#platform=x86, AMD64, or Intel EM64T #version=DEVEL # Install OS instead of upgrade install # Keyboard layouts keyboard 'dk' # Root password rootpw --plaintext MonkeyPoo # System language lang en_US # Network Information # # IMPORTANT CHANGE DEVICE TO MATCH INTERFACE NAME I.E CHANGE TO eth0 # network --onboot yes --device ens33 --bootproto dhcp # License agreement eula --agreed # System authorization information auth --useshadow --passalgo=sha512 # Use CDROM installation media cdrom # Use text mode install text # SELinux configuration selinux --enforcing # Do not configure the X Window System skipx # Disabled System Services services --disabled="kdump" # Enabled System Services services --enabled=sshd # Firewall configuration firewall --disabled # Reboot after installation reboot # System timezone timezone Europe/Copenhagen --isUtc # System bootloader configuration bootloader --location=mbr # Clear the Master Boot Record zerombr # Partition clearing information clearpart --all # Disk partitioning information part /boot --fstype="ext4" --size=1024 part / --asprimary --fstype="ext4" --grow --size=1 %post --nochroot --log=/mnt/sysimage/root/ks.post01.log mkdir -p /tmp/files mount /dev/sr0 /tmp/files cp -af /tmp/files/postinstall /mnt/sysimage/ umount /dev/sr0 %end %post --log=/root/ks.post02.log # SSH Configuration Disable Passwd Enable Public Key Disable Root Login Start # cp /etc/ssh/sshd_config /etc/ssh/sshd_config.orig sed s/#PermitRootLogin\ yes/PermitRootLogin\ no/ -i /etc/ssh/sshd_config sed s/#PubkeyAuthentication\ yes/PubkeyAuthentication\ yes/ -i /etc/ssh/sshd_config sed '/PermitEmptyPasswords/{n;d}' -i /etc/ssh/sshd_config sed s/#PasswordAuthentication\ yes/PasswordAuthentication\ no/ -i /etc/ssh/sshd_config # # SSH Configuration Disable Passwd Enable Public Key Disable Root Login Stop # Adding Ansible User And Public Key Start # useradd ansible -d /home/ansible mkdir -m 0700 /home/ansible/.ssh echo "ssh-rsa AAAAB3NzaX1yc2EAAAADAQABAAABAQNY9F7/3JoJKzyA84V+9WVRDLgMqrIuOclRKj4XP+VqeTuHshZG1W5W3FavQ9DEkWK1/TDJeQ935yHX41ZwqUmaiIl9yEb6n4q7XJFS3Nw6QDZQAfkh2NwND+alk3DnDh0STnrMJrqzWSCTNevK6p/fBVAq8u2H5Hu4g1ua1Z/JjPZxbx/+AfQDhG1jcPbX6yeMzlc4G9BRk26uQHYw8QRXEQmfQPT/SVjH/Ti2ouMucJ2EHS0SjYcx8G0S98DV7ydm+ie8pY3gRfYlX8NvfnKG1SmusSIkNh1cCkxucN4Yr5dgwUXOPbeIqhIXQpTQph7TUu3gu8JO6KoJ ansible" > /home/ansible/.ssh/authorized_keys chmod 0644 /home/ansible/.ssh/authorized_keys chown -R ansible: /home/ansible/.ssh usermod -aG wheel ansible # # Adding Ansible User And Public Key Stop # Modify Sudoer File For Ansible Enabling The No Password Directive Start cp /etc/sudoers /etc/sudoers.orig sed '0,/%wheel/s//# %wheel/' -i /etc/sudoers sed '/NOPASSWD/s/# %wheel/%wheel/' -i /etc/sudoers # Modify Sudoer File For Ansible Enabling The No Password Directive Stop # Add Epel Repo Start cd /postinstall rpm -ivh epel-release-latest-7.noarch.rpm # Add Epel Repo Stop %end %packages @base net-tools deltarpm %end