# Kickstart file for hep.pa.msu.edu VM
# note MSU campus networking

# install from ISO
install
cdrom
lang en_US.UTF-8
keyboard us

network --onboot yes --device eth0 --bootproto static --ip 35.9.71.50 --netmask 255.248.0.0 --noipv6 --nameserver 35.8.2.41 --hostname hep.pa.msu.edu

# SHA512
rootpw --iscrypted $6$Mbs0L0mI$YE6P.T2uZurGZcYsJaeBQG5KpIAvrA/u7zWMVthgHIVmsOl50nV64R9iIZJS9nXnorttj./0t4ekBrMnAxC530

firewall --service=ssh
authconfig --enableshadow --passalgo=sha512
selinux --disabled
timezone --utc America/New_York
bootloader --location=mbr --append="crashkernel=auto"

# two drives
clearpart --all --initlabel

part /boot --fstype=ext4 --size=200 --ondisk=/dev/sda

part pv.888 --size=1 --grow --ondisk=/dev/sda
part pv.899 --size=1 --grow --ondisk=/dev/sdb

volgroup vg_sys --pesize=4096 pv.888
logvol / --fstype=ext4 --name=lv_root --vgname=vg_sys --size=6000
logvol swap --name=lv_swap --vgname=vg_sys --size=2000

volgroup vg_misc --pesize=4096 pv.899
logvol /var --fstype=ext4 --name=lv_var --vgname=vg_misc --size=1 --grow

reboot

%packages
@base
@client-mgmt-tools
@console-internet
@core
@debugging
@directory-client
@hardware-monitoring
@java-platform
@large-systems
@misc-sl
@network-file-system-client
@performance
@perl-runtime
@scalable-file-systems
@server-platform
@web-server
oddjob
sgpio
pax
certmonger
pam_krb5
krb5-workstation
perl-DBD-SQLite
xorg-x11-xauth
xterm
%end

%pre
#!/bin/sh
mkdir /tmp/anaconda-pre
ls -l /dev/disk/by-path > /tmp/anaconda-pre/disks-by-path-pre.out
%end

%post --nochroot
cp -r /tmp/anaconda-pre /mnt/sysimage/root
%end

%post
# paren for redirect of ouput to logfile...
(

echo "post script ssh keys running `date`"

# Tom's ssh key for root access
mkdir /root/.ssh
chmod 700 /root/.ssh
touch /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6AUMJD8bH5xboNDUAvK2\
yrIYHpfE9MDdtA0WrBuLR9ng/e8soOctaa1vylmyBCYVBdK09kUnm5Zx\
7IkjypFOMGWPUJCBOkK+HfFKwqVnx6QpwinURN9EO4BdYMjoTROHLmKJ\
tCrYFxLbxJk6eC/pHq+nNuvKETClBUGExElf+4s= Tom's key used \
for admin of msuhep nodes
ENDSSHKEY

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApn2AFiC3Oi30VaeZ7o8h\
I6fV7oWpUp9Hq8sWABHRftohXufJ+KdjlH1Xv+iwfXlk8iiM8SRtuJol\
RtaOyMEuwMZKz8+AzS0VXceBUd/EAcUCAKHsLO4VRwJpUfMNan6jj1OD\
V4hx5zL9ZecR/C2VpOoYSusFQ1emBdvOO4lE2TAM1gicrjMgHWfo5fu6\
PsFb/ShXu4N52mzTO0LYa0pDUePsZfucEo2M0rDywtAOxENQ/bZ9E7Tc\
jp2Hzuh5rE145TeN/J2wh3Bw09d+FernumAtwayD3VRoLZudlU9Z/+h+\
6dgZ6Y9XHumjvUIvU8JTFDay5eqtPM5ueIUI7xO/hw== rockwell ke\
y for aglt2 admin. jul-3-2008"
ENDSSHKEY

# SSHD Config, defaults have been stripped out
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.install.orig
cat > /etc/ssh/sshd_config <<ENDSSHCONFIG
SyslogFacility AUTHPRIV
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
X11Forwarding yes
PermitRootLogin without-password
Subsystem sftp /usr/libexec/openssh/sftp-server
ENDSSHCONFIG

# avahi off
chkconfig avahi-daemon off

# try to set time
ntpdate ntp.msu.edu

# ntpd is left off in default install...
chkconfig ntpd on

# paren for redirect of ouput to logfile...
) 2>&1 | tee /root/anaconda_post-ssh-keys.log
%end