blob: 6f03dcaf2bccd2196dc2998cbb1f93359fece32c [file] [log] [blame]
Tatyana Leontovichecd491d2017-09-13 13:51:12 +03001| # All the data below will be stored as a string object
2 #cloud-config, see http://cloudinit.readthedocs.io/en/latest/topics/examples.html
3
4 ssh_pwauth: True
5 users:
6 - name: root
7 sudo: ALL=(ALL) NOPASSWD:ALL
8 shell: /bin/bash
9 ssh_authorized_keys:
10 {% for key in config.underlay.ssh_keys %}
11 - ssh-rsa {{ key['public'] }}
12 {% endfor %}
13
14 disable_root: false
15 chpasswd:
16 list: |
17 root:r00tme
18 expire: False
19
20 bootcmd:
21 # Block access to SSH while node is preparing
22 - cloud-init-per once sudo iptables -A INPUT -p tcp --dport 22 -j DROP
23 # Enable root access
24 - sed -i -e '/^PermitRootLogin/s/^.*$/PermitRootLogin yes/' /etc/ssh/sshd_config
25 - service sshd restart
26 output:
27 all: '| tee -a /var/log/cloud-init-output.log /dev/tty0'
28
29 runcmd:
30 - rm /etc/resolv.conf
31 - touch /etc/resolv.conf
32 - LOCAL_IP=$(ifconfig ens3 | grep "inet addr" | cut -d ':' -f 2 | cut -d ' ' -f 1 | cut -d"." -f1-3)
33 - export DNS_IP=$LOCAL_IP".122"
34 - echo "nameserver $DNS_IP" >> /etc/resolv.conf;
35 - echo "nameserver $LOCAL_IP.1" >> /etc/resolv.conf;
36 - echo "supersede domain-name-servers $DNS_IP" >> /etc/dhcp/dhclient.conf
37 # Prepare network connection
Dennis Dmitrievf00a3842018-01-24 16:44:26 +020038 - sudo ifdown ens3
Dennis Dmitriev002b8432018-01-25 03:26:14 +020039 - sudo ip r d default || true # remove existing default route to get it from dhcp
Tatyana Leontovichecd491d2017-09-13 13:51:12 +030040 - sudo ifup ens3
41 #- sudo route add default gw {gateway} {interface_name}
Tatyana Leontovichecd491d2017-09-13 13:51:12 +030042
43 # Create swap
44 - fallocate -l 4G /swapfile
45 - chmod 600 /swapfile
46 - mkswap /swapfile
47 - swapon /swapfile
48 - echo "/swapfile none swap defaults 0 0" >> /etc/fstab
49
50 ############## TCP Cloud cfg01 node ##################
51 - echo "Preparing base OS"
52 - sleep 160;
53 # find /etc/apt/ -type f -exec sed -i "s/ubuntu.com/ubuntu.local.test/g" {} +;
54 ########################################################
55 # Node is ready, allow SSH access
56 - echo "Allow SSH access ..."
57 - sudo iptables -D INPUT -p tcp --dport 22 -j DROP
58 ########################################################
59
60 write_files:
61 - path: /etc/network/interfaces
62 content: |
63 auto ens3
64 iface ens3 inet dhcp
Tatyana Leontovichecd491d2017-09-13 13:51:12 +030065
66 - path: /root/.ssh/config
67 owner: root:root
68 permissions: '0600'
69 content: |
70 Host *
71 ServerAliveInterval 300
72 ServerAliveCountMax 10
73 StrictHostKeyChecking no
74 UserKnownHostsFile /dev/null