fedora43 kickstart

text
reboot --eject
lang en_US.UTF-8
keyboard us
timezone America/Los_Angeles
timesource --ntp-server 0.rhel.pool.ntp.org
timesource --ntp-server 1.rhel.pool.ntp.org
timesource --ntp-server 2.rhel.pool.ntp.org
network --device=link --noipv4 --ipv6=auto --activate --hostname=opiss1
ignoredisk --only-use=nvme0n1
clearpart --all --initlabel --drives=nvme0n1
autopart --type=plain --noswap
rootpw --lock
user --name=munki --groups=wheel --iscrypted --password="*"
sshkey --username=munki "sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBP7ldkl/FpXtPBwvNMR/yxFaTjY7U3W32zWhvFFSlzWaiCrya3xmu2ts3gxvC5wXZoALuK6piF8HuqJKxYM4SoAAAAAEc3NoOg== munki@desktop"
selinux --permissive
firewall --disabled
services --enabled=chronyd,sshd,containerd,kubelet

repo --name=k8s-installer --baseurl=https://pkgs.k8s.io/core:/stable:/v1.35/rpm/
repo --name=kubernetes --baseurl=https://pkgs.k8s.io/core:/stable:/v1.35/rpm/ --install --excludepkgs=kubelet,kubeadm,kubectl,kubernetes-cni,cri-tools


%packages
@core
@standard
-zram-generator
-zram-generator-defaults
iproute-tc
container-selinux
tar
curl
wget
qemu-kvm
libvirt-client
kubelet
kubeadm
kubectl
kubernetes-cni
cri-tools
containerd

%end


%post --log=/root/ks-post.log

echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/10-disable-passwords.conf
echo "PermitRootLogin no" >> /etc/ssh/sshd_config.d/10-disable-passwords.conf
echo "munki ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/99-munki-nopasswd
chmod 440 /etc/sudoers.d/90-munki-nopasswd

cat <<EOF > /etc/modules-load.d/k8s.conf
overlay
br_netfilter
kvm
vhost_net
EOF

cat <<EOF > /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables  = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.ipv4.ip_forward                 = 1
net.ipv6.conf.all.forwarding        = 1
EOF

mkdir -p /etc/containerd
containerd config default | sed 's/SystemdCgroup = false/SystemdCgroup = true/' > /etc/containerd/config.toml

%end