You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
86 lines
3.7 KiB
86 lines
3.7 KiB
#cloud-config
|
|
#mounts:
|
|
# - [ "UUID=3b71ea1d-a176-4593-b3eb-2e4384de3c6c", "/var/lib/teleport", "ext4", "noatime,nofail", "0", "2"]
|
|
# - [ "/media/ephemeral/puppet-config/foreman", "/etc/foreman", "none", "bind"]
|
|
# - [ "/media/ephemeral/puppet-config/foreman-installer", "/etc/foreman-installer", "none", "bind"]
|
|
# - [ "/media/ephemeral/puppet-config/foreman-proxy", "/etc/foreman-proxy", "none", "bind"]
|
|
# - [ "/media/ephemeral/puppet-config/puppet", "/etc/puppet", "none", "bind"]
|
|
# - [ "/media/ephemeral/puppet-config/puppetdb", "/etc/puppetdb", "none", "bind"]
|
|
# - [ "/media/ephemeral/puppet-config/puppetlabs", "/etc/puppetlabs", "none", "bind"]
|
|
|
|
package_update: true
|
|
package_upgrade: true
|
|
package_reboot_if_required: true
|
|
packages:
|
|
- software-properties-common
|
|
- curl
|
|
- htop
|
|
- docker-compose
|
|
- ca-certificates
|
|
- libbcprov-java
|
|
- golang
|
|
|
|
users:
|
|
- name: sapian
|
|
- passwd: $6$eCW4Ypue$XkpcNkvem1O3KD9eyM7V9jp/p5T0BdWv9vYcgqeV3MD2qXEbHdTWyNa1zB42cwsmsRyNSNAhFxZAaQyBsSnic/
|
|
|
|
chpasswd:
|
|
list: |
|
|
root:sap64adm
|
|
sapian:sap64adm
|
|
expire: False
|
|
|
|
ssh_authorized_keys:
|
|
- ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyumXwdCn27ELM56o1aHOUwybRcX3Rk76ny3TOMzjiCjapntTaPtcPZ9/84g5tjZmDlUNitRZF0XV76xJ2JJ0PU4Mx7nka6nnvmywFTAIx/PFLQtj4iQH/7osOEy6lKaYKJT9bFEhZ0llb6JtF+kPTZ7NV7EKvXx/U6pXVM8h7KShx1H/8GJroR8Uc5IdWApSwslG19DOjMZMyhe+PfWQw+SG1MC32OcuH43fuUdNRIDL6tTaFkGH2upX9ALO75CQ/8NDRoSCne0MnDHKFipi86AU0Dr2GmCC4rRx6L9J4tAejViKIjVsLy/aHnHknVgipu1ajCfhTpRjqh3/fWUEow== sebastian.rojo@sapian.com.co
|
|
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeAesfotBI9sbnKBsaycSJ2y0ln7OSGxtdEvN+BISLJPWbjLRqrv69ftlUotW5NABxqXn9mYT3RT031C/pdr/OAqyGnMkkb5/pzmOrKdW3vT7hcAAQQtzrA2LdxJdBUKMIE51XafQbQGKwZtKl9kxcX3QQkyvwDGyYhvi3RYcy5FfUFbifyQojB8o0gLro7pEfR660GE5rUvjUdqSc0V3vPTb7hsUI0x8AvCCOpZ6VVI9uKWxGlncO5B6Vjjefq9FKXxied0Dj5psyjZ9A6WfhFhoyU0NLbYfeQpVog7jV63fiUxXNnp7fcOudHnbScaol4H61EUldnf+d8QgP985/ oscar.garcia@sapian.com.co
|
|
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAoXMJ6MSm2pW8IDMoJBNj56FymgGYOFBvKOibSK/GOU4WPQheK8jurq047bR4/2TocIZKK58mtpXthNxiOkK/bQtSc0bDfHl5RCnfHSrMkKaWIP6Io6GDtcrW3l6MXL0QWqt7hV+4RC+WRTruEhqm4rvgydTUkelKeiyJnULZzoXkK2hkaYtFYPzdT7UDKy6qnlfHTwkIo+RmXuRBQvWU72we8AJSPFcVO8E7CFL/opSWuRQZcRsVh8EAx5GPtxPT+oM8y4c2Ka/h8MOg7jKP3kbb6DmzZxXAhqwyLLuDZuX+fUpxqOnwFDVVN0RMdagfHZvj1IvR/hd36GUGXapr andres.restrepo@sapian.com.co
|
|
|
|
swap:
|
|
filename: /swap.img
|
|
size: "auto" # or size in bytes
|
|
maxsize: 1G
|
|
|
|
write_files:
|
|
- path: /usr/src/install-teleport.sh
|
|
permissions: 0755
|
|
content: |
|
|
#!/bin/bash
|
|
curl -L -o /usr/src/teleport-v2.2.3-linux-amd64-bin.tar.gz https://github.com/gravitational/teleport/releases/download/v2.2.3/teleport-v2.2.3-linux-amd64-bin.tar.gz
|
|
cd /usr/src/
|
|
tar -xzvf /usr/src/teleport-v2.2.3-linux-amd64-bin.tar.gz
|
|
cd /usr/src/teleport
|
|
make install
|
|
- path: /etc/systemd/system/teleport.service
|
|
permissions: 0644
|
|
owner: root
|
|
content: |
|
|
[Unit]
|
|
Description=Teleport SSH Service
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
Restart=always
|
|
ExecStart=/usr/local/bin/teleport start --config=/var/lib/teleport/teleport.yaml
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|
|
#bootcmd:
|
|
# - echo 172.16.253.107 foreman.sapian.com.co foreman >> /etc/hosts
|
|
|
|
runcmd:
|
|
- /usr/src/install-teleport.sh
|
|
- curl -fsSL https://get.docker.com/ | sh
|
|
- curl -fsSL https://get.docker.com/gpg | sudo apt-key add -
|
|
- [ systemctl, daemon-reload ]
|
|
- [ systemctl, enable, docker.service ]
|
|
- [ systemctl, start, --no-block, docker.service ]
|
|
- [ systemctl, daemon-reload ]
|
|
- [ systemctl, enable, teleport.service ]
|
|
- [ systemctl, start, --no-block, teleport.service ]
|
|
|
|
|
|
final_message:
|
|
- "The system is finally up, after $UPTIME seconds"
|