113 lines
4.8 KiB
Plaintext
113 lines
4.8 KiB
Plaintext
# Links
|
|
# https://www.golinuxcloud.com/rhel-centos-8-kickstart-example-generator/
|
|
# https://www.golinuxhub.com/2018/05/sample-kickstart-partition-example-raid/
|
|
# Create a CentOS Boot image
|
|
# https://serverfault.com/questions/517908/how-to-create-a-custom-iso-image-in-centos
|
|
text
|
|
#autostep --autoscreenshot
|
|
#url --url=https://nexus.iwanclement.eu/repository/sources/OS/CentOS/ISO/CentOS-8.2.2004-x86_64-dvd1.iso
|
|
#nfs --server=10.9.240.69 --dir=/shared/isos/centos8-dvd
|
|
cdrom
|
|
|
|
# Keyboard layouts
|
|
keyboard --vckeymap=fr --xlayouts='fr'
|
|
#keyboard --vckeymap=us --xlayouts='us'
|
|
|
|
# System language
|
|
#lang fr_FR.UTF-8
|
|
lang en_US.UTF8 --addsupport=en_UK.UTF8,fr_FR.UTF8
|
|
|
|
# Network information
|
|
# network --bootproto=static --ip=10.10.10.15 --netmask=255.255.255.0 --gateway=10.10.10.1 --nameserver=8.8.8.8 --device=eth0
|
|
network --bootproto=dhcp --device=eth0 --activate
|
|
# network --bootproto=dhcp --device=eth1 --onboot=off --activate
|
|
network --hostname=redhat.ivanclement.maison
|
|
|
|
# Root password
|
|
#rootpw --iscrypted $6$w7El/FYx9mbTG6x9$Te.Yg6dq0TsQwGpdSjeDGSw4J9ZBAkLXzT9ODMV7I7lHvX3n5.9PCS4jIkS2GbVLZOpVRLvrua3wwbwA.cfWX.
|
|
#rootpw --plaintext Tagada
|
|
rootpw --iscrypted $6$rounds=4096$9rMejHwwSN5svKna$nZoRElw3IfyuNWOK7oYtfEK5bYfjdzmFmo536G8lFb.2plTb7AACGfQqUocstWY6QH8.Be7C1g78FncXE7wvc0
|
|
|
|
# Run the Setup Agent on first boot
|
|
# firstboot --enable
|
|
#firstboot --enable --reconfig
|
|
firstboot --disable
|
|
|
|
# Do not configure the X Window System
|
|
skipx
|
|
|
|
# System timezone
|
|
#timezone Asia/Kolkata --isUtc
|
|
#timezone Europe/Paris --isUtc
|
|
timezone Europe/Paris --isUtc
|
|
|
|
# Create user
|
|
user --name=firstuser --shell=/bin/bash --homedir=/home/firstuser --groups=wheel --iscrypted --password=$6$rounds=4096$/uJYhTHVUVcI6fZ3$q0xr5HN5VcIArDFTtZqUtXaZzq7/SAUUnFly0qf6lgBDqF0zaJF8KfnaO8nWqFmpMRE/Zdr5cunF/zY4XD7sH1
|
|
|
|
sshkey --username=firstuser "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDMxyXCCF7QuQDIRafwmCNwgLYuegQdJFy3L68itWBKr iwan@T480Buntu"
|
|
sshkey --username=root "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDMxyXCCF7QuQDIRafwmCNwgLYuegQdJFy3L68itWBKr iwan@T480Buntu"
|
|
|
|
# Configure repositories
|
|
#repo --name=repoid [--baseurl=url|--mirrorlist=url|--metalink=url] [OPTIONS]
|
|
#repo --name=epel --metalink='https://mirrors.fedoraproject.org/metalink?repo=epel-modular-$releasever&arch=$basearch&infra=$infra&content=$contentdir' --cost=1
|
|
#repo --install --name=epel --metalink='https://mirrors.fedoraproject.org/metalink?repo=epel-modular-$releasever&arch=$basearch&infra=$infra&content=$contentdir'
|
|
|
|
# Reboot the node
|
|
reboot
|
|
#halt
|
|
#poweroff
|
|
|
|
# Firewall configuration
|
|
#firewall --enabled|--disabled [incoming] [OPTIONS]
|
|
#firewall --disabled
|
|
firewall --enabled --ssh
|
|
|
|
# password Polixy
|
|
%anaconda
|
|
pwpolicy root --minlen=28 --minquality=50 --strict --changesok --notempty
|
|
pwpolicy user --minlen=12 --minquality=25 --notstrict --changesok --emptyok
|
|
# pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
|
|
%end
|
|
|
|
# SeLinux configuration
|
|
#selinux [--disabled|--enforcing|--permissive]
|
|
#selinux --permissive
|
|
|
|
# Packages installation
|
|
%packages
|
|
epel-release
|
|
sudo
|
|
qemu-guest-agent
|
|
# qemu-guest-agent
|
|
# less
|
|
# wget
|
|
# curl
|
|
%end
|
|
|
|
# Partition clearing information
|
|
#clearpart --all
|
|
clearpart --all --initlabel
|
|
ignoredisk --only-use=sda
|
|
|
|
#part /boot --size 640 --asprimary --fstype=ext4 --ondrive=sda
|
|
part /boot --size 640 --asprimary --fstype=ext4 --ondrive=sda --fsoptions='nodev,noexec,nosuid'
|
|
part pv.1 --size 1 --grow --ondrive=sda
|
|
|
|
volgroup system-vg --pesize=32768 pv.1
|
|
#logvol / --fstype=xfs --vgname=system-vg --size=512 --name=ROOT
|
|
#logvol / --fstype=xfs --vgname=system-vg --size=512 --name=ROOT --fsoptions='noexec,nosuid'
|
|
logvol / --fstype=xfs --vgname=system-vg --size=512 --name=ROOT --fsoptions='nosuid'
|
|
logvol swap --vgname=system-vg --size=4096 --name=SWAP
|
|
logvol /usr --fstype=xfs --vgname=system-vg --size=5120 --name=USR --fsoptions='nodev'
|
|
#logvol /opt --fstype=xfs --vgname=system-vg --size=1024 --name=OPT --fsoptions='nodev'
|
|
logvol /opt --fstype=xfs --vgname=system-vg --size=5120 --name=OPT --fsoptions='nodev,nosuid'
|
|
logvol /tmp --fstype=xfs --vgname=system-vg --size=2048 --name=TMP --fsoptions='nodev,noexec,nosuid'
|
|
#logvol /var --fstype=xfs --vgname=system-vg --size=2048 --name=VAR --fsoptions='nodev'
|
|
logvol /var --fstype=xfs --vgname=system-vg --size=1024 --name=VAR --fsoptions='nodev,noexec,nosuid'
|
|
logvol /var/lib --fstype=xfs --vgname=system-vg --size=1024 --name=VARLIB --fsoptions='nodev,nosuid'
|
|
logvol /var/log --fstype=xfs --vgname=system-vg --size=2048 --name=VARLOG --fsoptions='nodev,noexec,nosuid'
|
|
logvol /var/cache --vgname=system-vg --size=4096 --fstype=xfs --name=VARCACHE --fsoptions='nodev,noexec,nosuid'
|
|
logvol /var/tmp --vgname=system-vg --size=2048 --fstype=xfs --name=VARTMP --fsoptions='nodev,noexec,nosuid'
|
|
logvol /var/crash --vgname=system-vg --size=2048 --fstype=xfs --name=VARCRASH --fsoptions='nodev,noexec,nosuid'
|
|
logvol /home --vgname=system-vg --size=2048 --fstype=xfs --name=HOME --fsoptions='nodev,nosuid'
|