<?xml version="1.0" encoding="utf-8"?>
<image schemaversion="3.7" name="CENTOS-5.4-VMDK">
	<description type="system">
<!-- *************************************** -->
<!-- Contact/Author -->
<!-- change the below to your project lead contact info -->
		<author>Praveen K Paladugu</author>
		<contact>praveen_paladugu@dell.com</contact>
<!-- End contact/author -->
<!-- *************************************** -->
		<specification>Centos 5.4</specification>
	</description>
	
	<preferences>
                <type primary="true" boot="vmxboot/CentOS-5.4" filesystem="ext3" format="vmdk">vmx</type>

<!-- *************************************** -->
<!-- versioning info -->
<!-- Change below to change filename and embedded versioning info -->
		<version>1.3.7</version>
<!-- end versioning info -->
<!-- *************************************** -->



<!-- *************************************** -->
<!-- image size information -->
<!-- Change below if you need additional space on the image for running some scripts -->
		<size additive="true" unit="M">100</size>  <!--Adding an additional 100MB on the final image, to be able to support auditing and logging setup in the image -->


<!-- Change below to fix the size of the final image -->		
 		<!--size unit="G">2</size-->
<!-- The above statement will make sure, the size of the final image is not greater then 2G when "uncommneted". If the final size of the image is greater than "2G + 100M",the kiwi build will fail-->

<!-- end size info -->
<!-- *************************************** -->


		<packagemanager>smart</packagemanager>
		<!--Security conf require docs of audit package to be installed. So, don't set it to true -->
		<rpm-excludedocs>false</rpm-excludedocs>
		<locale>en_US</locale>
		<keytable>us.map.gz</keytable>
		<timezone>Europe/Berlin</timezone>
		<oem-home>true</oem-home>
		<oem-systemsize>2048</oem-systemsize>
	</preferences>
	<users group="root">
		<user pwd="$6$H2eeHdjX$8Z/ytZhPLMyfC4BKQmIpCCZK5Z7clqP1bU7O2/ag/1gNe72wgBclDuwn5j0Y3TD4waglm5f6r35STN9TO1Q2b1" home="/root" name="root"/>
	</users>

	<users group="vuser">
		<user pwd="$6$H2eeHdjX$8Z/ytZhPLMyfC4BKQmIpCCZK5Z7clqP1bU7O2/ag/1gNe72wgBclDuwn5j0Y3TD4waglm5f6r35STN9TO1Q2b1" home="/home/vuser" name="vuser"/>
	</users>	

      <!-- List of repositories to install the packages from -->
	
   	<repository type="rpm-md" priority="1">
             <source  path="obs://LiveCD:Centos-5.4/standard"/>
	</repository>
	<repository type="rpm-md"  priority="2">         
		<source path="obs://CentOS:CentOS-5.4/standard"/>
	</repository>
    

<!-- *************************************** -->
<!-- CUSTOM REPOSITORIES -->
<!-- Add custom repositories below. Repositories must be OBS paths -->
<!-- *************************************** -->
<!--
     <repository type="rpm-md"  priority="3">
         <source path="obs://OBS_PROJECT/standard"/>
     </repository>
-->
<!-- *************************************** -->
<!-- end of custom repositories -->
<!-- *************************************** -->

    


    <!-- List of packages that are going to be part of the final image. -->
	<packages type="image">
                <package name="kernel"/> 
                <package name="fipscheck"/>
		<package name="bash"/>
                <package name="vim-enhanced"/>                
		<package name="coreutils"/>
		<package name="device-mapper"/>
		<package name="e2fsprogs"/>
		<package name="filesystem"/>
		<package name="glibc"/>
		<package name="rpm"/>
		<package name="pam"/>
		<package name="initscripts"/>
		<package name="procps"/>
		<package name="kbd"/>
		<package name="mkinitrd"/>
		<package name="module-init-tools"/>
		<package name="irqbalance"/>
		<package name="grub"/>
		<package name="iputils"/>
		<package name="w3m"/>
		<package name="elfutils"/>
		<package name="openssh"/>
		<package name="tar"/>
                <package name="bind-utils"/>
                <package name="bind-libs"/>
                <package name="cryptsetup"/>
                <package name="dialog"/>
                <package name="fribidi"/>
                <package name="hdparm"/>
                <package name="memtest86+"/>
                <package name="sysfsutils"/>
                <package name="lvm2"/>
                <package name="chkconfig"/>
                <package name="kudzu"/>
		<!--package name="NetworkManager"/-->

                <!--  ipmi packages -->
                <package name="OpenIPMI"/>
                <package name="OpenIPMI-tools"/>      

                <archive name="centos-overlay.tar.gz"/>
		<!-- Updates required for security setup in the images-->
		<package name="system-config-securitylevel-tui"/>
		<package name="aide"/>
		<package name="vlock"/>
		<package name="audit"/>
		<package name="authconfig"/>
                <package name="iptables"/>
                <package name="libselinux"/>
                <package name="selinux-policy-targeted"/>
                <package name="shadow-utils"/>
                <package name="util-linux"/>
                <package name="usermode"/>
                <package name="SysVinit"/>
                <package name="sysklogd"/>
		<!-- Only for testing.. to be deleted in the final image.-->
		<!--package name="openssh-server"/-->

<!-- *************************************** -->
<!-- X Packages -->
<!-- Comment out this section if you dont need X. Since X is installed in the base image, default runlevel is set to 5 in centos-overly.tar.gz (etc/inittab). If you don't need X, update the etc/inittab file in centos-overlay archive to make runlevel 3 as the default. 
     (place begin comment marker *below* this header, and end comment *above* the END header. -->
<!-- *************************************** -->
                <package name="bitmap-fonts"/> 
		<package name="desktop-backgrounds-basic"/> 
		<package name="xorg-x11-drivers"/> 
		<package name="xorg-x11-fonts-100dpi"/> 
		<package name="xorg-x11-fonts-75dpi"/> 
		<package name="xorg-x11-fonts-ISO8859-1-100dpi"/> 
		<package name="xorg-x11-fonts-ISO8859-1-75dpi"/> 
		<package name="xorg-x11-fonts-Type1"/>
		<package name="xorg-x11-fonts-misc"/> 
		<package name="xorg-x11-fonts-truetype"/> 
		<package name="xorg-x11-server-Xorg"/>
		<package name="xorg-x11-xauth"/> 
		<package name="xorg-x11-xfs"/> 
		<package name="xorg-x11-xinit"/> 
		<package name="authconfig-gtk"/> 
		<package name="bitstream-vera-fonts"/> 
                <package name="xterm"/>   
		<package name="freeglut"/> 
		<package name="gdm"/> 
		<package name="glx-utils"/> 
		<package name="krb5-auth-dialog"/> 
		<package name="linuxwacom"/> 
		<package name="openssh-askpass"/> 
		<package name="pirut"/> 
		<package name="policycoreutils-gui"/> 
		<package name="rhgb"/>
		<package name="synaptics"/> 
		<package name="system-config-date"/> 
		<package name="system-config-display"/> 
		<package name="system-config-network"/> 
		<package name="system-config-services"/> 
		<package name="system-config-soundcard"/> 
		<package name="system-config-users"/> 
		<package name="vnc-server"/> 
		<package name="xorg-x11-apps"/> 
		<package name="xorg-x11-twm"/> 
                <package name="switchdesk"/>
                <package name="xorg-x11-resutils"/>
                <package name="xorg-x11-server-Xnest"/>
                <package name="xorg-x11-server-Xvfb"/>
                <package name="xorg-x11-utils"/>
                <package name="xorg-x11-xfs-utils"/>
                <package name="xorg-x11-xfwp"/>
                <package name="xorg-x11-xsm"/>
                <package name="firefox"/>
<!-- *************************************** -->
<!-- END X Packages -->
<!-- *************************************** -->



<!-- *************************************** -->
<!-- Add Custom packages -->
<!-- *************************************** -->
<!--
                <package name="your_pacakge_name"/>
-->
<!-- *************************************** -->
<!-- END Custom packages -->
<!-- *************************************** -->


<!-- *************************************** -->
<!-- Add custom Overlay Images here. -->
<!-- If you want any files to be copied to the final image, package them into a tar along with appropriate directory structure and it to the sources. -->
<!-- *************************************** -->
                <!--archive name="your_archive_name"/-->
<!-- *************************************** -->
<!-- END custom Overlay Images here. -->
<!-- *************************************** -->

	</packages>	


	<packages type="bootstrap">
     
       <!-- NOTE: If you ever run into a need to add more packages to bootstrap to fix your build failures, please bring it to the attention of the author -->
                <package name="termcap"/>
		<package name="filesystem"/>
                <package name="centos-release"/>
                <package name="iputils"/>
                <package name="tcsh"/>  
                <package name="pcre"/>  
                <package name="glibc"/>  
                <package name="coreutils"/>  
                <package name="grep"/>
		<package name="glibc-common"/>
		<package name="elfutils"/>
                <package name="ncurses"/>
		<package name="psmisc"/>
		<package name="bind-libs"/>
		<package name="bind-utils"/>
		<package name="dhclient"/> 
		<package name="gawk"/>
		<package name="iproute"/>
		<package name="lvm2"/>
		<package name="setup"/>
		<package name="sysfsutils"/>
		<package name="file"/>
		<package name="syslinux"/>
		<package name="make"/>
		<package name="memtest86+"/>
		<package name="fribidi"/>
		<package name="hdparm"/>
		<package name="grub"/>
		<package name="tar"/>
		<package name="rpm"/>
		<package name="kiwi-tools"/>
		<package name="checkmedia"/>
   
	</packages>

        <packages type="delete">
        	<!--package name="libselinux-python"/--> <!--package required for proper labelling of the files by selinux-->
        	<!--package name="python-sqlite"/--> <!-- required by yum -->
        	<package name="gnome-doc-utils"/>
        	<!--package name="gnome-python2"/-->
        	<!--package name="gnome-python2-gconf"/-->
        	<package name="pirut"/>
        	<package name="metacity"/>
        	<package name="yelp"/>
        	<package name="policycoreutils-gui"/>
        	<package name="checkmedia"/> <!-- Not required for VMWare Images, only for ISO Images-->
		<package name="system-config-users"/>
		<package name="system-config-network-tui"/> 
		<package name="system-config-services"/>
		<package name="system-config-soundcard"/>
		<package name="system-config-users"/>
		<package name="system-config-network"/>
		<package name="gdbm"/>
		<package name="audiofile"/>
		<package name="ppp"/>
		<!--package name="vnc-server"/--> <!--required for opening some xapplications.-->
		<package name="usermode-gtk"/>
		<package name="xorg-x11-drv-joystick"/>
		<package name="xorg-x11-drv-magictouch"/>
		<package name="xorg-x11-drv-jamstudio"/>
		<package name="synaptics"/>
		<package name="rsh"/>
		<package name="esound"/>
		<package name="alsa-lib"/>
		<package name="alsa-utils"/>
		<package name="cups"/>
		<package name="libgnomecups"/>
		<package name="libgnomeprint22"/>
		<package name="libgnomeprintui22"/>
		<package name="gthumb"/>
		<package name="wpa_supplicant"/>
		<package name="lvm2"/> 
		<package name="xinetd"/>

			
        </packages>

       <!-- add usb="yes" to the line below the final VM should have a USB Controller in it. USB Controller is not enabled by default for security purposes --> 
        <vmwareconfig  memory="1024" guestOS="rhel5" HWversion="7">    
               <vmwaredisk controller="scsi" id="0"/>    
               <vmwarenic driver="e1000" interface="0" mode="bridged"/>    
        </vmwareconfig>           
       	
</image>

<!--Changelog>
<1.3.7> - 10/01
** Made sure all the sercurity related packages are installed even if X packages section is commented out.
     
<1.3.6> - 08/17
** All the security updates following the NSA security guidelines are implemented to the components installed in the base image.
     
<1.3.5> - 08/16
** Disbabled some unused services by default.
     
<1.3.4> - 06/29
** Added a new user vuser
** Fixed the vmwrae configuration to have an usb device in the VM
** Configured sleinux, firewall, aide in the VM.

     
<1.3.3> - 06/28
** Added the delete packages section to remove unecessary packages.
** Root Password, Boot loader Password, Software Packages sections complete.
      
<1.3.2> - 06/22
** Added the default redhat firewall configuration to /etc/sysconfi/iptables with the archive.

<1.3.1> - 06/21
** Added changes in images.sh to include checking for /autorelabel file in rc.sysinit file. A hack, has to be revisited.

<1.3.0> - 06/21
** Enable Selinux on the images by default (/etc/selinux/config)
** Install and Enable iptables by default 
** have localhost configuration /etc/hosts file.
** empty /etc/resolv.conf file 
** Added the size element
<Changelog-->
