Attachment 898991 Details for Bug 1100987 – File: ks.cfg

File: ks.cfg

ks.cfg (text/plain), 6.82 KB, created by Rick on 2014-05-25 01:54:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rick

Created: 2014-05-25 01:54:06 UTC

Size: 6.82 KB

patch

obsolete

># Kickstart file automatically generated by anaconda.
># This is for Zorba's machine.
>
>#version=DEVEL
>url --url http://10.100.0.3/yum/fedora/20/iso/x86_64/
>install
>lang en_US.UTF-8
>keyboard us
># Network interface selection is now handled by a pre script, *finally*.
>%include /tmp/network-include
>timezone America/Los_Angeles
>rootpw  --iscrypted $6$QKaX2MAB$jbCTsFDJhu2ggzHMzvXuXBpmDjrtxivq4id1eXHQ9AWagLi7W2fTlhQGZ2aYLzQONlf5Zfiv0jOBoslZnBitL0
>selinux --enforcing
>authconfig --enableshadow --passalgo=sha512
>firewall --service=ssh
>text
>skipx
># Partition information now also hanlded by a pre script, based on serial number.
>%include /tmp/part-include
># Turn off some unnecessary services, turn on a couple new ones.
>services --enabled=chronyd,sshd,smartd,gpm --disabled=rpcbind,rpcgssd,rpcidmapd,mdmonitor,netfs,postfix,nfslock,atd,kdump,abrt-oops,abrt,avahi-daemon,bluetooth,lvm2-lvmetad,mcelog
>firstboot --disable 
>
># Family user creation!  what fun!
>user --name=vector --uid=1000 --password=$6$4lCohIyK$CM8L5V6ph.68EZUONfMg.cbnn1tY0XZm6DbZNJ2quxf8nUUishv2Fsj4KksqviY2hNu7TpWtqgE5vb0KGVpDp1 --iscrypted --groups=wheel
>user --name=mary   --uid=1001 --password=$6$1LLRVhLZ$TKaLK9lM3hIshaQP/2F.Q/Fy.d1dzD86vxFc1KC6lX0kHvV.E6Lub5iwcberMOB7dMPsNw4J5JXnl9lb0KdrG0 --iscrypted
>user --name=glenn  --uid=1002 --password=$6$au2Tl4bC$gZdKZ6HQ1Hxa7XJDg8WwsBBxcvn42W0t/.qhkgXGCEWTmTn3P.TRzkl1f61nvPn7c/mzb29./.ibNp4AF7A5X0 --iscrypted
>
>%packages
>@core
>@base-x
>@fedora-packager
>@firefox
>@fonts
>@hardware-support
>@kde-apps
>@kde-media
>@kde-desktop
>@libreoffice
>@multimedia
>@printing
>@standard
>@virtualization
>apper
>xfsprogs
>mtools
>gpgme
>hardlink
>brltty
>digikam
>check
>libreoffice-opensymbol-fonts
>kdepim
>ImageMagick
>digikam
>optipng
>ksnapshot
>kipi-plugins
>gwenview
>kolourpaint
>okular
>kdepim
>vorbis-tools
>kdemultimedia-kmix
>k3b
>gssdp
>geoclue
>lzop
>p7zip-plugins
>enca
>gupnp
>gnutls-utils
>fuse
>xorg-x11-apps
>xscreensaver-gl-extras
>xscreensaver-extras
>xscreensaver-base
>xterm
>xorg-x11-resutils
>%end
>
>%pre --log=/tmp/ks-preinstall.log
>
># find the NIC configured for the private network.
>IFACE=$(ip -o addr | awk '/10\.100/ {print $2}')
>echo "network --device $IFACE --bootproto dhcp --onboot yes --hostname freshinstall.deepgroove.org" > /tmp/network-include
>
># Test to see what machine we're working with
>SERIALNUM=$(dmidecode --string system-serial-number)
>BB_SERIALNUM=$(dmidecode --string baseboard-serial-number)
>
># This is my personal or work laptop?  Encrypt the disks!
>if [[ "${SERIALNUM}" == "R8NXG7H" || "${SERIALNUM}" == "PBEPXH7" ]]; then
>	echo "ignoredisk --only-use=sda" > /tmp/part-include
>	echo "clearpart --all" >> /tmp/part-include
>	echo "zerombr" >> /tmp/part-include
>	echo 'bootloader --location=mbr --timeout=5 --driveorder=sda --append="rhgb quiet"' >> /tmp/part-include
>	echo "part /boot --size=512 --asprimary" >> /tmp/part-include
>	echo "part swap --size=1024 --asprimary --encrypted " >> /tmp/part-include
>	echo "part / --size=1 --grow --asprimary --encrypted --fstype=ext4" >> /tmp/part-include
>
># Is this Glenn's gaming computer, Zorba's or Mom's desktop?
># Two 1TB disks, RAID1 for root, raid0 for swap.
>elif [[ "${SERIALNUM}" == "To Be Filled By O.E.M." || "${BB_SERIALNUM}" == "131219713104013" || "${BB_SERIALNUM}" == "BTGC60803PMB" ]]; then
>	echo "ignoredisk --only-use=sda,sdb" > /tmp/part-include
>	echo "clearpart --all" >> /tmp/part-include
>	echo "zerombr" >> /tmp/part-include
>	echo "part /boot     --size=500 --ondisk=sda --fstype=ext4" >> /tmp/part-include
>	echo "part /boot-bup --size=500 --ondisk=sdb --fstype=ext4" >> /tmp/part-include
>	echo "part raid.11   --size=500 --ondisk=sda" >> /tmp/part-include
>	echo "part raid.12   --size=500 --ondisk=sdb" >> /tmp/part-include
>	echo "part raid.21   --size=500 --ondisk=sda --grow" >> /tmp/part-include
>	echo "part raid.22   --size=500 --ondisk=sdb --grow" >> /tmp/part-include
>	echo 'bootloader     --location=mbr --timeout=5 --driveorder=sda --append="rhgb quiet"' >> /tmp/part-include
>	echo "raid swap      --level=0 --device=md1 raid.11 raid.12" >> /tmp/part-include
>	echo "raid /         --level=1 --device=md2 raid.21 raid.22 --fstype=ext4" >> /tmp/part-include
># Is this not specified?  e.g.: some random person's computer?
>else
>	echo "ignoredisk --only-use=sda" > /tmp/part-include
>	echo "clearpart --all" >> /tmp/part-include
>	echo "zerombr" >> /tmp/part-include
>	echo 'bootloader --location=mbr --timeout=5 --driveorder=sda --append="rhgb quiet"' >> /tmp/part-include
>	echo "part /boot --size=512 --asprimary --fstype=ext4" >> /tmp/part-include
>	echo "part swap --size=1024 --asprimary" >> /tmp/part-include
>	echo "part / --size=1 --grow --asprimary --fstype=ext4" >> /tmp/part-include
>fi
>
>%end
>
>
>%post --log=/tmp/ks-postinstall.log --erroronfail
>
># Test to see what machine we're working with
>SERIALNUM=$(dmidecode --string system-serial-number)
>BB_SERIALNUM=$(dmidecode --string baseboard-serial-number)
>
># Glenn's system needs nvidia drivers and a couple of audio programs.
>if [[ "${SERIALNUM}" == "To Be Filled By O.E.M." ]]; then
>	echo "kernel-devel akmod-nvidia mixxx hydrogen lmms" > /tmp/pkgs-include
>fi
>
># Disable the local default yum repositories in favor of my local repo
># and then run yum update.
>cd /etc/yum.repos.d/
>rename .repo .disabled fedora*.repo
>wget http://10.100.0.3/yum/fedora/fedora-20-local.repo
>
># Install some additional repositories
>yum -y install http://10.100.0.3/repos.d/adobe-release-x86_64-1.0-1.noarch.rpm http://10.100.0.3/repos.d/fedora/20/rpmfusion-free-release-20.noarch.rpm http://10.100.0.3/repos.d/fedora/20/rpmfusion-nonfree-release-20.noarch.rpm http://10.100.0.3/repos.d/livna-release.rpm
>yum -y --skip-broken update
>
># Add some additional packages here, including DVD crypto support
>yum -y install libdvdcss vim-enhanced flash-plugin libdvdcss minetest pidgin thunderbird gstreamer-plugins-bad-nonfree kid3 soundconverter audacity-freeworld k3b-extras-freeworld mplayer mencoder vlc mozilla-adblockplus thunderbird-enigmail finch irssi mutt msmtp lynx unrar subversion iptables-services inkscape gimp scribus hdparm gpac youtube-dl flac darktable rawstudio faac k9copy kate okteta strace ltrace nmap pdfshuffler minicom setserial screen sysstat wireshark-gnome steam policycoreutils-python pbzip2 autopano-sift-C filelight clusterssh unetbootin iotop $(cat /tmp/pkgs-include)
>
># disable livna once libdvdcss is installed.
>sed -i -e 's/enabled=1/enabled=0/g' livna.repo
>
># Fix up a few bits of systemd sockets.
>for socket in rpcbind avahi-daemon iscsid iscsiuio lvm2-lvmetad pcscd rpcbind; do
>	systemctl disable ${socket}.socket
>done
>
># Use the regular static firewall, not firewalld..
>for service in firewalld rpcbind dnsmasq libvirtd; do
>	systemctl dsiable ${service}.service
>done
>
># Install static firewall for ssh only.
>cd /etc/sysconfig/
>wget -O iptables http://10.100.0.3/~vector/ks/fw
>wget -O ip6tables http://10.100.0.3/~vector/ks/fw6
>cd -
>systemctl enable iptables
>systemctl enable ip6tables
>
>echo "NOZEROCONF=yes" >> /etc/sysconfig/network
>
>%end
>
>reboot

Actions: View

Attachments on bug 1100987: 898988 | 898989 | 898990 | 898991 | 898992 | 898993 | 898994 | 898995 | 898996 | 898997 | 898998 | 898999 | 899000