Skip to content

Instantly share code, notes, and snippets.

@nickfox-taterli
Created July 1, 2018 06:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nickfox-taterli/0d8c1b120b39630e24746679281fc2bd to your computer and use it in GitHub Desktop.
Save nickfox-taterli/0d8c1b120b39630e24746679281fc2bd to your computer and use it in GitHub Desktop.
Core OS Linode 参考配置包
#cloud-config
# 修改主机名称
hostname: coreos-01
# 将主机名称在/etc/hosts里解析为127.0.0.1
manage_etc_hosts: localhost
# 此处的ssh_authorized_keys只对core用户生效
ssh_authorized_keys:
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAIAQC/4ta5TeTOwx/67x50bwKnZnXe96/6WlconkfDtjugFCNvWt83IqDF3FZ2yO5Dyl2Xz80pUH0iusOc+x3t755KrQAhDTUqX/Np0z5TIYijd5N++GQIzvF0DBYAnmfG+UzaayPg+d4xkqC38YCdoKLe1FCMaV0+v5ehgx2CJ+VtCJJvMHY2Eu//oI9WL5rDo1yGwuCCjztKFtgSerLmgRD1aeL/nCZooIkFnAgO5pTvuwfQECvN2ECyMwvPk9onzbOn4vQ4yic3I79Ae0UkPoq29hZPIgvjigXhE1/hwKUqI/eiFC5aiqwaaFbr8BNvioO6Pxss7Ltm7rnHwg167wVPxEVI/PIkHMFSzCKr0hAg4V3hsAlqOlJcvXEtY2PzePiOut34pdsGSBqipxeuc6hTbkSruYb75aHioDzMLpU6sw6ePijz0WPEq2rkj1+/RyTkBuRV/VqlA9sArWpv93HKf6szGtkbiOqXCxzia+EXYaWXLH/fOO30vElC4nPvZIhCzKB+KMpya/zLr4EeUOoq1woIj+WNv+TUdN0iWMDbWx2Vs5U+bp8JDOa9iPCceTDMVFnO+69bl7yw7lygm9QhfIGo0Yb0+Ce3TJ3ZuclaZwOjfPBjcCVFpfFnT8KdHJjN87hBE9w9vwI/Nn1Kso/pzJm+Dg1RJGmtRsuWD816RJzCkf2FSsiBi8/q6jnF8GwAULqMThv5Bhbat2yMb0lXKwjYQIHZnnSlpYqbitifdh9AAJTASKkPTtrZ2YAAWi+ArgEeWQi7aQpU+vRbXng0OjLBdDZYjP2kSxv8UgFtqoRHq4bX4lxalmlGmu98UPPW/ATpnYH7jtAnhrFNVM/RyzId/ewBmRfOir8+uAXjY7fIIs6Oc/2JBceJB7IBbpoohw6eqsIPzV52FqhEhrCji8QS1TgTgNQxQVe22pGh7jB76N+kr6slwUcHsGZ/mm7Cx/hrAInBxWXE2oG9A2+33Sb2PXhaY+pubJh8iw2z+TSfgX6Y1758FL46FriaGF1stz7m+znV04nzwQ+Wxz6C6xGz73pY9T6rwBRzPMXjQeAOBxTpAzGd21AuMtYaxjcf+GodwgzD3a3BKR78F4xQZHQ4jKljQhGwqn1Ml790r7Mo0j3tnOfyO9xR0SSu7CRO0lbrhj2X+YxCahWS76ftAtppXHtzjqWiWnhebC+CcTQvqFlCR5Ca8mBRpHBDAawSgGBZiR0xD6FUDg4iRccLqJjOXJ5JCc0bT5QkFoDLRtCoRUhQYGpCI+dStJQABkykCIRrHQFSWERdiUAH/RJp4UxZBTyKLG47OBslygCnYPYkSiyIG2Y0TaFkyoGIw2JNAeaHka7J2eeExDm8vTCwoWfX7mD3eXbD2ntJ8hDV3Bk8FyJF7yROatRmgDhcLdl4Qgg7T6cCniyRdFl73T4KuVAGl7L+IVFzsIof2WTSF2ma56z9aaghShlXsSLzzzFnfV8h7GyuNbfcbERpdXJurCKUDxSARktRCy+dZ7H8eBISdEjm7prVmCvfzkn2PvSzu4kOLLBzLNNgrlgyAag/Qk4hTCLAcIK1sxqHcLpxLrpvs0QTo8hqh5uqdRvE5vAb26fG2wCB28ch/2WPxx2bG76rmwQXTpRnExsBd7EFV51VhZhiKp4D12W58VododOtukDwB3kTLSzQC22WfhqLdDOukYxBxh+hfrHpLoCFRarUeGI2gmxn69i2QxfMsFfQW5zqr7rzVt+AKBd+OgcTXsuieY3H2MbxpwBf2ojdZ05L9Decwt/rj6Xy3zO/gmIp5gDA/MhS76c+1MUjbHIiTLMmVNnX3/gBS9OzxKzKDAEf7MyipoHkRCjF47O7ykUr1WFLH4sZqPtegzT61lkcOcu6qWH7K5Vo5VCXR7Fps+FBkeE9g/4B7i9uj9VXZ07s2pSG82tbedxFEGsmhTKEgql0JCtzJD8AJImVjGZsSvFKq6Ri0RHYJ3PFxByhwakm/y5gDifUNmbWspQwU8j3m7jJSTZbs/tfajnU7HGDUnwVMBsozCtu1WpKK6Uw9kNSZNDK6Vz4fmYQL14yHDeewRyjFEZAs/k9615TxWP4ODNAuUhN+16aghNOo8mJa1KOgIzlB/S5bKp46kO8kFDRzwCUeDfD+Vy6Di6OZwHcGD/BycilUMijb3sKPFynljLO+AMOH/rX+GPQpFMNRgY690ZxjN454Q9XkCQM1E1Gi4k5+NeaKYzmlBJ4yEGLFj1jDqvpIU764D7ZjoLAq8W4/2cqUA4yK/8v/pPY2DlR7bHHc6lUH4qqpp/+0j9KSbQWcUyT6++x0qKdX4ryyFgVZKFeUcyKQkvHAmh6O8ZQl8aIHhR7Ph3+RtQb/5iNwSbQtFKa6EiFoOK2PjJX/ajmYzVu89N67Anpn8BO8csNb91IkOQZNnSU2yeEGGKW6fhXr5+ib0OO1WGVxQs+PXrCfpxfbsv08cdCiywrlB1AMOVFhPwMzCpy7uqeoqluH0jA5ztRnWiCAxIQF6T4/SFkM4JRmR/rwt3DouhLbfd/GFt4ghFpeC3JIDEgb4mWoyZl+i91dtqLiZ2JCQYyk2E9I3xiESCXa+ssH9qcYiz0Zi2quTxbjtDiPqBxHjf3Jj7eyfBEIbgB97q95Q+kSBDB9Br51SX65CQ/9A1Gt8SubGy4uNuQIyeQQ+uSrBHBGH6h+Lb/0TyIgLyFai8SLqgqPy3afYcjY6DhPO38R707Hw== admin@lijingquan.net
write_files:
- path: /etc/ssh/sshd_config
permissions: 0600
owner: root
content: |
# Use most defaults for sshd configuration.
UsePrivilegeSeparation sandbox
Subsystem sftp internal-sftp
PermitRootLogin no
AllowUsers core
PasswordAuthentication no
ChallengeResponseAuthentication no
X11Forwarding no
PubkeyAuthentication yes
Protocol 2
ChallengeResponseAuthentication no
# 更新coreos系统服务
coreos:
# 系统自动更新后重启,安全性更好,关闭就业务SLA保证.
update:
reboot-strategy: reboot
# 更新systemd units
units:
# 之前更新了/etc/ssh/sshd_config,启动服务生效;若服务已启动则使用`reload`
- name: sshd.service
command: restart
- name: swap.service
command: start
content: |
[Unit]
Description=Turn on swap
[Service]
Type=oneshot
RemainAfterExit=true
ExecStart=/usr/bin/sh -c "/sbin/swapon /dev/sdb"
ExecStop=/usr/bin/sh -c "/sbin/swapoff /dev/sdb"
[Install]
WantedBy=multi-user.target
# 设置系统时区
- name: localtime.service
command: start
content: |
[Unit]
Description=Set Local TimeZone
[Service]
ExecStart=/usr/bin/timedatectl set-timezone Asia/Shanghai
RemainAfterExits=yes
Type=oneshot
# 设置网络,假定本地网卡名称是eth0
- name: 10-eth0.network
content: |
[Match]
Name=eth0
[Network]
Address=172.105.229.197/24
Gateway=172.105.229.1
DNS=139.162.67.5
DNS=139.162.68.5
DNS=139.162.69.5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment