add new dish and new recipe

bare-metal encrypted desktop

dishes/desktop-encrypted.cfg

@@ -0,0 +1,160 @@
+# Generated by pykickstart v3.34
+#version=DEVEL
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# Root password
+rootpw --iscrypted --lock locked
+# System language
+lang en_US.UTF-8
+# Shutdown after installation
+shutdown
+# Use text mode install
+text
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Firewall configuration
+firewall --enabled --service=mdns
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# System timezone
+timezone Europe/Paris --utc
+# SELinux configuration
+selinux --enforcing
+# System services
+services --disabled="sshd" --enabled="NetworkManager"
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=384 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --luks-version=luks2
+
+%post --logfile=/opt/base.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/opt/base-desktop-gnome.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+[org.gnome.desktop.background]
+picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/opt/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%packages --exclude-weakdeps
+@core
+@hardware-support
+NetworkManager-wifi
+dejavu-sans-mono-fonts
+elementary-wallpapers-gnome.noarch
+fedora-remix-logos
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+libusb
+mesa-dri-drivers
+nano
+neofetch
+pciutils
+usbutils
+wget
+wpa_supplicant
+-fedora-logos
+-fedora-release
+-fedora-release-common
+-fedora-release-identity-basic
+-fedora-release-notes
+-gnome-tour
+
+%end

recipes/desktop-encrypted.cfg

@@ -0,0 +1,20 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# What ? This kickstart file bootstraps a desktop machine using GNOME Shell with full disk encryption.
+
+# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
+# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
+# ksflatten -c desktop-encrypted.cfg -o ../dishes/desktop-encrypted.cfg
+
+%include ../ingredients/base-fedora-repo.cfg # offical repositories for Fedora
+%include ../ingredients/base-storage-encrypted.cfg # base storage with full disk encryption
+%include ../ingredients/base.cfg # A minimal machine
+%include ../ingredients/base-desktop-gnome.cfg # A desktop environment based on GNOME Shell
+%include ../ingredients/base-initial-setup-gnome.cfg # Includes initial-setup for GNOME Shell, allowing for the creation of a user after the first boot, as well as some basic configuration
+
+poweroff # Shut down the system after a successful installation