#! /bin/false
#
# el6-minimal.ks - Anaconda Kickstart File
# Copyright (C) 2013 Matous J. Fialka, <http://mjf.cz/>
# Released under the terms of The MIT License

# Usage: vmlinuz initrd=initrd.img asknetwork ks=http://vger.cz/anaconda/el6-minimal.ks

text
install
reboot

# ENVIRONMENT

lang en_US
keyboard us
timezone --utc Europe/Prague
skipx

# NETWORKING

network --device eth0 --onboot yes --bootproto static
url --url "http://mirror.centos.org/centos/6/os/x86_64"
firewall --enabled --service=ssh

# SECURITY

authconfig --enableshadow --enablemd5
rootpw Password123
selinux --enforcing

# PARTITIONING

zerombr
bootloader --location=mbr --append="selinux=1 audit=1 rhgb quiet"

clearpart  --all --initlabel
part /boot --fstype ext2 --fsoptions=nodev,noexec --size 250
part pv.1  --size 1 --grow

volgroup VolGroup00 pv.1
logvol / --fstype ext4 --fsoptions=noatime --name=LogVol00 --vgname=VolGroup00 --size=1 --grow
logvol /tmp --fstype ext4 --fsoptions=nodev,noexec --name=LogVol01 --vgname=VolGroup00 --size=1024
logvol swap --fstype swap --name=LogVol02 --vgname=VolGroup00 --recommended --maxsize=8192

# SERVICES

services --enabled=network,sshd
services --disabled=netfs

# PACKAGES

%packages --nobase --excludedocs

# bootloader
grub

# basic gnu/linux
coreutils

# package management
yum
yum-plugin-fastestmirror
yum-plugin-protectbase
yum-plugin-remove-with-leaves
yum-plugin-show-leaves
yum-plugin-versionlock
yum-plugin-priorities
yum-presto
yum-utils

# filesystem
e2fsprogs
lvm2

# selinux tools
policycoreutils-python
setools-console

# servers
openssh-server
openssh-client

# kernel et al.
kernel-firmware

# omit crap
-*-firmware
-b43-openfwwf
-cronie
-cronie-anacron
-crontabs
-cyrus-sasl
-info
-postfix
-sudo
-sysstat
-mysql-libs

%end

# PRE-INSTALLATION

%pre
%end

# POST-INSTALLATION

%post --log=/root/postinstall.log

# configure system
echo 'umask 027' >> /etc/sysconfig/init
echo 'NOZEROCONF=yes' >> /etc/sysconfig/network
authconfig --passalgo=sha512 --update

# install updates
yum clean all
yum -y update
yum clean packages

# fix filesystem permissions
chmod 700 /root
chmod 700 /var/log/audit
chmod 600 /var/log/audit/*

%end

# vi:ft=sh