fedora32-base.def

BootStrap: yum
OSVersion: 32

MirrorURL: http://fedora.mirror.garr.it/fedora/linux/releases/%{OSVERSION}/Everything/$basearch/os/
#MirrorURL: http://download.fedoraproject.org/pub/fedora/linux/releases/%{OSVERSION}/Everything/$basearch/os/
#MetaLink: https://mirrors.fedoraproject.org/metalink?repo=fedora-%{OSVERSION}&arch=$basearch
Include: dnf
#UpdateMetaLink: https://mirrors.fedoraproject.org/metalink?repo=updates-released-f%{OSVERSION}&arch=$basearch

%runscript
    exec "$@"

%setup
    rsync -a base/ ${SINGULARITY_ROOTFS}

%post
    dnf -y install dnf-plugins-core

# basic system + booting, @core requires kernel so extra stuff for
# booting (nbd, nfs, dracut*) must be in the same transaction in order
# to build a correct initramfs
dnf install --allowerasing -y @standard @core nfs-utils autofs authconfig \
    nbd kernel kernel-modules kernel-modules-extra \
    dracut-live dracut-network

# now configure the system before first boot, something inherited from
# python-imgcreate.kickstart, SINGULARITY_DEFFILE_OSVERSION could be
# used to distinguish versions

# generate once for all ssh host keys, sshd-keygen does not work in chroot
/usr/libexec/openssh/sshd-keygen rsa
/usr/libexec/openssh/sshd-keygen ecdsa
/usr/libexec/openssh/sshd-keygen ed25519
# use systemd-firstboot where possible, root passwd ignored here
systemd-firstboot --locale=en_US.UTF-8 --timezone=UTC
# configure keyboard
cat <<EOF > /etc/vconsole.conf
KEYMAP="us"
FONT="eurlatgr"
EOF
# configure root password
echo ciao | /usr/bin/passwd --stdin root
# disable selinux
sed -i -e 's/^SELINUX=.*$/SELINUX=disabled/g' /etc/selinux/config
# configure network
cat <<EOF > /etc/sysconfig/network
NETWORKING=yes
NETWORKING_IPV6=no
EOF
cat <<EOF > /etc/hosts || true
127.0.0.1		localhost.localdomain localhost
::1		localhost6.localdomain6 localhost6
EOF
# change default services, allow failure due to missing units
for serv in rewrite-ifcfg NetworkManager dbus-daemon rdma; do
    systemctl enable $serv || true
done
for serv in network systemd-random-seed mdmonitor firewalld atd auditd \
  abrtd abrt-xorg abrt-vmcore abrt-journal-core abrt-oops; do
    systemctl disable $serv || true
done
# authconfig from kickstart, should we switch to authselect?
#authconfig --update --nostart --useshadow --passalgo=sha512
authselect select sssd -f || true