text

logging --level=info

lang en_US.UTF-8
timezone Asia/Shanghai --isUtc
keyboard --vckeymap=us --xlayouts='us'

user --name anuser --iscrypted --password=$6$aMtlG.QNJ4krunUE$qJADOFr9H9f89Dt8icdmJ50U4w/nV4CL6mwvY2JptN6kAkzsHR0AAowEZ/SGvhrsAxHYiyxC4xBoOSOvsq7yq1 --groups=sudo
rootpw --iscrypted thereisnopasswordanditslocked --lock

network  --bootproto=dhcp --device=link --activate --onboot=on --nameserver='192.168.122.1'
network  --hostname=localhost.localdomain

services --enabled="chronyd"
firewall --disabled
selinux --disabled
firstboot --disable

bootloader --location=mbr
text
skipx
logging --level=info
clearpart --drives=vda

%pre --erroronfail
/usr/bin/dd bs=512 count=10 if=/dev/zero of=/dev/vda
/usr/sbin/parted -s /dev/vda mklabel gpt
/usr/sbin/parted -s /dev/vda print
/usr/bin/sleep  30
%end
part biosboot --fstype=biosboot --size=2 --ondisk=vda
part /boot/efi --fstype=efi --size=200 --ondisk=vda
# Because of the builder cannot recognize xfs latest feature, disable the features for temporary
part / --fstype=xfs --mkfsoptions="-i nrext64=0 -m bigtime=0,inobtcount=0" --grow --size=10240 --ondisk=vda --label=root


shutdown

%packages --ignoremissing
@base
@core
gcc
ssh
wget
curl
sysstat
grub2-pc
grub2-efi-x64
shim
efibootmgr
efivar
grubby
kernel
python3

%end

%post
mkdir -p /etc/dracut.conf.d
echo 'add_drivers+=" nvme "' >> /etc/dracut.conf.d/nvme.conf
dracut -f /boot/initramfs-$(uname -r).img $(uname -r)

/usr/sbin/parted -s /dev/vda disk_set pmbr_boot off
#mv /boot/efi/EFI/anolis/grub.cfg /boot/grub2/
#mv /boot/efi/EFI/anolis/grubenv /boot/grub2/
# cp /boot/grub2/grub* /boot/efi/EFI/anolis/
grub2-mkconfig -o /boot/efi/EFI/anolis/grub.cfg
grub2-mkconfig -o /boot/grub2/grub.cfg


cat <<'EOF' > /etc/grub2-efi.cfg
search --no-floppy --set prefix --file /boot/grub2/grub.cfg
set prefix=(\$prefix)/boot/grub2
configfile \$prefix/grub.cfg
EOF

sed -i '/^root/ a\anuser    ALL=(ALL)       ALL'  /etc/sudoers
sed -i 's/PermitRootLogin yes/PermitRootLogin no/g' /etc/ssh/sshd_config
%end