From c7e7c8f21a324cdf72652dc653868286a5fa41ef Mon Sep 17 00:00:00 2001 From: luz Date: Tue, 29 Apr 2025 19:15:33 -0500 Subject: [PATCH] Extract parameters from core, and create new ingredients out of it, including for security., network, or services --- ingredients/core-network.cfg | 11 +++++++++++ ingredients/core-security-off.cfg | 12 ++++++++++++ ingredients/core-security-on.cfg | 12 ++++++++++++ ingredients/core-services.cfg | 10 ++++++++++ ingredients/core.cfg | 9 +-------- 5 files changed, 46 insertions(+), 8 deletions(-) create mode 100644 ingredients/core-network.cfg create mode 100644 ingredients/core-security-off.cfg create mode 100644 ingredients/core-security-on.cfg create mode 100644 ingredients/core-services.cfg diff --git a/ingredients/core-network.cfg b/ingredients/core-network.cfg new file mode 100644 index 0000000..2985e82 --- /dev/null +++ b/ingredients/core-network.cfg @@ -0,0 +1,11 @@ +# __ ____ ____ _____ +# ____ / /_ __ __/ / /___ ____ ___ ___ / __ \/ ___/ +# / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \ / / / /\__ \ +# / /_/ / / / / /_/ / / / /_/ / / / / / / __/ / /_/ /___/ / +# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ +# /_/ /____/ +# +# What ? This kickstart file provides the basic block to build a minimal operating system based on Fedora + +network --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network interfaces and set hostname. "link" selects the first device reaching an up state + diff --git a/ingredients/core-security-off.cfg b/ingredients/core-security-off.cfg new file mode 100644 index 0000000..530c19e --- /dev/null +++ b/ingredients/core-security-off.cfg @@ -0,0 +1,12 @@ +# __ ____ ____ _____ +# ____ / /_ __ __/ / /___ ____ ___ ___ / __ \/ ___/ +# / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \ / / / /\__ \ +# / /_/ / / / / /_/ / / / /_/ / / / / / / __/ / /_/ /___/ / +# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ +# /_/ /____/ +# +# What ? This kickstart ingredient sets security to low + +rootpw --lock --iscrypted locked # The root account is locked by default. The root user will not be able to log in from the console +selinux --disabled # Make sure SELinux is disabled ; other option: --enforcing +firewall --disabled # Make sure the firewall is disabled \ No newline at end of file diff --git a/ingredients/core-security-on.cfg b/ingredients/core-security-on.cfg new file mode 100644 index 0000000..f15d827 --- /dev/null +++ b/ingredients/core-security-on.cfg @@ -0,0 +1,12 @@ +# __ ____ ____ _____ +# ____ / /_ __ __/ / /___ ____ ___ ___ / __ \/ ___/ +# / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \ / / / /\__ \ +# / /_/ / / / / /_/ / / / /_/ / / / / / / __/ / /_/ /___/ / +# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ +# /_/ /____/ +# +# What ? This kickstart ingredient sets security to normal + +rootpw --lock --iscrypted locked # The root account is locked by default. The root user will not be able to log in from the console +selinux --enabled # Make sure SELinux is enabled ; other option: --disabled +firewall --enabled # Make sure the firewall is enabled \ No newline at end of file diff --git a/ingredients/core-services.cfg b/ingredients/core-services.cfg new file mode 100644 index 0000000..92d8cc0 --- /dev/null +++ b/ingredients/core-services.cfg @@ -0,0 +1,10 @@ +# __ ____ ____ _____ +# ____ / /_ __ __/ / /___ ____ ___ ___ / __ \/ ___/ +# / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \ / / / /\__ \ +# / /_/ / / / / /_/ / / / /_/ / / / / / / __/ / /_/ /___/ / +# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ +# /_/ /____/ +# +# What ? This kickstart file provides the basic block to build a minimal operating system based on Fedora + +services --enabled=NetworkManager,chronyd,systemd-resolved diff --git a/ingredients/core.cfg b/ingredients/core.cfg index 3722b18..af149b5 100644 --- a/ingredients/core.cfg +++ b/ingredients/core.cfg @@ -5,15 +5,8 @@ # / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ # /_/ /____/ # -# What ? This kickstart file provides the basic block to build a minimal operating system based on Fedora +# What ? This kickstart ingredients define the installation method text # Perform the kickstart installation in text mode -rootpw --lock --iscrypted locked # Lock the root account -selinux --disabled # Make sure SELinux is disabled ; other option: --enforcing -firewall --disable # Make sure the firewall is disabled - -services --enabled=NetworkManager,chronyd,systemd-resolved -network --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network interfaces and set hostname. "link" selects the first device reaching an up state - poweroff # Shut down the system after a successful installation \ No newline at end of file