Build RPM server on RHEL 7

DIR="{ksVmwareAttuneBaseDir}/*{targetServer.fqn}"
[ ! ${DIR} ] || sudo rm -rf ${DIR}

cd {ksVmwareAttuneBaseDir}/build-{targetServer.fqn}
mkisofs -o {ksVmwareAttuneBaseDir}/kickstart_{targetServer.fqn}.iso \
  -b isolinux/isolinux.bin -c isolinux/boot.cat \
  -no-emul-boot -boot-load-size 4 -boot-info-table -J -R -V "KS_RHEL" .

pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Set-PowerCLIConfiguration -Scope User -ParticipateInCEIP $false -Confirm:$false
Set-PowerCLIConfiguration -InvalidCertificateAction ignore -Confirm:$false
EOF

# Delete the VM if it exists
pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User "{vmwareVcenterUser.user}" `
    -Password "{vmwareVcenterUser.password}"
$existing = Get-VM "{targetServer.fqn}"
if ( $existing.count -eq 1 ) {
    if ( $existing.PowerState -eq "PoweredOn" ) {
        "Stopping the VM"
        Stop-VM -VM $existing -Confirm:$false
    } else {
        "The VM is off"
    }
    
    "Removing the VM"
    Remove-VM -DeleteFromDisk -VM $existing -Confirm:$false
    
} else {
    "The VM doesn't exist"
}
EOF

# Delete the VM if it exists
pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User "{vmwareVcenterUser.user}" `
    -Password "{vmwareVcenterUser.password}"
$existing = Get-VM "{targetServer.hostname}"
if ( $existing.count -eq 1 ) {
    if ( $existing.PowerState -eq "PoweredOn" ) {
        "Stopping the VM"
        Stop-VM -VM $existing -Confirm:$false
    } else {
        "The VM is off"
    }
    
    "Removing the VM"
    Remove-VM -DeleteFromDisk -VM $existing -Confirm:$false
    
} else {
    "The VM doesn't exist"
}
EOF

# Create the new VM
# NOTE: ALL VMs are kickstarted with a default 50g disk. More disks are added
#       once the operating system is installed, via a subsequen "add disk"
#       vCenter call
pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User {vmwareVcenterUser.user} `
    -Password {vmwareVcenterUser.password}
    
if ( "{vmwareEsxiServer.fqn}" -eq "{vmwareVcenterServer.fqn}" ) {
    Write-Host "We're talking to the ESXi host, don't pass the -VMHost arg"
    $vm = New-VM `
        -Name "{targetServer.fqn}" `
        -Datastore "{ksVmwareStoragePoolName}"`
        -NumCpu {ksVmwareCpuCount} `
        -DiskMB 51200 `
        -MemoryMB {ksVmwareVmRamSizeMb} `
        -NetworkName "{ksVmwareNetworkName}" `
        -GuestId '{ksVmwareGuestType}' `
        -CD 
} else {
    Write-Host "We're talking to a vCenter server, pass the -VMHost arg"
    $storagePool = Get-VMHost -Name '{vmwareEsxiServer.fqn}' | Get-Datastore -Name '{ksVmwareStoragePoolName}' 
    
    $vm = New-VM `
        -VMHost "{vmwareEsxiServer.fqn}" `
        -Name "{targetServer.fqn}" `
        -Datastore $storagePool `
        -NumCpu {ksVmwareCpuCount} `
        -DiskMB 51200 `
        -MemoryMB {ksVmwareVmRamSizeMb} `
        -NetworkName "{ksVmwareNetworkName}" `
        -GuestId '{ksVmwareGuestType}' `
        -CD 
}
EOF

if [ '{ksVmwareGuestType}' != 'winNetStandard64Guest' ]; then
    echo "This isn't windows server VM, SAS not required"
else
    echo "Switching to LSI Logic SAS Controller"
# Create the new VM
pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User {vmwareVcenterUser.user} `
    -Password {vmwareVcenterUser.password}
 
$vm = Get-VM -Name "{targetServer.fqn}"
 
# Make the controller compatible with the Win2016 drivers
Get-ScsiController -VM $vm | Set-ScsiController -Type VirtualLsiLogicSAS
EOF
fi

if [ '{ksVmwareGuestType}' != 'windows9_64Guest' ]; then
    echo "This isn't windows 10, 3D isn't required"
else
    echo "Enabling 3d"
# Create the new VM
pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User {vmwareVcenterUser.user} `
    -Password {vmwareVcenterUser.password}
 
$vm = Get-View -ViewType VirtualMachine -Filter @{'Name'="^{targetServer.fqn}$"}
 
$spec = New-Object VMware.Vim.VirtualMachineConfigSpec
$dc = New-Object VMware.Vim.VirtualDeviceConfigSpec
$dc.Operation = 'edit'
$dev = $vm.Config.Hardware.Device | where{$_ -is [VMware.Vim.VirtualMachineVideoCard]}
$dev.enable3DSupport = $true
$dc.Device += $dev
$spec.DeviceChange += $dc
$vm.ReconfigVM($spec)
EOF
fi

# Create the new VM
pwsh <<'EOF' | grep -v 'Uploading'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User {vmwareVcenterUser.user} `
    -Password {vmwareVcenterUser.password}
    
# Create the TO dir string
$to = "ds:{ksVmwareBootIsoDir}"
$to = $to -Replace "/","\"
# Get the Datastore
$datastore = Get-Datastore -Name '{ksVmwareStoragePoolName}'
$datastore
# Create the DS drive
if (Test-Path "ds:") {
    Remove-PSDrive ds -Force
}
if ($datastore -is [System.Array]) {
    Write-Host "Get-Datastore returned multiple datastores, using first item in array.."
    $datastore = $datastore[0]
}
New-PSDrive -Location $datastore -Name ds -PSProvider VimDatastore -Root ""
# Ensure the destination dir exists
Set-Location "ds:"
if (-Not (Test-Path "$to")) {
    "Creating $to"
    New-Item  -ItemType Directory -Path "$to"
}
# Set the local path to the ISO
Set-Location {ksVmwareAttuneBaseDir}
# Copy the ISO
Copy-DatastoreItem kickstart_{targetServer.fqn}.iso $to `
    -Force:$true -Confirm:$false 
    
# Remove the DS Drive
Remove-PSDrive ds -Force
EOF

FROM="{ksVmwareAttuneBaseDir}/kickstart_{targetServer.fqn}.iso"
TO="{ksVmwareBootIsoDir}"
# Create the new VM
pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User {vmwareVcenterUser.user} `
    -Password {vmwareVcenterUser.password}
$cd = Get-VM -Name "{targetServer.fqn}" | Get-CDDrive
$iso = "[{ksVmwareStoragePoolName}] kickstart_isos/kickstart_{targetServer.fqn}.iso"
Set-CDDrive -CD $cd `
    -IsoPath $iso `
    -StartConnected $true `
    -Confirm:$false
EOF

pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User {vmwareVcenterUser.user} `
    -Password {vmwareVcenterUser.password}
Start-VM -VM (Get-VM -Name "{targetServer.fqn}") -RunAsync
EOF

DIR="{ksVmwareAttuneBaseDir}/*{targetServer.fqn}"
[ ! ${DIR} ] || sudo rm -rf ${DIR}

cd /tmp/vmware-tools-distrib
./vmware-install.pl -d -f

rm -rf /tmp/vmware*

# Create the virtual disk
pwsh <<'EOF'
$ErrorActionPreference = "Stop"
Import-Module VMware.VimAutomation.Core
Connect-VIServer {vmwareVcenterServer.ip} `
    -User {vmwareVcenterUser.user} `
    -Password {vmwareVcenterUser.password}
$vm = Get-VM "{targetServer.fqn}"
# Add 300gb
$vm | New-HardDisk -CapacityGB 100 -StorageFormat Thin
$vm | New-HardDisk -CapacityGB 100 -StorageFormat Thin
$vm | New-HardDisk -CapacityGB 100 -StorageFormat Thin
EOF

mkvg() {
    VG=$1
    DEV=$2
    
    parted -s /dev/$DEV mktable gpt
    parted -s /dev/$DEV mkpart primary xfs 1m 100%
    
    vgextend $VG /dev/${DEV}1
    
}
mkvg rootvg sdb
mkvg rootvg sdc
mkvg rootvg sdd

mklv() {
    DIR=$1
    NAME=$2
    SIZE=$3
    VG=$4
    
    mkdir -p $DIR
    lvcreate --size $SIZE --name $NAME $VG 
    mkfs.xfs /dev/mapper/$VG-$NAME
    
    cat >> /etc/fstab <<EOF
/dev/mapper/$VG-$NAME    $DIR                    xfs     defaults        0 0
EOF
    mount -a
}
mklv /rpm_mirror rpm_mirror 300g rootvg

lvextend -v -L{varLvmVolumeSize}m -r /dev/rootvg/var

subscription-manager register --force --username {redhatSubscriptionUser.user}
# List the subscriptions, and select a pool.
# EG Pool ID:             8a85f9946e848a14016e91bd8c150949
POOL_ID=`subscription-manager list --available | grep 'Pool ID' | cut -d':' -f2 | sed 's/ //g' | head -1`
echo "POOL_ID is |${POOL_ID}|"
# Subscribe to the pool.
subscription-manager subscribe --pool="${POOL_ID}"

chmod ugo+r /etc/profile.d/poweron*
chmod ugo+r /etc/hosts

echo "{targetServer.hostname}" > /etc/hostname
hostname "{targetServer.hostname}"

F="/etc/sysctl.conf"
if grep -q 'net.ipv6' ${F}; then
    echo "IPv6 is already disabled"
else
    echo "Disabling IPv6"
    echo "" >> $F
    echo "# Disable IPv6" >> $F
    echo "net.ipv6.conf.all.disable_ipv6 = 1" >> $F
    echo "net.ipv6.conf.default.disable_ipv6 = 1" >> $F
    sysctl -p
fi
sed -i '/::1/d' /etc/hosts

nmcli con mod ens192 ipv4.dns "{targetSubnet.dns1} {targetSubnet.dns2}"
nmcli con mod ens192 ipv4.dns-search {adFullDomainName.value}
nmcli con up ens192

chmod 644 /etc/login_banner
sed -i 's,#Banner.*,Banner /etc/login_banner,g' /etc/ssh/sshd_config
systemctl restart sshd

echo "Removing the default rules from the RHEL6 firewall"
iptables -F INPUT
echo "" > /etc/sysconfig/iptables

disable() {
    if grep -q 'SELINUX=disabled' $F; then
        echo "SELINUX Already Disabled"
    else
        echo "Disabling SELINUX"
        sed -i 's/SELINUX=.*/SELINUX=disabled/' $F
    fi
}
F='/etc/selinux/config'
disable
F='/etc/sysconfig/selinux'
disable

yum install -y net-tools

yum install -y git

yum install -y unzip

yum install -y bzip2

yum install -y rsync

yum install -y telnet

yum install -y wireshark

yum install -y nano

D={targetServerInstallerTmpPath}/pkg_nmon
yum install -y $D/nmon*rpm
rm -rf $D

D={targetServerInstallerTmpPath}/pkg_iftop
yum install -y $D/iftop*rpm
rm -rf $D

D={targetServerInstallerTmpPath}/pkg_p7zip
yum install -y $D/p7zip*rpm
rm -rf $D

yum install ftp -y

yum install -y nmap-ncat

yum remove -y chrony

yum install -y ntp

F=/etc/sysconfig/ntpdate
# Add -x to the startup uptions
sed -i 's/OPTIONS="-u/OPTIONS="-x -u/g' $F
# Set to 'yes' to sync hw clock after successful ntpdate
sed -i 's/SYNC_HWCLOCK=no/SYNC_HWCLOCK=yes/g' $F

# Enable auto starting of NTP
systemctl enable ntpd
# Restart the NTP service
systemctl start ntpd

# Print the status of NTP time syncing
ntpq -p

yum install -y postfix mailx

# CHECK HOSTS FILE
# We are looking for this pattern
#
# 192.168.1.1 prodapp1 prodapp1.company.com
# PC_APP_IP PC_APP_HOSTNAME PC_APP_HOSTNAME.PC_DOMAIN_NAME
# Make sure our host file has our FQN at the end.
echo "Checking for line ending with {targetServer.fqn} in /etc/hosts"
grep "{targetServer.fqn}$" /etc/hosts
echo "Checking for the SMTP server in the hosts file"
grep "{smtpServer.fqn}$" /etc/hosts

postconf -e 'disable_dns_lookups = yes'
postconf -e 'relayhost = {smtpServer.hostname}'
postconf -e 'mydomain = {targetServer.domain}'
postconf -e 'myorigin = $mydomain'
postfix check

# Update /etc/aliases
F=/etc/aliases
# Forward all poweron and oracle mail to root
# Add if it's not there yet
if grep -q poweron $F; then
    echo "poweron and oracle already exist"
else
    echo "Added poweron and oracle"
cat <<EOF >> $F
poweron:   root
oracle:  root
EOF
fi
# Update the root alias
if grep -q '^root:' $F; then
    echo "Root exists, making sure it's up to date"
    sed -i 's/^root:.*/root:    {targetServerAdminEmail}/g' $F
else
    echo "Adding root alias, making sure it's up to date"
    echo 'root:    {targetServerAdminEmail}' >> $F
fi

# Stop the mail service
echo "Stoping Sendmail"
systemctl stop postfix
# Remove all existing mail.
# f the mail service wasn't working, there could be 1000s of them
echo "Clearing out existing mail queues"
rm -f /var/spool/mqueue/*
# Start sendmail, this script also compiles /etc/aliaeses
echo "Starting Sendmail"
systemctl start postfix
echo "All Done"

#Clear mail queue
postsuper -d ALL
echo "Sending a test email to root with subject 'Attune Sendmail Config Complete'"
# Send test email to root
mail -v -s "Attune Sendmail Config Complete" root <<EOF
Attune has completed configuring sendmail on server `hostname`
Hopefully you get this email.
Email sent at `date`
EOF
((iter=0)) || true
MAX_ITER=30 # 1 minute of recovery
WAIT=2
while [ ${iter} -lt ${MAX_ITER} ]
do
    #check if mail queue is empty to see if mail was send successfully
    if mailq | grep -q 'Mail queue is empty'; then
        echo "Mail queue is empty, mail sent successfully."
        exit 0
    else
        echo "Mail queue is not empty. Please check the details below:"
        mailq
        echo "Retrying..."
    ((iter=iter+1))
    sleep ${WAIT}
    fi
done
exit 1

# Test the subscription with a yum update, this will apply the latest updates.
yum update -y

# Enable the optional RPMs repository.
subscription-manager repos --enable rhel-7-server-optional-rpms

# Install the packages required to sync and host a local repo mirror.
yum install -y yum-utils createrepo

# CD to the repo directory
cd /rpm_mirror
# Sync all packages from the redhat servers.
reposync -d -m --download_path=./ --repoid=rhel-7-server-rpms
# Create the repo metadata
createrepo ./rhel-7-server-rpms --groupfile=comps.xml --workers=4

# CD to the repo directory
cd /rpm_mirror
# Sync all packages from the redhat servers.
reposync -d -m --download_path=./ --repoid=rhel-7-server-optional-rpms
# Create the repo metadata
createrepo ./rhel-7-server-optional-rpms --groupfile=comps.xml --workers=4

cat <<'EOF' > ~/update_local_repo.sh
#!/bin/bash
set -o nounset
set -o errexit
download_dir="/rpm_mirror"
/usr/bin/reposync --gpgcheck --newest-only -m --download-metadata -l -p ${download_dir}/
for dirname in `find ${download_dir} -maxdepth 1 -mindepth 1 -type d | grep -v -e 'lost'`; do
        if [ -f "${dirname}/comps.xml" ]; then
                cp ${dirname}/comps.xml ${dirname}/Packages/
                createrepo  --update -p --workers 2 -g ${dirname}/Packages/comps.xml ${dirname}
        else
                createrepo  --update -p --workers 2 ${dirname}/
        fi
        set -o pipefail
        updateinfo=$(ls -1t  ${dirname}/*-updateinfo.xml.gz | head -1 )
        if [[ -f $updateinfo  &&  $? -eq 0 ]]; then
                echo "Updating errata information for ${dirname}"
                cp $updateinfo ${dirname}/updateinfo.xml.gz
                gunzip -df ${dirname}/updateinfo.xml.gz
                modifyrepo ${dirname}/updateinfo.xml ${dirname}/repodata/
        else
                echo "No errata information to be processed for ${dirname}"
        fi
done
EOF
# Make it executable
chmod +x ~/update_local_repo.sh

yum install -y httpd

# Update the ServerName to the current server, if it's commented out
F='/etc/httpd/conf/httpd.conf'
sed -i "s/#ServerName.*/ServerName `hostname -a`:80/g" $F
# Check it
grep ServerName $F
# Set Apache to auto start
chkconfig httpd on
# Start Apache
service httpd restart

firewall-cmd --add-service http
firewall-cmd --runtime-to-permanent

cat > /var/www/html/index.html <<EOF
<html>
<title>`hostname` Patching Server</title>
<body>
<h1>`hostname -a`</h1>
 <p>You have reached the RHEL patching server.</p>
</body>
</html>
EOF

echo "Symlinking /rpm_mirror"
ln -svnf /rpm_mirror /var/www/html/