Automatically integrate Vagrant-built VMs into VMWare ESXi and Active Directory

2021-08-05 15:49:00

I've been using Vagrant to build new VMs in my homelab, which saves me a boat-load of time. Afterwards I still needed to do a few manual tasks, to make sure the VMs integrate nicely into my Active Directory and my VMWare ESXi server. 

With a bit of fiddling, while setting up the Kubernetes cluster, I came to a pretty decent Vagrant provisioning script. It does the following:

• Install and activate open-vm-tools, for ESXi.
• Install all dependencies for AD-integration with realmd and sssd.
• Configured the host profile (OS and version), which end up in AD's records.
• Does an unattended join to the AD-domain, using realm.
  • BAD NEWS: this requires a hard-coded passwords!
• Configures SSSD to match my AD-domain, the way I want my system to work.
• Enables sssd and realmd. Then restarts them both.

The spots with ${MYUSER} and ${MYPASSWORD} are a privileged domain admin account. 

apt-get install -y open-vm-tools

systemctl enable open-vm-tools

systemctl start open-vm-tools


apt-get install -y oddjob oddjob-mkhomedir sssd sssd-tools realmd adcli \

samba-common-bin sssd-tools sssd libnss-sss libpam-sss adcli policykit-1 \

packagekit


cp /vagrant/realmd.conf /etc/realmd.conf

realm join --unattended --user ${MYUSER} corp.broehaha.nl <<< ${MYPASSWORD}


echo "sudoers: files sss" >> /etc/nsswitch.conf

cp /vagrant/sssd.conf /etc/sssd/sssd.conf


cat >> /etc/ssh/sshd_config << EOF

AllowGroups linux-login

AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys

AuthorizedKeysCommandUser nobody

EOF


systemctl enable sssd realmd ssh

systemctl restart sssd realmd

kilala.nl tags: work, studies,

View or add comments (curr. 0)