| 1 | #### Contents of the preconfiguration file (for &releasename;) |
|---|
| 2 | ### Localization |
|---|
| 3 | # Locale sets language and country. |
|---|
| 4 | d-i debian-installer/locale string en_US |
|---|
| 5 | |
|---|
| 6 | # Keyboard selection. |
|---|
| 7 | #d-i console-tools/archs select at |
|---|
| 8 | d-i console-keymaps-at/keymap select us |
|---|
| 9 | # Example for a different keyboard architecture |
|---|
| 10 | #d-i console-keymaps-usb/keymap select mac-usb-us |
|---|
| 11 | |
|---|
| 12 | ### Network configuration |
|---|
| 13 | # netcfg will choose an interface that has link if possible. This makes it |
|---|
| 14 | # skip displaying a list if there is more than one interface. |
|---|
| 15 | d-i netcfg/choose_interface select auto |
|---|
| 16 | |
|---|
| 17 | # To pick a particular interface instead: |
|---|
| 18 | #d-i netcfg/choose_interface select eth1 |
|---|
| 19 | |
|---|
| 20 | # If you have a slow dhcp server and the installer times out waiting for |
|---|
| 21 | # it, this might be useful. |
|---|
| 22 | #d-i netcfg/dhcp_timeout string 60 |
|---|
| 23 | |
|---|
| 24 | # If you prefer to configure the network manually, uncomment this line and |
|---|
| 25 | # the static network configuration below. |
|---|
| 26 | #d-i netcfg/disable_dhcp boolean true |
|---|
| 27 | |
|---|
| 28 | # If you want the preconfiguration file to work on systems both with and |
|---|
| 29 | # without a dhcp server, uncomment these lines and the static network |
|---|
| 30 | # configuration below. |
|---|
| 31 | #d-i netcfg/dhcp_failed note |
|---|
| 32 | #d-i netcfg/dhcp_options select Configure network manually |
|---|
| 33 | |
|---|
| 34 | # Static network configuration. |
|---|
| 35 | #d-i netcfg/get_nameservers string 192.168.1.1 |
|---|
| 36 | #d-i netcfg/get_ipaddress string 192.168.1.42 |
|---|
| 37 | #d-i netcfg/get_netmask string 255.255.255.0 |
|---|
| 38 | #d-i netcfg/get_gateway string 192.168.1.1 |
|---|
| 39 | #d-i netcfg/confirm_static boolean true |
|---|
| 40 | |
|---|
| 41 | # Any hostname and domain names assigned from dhcp take precedence over |
|---|
| 42 | # values set here. However, setting the values still prevents the questions |
|---|
| 43 | # from being shown, even if values come from dhcp. |
|---|
| 44 | d-i netcfg/get_hostname string unassigned-hostname |
|---|
| 45 | d-i netcfg/get_domain string unassigned-domain |
|---|
| 46 | |
|---|
| 47 | # Disable that annoying WEP key dialog. |
|---|
| 48 | d-i netcfg/wireless_wep string |
|---|
| 49 | # The wacky dhcp hostname that some ISPs use as a password of sorts. |
|---|
| 50 | #d-i netcfg/dhcp_hostname string radish |
|---|
| 51 | |
|---|
| 52 | # If non-free firmware is needed for the network or other hardware, you can |
|---|
| 53 | # configure the installer to always try to load it, without prompting. Or |
|---|
| 54 | # change to false to disable asking. |
|---|
| 55 | #d-i hw-detect/load_firmware boolean true |
|---|
| 56 | |
|---|
| 57 | ### Mirror settings |
|---|
| 58 | # If you select ftp, the mirror/country string does not need to be set. |
|---|
| 59 | #d-i mirror/protocol string ftp |
|---|
| 60 | d-i mirror/country string manual |
|---|
| 61 | d-i mirror/http/hostname string debian.lcs.mit.edu |
|---|
| 62 | d-i mirror/http/directory string /debian |
|---|
| 63 | d-i mirror/http/proxy string |
|---|
| 64 | |
|---|
| 65 | # Suite to install. |
|---|
| 66 | #d-i mirror/suite string testing |
|---|
| 67 | # Suite to use for loading installer components (optional). |
|---|
| 68 | #d-i mirror/udeb/suite string testing |
|---|
| 69 | |
|---|
| 70 | ### Clock and time zone setup |
|---|
| 71 | # Controls whether or not the hardware clock is set to UTC. |
|---|
| 72 | d-i clock-setup/utc boolean true |
|---|
| 73 | |
|---|
| 74 | # You may set this to any valid setting for $TZ; see the contents of |
|---|
| 75 | # /usr/share/zoneinfo/ for valid values. |
|---|
| 76 | d-i time/zone string US/Eastern |
|---|
| 77 | |
|---|
| 78 | # Controls whether to use NTP to set the clock during the install |
|---|
| 79 | d-i clock-setup/ntp boolean true |
|---|
| 80 | # NTP server to use. The default is almost always fine here. |
|---|
| 81 | #d-i clock-setup/ntp-server string ntp.example.com |
|---|
| 82 | |
|---|
| 83 | ### Partitioning |
|---|
| 84 | # If the system has free space you can choose to only partition that space. |
|---|
| 85 | #d-i partman-auto/init_automatically_partition select biggest_free |
|---|
| 86 | |
|---|
| 87 | # Alternatively, you can specify a disk to partition. The device name must |
|---|
| 88 | # be given in traditional non-devfs format. |
|---|
| 89 | # Note: A disk must be specified, unless the system has only one disk. |
|---|
| 90 | # For example, to use the first SCSI/SATA hard disk: |
|---|
| 91 | #d-i partman-auto/disk string /dev/sda |
|---|
| 92 | # In addition, you'll need to specify the method to use. |
|---|
| 93 | # The presently available methods are: "regular", "lvm" and "crypto" |
|---|
| 94 | d-i partman-auto/method string regular |
|---|
| 95 | |
|---|
| 96 | # If one of the disks that are going to be automatically partitioned |
|---|
| 97 | # contains an old LVM configuration, the user will normally receive a |
|---|
| 98 | # warning. This can be preseeded away... |
|---|
| 99 | d-i partman-lvm/device_remove_lvm boolean true |
|---|
| 100 | # The same applies to pre-existing software RAID array: |
|---|
| 101 | d-i partman-md/device_remove_md boolean true |
|---|
| 102 | # And the same goes for the confirmation to write the lvm partitions. |
|---|
| 103 | d-i partman-lvm/confirm boolean true |
|---|
| 104 | |
|---|
| 105 | # You can choose one of the three predefined partitioning recipes: |
|---|
| 106 | # - atomic: all files in one partition |
|---|
| 107 | # - home: separate /home partition |
|---|
| 108 | # - multi: separate /home, /usr, /var, and /tmp partitions |
|---|
| 109 | d-i partman-auto/choose_recipe select atomic |
|---|
| 110 | |
|---|
| 111 | # Or provide a recipe of your own... |
|---|
| 112 | # The recipe format is documented in the file devel/partman-auto-recipe.txt. |
|---|
| 113 | # If you have a way to get a recipe file into the d-i environment, you can |
|---|
| 114 | # just point at it. |
|---|
| 115 | #d-i partman-auto/expert_recipe_file string /hd-media/recipe |
|---|
| 116 | |
|---|
| 117 | # If not, you can put an entire recipe into the preconfiguration file in one |
|---|
| 118 | # (logical) line. This example creates a small /boot partition, suitable |
|---|
| 119 | # swap, and uses the rest of the space for the root partition: |
|---|
| 120 | #d-i partman-auto/expert_recipe string \ |
|---|
| 121 | # boot-root :: \ |
|---|
| 122 | # 40 50 100 ext3 \ |
|---|
| 123 | # $primary{ } $bootable{ } \ |
|---|
| 124 | # method{ format } format{ } \ |
|---|
| 125 | # use_filesystem{ } filesystem{ ext3 } \ |
|---|
| 126 | # mountpoint{ /boot } \ |
|---|
| 127 | # . \ |
|---|
| 128 | # 500 10000 1000000000 ext3 \ |
|---|
| 129 | # method{ format } format{ } \ |
|---|
| 130 | # use_filesystem{ } filesystem{ ext3 } \ |
|---|
| 131 | # mountpoint{ / } \ |
|---|
| 132 | # . \ |
|---|
| 133 | # 64 512 300% linux-swap \ |
|---|
| 134 | # method{ swap } format{ } \ |
|---|
| 135 | # . |
|---|
| 136 | |
|---|
| 137 | # This makes partman automatically partition without confirmation, provided |
|---|
| 138 | # that you told it what to do using one of the methods above. |
|---|
| 139 | d-i partman/confirm_write_new_label boolean true |
|---|
| 140 | d-i partman/choose_partition select finish |
|---|
| 141 | d-i partman/confirm boolean true |
|---|
| 142 | d-i partman/confirm_nooverwrite true |
|---|
| 143 | d-i partman/confirm_changes true |
|---|
| 144 | |
|---|
| 145 | ### Base system installation |
|---|
| 146 | # Select the initramfs generator used to generate the initrd for 2.6 kernels. |
|---|
| 147 | #d-i base-installer/kernel/linux/initramfs-generators string yaird |
|---|
| 148 | |
|---|
| 149 | # The kernel image (meta) package to be installed; "none" can be used if no |
|---|
| 150 | # kernel is to be installed. |
|---|
| 151 | #d-i base-installer/kernel/image string linux-image-2.6-486 |
|---|
| 152 | |
|---|
| 153 | ### Account setup |
|---|
| 154 | # Skip creation of a root account (normal user account will be able to |
|---|
| 155 | # use sudo). |
|---|
| 156 | d-i passwd/root-login boolean true |
|---|
| 157 | # Alternatively, to skip creation of a normal user account. |
|---|
| 158 | #d-i passwd/make-user boolean false |
|---|
| 159 | |
|---|
| 160 | # Root password, either in clear text |
|---|
| 161 | #d-i passwd/root-password password r00tme |
|---|
| 162 | #d-i passwd/root-password-again password r00tme |
|---|
| 163 | # or encrypted using an MD5 hash. |
|---|
| 164 | d-i passwd/root-password-crypted password $6$uMLoB4sx$Yb5Lc2QuKmc0gXQqiJcRNB45NYJvUjGAmdUjncUkm6N4Lxq1qm6KvmBYECtOxl35zyj3e/4p2C/bd1l.chkqN. |
|---|
| 165 | |
|---|
| 166 | # To create a normal user account. |
|---|
| 167 | #d-i passwd/user-fullname string Debian User |
|---|
| 168 | d-i passwd/user-fullname string Test User |
|---|
| 169 | #d-i passwd/username string debian |
|---|
| 170 | d-i passwd/username string testuser |
|---|
| 171 | # Normal user's password, either in clear text |
|---|
| 172 | #d-i passwd/user-password password insecure |
|---|
| 173 | #d-i passwd/user-password-again password insecure |
|---|
| 174 | # or encrypted using an MD5 hash. |
|---|
| 175 | #d-i passwd/user-password-crypted password [MD5 hash] |
|---|
| 176 | d-i passwd/user-password-crypted password * |
|---|
| 177 | # Create the first user with the specified UID instead of the default. |
|---|
| 178 | #d-i passwd/user-uid string 1010 |
|---|
| 179 | |
|---|
| 180 | # The user account will be added to some standard initial groups. To |
|---|
| 181 | # override that, use this. |
|---|
| 182 | #d-i passwd/user-default-groups string audio cdrom video |
|---|
| 183 | |
|---|
| 184 | ### Apt setup |
|---|
| 185 | # You can choose to install non-free and contrib software. |
|---|
| 186 | #d-i apt-setup/non-free boolean true |
|---|
| 187 | #d-i apt-setup/contrib boolean true |
|---|
| 188 | # Uncomment this if you don't want to use a network mirror. |
|---|
| 189 | #d-i apt-setup/use_mirror boolean false |
|---|
| 190 | # Select which update services to use; define the mirrors to be used. |
|---|
| 191 | # Values shown below are the normal defaults. |
|---|
| 192 | #d-i apt-setup/services-select multiselect security, volatile |
|---|
| 193 | #d-i apt-setup/security_host string security.debian.org |
|---|
| 194 | #d-i apt-setup/volatile_host string volatile.debian.org |
|---|
| 195 | |
|---|
| 196 | # Additional repositories, local[0-9] available |
|---|
| 197 | #d-i apt-setup/local0/repository string \ |
|---|
| 198 | # http://local.server/debian stable main |
|---|
| 199 | #d-i apt-setup/local0/comment string local server |
|---|
| 200 | # Enable deb-src lines |
|---|
| 201 | #d-i apt-setup/local0/source boolean true |
|---|
| 202 | # URL to the public key of the local repository; you must provide a key or |
|---|
| 203 | # apt will complain about the unauthenticated repository and so the |
|---|
| 204 | # sources.list line will be left commented out |
|---|
| 205 | #d-i apt-setup/local0/key string http://local.server/key |
|---|
| 206 | |
|---|
| 207 | # By default the installer requires that repositories be authenticated |
|---|
| 208 | # using a known gpg key. This setting can be used to disable that |
|---|
| 209 | # authentication. Warning: Insecure, not recommended. |
|---|
| 210 | #d-i debian-installer/allow_unauthenticated string true |
|---|
| 211 | |
|---|
| 212 | ### Package selection |
|---|
| 213 | tasksel tasksel/first multiselect standard |
|---|
| 214 | #tasksel tasksel/first multiselect standard, web-server |
|---|
| 215 | # If the desktop task is selected, install the kde and xfce desktops |
|---|
| 216 | # instead of the default gnome desktop. |
|---|
| 217 | #tasksel tasksel/desktop multiselect kde, xfce |
|---|
| 218 | |
|---|
| 219 | # Individual additional packages to install |
|---|
| 220 | d-i pkgsel/include string hibernate openssh-server nvi strace ltrace build-essential krb5-user krb5-admin-server libhesiod0 libx11-6 libx11-data libxau6 libxcb-xlib0 libxcb1 libxdmcp6 libc-ares2 portmap- console-tools- vim-common- nano- exim4- cron- at- |
|---|
| 221 | #d-i pkgsel/include string openssh-server build-essential |
|---|
| 222 | # Whether to upgrade packages after debootstrap. |
|---|
| 223 | # Allowed values: none, safe-upgrade, full-upgrade |
|---|
| 224 | #d-i pkgsel/upgrade select none |
|---|
| 225 | |
|---|
| 226 | # Some versions of the installer can report back on what software you have |
|---|
| 227 | # installed, and what software you use. The default is not to report back, |
|---|
| 228 | # but sending reports helps the project determine what software is most |
|---|
| 229 | # popular and include it on CDs. |
|---|
| 230 | #popularity-contest popularity-contest/participate boolean false |
|---|
| 231 | |
|---|
| 232 | ### Boot loader installation |
|---|
| 233 | # Grub is the default boot loader (for x86). If you want lilo installed |
|---|
| 234 | # instead, uncomment this: |
|---|
| 235 | #d-i grub-installer/skip boolean true |
|---|
| 236 | # To also skip installing lilo, and install no bootloader, uncomment this |
|---|
| 237 | # too: |
|---|
| 238 | #d-i lilo-installer/skip boolean true |
|---|
| 239 | |
|---|
| 240 | # This is fairly safe to set, it makes grub install automatically to the MBR |
|---|
| 241 | # if no other operating system is detected on the machine. |
|---|
| 242 | d-i grub-installer/only_debian boolean true |
|---|
| 243 | |
|---|
| 244 | # This one makes grub-installer install to the MBR if it also finds some other |
|---|
| 245 | # OS, which is less safe as it might not be able to boot that other OS. |
|---|
| 246 | d-i grub-installer/with_other_os boolean true |
|---|
| 247 | |
|---|
| 248 | # Alternatively, if you want to install to a location other than the mbr, |
|---|
| 249 | # uncomment and edit these lines: |
|---|
| 250 | #d-i grub-installer/only_debian boolean false |
|---|
| 251 | #d-i grub-installer/with_other_os boolean false |
|---|
| 252 | #d-i grub-installer/bootdev string (hd0,0) |
|---|
| 253 | # To install grub to multiple disks: |
|---|
| 254 | #d-i grub-installer/bootdev string (hd0,0) (hd1,0) (hd2,0) |
|---|
| 255 | |
|---|
| 256 | # Optional password for grub, either in clear text |
|---|
| 257 | #d-i grub-installer/password password r00tme |
|---|
| 258 | #d-i grub-installer/password-again password r00tme |
|---|
| 259 | # or encrypted using an MD5 hash, see grub-md5-crypt(8). |
|---|
| 260 | #d-i grub-installer/password-crypted password [MD5 hash] |
|---|
| 261 | |
|---|
| 262 | ### Finishing up the installation |
|---|
| 263 | # During installations from serial console, the regular virtual consoles |
|---|
| 264 | # (VT1-VT6) are normally disabled in /etc/inittab. Uncomment the next |
|---|
| 265 | # line to prevent this. |
|---|
| 266 | #d-i finish-install/keep-consoles boolean true |
|---|
| 267 | |
|---|
| 268 | # Avoid that last message about the install being complete. |
|---|
| 269 | d-i finish-install/reboot_in_progress note |
|---|
| 270 | |
|---|
| 271 | # This will prevent the installer from ejecting the CD during the reboot, |
|---|
| 272 | # which is useful in some situations. |
|---|
| 273 | #d-i cdrom-detect/eject boolean false |
|---|
| 274 | |
|---|
| 275 | # This is how to make the installer shutdown when finished, but not |
|---|
| 276 | # reboot into the installed system. |
|---|
| 277 | #d-i debian-installer/exit/halt boolean true |
|---|
| 278 | # This will power off the machine instead of just halting it. |
|---|
| 279 | #d-i debian-installer/exit/poweroff boolean true |
|---|
| 280 | d-i debian-installer/exit/poweroff boolean true |
|---|
| 281 | |
|---|
| 282 | ### Preseeding other packages |
|---|
| 283 | # Depending on what software you choose to install, or if things go wrong |
|---|
| 284 | # during the installation process, it's possible that other questions may |
|---|
| 285 | # be asked. You can preseed those too, of course. To get a list of every |
|---|
| 286 | # possible question that could be asked during an install, do an |
|---|
| 287 | # installation, and then run these commands: |
|---|
| 288 | # debconf-get-selections --installer > file |
|---|
| 289 | # debconf-get-selections >> file |
|---|
| 290 | |
|---|
| 291 | |
|---|
| 292 | #### Advanced options |
|---|
| 293 | ### Running custom commands during the installation |
|---|
| 294 | # d-i preseeding is inherently not secure. Nothing in the installer checks |
|---|
| 295 | # for attempts at buffer overflows or other exploits of the values of a |
|---|
| 296 | # preconfiguration file like this one. Only use preconfiguration files from |
|---|
| 297 | # trusted locations! To drive that home, and because it's generally useful, |
|---|
| 298 | # here's a way to run any shell command you'd like inside the installer, |
|---|
| 299 | # automatically. |
|---|
| 300 | |
|---|
| 301 | # This first command is run as early as possible, just after |
|---|
| 302 | # preseeding is read. |
|---|
| 303 | #d-i preseed/early_command string anna-install some-udeb |
|---|
| 304 | |
|---|
| 305 | # This command is run just before the install finishes, but when there is |
|---|
| 306 | # still a usable /target directory. You can chroot to /target and use it |
|---|
| 307 | # directly, or use the apt-install and in-target commands to easily install |
|---|
| 308 | # packages and run commands in the target system. |
|---|
| 309 | #d-i preseed/late_command string apt-install zsh; in-target chsh -s /bin/zsh |
|---|
| 310 | d-i preseed/late_command string mkdir -p /target/root/.ssh; echo @TEST_KEY@ > /target/root/.ssh/authorized_keys; cp -rp /target/root/.ssh /target/home/testuser; in-target chown -R testuser /home/testuser/.ssh |
|---|
| 311 | |
|---|
| 312 | # Sam, does this really need to be critical? |
|---|
| 313 | krb5-config krb5-config/default_realm string EXAMPLE.COM |
|---|