{
  product: {
    id: "Tumbleweed"
  },
  localization: {
    language: "de_DE.UTF-8",
    keyboard: "de",
    timezone: "Europe/Berlin"
  },
  software: {
    patterns: {
        remove:  ["selinux"],
	add: ["kde", "office"]
    },
    packages: ["nfs-client", "sssd", "pam-config"],
    extraRepositories: [
      {
        alias: "education",
        url: "https://download.opensuse.org/repositories/Education/openSUSE_Tumbleweed/",
        gpgFingerprints: ["DA8C 3CC9 BF18 53AA 2359 756E 2436 0F5E 7361 1E28"]
      },
      {
        alias: "packman",
        url: "https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/",
        gpgFingerprints: ["F887 5B88 0D51 8B6B 8C53  0D13 45A1 D067 1ABD 1AFB"]
      }
    ],
    onlyRequired: false
  },
  questions: {
    policy: "auto",
    answers: [
      {
        class: "software.unknown_gpg",
        answer: "trust"
      },
      {
        class: "software.import_gpg",
        answer: "yes"
      },
      {
        class: "software.unsigned_file",
        answer: "yes"
      }
    ]
  },
  files: [
    {
      destination: "/usr/lib/systemd/system/cranix-client.service",
      permissions: "0644",
      user: "root",
      group: "root",
      url: "ftp://install/agama/cranix-client.service"
    },
    {
      destination: "/etc/sssd/sssd.conf",
      permissions: "0600",
      user: "root",
      group: "root",
      url: "ftp://install/agama/sssd.conf"
    },
    {
      destination: "/etc/nsswitch.conf",
      permissions: "0644",
      user: "root",
      group: "root",
      url: "ftp://install/agama/nsswitch.conf"
    },
  ],
  scripts: {
    post: [
      {
        name: "adapt-nfs-client-and-pam",
        chroot: true,
        content: |||
          #!/bin/bash
          sed -i /home/d /etc/fstab
          echo "admin:/home /home nfs acl,rw,async 0 0" >> /etc/fstab
          pam-config --add --sss
        |||
      },
      {
        name: "Enable services",
        chroot: true,
        content: |||
          #!/usr/bin/bash
          systemctl enable sshd.service
          systemctl enable sssd.service
          systemctl enable nfs-client.service
        |||
      }
    ]
  },
  user: {
    fullName: "Local User",
    userName: "localuser",
    hashedPassword: true,
    password: "PWLOCALUSER"
  },
  root: {
    sshPublicKey: "SSHPUBKEY",
    hashedPassword: true,
    password: "PWROOT"
  }
}