From f25d094d0652e8dedff206ca56671b3548f755ff Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Thu, 17 Sep 2026 15:05:37 +0100
Subject: Add a disposable Canonical desktop test VM

---
 scripts/canonical-vm-install.sh | 50 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100644 scripts/canonical-vm-install.sh

(limited to 'scripts/canonical-vm-install.sh')

diff --git a/scripts/canonical-vm-install.sh b/scripts/canonical-vm-install.sh
new file mode 100644
index 0000000..177d06e
--- /dev/null
+++ b/scripts/canonical-vm-install.sh
@@ -0,0 +1,50 @@
+#!/bin/bash
+set -euo pipefail
+systemd-detect-virt --vm --quiet
+test -f /cdrom/lab/owner
+
+mount_config() {
+  mkdir -p "$1"
+  modprobe 9pnet_virtio
+  mount -t 9p config "$1" -o access=0,trans=virtio ||
+    mount -t virtiofs config "$1"
+}
+
+if [ "${1:-}" = live ]; then
+  mount_config /mnt/lxd-agent
+  (cd /mnt/lxd-agent && ./install.sh)
+  umount /mnt/lxd-agent
+  systemctl start lxd-agent
+  exit 0
+fi
+
+test -d /target/etc
+install -m 600 /cdrom/lab/owner /target/etc/canonical-lab
+install -m 600 /cdrom/lab/disk-password /target/root/lab-unlock.key
+# The disposable guest stores its unlock key in the unencrypted initramfs.
+awk 'NF && $1 !~ /^#/ {$3="/root/lab-unlock.key"} {print}' \
+  /target/etc/crypttab >/target/etc/crypttab.lab
+mv /target/etc/crypttab.lab /target/etc/crypttab
+mkdir -p /target/etc/dracut.conf.d
+printf 'install_items+=" /root/lab-unlock.key "\n' >/target/etc/dracut.conf.d/99-canonical-lab.conf
+printf 'canonical-test ALL=(ALL:ALL) NOPASSWD:ALL\n' >/target/etc/sudoers.d/canonical-lab
+chmod 440 /target/etc/sudoers.d/canonical-lab
+printf '[daemon]\nAutomaticLoginEnable=True\nAutomaticLogin=canonical-test\n' >/target/etc/gdm3/custom.conf
+printf 'PermitRootLogin no\nPasswordAuthentication no\nAllowAgentForwarding no\n' >/target/etc/ssh/sshd_config.d/00-canonical-lab.conf
+printf 'APT::Get::Assume-Yes "true";\n' >/target/etc/apt/apt.conf.d/99canonical-lab
+mkdir -p /target/etc/dconf/profile /target/etc/dconf/db/canonical-lab.d/locks
+if ! test -f /target/etc/dconf/profile/user; then
+  printf 'user-db:user\n' >/target/etc/dconf/profile/user
+fi
+printf 'system-db:canonical-lab\n' >>/target/etc/dconf/profile/user
+printf '[org/gnome/desktop/interface]\nclock-show-weekday=false\n' >/target/etc/dconf/db/canonical-lab.d/00-settings
+printf '/org/gnome/desktop/interface/clock-show-weekday\n' >/target/etc/dconf/db/canonical-lab.d/locks/test
+curtin in-target --target=/target -- dconf update
+
+mount_config /target/mnt/lxd-agent
+curtin in-target --target=/target -- bash -c 'cd /mnt/lxd-agent && ./install.sh'
+umount /target/mnt/lxd-agent
+curtin in-target --target=/target -- update-initramfs -u -k all
+# shellcheck disable=SC2016
+curtin in-target --target=/target -- bash -ec \
+  'for image in /boot/initrd.img-*; do lsinitrd "$image" | grep -F root/lab-unlock.key; done'
-- 
cgit v1.3.1