blob: 5a02d24e0461cd0973611a39f19a49b31f33c68e [file] [log] [blame]
Dennis Dmitriev75776c52017-12-26 18:22:53 +02001| # All the data below will be stored as a string object
2 #cloud-config, see http://cloudinit.readthedocs.io/en/latest/topics/examples.html
3
4 ssh_pwauth: True
5 users:
6 - name: root
7 sudo: ALL=(ALL) NOPASSWD:ALL
8 shell: /bin/bash
9 ssh_authorized_keys:
10 {% for key in config.underlay.ssh_keys %}
11 - ssh-rsa {{ key['public'] }}
12 {% endfor %}
13
14 disable_root: false
15 chpasswd:
16 list: |
17 root:r00tme
18 expire: False
19
20 bootcmd:
21 # Block access to SSH while node is preparing
22 - cloud-init-per once sudo iptables -A INPUT -p tcp --dport 22 -j DROP
23 # Enable root access
24 - sed -i -e '/^PermitRootLogin/s/^.*$/PermitRootLogin yes/' /etc/ssh/sshd_config
25 - service sshd restart
26 output:
27 all: '| tee -a /var/log/cloud-init-output.log /dev/tty0'
28
29 runcmd:
Dennis Dmitrieved3f4be2018-01-29 17:42:16 +020030 # Prepare network connection
31 - sudo ifup ens3
32 #- sudo route add default gw {gateway} {interface_name}
33
Dennis Dmitriev75776c52017-12-26 18:22:53 +020034 - rm /etc/resolv.conf
35 - touch /etc/resolv.conf
36 - LOCAL_IP=$(ifconfig ens3 | grep "inet addr" | cut -d ':' -f 2 | cut -d ' ' -f 1 | cut -d"." -f1-3)
37 - export DNS_IP=$LOCAL_IP".122"
38 - echo "nameserver $DNS_IP" >> /etc/resolv.conf;
39 - echo "nameserver $LOCAL_IP.1" >> /etc/resolv.conf;
40 - echo "supersede domain-name-servers $DNS_IP" >> /etc/dhcp/dhclient.conf
Dennis Dmitriev75776c52017-12-26 18:22:53 +020041
42 # Create swap
43 - fallocate -l 4G /swapfile
44 - chmod 600 /swapfile
45 - mkswap /swapfile
46 - swapon /swapfile
47 - echo "/swapfile none swap defaults 0 0" >> /etc/fstab
48
49 ############## TCP Cloud cfg01 node ##################
50 - echo "Preparing base OS"
51 # find /etc/apt/ -type f -exec sed -i "s/ubuntu.com/ubuntu.local.test/g" {} +;
52 ########################################################
53 # Node is ready, allow SSH access
54 - echo "Allow SSH access ..."
55 - sudo iptables -D INPUT -p tcp --dport 22 -j DROP
56 ########################################################
57
58 write_files:
59 - path: /etc/network/interfaces
60 content: |
61 auto ens3
62 iface ens3 inet dhcp
63
64 - path: /root/.ssh/config
65 owner: root:root
66 permissions: '0600'
67 content: |
68 Host *
69 ServerAliveInterval 300
70 ServerAliveCountMax 10
71 StrictHostKeyChecking no
72 UserKnownHostsFile /dev/null