fedora-comon: Update default package set

* Install `system-upgrade` plugin for `dnf`, since we'll almost always
  want this in order to be able to update hosts
* Do not install _sshca-cli-systemd_; this package has been deprecated
  and removed in favor of setting up the systemd units from Ansible
* Install _python3-libdnf5_, as this is required by Ansible and will be
  installed by it later, so we can save a bit of time by always having
  it installed.

autoprovision.ks.j2

@@ -1,16 +1,16 @@
-%packages
-dch-autoprovision
-%end
-
 %post
-{
-ls -la /root/.ssh
-chmod -R 700 /root/.ssh
-cat /root/.ssh/authorized_keys
+cat > /root/.ssh/authorized_keys <<EOF
+expiry-time="$(date -d +1hour +%Y%m%d%H%M)",restrict,pty ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICoOO/ZYMxRgmyvqZwGN3NM5pHyh3NBdC7iZrXIopt93 Host Provisioner
+EOF
+
+cat > /usr/local/libexec/notify-online.sh <<'EOF'
+{% include "notify-online.sh" %}
+EOF
+chmod +x /usr/local/libexec/notify-online.sh
+
+cat > /etc/systemd/system/notify-online.service <<'EOF'
+{% include "notify-online.service" %}
+EOF
+
 systemctl enable --no-reload notify-online.service
-sed -i 's/.*ForwardToConsole.*/ForwardToConsole=yes/' /etc/systemd/journald.conf
-grep ForwardTo /etc/systemd/journald.conf
-passwd -d root
-exit 0
-} > /dev/console
 %end

fedora-common.ks

@@ -13,7 +13,6 @@ reboot
 -NetworkManager
 -authconfig
 -dhcp-client
--dnf-plugins-core
 -dnf-yum
 -dracut-config-rescue
 -man-db
@@ -27,15 +26,17 @@ reboot
 -yum
 chrony
 dnf
+dnf-command(system-upgrade)
 e2fsprogs
 grubby
 kitty-terminfo
 openssh-server
+python3-libdnf5
 python3-libselinux
 python3-policycoreutils
 rng-tools
 selinux-policy-targeted
-sshca-cli-systemd
+sshca-cli
 systemd-networkd
 %end