#version=RHEL10
lang en_US.UTF-8
keyboard us
timezone Europe/Sofia --utc
authselect --enablefeatures=with-faillock
selinux --enforcing
firewall --disabled
services --enabled=sshd,qemu-guest-agent
firstboot --disable
network --bootproto=dhcp --device=link --onboot=on --hostname=rocky10 --activate
ignoredisk --only-use=vda
rootpw --plaintext thisisatemporarypassword
reboot

# Clear all partitions and create new MBR label
clearpart --all --initlabel --drives=vda --disklabel=msdos

# /boot with ext4
part /boot --fstype="ext4" --size=1024 --ondisk=vda --label=BOOT

# LVM physical volume on rest of disk
part pv.01 --fstype="lvmpv" --ondisk=vda --grow --size=1 --label=PV01
volgroup rocky pv.01

# Logical volumes
logvol /tmp              --fstype=xfs --size=2048  --name=lv_tmp     --vgname=rocky --fsoptions="defaults,nodev,nosuid"
logvol /home             --fstype=xfs --size=2048  --name=lv_home    --vgname=rocky --fsoptions="defaults,nodev"
logvol /var              --fstype=xfs --size=4096  --name=lv_var     --vgname=rocky --fsoptions="defaults,nodev"
logvol /var/tmp          --fstype=xfs --size=1024  --name=lv_vartmp  --vgname=rocky --fsoptions="defaults,nodev,nosuid,noexec"
logvol /var/log          --fstype=xfs --size=2048  --name=lv_varlog  --vgname=rocky --fsoptions="defaults,nodev,noexec,nosuid"
logvol /var/log/audit    --fstype=xfs --size=2048  --name=lv_audit   --vgname=rocky --fsoptions="defaults,nodev,noexec,nosuid"
logvol /                 --fstype=xfs --name=lv_root --vgname=rocky --grow --size=512 --fsoptions="defaults"

# BIOS-compatible bootloader
bootloader --location=mbr --boot-drive=vda

# Repositories
repo --name="base" --baseurl=https://download.rockylinux.org/pub/rocky/10/BaseOS/x86_64/os/
repo --name="appstream" --baseurl=https://download.rockylinux.org/pub/rocky/10/AppStream/x86_64/os/

%packages
@^minimal-environment
openssh-server
openssh-clients
qemu-guest-agent
nano
zsh
git
curl
sudo
util-linux-user
rsync
tree
nmap-ncat
%end

%post --erroronfail

# Enable Docker repository
dnf install -y epel-release dnf-plugins-core
dnf config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

# Install Docker fastfetch jq
dnf install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin fastfetch jq

# Enable services
systemctl enable sshd
systemctl enable docker
systemctl restart docker
systemctl restart sshd

# Enable password authentication for SSH
cat > /etc/ssh/sshd_config.d/99-password-login.conf <<EOF
PermitRootLogin yes
PasswordAuthentication yes
Subsystem sftp /usr/libexec/openssh/sftp-server
EOF

# Optional: enable LVM resize service (if available)
systemctl enable resize-lvm.service || true

%end