From 2346c2e9106961fbdb3022e400550449a56432ea Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sat, 25 Jan 2020 10:13:40 -0600
Subject: [PATCH] Add kickstart for burp1

---
 burp1.ks | 88 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 88 insertions(+)
 create mode 100644 burp1.ks

diff --git a/burp1.ks b/burp1.ks
new file mode 100644
index 0000000..4190b76
--- /dev/null
+++ b/burp1.ks
@@ -0,0 +1,88 @@
+# vim: set ft=sh :
+
+text
+install
+url --url http://mirror.rnet.missouri.edu/fedora/linux/releases/31/Everything/x86_64/os/
+repo --name=updates --baseurl=http://mirror.rnet.missouri.edu/fedora/linux/updates/31/Everything/x86_64/
+lang en_US.UTF-8
+keyboard us
+timezone --utc UTC
+rootpw --lock
+reboot
+
+bootloader --location mbr
+clearpart --all --initlabel
+reqpart
+part /boot --fstype ext4 --size=200
+part pv.01 --fstype lvmpv --size=14436 --grow
+volgroup burp1 pv.01
+logvol / --fstype ext4 --name=root --vgname=burp1 --size=4096
+logvol /home --fstype ext4 --name=home --vgname=burp1 --size=100
+logvol /var --fstype ext4 --name=var --vgname=burp1 --size=1024 --grow
+logvol /var/log --fstype ext4 --name=var_log --vgname=burp1 --size=1024
+logvol swap --fstype swap --name=swap --vgname=burp1 --size=8192 --grow
+
+%packages --excludeWeakdeps --excludedocs
+-NetworkManager
+-authconfig
+-dhcp-client
+-dnf-plugins-core
+-dnf-yum
+-dracut-config-rescue
+-e2fsprogs
+-kbd
+-man-db
+-openssh-clients
+-parted
+-plymouth
+-sssd-common
+-sssd-kcm
+chrony
+dnf
+dnf-command(system-upgrade)
+libselinux-python3
+grubby
+openssh-server
+policycoreutils-python3
+rng-tools
+selinux-policy-targeted
+%end
+
+services --enabled systemd-networkd,systemd-resolved
+
+%addon com_redhat_kdump --disable
+%end
+
+%post --erroronfail
+echo burp1.pyrocufflink.blue > /etc/hostname
+
+echo 'install_weak_deps=0' >> /etc/dnf/dnf.conf
+echo 'deltarpm=0' >> /etc/dnf/dnf.conf
+echo '%_excludedocs 1' >> /etc/rpm/macros
+
+systemctl mask systemd-journald-audit.socket
+
+install -m700 -d /root/.ssh
+cat >> /root/.ssh/authorized_keys <<EOF
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJsL5fSylmiJmBtW0DH/viAAmtU2E/2M17GPvysiyRs+ dustin@rosalina
+EOF
+
+rm -rf /etc/sysconfig/network-scripts /etc/sysconfig/network
+
+cat > /etc/systemd/network/99-default.network <<EOF
+[Match]
+Name=*
+
+[Network]
+DHCP=true
+EOF
+
+# Generate SSH host keys before first boot, since / will be read-only then
+/usr/libexec/openssh/sshd-keygen ecdsa
+/usr/libexec/openssh/sshd-keygen ed25519
+/usr/libexec/openssh/sshd-keygen rsa
+
+# Enable read-only rootfs. This cannot be done with part/logvol, as that would
+# make Anaconda mount it read-only befor the installation starts.
+sed -i -r '/\S+\s+\/\s+/s/defaults/ro/' /etc/fstab
+%end