# System authorization information
auth --enableshadow --passalgo=sha512

# Use network installation
url --url="https://mirrors.edge.kernel.org/centos/7.6.1810/os/x86_64/"

# Use cmdline install
cmdline

# Run the Setup Agent on first boot
firstboot --enable
group --name=webdev
group --name=gitters
group --name=deployers
ignoredisk --only-use=vda

# Keyboard layouts
keyboard --vckeymap=es --xlayouts='es'

# System language
lang en_US.UTF-8

# Network information
network  --bootproto=dhcp --device=eth0 --ipv6=auto --activate
network  --bootproto=static --device=eth1 --ip=192.168.77.10 --netmask=255.255.255.0 --onboot=off --ipv6=auto
network  --hostname=centos7.virt.g02.org

# Root password
rootpw --iscrypted $6$GLBGmaZ8VLYmSnnS$wMiCxxiGoVQXFPAMB0tul2yUmk7XiadZqLseGxS.hXmYyId.wwA1AFsrGry1X2pfsgukYUpBefeUsYj9J6vNa/


# System services
services --enabled="chronyd"

# System timezone
timezone Etc/UTC --isUtc
user --groups=wheel,webdev,gitters,deployers --name=renich --gecos="Renich Bon Ciric" --iscrypted --password="$6$GLBGmaZ8VLYmSnnS$wMiCxxiGoVQXFPAMB0tul2yUmk7XiadZqLseGxS.hXmYyId.wwA1AFsrGry1X2pfsgukYUpBefeUsYj9J6vNa/"

# System bootloader configuration
bootloader --append=" crashkernel=auto" --location=mbr --boot-drive=vda

# Partition clearing information
clearpart --none --initlabel

# Disk partitioning information
part /boot --fstype="xfs" --ondisk=vda --size=1024
part swap --fstype="swap" --ondisk=vda --recommended
part btrfs.156 --fstype="btrfs" --ondisk=vda --grow
btrfs none --label=main --data=single btrfs.156
btrfs /var --subvol --name=var LABEL=var
btrfs / --subvol --name=root LABEL=root
btrfs /srv --subvol --name=srv LABEL=srv
btrfs /home --subvol --name=home LABEL=home

# repos
repo --name=epel --mirrorlist="https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64"

%packages
@^minimal
@core
bash-completion
chrony
epel-release
fail2ban-firewalld
fail2ban-systemd
git
kexec-tools
openscap
openscap-scanner
rpmconf
scap-security-guide
vim

%end

%addon
com_redhat_kdump --enable --reserve-mb='auto'

%end

%anaconda
pwpolicy root --minlen=6 --minquality=50 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=50 --notstrict --nochanges --notempty
pwpolicy luks --minlen=6 --minquality=50 --notstrict --nochanges --notempty

%end