#version=DEVEL
# System authorization information
auth --enableshadow --passalgo=sha512

# Use CDROM installation media

#cdrom

url --mirrorlist="https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch"
repo --name="kickstart-updates" --mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-released-f$releasever&arch=$basearch

#url --mirrorlist="https://mirrors.fedoraproject.org/metalink?repo=epel-$releasever&arch=$basearch"

# Run the Setup Agent on first boot
firstboot --enable
ignoredisk --only-use=sdb,sda
#ignoredisk --only-use=sda
# Keyboard layouts
keyboard --vckeymap=us --xlayouts='us'
# System language
lang en_US.UTF-8

# firewall
firewall --disabled

# Network information
# lepsi neresit a nechat na DHCP (lisi se device names, ...)
#network  --bootproto=static --gateway=147.228.52.1 --ip=147.228.52.204 --nameserver=147.228.3.3,2001:718:1801:1052::1:11 --netmask=255.255.255.0 --ipv6=2001:718:1801:1052::1:fa14/64 --activate --ipv6gateway 2001:718:1801:1052::1:1
#network  --bootproto=dhcp --device=eth0
#network  --bootproto=dhcp --device=p2p1
#network  --hostname=myriad2.zcu.cz
# Root password
rootpw --iscrypted $6$esH.AynTBQ58BTMM$pSwhn0WnOtwSGfwV7vBwJd.tH9.3CRmGF.VPVb0w25a20yiYRDIob9WjacPu.a7SyUFIVG4T4qoCriwg3kzdx/
# System services
services --enabled="chronyd,rc-local,iptables,ip6tables,ntpdate"
# System timezone
timezone Europe/Prague --isUtc --ntpservers=clock1.zcu.cz,clock2.zcu.cz
# System bootloader configuration
bootloader --location=mbr --boot-drive=sda
# Partition clearing information
clearpart --all --initlabel --drives=sda,sdb
# Disk partitioning information
#part / --fstype="ext3" --maxsize=999999999 --ondisk=sda --size=10239
#part / --fstype="ext3" --maxsize=999999999 --ondisk=sda --grow
#part / --fstype="ext3" --maxsize=10239 --ondisk=sda --grow

## SL7
#part / --fstype="ext3" --maxsize=10239
#part swap --fstype="swap"

# F23+
part / --fstype="ext3" --size=10239
part swap --fstype="swap"

%packages
@core
#not for SL7
@hardware-support
#not for SL7
@standard
chrony
vim-enhanced
mc
screen
wget
acpid
ntpdate
iptables-services
# RB 1333021
iptables
# F19+, EPEL7
perl-Data-Dumper
perl-Sys-Syslog
%end

%post
(
sed -i /etc/dracut.conf -e 's/#add_drivers.*/add_drivers+="xen-blkfront"/'
sed -i /boot/grub2/grub.cfg -e 's/^\(\s*set timeout\)=.*/\1=1/'
sed -i /etc/default/grub -e 's/^\(GRUB_TIMEOUT\)=.*/\1=1/'
echo 'GRUB_DISABLE_LINUX_UUID="true"' >> /etc/default/grub
# F21 won't boot without UUID
# probably not needed anyway? (only for swap)
#sed -i /etc/fstab -e 's,UUID=[0-9a-fA-F-]*\(\s*\)/\(\s*\),/dev/sda1\1/\2,'
wget -nv -P /etc/yum.repos.d/ http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo
yum install -y ca-policy-egi-core
/bin/echo -e "*/4 * * * *\troot\t(cd /usr/local/bin; /usr/local/bin/sshcrack.pl -6)" > /etc/cron.d/ssh-crackers
#ver=rawhide; wget -nv http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-${ver}.noarch.rpm http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-${ver}.noarch.rpm
#yum install -y ./rpmfusion-*.rpm && rm -fv rpmfusion-*.rpm

#yum upgrade -y
#dnf upgrade -y

cat <<EOF > /etc/sysctl.d/ipv6.conf
# disable autoconfiguration and router advertisements
net.ipv6.conf.all.autoconf = 0
net.ipv6.conf.all.accept_ra = 0
EOF
) 1>/root/post-install.log 2>&1

%end