f-server.cfg

# Use network installation
url --url="https://download.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os"

# Clear all partitioning information
clearpart --all

# Default partitioning
autopart --fstype=ext4 --type=lvm

# Use text install
text

# Keyboard layouts
keyboard --vckeymap=us --xlayouts='us'

# System language
lang en_US.UTF-8

# System timezone
timezone Europe/Prague --isUtc

# Default initial password for root
rootpw --iscrypted $6$JZC1wzFRhb1hxl16$41jR/jjOcNXtPB/7vTWh9DxXx.6bRg3R6.JtEX8HJB4xyAexH.MkdR.JBAzz6zvQOIG3f5FeBAiGSEhLKXQvG0

# Run the Setup Agent on first boot
firstboot --disable

# System services
services --enabled="sshd"

# Start the X server
xconfig --startxonboot

# Action once the installation's finished
reboot

%packages

ansible
git

@^server-product-environment

%end

%post

# Create ansible system user.
# We're doing it here rather than using the kickstart 'user' command, because
# 'user' forces explicit usage of the UID in order to create a system user
# which may be hard to guarantee across all services, whereas 'useradd -r'
# picks the first available system UID automatically.
useradd -r -g wheel -m ansible
#
# Disable requiretty for the ansible user (SSH 'pipelining' in Ansible)
echo "Defaults:ansible !requiretty" >> /etc/sudoers.d/ansible

# Enable passwordless sudo for the ansible user
echo "ansible ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/ansible

# Create /home/ansible/.ssh
mkdir -m 0700 /home/ansible/.ssh

# Install SSH key for the Ansible user
cat <<EOF >/home/ansible/.ssh/authorized_keys
ssh-rsa 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 ansible
EOF

# Apply the correct ownership and SELinux context
chmod 0600 /home/ansible/.ssh/authorized_keys
chown -R ansible /home/ansible/.ssh
restorecon -R /home/ansible/.ssh

%end