Improve kickstart config

metal/main.yml

@@ -1,9 +1,6 @@
 - name: Install OS on bare metal machines
   hosts: all
   gather_facts: no
-  vars_prompt:
-    - name: os_password
-      prompt: Enter password for metal nodes
   roles:
     - pxe-boot
 

metal/roles/docker/tasks/main.yml

@@ -1,10 +1,3 @@
-# TODO (optimize) Node firewall
-- name: Disable firewall
-  service:
-    name: firewalld
-    state: stopped
-    enabled: no
-
 - name: Install Docker
   dnf:
     name: docker
@@ -14,10 +7,3 @@
     name: docker
     state: started
     enabled: yes
-
-# TODO (optimize) Restructure provisioning roles
-- name: Start iSCSI service
-  systemd:
-    name: iscsid
-    state: started
-    enabled: yes

metal/roles/pxe-boot/defaults/main.yml

@@ -2,4 +2,4 @@ iso_url: "https://download.fedoraproject.org/pub/fedora/linux/releases/34/Server
 iso_checksum: "sha256:0b9dc87d060c7c4ef89f63db6d4d1597dd3feaf4d635ca051d87f5e8c89e8675"
 iso_file_name: "Fedora-Server-dvd-x86_64-34-1.2.iso"
 
-os_username: fedora
+os_username: admin

metal/roles/pxe-boot/templates/http/kickstart/fedora.ks.j2

@@ -34,14 +34,22 @@ services --enabled="chronyd"
 # System timezone
 timezone Asia/Ho_Chi_Minh --utc
 
-# Create user
-user --groups=wheel --name={{ os_username }} --password={{ os_password }}
+# Create user (locked by default)
+user --groups=wheel --name={{ os_username }}
 # Add SSH key
 sshkey --username=root "{{ ssh_public_key }}"
 
+# SELinux
+selinux --disabled
+
+# Firewall
+firewall --disabled
+
 %packages
 @^server-product-environment
-
 %end
 
+# Enable some services for Kubernetes
+services --enable=iscsid
+
 reboot