# Kickstart file for msubck AMANDA server
# note MSU campus networking

# install from http
url --url http://mirror.msulocal/mirror/scientific/6.2/x86_64/os

lang en_US.UTF-8
keyboard us

#network --onboot yes --device eth0 --bootproto static --ip 35.9.71.50 --netmask
 255.248.0.0 --noipv6 --nameserver 35.8.2.41 --hostname hep.pa.msu.edu

# SHA512
rootpw --iscrypted $6$Mbs0L0mI$YE6P.T2uZurGZcYsJaeBQG5KpIAvrA/u7zWMVthgHIVmsOl50
nV64R9iIZJS9nXnorttj./0t4ekBrMnAxC530

firewall --service=ssh
authconfig --enableshadow --passalgo=sha512
timezone --utc America/Detroit
bootloader --location=mbr --append="crashkernel=auto"

reboot

%packages
@base
@client-mgmt-tools
@console-internet
@core
@directory-client
@hardware-monitoring
@large-systems
@misc-sl
@performance
@perl-runtime
xorg-x11-xauth

%pre
#!/bin/sh
mkdir /tmp/anaconda-pre
ls -l /dev/disk/by-path > /tmp/anaconda-pre/disks-by-path-pre.out
%end

%post --nochroot
cp -r /tmp/anaconda-pre /mnt/sysimage/root
%end

%post
# paren for redirect of ouput to logfile...
(

echo "post script ssh keys running `date`"

# Tom's ssh key for root access
mkdir /root/.ssh
chmod 700 /root/.ssh
touch /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6AUMJD8bH5xboNDUAvK2\
yrIYHpfE9MDdtA0WrBuLR9ng/e8soOctaa1vylmyBCYVBdK09kUnm5Zx\
7IkjypFOMGWPUJCBOkK+HfFKwqVnx6QpwinURN9EO4BdYMjoTROHLmKJ\
tCrYFxLbxJk6eC/pHq+nNuvKETClBUGExElf+4s= Tom's key used \
for admin of msuhep nodes
ENDSSHKEY

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApn2AFiC3Oi30VaeZ7o8h\
I6fV7oWpUp9Hq8sWABHRftohXufJ+KdjlH1Xv+iwfXlk8iiM8SRtuJol\
RtaOyMEuwMZKz8+AzS0VXceBUd/EAcUCAKHsLO4VRwJpUfMNan6jj1OD\
V4hx5zL9ZecR/C2VpOoYSusFQ1emBdvOO4lE2TAM1gicrjMgHWfo5fu6\
PsFb/ShXu4N52mzTO0LYa0pDUePsZfucEo2M0rDywtAOxENQ/bZ9E7Tc\
jp2Hzuh5rE145TeN/J2wh3Bw09d+FernumAtwayD3VRoLZudlU9Z/+h+\
6dgZ6Y9XHumjvUIvU8JTFDay5eqtPM5ueIUI7xO/hw== rockwell ke\
y for aglt2 admin. jul-3-2008"
ENDSSHKEY

# SSHD Config, defaults have been stripped out
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.install.orig
cat > /etc/ssh/sshd_config <<ENDSSHCONFIG
SyslogFacility AUTHPRIV
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
X11Forwarding yes
PermitRootLogin without-password
Subsystem sftp /usr/libexec/openssh/sftp-server
ENDSSHCONFIG

# this is needed to fix authorized_keys, not tested (in kickstart)
restorecon -R /root/.ssh

# avahi off
chkconfig avahi-daemon off

# try to set time
ntpdate ntp.msu.edu

# ntpd is left off in default install...
chkconfig ntpd on

# paren for redirect of ouput to logfile...
) 2>&1 | tee /root/anaconda_post-ssh-keys.log
%end