#Generated by Kickstart Configurator

#System language
lang en_US

#Language modules to install
langsupport --default en_US en_US 

#System keyboard
keyboard us

#System mouse
mouse --emulthree genericps/2

#System timezone
timezone --utc Europe/Amsterdam

#Root password
rootpw --iscrypted 7MgBKLbcxLPOQ

#Reboot after installation
reboot

#Use text mode install
text

#System bootloader configuration
bootloader --location=mbr 

#Install Red Hat Linux instead of upgrade
install

#Use HTTP installation media
url --url http://www.dutchgrid.nl/install/redhat/7.3/en/os/i386

#Clear the Master Boot Record
zerombr yes

#Clear all partitions from the disk
clearpart --all --initlabel 

#Disk partitioning information
part /boot --fstype ext3 --size 64 --asprimary --ondisk hda 
part / --fstype ext3 --size 8192 --asprimary --ondisk hda 
part  swap --size 1024 --asprimary --ondisk hda 
part /export/project --fstype ext3 --size 1 --grow --ondisk hda 

#Use DHCP networking
#network --bootproto dhcp
network --device eth0 --bootproto static --ip 192.16.186.231 --netmask 255.255.255.0 --gateway 192.16.186.254 --nameserver 192.16.199.1 --hostname tbn06.nikhef.nl

#System authorization information
auth  --useshadow 

#Firewall configuration
#firewall --medium --ssh --dhcp --http 

#Do not configure the X Window System
skipx

%packages
@Classic X Window System
@X Window System
@KDE
@Network Support
@Messaging and Web Tools
@NFS File Server
@Web Server
@DNS Name Server
@Utilities
@Legacy Application Support
@Software Development
@Kernel Development
perl-suidperl
openssh-server
vim-enhanced
openssl-perl
perl-TimeDate
kernel-smp
compat-egcs-c++
rsync
kde1-compat
perl-Archive-Tar
enscript
rdist
openldap-servers
w3c-libwww-apps
firewall-config
compat-egcs
a2ps
perl-Date-Calc
tcpdump
w3c-libwww
libpcap
tripwire
lsof
openssh-askpass
XFree86-compat-libs
bc
vim-X11
klpq
lynx
wget
ntp

%post

LOG=/root/updates.log
LIST=updates-20030326
NTPHOST=192.16.186.225

echo "Setting filewall config" >>$LOG

#configure proper firewall for LCFGng server
mv /etc/sysconfig/ipchains /etc/sysconfig/ipchains.original
cat > /etc/sysconfig/ipchains <<EOF
:input ACCEPT
:forward ACCEPT
:output ACCEPT
#
# allow incoming ssh from anywhere
-A input -s 0/0 -d 0/0 22 -p tcp -y -j ACCEPT
#
# connect to web server from nodes and publicfarmnet
-A input -s 192.168/255.255.0.0 -d 0/0 80 -p tcp -y -j ACCEPT
-A input -s 192.16.186.224/255.255.255.224 -d 0/0 80 -p tcp -y -j ACCEPT
#
# bootp/tftp from ditto
-A input -s 192.168/255.255.0.0 -d 0/0 67:69 -p udp -j ACCEPT
-A input -s 192.16.186.224/255.255.255.224 -d 0/0 67:69 -p udp -j ACCEPT
#
# all from localhost
-A input -s 0/0 -d 0/0 -i lo -j ACCEPT
#
# filter system services under 1024 and dangerous ones
-A input -p tcp -s 0/0 -d 0/0 0:1023 -y -j REJECT
-A input -p tcp -s 0/0 -d 0/0 2049 -y -j REJECT
-A input -p udp -s 0/0 -d 0/0 0:1023 -j REJECT
-A input -p udp -s 0/0 -d 0/0 2049 -j REJECT
-A input -p tcp -s 0/0 -d 0/0 6000:6009 -y -j REJECT
-A input -p tcp -s 0/0 -d 0/0 7100 -y -j REJECT
EOF



# get updates

touch $LOG
echo "Getting updates from list $LIST" >> $LOG
date >>$LOG

GET http://www.dutchgrid.nl/install/redhat/updates/7.3/en/os/i386/$LIST > /tmp/$LIST

sed -e 's/^/http:\/\/www.dutchgrid.nl\/install\/redhat\/updates\/7.3\/en\/os\/i386\//' /tmp/$LIST > /tmp/url-$LIST

echo "Retrieved list, freshening install" >>$LOG
date >>$LOG

rpm -Fvh `cat /tmp/url-$LIST` >>$LOG 2>&1

echo "Completed" >>$LOG
date >>$LOG


# configure NTP

echo "Configuring NTP service from $NTPHOST" >>$LOG

mv /etc/ntp.conf /etc/ntp.conf.original >>$LOG 2>&1
cat > /etc/ntp.conf <<EOF
server $NTPHOST
driftfile /etc/ntp/drift
broadcastdelay  0.008
authenticate no
EOF

echo "Enabling NTP" >>$LOG
/sbin/chkconfig --level 345 ntpd on >>$LOG 2>&1

echo "Done" >>$LOG