Another option, and one we're using right now for generating a production 
installation ISO, is to do apply the profile near the end of the %post section 
in our kickstart.


Sr. Secure Systems Engineer
T +1.703.896.4762
F +1.703.318.5041


´╗┐On 10/4/18, 10:44 AM, " on behalf of Shawn 
Wells" < on behalf of> wrote:

    On 10/4/18 3:05 AM, Jan Cerny wrote:
    > Hi,
    > Unfortunately, the "tailoring" feature is broken in Anaconda Addon.
    > However, there is a workaround, suggested by Watson Yuuma Sato (adding 
him to this conversation).
    > Let me copy-paste his idea:
    > There is a tool that can combine the tailoring to the datastream or XCCDF 
file. So it is possible
    > to embed the tailoring into content file and get it through "content-url" 
    > Quick howto commands and instructions below:
    > Grab the combine-tailoring tool
    > $ git clone
    > cd combine-tailoring
    > Combine tailoring and content
    > ./ --output ssg-rhel7-ds-combined.xml 
    > Serve the file ssg-rhel7-ds-combined.xml in your network, and
    > in the kickstart:
    > - change content-type to datastream or xccdf
    > - add field content-url and point to your new combined content
    > - change profile to the id of your customized profile, please note that 
it must be the full id.
    > For example:
    > %addon org_fedora_oscap
    >         content-type = datastream
    >         content-url =
    >         profile = xccdf_org.ssgproject.content_profile_standard_customized
    > %end
    > Hopefully it helps.
    Where can we find the BZ tracking fixing tailoring in Anaconda? Will 
    this be included in the RHEL 7.6 release?
    Also - where can we find the KBase article documenting the work around 
    on the customer portal?
    Open-scap-list mailing list

Open-scap-list mailing list

Reply via email to