43 lines
1.3 KiB
INI
43 lines
1.3 KiB
INI
# Kickstart for the Packer build VM only — this machine is thrown away;
|
|
# its disk contents become the diskless root tree.
|
|
text
|
|
lang en_AU.UTF-8
|
|
keyboard us
|
|
timezone Australia/Adelaide --utc
|
|
|
|
# Throwaway credential for the Packer SSH communicator.
|
|
# MUST match var.build_password in diskless.pkr.hcl.
|
|
rootpw --plaintext packer-build-only
|
|
|
|
network --bootproto=dhcp --activate
|
|
firewall --disabled
|
|
selinux --enforcing
|
|
|
|
# Simple single partition: we only ship the file tree, not the disk layout
|
|
zerombr
|
|
clearpart --all --initlabel
|
|
part / --fstype=xfs --grow
|
|
|
|
bootloader --location=mbr
|
|
reboot
|
|
|
|
%packages --excludedocs
|
|
# Install-time set kept to what the minimal ISO's BaseOS repo reliably carries
|
|
# (core + sshd + chrony). The diskless tooling — wpa_supplicant, tpm2-tools,
|
|
# tpm2-tss, nvme-cli, cryptsetup, dracut-network, openssl — is installed by the
|
|
# Packer shell provisioner from the online repos *before* the initramfs is
|
|
# built, so the build does not depend on those packages being bundled on
|
|
# whichever ISO variant (minimal or dvd) is used here.
|
|
@^minimal-environment
|
|
kernel
|
|
openssh-server
|
|
chrony
|
|
-firewalld
|
|
%end
|
|
|
|
%post
|
|
# Permit the Packer communicator (image hygiene step disables this later
|
|
# if desired; diskless hosts should get real SSH config from your config mgmt)
|
|
sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config
|
|
%end
|