# Kickstart file for msuchef VM

# install from ISO
install
cdrom
lang en_US.UTF-8
keyboard us

network --onboot yes --device eth0 --bootproto static --ip 10.10.128.17 --netmask 255.255.240.0 --noipv6 --nameserver 10.10.128.8 --hostname msuchef.msulocal

# SHA512
rootpw --iscrypted $6$Mbs0L0mI$YE6P.T2uZurGZcYsJaeBQG5KpIAvrA/u7zWMVthgHIVmsOl50nV64R9iIZJS9nXnorttj./0t4ekBrMnAxC530

firewall --service=ssh --port=4000:tcp --port=4040:tcp
authconfig --enableshadow --passalgo=sha512
selinux --disabled
timezone --utc America/New_York
bootloader --location=mbr --append="crashkernel=auto"

# two drives
clearpart --all --initlabel

part /boot --fstype=ext4 --size=200 --ondisk=/dev/sda

part pv.888 --size=1 --grow --ondisk=/dev/sda

volgroup vg_sys --pesize=4096 pv.888
logvol / --fstype=ext4 --name=lv_root --vgname=vg_sys --size=10000
logvol swap --name=lv_swap --vgname=vg_sys --size=4000
logvol /var --fstype=ext4 --name=lv_sys --vgname=vg_sys --size=60000 --grow

reboot

%packages --nobase
@core
wget
%end

%pre
#!/bin/sh
mkdir /tmp/anaconda-pre
ls -l /dev/disk/by-path > /tmp/anaconda-pre/disks-by-path-pre.out
%end

%post --nochroot
cp -r /tmp/anaconda-pre /mnt/sysimage/root
%end

%post
# paren for redirect of ouput to logfile...
(

echo "post script ssh keys running `date`"

# Tom's ssh key for root access
mkdir /root/.ssh
chmod 700 /root/.ssh
touch /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6AUMJD8bH5xboNDUAvK2\
yrIYHpfE9MDdtA0WrBuLR9ng/e8soOctaa1vylmyBCYVBdK09kUnm5Zx\
7IkjypFOMGWPUJCBOkK+HfFKwqVnx6QpwinURN9EO4BdYMjoTROHLmKJ\
tCrYFxLbxJk6eC/pHq+nNuvKETClBUGExElf+4s= Tom's key used \
for admin of msuhep nodes
ENDSSHKEY

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApn2AFiC3Oi30VaeZ7o8h\
I6fV7oWpUp9Hq8sWABHRftohXufJ+KdjlH1Xv+iwfXlk8iiM8SRtuJol\
RtaOyMEuwMZKz8+AzS0VXceBUd/EAcUCAKHsLO4VRwJpUfMNan6jj1OD\
V4hx5zL9ZecR/C2VpOoYSusFQ1emBdvOO4lE2TAM1gicrjMgHWfo5fu6\
PsFb/ShXu4N52mzTO0LYa0pDUePsZfucEo2M0rDywtAOxENQ/bZ9E7Tc\
jp2Hzuh5rE145TeN/J2wh3Bw09d+FernumAtwayD3VRoLZudlU9Z/+h+\
6dgZ6Y9XHumjvUIvU8JTFDay5eqtPM5ueIUI7xO/hw== rockwell ke\
y for aglt2 admin. jul-3-2008"
ENDSSHKEY

# SSHD Config, defaults have been stripped out
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.install.orig
cat > /etc/ssh/sshd_config <<ENDSSHCONFIG
SyslogFacility AUTHPRIV
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
X11Forwarding yes
PermitRootLogin without-password
Subsystem sftp /usr/libexec/openssh/sftp-server
ENDSSHCONFIG

# avahi off
chkconfig avahi-daemon off

# try to set time
ntpdate 10.10.128.8

# ntpd is left off in default install...
chkconfig ntpd on

# paren for redirect of ouput to logfile...
) 2>&1 | tee /root/anaconda_post-ssh-keys.log
%end