fedora.template

sshpw --username=root --plaintext fedora
# Firewall configuration
firewall --disabled
selinux --enforcing

# Use network installation
url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
network --bootproto=dhcp --device=eth0 --activate --onboot=on
network --bootproto=dhcp --device=eth1 --activate --onboot=on
skipx
rootpw --plaintext fedora
auth --useshadow --passalgo=sha512

timezone --utc America/New_York
bootloader --timeout=1 --location=mbr --append="no_timer_check console=ttyS0 console=tty0 net.ifnames=0 biosdevname=0"
clearpart --all
part / --size 10240 --fstype ext4

#Repos
repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
repo --name=hvkvp --baseurl=https://copr-be.cloud.fedoraproject.org/results/gbraad/go-hvkvp/epel-7-x86_64/
repo --name=varlink --baseurl=https://copr-be.cloud.fedoraproject.org/results/@varlink/varlink/fedora-29-x86_64/

shutdown

%packages  --excludedocs --instLangs=en
@core
dracut-live
openssl
bash
fedora-logos
podman
buildah
dracut
e2fsprogs
xfsprogs
efibootmgr
grub2
grub2-efi
kernel
net-tools
parted
shadow-utils
shim
syslinux
hyperv-daemons
cifs-utils
fuse-sshfs
nfs-utils
go-hvkvp
python-setuptools
dnsmasq
com.redhat.resolver
fedora-varlink
patch
psmisc

#Packages to be removed
-aic94xx-firmware
-alsa-firmware
-iprutils
-ivtv-firmware
-iwl100-firmware
-iwl1000-firmware
-iwl105-firmware
-iwl135-firmware
-iwl2000-firmware
-iwl2030-firmware
-iwl3160-firmware
-iwl3945-firmware
-iwl4965-firmware
-iwl5000-firmware
-iwl5150-firmware
-iwl6000-firmware
-iwl6000g2a-firmware
-iwl6000g2b-firmware
-iwl6050-firmware
-iwl7260-firmware
-iwl7265-firmware
-postfix
-rsyslog
%end

%post

# Disable floppy driver to load
echo "omit_drivers+=\"floppy\"" > /etc/dracut.conf.d/nofloppy.conf
echo "blacklist floppy" > /etc/modprobe.d/nofloppy.conf

# Setting a global Locale for the server
echo "LANG=\"C\"" > /etc/locale.conf

# Add tc user with 'tcuser' password
/usr/sbin/useradd -p 'wtd3OP71kP1NQ' tc
/usr/sbin/groupadd staff
/usr/sbin/usermod -a -G staff tc

# sudo permission for tc user
echo "%tc ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/tc
sed -i "s/^.*requiretty/#Defaults requiretty/" /etc/sudoers

# Place holder for base64 encode handle-user-data script
cat > handle-user-data.base64 << EOF
${handle_user_data}
EOF

# Remove redhat-logo and firmware package to help with reduce box size
yum remove -y fedora-logos linux-firmware

# Clear yum package and metadata cache
yum clean all

# Show a warning banner when using yum to install software
mv /usr/bin/yum /usr/bin/yum-unsupported
# Place holder for base64 encode yum-wrapper script
cat > yum-wrapper.base64 << EOF
${yum_wrapper}
EOF
base64 -d < yum-wrapper.base64 > yum-wrapper
rm -f yum-wrapper.base64
chmod +x yum-wrapper
mv yum-wrapper /usr/bin/yum


# Place holder for base64 encode handle-user-data script
cat > handle-user-data.base64 << EOF
${handle_user_data}
EOF
base64 -d < handle-user-data.base64 > handle-user-data
rm -f handle-user-data.base64
chmod +x handle-user-data
mv handle-user-data /usr/local/bin/minishift-handle-user-data

# Handle user data (systemd service)
cat > handle-user-data-service.base64 << EOF
${handle_user_data_service}
EOF
base64 -d < handle-user-data-service.base64 > handle-user-data.service
rm handle-user-data-service.base64
mv handle-user-data.service /usr/lib/systemd/system/minishift-handle-user-data.service


# Set IP address based on settings or hvkvp (Hyper-V)
cat > set-ipaddress.base64 << EOF
${set_ipaddress}
EOF
base64 -d < set-ipaddress.base64 > set-ipaddress
rm set-ipaddress.base64
chmod +x set-ipaddress
mv set-ipaddress /usr/local/bin/minishift-set-ipaddress

# Set IP address (systemd service)
cat > set-ipaddress-service.base64 << EOF
${set_ipaddress_service}
EOF
base64 -d < set-ipaddress-service.base64 > set-ipaddress.service
rm set-ipaddress-service.base64
mv set-ipaddress.service /usr/lib/systemd/system/minishift-set-ipaddress.service


# Systemd configuration
systemctl disable kdump
systemctl disable rc-local
systemctl disable network
systemctl disable NetworkManager
systemctl disable NetworkManager-dispatcher
systemctl disable NetworkManager-wait-online
systemctl disable dnsmasq
systemctl enable minishift-handle-user-data
systemctl enable minishift-set-ipaddress
systemctl enable io.podman
systemctl enable com.redhat.resolver

# Enable podman in resolver
patch /usr/lib/fedora.json << EOF
--- fedora.json.orig	2018-11-11 14:24:43.022068639 +0100
+++ fedora.json	2018-12-07 22:34:24.658048674 +0100
@@ -50,6 +50,12 @@
       }
     },
     {
+      "address": "unix:/run/podman/io.podman;mode=0600",
+      "interfaces": [
+        "io.podman"
+      ]
+    },
+    {
       "address": "unix:/run/org.varlink.resolver;mode=0666",
       "interfaces": [
         "com.redhat.resolver",

EOF

# SELinux
/sbin/restorecon -R -v /


# Clean
rm -rf /usr/lib/locale/locale-archive
rm -rf /var/cache/yum/*
rm -rf /var/cache/dnf/*

%end