depersonalizing Linux

ajayyadavmca · 07-17-2012, 02:55 AM

Hi, Is there a documented and predifined process for depersonalizing linux OS image?

we create image of our product which also includes OS and ship so before shipping we need to depersonalize this OS image, like removing macaddress, ssh keys, HOSTNAME etc..
this is what i know of may be more attributes to remove.

was searching on google and couldnt find much help full. please let me know any reference or way.. thanks

Used Linux OS: CentOS 6.2

Thanks

TB0ne · 07-17-2012, 09:14 AM

Quote:

Originally Posted by ajayyadavmca

Hi, Is there a documented and predifined process for depersonalizing linux OS image?
we create image of our product which also includes OS and ship so before shipping we need to depersonalize this OS image, like removing macaddress, ssh keys, HOSTNAME etc.. this is what i know of may be more attributes to remove.

was searching on google and couldnt find much help full. please let me know any reference or way.. thanks
Used Linux OS: CentOS 6.2
Thanks

No, and you won't find any documented process on this. Mainly because there's no way for ANYONE to define it. Whatever services you have on your system/image may be completely different than what anyone else has. You can put the configurations ANYWHERE, make symbolic links, etc., which will make the system unlike any other. That's up to you.

So, since you've built the custom image, you know where everything is, and what the 'etc' is that you're talking about. Only you can edit/change/document what's needed.

unSpawn · 07-17-2012, 10:57 AM

I agree. You won't find any documented process. However if you would have started the build process with some forethought you could have made a baseline (disk image or 'md5deep -r /' or used versioning) and roll back unnecessary changes. All that's left now is package verification, as in 'rpm -Vva', visual inspection of any changes plus those files not part of any package. Depending on how your product is isolated within the OS or not it may in the end be easier / more efficient / quicker to start over...

ajayyadavmca · 07-17-2012, 11:59 AM

yes make sense, let me define my requirement more clear then,

i just want to remove hostname, IP Address, gateway, dns, netmask, hw mac adress, ssh keys rest is my application specific that i will take care of. so is there a neater way to do this or i can simply remove these entries from various files in /etc ?

fazorboy · 07-17-2012, 12:03 PM

i have similar requirement, if you get your solution please let us know.

TB0ne · 07-17-2012, 03:31 PM

Quote:

Originally Posted by ajayyadavmca

yes make sense, let me define my requirement more clear then,

i just want to remove hostname, IP Address, gateway, dns, netmask, hw mac adress, ssh keys rest is my application specific that i will take care of. so is there a neater way to do this or i can simply remove these entries from various files in /etc ?

You were clear to start with...so was the answer. No, there isn't a better way to do it, other than editing those files manually. But since you only have to do it ONCE, it shouldn't be a huge task. All you're talking about is removing a few files, and editing a few others.

unSpawn · 07-17-2012, 03:34 PM

Quote:

Originally Posted by ajayyadavmca

let me define my requirement more clear then

There is no need to do that. I think we all perfectly understand what you need to do.

Quote:

Originally Posted by ajayyadavmca

so is there a neater way to do this or i can simply remove these entries from various files in /etc ?

I already suggested you how to start cleaning up. I also suggested a way that I consider neat, however your definition of "a neater way" may be different. You've seen two opinions now and the clear hint there isn't any formal process so better not push further but just do it.