coreos-1.json aktualisiert
This commit is contained in:
+152
@@ -0,0 +1,152 @@
|
||||
{
|
||||
"ignition": {
|
||||
"version": "3.4.0"
|
||||
},
|
||||
"passwd": {
|
||||
"users": [
|
||||
{
|
||||
"groups": [
|
||||
"wheel",
|
||||
"docker"
|
||||
],
|
||||
"homeDir": "/home/core",
|
||||
"name": "core",
|
||||
"sshAuthorizedKeys": [
|
||||
"ssh-rsa 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 jens@sony-nb"
|
||||
],
|
||||
"shell": "/bin/bash"
|
||||
}
|
||||
]
|
||||
},
|
||||
"storage": {
|
||||
"directories": [
|
||||
{
|
||||
"group": {
|
||||
"name": "root"
|
||||
},
|
||||
"path": "/opt/docker",
|
||||
"user": {
|
||||
"name": "core"
|
||||
}
|
||||
}
|
||||
],
|
||||
"disks": [
|
||||
{
|
||||
"device": "/dev/sda",
|
||||
"partitions": [
|
||||
{
|
||||
"label": "root",
|
||||
"number": 4,
|
||||
"resize": true,
|
||||
"sizeMiB": 32254
|
||||
},
|
||||
{
|
||||
"label": "swap",
|
||||
"number": 5,
|
||||
"resize": true,
|
||||
"sizeMiB": 8192
|
||||
}
|
||||
],
|
||||
"wipeTable": false
|
||||
}
|
||||
],
|
||||
"files": [
|
||||
{
|
||||
"overwrite": true,
|
||||
"path": "/etc/selinux/config",
|
||||
"contents": {
|
||||
"compression": "",
|
||||
"source": "data:,SELINUX%3Ddisabled%0ASELINUXTYPE%3Dtargeted%0A"
|
||||
},
|
||||
"mode": 420
|
||||
},
|
||||
{
|
||||
"path": "/etc/hostname",
|
||||
"contents": {
|
||||
"compression": "",
|
||||
"source": "data:,coreos-1%0A"
|
||||
},
|
||||
"mode": 420
|
||||
},
|
||||
{
|
||||
"path": "/etc/profile.d/systemd-pager.sh",
|
||||
"contents": {
|
||||
"compression": "",
|
||||
"source": "data:,%23%20Tell%20systemd%20to%20not%20use%20a%20pager%20when%20printing%20information%0Aexport%20SYSTEMD_PAGER%3Dcat%0A"
|
||||
},
|
||||
"mode": 420
|
||||
},
|
||||
{
|
||||
"path": "/etc/sysctl.d/20-silence-audit.conf",
|
||||
"contents": {
|
||||
"compression": "",
|
||||
"source": "data:,%23%20Raise%20console%20message%20logging%20level%20from%20DEBUG%20(7)%20to%20WARNING%20(4)%0A%23%20to%20hide%20audit%20messages%20from%20the%20interactive%20console%0Akernel.printk%3D4%0A"
|
||||
},
|
||||
"mode": 420
|
||||
},
|
||||
{
|
||||
"path": "/etc/NetworkManager/system-connections/${interface}.nmconnection",
|
||||
"contents": {
|
||||
"compression": "gzip",
|
||||
"source": "data:;base64,H4sIAAAAAAAC/1TKQarDIBAG4P2c5cXHhCSkFE8Sshj0DwpxFLWF3L4Uumi3H9/msipcj1l3it5CG6/UrwKLHlAVnaJ21EMcBpWET9lieU47ifcVrbHl22h4Wc04T2Ze/sfp71uYvLafw8z3Nw4NUl2wIScYqUUoyTUcEk97yNlACT1kb5PoQ056BQAA//+ksLFusAAAAA=="
|
||||
},
|
||||
"mode": 384
|
||||
},
|
||||
{
|
||||
"overwrite": true,
|
||||
"path": "/etc/systemd/journald.conf",
|
||||
"contents": {
|
||||
"compression": "",
|
||||
"source": "data:,%5BJournal%5D%0ASystemMaxUse%3D200M%0ASystemMaxFileSize%3D20M%0A"
|
||||
},
|
||||
"mode": 420
|
||||
},
|
||||
{
|
||||
"path": "/etc/zincati/config.d/55-updates-strategy.toml",
|
||||
"contents": {
|
||||
"compression": "",
|
||||
"source": "data:;base64,W3VwZGF0ZXNdCnN0cmF0ZWd5PSJwZXJpb2RpYyIKW1t1cGRhdGVzLnBlcmlvZGljLndpbmRvd11dCmRheXM9WyAiU2F0IiwgIlN1biIgXQpzdGFydF90aW1lPSIyMzozMCIKbGVuZ3RoX21pbnV0ZXM9NjAK"
|
||||
}
|
||||
}
|
||||
],
|
||||
"filesystems": [
|
||||
{
|
||||
"device": "/dev/disk/by-partlabel/root",
|
||||
"format": "xfs",
|
||||
"label": "root"
|
||||
},
|
||||
{
|
||||
"device": "/dev/disk/by-partlabel/swap",
|
||||
"format": "swap"
|
||||
}
|
||||
]
|
||||
},
|
||||
"systemd": {
|
||||
"units": [
|
||||
{
|
||||
"contents": "# Generated by Butane\n[Swap]\nWhat=/dev/disk/by-partlabel/swap\n\n[Install]\nRequiredBy=swap.target",
|
||||
"enabled": true,
|
||||
"name": "dev-disk-by\\x2dpartlabel-swap.swap"
|
||||
},
|
||||
{
|
||||
"contents": "[Unit]\nDescription=Docker Socket for the API\n[Socket]\nListenStream=2375\nBindIPv6Only=both\nService=docker.service\n[Install]\nWantedBy=sockets.target\n",
|
||||
"enabled": true,
|
||||
"name": "docker-tcp.socket"
|
||||
},
|
||||
{
|
||||
"dropins": [
|
||||
{
|
||||
"contents": "[Service]\n# Override Execstart in main unit\nExecStart=\n# Add new Execstart with `-` prefix to ignore failure`\nExecStart=-/usr/sbin/agetty --autologin core --noclear %I $TERM\n",
|
||||
"name": "autologin-core.conf"
|
||||
}
|
||||
],
|
||||
"name": "serial-getty@ttyS0.service"
|
||||
},
|
||||
{
|
||||
"contents": "[Unit]\nDescription=Layer qemu-guest-agent with rpm-ostree\nWants=network-online.target\nAfter=network-online.target\n# We run before `zincati.service` to avoid conflicting rpm-ostree\n# transactions.\nBefore=zincati.service\nConditionPathExists=!/var/lib/%N.stamp\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\n# `--allow-inactive` ensures that rpm-ostree does not return an error\n# if the package is already installed. This is useful if the package is\n# added to the root image in a future Fedora CoreOS release as it will\n# prevent the service from failing.\nExecStart=/usr/bin/rpm-ostree install --apply-live --allow-inactive qemu-guest-agent\nExecStart=/bin/touch /var/lib/%N.stamp\n\n[Install]\nWantedBy=multi-user.target",
|
||||
"enabled": true,
|
||||
"name": "rpm-ostree-install.qemu-guest-agent.service"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user