2022-02-04 19:59:42 +01:00
|
|
|
|
---
|
|
|
|
|
|
# early system configuration
|
2022-03-08 11:45:56 +01:00
|
|
|
|
anti_phishing_code: "direktil<3"
|
2022-02-04 19:59:42 +01:00
|
|
|
|
|
|
|
|
|
|
modules: /modules.sqfs
|
|
|
|
|
|
|
2024-04-29 12:54:25 +02:00
|
|
|
|
vpns:
|
|
|
|
|
|
wgprov: |-
|
|
|
|
|
|
[Interface]
|
|
|
|
|
|
PrivateKey = GGM/MwPYrN9HZHsWrEv0RtX/aHXcXzkrZnZWiMgNrEg=
|
|
|
|
|
|
ListenPort = 54321
|
|
|
|
|
|
Address = 10.9.8.7/24
|
|
|
|
|
|
|
|
|
|
|
|
[Peer] # admin1
|
|
|
|
|
|
PresharedKey = oH1OhMWGPg+Qvq3w5mmp6paIi/1bMKl48r0Su2P1F3g=
|
|
|
|
|
|
PublicKey = /j/uawB3nM+36fOxWgI/kK412TvHlYU3T8qxr38hpAs=
|
|
|
|
|
|
AllowedIPs = 10.9.8.1/24
|
|
|
|
|
|
|
2022-03-08 11:45:56 +01:00
|
|
|
|
auths:
|
|
|
|
|
|
- name: novit
|
|
|
|
|
|
sshKey: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICkpbU6sf4t0f6XAv9DuW3XH5iLM0AI5rc8PT2jwea1N
|
|
|
|
|
|
password: bXlzZWVk:HMSxrg1cYphaPuUYUbtbl/htep/tVYYIQAuvkNMVpw0 # mypass
|
|
|
|
|
|
|
2026-04-18 20:07:32 +02:00
|
|
|
|
signer_public_key: 'MIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQAd5sR4NqLtjSt8ESNlYWvuufYj7v+aYGDlgxQThcKbzDPVe639IfH94hHE0l9TAfyU94qtN/GpFyKJ68F/u2pu70A/umT1m24ELFDqXlQXqhTsH91r+nYUZ7due3EqSrvru/yjchNNRkpoCCu3QkDF25KnrYfWWHqj9ZIRlBTCJE9SwM='
|
|
|
|
|
|
|
2025-07-06 15:43:42 +02:00
|
|
|
|
|
2024-04-29 12:54:25 +02:00
|
|
|
|
ssh:
|
|
|
|
|
|
listen: "[::]:22"
|
|
|
|
|
|
user_ca: /user_ca.pub
|
|
|
|
|
|
|
2022-02-04 19:59:42 +01:00
|
|
|
|
networks:
|
2022-03-08 11:45:56 +01:00
|
|
|
|
- name: loopback
|
2025-11-10 19:15:22 +01:00
|
|
|
|
interfaces: [ { var: iface, n: 1, udev: !eq [INTERFACE, lo] } ]
|
2022-03-08 11:45:56 +01:00
|
|
|
|
script: |
|
|
|
|
|
|
ip a add 127.0.0.1/8 dev lo
|
|
|
|
|
|
ip a add ::1/128 dev lo
|
|
|
|
|
|
ip li set lo up
|
2022-02-04 19:59:42 +01:00
|
|
|
|
- name: main
|
2022-03-08 11:45:56 +01:00
|
|
|
|
interfaces:
|
2022-02-04 19:59:42 +01:00
|
|
|
|
- var: iface
|
|
|
|
|
|
n: 1
|
2025-11-10 19:15:22 +01:00
|
|
|
|
udev: !has ID_NET_NAME_MAC
|
2022-02-04 19:59:42 +01:00
|
|
|
|
script: |
|
|
|
|
|
|
ip li set $iface up
|
2026-04-18 20:07:32 +02:00
|
|
|
|
ip a add 192.168.12.42/24 dev $iface
|
|
|
|
|
|
ip a add fd12:6e76:7474::1337:2eed/64 dev $iface
|
|
|
|
|
|
ip route add default via 192.168.12.254
|
|
|
|
|
|
ip route add default via fd12:6e76:7474::1 dev $iface
|
2022-02-04 19:59:42 +01:00
|
|
|
|
|
2023-12-17 13:48:18 +01:00
|
|
|
|
pre_lvm_crypt:
|
2025-11-10 19:15:22 +01:00
|
|
|
|
- name: sys-${name}
|
|
|
|
|
|
udev: !glob [ DEVNAME, /dev/vd* ]
|
2023-12-17 13:48:18 +01:00
|
|
|
|
|
2022-02-04 19:59:42 +01:00
|
|
|
|
lvm:
|
2022-03-08 11:45:56 +01:00
|
|
|
|
- vg: storage
|
2022-02-04 19:59:42 +01:00
|
|
|
|
pvs:
|
2022-03-08 11:45:56 +01:00
|
|
|
|
n: 2
|
2022-02-04 19:59:42 +01:00
|
|
|
|
regexps:
|
2025-11-10 19:15:22 +01:00
|
|
|
|
- ^/dev/mapper/sys-
|
2022-03-08 11:45:56 +01:00
|
|
|
|
# to match full disks
|
2023-12-17 13:48:18 +01:00
|
|
|
|
#- /dev/nvme[0-9]+n[0-9]+
|
|
|
|
|
|
#- /dev/vd[a-z]+
|
|
|
|
|
|
#- /dev/sd[a-z]+
|
|
|
|
|
|
#- /dev/hd[a-z]+
|
2022-03-08 11:45:56 +01:00
|
|
|
|
# to match partitions:
|
|
|
|
|
|
#- /dev/nvme[0-9]+n[0-9]+p[0-9]+
|
|
|
|
|
|
#- /dev/vd[a-z]+[0-9]+
|
|
|
|
|
|
#- /dev/sd[a-z]+[0-9]+
|
|
|
|
|
|
#- /dev/hd[a-z]+[0-9]+
|
2022-02-04 19:59:42 +01:00
|
|
|
|
|
|
|
|
|
|
defaults:
|
|
|
|
|
|
fs: ext4
|
2022-03-08 11:45:56 +01:00
|
|
|
|
raid:
|
|
|
|
|
|
mirrors: 1
|
2022-02-04 19:59:42 +01:00
|
|
|
|
|
|
|
|
|
|
lvs:
|
|
|
|
|
|
- name: bootstrap
|
|
|
|
|
|
size: 2g
|
|
|
|
|
|
|
2022-03-08 11:45:56 +01:00
|
|
|
|
- name: varlog
|
2026-04-18 20:07:32 +02:00
|
|
|
|
size: 256m
|
|
|
|
|
|
- name: kubelet
|
|
|
|
|
|
size: 256m
|
|
|
|
|
|
- name: containerd
|
|
|
|
|
|
size: 1g
|
|
|
|
|
|
- name: etcd
|
|
|
|
|
|
size: 256m
|
2023-02-02 00:28:36 +01:00
|
|
|
|
|
|
|
|
|
|
- name: podman
|
|
|
|
|
|
extents: 10%FREE
|
|
|
|
|
|
# size: 10g
|
2022-03-08 11:45:56 +01:00
|
|
|
|
|
2022-02-04 19:59:42 +01:00
|
|
|
|
- name: dls
|
2022-03-08 11:45:56 +01:00
|
|
|
|
extents: 100%FREE
|
2023-02-02 00:28:36 +01:00
|
|
|
|
# size: 10g
|
|
|
|
|
|
|
2023-12-17 13:48:18 +01:00
|
|
|
|
#crypt:
|
|
|
|
|
|
#- dev: /dev/storage/bootstrap
|
|
|
|
|
|
#- dev: /dev/storage/dls
|
2022-03-08 11:45:56 +01:00
|
|
|
|
|
|
|
|
|
|
bootstrap:
|
2023-12-17 13:48:18 +01:00
|
|
|
|
dev: /dev/storage/bootstrap
|
2026-04-18 20:07:32 +02:00
|
|
|
|
seed: http://192.168.12.254:7606/public/download-set/host/m1/bootstrap.tar?set=IDOXJLLOTHDU2UQPP7CQEBEWC4ZVHTH34BSNPBY6JUGPUVHD2MCKX46LIBOVPG46EXUNPUTYACUEVIQFC2HTIWJCMUXANM36TVKQSRAJAQRE2GDEOC4RWAAAQA3DSZJVGEZDKNT4NA5G2MJ2MJXW65DTORZGC4BOORQXEAAAAAAH4BI7JU
|
2022-02-04 19:59:42 +01:00
|
|
|
|
|