Skip to content

Instantly share code, notes, and snippets.

@berndbausch

berndbausch/autoinst.yml

Created February 8, 2019 22:41
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save berndbausch/4e37ab8d2da035cc50891a71bdb105ea to your computer and use it in GitHub Desktop.
Save berndbausch/4e37ab8d2da035cc50891a71bdb105ea to your computer and use it in GitHub Desktop.
Download ZIP
autoyast for simple OpenSuse 15 installation
Raw
autoinst.yml
<?xml version="1.0"?>
<!DOCTYPE profile>
<profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
<add-on>
<add_on_products config:type="list"/>
</add-on>
<bootloader>
<global>
<append>resume=/dev/disk/by-uuid/ba6011fb-7d2a-45d9-acf9-4ffee031f253 splash=silent quiet showopts</append>
<gfxmode>auto</gfxmode>
<hiddenmenu>false</hiddenmenu>
<os_prober>true</os_prober>
<terminal>gfxterm</terminal>
<timeout config:type="integer">8</timeout>
<trusted_grub>false</trusted_grub>
<xen_kernel_append>vga=gfx-1024x768x16</xen_kernel_append>
</global>
<loader_type>grub2</loader_type>
</bootloader>
<deploy_image>
<image_installation config:type="boolean">false</image_installation>
</deploy_image>
<firewall>
<default_zone>public</default_zone>
<enable_firewall config:type="boolean">false</enable_firewall>
<log_denied_packets>off</log_denied_packets>
<start_firewall config:type="boolean">false</start_firewall>
<zones config:type="list">
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>block</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list"/>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>dmz</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list">
<service>ssh</service>
</services>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>drop</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list"/>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">true</masquerade>
<name>external</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list">
<service>ssh</service>
</services>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>home</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list">
<service>ssh</service>
<service>mdns</service>
<service>samba-client</service>
<service>dhcpv6-client</service>
</services>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>internal</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list">
<service>ssh</service>
<service>mdns</service>
<service>samba-client</service>
<service>dhcpv6-client</service>
</services>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>public</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list">
<service>dhcpv6-client</service>
</services>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>trusted</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list"/>
<sources config:type="list"/>
</zone>
<zone>
<interfaces config:type="list"/>
<masquerade config:type="boolean">false</masquerade>
<name>work</name>
<ports config:type="list"/>
<protocols config:type="list"/>
<services config:type="list">
<service>ssh</service>
<service>dhcpv6-client</service>
</services>
<sources config:type="list"/>
</zone>
</zones>
</firewall>
<general>
<ask-list config:type="list"/>
<mode>
<confirm config:type="boolean">false</confirm>
</mode>
<proposals config:type="list"/>
<signature-handling>
<accept_file_without_checksum config:type="boolean">true</accept_file_without_checksum>
<accept_non_trusted_gpg_key config:type="boolean">true</accept_non_trusted_gpg_key>
<accept_unknown_gpg_key config:type="boolean">true</accept_unknown_gpg_key>
<accept_unsigned_file config:type="boolean">true</accept_unsigned_file>
<accept_verification_failed config:type="boolean">false</accept_verification_failed>
<import_gpg_key config:type="boolean">true</import_gpg_key>
</signature-handling>
<storage>
<start_multipath config:type="boolean">false</start_multipath>
</storage>
</general>
<groups config:type="list">
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>100</gid>
<group_password>x</group_password>
<groupname>users</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>1000</gid>
<group_password>x</group_password>
<groupname>hugetlbfs</groupname>
<userlist>openvswitch</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>465</gid>
<group_password>x</group_password>
<groupname>libvirt</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>42</gid>
<group_password>x</group_password>
<groupname>trusted</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>490</gid>
<group_password>x</group_password>
<groupname>cdrom</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>478</gid>
<group_password>x</group_password>
<groupname>chrony</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>493</gid>
<group_password>x</group_password>
<groupname>lock</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>484</gid>
<group_password>x</group_password>
<groupname>tape</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>470</gid>
<group_password>x</group_password>
<groupname>unbound</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>483</gid>
<group_password>x</group_password>
<groupname>video</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>489</gid>
<group_password>x</group_password>
<groupname>dialout</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>499</gid>
<group_password>x</group_password>
<groupname>messagebus</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>5</gid>
<group_password>x</group_password>
<groupname>tty</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>469</gid>
<group_password>x</group_password>
<groupname>nagios</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>491</gid>
<group_password>x</group_password>
<groupname>audio</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>492</gid>
<group_password>x</group_password>
<groupname>utmp</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>479</gid>
<group_password>x</group_password>
<groupname>systemd-coredump</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>474</gid>
<group_password>x</group_password>
<groupname>tftp</groupname>
<userlist>tftp,dnsmasq</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>468</gid>
<group_password>x</group_password>
<groupname>nagcmd</groupname>
<userlist>wwwrun,nagios</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>482</gid>
<group_password>x</group_password>
<groupname>systemd-journal</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>65533</gid>
<group_password>x</group_password>
<groupname>nogroup</groupname>
<userlist>nobody</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>25</gid>
<group_password>x</group_password>
<groupname>at</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>481</gid>
<group_password>x</group_password>
<groupname>systemd-network</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>1</gid>
<group_password>x</group_password>
<groupname>bin</groupname>
<userlist>daemon</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>464</gid>
<group_password>x</group_password>
<groupname>openvswitch</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>2</gid>
<group_password>x</group_password>
<groupname>daemon</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>488</gid>
<group_password>x</group_password>
<groupname>disk</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>476</gid>
<group_password>x</group_password>
<groupname>quagga</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>65534</gid>
<group_password>x</group_password>
<groupname>nobody</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>62</gid>
<group_password>x</group_password>
<groupname>man</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>59</gid>
<group_password>x</group_password>
<groupname>maildrop</groupname>
<userlist>postfix</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>467</gid>
<group_password>x</group_password>
<groupname>winbind</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>497</gid>
<group_password>!</group_password>
<groupname>wwwrun</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>494</gid>
<group_password>x</group_password>
<groupname>kmem</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>0</gid>
<group_password>x</group_password>
<groupname>root</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>496</gid>
<group_password>!</group_password>
<groupname>mail</groupname>
<userlist>postfix</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>51</gid>
<group_password>x</group_password>
<groupname>postfix</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>480</gid>
<group_password>x</group_password>
<groupname>systemd-timesync</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>71</gid>
<group_password>x</group_password>
<groupname>ntadmin</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>495</gid>
<group_password>x</group_password>
<groupname>wheel</groupname>
<userlist>bbausch</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>472</gid>
<group_password>x</group_password>
<groupname>sshd</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>471</gid>
<group_password>x</group_password>
<groupname>brlapi</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>473</gid>
<group_password>x</group_password>
<groupname>polkitd</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>487</gid>
<group_password>x</group_password>
<groupname>input</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>498</gid>
<group_password>x</group_password>
<groupname>www</groupname>
<userlist>wwwrun</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>475</gid>
<group_password>x</group_password>
<groupname>nscd</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>486</gid>
<group_password>x</group_password>
<groupname>kvm</groupname>
<userlist>qemu</userlist>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>466</gid>
<group_password>x</group_password>
<groupname>qemu</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>477</gid>
<group_password>x</group_password>
<groupname>svn</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>15</gid>
<group_password>x</group_password>
<groupname>shadow</groupname>
<userlist/>
</group>
<group>
<encrypted config:type="boolean">true</encrypted>
<gid>485</gid>
<group_password>x</group_password>
<groupname>lp</groupname>
<userlist/>
</group>
</groups>
<host>
<hosts config:type="list">
<hosts_entry>
<host_address>127.0.0.1</host_address>
<names config:type="list">
<name>localhost</name>
</names>
</hosts_entry>
<hosts_entry>
<host_address>192.168.244.86</host_address>
<names config:type="list">
<name>linux-2hf6</name>
</names>
</hosts_entry>
<hosts_entry>
<host_address>::1</host_address>
<names config:type="list">
<name>localhost ipv6-localhost ipv6-loopback</name>
</names>
</hosts_entry>
<hosts_entry>
<host_address>fe00::0</host_address>
<names config:type="list">
<name>ipv6-localnet</name>
</names>
</hosts_entry>
<hosts_entry>
<host_address>ff00::0</host_address>
<names config:type="list">
<name>ipv6-mcastprefix</name>
</names>
</hosts_entry>
<hosts_entry>
<host_address>ff02::1</host_address>
<names config:type="list">
<name>ipv6-allnodes</name>
</names>
</hosts_entry>
<hosts_entry>
<host_address>ff02::2</host_address>
<names config:type="list">
<name>ipv6-allrouters</name>
</names>
</hosts_entry>
<hosts_entry>
<host_address>ff02::3</host_address>
<names config:type="list">
<name>ipv6-allhosts</name>
</names>
</hosts_entry>
</hosts>
</host>
<kdump>
<add_crash_kernel config:type="boolean">false</add_crash_kernel>
<crash_kernel config:type="list">
<listentry>182M,high</listentry>
<listentry>72M,low</listentry>
</crash_kernel>
<crash_xen_kernel>254M\&lt;4G</crash_xen_kernel>
<general>
<KDUMPTOOL_FLAGS/>
<KDUMP_COMMANDLINE/>
<KDUMP_COMMANDLINE_APPEND/>
<KDUMP_CONTINUE_ON_ERROR>true</KDUMP_CONTINUE_ON_ERROR>
<KDUMP_COPY_KERNEL>yes</KDUMP_COPY_KERNEL>
<KDUMP_CPUS>1</KDUMP_CPUS>
<KDUMP_DUMPFORMAT>compressed</KDUMP_DUMPFORMAT>
<KDUMP_DUMPLEVEL>31</KDUMP_DUMPLEVEL>
<KDUMP_FREE_DISK_SIZE>64</KDUMP_FREE_DISK_SIZE>
<KDUMP_HOST_KEY/>
<KDUMP_IMMEDIATE_REBOOT>yes</KDUMP_IMMEDIATE_REBOOT>
<KDUMP_KEEP_OLD_DUMPS>5</KDUMP_KEEP_OLD_DUMPS>
<KDUMP_KERNELVER/>
<KDUMP_NETCONFIG>auto</KDUMP_NETCONFIG>
<KDUMP_NET_TIMEOUT>30</KDUMP_NET_TIMEOUT>
<KDUMP_NOTIFICATION_CC/>
<KDUMP_NOTIFICATION_TO/>
<KDUMP_POSTSCRIPT/>
<KDUMP_PRESCRIPT/>
<KDUMP_REQUIRED_PROGRAMS/>
<KDUMP_SAVEDIR>file:///var/crash</KDUMP_SAVEDIR>
<KDUMP_SMTP_PASSWORD/>
<KDUMP_SMTP_SERVER/>
<KDUMP_SMTP_USER/>
<KDUMP_TRANSFER/>
<KDUMP_VERBOSE>3</KDUMP_VERBOSE>
<KEXEC_OPTIONS/>
</general>
</kdump>
<keyboard>
<keymap>english-us</keymap>
</keyboard>
<language>
<language>en_US</language>
<languages/>
</language>
<login_settings/>
<networking>
<dhcp_options>
<dhclient_client_id/>
<dhclient_hostname_option>AUTO</dhclient_hostname_option>
</dhcp_options>
<dns>
<dhcp_hostname config:type="boolean">true</dhcp_hostname>
<hostname>vmhost6</hostname>
<resolv_conf_policy>auto</resolv_conf_policy>
<write_hostname config:type="boolean">false</write_hostname>
</dns>
<interfaces config:type="list">
<interface>
<bootproto>static</bootproto>
<bridge>yes</bridge>
<bridge_forwarddelay>0</bridge_forwarddelay>
<bridge_ports>eth0</bridge_ports>
<bridge_stp>off</bridge_stp>
<device>br0</device>
<ipaddr>192.168.244.86</ipaddr>
<netmask>255.255.255.0</netmask>
<prefixlen>24</prefixlen>
<startmode>auto</startmode>
</interface>
<interface>
<bootproto>none</bootproto>
<device>eth0</device>
<startmode>auto</startmode>
</interface>
<interface>
<bootproto>static</bootproto>
<device>lo</device>
<firewall>no</firewall>
<ipaddr>127.0.0.1</ipaddr>
<netmask>255.0.0.0</netmask>
<network>127.0.0.0</network>
<prefixlen>8</prefixlen>
<startmode>nfsroot</startmode>
<usercontrol>no</usercontrol>
</interface>
</interfaces>
<ipv6 config:type="boolean">true</ipv6>
<keep_install_network config:type="boolean">true</keep_install_network>
<managed config:type="boolean">false</managed>
<net-udev config:type="list">
<rule>
<name>eth0</name>
<rule>ATTR{address}</rule>
<value>00:17:a4:77:18:12</value>
</rule>
</net-udev>
<routing>
<ipv4_forward config:type="boolean">true</ipv4_forward>
<ipv6_forward config:type="boolean">false</ipv6_forward>
<routes config:type="list">
<route>
<destination>default</destination>
<device>eth0</device>
<gateway>192.168.244.1</gateway>
<netmask>-</netmask>
</route>
</routes>
</routing>
</networking>
<nis>
<netconfig_policy>auto</netconfig_policy>
<nis_broadcast config:type="boolean">false</nis_broadcast>
<nis_broken_server config:type="boolean">false</nis_broken_server>
<nis_domain/>
<nis_local_only config:type="boolean">false</nis_local_only>
</nis>
<ntp-client>
<ntp_policy>auto</ntp_policy>
<ntp_servers config:type="list"/>
<ntp_sync>systemd</ntp_sync>
</ntp-client>
<partitioning config:type="list">
<drive>
<device>/dev/system</device>
<enable_snapshots config:type="boolean">true</enable_snapshots>
<initialize config:type="boolean">false</initialize>
<partitions config:type="list">
<partition>
<create config:type="boolean">true</create>
<create_subvolumes config:type="boolean">true</create_subvolumes>
<filesystem config:type="symbol">btrfs</filesystem>
<format config:type="boolean">false</format>
<lv_name>root</lv_name>
<mount>/</mount>
<mountby config:type="symbol">device</mountby>
<pool config:type="boolean">false</pool>
<resize config:type="boolean">false</resize>
<size>42949672960</size>
<stripes config:type="integer">1</stripes>
<stripesize config:type="integer">0</stripesize>
<subvolumes config:type="list">
<subvolume>
<copy_on_write config:type="boolean">false</copy_on_write>
<path>var</path>
</subvolume>
<subvolume>
<copy_on_write config:type="boolean">true</copy_on_write>
<path>usr/local</path>
</subvolume>
<subvolume>
<copy_on_write config:type="boolean">true</copy_on_write>
<path>tmp</path>
</subvolume>
<subvolume>
<copy_on_write config:type="boolean">true</copy_on_write>
<path>srv</path>
</subvolume>
<subvolume>
<copy_on_write config:type="boolean">true</copy_on_write>
<path>root</path>
</subvolume>
<subvolume>
<copy_on_write config:type="boolean">true</copy_on_write>
<path>opt</path>
</subvolume>
<subvolume>
<copy_on_write config:type="boolean">true</copy_on_write>
<path>boot/grub2/x86_64-efi</path>
</subvolume>
<subvolume>
<copy_on_write config:type="boolean">true</copy_on_write>
<path>boot/grub2/i386-pc</path>
</subvolume>
</subvolumes>
<subvolumes_prefix><![CDATA[@]]></subvolumes_prefix>
</partition>
<partition>
<create config:type="boolean">true</create>
<filesystem config:type="symbol">xfs</filesystem>
<format config:type="boolean">false</format>
<lv_name>home</lv_name>
<mount>/home</mount>
<mountby config:type="symbol">device</mountby>
<pool config:type="boolean">false</pool>
<resize config:type="boolean">false</resize>
<size>107374182400</size>
<stripes config:type="integer">1</stripes>
<stripesize config:type="integer">0</stripesize>
</partition>
</partitions>
<pesize>4194304</pesize>
<type config:type="symbol">CT_LVM</type>
</drive>
<drive>
<device>/dev/sda</device>
<disklabel>gpt</disklabel>
<enable_snapshots config:type="boolean">false</enable_snapshots>
<initialize config:type="boolean">false</initialize>
<partitions config:type="list">
<partition>
<create config:type="boolean">true</create>
<format config:type="boolean">false</format>
<partition_id config:type="integer">263</partition_id>
<partition_nr config:type="integer">1</partition_nr>
<partition_type>primary</partition_type>
<resize config:type="boolean">false</resize>
<size>8388608</size>
</partition>
<partition>
<create config:type="boolean">true</create>
<format config:type="boolean">false</format>
<lvm_group>system</lvm_group>
<partition_id config:type="integer">142</partition_id>
<partition_nr config:type="integer">2</partition_nr>
<partition_type>primary</partition_type>
<resize config:type="boolean">false</resize>
<size>429487275520</size>
</partition>
</partitions>
<type config:type="symbol">CT_DISK</type>
<use>all</use>
</drive>
<drive>
<device>/dev/sdb</device>
<disklabel>gpt</disklabel>
<enable_snapshots config:type="boolean">false</enable_snapshots>
<initialize config:type="boolean">false</initialize>
<partitions config:type="list">
<partition>
<create config:type="boolean">true</create>
<filesystem config:type="symbol">xfs</filesystem>
<format config:type="boolean">true</format>
<label>hosdisks</label>
<mount>/mnt/hosdisks</mount>
<mountby config:type="symbol">label</mountby>
<partition_id config:type="integer">131</partition_id>
<partition_nr config:type="integer">1</partition_nr>
<partition_type>primary</partition_type>
<resize config:type="boolean">false</resize>
<size>2741658189824</size>
</partition>
</partitions>
<type config:type="symbol">CT_DISK</type>
<use>all</use>
</drive>
</partitioning>
<printer>
<client_conf_content>
<file_contents><![CDATA[# CUPS client configuration file (optional).
# You may use /etc/cups/client.conf (system wide)
# or ~/.cups/client.conf (per user).
# For more information see "man 5 client.conf".
# The ServerName directive specifies the remote server
# that is to be used for all client operations. That is, it
# redirects all client requests directly to that remote server
# so that a local running cupsd is not used in this case.
# The default is to use the local server ("localhost") or domain socket.
# Only one ServerName directive may appear.
# If multiple names are present, only the last one is used.
# The default port number is 631 but can be overridden by adding
# a colon followed by the desired port number.
# The default IPP version is 2.0 but can be overridden by adding
# a slash followed by version=V where V is 1.0 or 1.1 or 2.0 or 2.1 or 2.2.
# IPP version 2.0 does do not work with CUPS 1.3 or older servers.
# If an CUPS 1.3 or older server is used, its older IPP version
# must be specified as .../version=1.1 or .../version=1.0.
# Examples:
# ServerName sever.example.com
# ServerName 192.0.2.10
# ServerName sever.example.com:8631
# ServerName older.server.example.com/version=1.1
# ServerName older.server.example.com:8631/version=1.1
]]></file_contents>
</client_conf_content>
<cupsd_conf_content>
<file_contents><![CDATA[#
# Configuration file for the CUPS scheduler. See "man cupsd.conf" for a
# complete description of this file.
#
# Log general information in error_log - change "warn" to "debug"
# for troubleshooting...
LogLevel warn
PageLogFormat
# Only listen for connections from the local machine.
Listen localhost:631
Listen /run/cups/cups.sock
# Show shared printers on the local network.
Browsing On
BrowseLocalProtocols dnssd
# Default authentication type, when authentication is required...
DefaultAuthType Basic
# Web interface setting...
WebInterface Yes
# Restrict access to the server...
<Location />
Order allow,deny
</Location>
# Restrict access to the admin pages...
<Location /admin>
Order allow,deny
</Location>
# Restrict access to configuration files...
<Location /admin/conf>
AuthType Default
Require user @SYSTEM
Order allow,deny
</Location>
# Restrict access to log files...
<Location /admin/log>
AuthType Default
Require user @SYSTEM
Order allow,deny
</Location>
# Set the default printer/job policies...
<Policy default>
# Job/subscription privacy...
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
# Job-related operations must be done by the owner or an administrator...
<Limit Create-Job Print-Job Print-URI Validate-Job>
Order deny,allow
</Limit>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
# All printer operations require a printer operator to authenticate...
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit All>
Order deny,allow
</Limit>
</Policy>
# Set the authenticated printer/job policies...
<Policy authenticated>
# Job/subscription privacy...
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
# Job-related operations must be done by the owner or an administrator...
<Limit Create-Job Print-Job Print-URI Validate-Job>
AuthType Default
Order deny,allow
</Limit>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
# All printer operations require a printer operator to authenticate...
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit All>
Order deny,allow
</Limit>
</Policy>
# Set the kerberized printer/job policies...
<Policy kerberos>
# Job/subscription privacy...
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
# Job-related operations must be done by the owner or an administrator...
<Limit Create-Job Print-Job Print-URI Validate-Job>
AuthType Negotiate
Order deny,allow
</Limit>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
# All printer operations require a printer operator to authenticate...
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit All>
Order deny,allow
</Limit>
</Policy>
# The policy below is added by SUSE during build of our cups package.
# The policy 'allowallforanybody' is totally open and insecure and therefore
# it can only be used within an internal network where only trused users exist
# and where the cupsd is not accessible at all from any external host, see
# http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
# Have in mind that any user who is allowed to do printer admin tasks
# can change the print queues as he likes - e.g. send copies of confidental
# print jobs from an internal network to any external destination, see
# http://en.opensuse.org/SDB:CUPS_in_a_Nutshell
# For documentation regarding 'Managing Operation Policies' see
# http://www.cups.org/documentation.php/doc-1.7/policies.html
<Policy allowallforanybody>
# Allow anybody to access job's private values:
JobPrivateAccess all
# Make none of the job values to be private:
JobPrivateValues none
# Allow anybody to access subscription's private values:
SubscriptionPrivateAccess all
# Make none of the subscription values to be private:
SubscriptionPrivateValues none
# Allow anybody to do all IPP operations:
# Currently the IPP operations Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document
# must be additionally exlicitly specified because those IPP operations are not included
# in the "All" wildcard value - otherwise cupsd prints error messages of the form
# "No limit for Validate-Job defined in policy allowallforanybody and no suitable template found."
<Limit Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document>
Order deny,allow
Allow from all
</Limit>
# Since CUPS > 1.5.4 the "All" wildcard value must be specified separately,
# otherwise clients like "lpstat -p" just hang up,
# see https://bugzilla.opensuse.org/show_bug.cgi?id=936309
# and https://www.cups.org/str.php?L4659
<Limit All>
Order deny,allow
Allow from all
</Limit>
</Policy>
# Explicitly set the CUPS 'default' policy to be used by default:
DefaultPolicy default
]]></file_contents>
</cupsd_conf_content>
</printer>
<proxy>
<enabled config:type="boolean">false</enabled>
<ftp_proxy/>
<http_proxy/>
<https_proxy/>
<no_proxy>localhost, 127.0.0.1</no_proxy>
<proxy_password/>
<proxy_user/>
</proxy>
<report>
<errors>
<log config:type="boolean">true</log>
<show config:type="boolean">true</show>
<timeout config:type="integer">0</timeout>
</errors>
<messages>
<log config:type="boolean">true</log>
<show config:type="boolean">true</show>
<timeout config:type="integer">0</timeout>
</messages>
<warnings>
<log config:type="boolean">true</log>
<show config:type="boolean">true</show>
<timeout config:type="integer">0</timeout>
</warnings>
<yesno_messages>
<log config:type="boolean">true</log>
<show config:type="boolean">true</show>
<timeout config:type="integer">0</timeout>
</yesno_messages>
</report>
<services-manager>
<default_target>multi-user</default_target>
<services>
<disable config:type="list"/>
<enable config:type="list">
<service>apparmor</service>
<service>auditd</service>
<service>btrfsmaintenance-refresh</service>
<service>ca-certificates</service>
<service>chronyd</service>
<service>comp1-bmc</service>
<service>comp2-bmc</service>
<service>core1-bmc</service>
<service>core2-bmc</service>
<service>cron</service>
<service>cups</service>
<service>dbmq1-bmc</service>
<service>dbmq2-bmc</service>
<service>dbmq3-bmc</service>
<service>haveged</service>
<service>irqbalance</service>
<service>iscsi</service>
<service>kbdsettings</service>
<service>libvirtd</service>
<service>lvm2-monitor</service>
<service>mcelog</service>
<service>mtrmon1-bmc</service>
<service>mtrmon2-bmc</service>
<service>mtrmon3-bmc</service>
<service>neut1-bmc</service>
<service>neut2-bmc</service>
<service>nscd</service>
<service>postfix</service>
<service>purge-kernels</service>
<service>smartd</service>
<service>sshd</service>
<service>swobj1-bmc</service>
<service>swobj2-bmc</service>
<service>swobj3-bmc</service>
<service>swpac1-bmc</service>
<service>swpac2-bmc</service>
<service>swpac3-bmc</service>
<service>wicked</service>
<service>wickedd-auto4</service>
<service>wickedd-dhcp4</service>
<service>wickedd-dhcp6</service>
<service>wickedd-nanny</service>
<service>YaST2-Firstboot</service>
<service>YaST2-Second-Stage</service>
<service>getty@tty1</service>
</enable>
</services>
</services-manager>
<software>
<image/>
<install_recommended config:type="boolean">true</install_recommended>
<instsource/>
<packages config:type="list">
<package>xfsprogs</package>
<package>virt-top</package>
<package>snapper</package>
<package>qemu-ovmf-x86_64</package>
<package>openvswitch</package>
<package>openssh</package>
<package>openSUSE-release</package>
<package>numactl</package>
<package>lvm2</package>
<package>libvirt-client</package>
<package>kexec-tools</package>
<package>irqbalance</package>
<package>hpssacli</package>
<package>grub2</package>
<package>glibc</package>
<package>git-core</package>
<package>e2fsprogs</package>
<package>chrony</package>
<package>btrfsprogs</package>
<package>bridge-utils</package>
<package>autoyast2</package>
</packages>
<patterns config:type="list">
<pattern>apparmor</pattern>
<pattern>apparmor_opt</pattern>
<pattern>base</pattern>
<pattern>basesystem</pattern>
<pattern>books</pattern>
<pattern>console</pattern>
<pattern>devel_C_C++</pattern>
<pattern>devel_basis</pattern>
<pattern>devel_python3</pattern>
<pattern>documentation</pattern>
<pattern>enhanced_base</pattern>
<pattern>enhanced_base_opt</pattern>
<pattern>kvm_server</pattern>
<pattern>kvm_tools</pattern>
<pattern>minimal_base</pattern>
<pattern>network_admin</pattern>
<pattern>sw_management</pattern>
<pattern>yast2_basis</pattern>
</patterns>
<products config:type="list">
<product>openSUSE</product>
</products>
</software>
<ssh_import>
<copy_config config:type="boolean">false</copy_config>
<import config:type="boolean">false</import>
</ssh_import>
<timezone>
<hwclock>UTC</hwclock>
<timezone>Asia/Tokyo</timezone>
</timezone>
<user_defaults>
<expire/>
<group>100</group>
<groups/>
<home>/home</home>
<inactive>-1</inactive>
<no_groups config:type="boolean">true</no_groups>
<shell>/bin/bash</shell>
<skel>/etc/skel</skel>
<umask>022</umask>
</user_defaults>
<users config:type="list">
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>bbausch</fullname>
<gid>100</gid>
<home>/home/bbausch</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max>99999</max>
<min>0</min>
<warn>7</warn>
</password_settings>
<shell>/bin/bash</shell>
<uid>1000</uid>
<user_password>$6$TaEU7ue87ImZ$R9KPyb.DD/9LIX.hJxvUlc8ETYPzWKxsRulMKDvCBJUru.gDyd41wX2OJrCXnYzxiFvHwMEH.5Je49Y1zDtWD1</user_password>
<username>bbausch</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>WWW daemon apache</fullname>
<gid>497</gid>
<home>/var/lib/wwwrun</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>498</uid>
<user_password>!</user_password>
<username>wwwrun</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Chrony Daemon</fullname>
<gid>478</gid>
<home>/var/lib/chrony</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/false</shell>
<uid>478</uid>
<user_password>!</user_password>
<username>chrony</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>unbound caching DNS server</fullname>
<gid>470</gid>
<home>/var/lib/unbound</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/false</shell>
<uid>466</uid>
<user_password>!</user_password>
<username>unbound</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>root</fullname>
<gid>0</gid>
<home>/root</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/bash</shell>
<uid>0</uid>
<user_password>$6$C1XuSxLnvitu$wOJmv3rnGeSY4AnjpoBbH4qufMHzcCFF1mQfcSUVQdrdPWUrwOgu.Lz3.oSMx8E0XGh.H7n.NS2Lu0OHejF/r1</user_password>
<username>root</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>User for D-Bus</fullname>
<gid>499</gid>
<home>/run/dbus</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/usr/bin/false</shell>
<uid>499</uid>
<user_password>!</user_password>
<username>messagebus</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Mailer daemon</fullname>
<gid>496</gid>
<home>/var/spool/clientmqueue</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>497</uid>
<user_password>!</user_password>
<username>mail</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>User for Nagios</fullname>
<gid>469</gid>
<home>/var/lib/nagios</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/false</shell>
<uid>465</uid>
<user_password>!</user_password>
<username>nagios</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Postfix Daemon</fullname>
<gid>51</gid>
<home>/var/spool/postfix</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/false</shell>
<uid>51</uid>
<user_password>!</user_password>
<username>postfix</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>nobody</fullname>
<gid>65534</gid>
<home>/var/lib/nobody</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/bash</shell>
<uid>65534</uid>
<user_password>!</user_password>
<username>nobody</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Manual pages viewer</fullname>
<gid>62</gid>
<home>/var/lib/empty</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>13</uid>
<user_password>!</user_password>
<username>man</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>TFTP account</fullname>
<gid>474</gid>
<home>/srv/tftpboot</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/false</shell>
<uid>472</uid>
<user_password>!</user_password>
<username>tftp</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>user for rpcbind</fullname>
<gid>65534</gid>
<home>/var/lib/empty</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>476</uid>
<user_password>!</user_password>
<username>rpc</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>User for nscd</fullname>
<gid>475</gid>
<home>/run/nscd</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>473</uid>
<user_password>!</user_password>
<username>nscd</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>qemu user</fullname>
<gid>466</gid>
<home>/</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>464</uid>
<user_password>!</user_password>
<username>qemu</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>systemd Network Management</fullname>
<gid>481</gid>
<home>/</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>481</uid>
<user_password>!!</user_password>
<username>systemd-network</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>user for Apache Subversion svnserve</fullname>
<gid>477</gid>
<home>/srv/svn</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>477</uid>
<user_password>!</user_password>
<username>svn</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Batch jobs daemon</fullname>
<gid>25</gid>
<home>/var/spool/atjobs</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/bash</shell>
<uid>25</uid>
<user_password>!</user_password>
<username>at</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Open vSwitch Daemons</fullname>
<gid>464</gid>
<home>/</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>463</uid>
<user_password>!</user_password>
<username>openvswitch</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Printing daemon</fullname>
<gid>485</gid>
<home>/var/spool/lpd</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>496</uid>
<user_password>!</user_password>
<username>lp</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>usbmuxd daemon</fullname>
<gid>65533</gid>
<home>/var/lib/usbmuxd</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>467</uid>
<user_password>!</user_password>
<username>usbmux</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Daemon</fullname>
<gid>2</gid>
<home>/sbin</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>2</uid>
<user_password>!</user_password>
<username>daemon</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>dnsmasq</fullname>
<gid>65533</gid>
<home>/var/lib/empty</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/false</shell>
<uid>471</uid>
<user_password>!</user_password>
<username>dnsmasq</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>bin</fullname>
<gid>1</gid>
<home>/bin</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>1</uid>
<user_password>!</user_password>
<username>bin</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Quagga routing daemon</fullname>
<gid>476</gid>
<home>/run/quagga</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/usr/bin/false</shell>
<uid>474</uid>
<user_password>!</user_password>
<username>quagga</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>systemd Time Synchronization</fullname>
<gid>480</gid>
<home>/</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>480</uid>
<user_password>!!</user_password>
<username>systemd-timesync</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>Router ADVertisement Daemon for</fullname>
<gid>100</gid>
<home>/var/lib/empty</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>475</uid>
<user_password>!</user_password>
<username>radvd</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>SSH daemon</fullname>
<gid>472</gid>
<home>/var/lib/sshd</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/bin/false</shell>
<uid>468</uid>
<user_password>!</user_password>
<username>sshd</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>User for polkitd</fullname>
<gid>473</gid>
<home>/var/lib/polkit</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>469</uid>
<user_password>!</user_password>
<username>polkitd</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>systemd Core Dumper</fullname>
<gid>479</gid>
<home>/</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>479</uid>
<user_password>!!</user_password>
<username>systemd-coredump</username>
</user>
<user>
<encrypted config:type="boolean">true</encrypted>
<fullname>NFS statd daemon</fullname>
<gid>65533</gid>
<home>/var/lib/nfs</home>
<password_settings>
<expire/>
<flag/>
<inact/>
<max/>
<min/>
<warn/>
</password_settings>
<shell>/sbin/nologin</shell>
<uid>470</uid>
<user_password>!</user_password>
<username>statd</username>
</user>
</users>
</profile>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment