## - NOTE: Replace -v 0 with VLAN Numbers that represent your network...

## - Accepts EULA, Sets root Password1, Wipes First Disk, Sets Management IP, DNS, Hostname, Removes Default "VM Network" and sets VLANID
vmaccepteula
rootpw Password1
install --firstdisk --overwritevmfs
network --device=vmnic0 --bootproto=static --ip=[SERV_IP] --netmask=255.255.255.0 --gateway=192.168.4.1 --nameserver="192.168.3.130","192.168.3.131" --hostname=[HOSTNAME] --addvmportgroup=0 --vlanid=0
reboot

%firstboot --interpreter=busybox

## - Put host into maintenance mode - and wait for task to complete
vim-cmd hostsvc/maintenance_mode_enter
vsleep 5

## - Further configuration of resolv.conf for DNS...
/bin/cat >"${ROOT}/etc/resolv.conf" <<RES
domain corp.com
search corp.com
nameserver [192.168.3.130]
nameserver [192.168.3.131]
RES

## - Add "Management" Portgroup used by "Infrastructure VMs" and other vAppliances
esxcfg-vswitch -A "Management" vSwitch0

## - Console Proxy Portgroup for use with vCloud Director
esxcfg-vswitch -A "ConsoleProxy" vSwitch0

## - Add extra nic to vSwitch0 for Redundancy
esxcfg-vswitch -L vmnic1 vSwitch0

## - Add VMotion/FT/HA VMKernel Portgroup
esxcfg-vswitch -A "VMotion" vSwitch0
esxcfg-vswitch -v 0 -p "VMotion" vSwitch0
esxcfg-vmknic -a "VMotion" -i [VMOT_IP] -n 255.255.255.0 -m 9000 -p "VMotion" vSwitch0
esxcli network ip interface tag add -i vmk1 -t VMotion
vsleep 5
vim-cmd hostsvc/net/refresh

## - Enable FT for Portgroup "FT-Logging"
esxcfg-vswitch -A FT vSwitch0
esxcfg-vswitch -v 0 -p "FT-Logging" vSwitch0
esxcfg-vmknic -a FT -i [FT_IP] -n 255.255.255.128 -m 9000 -p "FT" vSwitch0
esxcli network ip interface tag add -i vmk2 -t faultToleranceLogging
vsleep 5
vim-cmd hostsvc/net/refresh


## - Setup 2nd Management Network for HA-Heartbeat..
esxcfg-vswitch -A HA-Heartbeat vSwitch0
esxcfg-vswitch -v 0 -p "HA-Heartbeat" vSwitch0
esxcfg-vmknic -a HA-Heartbeat -i [HA_IP] -n 255.255.255.0 -m 9000 -p "HA-Heartbeat" vSwitch0
esxcli network ip interface tag add -i vmk3 -t Management
vsleep 5
vim-cmd hostsvc/net/refresh

## Create vSwitch1 for Storage Traffic
esxcfg-vswitch -a vSwitch1
esxcfg-vswitch -L vmnic2 vSwitch1
esxcfg-vswitch -L vmnic3 vSwitch1

## - Enabled 3 IP Storage Ports 1/2 used for iSCSI Load-balancing, and No3 for NFS Target
esxcfg-vswitch -A IP-Storage1 vSwitch1
esxcfg-vmknic -a IP-Storage1 -i [IPStorage1] -n 255.255.255.0 -m 9000 -p "IP-Storage1" vSwitch1
esxcfg-vswitch -A IP-Storage2 vSwitch1
esxcfg-vmknic -a IP-Storage2 -i [IPStorage2] -n 255.255.255.0 -m 9000 -p "IP-Storage2" vSwitch1
esxcfg-vswitch -A IP-Storage3 vSwitch1
esxcfg-vmknic -a IP-Storage3 -i [IPStorage3] -n 255.255.255.0 -m 9000 -p "IP-Storage3" vSwitch1

## - Sets a vmnic to be dedicated to a portgroup for load-balancing
## - This sets vmnic2 to be dedicated to IP-Storage1
## - This sets vmnic3 to be dedicated to IP-Storage2

esxcli network vswitch standard portgroup policy failover set --active-uplinks vmnic2 --portgroup-name IP-Storage1
esxcli network vswitch standard portgroup policy failover set --active-uplinks vmnic3 --portgroup-name IP-Storage2
vim-cmd hostsvc/net/refresh

## Enable iSCSI, Discover HBA, Set IQN and Add iSCI Targets...
esxcli iscsi software set --enabled=true
ISCSI_ADT=$(esxcli iscsi adapter list | grep -i vmhba | cut -d ' ' -f 1)
esxcli iscsi adapter set -A ${ISCSI_ADT} -n iqn.2011-03.com.corp:[SHORTNAME]
esxcli iscsi networkportal add --nic vmk4 --adapter ${ISCSI_ADT}
esxcli iscsi networkportal add --nic vmk5 --adapter ${ISCSI_ADT}
esxcli iscsi adapter discovery sendtarget add -A ${ISCSI_ADT} -a 172.168.3.69
esxcli iscsi adapter discovery sendtarget add -A ${ISCSI_ADT} -a 172.168.4.69
esxcli storage core adapter rescan --adapter ${ISCSI_ADT} 

## Mount NFS Targets
esxcfg-nas -a software -o 172.168.4.89 -s /vol/isos
esxcfg-nas -a templates -o 172.168.4.89 -s /vol/templs


## - Enable Firewall
esxcli network firewall set --default-action false --enabled yes 
FIREWALL_SERVICES="syslog sshClient ntpClient updateManager httpClient netdump"
for SERVICE in ${FIREWALL_SERVICES} 
do
 esxcli network firewall ruleset set --ruleset-id ${SERVICE} --enabled yes 
done 

## - Enable NTP Configuration
chkconfig ntpd on
echo "tinker panic 0" > /etc/ntp.conf
echo "restrict kod nomodify notrap noquery nopeer" >> /etc/ntp.conf
echo "restrict 127.0.0.1" >> /etc/ntp.conf
echo "server 0.uk.pool.ntp.org" >> /etc/ntp.conf
echo "server 1.uk.pool.ntp.org" >> /etc/ntp.conf
echo "driftfile /var/lib/ntp/drift" >> /etc/ntp.conf
echo "0.uk.pool.ntp.org" >> /etc/ntp/step-tickers
echo "1.uk.pool.ntp.org" >> /etc/ntp/step-tickers
service ntpd start
/sbin/hwclock --systohc
vsleep 5

##  Enabled Nested Virtualization...
grep -i "vhv.allow" /etc/vmware/config || echo "vhv.allow = \"TRUE\"" >> /etc/vmware/config

##  Rename the default "datastore"
vim-cmd hostsvc/datastore/rename datastore1 "$(hostname -s)_local"

##  Enable SSH and the Local Console
vim-cmd hostsvc/enable_ssh
vim-cmd hostsvc/start_ssh
vim-cmd hostsvc/enable_esx_shell
vim-cmd hostsvc/start_esx_shell
# Suppress Shell Warning in Host
esxcli system settings advanced set -o /UserVars/SuppressShellWarning -i 1
esxcli system settings advanced set -o /UserVars/ESXiShellTimeOut -i 1

/bin/cat > /etc/banner.new <<SSHEOF
${INDENTATION:-}Corp Holding Inc 
${INDENTATION:-}ESXi 5.x
${INDENTATION:-}========================================= 
${INDENTATION:-}WARNING: UNAUTHORIZED USE IS PROHIBITED 
${INDENTATION:-}----------------------------------------- 
${INDENTATION:-}Property of Corp Holdings Inc, and should only
${INDENTATION:-}be accessed by authorized Corp Holding Inc employees. 
${INDENTATION:-}Do not attempt to login unless you are an 
${INDENTATION:-}authorized user. 
    
${INDENTATION:-}Any authorized or unauthorized access and use, 
${INDENTATION:-}will be monitored and anyone using this system 
${INDENTATION:-}expressly consents to such monitoring. If such 
${INDENTATION:-}monitoring reveals possible envidence of criminal
${INDENTATION:-}activity, such evidence will be provided to law 
${INDENTATION:-}enforcement personnel and can result in criminal
${INDENTATION:-}or civil prosecution under applicable law of 
${INDENTATION:-}the United States. 
${INDENTATION:-}----------------------------------------- 
SSHEOF
# copy new banner file to overwrite /etc/issue (esxi 5 store it's banner file here)
cp /etc/banner.new /etc/issue


reboot