X-Git-Url: http://git.annexia.org/?a=blobdiff_plain;ds=sidebyside;f=TODO;h=4b275aa4d8fe86ad6741f36d5273f6f7f4753e7e;hb=8b2ebe07c2f7a4943e6891d642850c03ba2e6b34;hp=570502ede85c248b649ef71fee4ef9d7aff8a94c;hpb=d6622d7636d592eb1c01fbcb8b8ad52c2b20615b;p=libguestfs.git

diff --git a/TODO b/TODO
index 570502e..4b275aa 100644
--- a/TODO
+++ b/TODO
@@ -537,11 +537,35 @@ virt-sysprep ideas
 ------------------
 
  - touch /.unconfigured ?
- - smolt ID
- - Spacewalk / RHN ID
+ - other Spacewalk / RHN IDs (?)
  - Kerberos keys
  - Puppet registration
  - user accounts
  - Windows sysprep
    (see: https://github.com/clalancette/oz/blob/e74ce83283d468fd987583d6837b441608e5f8f0/oz/Windows.py )
  - blue skies: change the background image
+ - (librarian suggests ...)
+   . install a firstboot script      virt-sysprep --script=/tmp/foo.sh
+   . run an external shell script
+   . run external guestfish script   virt-sysprep --fish=/tmp/foo.fish
+   . rm /var/cache/apt/archives/*
+ - /var/run/* and pam_faillock's data files
+ - homedirs/.ssh directory, especially /root/.ssh (Steve Grubb)
+ - if drives are encrypted, then dm-crypt key should be changed
+   and drives all re-encrypted
+ - /etc/pki
+   (Steve says ...)
+   Rpm uses nss. Nss sets up its crypto database in
+   /etc/pki. Depending on how long the machine ran before cloning, you
+   may have picked up some certificates or things. This is an area
+   that you would want to look into.
+ - secure erase of inodes etc using scrub (Steve Grubb)
+ - other directories that could require cleaning include:
+    /var/cache/gdm/*
+    /var/lib/fprint/*
+    /var/run/*
+    /var/lib/AccountService/users/*
+    /var/lib/sss/db/*
+    /var/lib/samba/*
+    /var/lib/samba/*/*
+  (thanks Marko Myllynen, James Antill)