#version=28
install

# System authorization information
auth --enableshadow --passalgo=sha512
#auth --enableshadow --enablecache --passalgo=sha256

# NFS instalace:
#nfs --server=192.168.1.22 --dir=/mnt/ARCHIV/dist/RH/fedora/28/x86_64/os
nfs --server=192.168.1.254 --dir=/mnt/data/SW/dist/RH/fedora/28/Everything/x86_64/os
# Tady vadi ten '--opts="nolock"'
#nfs --server=ws22: --dir=/mnt/ARCHIV/dist/RH/fedora/28/x86_64/os --opts="nolock"
# Use CDROM installation media
#cdrom

# Run the Setup Agent on first boot
firstboot --enable

# Keyboard layouts
# Virtual Console Keymaps: cz/cz-bksl/cz-dvorak-ucw/cz-qwerty/cz-qwerty_bksl/cz-rus
#	(legacy: cz-lat2/cz-lat2-prog/cz-us-qwertz)
# xlayouts: cz/cz(bksl)/cz(qwerty)/cz(qwerty_bksl)/cz(ucw)/cz(dvorak-ucw)/cz(rus)
# switch: 1)prepinani rozvrzeni 2)Key to choose 3rd/5rd level 3)Ctrl key position 4)keyboard LED to show alternative layout 5)numeric keypad layout 6)misc.key behaviour
#1 grp:rwin_switch/grp:lwin_toggle/grp:lctrl_lwin_rctrl_menu/grp:caps_toggle/...
#2 lv3:switch/lv3:menu_switch/lv3:ralt_switch_multikey/lv3:caps_switch_latch/..   lv5:lsgt_switch_lock/lv5:rwin_switch_lock/..
#3 ctrl:nocaps/ctrl:lctrl_meta/ctrl:swapcaps/ctrl:rctrl_ralt/ctrl:menu_rctrl/ctrl:swap_lalt_lctl/ctrl:swap_lwin_lctl/ctrl:swap_lalt_lctl_lwin/...
#4 grp_led:caps/grp_led:scroll/grp_led:num
#5 keypad:legacy/keypad:oss/keypad:future/...
#6 caps:internal_nocancel/caps:shiftlock/altwin:menu/altwin:meta_alt/altwin:swap_lalt_lwin/...
#7 terminate:ctrl_alt_bksp
#keyboard --vckeymap=us --xlayouts='us','cz' --switch='grp:alt_shift_toggle'
keyboard --vckeymap=cz-lat2-prog --xlayouts='us','cz (qwerty)' --switch='grp:caps_toggle'
#keyboard --vckeymap=us --xlayouts='us','cz' --switch='grp:alt_shift_toggle'

# System language
#lang en_US.UTF-8 --addsupport=cs_CZ.UTF-8
# zda se, ze F25 uz neumoznuje specifikaci '.ENCODING' ('.UTF-*'), takze ted to bude jen:
#lang cs_CZ --addsupport=en_US
lang en_US --addsupport=cs_CZ

# Network information
# nemohu mit '--device=eth0', protoze po startu mam ne eth0, ale treba 'p4p2' (i kdyz dam 'net.ifnames=0' kernelu). A '--biosdevname=0'
#   anakonda nezna (ac by podle Inst Guide mela) a krachne
#network --onboot=yes --noipv6 --bootproto=static --gateway=192.168.1.254 --ip=192.168.1.250 --nameserver=192.168.1.254 --netmask=255.255.255.0 --hostname=slunicko.skolkastenovice
#network --onboot=yes --noipv6 --bootproto=dhcp --hostname=frantik.hanzlici.cz
# tohle asi nejde, anaconda se zastavi:
#network --onboot=yes --noipv6 --bootproto=static --ip=192.168.1.241 --netmask=255.255.255.0 --hostname=ns.hanzlici.cz
network --device=link --onboot=yes --noipv6 --bootproto=dhcp --hostname=rolnicka.tezap.home
# druhy 'network ...' davat nebudu, kdyz nevim device:
#network --device=eth1 --onboot=yes --noipv6 --bootproto=static --ip=192.168.0.250 --netmask=255.255.255.0 --nodefroute

# System timezone
#timezone Europe/Prague --isUtc --nontp
# ve F23+ je, zda se, misto '--isUtc' jen '--utc':
#timezone Europe/Prague --utc --nontp
timezone --utc Europe/Prague

# Root & user accounts a password (parms: --groups/--homedir=/--lock/--uid=/--gid=/--shell=/--gecos=)
rootpw --iscrypted $6$QtELgZ3Gc5uuy.oH$OrTCnlHs/MqIjreUTOoa.8lWXgmeYzZV0mMiGuwsNc6sZhrE0YWpdQJJrrI4wqaQCuqspFykK.2T6oYmQt4xN/
user --name=hanzlik --uid=1000 --groups=wheel,tty,dialout,tcpdump,wireshark --gecos="Franta Hanzlik, 604-117319, franta@hanzlici.cz" --password=$6$0qhwyi/qEzQv9eaB$bb0h3fr9KCKSDbXNBLASSpI2hg8FSMqDUN4w46PcIfTlDlloMG3H0zlTJrRPyCklsZ/q/M4XB8KvWShU5eJfe/ --iscrypted
# 'sskey': pridej SSH klic do uzivatelova 'authorized_keys'. Pouzil bych v pripade, ze se na instalovany stroj bude zvenku nekdo hlasit (svym privatnim klicem):
sshkey --username=hanzlik "AAAAB3NzaC1yc2EAAAABIwAAAQEA6M65IwtXu3IVsBLt6j8l+HyULK8QBEuJZDwrDXTNUix+QqtHCcTpG1cWdSDExxSkHRvIGk1b+o3+k734dCU3IVkUDxCUCZ0t0D0BoxBTE4e8QxCfoeU1hEm5sZh6dkNpdoEF/Qx6kwK4fyOfvq7Lr6F2XOJoQubTeHxUCf9LPhbAkwh5Waf25u6aoGjVqM49z+mGEX/b0wsOZRTj9FmJAVXIPXj4ICbUY/ttCnqWdU90apyy2ZVuplrApaLYOKzNQFFj3ZB+xhRlg3xF/wCtuuP0CeauzkgxdNaIquL/s604Zbc07xElDowUw1pUlQPgo7X3Vw2ZtQ=="
user --name=rsra-cfh --uid=1001  --gecos="Prijima Prikazy od spravy"
#sshkey --username=rsra-cfh ""
user --name=ktpd-ffh --uid=1002  --gecos="Prijima Soubory od spravy"
#sshkey --username= ""
user --name=ddcssd-rt --uid=1003 --gecos="Otevre Zpetny tunel na spravu"
#sshkey --username= ""
user --name=pcguest --uid=1004   --gecos="Anonymni Samba uzivatel, rezervovany ucet" --lock
#sshkey --username= ""
user --name=nospam --uid=1005    --gecos="Antispamovy uzivatel, rezervovany ucet" --lock

# X Window System configuration information
#!! A.4.6: volba 'xconfig' umoznuje v '--defaultdesktop=' jen GNOME n. KDE !!
xconfig  --startxonboot --defaultdesktop=MATE

# System bootloader configuration
#bootloader --location=mbr --boot-drive=sda --timeout=8 --append="disable ipv6.disable=1 net.ifnames=0 systemd.log_target=syslog-or-kmsg acpi_enforce_resources=lax"
bootloader --location=mbr --boot-drive=sda --timeout=8 --append="disable ipv6.disable=1 net.ifnames=0 systemd.log_target=syslog-or-kmsg"
#bootloader --location=mbr --boot-drive=sda --append="disable ipv6.disable=1"

# Partition clearing information
#clearpart --none --initlabel 

#selinux --enforcing
selinux --permissive
#selinux --disabled

# pokud mam ve spec. balicku '-firewalld' (neinstalovat), tak musim FW zakazat:
firewall --disable
#firewall --trust=ethe0 --service=ssh --port=22221:tcp

repo --name="mupdates"  --baseurl=nfs://192.168.1.254:/mnt/data/SW/dist/RH/fedora/28/updates/x86_64 --cost=1000
repo --name="rff"  --baseurl=nfs://192.168.1.254:/mnt/data/SW/dist/RH/fedora/28/rpmfusion-free/x86_64/os --cost=1000
repo --name="rfnf"  --baseurl=nfs://192.168.1.254:/mnt/data/SW/dist/RH/fedora/28/rpmfusion-nonfree/x86_64/os --cost=1000
repo --name="rffu"  --baseurl=nfs://192.168.1.254:/mnt/data/SW/dist/RH/fedora/28/rpmfusion-free-updates/x86_64 --cost=1000
repo --name="rfnfu"  --baseurl=nfs://192.168.1.254:/mnt/data/SW/dist/RH/fedora/28/rpmfusion-nonfree-updates/x86_64 --cost=1000
#repo --name="mplanetccrma" --baseurl=nfs://192.168.1.254:/mnt/data/SW/dist/RH/fedora/28/planetccrma/x86_64 --cost=1000
#repo --name="moje"  --baseurl=nfs://192.168.1.254:/mnt/data/SW/dist/RH/fedora/28/moje/x86_64 --cost=1000

#  skupiny @Core a @Base jsou vzdy defaultne vybrany
%packages
# POZOR! na rozdil od dnf, anaconda neumi pouzit environment groups (custom-environment/minimal-environment/server-product-environment/workstation-product-environment/
#  cloud-server-environment/kde-desktop-environment/xfce-desktop-environment/lxde-desktop-environment/hawaii-desktop-environment/lxqt-desktop-environment/
#  cinnamon-desktop-environment/mate-desktop-environment/sugar-desktop-environment/developer-workstation-environment/web-server-environment/
#  infrastructure-server-environment/basic-desktop-environment
#@minimal-environment
#@server-product-environment
#@workstation-product-environment
#@lxde-desktop-environment
#@lxqt-desktop-environment
#@mate-desktop-environment 
#@cinnamon-desktop-environment
#@xfce-desktop-environment
#@web-server-environment
#@basic-desktop-environment
#@developer-workstation-environment
#
# a ted normal groups:
@admin-tools
#@audio
#@authoring-and-publishing
@base-x
@basic-desktop
#@c-development
#@design-suite
#@development-libs
#@development-tools
@dial-up
@directory-server
@dns-server
#@eclipse
#@editors
#@education
#@electronic-lab
# Tohle zavlece 'R' a spoustu balastu (-devel knihovny, gcc atd.):
#@engineering-and-scientific
@fedora-packager
#@font-design
#@fonts
@ftp-server
#@graphical-internet
#@graphics
#@guest-agents
@hardware-support
#@input-methods
#@java
#@legacy-fonts
#@legacy-network-server
#@legacy-software-development
#@legacy-software-support
#@libreoffice
#@lxde-desktop
#@lxqt-desktop
#@mail-server
@mate-applications
#@compiz
@mate-desktop
#@medical
#@mongodb
#@multimedia
@mysql
@network-server
#@office
@php
@printing
#@robotics-suite
#@rpm-development-tools
#@security-lab
@server-cfg
@smb-server
#@sound-and-video
@sql-server
@standard
@system-tools
@text-internet
#@virtualization
@web-server
#@window-managers
#@x-software-development
# Tady specificke:
remmina
remmina-plugins-spice
spice-gtk-tools
tftp
tftp-server
vacation
#ldminfod
#ltspfs
#chromium
#chromium-libs-media-freeworld
#wine
#winetricks
# aby system-config-printer mohl browse po samba tiskarnach, musi byt python3-smbc:
python3-smbc

# includovane sablony skupin programovych baliku:
#%include http://adm.hanzlici.cz/ks/28/_arduino_raspberry_AtmelAVR.inc
#%include http://adm.hanzlici.cz/ks/28/_desktop-apps-navic.inc
#%include http://adm.hanzlici.cz/ks/28/_hry-detske2.inc
#%include http://adm.hanzlici.cz/ks/28/_egroupware.inc
#%include http://adm.hanzlici.cz/ks/28/_hry-karetni.inc
#%include http://adm.hanzlici.cz/ks/28/_hry-skolka_male.inc
#%include http://adm.hanzlici.cz/ks/28/_hry-strilecky_male.inc
#%include http://adm.hanzlici.cz/ks/28/_hry-velike_detske.inc
#%include http://adm.hanzlici.cz/ks/28/_hry-velike_ostatni.inc
#%include http://adm.hanzlici.cz/ks/28/_hry2.inc
#%include http://adm.hanzlici.cz/ks/28/_hudba-noty.inc
#%include http://adm.hanzlici.cz/ks/28/_jsou_v_atrpms.inc
#%include http://adm.hanzlici.cz/ks/28/_logicke_vyukove_progamovani-pro-deti.inc
%include http://adm.hanzlici.cz/ks/28/_mate.inc
%include http://adm.hanzlici.cz/ks/28/_must-be_bez_mych.inc
%include http://adm.hanzlici.cz/ks/28/_must-be_desktop.inc
#%include http://adm.hanzlici.cz/ks/28/_must-be_mail_server.inc
%include http://adm.hanzlici.cz/ks/28/_must-be_router-firewall.inc
%include http://adm.hanzlici.cz/ks/28/_must-be_server.inc
#%include http://adm.hanzlici.cz/ks/28/_must-be_vcetne_mych.inc
#%include http://adm.hanzlici.cz/ks/28/_must-be_virtualizace.inc
%include http://adm.hanzlici.cz/ks/28/_must-not-be.inc
#%include http://adm.hanzlici.cz/ks/28/_photo-graphics-multimedia-baliky-basic.inc
#%include http://adm.hanzlici.cz/ks/28/_photo-graphics-multimedia-baliky-navic.inc
#%include http://adm.hanzlici.cz/ks/28/_pro_muj_development.inc
#%include http://adm.hanzlici.cz/ks/28/_pro_muj_development-navic.inc
%include http://adm.hanzlici.cz/ks/28/_pro-zaloha_cfg.inc
#%include http://adm.hanzlici.cz/ks/28/_simulatory.inc
#%include http://adm.hanzlici.cz/ks/28/_hry-strategicke2.inc

%end

%post --interpreter=/bin/bash --log=/root/ks-post.log
FV=28
if [[ $(uname -i) =~ ^i[3456]86$ ]]; then
  rpm -Uv http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm
#  rpm -Uv http://ccrma.stanford.edu/planetccrma/mirror/fedora/linux/planetccrma/$FV/i386/planetccrma-repo-1.1-3.fc$FV.ccrma.noarch.rpm
else
  rpm -Uv http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm
#  rpm -Uv http://ccrma.stanford.edu/planetccrma/mirror/fedora/linux/planetccrma/$FV/x86_64/planetccrma-repo-1.1-3.fc$FV.ccrma.noarch.rpm
fi
dnf -y install flash-plugin
{ pwd; df; ls -la /; } >/koren-list.lst
%end