DFFML Rolling Alice: Engineering Logs: Volume 0: Architecting Alice, 18 Oct 2022

Previous Meeting

Next Meeting

⏯

youtube image

►

From YouTube: Architecting Alice: Volume 0: Part 94: OS DecentrAlice: Packer QEMU

Description

https://github.com/intel/dffml/discussions/1406?sort=new#discussioncomment-3906159

A

All right, so we are, uh we had success with the um hacker-based image built or digitalocean um off the stream, um and uh now so, basically what we did was we took the docker file that we had for our wolfy image with Alice installed and the SSI service installed, um and then we uh just dumped that into this CH root. And then what we're going to do is we're going to configure SSH at sshd to we're going to install it within Wolfie, we'll configure it within Fedora to run the sshd from the CH root.

A

And so what we're doing right now is now that we've confirmed a Works in digital ocean. We're trying to do a qmu build here um and so we've just um we've. Just shy to we've just downloaded the latest Fedora Cloud um ISO empty.

A

um No I need this URL.

A

And we've shot 256 on it and.

A

So validating hear it builds and.

A

And X here now: let's CLI from ca for rumble p ch.

A

Ips, so that's what we're doing now.

A

Okay so yeah, so we did the shot 256, some um oh yeah, so loading the transcripts with Whisperer too but I think I'll extend we'll, probably extend it Okay. So.

A

B

B

A

And we're putting this shot 256 sum anyway, so check some and hoping that it accepts that instead of the MP5 um output directory output Centos. So it's responded because or uh there there so boot command is.

A

Tab KS fedora.

A

Six Kickstart, so this is the Kickstart okay, so this is kind of like a red hat thing, but we went from Centos to Fedora, so that should be relatively compatible there. So.

A

um Disk size, let's make that live: n gigs, yeah, okay, okay,.

A

Two great kbm, great HTTP directory path to hpeter I'm, not sure what that means. Let's go read the tutorial on the internet.

A

Open the widget.

A

Okay, well: okay, I! Guess we need to do that.

A

This is an example on my okay HTTP directory: okay campus other Builder ID transcends.qmu.

A

The Builder builds a virtual machine by creating a new virtual machine from scratch. Booting it installing in OS rebooting. The machine with the blue media is the virtual hard drive provisioning software within the OS, then shutting it down the result of the qmu Builder is a directory containing the image file necessary to run the virtual machine on KVM. Does that sound familiar? Unfortunately? Yes, but um fortunately very fortunately, yes, very fortunate, yes, um so yeah, obviously that's what we just tried to do for a long time.

A

It didn't work so now we're here and they have a working thing. Hopefully right so we're very fine. So how do we make it work all right? So here is the basic example. This example is functional so long as you fix a pass to files URLs for isos and checksums okay, so we fixed up URLs for isos and checksums, okay, so paths to files. Now that we need to do that, okay, so this is an example only and we'll timeout waiting for SSH, because we have not provided a Kickstart file.

A

Okay, that's what we just got tripped up on here right and now we're at the tutorial because we're seeing Kickstart okay, hopefully if it were still supports it, but we got to figure out what the hell is. This HTTP directory right and now we're here. So you must add um and I always say I think I think so there was something good on Twitter about this um I put in this thread.

A

Okay, oh yes and Dan here is making jokes about saying: hey. You know we have to make software developments secure by IDs default, and uh you know people are saying well, let's just make metastatic analysis tools, so we have obviously should I use metastatic now this so so we're doing we're trying to do both right. Okay, so uh asynchronous communication. It's not that! Where is it?

A

um Okay well, never mind, then all right so.

A

I'm, following book command, we recommend you check out too many templates.

B

A

So this is a good URL. This is a bunch of let's use potential dependencies rate so that we may want to use.

A

And let's put this oops on as well.

A

A

There's a python library and a python library for generated templates pack. The base build system for Centos, OS images, suitcase okay, Centos is cool. We could go through Centos, although this hasn't been maintained, so we're not going to touch that okay, so this also has been maintained. We're not going to touch that um this has been maintained. What is this? Oh, these people I've heard a lot about them recently. What is this I? Don't know?

A

um Oh yeah, never mind I'm, not gonna, try Okay, so.

A

I feel, like I, have seen this okay. So let's go check this out.

A

Is this another workflow tool? I think I probably got all I know.

A

A program: oh no! This is the item structures code that everybody apparently quit this company, okay. So all right, so we don't want to look at that. um This also has been maintained, all right so we're. Basically we're is hacker maintained.

A

Okay, I always trust them. Okay, so one helps right um so.

A

What's the time, okay, um okay! So let's just check out this box, or was this maintained.

A

Two days ago, okay, workstation server.

A

Oh, this is great.

A

Oh, but this hasn't been touched since okay, they're templates.

A

Provided for reference episode? Okay, so that's ISO checks, number type. Okay, so that's helpful.

A

It says anything, so it's not it's not online about what it is okay, so this is great. We can build workstations and server. Okay, wow, okay. This is fantastic and it's not really maintained, but it doesn't really matter because it's just a stable API, so.

A

A

No strong signs, maintenance.

A

Okay did I even check the PRS yeah, no, there's no PRS so, and these issues are from 2018 right so, um and this is all like the down the dependency radical talk, so uh so no strong signs of Maintenance but uh stable apis hacker apis.

A

Stable uh and templates provided are.

A

uh You know pinned versions, okay, great, um so let's go and grab this.

A

Let's just do permalink.

B

A

Then we want the associated Kickstart right, so that was Fedora.

B

A

Hdp, okay, so here it is so what did we do? Did we do 29, okay, so 29 server, config, okay,.

A

Okay, so and then that's server, so.

A

All right, so, let's do a Workstation 2., okay great, so we have all the configs we need right. So, let's see what are they doing with the http script, Okay, so sshd Okay. So.

A

That's good rely on is that for God's sake? Is that any other buddies? Okay.

A

um Okay yeah: this is good, so.

A

Because we want to do this is obviously you saw it put the banner there um so.

A

What is this I would assume it's like MIT or something it's a patchy too great.

A

Okay, so what are these issues.

A

All this is just old versions of stuff. You know and it's very clear about what we update so okay. So what is this update? um Okay, yeah so update. So where are you running these scripts um custom script?

A

Okay, should we could read the readme? um It's actually it's an idea, all right! So pandora.json.json.

A

What is this? Okay.

B

So this is the.

A

Template this is the template. Okay, all right, we could have just read the readme, um that's why it's called that so build with Packer Builder and then so. The builders is all templated and this is fantastic. Thank you. Oh look at that. It even has virtual blocks.

A

In case that's needed parallels in case that's needed Okay, so, okay, so I just check some.

A

Variables, okay, so all right, okay, so this is the main file, basically so e and the HTTP proxies grabs all the proxies helpful okay, so CPUs virtualbox VMware guest type, okay. So what we need to do is make sure this curium, okay, so and here's the scripts right.

A

So that's great! So we can just do that. So, let's just clone this.

A

A

A

B

A

So you can just pass in old. Only virtualbox I so far is wow. You just pass it just the one you want, so we just need to do just the one we want, so we can do only virtual Bots ISO okay, so we don't care about perfect.

A

So where is that in the files so.

A

Bigger box is fully paper boxes make file proxy settings, so second favorite proxies finally got there. We go um build all the boxes, blah blah blah okay. So we don't care about that. We want to modify these okay, so let's do vars file first. So let's grab.

A

S right um and what did we call this.

A

A

Yeah, okay, so we'll grab out of here. Okay, so.

A

We're just gonna build this. We're gonna build this because we know it builds Fedora first and then we're gonna try to figure it out so yeah so, but this is the let's just modify it, but except the door on God Json Builders. So let's try to modify the fedori Json Builder.

A

A

Okay, so now it's here so now, Boot command.

A

Okay! So, let's see which one of these overlap.

A

Okay, we can delete that Let Me Wait, okay, 10 seconds, okay,.

B

Let's delete that all right.

A

Now, let's, let's keep um basic disk interface vertio, we'll keep that okay, VM name VM name that exists okay, so net device, that's probably not going to exist. Foreign.

A

Click on command.

A

Directory we got some bad things like this, so we need that so check some okay, so these are going to be defined so typing you know okay, so we pull those all right. So we pull the iso URL and the iso check.

A

Oh because I just pulled some.

A

So that's way up there.

A

A

Just updated right with that into our clock base and so type qmu, okay, but.

A

For uh yeah I'll put fedora.

A

I'm waiting on ISO, urls, okay, yes or no, but we're gonna, take that with us. We're gonna I mean like we're: gonna cut and paste it. Okay, so V on my guest.

A

But we don't care about that. Headless I! Don't think we care about that, let's be specific to the other one. Okay, so.

A

Type. Okay, so it's not that it's it's giving you now.

A

So VM name is a thing: okay and then BMX that's going to be a vmx data to memory and CPUs. So that's probably going to be.

A

All right, okay, so we just want that to be.

A

Okay and then this is the qme reference we have and then uh CPUs.

A

So that looks pretty good for me um so that uses all the variables has existed: output, pedora and then, let's make sure to put that VM name on there.

A

Okay, emu Q Cat 2, KVM birthday, overdeo, VM, name, Memory, CPUs, output, Fedora.

B

A

2 mu, SSH timeout 1000 seconds: that's obscene root, wait 10 seconds, also obscene okay, fantastic! So then what we're going to do is we're going to copy CP fedora okay. So let's go back to that.

A

So the door of 28. server.

A

36 Cloud Json.

A

Now, where I put those here.

A

So 256., so we delete the checks on.

A

Pick some URL okay, so for Fedora Cloud base 36 right. They updated checksum, Shaw, okay, ISO name server; net, install.

A

I, don't like that: okay, um I! Don't love that okay, we'll see how that goes.

A

Let's just name it whatever we wanted, so the net install image.

A

It seems to do like a live image.

A

I, don't know it's meant for installing, so I don't know um Okay so.

A

Maybe it's probably because existing infrastructure tools for Server work with that okay, so build only virtualbox, ISO okay, so this is 36 disc size. Five thousand and CPU is one okay. So.

B

That looks good.

A

Okay, so let's give it more: okay, let's give it so.

B

A

Break if we install like a profit or whatever I think it breaks it, two cakes so, but uh we'll we'll cross that bridge when we get there so.

A

So, let's try to do big crap outside so right, so do I attack, Json type box, ISO.

A

A

A

Let's check out that file again.

A

Okay, okay, so which box outside all right so hearing you.

A

All right so we're gonna run it with only hearing the MU February 36.

B

A

Iso check some type.

A

Okay, so these are old.

A

So because you said we have a syntax.

A

To drop, this is a separate fields.

A

Invalid checks on.

A

Okay, so it assumes after 56 already.

A

A

A

B

Added that our.

A

36 5 support to box cutter Fedora backer.

C

All right, okay,.

A

Oh wait: wait. Let me see if this works. Oh no! Look at that all right! Okay, those are tabs set paste.

A

Okay, how are we doing it.

C

Wow, what is that.

A

All right: well, that's nice.

B

B

A

Go check this out.

A

So let's go grab Banner.

A

Right, let's find out what the shot it could be. Six sum is.

A

C

B

C

A

Set e on that because it's being run with bash b- u x, so hopefully that's actually happening.

B

A

A

You're going all right.

A

A

All right so now that's safety.

B

A

Right and okay, so Banner contents of the specified file are sent to the remote uses. A banner.

B

A

I'll just run this: it's gonna curl.

A

Curl well, if this thing's complex, okay,.

A

A

So we download.

A

So we download the banner.

A

We checked the shot for 256 some and we enable the banner.

A

So hopefully that works.

C

A

No, it didn't work.

A

A

Gtk English initialization failed, okay, well, yeah I mean don't worry using gtk okay. So basically it's trying to start um headless. Okay, yeah, why? Why is this not defaulting to True Okay? So.

A

All right, so we need to set this headless.

A

A

A

This is what it would be nice to automate.

A

A

Okay, all right I didn't like that.

C

Variables headless.

A

All right, that's already getting turned into the spring there see if we can do that.

A

That makes me upset all right.

A

I, don't like that.

A

A

B

A

Not so sure, if it's gonna work.

A

A

No, it's still the VNC. Why are you doing that.

A

It's we said headless I feel like I said. This means fancy.

A

See this is the not a business you want to be in I mean I'm, glad they're in the business of Packers in the business of providing scripts like this, but this is just this is just this stuff. This boot stuff is not fun. Ction.

A

Oh, come on come on, come on, did I paste that in here.

A

Okay, so that has the.

B

A

Okay, so it's not looking like it's liking, the SSH.

A

A

But this Kickstart config is wrong.

A

Is it server, okay, I guess? Well, let's do server, then, okay, so um yeah, okay, so yeah I knew that was gonna, be a problem. Okay. So let's do server because I don't know if Cloud will take the kicks or well maybe it will. Maybe we just provided the wrong thing.

A

A

This is installing vagrant.

C

A

Let's try this.

B

A

You must add a valid Kickstart file.

A

Okay, so there must be a thing. So then we must want the other Fedora image.

A

A

It's probably the one for vagrant all right: let's try it again.

B

A

I'm not optimistic about a DOT box. Extension I, don't know what that means.

A

Can we just, can we just do the virtual box build convert it to qco2.

A

Let's just build the virtualbox one and see if it works in a convert. It Q Capt.

A

A

A

A

Leopard box is great.

A

A

A

Six that says: oh, it's too fast, not on this computer.

A

Okay, um download the shot six sums. Let me verify the shot. 256 sums.

C

A

Okay, yes, it's okay, it's only half is okay, the rest do not exist so.