new files from source

Infrastrucutre as Code/Packer/rocky10-proxmox-template/http/ks.cfg

@@ -0,0 +1,82 @@
+#version=RHEL10
+lang en_US.UTF-8
+keyboard us
+timezone Europe/Sofia --utc
+authselect --enablefeatures=with-faillock
+selinux --enforcing
+firewall --disabled
+services --enabled=sshd,qemu-guest-agent
+firstboot --disable
+network --bootproto=dhcp --device=link --onboot=on --hostname=rocky10 --activate
+ignoredisk --only-use=vda
+rootpw --plaintext thisisatemporarypassword
+reboot
+
+# Clear all partitions and create new MBR label
+clearpart --all --initlabel --drives=vda --disklabel=msdos
+
+# /boot with ext4
+part /boot --fstype="ext4" --size=1024 --ondisk=vda --label=BOOT
+
+# LVM physical volume on rest of disk
+part pv.01 --fstype="lvmpv" --ondisk=vda --grow --size=1 --label=PV01
+volgroup rocky pv.01
+
+# Logical volumes
+logvol /tmp              --fstype=xfs --size=2048  --name=lv_tmp     --vgname=rocky --fsoptions="defaults,nodev,nosuid"
+logvol /home             --fstype=xfs --size=2048  --name=lv_home    --vgname=rocky --fsoptions="defaults,nodev"
+logvol /var              --fstype=xfs --size=4096  --name=lv_var     --vgname=rocky --fsoptions="defaults,nodev"
+logvol /var/tmp          --fstype=xfs --size=1024  --name=lv_vartmp  --vgname=rocky --fsoptions="defaults,nodev,nosuid,noexec"
+logvol /var/log          --fstype=xfs --size=2048  --name=lv_varlog  --vgname=rocky --fsoptions="defaults,nodev,noexec,nosuid"
+logvol /var/log/audit    --fstype=xfs --size=2048  --name=lv_audit   --vgname=rocky --fsoptions="defaults,nodev,noexec,nosuid"
+logvol /                 --fstype=xfs --name=lv_root --vgname=rocky --grow --size=512 --fsoptions="defaults"
+
+# BIOS-compatible bootloader
+bootloader --location=mbr --boot-drive=vda
+
+# Repositories
+repo --name="base" --baseurl=https://download.rockylinux.org/pub/rocky/10/BaseOS/x86_64/os/
+repo --name="appstream" --baseurl=https://download.rockylinux.org/pub/rocky/10/AppStream/x86_64/os/
+
+%packages
+@^minimal-environment
+openssh-server
+openssh-clients
+qemu-guest-agent
+nano
+zsh
+git
+curl
+sudo
+util-linux-user
+rsync
+tree
+nmap-ncat
+%end
+
+%post --erroronfail
+
+# Enable Docker repository
+dnf install -y epel-release dnf-plugins-core
+dnf config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
+
+# Install Docker fastfetch jq
+dnf install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin fastfetch jq
+
+# Enable services
+systemctl enable sshd
+systemctl enable docker
+systemctl restart docker
+systemctl restart sshd
+
+# Enable password authentication for SSH
+cat > /etc/ssh/sshd_config.d/99-password-login.conf <<EOF
+PermitRootLogin yes
+PasswordAuthentication yes
+Subsystem sftp /usr/libexec/openssh/sftp-server
+EOF
+
+# Optional: enable LVM resize service (if available)
+systemctl enable resize-lvm.service || true
+
+%end