- James P. Kinney III Every time you stop a school, you will have to build a jail. What you gain at one end you lose at the other. It's like feeding a dog on his own tail. It won't fatten the dog. - Speech 11/23/1900 Mark Twain *http://heretothereideas.blogspot.com/ <http://heretothereideas.blogspot.com/>*
----- Original Message -----
From: "Jim Kinney" <jim.kinney@gmail.com> To: users@ovirt.org Sent: Friday, October 31, 2014 8:55:46 PM Subject: [ovirt-users] templates and freeipa
Ovirt 3.5 is running well for me and I have freeIPA controlling access to the user portal. I would like to provide templates of various linux setups that all have freeipa for user authentication in the VM for my developers to be able to create a new VM from and then log in using their freeIPA access and sudo control. I'm wanting to group developers by project and use freeIPA to set sudo commands as needed (group A get oracle, group B get postgresql, etc). Wanting to maximize developer ability while minimizing my clean up time :-) They will be able to delete VMs they create.
It's possible to do a kickstart deploy with freeIPA registration but a template from that will be a problem as it will have the same keys for all VMs.
Is there a post-creation scripting process I can attach to in ovirt or should I look at a default root user and script that personalizes the new VM?
טYou mean something like the vdsm hooks? Bare in mind that the create verb in VDSM is more about running a VM. the creation of its "metadata" is done at engine.
-- -- James P. Kinney III
Every time you stop a school, you will have to build a jail. What you gain at one end you lose at the other. It's like feeding a dog on his own tail. It won't fatten the dog. - Speech 11/23/1900 Mark Twain
*http://heretothereideas.blogspot.com/ <http://heretothereideas.blogspot.com/>*
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 31.10.2014 19:55, Jim Kinney wrote:
Is there a post-creation scripting process I can attach to in ovirt or should I look at a default root user and script that personalizes the new VM?
Yes, in the gui it's available via "run-once" in the cloud-init/initial run phase you can specify new ssh-keys etc. you need cloud-init or your own wrapper script inside the vm. this also works via rest api or sdk. there is some documentation on this on ovirt.org and many examples on the users list, just search the archive. HTH Sven -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQGcBAEBAgAGBQJUq8tdAAoJEAq0kGAWDrqlDs0L+wZtyfkUqzIYa8zXvmaspF32 E9FIqPkXnhgP2vus0IN0WA3JsL/q7tSMpuPwQHxXRHpCWGhCuYJ8tjiNmVidmLc2 TY2xg9OiaaFZw2htWfvPijJBJOrHgSB8Yr8JwBvO94imD5vODSABJq4tVsSnOHez C+/i+jZltDE+V753sz+5XPCdGOGaSkqg4FBc54lTvsoN2qtVBtiePuxurxwJrlQi rCFUIPBBwbfm0eWC3xm0NAuMH+3LbjfTq5PbKGh7n1mqFg+NAXLXtGPvfAP37m1C Bv1FZTJFRqW6bzQ239mU9Vo+Qt3m8Yf+ktj/4fW5IR4m/qfmi5bW7MfavaPxMtZW HO8M9zETzkuE6NZR/ZKZkKrau50dViJAyFSGN4BQYM6gFDdGJCAYDu4YUD3MU3Hm RtTCkWcsvf58aj+PogaU+M8/WVcaqso6G4ytmGLEHcPjpmrhKOP/zlrmopGpkmyQ 4245XRBip8gD2WCXolgOfaWyYnMwcR4dFQwEjJ61ng== =5Iqt -----END PGP SIGNATURE-----
participants (3)
-
Jim Kinney -
Sven Kieske -
Yair Zaslavsky