include:
  {#- drop pillar check after all firewall configurations have been imported #}
  {%- if salt['pillar.get']('manage_firewall'), False %}
  - firewalld
  {%- endif %}
  - profile.seccheck
  - profile.zypp
  - profile.prometheus.node_exporter
  - users
  - .ssh
  - postfix.config

{#- to-do: move this to some formula or macro -#}
{%- set osfullname = grains['osfullname'] -%}
{#- this SLES clause likely only works in BCI -#}
{%- if osfullname == 'Leap' or osfullname == 'SLES' -%}
{%- set repoos = grains['osrelease'] -%}
{%- elif osfullname == 'openSUSE Tumbleweed' -%}
{%- set repoos = 'openSUSE_Tumbleweed' -%}
{%- else -%}
{%- do salt.log.error('Unsupported operating system.') -%}
{%- endif -%}
{%- set repobase = 'https://download.opensuse.org/repositories/home:/crameleon:/LibertaCasa/' ~ repoos -%}
{%- set repokey = repobase ~ '/repodata/repomd.xml.key' %}

libertacasa_rpm_key:
  cmd.run:
    - name: rpm --import {{ repokey }}
    - unless: rpm -q --quiet gpg-pubkey-f8722274

libertacasa_rpm_repository:
  pkgrepo.managed:
    - name: 'LibertaCasa'
    - baseurl: {{ repobase }}
    - gpgcheck: 1
    - gpgkey: {{ repokey }}
    - priority: 90
    - refresh: True
    - require:
      - cmd: libertacasa_rpm_key

ca-certificates-syscid:
  pkg.installed:
    - require:
      - pkgrepo: libertacasa_rpm_repository

common_packages_install:
  pkg.installed:
    - names:
      - fish
      - system-group-wheel
{%- if grains['virtual'] == 'kvm' %}
      - qemu-guest-agent

qemu-guest-agent:
  service.running:
    - enable: True
    - require:
      - pkg: qemu-guest-agent
{%- endif %}

common_packages_remove:
  pkg.removed:
    - pkgs:
      {#- we only use AutoYaST for the OS deployment #}
      - autoyast2
      - autoyast2-installation
      - libX11-data
      - yast2-add-on
      - yast2-services-manager
      - yast2-slp
      - yast2-trans-stats