Skip to content

Instantly share code, notes, and snippets.

@ThinGuy
Last active October 4, 2022 18:47
Show Gist options
  • Save ThinGuy/3dc7d5fadb8409dff0671bbfb9f9a7f0 to your computer and use it in GitHub Desktop.
Save ThinGuy/3dc7d5fadb8409dff0671bbfb9f9a7f0 to your computer and use it in GitHub Desktop.
automated snap-store-proxy via lxd
#Make sure variables are correct and paste this into terminal on a server where LXD has been initialized
export AIRSTACK_DHCP=true
export AIRSTACK_IPV4_CIDR=
export AIRSTACK_IPV4_GW=
export AIRSTACK_DNS=
export AIRSTACK_DOMAIN=orangebox.me
export AIRSTACK_TZ=$(cat /etc/timezone)
export AIRSTACK_LANG=en_US.UTF-8
export AIRSTACK_USE_BRIDGE=br0
export AIRSTACK_STORAGE_POOL=local
export AIRSTACK_DIR=/srv/airstack
export AIRSTACK_APT_URI=http://ubuntu-archive.orangebox.me/ubuntu
export AIRSTACK_APT_SEC_URI=http://ubuntu-archive.orangebox.me/ubuntu
export AIRSTACK_PKG_LIST="build-essential,jq,nginx,tree,nfs-kernel-server,uml-utilities,ipcalc,apt-transport-https,bridge-utils,debian-goodies,iputils-arping"
export AIRSTACK_MAAS_SUBNET=172.27.20.0/23
export AIRSTACK_SERVER_CRT=/home/ubuntu/ssl/orangebox.me/wc-orangebox.me.pem
export AIRSTACK_SERVER_KEY=/home/ubuntu/ssl/orangebox.me/wc-orangebox.me.key
export AIRSTACK_CA_CRT=/home/ubuntu/ssl/orangebox.me/orangebox.me_CA.crt
export AIRSTACK_CA_KEY=/home/ubuntu/ssl/orangebox.me/orangebox.me_CA.key
export AIRSTACK_SNAP_PROXY_NAME=resource-server
lxc 2>/dev/null profile create ${AIRSTACK_SNAP_PROXY_NAME}
cat <<-EOF|sed '/^$/d'|lxc profile edit ${AIRSTACK_SNAP_PROXY_NAME}
config:
migration.incremental.memory: "true"
raw.lxc: |-
lxc.cgroup.devices.allow = c 10:237 rwm
lxc.apparmor.profile = unconfined
lxc.cgroup.devices.allow = b 7:* rwm
security.nesting: "true"
security.privileged: "true"
user.network-config: |
version: 2
ethernets:
eth0:
dhcp4: false
dhcp6: false
bridges:
br0:
interfaces: [eth0]
dhcp4: true
dhcp6: false
optional: true
parameters:
priority: 1
stp: False
forward-delay: 0
user.user-data: |
#cloud-config
timezone: America/Los_Angeles
locale: en_US.UTF-8
final_message: "${AIRSTACK_SNAP_PROXY_NAME} installation complete"
package_update: true
package_upgrade: true
packages: [postgresql,squashfuse,expect,geoclue-ubuntu-geoip,geoipupdate,geoip-bin,geoip-database,geoip-database-extra]
apt:
primary:
- arches: [amd64]
uri: http://ubuntu-archive.orangebox.me/ubuntu
security:
- arches: [amd64]
uri: http://ubuntu-archive.orangebox.me/ubuntu
sources_list: |
deb \$PRIMARY \$RELEASE main universe restricted multiverse
deb \$PRIMARY \$RELEASE-updates main universe restricted multiverse
deb \$PRIMARY \$RELEASE-backports main universe restricted multiverse
deb \$SECURITY \$RELEASE-security main universe restricted multiverse
snap:
commands:
00: [install, core, --edge]
01: [install, snap-store-proxy, --edge]
bootcmd:
- cloud-init-per once bc0 set -x
- cloud-init-per once bc1 export DEBIAN_FRONTEND=noninteractive
- cloud-init-per once bc2 apt update -qq
- cloud-init-per once bc3 apt install squashfuse -yqq
- cloud-init-per once bc4 apt purge lxd\* -yqq
- cloud-init-per once bc5 apt autoremove -yq
runcmd:
- set -x
- su postgres -c 'cd /var/lib/postgresql;psql -c "CREATE ROLE root PASSWORD '"'"'snAppr0xy'"'"' SUPERUSER CREATEDB CREATEROLE LOGIN REPLICATION"'
- sed 's|PATH="|PATH="/snap/bin:|g' -i /etc/environment
- "export PATH=/snap/bin:\$PATH"
- snap install core --edge
- snap install snap-store-proxy --edge
- snap-proxy config proxy.domain="${AIRSTACK_SNAP_PROXY_NAME}.orangebox.me"
- snap-proxy generate-keys
- snap-proxy create-database "postgresql://root:snAppr0xy@localhost:5432/root"
- snap-proxy check-connections
- snap-proxy config proxy.cache.size=8192
$(printf ' ssh_authorized_keys:\n';(find 2>/dev/null ~/.ssh -iname "*.pub"|xargs -n1 -P1 bash -c 'printf -- '"'"' - %s\n'"'"' "$(cat $0)"'|awk '!seen[$0]++')|sed 's/^/ &/g')
description: LXD profile for Snap-Store-Proxy
devices:
eth0:
name: eth0
nictype: bridged
parent: br0
type: nic
root:
path: /
pool: ${AIRSTACK_STORAGE_POOL:-$(lxc 2>/dev/null storage list|awk '!/+|NAME/{print $2;exit}')}
type: disk
EOF
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment