-
Notifications
You must be signed in to change notification settings - Fork 16
/
Copy pathcontrol-init.yaml
98 lines (92 loc) · 7.56 KB
/
control-init.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
# Copyright (c) 2020 Tigera, Inc. All rights reserved.
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
# http://www.apache.org/licenses/LICENSE-2.0
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
package_update: true
packages:
- vsftpd
- iptables-persistent
write_files:
- encoding: b64
content: IyEvYmluL3NoCgpbIC1mICIvZXRjL25ldHBsYW4vNTEtc3RhdGljLnlhbWwiIF0gJiYgZXhpdCAwCgp3aGlsZSBbICEgLWYgL2V0Yy9uZXRwbGFuLzUwLWNsb3VkLWluaXQueWFtbCBdOwpkbwogICAgICAgIHNsZWVwIDEKZG9uZQoKSUZBQ0U9JChncmVwICdzZXQtbmFtZTonIC9ldGMvbmV0cGxhbi81MC1jbG91ZC1pbml0LnlhbWwgfCB0ciAtZCBbOnNwYWNlOl0gfCBjdXQgLWYyIC1kJzonKQoKcHJpbnRmICduZXR3b3JrOlxuICBldGhlcm5ldHM6XG4gICAgJXM6XG4gICAgICBhZGRyZXNzZXM6IFsgMTk4LjE5LjAuMS8yMCBdXG4gIHZlcnNpb246IDInICRJRkFDRSB8IHRlZSAvZXRjL25ldHBsYW4vNTEtc3RhdGljLnlhbWwK
owner: root:root
path: /etc/dynamicaddress.sh
permissions: '0755'
- encoding: b64
content: W1VuaXRdCkRlc2NyaXB0aW9uPUluc3RhbGwgazNzIGNvbnRyb2wgbm9kZQpBZnRlcj1uZXR3b3JrLW9ubGluZS50YXJnZXQKQ29uZGl0aW9uUGF0aEV4aXN0cz0hL3Zhci9saWIvcmFuY2hlci9rM3MKCltTZXJ2aWNlXQpFeGVjU3RhcnQ9L2Jpbi9zaCAtYyAnL2V0Yy9rM3MtY29udHJvbC5zaCcKCltJbnN0YWxsXQpXYW50ZWRCeSA9IG11bHRpLXVzZXIudGFyZ2V0
owner: root:root
path: /etc/systemd/system/k3s.service
permissions: '0644'
- encoding: b64
content: IyEvYmluL2Jhc2gKCndoaWxlIFsgISAtZCAvdmFyL2xpYi9yYW5jaGVyIF0KZG8KCWN1cmwgLXNmTCBodHRwczovL2dldC5rM3MuaW8gfCBJTlNUQUxMX0szU19WRVJTSU9OPSJ2MS4xOC4xMCtrM3MxIiBJTlNUQUxMX0szU19FWEVDPSItLWZsYW5uZWwtYmFja2VuZD1ub25lIC0tY2x1c3Rlci1jaWRyPTE5OC4xOS4xNi4wLzIwIC0tc2VydmljZS1jaWRyPTE5OC4xOS4zMi4wLzIwIC0td3JpdGUta3ViZWNvbmZpZy1tb2RlIDY2NCAtLWRpc2FibGUtbmV0d29yay1wb2xpY3kiIHNoIC0KCXNsZWVwIDEKZG9uZQoKZWNobyBJbnN0YWxsYXRpb24gQ29tcGxldGVkLgoK
owner: root:root
path: /etc/k3s-control.sh
permissions: '0775'
- encoding: b64
content: ZXhwb3J0IEtVQkVDT05GSUc9L2V0Yy9yYW5jaGVyL2szcy9rM3MueWFtbApleHBvcnQgREFUQVNUT1JFX1RZUEU9a3ViZXJuZXRlcwoK
owner: root:root
path: /etc/skel/.bash_aliases
- encoding: b64
content: CjE5OC4xOS4wLjEgY29udHJvbAoxOTguMTkuMC4yIG5vZGUxCjE5OC4xOS4wLjMgbm9kZTIKMTk4LjE5LjE1LjI1NCBob3N0MQoK
owner: root:root
path: /etc/cloud/templates/hosts.debian.tmpl
append: true
- encoding: b64
content: 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
owner: root:root
path: /root/bin_downloader.sh
permissions: '0644'
ssh_authorized_keys:
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvW2dRLu0PLQeQ5q5X76RaPvh8/lhhTzucdOizgzJfbUClve4KVCivtB1/S0rX6uuZL6TZhtRDrB1bVGAkwnt6zTT/irQ1ly1AseLAGIdA+03ikQ4gD1hL+MPURko4O9qWyDpBzPtjinRkXYTPdDe3g5jj1CZMI8uw+oOwdxf/9efeEfiQZ+pZuqgtEJttxWx3NrLqiyZhiciSVoRxyXkOltMdovzNeeeRB0KkFKhjSWhjTW0QRJ19ZsDtH3lxChQd7YFfTtYL0oe3ZkRINzHwfr1vzTVaolWTF70H4LWFaTZpmFWZ+WmmXNriUHwov2TBsCYRMAJkM72PAi8WmtWR calico@cloud
ssh_keys:
rsa_private: |
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEAr1tnUS7tDy0HkOauV++kWj74fP5YYU87nHTos4MyX21Apb3u
ClQor7Qdf0tK1+rrmS+k2YbUQ6wdW1RgJMJ7es00/4q0NZctQLHiwBiHQPtN4pEO
IA9YS/jD1EZKODvalsg6Qcz7Y4p0ZF2Ez3Q3t4OY49QmTCPLsPqDsHcX//Xn3hH4
kGfqWbqoLRCbbcVsdzay6osmYYnIklaEccl5DpbTHaL8zXnnkQdCpBSoY0loY01t
EESdfWbA7R95cQoUHe2BX07WC9KHt2ZESDcx8H69b801WqJVkxe9B+C1hWk2aZhV
mflpplza4lB8KL9kwbAmETACZDO9jwIvFprVkQIDAQABAoIBAGGevNGREh+UrdWY
1g3WNuSWkbbj0Ue62DCtVK46p1xAcfDS3yWY3F2UI6etvqic+zN4NolyadCSjHU/
b5aHPj6K5qosCU6cLnEJlnXiMcmXHTC4F+j5IeqJPlt6Fe9gQrwWE3h2KKytc0Y8
Waczx6C9/es3O2q/srF/hLhEVHQFAUzVQ0VAYdHZUcWgrTRtCi+etXaYssXLbuH/
R0UVb4qctEHRbE9LwLOG8u7o+xC9xYnmMUKAKgyEwwYIR5F1kR3Ebl/cx10owfqV
YhF7V3hbpAbNUdsdhG/Wv3Q3pRFzz3hRGQpfFPG1PINpf3j5oGTbMzdxuT6ddbq+
1wNsWcECgYEA3HXqkoRx5bSvIMhrOQJmrXjxo5ecWfa8sLohJJYkka9G3TprA4fy
9p1IbPgkzDO0RQmCxKQt3Z7OC5mk1owevpF+sJEEFYKhRdOoS8u3VONp6vWUikVc
hdpeWAOWOc7tiYMyew6+NprBNF2YbgnRnNXdErfGYGt4p2+Yn19+jIUCgYEAy6Ah
OR8pTaGu2p6WYHJtYPa90zHwVSSBcpNREVoNrIPo/YEOZDPCnKTEX+rHoEdSS1lC
n2E3hytP7vv/sPGRz2R7h2+2Off47smdt4wJ6zoioOTPjWnCUfix4Kjay5WGswSJ
tsMVe2WTaUV/bG/d23du4CLmVHnZOmJK0Ml4iJ0CgYBCBgJhLM8bdvg3vi32XdS4
QQ9E6gPGIZGy75s7ZMfA5Zg4auVfolhOKR5mnA4RJa7oOgfysiSWSZf1e2cVZdNT
SSmC4XsyofOAgPnW8USPZKf02OVKX6ls4M/+VdyopWMYGrWEiw7GNaSE9T7QPZqL
+LSDhYwgli8FHfO8TxIMLQKBgQCv5frtIjsGwcWPOvGCDTbpTRw7pWcL1cYw2Itu
JtGrFiQdYO+ypXfW4wp0JRcfIJ05U7kWft99129sbam6C2O+uPlwzJKozsnuVKH2
nXUwCv9A54dXjGV9dA0MmjCvLtK2MBRamXkkKGHHzW4+mQAYhrpzyhIYJU3+fkxM
wc1qjQKBgF7erwUBI5zt+vPcurh/pANDWuEOz1zqBr3svqXytI8UvySuHP9qfHY0
JLdAyiMNRolMOEVe7umTbB95DifK7DqK2bTw9jrtUdOJ18G5cTf3+pv8NZKCg0B8
56E90uQJS9aJ/qVZiubWiZpFuIX2tqjulqpp9aN3NbA/Uv8YJa78
-----END RSA PRIVATE KEY-----
rsa_public: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvW2dRLu0PLQeQ5q5X76RaPvh8/lhhTzucdOizgzJfbUClve4KVCivtB1/S0rX6uuZL6TZhtRDrB1bVGAkwnt6zTT/irQ1ly1AseLAGIdA+03ikQ4gD1hL+MPURko4O9qWyDpBzPtjinRkXYTPdDe3g5jj1CZMI8uw+oOwdxf/9efeEfiQZ+pZuqgtEJttxWx3NrLqiyZhiciSVoRxyXkOltMdovzNeeeRB0KkFKhjSWhjTW0QRJ19ZsDtH3lxChQd7YFfTtYL0oe3ZkRINzHwfr1vzTVaolWTF70H4LWFaTZpmFWZ+WmmXNriUHwov2TBsCYRMAJkM72PAi8WmtWR calico@cloud
bootcmd:
- [ /usr/sbin/iptables, -t, mangle, -A, POSTROUTING, -p, tcp, --tcp-flags, 'SYN,RST', SYN, -j, TCPMSS, --set-mss, 1300 ]
- [ /usr/sbin/ip6tables, -t, mangle, -A, POSTROUTING, -p, tcp, --tcp-flags, 'SYN,RST', SYN, -j, TCPMSS, --set-mss, 1300 ]
runcmd:
- [ /usr/bin/cloud-init, single, --name, cc_write_files, --frequency, always ]
- [ /usr/bin/sh, -c, /etc/dynamicaddress.sh ]
- [ /usr/bin/systemctl, enable, NetworkManager-wait-online.service ]
- [ /usr/bin/cp, -Ra, /etc/ssh/ssh_host_rsa_key, /home/ubuntu/.ssh/id_rsa ]
- [ /usr/bin/cp, -Ra, /etc/ssh/ssh_host_rsa_key.pub, /home/ubuntu/.ssh/id_rsa.pub ]
- [ /usr/bin/chown, -R, ubuntu:ubuntu, /home/ubuntu/.ssh ]
- [ /usr/bin/chmod, +x, /root/bin_downloader.sh ]
- [ /root/bin_downloader.sh ]
- [ /usr/bin/chown, -R, ubuntu:ubuntu, /home/ubuntu ]
- [ /usr/bin/systemctl, enable, k3s.service ]
power_state:
mode: reboot