xref: /freebsd/release/tools/ec2-desktop.conf (revision a9710349513f4c6ccb8bcff34fa9ea186fae6114)

#!/bin/sh

. ${WORLDDIR}/release/tools/ec2.conf

# Build with a (just under) 20 GB partition; all of the "desktop" bits
# significantly bloat the image compared with stock FreeBSD.
export VMSIZE=20000m

# Packages to install into the image we're creating.  In addition to packages
# present on all EC2 AMIs, we install:
# * amazon-ssm-agent (not enabled by default, but some users need to use
# it on systems not connected to the internet),
# * ec2-scripts, which provides a range of EC2ification startup scripts,
# * firstboot-pkg-upgrade, to install security updates at first boot,
# * firstboot-pkgs, to install packages at first boot, and
# * isc-dhcp44-client, used for IPv6 network setup, and
# * kde, to provide a useful desktop environment
# * chromium and libreoffice, to provide an office environment,
# * xorg, xrdp, and xorgxrdp, to provide the display server.
export VM_EXTRA_PACKAGES="${VM_EXTRA_PACKAGES} amazon-ssm-agent ec2-scripts \
    firstboot-pkg-upgrade firstboot-pkgs isc-dhcp44-client \
    kde chromium libreoffice xorg xrdp xorgxrdp"

# Services to enable in rc.conf(5).
export VM_RC_LIST="${VM_RC_LIST} ec2_configinit ec2_ephemeral_swap \
    ec2_fetchkey ec2_setpass ec2_loghostkey firstboot_pkg_upgrade \
    firstboot_pkgs growfs growfs_postboot sshd dbus xrdp xrdp_sesman"

vm_extra_pre_umount() {
	# Limit firstboot_pkg_upgrade to the base system.
	echo 'firstboot_pkg_upgrade_repos="FreeBSD-base"' >> ${DESTDIR}/etc/rc.conf

	# Don't allocate swap space when we first boot; that makes it
	# impossible to grow the root filesystem later.
	echo 'growfs_swap_size=0' >> ${DESTDIR}/etc/rc.conf

	# Give users a KDE desktop by default.
	sed -i '' -e '/exec.*startplasma/s/^# //' ${DESTDIR}/usr/local/etc/xrdp/startwm.sh

	# Use UID/GID _xrdp.  Disabled for now until the port supports this.
	#sed -i '' -e '/SessionSockdirGroup/s/^#//' ${DESTDIR}/usr/local/etc/xrdp/sesman.ini
	#sed -i '' -E -e '/runtime_(user|group)=_xrdp/s/^#//' ${DESTDIR}/usr/local/etc/xrdp/xrdp.ini

	# Set login password and print in encrypted form to the console.
	# This will be removed from here once it lands in the ec2-scripts port.
	install -m 755 ${WORLDDIR}/release/tools/ec2_setpass ${DESTDIR}/usr/local/etc/rc.d
        metalog_add_data ./usr/local/etc/rc.d/ec2_setpass 0755

	# Run some additional commands on first boot which won't be
	# necessary once (a) the xrdp port gains host key generation as
	# an rc.d script, and (b) pkg triggers are logged in METALOG and
	# run from a firstboot script.
	install -m 755 ${WORLDDIR}/release/tools/ec2_desktop_extras ${DESTDIR}/usr/local/etc/rc.d
	metalog_add_data ./usr/local/etc/rc.d/ec2_desktop_extras 0755

	# Any EC2 ephemeral disks seen when the system first boots will
	# be "new" disks; there is no "previous boot" when they might have
	# been seen and used already.
	touch ${DESTDIR}/var/db/ec2_ephemeral_diskseen
	metalog_add_data ./var/db/ec2_ephemeral_diskseen

	# Configuration common to all EC2 AMIs
	ec2_common

	# Standard FreeBSD network configuration
	ec2_base_networking

	# Add files from packages which weren't recorded in metalog
	metalog_add_data ./usr/local/etc/dhclient.conf
	metalog_add_data ./usr/local/etc/ssl/cert.pem

	return 0
}