How make extended partition

Fabien Chaudier <[email protected]> Wed, 11 Jul 2018 17:16:50 +0200 (CEST)
Newsgroups gmane.linux.suse.autoinstall
Message-ID <[email protected]>
Hello,

I try to create logical partition but it does not work !
The problem seems to be in the files disque_*.xml but I don't know what.



----
Direction des Systèmes d'Information
Service support
INSA de LYON – Bât. Léonard de Vinci
69621 VILLEURBANNE cedex
Tél : +33(0)4 72 43 89 96
----
Are You Environmentally Friendly ?
autoinst.xml (application/xml, 49.7 KB)
<?xml version="1.0"?>
<!DOCTYPE profile>
<profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
  <add-on>
    <add_on_products config:type="list">
      <listentry>
        <media_url><![CDATA[http://mirror.insa-lyon.fr/opensuse/distribution/leap/15.0/repo/oss]]></media_url>
        <product>openSUSE-Leap-15.0-Oss-INSA</product>
        <alias>repo-oss</alias>
        <product_dir>/</product_dir>
        <name>openSUSE-Leap-15.0-Oss</name>
      </listentry>
      <listentry>
        <media_url><![CDATA[http://mirror.insa-lyon.fr/opensuse/update/leap/15.0/oss]]></media_url>
        <product>openSUSE-Leap-15.0-Update</product>
        <alias>repo-update</alias>
        <product_dir>/</product_dir>
        <name>openSUSE-Leap-15.0-Update</name>
      </listentry>
      <listentry>
        <media_url><![CDATA[http://mirror.insa-lyon.fr/linux/opensuse/]]></media_url>
        <product>INSA Repository openSUSE INSA</product>
        <alias>insa</alias>
        <product_dir>/</product_dir>
        <name>INSA Repository openSUSE Leap 15.0 INSA</name>
      </listentry>
    </add_on_products>    
  </add-on>
  <auth-client>
  </auth-client>
  <deploy_image>
    <image_installation config:type="boolean">false</image_installation>
  </deploy_image>
  <files config:type="list">
    <file>
       <file_path>/etc/openldap/cacert/</file_path> <!-- creation repertoire -->
    </file>
    <file>
      <file_path>/etc/openldap/cacert/TERENA_SSL_CA_3.pem</file_path>
      <file_contents><![CDATA[-----BEGIN CERTIFICATE-----
lrlcinQfkioq8hLIt2hUtVhBgUBoBhpPhSn7tU08D08/QJYbzqjMXjX/ZJj1dd10
VAWgNhEEEiRVY++Udy538RV27tOkWUUhn6i+0SftCuirOMo/h9Ha8Y+5Cx9E5+Ct
+hY77gRuW6xWS++McPJKe1e9GW6LNgdUJi2GCZQfXzer8CM/jyxflp5HcahE3qm5
hS+1NGClXwmgmkMd1L8tRNaN2v11y18WoA5hwnA9Ng==
-----END CERTIFICATE-----]]></file_contents>
      <file_owner>root:root</file_owner>
      <file_permissions>444</file_permissions>
    </file>
    <file>
      <file_path>/etc/auto.master.d/auto.home.autofs</file_path>
      <file_contents><![CDATA[
/home   ldap:ou=auto.home,ou=automount,dc=insa-lyon,dc=fr]]></file_contents>
      <file_owner>root:root</file_owner>
      <file_permissions>644</file_permissions>
    </file>
  </files>
  <firewall>
    <enable_firewall config:type="boolean">false</enable_firewall>
    <start_firewall config:type="boolean">false</start_firewall>
  </firewall>
  <general>
    <ask-list config:type="list"/>
    <mode>
      <confirm config:type="boolean">false</confirm>
    </mode>
    <proposals config:type="list"/>
    <signature-handling>
      <accept_file_without_checksum config:type="boolean">true</accept_file_without_checksum>
      <accept_non_trusted_gpg_key config:type="boolean">true</accept_non_trusted_gpg_key>
      <accept_unknown_gpg_key config:type="boolean">true</accept_unknown_gpg_key>
      <accept_unsigned_file config:type="boolean">true</accept_unsigned_file>
      <accept_verification_failed config:type="boolean">false</accept_verification_failed>
      <import_gpg_key config:type="boolean">true</import_gpg_key>
    </signature-handling>
    <storage>
      <start_multipath config:type="boolean">false</start_multipath>
    </storage>
  </general>
  <groups config:type="list">
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>100</gid>
      <group_password>x</group_password>
      <groupname>users</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>484</gid>
      <group_password>x</group_password>
      <groupname>video</groupname>
      <userlist>gdm</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>465</gid>
      <group_password>x</group_password>
      <groupname>nm-openvpn</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>496</gid>
      <group_password>x</group_password>
      <groupname>wheel</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>498</gid>
      <group_password>!</group_password>
      <groupname>srvGeoClue</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>5</gid>
      <group_password>x</group_password>
      <groupname>tty</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>488</gid>
      <group_password>x</group_password>
      <groupname>input</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>493</gid>
      <group_password>x</group_password>
      <groupname>utmp</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>1</gid>
      <group_password>x</group_password>
      <groupname>bin</groupname>
      <userlist>daemon</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>477</gid>
      <group_password>x</group_password>
      <groupname>nscd</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>473</gid>
      <group_password>x</group_password>
      <groupname>rtkit</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>486</gid>
      <group_password>x</group_password>
      <groupname>lp</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>71</gid>
      <group_password>x</group_password>
      <groupname>ntadmin</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>499</gid>
      <group_password>x</group_password>
      <groupname>messagebus</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>494</gid>
      <group_password>x</group_password>
      <groupname>lock</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>65534</gid>
      <group_password>x</group_password>
      <groupname>nobody</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>481</gid>
      <group_password>x</group_password>
      <groupname>systemd-coredump</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>15</gid>
      <group_password>x</group_password>
      <groupname>shadow</groupname>
      <userlist>vnc</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>474</gid>
      <group_password>x</group_password>
      <groupname>sshd</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>487</gid>
      <group_password>x</group_password>
      <groupname>kvm</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>489</gid>
      <group_password>x</group_password>
      <groupname>disk</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>475</gid>
      <group_password>x</group_password>
      <groupname>polkitd</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>461</gid>
      <group_password>x</group_password>
      <groupname>lightdm</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>476</gid>
      <group_password>x</group_password>
      <groupname>tftp</groupname>
      <userlist>tftp,dnsmasq</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>471</gid>
      <group_password>x</group_password>
      <groupname>scard</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>482</gid>
      <group_password>x</group_password>
      <groupname>systemd-network</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>478</gid>
      <group_password>x</group_password>
      <groupname>svn</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>65533</gid>
      <group_password>x</group_password>
      <groupname>nogroup</groupname>
      <userlist>nobody</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>2</gid>
      <group_password>x</group_password>
      <groupname>daemon</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>0</gid>
      <group_password>x</group_password>
      <groupname>root</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>491</gid>
      <group_password>x</group_password>
      <groupname>cdrom</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>485</gid>
      <group_password>x</group_password>
      <groupname>tape</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>483</gid>
      <group_password>x</group_password>
      <groupname>systemd-journal</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>467</gid>
      <group_password>x</group_password>
      <groupname>colord</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>480</gid>
      <group_password>x</group_password>
      <groupname>systemd-timesync</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>42</gid>
      <group_password>x</group_password>
      <groupname>trusted</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>497</gid>
      <group_password>!</group_password>
      <groupname>mail</groupname>
      <userlist>postfix</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>468</gid>
      <group_password>x</group_password>
      <groupname>pulse-access</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>59</gid>
      <group_password>x</group_password>
      <groupname>maildrop</groupname>
      <userlist>postfix</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>462</gid>
      <group_password>x</group_password>
      <groupname>gdm</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>460</gid>
      <group_password>x</group_password>
      <groupname>mktex</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>466</gid>
      <group_password>x</group_password>
      <groupname>winbind</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>470</gid>
      <group_password>x</group_password>
      <groupname>avahi</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>62</gid>
      <group_password>x</group_password>
      <groupname>man</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>464</gid>
      <group_password>x</group_password>
      <groupname>nm-openconnect</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>479</gid>
      <group_password>x</group_password>
      <groupname>chrony</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>490</gid>
      <group_password>x</group_password>
      <groupname>dialout</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>492</gid>
      <group_password>x</group_password>
      <groupname>audio</groupname>
      <userlist>pulse</userlist>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>463</gid>
      <group_password>x</group_password>
      <groupname>vnc</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>472</gid>
      <group_password>x</group_password>
      <groupname>brlapi</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>469</gid>
      <group_password>x</group_password>
      <groupname>pulse</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>51</gid>
      <group_password>x</group_password>
      <groupname>postfix</groupname>
      <userlist/>
    </group>
    <group>
      <encrypted config:type="boolean">true</encrypted>
      <gid>495</gid>
      <group_password>x</group_password>
      <groupname>kmem</groupname>
      <userlist/>
    </group>
  </groups>
  <host>
    <hosts config:type="list">
      <hosts_entry>
        <host_address>127.0.0.1</host_address>
        <names config:type="list">
          <name>localhost</name>
        </names>
      </hosts_entry>
      <hosts_entry>
        <host_address>::1</host_address>
        <names config:type="list">
          <name>localhost ipv6-localhost ipv6-loopback</name>
        </names>
      </hosts_entry>
      <hosts_entry>
        <host_address>fe00::0</host_address>
        <names config:type="list">
          <name>ipv6-localnet</name>
        </names>
      </hosts_entry>
      <hosts_entry>
        <host_address>ff00::0</host_address>
        <names config:type="list">
          <name>ipv6-mcastprefix</name>
        </names>
      </hosts_entry>
      <hosts_entry>
        <host_address>ff02::1</host_address>
        <names config:type="list">
          <name>ipv6-allnodes</name>
        </names>
      </hosts_entry>
      <hosts_entry>
        <host_address>ff02::2</host_address>
        <names config:type="list">
          <name>ipv6-allrouters</name>
        </names>
      </hosts_entry>
      <hosts_entry>
        <host_address>ff02::3</host_address>
        <names config:type="list">
          <name>ipv6-allhosts</name>
        </names>
      </hosts_entry>
    </hosts>
  </host>
  <keyboard>
    <keymap>french</keymap>
  </keyboard>
  <language>
    <language>fr_FR</language>
    <languages/>
  </language>
  <login_settings/>
  <networking>
    <dhcp_options>
      <dhclient_client_id/>
      <dhclient_hostname_option>AUTO</dhclient_hostname_option>
    </dhcp_options>
    <dns>
      <dhcp_hostname config:type="boolean">true</dhcp_hostname>
      <domain>insa-lyon.fr</domain>
      <hostname>dsi-vmsi-wxp-fu</hostname>
      <resolv_conf_policy>auto</resolv_conf_policy>
      <write_hostname config:type="boolean">false</write_hostname>
    </dns>
    <interfaces config:type="list">
      <interface>
        <bootproto>dhcp4</bootproto>
        <device>em1</device>
        <mtu>1500</mtu>
        <startmode>auto</startmode>
      </interface>
      <interface>
        <bootproto>static</bootproto>
        <device>lo</device>
        <firewall>no</firewall>
        <ipaddr>127.0.0.1</ipaddr>
        <netmask>255.0.0.0</netmask>
        <network>127.0.0.0</network>
        <prefixlen>8</prefixlen>
        <startmode>nfsroot</startmode>
        <usercontrol>no</usercontrol>
      </interface>
    </interfaces>
    <ipv6 config:type="boolean">false</ipv6>
    <keep_install_network config:type="boolean">true</keep_install_network>
    <managed config:type="boolean">false</managed>
    <net-udev config:type="list">
      <rule>
        <name>em1</name>
        <rule>KERNELS</rule>
        <value>0000:00:19.0</value>
      </rule>
    </net-udev>
    <routing>
      <ipv4_forward config:type="boolean">false</ipv4_forward>
      <ipv6_forward config:type="boolean">false</ipv6_forward>
    </routing>
  </networking>
  <nfs>
    <enable_nfs4 config:type="boolean">true</enable_nfs4>
    <enable_nfs_gss config:type="boolean">false</enable_nfs_gss>
    <idmapd_domain>localdomain</idmapd_domain>
    <nfs_entries config:type="list"/>
  </nfs>
  <ntp-client>
    <ntp_policy>auto</ntp_policy>
    <ntp_servers config:type="list">
      <ntp_server>
        <address>ntp.insa-lyon.fr</address>
        <iburst config:type="boolean">true</iburst>
        <offline config:type="boolean">false</offline>
      </ntp_server>
    </ntp_servers>
    <ntp_sync>systemd</ntp_sync>
  </ntp-client>
  <printer>
    <client_conf_content>
      <file_contents><![CDATA[# CUPS client configuration file (optional).

# You may use /etc/cups/client.conf (system wide)
# or ~/.cups/client.conf (per user).
# For more information see "man 5 client.conf".

# The ServerName directive specifies the remote server
# that is to be used for all client operations. That is, it
# redirects all client requests directly to that remote server
# so that a local running cupsd is not used in this case.
# The default is to use the local server ("localhost") or domain socket.
# Only one ServerName directive may appear.
# If multiple names are present, only the last one is used.
# The default port number is 631 but can be overridden by adding
# a colon followed by the desired port number.
# The default IPP version is 2.0 but can be overridden by adding
# a slash followed by version=V where V is 1.0 or 1.1 or 2.0 or 2.1 or 2.2.
# IPP version 2.0 does do not work with CUPS 1.3 or older servers.
# If an CUPS 1.3 or older server is used, its older IPP version
# must be specified as .../version=1.1 or .../version=1.0.

# Examples:
# ServerName sever.example.com
# ServerName 192.0.2.10
# ServerName sever.example.com:8631
# ServerName older.server.example.com/version=1.1
# ServerName older.server.example.com:8631/version=1.1

#ServerName dsi-cups.insa-lyon.fr
ServerName dsi-cups.insa-lyon.fr
]]></file_contents>
    </client_conf_content>
    <cupsd_conf_content>
      <file_contents><![CDATA[#
# Default configuration file for the CUPS scheduler.  See "man cupsd.conf" for a
# complete description of this file.
#

# Log general information in error_log - change "warn" to "debug"
# for troubleshooting...
LogLevel warn
PageLogFormat

# Only listen for connections from the local machine.
Listen localhost:631
Listen /run/cups/cups.sock

# Show shared printers on the local network.
Browsing On
BrowseLocalProtocols dnssd

# Default authentication type, when authentication is required...
DefaultAuthType Basic

# Web interface setting...
WebInterface Yes

# Restrict access to the server...
<Location />
  Order allow,deny
</Location>

# Restrict access to the admin pages...
<Location /admin>
  Order allow,deny
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
</Location>

# Restrict access to log files...
<Location /admin/log>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
</Location>

# Set the default printer/job policies...
<Policy default>
  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default

  # Job-related operations must be done by the owner or an administrator...
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    Order deny,allow
  </Limit>

  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

# Set the authenticated printer/job policies...
<Policy authenticated>
  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default

  # Job-related operations must be done by the owner or an administrator...
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Default
    Order deny,allow
  </Limit>

  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

# Set the kerberized printer/job policies...
<Policy kerberos>
  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default

  # Job-related operations must be done by the owner or an administrator...
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Negotiate
    Order deny,allow
  </Limit>

  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Negotiate
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Negotiate
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

# The policy below is added by SUSE during build of our cups package.
# The policy 'allowallforanybody' is totally open and insecure and therefore
# it can only be used within an internal network where only trused users exist
# and where the cupsd is not accessible at all from any external host, see
# http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
# Have in mind that any user who is allowed to do printer admin tasks
# can change the print queues as he likes - e.g. send copies of confidental
# print jobs from an internal network to any external destination, see
# http://en.opensuse.org/SDB:CUPS_in_a_Nutshell
# For documentation regarding 'Managing Operation Policies' see
# http://www.cups.org/documentation.php/doc-1.7/policies.html
<Policy allowallforanybody>
  # Allow anybody to access job's private values:
  JobPrivateAccess all
  # Make none of the job values to be private:
  JobPrivateValues none
  # Allow anybody to access subscription's private values:
  SubscriptionPrivateAccess all
  # Make none of the subscription values to be private:
  SubscriptionPrivateValues none
  # Allow anybody to do all IPP operations:
  # Currently the IPP operations Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document
  # must be additionally exlicitly specified because those IPP operations are not included
  # in the "All" wildcard value - otherwise cupsd prints error messages of the form
  # "No limit for Validate-Job defined in policy allowallforanybody and no suitable template found."
  <Limit Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document>
    Order deny,allow
    Allow from all
  </Limit>
  # Since CUPS > 1.5.4 the "All" wildcard value must be specified separately,
  # otherwise clients like "lpstat -p" just hang up,
  # see https://bugzilla.opensuse.org/show_bug.cgi?id=936309
  # and https://www.cups.org/str.php?L4659
  <Limit All>
    Order deny,allow
    Allow from all
  </Limit>
</Policy>
# Explicitly set the CUPS 'default' policy to be used by default:
DefaultPolicy default

]]></file_contents>
    </cupsd_conf_content>
  </printer>
  <report>
    <errors>
      <log config:type="boolean">true</log>
      <show config:type="boolean">true</show>
      <timeout config:type="integer">0</timeout>
    </errors>
    <messages>
      <log config:type="boolean">true</log>
      <show config:type="boolean">true</show>
      <timeout config:type="integer">10</timeout>
    </messages>
    <warnings>
      <log config:type="boolean">true</log>
      <show config:type="boolean">true</show>
      <timeout config:type="integer">10</timeout>
    </warnings>
    <yesno_messages>
      <log config:type="boolean">true</log>
      <show config:type="boolean">true</show>
      <timeout config:type="integer">10</timeout>
    </yesno_messages>
  </report>
  <scripts>
    <post-scripts config:type="list">
      <script>
        <filename>HideLoginUsers.sh</filename>
        <interpreter>shell</interpreter>
        <source><![CDATA[
#!/bin/sh

echo "greeter-hide-users=true" >> /usr/share/lightdm/lightdm.conf.d/50-suse-defaults.conf
]]>
        </source>
      </script>
      <script>
        <filename>InstPuppet4.sh</filename>
        <interpreter>shell</interpreter>
        <source><![CDATA[
#!/bin/sh

echo "Installation Puppet"
gem install puppet --version 4.10.11
ruby /usr/lib64/ruby/gems/2.1.0/gems/puppet-4.10.4/install.rb
]]>
        </source>
      </script>
    </post-scripts>
  </scripts>  
  <security/>
  <services-manager>
    <default_target>graphical</default_target>
    <services>
      <disable config:type="list">
        <service>postfix</service>
      </disable>
      <enable config:type="list">
        <service>apparmor</service>
        <service>appstream-sync-cache</service>
        <service>auditd</service>
        <service>autofs</service>
        <service>ca-certificates</service>
        <service>chronyd</service>
        <service>cron</service>
        <service>display-manager</service>
        <service>haveged</service>
        <service>irqbalance</service>
        <service>kbdsettings</service>
        <service>klog</service>
        <service>mcelog</service>
        <service>ModemManager</service>
        <service>purge-kernels</service>
        <service>restorecond</service>
        <service>rsyslog</service>
        <service>smartd</service>
        <service>sshd</service>
        <service>sssd</service>
        <service>systemd-fsck-root</service>
        <service>vncmanager</service>
        <service>wicked</service>
        <service>wickedd-auto4</service>
        <service>wickedd-dhcp4</service>
        <service>wickedd-nanny</service>
        <service>YaST2-Firstboot</service>
        <service>YaST2-Second-Stage</service>
        <service>getty@tty1</service>
      </enable>
    </services>
  </services-manager>
  <software>
    <image/>
    <install_recommended config:type="boolean">true</install_recommended>
    <instsource/>
    <packages config:type="list">
      <package>yast2-firewall</package>
      <package>xemacs</package>
      <package>vncmanager</package>
      <package>virt-what</package>
      <package>udev-browse</package>
      <package>sssd-tools</package>
      <package>sssd-ldap</package>
      <package>sssd</package>
      <package>selinux-tools</package>
      <package>qpdfview</package>
      <package>qpdf</package>
      <package>qbittorrent</package>
      <package>pstoedit</package>
      <package>policycoreutils</package>
      <package>pdfshuffler</package>
      <package>pdfmod</package>
      <package>pdfgrep</package>
      <package>pdfcompare</package>
      <package>openssh</package>
      <package>openSUSE-release</package>
      <package>numactl</package>
      <package>ncurses5-devel</package>
      <package>mysql-workbench</package>
      <package>makedepend</package>
      <package>lsb-release</package>
      <package>llvm-vim-plugins</package>
      <package>llvm</package>
      <package>libqt5-creator-plugin-devel</package>
      <package>libqt5-creator</package>
      <package>libncurses5</package>
      <package>libcthreads-devel</package>
      <package>libconfig-devel</package>
      <package>libconfig++-devel</package>
      <package>kile</package>
      <package>kexec-tools</package>
      <package>java-1_8_0-openjdk-devel</package>
      <package>irqbalance</package>
      <package>htop</package>
      <package>grub2</package>
      <package>graphviz-guile</package>
      <package>graphviz-devel</package>
      <package>glibc</package>
      <package>gedit-plugin-colorschemer</package>
      <package>gedit-plugin-code-assistance</package>
      <package>gcc-obj-c++</package>
      <package>gcc-locale</package>
      <package>gcc-go</package>
      <package>extra-cmake-modules</package>
      <package>emacs-color-theme</package>
      <package>emacs</package>
      <package>elementary-cmake-modules</package>
      <package>e2fsprogs</package>
      <package>dosfstools</package>
      <package>diff-pdf</package>
      <package>ddd</package>
      <package>cppi</package>
      <package>cppcheck-gui</package>
      <package>cppcheck</package>
      <package>colormake</package>
      <package>cmake</package>
      <package>clang</package>
      <package>chrony</package>
      <package>ca-certificates-cacert</package>
      <package>biosdevname</package>
      <package>autoyast2</package>
      <package>antlr-manual</package>
      <package>antlr-devel</package>
      <package>R-core-devel</package>
      <package>R-core</package>
    </packages>
    <patterns config:type="list">
      <pattern>apparmor</pattern>
      <pattern>apparmor_opt</pattern>
      <pattern>base</pattern>
      <pattern>basesystem</pattern>
      <pattern>devel_C_C++</pattern>
      <pattern>devel_basis</pattern>
      <pattern>devel_java</pattern>
      <pattern>devel_python3</pattern>
      <pattern>devel_tcl</pattern>
      <pattern>enhanced_base</pattern>
      <pattern>enhanced_base_opt</pattern>
      <pattern>fonts</pattern>
      <pattern>fonts_opt</pattern>
      <pattern>games</pattern>
      <pattern>gnome</pattern>
      <pattern>gnome_basis</pattern>
      <pattern>gnome_basis_opt</pattern>
      <pattern>gnome_imaging</pattern>
      <pattern>gnome_internet</pattern>
      <pattern>gnome_multimedia</pattern>
      <pattern>gnome_office</pattern>
      <pattern>gnome_utilities</pattern>
      <pattern>gnome_x11</pattern>
      <pattern>gnome_yast</pattern>
      <pattern>imaging</pattern>
      <pattern>imaging_opt</pattern>
      <pattern>minimal_base</pattern>
      <pattern>multimedia</pattern>
      <pattern>multimedia_opt</pattern>
      <pattern>office</pattern>
      <pattern>sw_management</pattern>
      <pattern>sw_management_gnome</pattern>
      <pattern>x11</pattern>
      <pattern>x11_enhanced</pattern>
      <pattern>x11_opt</pattern>
      <pattern>x11_yast</pattern>
      <pattern>xfce</pattern>
      <pattern>xfce_basis</pattern>
      <pattern>xfce_office</pattern>
    </patterns>
    <products config:type="list">
      <product>openSUSE</product>
    </products>
  </software>
  <ssh_import>
    <copy_config config:type="boolean">false</copy_config>
    <import config:type="boolean">false</import>
  </ssh_import>
  <sysconfig config:type="list">
    <sysconfig_entry>
      <sysconfig_key>AVAHI_DAEMON_DETECT_LOCAL</sysconfig_key>
      <sysconfig_path>/etc/sysconfig/avahi</sysconfig_path>
      <sysconfig_value>no</sysconfig_value>
    </sysconfig_entry>
    <sysconfig_entry>
      <sysconfig_key>DISPLAYMANAGER_XSERVER</sysconfig_key>
      <sysconfig_path>/etc/sysconfig/displaymanager</sysconfig_path>
      <sysconfig_value>Xorg</sysconfig_value>
    </sysconfig_entry>
    <sysconfig_entry>
      <sysconfig_key>DEFAULT_WM</sysconfig_key>
      <sysconfig_path>/etc/sysconfig/windowmanager</sysconfig_path>
      <sysconfig_value>xfce</sysconfig_value>
    </sysconfig_entry>
    <sysconfig_entry>
      <sysconfig_key>SMARTD_CHECK_INTERVAL</sysconfig_key>
      <sysconfig_path>/etc/sysconfig/smartmontools</sysconfig_path>
      <sysconfig_value>7200</sysconfig_value>
    </sysconfig_entry>
  </sysconfig>
  <timezone>
    <hwclock>UTC</hwclock>
    <timezone>Europe/Paris</timezone>
  </timezone>
  <user_defaults>
    <expire/>
    <group>100</group>
    <groups/>
    <home>/home</home>
    <inactive>-1</inactive>
    <no_groups config:type="boolean">true</no_groups>
    <shell>/bin/bash</shell>
    <skel>/etc/skel</skel>
    <umask>022</umask>
  </user_defaults>
  <users config:type="list">
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Gnome Display Manager daemon</fullname>
      <gid>462</gid>
      <home>/var/lib/gdm</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>461</uid>
      <user_password>!</user_password>
      <username>gdm</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Chrony Daemon</fullname>
      <gid>479</gid>
      <home>/var/lib/chrony</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>479</uid>
      <user_password>!</user_password>
      <username>chrony</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Manual pages viewer</fullname>
      <gid>62</gid>
      <home>/var/lib/empty</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>13</uid>
      <user_password>!</user_password>
      <username>man</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>NetworkManager user for OpenConnect</fullname>
      <gid>464</gid>
      <home>/var/lib/nm-openconnect</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>463</uid>
      <user_password>!</user_password>
      <username>nm-openconnect</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>User for Avahi</fullname>
      <gid>470</gid>
      <home>/run/avahi-daemon</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>467</uid>
      <user_password>!</user_password>
      <username>avahi</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>user for VNC</fullname>
      <gid>463</gid>
      <home>/var/lib/empty</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>462</uid>
      <user_password>!</user_password>
      <username>vnc</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Postfix Daemon</fullname>
      <gid>51</gid>
      <home>/var/spool/postfix</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>51</uid>
      <user_password>!</user_password>
      <username>postfix</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>PulseAudio daemon</fullname>
      <gid>469</gid>
      <home>/var/lib/pulseaudio</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>466</uid>
      <user_password>!</user_password>
      <username>pulse</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>root</fullname>
      <gid>0</gid>
      <home>/root</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/bash</shell>
      <uid>0</uid>
      <user_password>$6$YXT38FmZ.j7M$C1CE1vfB16T4gTDWUOGr9HX7FbY70</user_password>
      <username>root</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Daemon</fullname>
      <gid>2</gid>
      <home>/sbin</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>2</uid>
      <user_password>!</user_password>
      <username>daemon</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>systemd Time Synchronization</fullname>
      <gid>480</gid>
      <home>/</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>480</uid>
      <user_password>!!</user_password>
      <username>systemd-timesync</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>user for colord</fullname>
      <gid>467</gid>
      <home>/var/lib/colord</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>465</uid>
      <user_password>!</user_password>
      <username>colord</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Mailer daemon</fullname>
      <gid>497</gid>
      <home>/var/spool/clientmqueue</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>497</uid>
      <user_password>!</user_password>
      <username>mail</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>dnsmasq</fullname>
      <gid>65533</gid>
      <home>/var/lib/empty</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>474</uid>
      <user_password>!</user_password>
      <username>dnsmasq</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>User for D-Bus</fullname>
      <gid>499</gid>
      <home>/run/dbus</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/usr/bin/false</shell>
      <uid>499</uid>
      <user_password>!</user_password>
      <username>messagebus</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>usbmuxd daemon</fullname>
      <gid>65533</gid>
      <home>/var/lib/usbmuxd</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>470</uid>
      <user_password>!</user_password>
      <username>usbmux</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>SSH daemon</fullname>
      <gid>474</gid>
      <home>/var/lib/sshd</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>471</uid>
      <user_password>!</user_password>
      <username>sshd</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>systemd Core Dumper</fullname>
      <gid>481</gid>
      <home>/</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>481</uid>
      <user_password>!!</user_password>
      <username>systemd-coredump</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>nobody</fullname>
      <gid>65534</gid>
      <home>/var/lib/nobody</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/bash</shell>
      <uid>65534</uid>
      <user_password>!</user_password>
      <username>nobody</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>TFTP account</fullname>
      <gid>476</gid>
      <home>/srv/tftpboot</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>475</uid>
      <user_password>!</user_password>
      <username>tftp</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>LightDM daemon</fullname>
      <gid>461</gid>
      <home>/var/lib/lightdm</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>460</uid>
      <user_password>!</user_password>
      <username>lightdm</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>User for polkitd</fullname>
      <gid>475</gid>
      <home>/var/lib/polkit</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>472</uid>
      <user_password>!</user_password>
      <username>polkitd</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>user for Apache Subversion svnserve</fullname>
      <gid>478</gid>
      <home>/srv/svn</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>478</uid>
      <user_password>!</user_password>
      <username>svn</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>systemd Network Management</fullname>
      <gid>482</gid>
      <home>/</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>482</uid>
      <user_password>!!</user_password>
      <username>systemd-network</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Smart Card Reader</fullname>
      <gid>471</gid>
      <home>/var/run/pcscd</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/usr/sbin/nologin</shell>
      <uid>468</uid>
      <user_password>!</user_password>
      <username>scard</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>User for GeoClue D-Bus service</fullname>
      <gid>498</gid>
      <home>/var/lib/srvGeoClue</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>498</uid>
      <user_password>!</user_password>
      <username>srvGeoClue</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>NetworkManager user for OpenVPN</fullname>
      <gid>465</gid>
      <home>/var/lib/openvpn</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>464</uid>
      <user_password>!</user_password>
      <username>nm-openvpn</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>user for rpcbind</fullname>
      <gid>65534</gid>
      <home>/var/lib/empty</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>477</uid>
      <user_password>!</user_password>
      <username>rpc</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>RealtimeKit</fullname>
      <gid>473</gid>
      <home>/proc</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/bin/false</shell>
      <uid>469</uid>
      <user_password>!</user_password>
      <username>rtkit</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>User for nscd</fullname>
      <gid>477</gid>
      <home>/run/nscd</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>476</uid>
      <user_password>!</user_password>
      <username>nscd</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>bin</fullname>
      <gid>1</gid>
      <home>/bin</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>1</uid>
      <user_password>!</user_password>
      <username>bin</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>NFS statd daemon</fullname>
      <gid>65533</gid>
      <home>/var/lib/nfs</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>473</uid>
      <user_password>!</user_password>
      <username>statd</username>
    </user>
    <user>
      <encrypted config:type="boolean">true</encrypted>
      <fullname>Printing daemon</fullname>
      <gid>486</gid>
      <home>/var/spool/lpd</home>
      <password_settings>
        <expire/>
        <flag/>
        <inact/>
        <max/>
        <min/>
        <warn/>
      </password_settings>
      <shell>/sbin/nologin</shell>
      <uid>496</uid>
      <user_password>!</user_password>
      <username>lp</username>
    </user>
  </users>
</profile>
disque_200g.xml (application/xml, 3.4 KB)
<?xml version="1.0"?>
<!DOCTYPE profile>
<profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
  <bootloader>
    <global>
      <activate>true</activate>
      <append>resume=/dev/disk/by-path/pci-0000:00:1f.2-ata-1-part5 splash=verbose showopts</append>
      <boot_boot>true</boot_boot>
      <boot_extended>false</boot_extended>
      <boot_mbr>false</boot_mbr>
      <boot_root>false</boot_root>
      <generic_mbr>true</generic_mbr>
      <gfxmode>auto</gfxmode>
      <hiddenmenu>false</hiddenmenu>
      <os_prober>true</os_prober>
      <terminal>gfxterm</terminal>
      <timeout config:type="integer">5</timeout>
      <trusted_grub>false</trusted_grub>
    </global>
    <loader_type>grub2</loader_type>
  </bootloader>
  <partitioning config:type="list">
    <drive>
      <device>/dev/sda</device>
      <disklabel>msdos</disklabel>
      <enable_snapshots config:type="boolean">false</enable_snapshots>
      <initialize config:type="boolean">true</initialize>
        <partitions config:type="list">
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/boot</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">1</partition_nr>
            <partition_type>primary</partition_type>
            <resize config:type="boolean">false</resize>
            <size>500M</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">swap</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>defaults</fstopt>
            <mountby config:type="symbol">path</mountby>
            <partition_id config:type="integer">130</partition_id>
            <partition_nr config:type="integer">5</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>8G</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">6</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>180G</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/machines_virtuelles</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">7</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>20G</size>
          </partition>
        </partitions>
      <type config:type="symbol">CT_DISK</type>
    <use>all</use>
   </drive>
  </partitioning>
</profile>
disque_500g.xml (application/xml, 3.4 KB)
<?xml version="1.0"?>
<!DOCTYPE profile>
<profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
  <bootloader>
    <global>
      <activate>true</activate>
      <append>resume=/dev/disk/by-path/pci-0000:00:1f.2-ata-1-part5 splash=verbose showopts</append>
      <boot_boot>true</boot_boot>
      <boot_extended>false</boot_extended>
      <boot_mbr>true</boot_mbr>
      <boot_root>false</boot_root>
      <generic_mbr>true</generic_mbr>
      <gfxmode>auto</gfxmode>
      <hiddenmenu>false</hiddenmenu>
      <os_prober>true</os_prober>
      <terminal>gfxterm</terminal>
      <timeout config:type="integer">5</timeout>
      <trusted_grub>false</trusted_grub>
    </global>
    <loader_type>grub2</loader_type>
  </bootloader>
  <partitioning config:type="list">
    <drive>
      <device>/dev/sda</device>
      <disklabel>msdos</disklabel>
      <enable_snapshots config:type="boolean">false</enable_snapshots>
      <initialize config:type="boolean">true</initialize>
        <partitions config:type="list">
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/boot</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">1</partition_nr>
            <partition_type>primary</partition_type>
            <resize config:type="boolean">false</resize>
            <size>500M</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">swap</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>defaults</fstopt>
            <mountby config:type="symbol">path</mountby>
            <partition_id config:type="integer">130</partition_id>
            <partition_nr config:type="integer">5</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>8G</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">6</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>250G</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/machines_virtuelles</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">7</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>100G</size>
          </partition>
        </partitions>
      <type config:type="symbol">CT_DISK</type>
    <use>all</use>
   </drive>
  </partitioning>
</profile>
disque_1000g.xml (application/xml, 3.4 KB)
<?xml version="1.0"?>
<!DOCTYPE profile>
<profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
  <bootloader>
    <global>
      <activate>true</activate>
      <append>resume=/dev/disk/by-path/pci-0000:00:1f.2-ata-1-part5 splash=verbose showopts</append>
      <boot_boot>true</boot_boot>
      <boot_extended>false</boot_extended>
      <boot_mbr>true</boot_mbr>
      <boot_root>false</boot_root>
      <generic_mbr>true</generic_mbr>
      <gfxmode>auto</gfxmode>
      <hiddenmenu>false</hiddenmenu>
      <os_prober>true</os_prober>
      <terminal>gfxterm</terminal>
      <timeout config:type="integer">5</timeout>
      <trusted_grub>false</trusted_grub>
    </global>
    <loader_type>grub2</loader_type>
  </bootloader>
  <partitioning config:type="list">
    <drive>
      <device>/dev/sda</device>
      <disklabel>msdos</disklabel>
      <enable_snapshots config:type="boolean">false</enable_snapshots>
      <initialize config:type="boolean">true</initialize>
        <partitions config:type="list">
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/boot</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">1</partition_nr>
            <partition_type>primary</partition_type>
            <resize config:type="boolean">false</resize>
            <size>500M</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">swap</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>defaults</fstopt>
            <mountby config:type="symbol">path</mountby>
            <partition_id config:type="integer">130</partition_id>
            <partition_nr config:type="integer">5</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>8G</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">6</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>350G</size>
          </partition>
          <partition>
            <create config:type="boolean">true</create>
            <filesystem config:type="symbol">ext4</filesystem>
            <format config:type="boolean">true</format>
            <fstopt>acl,user_xattr</fstopt>
            <mount>/machines_virtuelles</mount>
            <mountby config:type="symbol">uuid</mountby>
            <partition_id config:type="integer">131</partition_id>
            <partition_nr config:type="integer">7</partition_nr>
            <resize config:type="boolean">false</resize>
            <size>200G</size>
          </partition>
        </partitions>
      <type config:type="symbol">CT_DISK</type>
    <use>all</use>
   </drive>
  </partitioning>
</profile>
rules.xml (application/xml, 1.2 KB)
<?xml version="1.0"?>
<!DOCTYPE autoinstall>
<autoinstall xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
  <rules config:type="list">
    <rule>
     <hostname>
        <match>*</match>
        <match_type>regex</match_type>
      </hostname>
       <result>
        <profile>autoinst.xml</profile>
        <continue config:type="boolean">true</continue>
      </result>
    </rule>
  <rule>
   <disksize>
      <match>/dev/sda 900000</match>
      <match_type>greater</match_type>
    </disksize>
    <result>
      <profile>disque_1000g.xml</profile>
      <continue config:type="boolean">false</continue>
    </result>
  </rule>
  <rule>
    <disksize>
      <match>/dev/sda 400000</match>
      <match_type>greater</match_type>
    </disksize>
    <result>
      <profile>disque_500g.xml</profile>
      <continue config:type="boolean">false</continue>
    </result>
  </rule>
  <rule>
    <disksize>
      <match>/dev/sda 200000</match>
      <match_type>greater</match_type>
    </disksize>
    <result>
      <profile>disque_200g.xml</profile>
      <continue config:type="boolean">false</continue>
    </result>
  </rule>
 </rules>
</autoinstall>