X-Git-Url: http://git.annexia.org/?p=libguestfs.git;a=blobdiff_plain;f=TODO;h=bb9af7836dbf235298f8374676c1b2fd29b4887e;hp=7a4c3675e46e57daf08c3246928ca63cf15df2a5;hb=f6db819081a47b038d473cc1c1fd9743410c42a9;hpb=fa13b2838fd32854a4b2c6a5fff47e17a72294fb

diff --git a/TODO b/TODO
index 7a4c367..bb9af78 100644
--- a/TODO
+++ b/TODO
@@ -532,3 +532,53 @@ libosinfo mappings for virt-inspector
 -------------------------------------
 
 Return libosinfo mappings from inspection API.
+
+virt-sysprep ideas
+------------------
+
+ - touch /.unconfigured ?
+ - smolt ID
+ - Spacewalk / RHN ID
+ - Kerberos keys
+ - Puppet registration
+ - user accounts
+ - Windows sysprep
+   (see: https://github.com/clalancette/oz/blob/e74ce83283d468fd987583d6837b441608e5f8f0/oz/Windows.py )
+ - blue skies: change the background image
+ - (librarian suggests ...)
+   . install a firstboot script      virt-sysprep --script=/tmp/foo.sh
+   . run an external shell script
+   . run external guestfish script   virt-sysprep --fish=/tmp/foo.fish
+   . rm /var/cache/apt/archives/*deb
+ - log files (thanks Steve Grubb)
+   . as well as the obvious log files, also
+     utmp/wtmp/btmp/tallylog and pam_faillock's data files
+ - RNG seed (Steve Grubb)
+ - homedirs/.ssh directory, especially /root/.ssh (Steve Grubb)
+ - if drives are encrypted, then dm-crypt key should be changed
+   and drives all re-encrypted
+ - /etc/pki
+   (Steve says ...)
+   Rpm uses nss. Nss sets up its crypto database in
+   /etc/pki. Depending on how long the machine ran before cloning, you
+   may have picked up some certificates or things. This is an area
+   that you would want to look into.
+ - secure erase of inodes etc using scrub (Steve Grubb)
+ - touch /.autorelabel if we create any new files (thanks Dan Berrange)
+ - should we use guestmount instead of guestfish
+   and would that make it easier to run the tool inside VMs?
+ - other directories that could require cleaning include:
+    /var/lib/dhcpd/*
+    /var/lib/dhclient/*
+    /var/cache/gdm/*
+    /var/lib/fprint/*
+    /var/run/*
+    /var/spool/mail/*
+    /var/spool/cron/*
+    /var/lib/AccountService/users/*
+    /var/cache/yum/*
+    /var/lib/yum/*   (only /var/lib/yum/uuid)
+    /var/lib/sss/db/*
+    /var/lib/samba/*
+    /var/lib/samba/*/*
+  (thanks Marko Myllynen, James Antill)