vmhost0: Update to Fedora 32
parent
3221ad95d0
commit
717f17893e
43
vmhost0.ks
43
vmhost0.ks
|
@ -1,16 +1,14 @@
|
||||||
# vim: set ft=sh :
|
# vim: set ft=sh :
|
||||||
|
|
||||||
text
|
text
|
||||||
install
|
url --url http://fedora.mirror.constant.com/fedora/linux/releases/32/Everything/x86_64/os/
|
||||||
url --url http://www.nic.funet.fi/pub/mirrors/fedora.redhat.com/pub/fedora/linux/releases/28/Everything/x86_64/os/
|
repo --name=updates --baseurl=http://fedora.mirror.constant.com/fedora/linux/updates/32/Everything/x86_64/
|
||||||
repo --name=updates --baseurl=http://www.nic.funet.fi/pub/mirrors/fedora.redhat.com/pub/fedora/linux/updates/28/Everything/x86_64/
|
|
||||||
repo --name=dustin --baseurl=http://rosalina.pyrocufflink.blue/~dustin/repo
|
|
||||||
lang en_US.UTF-8
|
lang en_US.UTF-8
|
||||||
keyboard us
|
keyboard us
|
||||||
timezone --utc UTC
|
timezone --utc UTC
|
||||||
rootpw --lock
|
rootpw --lock
|
||||||
reboot
|
reboot
|
||||||
|
|
||||||
|
ignoredisk --only-use=nvme0n1
|
||||||
bootloader --location mbr --append "console=ttyS0,115200 quiet systemd.show_status=1"
|
bootloader --location mbr --append "console=ttyS0,115200 quiet systemd.show_status=1"
|
||||||
clearpart --all --initlabel
|
clearpart --all --initlabel
|
||||||
reqpart
|
reqpart
|
||||||
|
@ -23,17 +21,16 @@ logvol /var --fstype xfs --name=var --vgname=vmhost0 --size=8192
|
||||||
logvol /var/log --fstype xfs --name=var_log --vgname=vmhost0 --size=2048
|
logvol /var/log --fstype xfs --name=var_log --vgname=vmhost0 --size=2048
|
||||||
logvol swap --fstype swap --name=swap --vgname=vmhost0 --size=32768 --grow
|
logvol swap --fstype swap --name=swap --vgname=vmhost0 --size=32768 --grow
|
||||||
|
|
||||||
%packages --excludeWeakdeps --excludedocs
|
%packages --exclude-weakdeps --excludedocs
|
||||||
-NetworkManager
|
-NetworkManager
|
||||||
-authconfig
|
-authconfig
|
||||||
|
-authselect
|
||||||
-dhcp-client
|
-dhcp-client
|
||||||
-dnf-plugins-core
|
-dnf-plugins-core
|
||||||
-dnf-yum
|
-dnf-yum
|
||||||
-dracut-config-rescue
|
-dracut-config-rescue
|
||||||
-e2fsprogs
|
-e2fsprogs
|
||||||
-initscripts
|
|
||||||
-iputils
|
-iputils
|
||||||
-kbd
|
|
||||||
-man-db
|
-man-db
|
||||||
-openssh-clients
|
-openssh-clients
|
||||||
-parted
|
-parted
|
||||||
|
@ -41,19 +38,17 @@ logvol swap --fstype swap --name=swap --vgname=vmhost0 --size=32768 --grow
|
||||||
-sssd-common
|
-sssd-common
|
||||||
-sssd-kcm
|
-sssd-kcm
|
||||||
-vim-minimal
|
-vim-minimal
|
||||||
|
-yum
|
||||||
|
audit
|
||||||
chrony
|
chrony
|
||||||
cracklib-dicts
|
cracklib-dicts
|
||||||
dhcpcd
|
|
||||||
dhcpcd-local-selinux
|
|
||||||
dnf
|
dnf
|
||||||
dnf-command(system-upgrade)
|
dnf-command(system-upgrade)
|
||||||
libselinux-python3
|
|
||||||
openssh-server
|
openssh-server
|
||||||
policycoreutils-python3
|
|
||||||
selinux-policy-targeted
|
selinux-policy-targeted
|
||||||
%end
|
%end
|
||||||
|
|
||||||
services --enabled dhcpcd
|
services --enabled systemd-networkd,systemd-resolved
|
||||||
|
|
||||||
%addon com_redhat_kdump --disable
|
%addon com_redhat_kdump --disable
|
||||||
%end
|
%end
|
||||||
|
@ -81,25 +76,19 @@ grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
|
||||||
|
|
||||||
rm -rf /etc/sysconfig/network-scripts /etc/sysconfig/network
|
rm -rf /etc/sysconfig/network-scripts /etc/sysconfig/network
|
||||||
|
|
||||||
# Avoid "libudev: received NULL device" log spam from dhcpcd
|
|
||||||
echo nodev >> /etc/dhcpcd.conf
|
|
||||||
# Although dhcpcd.conf(5) claims the default value for `fqdn` is `both`, this
|
|
||||||
# does not appear to be the case, at least in v6.11.3.
|
|
||||||
echo fqdn both >> /etc/dhcpcd.conf
|
|
||||||
|
|
||||||
# Generate SSH host keys before first boot, since / will be read-only then
|
# Generate SSH host keys before first boot, since / will be read-only then
|
||||||
/usr/libexec/openssh/sshd-keygen ecdsa
|
/usr/libexec/openssh/sshd-keygen ecdsa
|
||||||
/usr/libexec/openssh/sshd-keygen ed25519
|
/usr/libexec/openssh/sshd-keygen ed25519
|
||||||
/usr/libexec/openssh/sshd-keygen rsa
|
/usr/libexec/openssh/sshd-keygen rsa
|
||||||
|
|
||||||
# Additional read-only root filesystem compatibility hacks
|
cat > /etc/systemd/network/30-enp5s0.network <<EOF
|
||||||
ln -sf /var/lib/dhcpcd/dhcpcd.duid /etc/dhcpcd.duid
|
[Match]
|
||||||
ln -sf /var/lib/dhcpcd/dhcpcd.secret /etc/dhcpcd.secret
|
Name=enp5s0
|
||||||
ln -sf /etc/sysconfig/networking/resolv.conf /etc/resolv.conf
|
|
||||||
mkdir -p /etc/sysconfig/networking
|
[Network]
|
||||||
chcon system_u:object_r:net_conf_t:s0 /etc/sysconfig/networking
|
Address=172.30.0.18/26
|
||||||
cat >> /etc/fstab <<EOF
|
Gateway=172.30.0.1
|
||||||
tmpfs /etc/sysconfig/networking tmpfs size=1M,mode=0755,context=system_u:object_r:net_conf_t:s0 0 0
|
DNS=172.30.0.4
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
# Enable read-only rootfs. This cannot be done with part/logvol, as that would
|
# Enable read-only rootfs. This cannot be done with part/logvol, as that would
|
||||||
|
|
Loading…
Reference in New Issue