131 lines
3.6 KiB
Django/Jinja
131 lines
3.6 KiB
Django/Jinja
firewall --disabled
|
|
|
|
install
|
|
cdrom
|
|
lang en_US.UTF-8
|
|
keyboard us
|
|
timezone UTC
|
|
|
|
{% if template.networks is defined and template.networks[0].ip is defined and template.networks[0].gateway is defined and template.networks[0].netmask is defined %}
|
|
network --bootproto=static --ip={{ template.networks[0].ip }} --netmask={{ template.networks[0].netmask }} --gateway={{ template.networks[0].gateway }}{% if template.networks[0].dns_servers is defined %} --nameserver={{ template.networks[0].dns_servers|join(',') }}{% endif %}
|
|
{% else %}
|
|
network --bootproto=dhcp
|
|
{% endif %}
|
|
|
|
network --hostname=localhost.localdomain
|
|
rootpw {{ local_administrator_password }}
|
|
authconfig --enableshadow --passalgo=sha512
|
|
|
|
{% if template_selinux_enabled is undefined or not template_selinux_enabled %}
|
|
selinux --disabled
|
|
{% endif %}
|
|
text
|
|
skipx
|
|
|
|
logging --level=info
|
|
|
|
eula --agreed
|
|
|
|
bootloader --append="no_timer_check"
|
|
clearpart --all --initlabel
|
|
part /boot/efi --fstype="efi" --size=200 --fsoptions="umask=0077,shortname=winnt" --asprimary
|
|
part /boot --fstype="xfs" --size=1024 --asprimary
|
|
part pv.00 --fstype="lvmpv" --size=1 --grow --asprimary
|
|
volgroup vg00 --pesize=4096 pv.00
|
|
logvol swap --fstype="swap" --size=4096 --name=swap --vgname=vg00
|
|
logvol / --fstype="xfs" --size=1 --grow --name=root --vgname=vg00
|
|
|
|
#clearpart --all --initlabel
|
|
#part /boot/efi --fstype=efi --grow --maxsize=200 --size=20
|
|
#part /boot --size=1000 --asprimary --fstype=ext4 --label=boot --fsoptions=acl,user_xattr,errors=remount-ro,nodev,noexec,nosuid
|
|
#part pv.00 --size=1 --grow --asprimary
|
|
#volgroup vg00 pv.00
|
|
#logvol swap --name=swap --vgname=vg00 --size=4098
|
|
#logvol / --fstype=xfs --fsoptions=acl,user_xattr,errors=remount-ro --size=1 --grow --name=root --vgname=vg00
|
|
#bootloader --boot-drive=vda
|
|
|
|
#reqpart --add-boot
|
|
#part swap --size 4098 --asprimary
|
|
#part pv.01 --fstype xfs --size=1 --grow --asprimary volgroup VolGroup00 pv.01
|
|
#logvol / --fstype xfs --name=lv_root --vgname=VolGroup00 --size=32768
|
|
|
|
auth --useshadow --enablemd5
|
|
firstboot --disabled
|
|
services --enabled=NetworkManager,sshd
|
|
reboot
|
|
user --name={{ local_account_username }} --plaintext --password {{ local_account_password }} --groups={{ local_account_username }},wheel
|
|
|
|
%packages --ignoremissing --excludedocs
|
|
@Base
|
|
@Core
|
|
openssh-clients
|
|
sudo
|
|
openssl-devel
|
|
readline-devel
|
|
zlib-devel
|
|
kernel-headers
|
|
kernel-devel
|
|
gcc
|
|
make
|
|
perl
|
|
curl
|
|
wget
|
|
ntp
|
|
nfs-utils
|
|
net-tools
|
|
vim
|
|
curl
|
|
unbound-libs
|
|
bzip2
|
|
sshpass
|
|
-fprintd-pam
|
|
-intltool
|
|
-NetworkManager
|
|
-NetworkManager-tui
|
|
|
|
# unnecessary firmware
|
|
-aic94xx-firmware
|
|
-atmel-firmware
|
|
-b43-openfwwf
|
|
-bfa-firmware
|
|
-ipw2100-firmware
|
|
-ipw2200-firmware
|
|
-ivtv-firmware
|
|
-iwl100-firmware
|
|
-iwl1000-firmware
|
|
-iwl3945-firmware
|
|
-iwl4965-firmware
|
|
-iwl5000-firmware
|
|
-iwl5150-firmware
|
|
-iwl6000-firmware
|
|
-iwl6000g2a-firmware
|
|
-iwl6050-firmware
|
|
-libertas-usb8388-firmware
|
|
-ql2100-firmware
|
|
-ql2200-firmware
|
|
-ql23xx-firmware
|
|
-ql2400-firmware
|
|
-ql2500-firmware
|
|
-rt61pci-firmware
|
|
-rt73usb-firmware
|
|
-xorg-x11-drv-ati-firmware
|
|
-zd1211-firmware
|
|
%end
|
|
|
|
%post
|
|
# update root certs
|
|
# wget -O/etc/pki/tls/certs/ca-bundle.crt https://curl.haxx.se/ca/cacert.pem --no-check-certificate
|
|
# yum reinstall ca-certificates
|
|
|
|
# permit root login
|
|
sed -i s'/PermitRootLogin\ prohibit-password/PermitRootLogin\ yes'/g /etc/ssh/sshd_config
|
|
|
|
# sudo
|
|
yum install -y sudo
|
|
echo "{{ local_account_username }} ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/{{ local_account_username }}
|
|
sed -i "s/^.*requiretty/#Defaults requiretty/" /etc/sudoers
|
|
{% if template_selinux_enabled is undefined or not template_selinux_enabled %}
|
|
sed -i s'/SELINUX=enforcing/SELINUX=disabled'/g /etc/selinux/config
|
|
{% endif %}
|
|
yum clean all
|
|
%end |