#version=F26
# Keyboard layouts
keyboard --vckeymap=us --xlayouts='us'
# Root password
rootpw --iscrypted --lock thereisnopasswordanditslocked
# Use network installation
url --url="http://build.openanolis.cn/kojifiles/output/nightly/anolis-23-20250605.1/compose/os/x86_64/os/"
# System language
lang en_US.UTF-8
# Firewall configuration
firewall --disabled
repo --name="koji-override-0" --baseurl=http://build.openanolis.cn/kojifiles/repos/dist-an23.3-build/latest/$basearch/
# Shutdown after installation
shutdown
user --groups=sudo --name=anuser --password=$6$aMtlG.QNJ4krunUE$qJADOFr9H9f89Dt8icdmJ50U4w/nV4CL6mwvY2JptN6kAkzsHR0AAowEZ/SGvhrsAxHYiyxC4xBoOSOvsq7yq1 --iscrypted
# Network information
network  --bootproto=dhcp --device=link --nameserver=192.168.122.1 --activate
network  --bootproto=dhcp --hostname=localhost.localdomain
# System timezone
timezone America/New_York --isUtc
# Use text mode install
text
firstboot --disable
# SELinux configuration
selinux --disabled
# Do not configure the X Window System
skipx
# Installation logging level
logging --level=info
# System services
services --enabled="chronyd"
# System bootloader configuration
bootloader --location=mbr
# Disk partitioning information
part biosboot --fstype="biosboot" --ondisk=vda --size=1
part /boot/efi --fstype="efi" --ondisk=vda --size=1024
part / --fstype="ext4" --grow --ondisk=vda --size=10240 --label=root

%pre --erroronfail
/usr/bin/dd bs=512 count=10 if=/dev/zero of=/dev/vda
/usr/sbin/parted -s /dev/vda mklabel gpt
/usr/sbin/parted -s /dev/vda print
/usr/bin/sleep  30
%end

%post
mkdir -p /etc/dracut.conf.d
echo 'add_drivers+=" nvme "' >> /etc/dracut.conf.d/nvme.conf
dracut -f /boot/initramfs-$(uname -r).img $(uname -r)

/usr/sbin/parted -s /dev/vda disk_set pmbr_boot off
#mv /boot/efi/EFI/anolis/grub.cfg /boot/grub2/
#mv /boot/efi/EFI/anolis/grubenv /boot/grub2/
# cp /boot/grub2/grub* /boot/efi/EFI/anolis/


cat <<'EOF' > /etc/grub2-efi.cfg
search --no-floppy --set prefix --file /boot/grub2/grub.cfg
set prefix=(\$prefix)/boot/grub2
configfile \$prefix/grub.cfg
EOF

grub2-mkconfig -o /boot/efi/EFI/anolis/grub.cfg
grub2-mkconfig -o /boot/grub2/grub.cfg

sed -i '/^root/ a\anuser    ALL=(ALL)       ALL'  /etc/sudoers
sed -i 's/PermitRootLogin yes/PermitRootLogin no/g' /etc/ssh/sshd_config
%end

%addon com_redhat_kdump --enable --reserve-mb=auto


%end%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty

pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok

pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty

%end
%packages --ignoremissing
@base
@core
curl
gcc
grub2-efi-x64
grub2-pc
grubby
kernel
shim
ssh
sysstat
wget

%end