blob: 1ef9a97ae4f354f3a2d5f74d1aafac1a64a0ec44 [file] [log] [blame]
Tatyana Leontovichd34f4102018-04-03 17:49:24 +03001| # All the data below will be stored as a string object
2 #cloud-config, see http://cloudinit.readthedocs.io/en/latest/topics/examples.html
3
4 ssh_pwauth: True
5 users:
6 - name: root
7 sudo: ALL=(ALL) NOPASSWD:ALL
8 shell: /bin/bash
9 ssh_authorized_keys:
10 {% for key in config.underlay.ssh_keys %}
11 - ssh-rsa {{ key['public'] }}
12 {% endfor %}
13
14 disable_root: false
15 chpasswd:
16 list: |
17 root:r00tme
18 expire: False
19
20 bootcmd:
21 # Block access to SSH while node is preparing
22 - cloud-init-per once sudo iptables -A INPUT -p tcp --dport 22 -j DROP
23 # Enable root access
24 - sed -i -e '/^PermitRootLogin/s/^.*$/PermitRootLogin yes/' /etc/ssh/sshd_config
25 - service sshd restart
26 output:
27 all: '| tee -a /var/log/cloud-init-output.log /dev/tty0'
28
29 runcmd:
Dennis Dmitriev752c1bf2018-12-19 13:05:16 +020030 - if lvs vg0; then pvresize /dev/vda3; fi
31 - if lvs vg0; then /usr/bin/growlvm.py --image-layout-file /usr/share/growlvm/image-layout.yml; fi
32
Tatyana Leontovichd34f4102018-04-03 17:49:24 +030033 # Prepare network connection
34 - sudo ifup ens3
35 #- sudo route add default gw {gateway} {interface_name}
36
37 - rm /etc/resolv.conf
38 - touch /etc/resolv.conf
39 - LOCAL_IP=$(ifconfig ens3 | grep "inet addr" | cut -d ':' -f 2 | cut -d ' ' -f 1 | cut -d"." -f1-3)
40 - export DNS_IP=$LOCAL_IP".122"
41 - echo "nameserver $DNS_IP" >> /etc/resolv.conf;
42 - echo "nameserver $LOCAL_IP.1" >> /etc/resolv.conf;
43 - echo "supersede domain-name-servers $DNS_IP" >> /etc/dhcp/dhclient.conf
44
45 # Create swap
46 - fallocate -l 4G /swapfile
47 - chmod 600 /swapfile
48 - mkswap /swapfile
49 - swapon /swapfile
50 - echo "/swapfile none swap defaults 0 0" >> /etc/fstab
51
52 ############## TCP Cloud cfg01 node ##################
53 - echo "Preparing base OS"
54 # find /etc/apt/ -type f -exec sed -i "s/ubuntu.com/ubuntu.local.test/g" {} +;
55 ########################################################
56 # Node is ready, allow SSH access
57 - echo "Allow SSH access ..."
58 - sudo iptables -D INPUT -p tcp --dport 22 -j DROP
59 ########################################################
60
61 write_files:
62 - path: /etc/network/interfaces
63 content: |
64 auto ens3
65 iface ens3 inet dhcp
66
67 - path: /root/.ssh/config
68 owner: root:root
69 permissions: '0600'
70 content: |
71 Host *
72 ServerAliveInterval 300
73 ServerAliveCountMax 10
74 StrictHostKeyChecking no
75 UserKnownHostsFile /dev/null
Dennis Dmitriev752c1bf2018-12-19 13:05:16 +020076
77 - path: /usr/share/growlvm/image-layout.yml
78 content: |
79 root:
80 size: '50%VG'
81 home:
82 size: '100M'
83 var_log:
84 size: '15%VG'
85 var_log_audit:
86 size: '500M'
87 var_tmp:
88 size: '500M'
89 tmp:
90 size: '500M'
91 owner: root:root
92
93 growpart:
94 mode: auto
95 devices:
96 - '/'
97 - '/dev/vda3'
98 ignore_growroot_disabled: false