0

I have a kickstart file for RHEL 6 and in the package section for the installing of the TCPdump command line utility I put tcpdump as the package name.

Like I did with java and g++ in the kickstart package installation section.

However tcpdump was not installed and there was no errrors about not finding the package in the logs, since I have narrowed it down to I must be using the wrong name since tcpdump is in the packages folder of my iso image.

Does anyone know if I am using the wrong package name to install tcpdump with kickstart and if not, why is tcpdump not installing?

This is how the kickstart file is generated kickstart interactive

Here is the kickstart file

# Kickstart file automatically generated by anaconda.

#version=DEVEL
install
cdrom
lang en_US.UTF-8
keyboard us
network --onboot yes --device eth0 --bootproto dhcp --noipv6 --hostname foo.com
network --onboot no --device eth1 --bootproto dhcp --noipv6 --hostname foo.com
rootpw  --iscrypted $6$ctcMrYm9AEKlWfnA$kcRxAfrhWXsioG7fmNlDjApHfEfIRzOpF/26y5baUzO9Ui0lyDxq1mGmya/vgg8QWb2rrK2D/ZXvjaCgVqs/M/

firewall --service=ssh
authconfig --enableshadow --passalgo=sha512
selinux --enforcing
timezone --utc America/New_York
bootloader --location=mbr --driveorder=sda --append="crashkernel=auto audit=1 rhgb rhgb quiet quiet" --password=$6$5XAx7bX3TjSpfrAn$VifzJ4djGMgF0xlkAfh3drvI7SF/ZZy9cRbF01.jyu4XDv5Bk3tLirj4u.XpGolJiHx4ZFuoZesvtuJ/1j8lJ.
# The following is the partition information you requested
# Note that any partitions you deleted are not expressed
# here so unless you clear all partitions first, this is
# not guaranteed to work
#clearpart --all --drives=sda

#part /boot --fstype=ext4 --size=1024
#part pv.008002 --grow --size=200

#volgroup vg1 --pesize=4096 pv.008002
#logvol /var/log/audit --fstype=ext4 --name=lv_audit --vgname=vg1 --grow --size=512
#logvol /home --fstype=ext4 --name=lv_home --vgname=vg1 --grow --size=1024
#logvol /var/log --fstype=ext4 --name=lv_log --vgname=vg1 --grow --size=512
#logvol / --fstype=ext4 --name=lv_root --vgname=vg1 --grow --size=2048
#logvol /tmp --fstype=ext4 --name=lv_tmp --vgname=vg1 --grow --size=512
#logvol /var --fstype=ext4 --name=lv_var --vgname=vg1 --grow --size=512


%packages
@Base
@Core
@core
aide
bzip2
cryptsetup-luks
dos2unix
dracut-fips
fipscheck
gnupg2
krb5-libs
krb5-workstation
logwatch
ntp
openscap
openscap-utils
openssh-clients
openswan
pam_krb5
rsyslog
screen
scrub
tcpdump
tpm-tools
trousers
unix2dos
unzip
virt-what
vlock
which
xml-common
xz
yum-plugin-security
yum-utils
zip
-abrt*

%end

%pre
#!/bin/bash

# Create Configurations
/bin/touch /tmp/stig-fix
/bin/touch /tmp/stig-fix-packages
/bin/touch /tmp/stig-fix-post
/bin/touch /tmp/stig-fix-post-nochroot

# Launch XWindows and menu.py to configure system
/usr/bin/Xorg -br :0 &
/usr/bin/metacity --display :0 --sm-disable &
export DISPLAY=:0
/usr/bin/python /mnt/stage2/stig-fix/menu.py
unset DISPLAY
killall metacity
killall Xorg

%end

%post --nochroot
#!/bin/bash

# Create Directory
mkdir -p /mnt/sysimage/root/stig-fix

# Firefox DISA STIG Configuration
cp /mnt/source/stig-fix/dod_firefox_config.tar.gz /mnt/sysimage/root/stig-fix/

# Copy RPMs from Install media to root
cp /mnt/source/stig-fix/*rpm /mnt/sysimage/root/stig-fix/

# Classification Banner Configuration
cp /tmp/classification-banner /mnt/sysimage/etc/classification-banner

###############################################################################
# Custom Post-Installation Scripts (nochroot)
###############################################################################

%end

%post
#!/bin/bash

# Install Firefox DISA STIG Configuration
rm -rf /root/.mozilla
rm -rf /etc/skel/.mozilla
/bin/tar xvzf /root/stig-fix/dod_firefox_config.tar.gz -C /root/
/bin/tar xvzf /root/stig-fix/dod_firefox_config.tar.gz -C /etc/skel/

# Create Repository for Local Patching
cat << EOF > /etc/yum.repos.d/rhel-dvd.repo
[rhel-dvd]
name=Red Hat Enterprise Linux - DVD
baseurl=file:///media/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
EOF

# Add Classification Banner (Graphical)
if [[ -d /etc/xdg/autostart/ ]]; then
cat << EOF > /etc/xdg/autostart/classification-banner.desktop
[Desktop Entry]
Name=Classification Banner
Exec=/usr/local/bin/classification-banner.py
Comment=User Notification for Security Level of System.
Type=Application
Encoding=UTF-8
Version=1.0
MimeType=application/python;
Categories=Utility;
X-GNOME-Autostart-enabled=true
StartupNotify=false
Terminal=false
EOF
fi

# Install Hardening Script
/usr/bin/yum localinstall -y /root/stig-fix/*rpm

# Remove nfs-utils to fix missing rpcbind package
/usr/bin/yum erase -y nfs-utils

# Clean Up
rm -rf /root/stig-fix

# Clean Yum
yum clean all &> /dev/null


###############################################################################
# Custom Post-Installation Scripts - Hardening script now called in menu.py
###############################################################################
/sbin/stig-fix -q &> /dev/null
# Use SCAP Security Guide to take a benchmark of the Installed System as a baseline
/usr/bin/oscap xccdf eval --profile stig-rhel6-server-upstream --results /root/`hostname`-ssg-results.xml --report /root/`hostname`-ssg-results.html --cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml

%end
  • Can you show your kickstart file please? – ryekayo Jun 24 '15 at 15:38
  • Well the kickstart file actually is written in python since its an interactive menu that then generates a kickstart file. Its also on github, is it ok if I like you to that? – jgr208 Jun 24 '15 at 15:39
  • It may be helpful to view both.. – ryekayo Jun 24 '15 at 15:41
  • @ryekayo ok ill link to the github file for now and get the generated kickstart file off the machine. – jgr208 Jun 24 '15 at 15:42
  • @ryekayo ok added the kickstart file – jgr208 Jun 24 '15 at 16:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.