install
reboot
lang en_US.UTF-8
keyboard us
url --url http://opspxe/mirror/scientificlinux/6.4/x86_64/ --proxy http://squid:3128
network --onboot yes --device eth0 --bootproto dhcp
rootpw  --iscrypted $6$.1GxX5Ew$FSEOtELWn21.92tlvxGNrIjDv.BNiFnNrcKOs.R6RvIiQSJnpyptO90oKUiCIpjRIbYlEss/VNN7p8/E7ftK8.
firewall --disabled
authconfig --enableldap --enablekrb5 --ldapserver=ldaps://ldap.cds.ligo-la.caltech.edu --ldapbasedn=dc=ligo,dc=org --krb5realm=LIGO.ORG --krb5kdc=cdskdc0.cds.ligo-la.caltech.edu,cdskdc1.cds.ligo-la.caltech.edu
selinux --permissive
timezone --utc America/Chicago
#bootloader --location=partition --driveorder=sdb --append="crashkernel=auto rhgb quiet"
bootloader --location=mbr --append="crashkernel=auto rhgb quiet"
# The following is the partition information you requested
# Note that any partitions you deleted are not expressed
# here so unless you clear all partitions first, this is
# not guaranteed to work
clearpart --all
#part / --fstype=ext4 --asprimary --grow --size=10000
#part swap --size=1024
part / --fstype=ext4 --asprimary --size=50000
part /tmp --fstype=ext4 --size=50000
part /var --fstype=ext4 --size=50000
part swap --size=4096
part /opt --fstype=ext4 --grow --size=200

# These repositories are only used during install time.  You must install
# the appropriate *.repo files if you wish to continue to use them after
# the host has been installed.
repo --name="lscsoft_install" --baseurl=http://www.lsc-group.phys.uwm.edu/daswg/download/software/scientificlinux/6.1/x86_64/
repo --name="LDG_EPEL6_install" --baseurl=http://www.lsc-group.phys.uwm.edu/epel/6/x86_64
repo --name="LDG_SL6.1-base_install" --baseurl=http://www.lsc-group.phys.uwm.edu/linux/scientific/6x/x86_64/os/
repo --name="LDG_SL6.1-securityupdates_install" --baseurl=http://www.lsc-group.phys.uwm.edu/linux/scientific/6x/x86_64/updates/security/
repo --name="ligocds_install" --baseurl=http://opspxe/ligo/scientificlinux/6.4/x86_64/
repo --name="epel" --baseurl=http://download.fedoraproject.org/pub/epel/6/x86_64/

%packages
@base
@client-mgmt-tools
@core
@debugging
@basic-desktop
@desktop-debugging
@desktop-platform
@directory-client
@fonts
@general-desktop
@graphical-admin-tools
@input-methods
@internet-applications
@internet-browser
@java-platform
@legacy-x
@misc-sl
@network-file-system-client
@office-suite
@print-client
@remote-desktop-clients
@scalable-file-systems
@server-platform
@x11
mtools
pax
oddjob
wodim
sgpio
genisoimage
device-mapper-persistent-data
samba-winbind
certmonger
pam_krb5
krb5-workstation
gnome-pilot
libXmu
SL_desktop_tweaks
openldap-clients
policycoreutils-python
nagios-plugins
nagios-plugins-perl
tcllib
nrpe
xinetd
ssmtp
ganglia-gmond
emacs
flex
bison
bzip2-devel
gimp
inkscape
pdfedit
expect
git
eclipse
telnet
geeqie
pdftk
ipython
nagios-plugins
nagios-plugins-linux_raid
nagios-plugins-disk
nagios-plugins-file_age
nagios-plugins-users
nagios-plugins-procs
nagios-plugins-load
nagios-plugins-perl
#puppet
# EPEL
root
root-graf3d
root-physics
yum-plugin-priorities
# Required for CDS control room software
subversion
gcc-c++
libtool
python-devel
readline-devel
libXmu-devel
libXpm-devel
libXaw-devel
libtiff-devel
xz-devel
pcre-devel
doxygen
graphviz
swig
openssl-devel
mesa-libGL-devel
mesa-libGLU-devel
libxml2-devel
expat-devel
tcl
tsclient
xterm
python-argparse
perl-Time-HiRes
python-pydot
# Only in the LDG repos
lapack-devel
glew-devel
gsl-devel
gd-devel
fftw-devel
t1lib-devel
openmotif-devel
re2c
ldg-repo-config
# In the local CDS SL6 repository
pylon
epel-release
ligo-release
cdssoft-release
rpmfusion-free-release
rpmfusion-nonfree-release
fglrx-x11-drv
kmod-fglrx
nagios-plugins-linux_raid
nagios-plugins-dir
tclnagios
python-networkx
%end

%post --log /root/ks-post.log

cat > /etc/resolv.conf <<EOFA
nameserver 10.110.10.7
nameserver 10.110.10.8
domain cds.ligo-la.caltech.edu
search cds.ligo-la.caltech.edu ligo-la.caltech.edu
EOFA

echo "priority=50" >> /etc/yum.repos.d/cdssoft.repo
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-sl
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-sl6
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-cern
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-el-6
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-nonfree-el-6
#rpm -ivh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm
#rpm -ivh http://opspxe/sl/6/grace-5.1.22-1.el6.x86_64.rpm
#rpm -ivh http://opspxe/sl/6/pylon-2.3.3-1.el6.x86_64.rpm
#rpm -ivh http://download1.rpmfusion.org/free/el/updates/6/i386/rpmfusion-free-release-6-1.noarch.rpm
#rpm -ivh http://download1.rpmfusion.org/nonfree/el/updates/6/i386/rpmfusion-nonfree-release-6-1.noarch.rpm
# Can this be put into our package list without downloading a copy of the RPM?
yum -y install gstreamer-ffmpeg grace gds-crtools
yum -y remove NetworkManager NetworkManager-gnome
sed -i -e '/^\[main\]/aproxy=http:\/\/squid:3128' /etc/yum.conf
sed -i -e 's/ENABLED=.*/ENABLED="false"/' /etc/sysconfig/yum-autoupdate

#echo "10.110.0.0/16 via 10.110.10.2" >> /etc/sysconfig/network-scripts/route-eth0
#echo "10.100.0.0/16 via 10.110.10.2" >> /etc/sysconfig/network-scripts/route-eth0
sed -i -e 's/NM_CONTROLLED=.*/NM_CONTROLLED="no"/' /etc/sysconfig/network-scripts/ifcfg-eth0
echo "DNS1=10.110.10.7" >> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "DNS2=10.110.10.8" >> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "DOMAIN=\"cds.ligo-la.caltech.edu ligo-la.caltech.edu\"" >> /etc/sysconfig/network-scripts/ifcfg-eth0

cat >/etc/openldap/ldap.conf <<EOFB
BASE    dc=ligo,dc=org
URI     ldaps://ldap.cds.ligo-la.caltech.edu
TLS_REQCERT demand
TLS_CACERT /etc/pki/tls/cert.pem
EOFB

cat > /usr/lib64/firefox/defaults/preferences/sysprefs.js <<EOFC
# Do not delete this first line
lockPref("autoadmin.global_config_url","file:///ligo/cds/llo/scripts/desktop/firefox.cfg");
lockPref("autoadmin.append_emailaddr",false);
EOFC

cat > /usr/lib64/firefox/firefox.cfg <<EOFD
# Do not delete this first line
lockPref("autoadmin.global_config_url","file:///ligo/cds/llo/scripts/desktop/firefox.cfg");
lockPref("autoadmin.append_emailaddr",false);
EOFD

echo "cdsadmin        ALL=(ALL)       ALL" >> /etc/sudoers


mkdir /ligo /cvs /data /web /opt/rtcds
cat >>/etc/fstab <<EOFE
llo1file:/export/ligo   /ligo   nfs     rw,noacl        0       0
llo1file:/users/home    /home   nfs     rw,noacl        0       0
llo1file:/export/cvs    /cvs    nfs     rw,noacl        0       0
llo1file:/export/data   /data   nfs     rw,noacl        0       0
llo1file:/export/web    /web    nfs     rw,noacl        0       0
l1boot:/opt/rtcds       /opt/rtcds      nfs     rw      0       0
EOFE

mkdir -p /usr/local/home
groupadd -g 1000 cdsadmin
groupadd -g 1001 controls
useradd -c "Controls" -g 1001 -M -u 1001 -p '$6$.1GxX5Ew$FSEOtELWn21.92tlvxGNrIjDv.BNiFnNrcKOs.R6RvIiQSJnpyptO90oKUiCIpjRIbYlEss/VNN7p8/E7ftK8.' controls
useradd -c "CDS Administrator" -g 1000 -d /usr/local/home/cdsadmin -u 1000 -p '$6$.1GxX5Ew$FSEOtELWn21.92tlvxGNrIjDv.BNiFnNrcKOs.R6RvIiQSJnpyptO90oKUiCIpjRIbYlEss/VNN7p8/E7ftK8.' cdsadmin

cat >/etc/cron.daily/update-cds-group <<'EOFF'
#!/bin/sh

if [ -e /etc/sysconfig/update-cds-group ] ; then
    . /etc/sysconfig/update-cds-group
fi

cdsMembers=`ldapsearch -x -LLL '(!(loginShell=/sbin/nologin))' uid | grep uid: | sed -e 's/uid: //' | sort | xargs echo controls $EXTRA_CDS_MEMBERS | tr ' ' ,`
controlsMembers=`ldapsearch -x -LLL '(!(loginShell=/sbin/nologin))' uid | grep uid: | sed -e 's/uid: //' | sort | xargs echo controls $EXTRA_CONTROLS_MEMBERS | tr ' ' ,`
foundCDSGroup=`getent group cds | wc -l`

if [ "${foundCDSGroup}" = 0 ] ; then
        echo "cds:x:1050:$cdsMembers" >> /etc/group
fi

sed -i -e "s/^cds:.*/cds:x:1050:$cdsMembers/" \
    -e "s/^controls:.*/controls:x:1001:$controlsMembers/" /etc/group

EOFF
chmod 755 /etc/cron.daily/update-cds-group
/etc/cron.daily/update-cds-group

echo "10.110.10.4" > /etc/ntp/step-tickers
cat >/etc/ntp.conf <<EON
driftfile /var/lib/ntp/drift
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
restrict 127.0.0.1 
restrict -6 ::1
server 10.110.10.4
includefile /etc/ntp/crypto/pw
keys /etc/ntp/keys
EON

chkconfig ntpd on

cat >>/usr/share/fonts/X11/misc/fonts.alias <<EOFONT

widgetDM_4   -misc-fixed-medium-r-normal--8-60-100-100-c-50-iso8859-1
widgetDM_6   -misc-fixed-medium-r-normal--8-60-100-100-c-50-iso8859-1
widgetDM_8   -misc-fixed-medium-r-normal--9-80-100-100-c-60-iso8859-1
widgetDM_10  -misc-fixed-medium-r-normal--10-100-75-75-c-60-iso8859-1
widgetDM_12  -misc-fixed-medium-r-normal--13-100-100-100-c-70-iso8859-1
widgetDM_14  -misc-fixed-medium-r-normal--14-110-100-100-c-70-iso8859-1
widgetDM_16  -misc-fixed-medium-r-normal--15-120-100-100-c-90-iso8859-1
widgetDM_18  -sony-fixed-medium-r-normal--16-120-100-100-c-80-iso8859-1
widgetDM_20  -misc-fixed-medium-r-normal--20-140-100-100-c-100-iso8859-1
widgetDM_22  -sony-fixed-medium-r-normal--24-170-100-100-c-120-iso8859-1
widgetDM_24  -sony-fixed-medium-r-normal--24-170-100-100-c-120-iso8859-1
widgetDM_30  -adobe-times-medium-r-normal--25-180-100-100-p-125-iso8859-1
widgetDM_36  -adobe-helvetica-medium-r-normal--34-240-100-100-p-176-iso8859-1
widgetDM_40  -adobe-helvetica-bold-r-normal--34-240-100-100-p-182-iso8859-1
widgetDM_48  -adobe-helvetica-bold-r-normal--34-240-100-100-p-182-iso8859-1
widgetDM_60  -adobe-helvetica-bold-r-normal--34-240-100-100-p-182-iso8859-1
EOFONT
%end