isocut User Guide ​

• Introduction
• Software and Hardware Requirements
• Installation
• Tailoring and Customizing an Image
  • Command Description
  • Software Package Source
  • Operation Guide

Introduction ​

The size of an openEuler image is large, and the process of downloading or transferring an image is time-consuming. In addition, when an openEuler image is used to install the OS, all RPM packages contained in the image are installed. You cannot choose to install only the required software packages.

In some scenarios, you do not need to install the full software package provided by the image, or you need to install additional software packages. Therefore, openEuler provides an image tailoring and customization tool. You can use this tool to customize an ISO image that contains only the required RPM packages based on an openEuler image. The software packages can be the ones contained in an official ISO image or specified in addition to meet custom requirements.

This document describes how to install and use the openEuler image tailoring and customization tool.

Software and Hardware Requirements ​

The hardware and software requirements of the computer to make an ISO file using the openEuler tailoring and customization tool are as follows:

• The CPU architecture is AArch64 or x86_64.
• The operating system is openEuler 20.03 LTS SP3.
• You are advised to reserve at least 30 GB drive space for running the tailoring and customization tool and storing the ISO image.

Installation ​

The following uses openEuler 20.03 LTS SP3 on the AArch64 architecture as an example to describe how to install the ISO image tailoring and customization tool.

1. Ensure that openEuler 20.03 LTS SP3 has been installed on the computer.

   shell

   $ cat /etc/openEuler-release 
   openEuler release 20.03 (LTS-SP3)

2. Download the ISO image (must be an everything image) of the corresponding architecture and save it to any directory (it is recommended that the available space of the directory be greater than 20 GB). In this example, the ISO image is saved to the /home/isocut_iso directory.

   The download address of the AArch64 image is as follows:

   https://repo.openeuler.org/openEuler-20.03-LTS-SP3/ISO/aarch64/openEuler-20.03-LTS-SP3-everything-aarch64-dvd.iso

   Note: The download address of the x86_64 image is as follows:

   https://repo.openeuler.org/openEuler-20.03-LTS-SP3/ISO/x86_64/openEuler-20.03-LTS-SP3-everything-x86_64-dvd.iso

3. Create a /etc/yum.repos.d/local.repo file to configure the Yum source. The following is an example of the configuration file. baseurl is the directory for mounting the ISO image.

   shell

   [local]
   name=local
   baseurl=file:///home/isocut_mount
   gpgcheck=0
   enabled=1

4. Run the following command as the root user to mount the image to the /home/isocut_mount directory (ensure that the mount directory is the same as baseurl configured in the repo file) as the Yum source:

   shell

   sudo mount -o loop /home/isocut_iso/openEuler-20.03-LTS-SP3-everything-aarch64-dvd.iso /home/isocut_mount

5. Make the Yum source take effect.

   shell

   yum clean all
   yum makecache

6. Install the image tailoring and customization tool as the root user.

   shell

   sudo yum install -y isocut

7. Run the following command as the root user to verify that the tool has been installed successfully:

   shell

   $ sudo isocut -h
   Checking input ...
   usage: isocut [-h] [-t temporary_path] [-r rpm_path] [-k file_path] source_iso dest_iso
   
   Cut openEuler iso to small one
   
   positional arguments:
     source_iso         source iso image
     dest_iso           destination iso image
   
   optional arguments:
     -h, --help         show this help message and exit
     -t temporary_path  temporary path
     -r rpm_path        extern rpm packages path
     -k file_path       kickstart file

Tailoring and Customizing an Image ​

This section describes how to use the image tailoring and customization tool to create an image by tailoring or adding RPM packages to an openEuler image.

Command Description ​

Format ​

Run the isocut command to use the image tailoring and customization tool. The command format is as follows:

isocut [ --help | -h ] [ -t <temp_path> ] [ -r <rpm_path> ] [ -k <file_path> ] <source_iso> <dest_iso>

Parameter Description ​

Software Package Source ​

The RPM packages of the new image can be:

• Packages contained in an official ISO image. In this case, the RPM packages to be installed are specified in the configuration file /etc/isocut/rpmlist. The configuration format is software_package_name.architecture. For example, kernel.aarch64.

• Specified in addition. In this case, use the -r parameter to specify the path in which the RPM packages are stored when running the isocut command and add the RPM package names to the /etc/isocut/rpmlist configuration file. (See the name format above.)

  NOTE

  • When customizing an image, if an RPM package specified in the configuration file cannot be found, the RPM package will not be added to the image.
  • If the dependency of the RPM package is incorrect, an error may be reported when running the tailoring and customization tool.

kickstart Functions ​

You can use kickstart to install images automatically by using the -k parameter to specify a kickstart file when running the isocut command.

The isocut tool provides a kickstart template (/etc/isocut/anaconda-ks.cfg). You can modify the template as required.

Modifying the kickstart Template ​

If you need to use the kickstart template provided by the isocut tool, perform the following modifications:

• Configure the root user password and the GRUB2 password in the /etc/isocut/anaconda-ks.cfg file. Otherwise, the automatic image installation will pause during the password setting process, waiting for you to manually enter the passwords.
• If you want to specify additional RPM packages and use kickstart for automatic installation, specify the RPM packages in the %packages field in both the /etc/isocut/rpmlist file and the kickstart file.

See the next section for details about how to modify the kickstart file.

Configuring Initial Passwords ​

Setting the Initial Password of the root User ​

Set the initial password of the root user as follows in the /etc/isocut/anaconda-ks.cfg file. Replace ${pwd} with the encrypted password.

rootpw --iscrypted ${pwd}

Obtain the initial password of the root user as follows (root permissions are required):

1. Add a user for generating the password, for example, testUser.

   shell

   sudo useradd testUser

2. Set the password for the testUser user. Run the following command to set the password as prompted:

   shell

   $ sudo passwd testUser
   Changing password for user testUser.
   New password: 
   Retype new password: 
   passwd: all authentication tokens updated successfully.

3. View the /etc/shadow file to obtain the encrypted password. The encrypted password is the string between the two colons (😃 following the testUser user name. (******* is used as an example.)

   shell

   $ sudo cat /etc/shadow | grep testUser
   testUser:***:19052:0:90:7:35::

4. Run the following command to replace the pwd field in the /etc/isocut/anaconda-ks.cfg file with the encrypted password (replace *** with the actual password):

   shell

   rootpw --iscrypted ***

Configuring the Initial GRUB2 Password ​

Add the following configuration to the /etc/isocut/anaconda-ks.cfg file to set the initial GRUB2 password: Replace ${pwd} with the encrypted password.

%addon com_huawei_grub_safe --iscrypted --password='${pwd}'
%end

NOTE:

• The root permissions are required for configuring the initial GRUB password.

• The default user corresponding to the GRUB password is root.

• The grub2-set-password command must exist in the system. If the command does not exist, install it in advance.

1. Run the following command and set the GRUB2 password as prompted:

   shell

   $ sudo grub2-set-password -o ./
   Enter password: 
   Confirm password: 
   grep: .//grub.cfg: No such file or directory
   WARNING: The current configuration lacks password support!
   Update your configuration with grub2-mkconfig to support this feature.

2. After the command is executed, the user.cfg file is generated in the current directory. The content starting with grub.pbkdf2.sha512 is the encrypted GRUB2 password.

   shell

   $ sudo cat user.cfg 
   GRUB2_PASSWORD=grub.pbkdf2.sha512.***

3. Add the following information to the /etc/isocut/anaconda-ks.cfg file. Replace ******* with the encrypted GRUB2 password.

   shell

   %addon com_huawei_grub_safe --iscrypted --password='grub.pbkdf2.sha512.***'
   %end

Configuring the %packages Field ​

If you want to specify additional RPM packages and use kickstart for automatic installation, specify the RPM packages in the %packages field in both the /etc/isocut/rpmlist file and the kickstart file.

This section describes how to specify RPM packages in the /etc/isocut/anaconda-ks.cfg file.

The default configurations of %packages in the /etc/isocut/anaconda-ks.cfg file are as follows:

%packages --multilib --ignoremissing
acl.aarch64
aide.aarch64
......
NetworkManager.aarch64
%end

Add specified RPM packages to the %packages configurations in the following format:

software_package_name.architecture. For example, kernel.aarch64.

%packages --multilib --ignoremissing
acl.aarch64
aide.aarch64
......
NetworkManager.aarch64
kernel.aarch64
%end

Operation Guide ​

1. Open the configuration file /etc/isocut/rpmlist and specify the RPM packages to be installed (from the official ISO image).

   shell

       sudo vi /etc/isocut/rpmlist

2. Ensure that the space of the temporary directory for running the image tailoring and customization tool is greater than 8 GB. The default temporary directory is**/tmp**. You can also use the -t parameter to specify another directory as the temporary directory. The path of the directory must be an absolute path. In this example, the /home/temp directory is used. The following command output indicates that the available drive space of the /home directory is 38 GB, which meets the requirements.

   shell

   $ df -h
   Filesystem                            Size  Used Avail Use% Mounted on
   devtmpfs                              1.2G     0  1.2G   0% /dev
   tmpfs                                 1.5G     0  1.5G   0% /dev/shm
   tmpfs                                 1.5G   23M  1.5G   2% /run
   tmpfs                                 1.5G     0  1.5G   0% /sys/fs/cgroup
   /dev/mapper/openeuler_openeuler-root   69G  2.8G   63G   5% /
   /dev/sda2                             976M  114M  796M  13% /boot
   /dev/mapper/openeuler_openeuler-home   61G   21G   38G  35% /home

3. Tailor and customize the image.

   Scenario 1: All RPM packages of the new image are from the official ISO image.

   shell

   $ sudo isocut -t /home/temp /home/isocut_iso/openEuler-20.03-LTS-SP3-aarch64-dvd.iso /home/result/new.iso
     Checking input ...
     Checking user ...
     Checking necessary tools ...
     Initing workspace ...
     Copying basic part of iso image ...
     Downloading rpms ...
     Finish create yum conf
     finished
     Regenerating repodata ...
     Checking rpm deps ...
     Getting the description of iso image ...
     Remaking iso ...
     Adding checksum for iso ...
     Adding sha256sum for iso ...
     ISO cutout succeeded, enjoy your new image "/home/result/new.iso"
     isocut.lock unlocked ...

   If the preceding information is displayed, the custom image new.iso is successfully created.

   Scenario 2: The RPM packages of the new image are from the official ISO image and additional packages in /home/rpms.

   shell

   sudo isocut -t /home/temp -r /home/rpms /home/isocut_iso/openEuler-20.03-LTS-SP3-aarch64-dvd.iso /home/result/new.iso

   Scenario 3: The kickstart file is used for automatic installation. You need to modify the /etc/isocut/anaconda-ks.cfg file.

   shell

   sudo isocut -t /home/temp -k /etc/isocut/anaconda-ks.cfg /home/isocut_iso/openEuler-20.03-LTS-SP3-aarch64-dvd.iso /home/result/new.iso