From Fedora Project Wiki
m (internal link cleaning)
 
(18 intermediate revisions by 2 users not shown)
Line 9: Line 9:


== Current status ==
== Current status ==
* Targeted release: [[Releases/{{FedoraVersion||next}} | {{FedoraVersion|long|next}} ]]  
* Targeted release: [[Releases/11 | Fedora 11]]  
* Last updated: (March 02 2009)
* Last updated: (March 17 2009)
* Percentage of completion: 60%
* Percentage of completion: 100%


== Detailed Description ==
== Detailed Description ==
Line 29: Line 29:
** running services
** running services
** SUID/SGID binaries
** SUID/SGID binaries
* Push new package profile into anaconda. This might require support from release engineering and anaconda stuff.
* '''Updates requested by FESCo (2009-02-27)'''
* '''Updates requested by FESCo (2009-02-27)'''
*# updating the comps group  
*# updating the comps group  
Line 37: Line 36:
There is no need for special hardware to test this feature.  
There is no need for special hardware to test this feature.  


You can use bare metal or virtual environment for installation. Since there is no anaconda option yet, use this [[Features/MinimalPlatform/KickStart|kickstart]] (adjust the kickstart, at least the --baseurl, no package set!!). The kickstart package set covers the @core group plus minimal number of extra packages. The kickstart file includes some security tweaks that are not mandatory for this feature.
You can use bare metal or virtual environment for installation. Since there is no anaconda option to deselect all packages you have to do it manually. Another method is to use this [[Features/MinimalPlatform/KickStart|kickstart]] (adjust the kickstart, at least the --baseurl, no package set!!).


What are the expected result?
What are the expected result?
Line 50: Line 49:


== Dependencies ==
== Dependencies ==
* anaconda
* comps
* comps
* dependencies between package


== Contingency Plan ==
== Contingency Plan ==
Line 57: Line 56:


== Documentation ==
== Documentation ==
There is no need for documentation on this feature. I'm gonna provide all the details on this page.
There is no other web page for this project. All the details should be provided here.


=== Filed Bugs ===
=== Filed Bugs ===
* system-config-firewall-tui - https://bugzilla.redhat.com/show_bug.cgi?id=525153
* anacoda - https://bugzilla.redhat.com/show_bug.cgi?id=523709
* anaconda text install https://bugzilla.redhat.com/show_bug.cgi?id=488754
* core group change - https://bugzilla.redhat.com/show_bug.cgi?id=488060
* core group change - https://bugzilla.redhat.com/show_bug.cgi?id=488060
* anaconda option - https://bugzilla.redhat.com/show_bug.cgi?id=485995
* anaconda option - https://bugzilla.redhat.com/show_bug.cgi?id=485995
Line 68: Line 70:


== Release Notes ==
== Release Notes ==
* Minimal platform option in anaconda allow users to perform tiny installation. This installation is later used to create minimalistic server or desktop appliance. There are several benefits of minimal platform: higher security, effective storage and better performance.
* Minimal platform reflected in core group allow users to perform tiny installation. This installation is later used to create minimalistic server or desktop appliance. There are several benefits of minimal platform: higher security, effective storage and better performance.


== Comments and Discussion ==
== Comments and Discussion ==
* See [[Talk:Features/MinimalPlatform]]  <!-- This adds a link to the "discussion" tab associated with your page.  This provides the ability to have ongoing comments or conversation without bogging down the main feature page -->
* See [[Talk:Features/MinimalPlatform]]  <!-- This adds a link to the "discussion" tab associated with your page.  This provides the ability to have ongoing comments or conversation without bogging down the main feature page -->
* Similar approach https://fedoraproject.org/wiki/SIGs/Server
* Similar approach [[SIGs/Server]]
* Related bug about default MTA in Fedora https://bugzilla.redhat.com/show_bug.cgi?id=472710


[[Category:FeatureAcceptedF11]]
[[Category:FeatureAcceptedF11]]
Line 78: Line 81:
<!-- remove Category:FeaturePageIncomplete and change it to Category:FeatureReadyForWrangler -->
<!-- remove Category:FeaturePageIncomplete and change it to Category:FeatureReadyForWrangler -->
<!-- After review, the feature wrangler will move your page to Category:FeatureReadyForFesco... if it still needs more work it will move back to Category:FeaturePageIncomplete-->
<!-- After review, the feature wrangler will move your page to Category:FeatureReadyForFesco... if it still needs more work it will move back to Category:FeaturePageIncomplete-->
<!-- A pretty picture of the page category usage is at: https://fedoraproject.org/wiki/Features/Policy/Process -->
<!-- A pretty picture of the page category usage is at: [[Features/Policy/Process]] -->

Latest revision as of 08:08, 18 September 2016

Features/MinimalPlatform

Summary

Minimal platform will enable user to perform tiny installation. This installation is later used to create minimalistic server or desktop appliance.

Owner

Current status

  • Targeted release: Fedora 11
  • Last updated: (March 17 2009)
  • Percentage of completion: 100%

Detailed Description

The goal of the feature is to provide small package set, that will be covered by @core group. Only these packages and its dependencies will be installed by installer if no packages are selected.

Benefit to Fedora

  • Security - lower the attack surface by installing only necessary packages
  • Performance - faster installation and less running services
  • Storage - installation is less than 500MB
  • Package dependencies - package dependencies are regularly watched
  • Fedora on servers - encourage users to use Fedora on server and support other distributions based on Fedora like Red Hat Enterprise Linux or CentOS

Scope

  • Regularly perform installations during Fedora cycle and watch for:
    • disk usage
    • packages dependencies
    • running services
    • SUID/SGID binaries
  • Updates requested by FESCo (2009-02-27)
    1. updating the comps group
    2. making the anaconda text mode minimal install match

How To Test

There is no need for special hardware to test this feature.

You can use bare metal or virtual environment for installation. Since there is no anaconda option to deselect all packages you have to do it manually. Another method is to use this kickstart (adjust the kickstart, at least the --baseurl, no package set!!).

What are the expected result?

  • Disk usage of "/" mount point is less than 500MB
  • Package list is subset of following package list
  • List of running services is subset of following list of services
  • List of SUID binaries is subset of following list of SUID binaries
  • List of SGID binaries is subset of following list of SGID binaries

User Experience

Users will have have several options (anaconda/kickstart) to perform minimal platform installation. Their installations will be finished quickly. There will be minimal number of packages after they are ready with customizations. The whole system will be less vulnerable to attack.

Dependencies

  • comps
  • dependencies between package

Contingency Plan

This feature is not critical. Even if the criteria in test section are not exactly met we can live with that and improve it later. I don't expect any problems with anaconda and comps, but if there are any, we can abandon this way and provide at least the kickstart file in some other package.

Documentation

There is no other web page for this project. All the details should be provided here.

Filed Bugs

Release Notes

  • Minimal platform reflected in core group allow users to perform tiny installation. This installation is later used to create minimalistic server or desktop appliance. There are several benefits of minimal platform: higher security, effective storage and better performance.

Comments and Discussion