# Setup
install
cdrom
lang {{ locale }}
keyboard {{ keyboard }}

# Network information
network --activate --bootproto=dhcp --device=ens192 --hostname={{ hostname }} --onboot=yes
# Root password
rootpw {{ root_password }}
user --name={{ ssh_username }} --homedir=/home/{{ ssh_username }} --password={{ ssh_password }}

# Accept the EULA
eula --agreed

# Reboot after installation
reboot

# Services Configuration
firewall --service=ssh
skipx
#authconfig --updateall
#authconfig --useshadow --passalgo=sha512
services --enabled=iptables,rsyslog,auditd,crond,chronyd,sshd --disabled=netfs,cups,rhnsd,nfslock,portmap,atd,avahi-daemon,firstboot,gpm,ip6tables,mcstrans,sendmail,setroubleshoot,sysstat,xfs,anacron,chargen-dgram,chargen-stream,daytime-dgram,daytime-stream,echo-dgram,echo-stream,tcpmux-server
sshpw --username=root {{ ssh_password }}

selinux --enforcing
timezone --utc {{ timezone }}
bootloader --location=mbr --driveorder=sda --append="crashkernel=auto rhgb quiet"
zerombr

clearpart --all --initlabel
{% if partition_layout_type and partition_layout_type == 'single' %}
autopart
{% else %}
part /boot --fstype=ext4 --size=300
part swap --grow --maxsize=4096 --size=4096
part pv.01 --size=12000 --grow

volgroup vg00 pv.01
# NB: The noexec flag will be set on /tmp after the build.  The build stages and executes scripts on /tmp.
logvol /tmp --vgname=vg00 --size=8192 --grow --name=lv_tmp --fsoptions=nodev,nosuid
logvol /home --vgname=vg00 --size=8192 --grow --name=lv_home --fsoptions=nodev
logvol /var/log --vgname=vg00 --size=2048 --grow --name=lv_var_log
logvol /var/log/audit --vgname=vg00 --size=2048 --grow --name=lv_var_log_audit
logvol /var --vgname=vg00 --size=12288 --grow --name=lv_var
logvol / --fstype=ext4 --vgname=vg00 --grow --percent=90 --name=lv_root
{% endif %}

# XXX FIXME TODO Make the open-vm-tools install optional if building non-vmware targets?
%packages --excludedocs --ignoremissing
@Core --nodefaults
chrony
iptables-services
cronie-anacron
net-tools
open-vm-tools
openssh-clients
openssh-server
rsyslog
audit
cronie
sudo
yum
%end

#install VMware tools
%post
yum -y install open-vm-tools
%end

# Things to run in the chroot /mnt/sysimage (where the OS was installed)
%post --interpreter /bin/bash --log /mnt/root/ks-post.log.1

# permit root login for packer ansible-local after restart
sed -i 's/#PermitRootLogin.*/PermitRootLogin yes/g' /etc/ssh/sshd_config

# allow sudo without a TTY (for Ansible)
sed -i 's/Defaults.*requiretty.*/#Defaults    requiretty/g' /etc/sudoers

# ensure the user is a sudoer
echo "{{ ssh_username }} ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/99-{{ ssh_username }}
%end

# Things to run in the temporary (in-memory/ installer) system
%post --nochroot --interpreter /bin/bash --log /mnt/sysimage/root/ks-post.log.2
echo 'Anaconda setup has completed.'
echo 'Enabling SSH to restart this machine...'
mv /etc/ssh/sshd_config.anaconda /etc/ssh/sshd_config
service sshd start