On Tue, 2013-01-29 at 14:28 -0500, John.Florian(a)dart.biz wrote:
Stijn Hoop <stijn(a)sandcat.nl> wrote on 01/29/2013 14:20:50:
> On Tue, 29 Jan 2013 14:07:55 -0500
> John.Florian(a)dart.biz wrote:
>
> > > From: Martin Sivak <msivak(a)redhat.com>
> > > the tool will be started using systemd unit file which can be
> > > disabled. It will have to be explicit (even minimal install
needs
> > > users or root password), but we can figure something out.
> >
> > In my experience, root password is handled by the installer and
> > firstboot is not needed to configure users if puppet is being used
to
> > configure them. (Also there are many Fedora systems out there
having
> > only root and the system accounts -- i.e., no real users.) Having
to
> > disable the firstbooot systemd unit file just to get to a root
prompt
> > so that puppet can be installed would be a PITA. The whole idea
of
> > puppet is to avoid having to such things because it can automate
them.
>
> What he said -- forcing a root pw or creating users is going to be a
> PITA for us. Please add a way to disable it, preferably using
kickstart.
>
> --Stijn
I agree that it should be possible to easily disable firstboot in the
kickstart, but I also believe that one should be able to easily
sidestep firstboot after a regular install. I don't have the time to
create a kickstart for every conceivable use we have of Fedora here
(although that would clearly be my preference because then puppet
would be built in and start itself as "our firstboot and every
boot"). Presently I give users the Fedora image and then direct them
to a document that explains how to install and start puppet which does
the rest of the setup for them. It works very smoothly this way, but
only if there are very few steps between finish the install and
starting puppet.
When I install a freeipa server I do not want firstboot because I am not
going to create local users anyway. I am going to install freeipa and
then create users in LDAP.
So far I just skipped firstboot by using tricks, like telling it I was
going to configure a network server and then just canceling. But it
would be nicer if I could simply skip it.
Simo.
--
Simo Sorce * Red Hat, Inc * New York