# System authorization information

auth --enableshadow --passalgo=sha512

# Reboot after installation

reboot

# Use network installation

url --url="http://mirrorsnap.centos.org/DATESTAMP/centos/7/os/ARCH/"

# Firewall configuration

firewall --enabled --service=ssh

firstboot --disable

ignoredisk --only-use=vda

# Keyboard layouts

# old format: keyboard us

# new format:

keyboard --vckeymap=us --xlayouts='us'

# System language

lang en_US.UTF-8

repo --name "os" --baseurl="http://mirrorsnap.centos.org/DATESTAMP/centos/7/os/ARCH/" --cost=100

repo --name "updates" --baseurl="http://mirrorsnap.centos.org/DATESTAMP/centos/7/updates/ARCH/" --cost=100

repo --name "extras" --baseurl="http://mirrorsnap.centos.org/DATESTAMP/centos/7/extras/ARCH/" --cost=100

# Network information

network  --bootproto=dhcp

network  --hostname=localhost.localdomain

# Root password

rootpw --iscrypted nothing

selinux --enforcing

services --disabled="kdump" --enabled="network,sshd,rsyslog,chronyd"

timezone UTC --isUtc

# Disk

bootloader --append="console=tty0" --location=mbr --timeout=1 --boot-drive=vda

zerombr

reqpart

clearpart --all --initlabel 

#part /boot/efi --fstype="vfat" --ondisk=vda --size=200

part / --fstype="xfs" --ondisk=vda --size=4096 --grow

%post --erroronfail

# workaround anaconda requirements

passwd -d root

passwd -l root

# Create grub.conf for EC2. This used to be done by appliance creator but

# anaconda doesn't do it. And, in case appliance-creator is used, we're

# overriding it here so that both cases get the exact same file.

# Note that the console line is different -- that's because EC2 provides

# different virtual hardware, and this is a convenient way to act differently

echo -n "Creating grub.conf for pvgrub"

rootuuid=$( awk '$2=="/" { print $1 };'  /etc/fstab )

mkdir /boot/grub

echo -e 'default=0\ntimeout=0\n\n' > /boot/grub/grub.conf

for kv in $( ls -1v /boot/vmlinuz* |grep -v rescue |sed s/.*vmlinuz-//  ); do

  echo "title CentOS Linux 7 ($kv)" >> /boot/grub/grub.conf

  echo -e "\troot (hd0)" >> /boot/grub/grub.conf

  echo -e "\tkernel /boot/vmlinuz-$kv ro root=$rootuuid console=hvc0 LANG=en_US.UTF-8" >> /boot/grub/grub.conf

  echo -e "\tinitrd /boot/initramfs-$kv.img" >> /boot/grub/grub.conf

  echo

done

#link grub.conf to menu.lst for ec2 to work

echo -n "Linking menu.lst to old-style grub.conf for pv-grub"

ln -sf grub.conf /boot/grub/menu.lst

ln -sf /boot/grub/grub.conf /etc/grub.conf

# setup systemd to boot to the right runlevel

echo -n "Setting default runlevel to multiuser text mode"

rm -f /etc/systemd/system/default.target

ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target

echo .

# this is installed by default but we don't need it in virt

echo "Removing linux-firmware package."

yum -C -y remove linux-firmware

# Remove firewalld; it is required to be present for install/image building.

echo "Removing firewalld."

yum -C -y remove firewalld --setopt="clean_requirements_on_remove=1"

# remove avahi and networkmanager

echo "Removing avahi/zeroconf and NetworkManager"

yum -C -y remove avahi\* Network\*

echo -n "Getty fixes"

# although we want console output going to the serial console, we don't

# actually have the opportunity to login there. FIX.

# we don't really need to auto-spawn _any_ gettys.

sed -i '/^#NAutoVTs=.*/ a\

NAutoVTs=0' /etc/systemd/logind.conf

echo -n "Network fixes"

# initscripts don't like this file to be missing.

cat > /etc/sysconfig/network << EOF

NETWORKING=yes

NOZEROCONF=yes

EOF

# For cloud images, 'eth0' _is_ the predictable device name, since

# we don't want to be tied to specific virtual (!) hardware

rm -f /etc/udev/rules.d/70*

ln -s /dev/null /etc/udev/rules.d/80-net-name-slot.rules

# simple eth0 config, again not hard-coded to the build hardware

cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF

DEVICE="eth0"

BOOTPROTO="dhcp"

ONBOOT="yes"

TYPE="Ethernet"

USERCTL="yes"

PEERDNS="yes"

IPV6INIT="no"

PERSISTENT_DHCLIENT="1"

EOF

# set virtual-guest as default profile for tuned

echo "virtual-guest" > /etc/tuned/active_profile

# generic localhost names

cat > /etc/hosts << EOF

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4

::1         localhost localhost.localdomain localhost6 localhost6.localdomain6

EOF

echo .

# Because memory is scarce resource in most cloud/virt environments,

# and because this impedes forensics, we are differing from the Fedora

# default of having /tmp on tmpfs.

echo "Disabling tmpfs for /tmp."

systemctl mask tmp.mount

cat <<EOL > /etc/sysconfig/kernel

# UPDATEDEFAULT specifies if new-kernel-pkg should make

# new kernels the default

UPDATEDEFAULT=yes

# DEFAULTKERNEL specifies the default kernel package type

DEFAULTKERNEL=kernel

EOL

# make sure firstboot doesn't start

echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot

# workaround https://bugzilla.redhat.com/show_bug.cgi?id=966888

#if ! grep -q growpart /etc/cloud/cloud.cfg; then

#  sed -i 's/ - resizefs/ - growpart\n - resizefs/' /etc/cloud/cloud.cfg

#fi

#echo -e 'cloud-user\tALL=(ALL)\tNOPASSWD: ALL' >> /etc/sudoers

echo "Cleaning old yum repodata."

yum clean all

echo "set instance type markers"

echo 'genclo' > /etc/yum/vars/infra

# chance dhcp client retry/timeouts to resolve #6866

cat  >> /etc/dhcp/dhclient.conf << EOF

timeout 300;

retry 60;

EOF

# clean up installation logs"

rm -rf /var/log/yum.log

rm -rf /var/lib/yum/*

rm -rf /root/install.log

rm -rf /root/install.log.syslog

rm -rf /root/anaconda-ks.cfg

rm -rf /var/log/anaconda*

rm -rf /root/anac*

echo "Fixing SELinux contexts."

touch /var/log/cron

touch /var/log/boot.log

mkdir -p /var/cache/yum

/usr/sbin/fixfiles -R -a restore

# reorder console entries

sed -i 's/console=tty0/console=tty0 console=ttyS0,115200n8/' /boot/grub2/grub.cfg

#echo "Zeroing out empty space."

# This forces the filesystem to reclaim space from deleted files

dd bs=1M if=/dev/zero of=/var/tmp/zeros || :

rm -f /var/tmp/zeros

echo "(Don't worry -- that out-of-space error was expected.)"

%end

%packages

@core

chrony

cloud-init

cloud-utils-growpart

dracut-config-generic

dracut-norescue

firewalld

grub2

kernel

nfs-utils

rsync

tar

yum-utils

-NetworkManager

-aic94xx-firmware

-alsa-firmware

-alsa-lib

-alsa-tools-firmware

-biosdevname

-iprutils

-ivtv-firmware

-iwl100-firmware

-iwl1000-firmware

-iwl105-firmware

-iwl135-firmware

-iwl2000-firmware

-iwl2030-firmware

-iwl3160-firmware

-iwl3945-firmware

-iwl4965-firmware

-iwl5000-firmware

-iwl5150-firmware

-iwl6000-firmware

-iwl6000g2a-firmware

-iwl6000g2b-firmware

-iwl6050-firmware

-iwl7260-firmware

-libertas-sd8686-firmware

-libertas-sd8787-firmware

-libertas-usb8388-firmware

-plymouth

%end