You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
72 lines
1.8 KiB
72 lines
1.8 KiB
##
|
|
## Environment setup
|
|
##
|
|
|
|
# French I18n
|
|
lang fr_FR.UTF-8
|
|
|
|
# French keyboard layout
|
|
keyboard fr
|
|
|
|
# Timezone is UTC to avoid issue with DST
|
|
timezone UTC --utc
|
|
|
|
# Configure NTP
|
|
timesource --ntp-server=rhel.pool.ntp.org
|
|
|
|
# Which action to perform after install: poweroff or reboot
|
|
reboot
|
|
|
|
# Install mode: text (interactive installs) or cmdline (unattended installs)
|
|
text
|
|
|
|
##
|
|
## Storage configuration for only one disk
|
|
## /dev/disk/by-path/pci-0000:00:12.0-ata-1 instead of sda when sda is taken by the usb stick
|
|
##
|
|
zerombr
|
|
clearpart --all --initlabel
|
|
reqpart --add-boot
|
|
part pv.01 --size=1024 --grow --ondisk={{ kickstart_root_disk }}
|
|
volgroup rhel pv.01
|
|
logvol / --fstype="xfs" --size=10240 --name=root --vgname=rhel
|
|
|
|
##
|
|
## Network configuration
|
|
##
|
|
|
|
# Configure the first network device
|
|
network --bootproto=dhcp --device=enp1s0 --noipv6 --activate
|
|
|
|
# Configure hostname
|
|
network --hostname=kiosk.localdomain
|
|
|
|
##
|
|
## Ostree installation
|
|
##
|
|
|
|
# Use this to fetch from a remote URL
|
|
ostreesetup --nogpg --osname=rhel --remote=edge --url=http://{{ ansible_default_ipv4.address }}/repo --ref=rhel/9/x86_64/edge-kiosk
|
|
|
|
##
|
|
## Post install scripts
|
|
##
|
|
%post --log=/var/log/anaconda/post-install.log --erroronfail
|
|
# Add the pull secret to CRI-O and set root user-only read/write permissions
|
|
cat > /etc/crio/openshift-pull-secret << 'EOF'
|
|
{{ kickstart_microshift_pull_secret }}
|
|
EOF
|
|
chmod 600 /etc/crio/openshift-pull-secret
|
|
|
|
# User creation in the ostree is now deprecated. Doing it in the Kickstart, then.
|
|
groupadd -r kiosk
|
|
useradd -r -N -g kiosk -d /home/kiosk -m kiosk
|
|
|
|
# Configure the firewall with the mandatory rules for MicroShift
|
|
firewall-offline-cmd --zone=trusted --add-source=10.42.0.0/16
|
|
firewall-offline-cmd --zone=trusted --add-source=169.254.169.1
|
|
|
|
# Do not ask password for sudo
|
|
sed -i.post-install -e "s/^%wheel\tALL=(ALL)\tALL/%wheel ALL=(ALL) NOPASSWD: ALL/" /etc/sudoers
|
|
|
|
%end
|
|
|