#version=RHEL9
# Use graphical install
#text
services --disabled=rdma-ndd

%packages
@^server-product-environment
kexec-tools

%end

# Keyboard layouts
keyboard --xlayouts='se'
# System language
lang en_US --addsupport=sv_SE.UTF-8

# Use network installation
url --url="http://aughra.uppmax.uu.se/repos/mirror/live/rocky/9/BaseOS/x86_64/os/"

# System timezone
timezone Europe/Stockholm --isUtc --ntpservers=89.44.250.115,89.44.250.116

eula --agreed
logging --host=172.18.37.109
reboot

# Root password
rootpw --plaintext uppmaxroot
firewall --disabled

%addon com_redhat_kdump --enable --reserve-mb='auto'

%end

%pre

%end

%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end

%post --logfile=/root/post_install.log

sed -i "s/^PasswordAuthentication.*/PasswordAuthentication no/"  /etc/ssh/sshd_config
echo "Match Address 172.18.84.2,172.18.84.3,172.18.37.100,172.18.37.67" >>/etc/ssh/sshd_config
echo "PasswordAuthentication yes" >>/etc/ssh/sshd_config

mkdir /etc/uppmax.repos.d
echo reposdir=/etc/uppmax.repos.d >>/etc/yum.conf

cat <<EOF > /etc/uppmax.repos.d/Rocky-9.repo
[baseos]
name=Rocky Linux 9 BaseOS
baseurl=http://aughra.uppmax.uu.se/repos/mirror/live/rocky/9/BaseOS/x86_64/os/
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial

[appstream]
name=Rocky Linux 9 AppStream
baseurl=http://aughra.uppmax.uu.se/repos/mirror/live/rocky/9/AppStream/x86_64/os/
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial

[extras]
name=Rocky Linux 9 Extras
baseurl=http://aughra.uppmax.uu.se/repos/mirror/live/rocky/9/extras/x86_64/os/
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial

[PowerTools]
name=Rocky Linux 9 PowerTools
baseurl=http://aughra.uppmax.uu.se/repos/mirror/live/rocky/9/PowerTools/x86_64/os/
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial

cat <<EOF > /etc/resolv.conf_uppmax
options timeout:1
options rotate
options attempts:5
nameserver 172.18.37.34
nameserver 172.18.37.37
search uppmax.uu.se 
EOF

rm /etc/resolv.conf
ln -s /etc/resolv.conf_uppmax /etc/resolv.conf

echo $hostname >/etc/hostname

echo '*.* @@172.18.37.109:514' >>/etc/rsyslog.conf
systemctl restart  rsyslog

%end