coreos/coreos-1.json

{
  "ignition": {
    "version": "3.4.0"
  },
  "passwd": {
    "users": [
      {
        "groups": [
          "wheel",
          "docker"
        ],
        "homeDir": "/home/core",
        "name": "core",
        "sshAuthorizedKeys": [
          "ssh-rsa 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 jens@sony-nb"
        ],
        "shell": "/bin/bash"
      }
    ]
  },
  "storage": {
    "directories": [
      {
        "group": {
          "name": "root"
        },
        "path": "/opt/docker",
        "user": {
          "name": "core"
        }
      }
    ],
    "disks": [
      {
        "device": "/dev/sda",
        "partitions": [
          {
            "label": "root",
            "number": 4,
            "resize": true,
            "sizeMiB": 32254
          },
          {
            "label": "swap",
            "number": 5,
            "resize": true,
            "sizeMiB": 8192
          }
        ],
        "wipeTable": false
      }
    ],
    "files": [
      {
        "path": "/etc/vconsole.conf",
        "contents": {
          "compression": "",
          "source": "data:,KEYMAP%3Dde"
        },
        "mode": 420
      },
      {
        "overwrite": true,
        "path": "/etc/selinux/config",
        "contents": {
          "compression": "",
          "source": "data:,SELINUX%3Ddisabled%0ASELINUXTYPE%3Dtargeted%0A"
        },
        "mode": 420
      },
      {
        "path": "/etc/hostname",
        "contents": {
          "compression": "",
          "source": "data:,coreos-1%0A"
        },
        "mode": 420
      },
      {
        "path": "/etc/profile.d/systemd-pager.sh",
        "contents": {
          "compression": "",
          "source": "data:,%23%20Tell%20systemd%20to%20not%20use%20a%20pager%20when%20printing%20information%0Aexport%20SYSTEMD_PAGER%3Dcat%0A"
        },
        "mode": 420
      },
      {
        "path": "/etc/sysctl.d/20-silence-audit.conf",
        "contents": {
          "compression": "",
          "source": "data:,%23%20Raise%20console%20message%20logging%20level%20from%20DEBUG%20(7)%20to%20WARNING%20(4)%0A%23%20to%20hide%20audit%20messages%20from%20the%20interactive%20console%0Akernel.printk%3D4%0A"
        },
        "mode": 420
      },
      {
        "path": "/etc/NetworkManager/system-connections/${interface}.nmconnection",
        "contents": {
          "compression": "gzip",
          "source": "data:;base64,H4sIAAAAAAAC/1TKQarDIBAG4P2c5cXHhCSkFE8Sshj0DwpxFLWF3L4Uumi3H9/msipcj1l3it5CG6/UrwKLHlAVnaJ21EMcBpWET9lieU47ifcVrbHl22h4Wc04T2Ze/sfp71uYvLafw8z3Nw4NUl2wIScYqUUoyTUcEk97yNlACT1kb5PoQ056BQAA//+ksLFusAAAAA=="
        },
        "mode": 384
      },
      {
        "overwrite": true,
        "path": "/etc/systemd/journald.conf",
        "contents": {
          "compression": "",
          "source": "data:,%5BJournal%5D%0ASystemMaxUse%3D200M%0ASystemMaxFileSize%3D20M%0A"
        },
        "mode": 420
      },
      {
        "path": "/etc/zincati/config.d/55-updates-strategy.toml",
        "contents": {
          "compression": "",
          "source": "data:;base64,W3VwZGF0ZXNdCnN0cmF0ZWd5PSJwZXJpb2RpYyIKW1t1cGRhdGVzLnBlcmlvZGljLndpbmRvd11dCmRheXM9WyAiU2F0IiwgIlN1biIgXQpzdGFydF90aW1lPSIyMzozMCIKbGVuZ3RoX21pbnV0ZXM9NjAK"
        }
      },
      {
        "overwrite": true,
        "path": "/usr/local/bin/ctop",
        "contents": {
          "compression": "gzip",
          "source": "https://git.cloud.wink.li/jens/coreos/raw/branch/main/ctop.gz",
          "verification": {
            "hash": "sha256-b78374734ebe3d14b6edee3d5512c911c250d7fa7f3f964cb00acd3bc5a02a09"
          }
        },
        "mode": 493
      },
      {
        "overwrite": true,
        "path": "/usr/local/bin/docker-compose",
        "contents": {
          "compression": "gzip",
          "source": "https://git.cloud.wink.li/jens/coreos/raw/branch/main/docker-compose.gz",
          "verification": {
            "hash": "sha256-53641b8a28419f947bc58c085e0c39b97a209b6e875a25c585e7fab44ff48576"
          }
        },
        "mode": 493
      },
      {
        "overwrite": true,
        "path": "/usr/local/bin/micro",
        "contents": {
          "compression": "gzip",
          "source": "https://git.cloud.wink.li/jens/coreos/raw/branch/main/micro.gz",
          "verification": {
            "hash": "sha256-a04e12944b9889f12bab4529694dee236abfb5c4b32c268fbec1d251aa16ad11"
          }
        },
        "mode": 493
      },
      {
        "overwrite": true,
        "path": "/usr/local/bin/restic",
        "contents": {
          "compression": "gzip",
          "source": "https://git.cloud.wink.li/jens/coreos/raw/branch/main/restic.gz",
          "verification": {
            "hash": "sha256-22d49f5309e1f846f728b512069de25584bf7163dc2ebcda872ff2ad642a1995"
          }
        },
        "mode": 493
      },
      {
        "overwrite": true,
        "path": "/usr/local/bin/rclone",
        "contents": {
          "compression": "gzip",
          "source": "https://git.cloud.wink.li/jens/coreos/raw/branch/main/rclone.gz",
          "verification": {
            "hash": "sha256-8cb7a66c028a81f5ed67460d0ae7bb9996ff439451514c8586463eaa905d6f82"
          }
        },
        "mode": 493
      }
    ],
    "filesystems": [
      {
        "device": "/dev/disk/by-partlabel/root",
        "format": "xfs",
        "label": "root"
      },
      {
        "device": "/dev/disk/by-partlabel/swap",
        "format": "swap"
      }
    ],
    "links": [
      {
        "path": "/etc/localtime",
        "target": "../usr/share/zoneinfo/Europe/Berlin"
      }
    ]
  },
  "systemd": {
    "units": [
      {
        "contents": "# Generated by Butane\n[Swap]\nWhat=/dev/disk/by-partlabel/swap\n\n[Install]\nRequiredBy=swap.target",
        "enabled": true,
        "name": "dev-disk-by\\x2dpartlabel-swap.swap"
      },
      {
        "contents": "[Unit]\nDescription=Docker Socket for the API\n[Socket]\nListenStream=2375\nBindIPv6Only=both\nService=docker.service\n[Install]\nWantedBy=sockets.target\n",
        "enabled": true,
        "name": "docker-tcp.socket"
      },
      {
        "contents": "[Unit]\nDescription=Layer qemu-guest-agent with rpm-ostree\nWants=network-online.target\nAfter=network-online.target\n# We run before `zincati.service` to avoid conflicting rpm-ostree\n# transactions.\nBefore=zincati.service\nConditionPathExists=!/var/lib/%N.stamp\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\n# `--allow-inactive` ensures that rpm-ostree does not return an error\n# if the package is already installed. This is useful if the package is\n# added to the root image in a future Fedora CoreOS release as it will\n# prevent the service from failing.\nExecStart=/usr/bin/rpm-ostree install --apply-live --allow-inactive qemu-guest-agent\nExecStart=/bin/touch /var/lib/%N.stamp\n\n[Install]\nWantedBy=multi-user.target",
        "enabled": false,
        "name": "rpm-ostree-install.qemu-guest-agent.service"
      }
    ]
  }
}