Created
July 1, 2018 06:27
-
-
Save nickfox-taterli/0d8c1b120b39630e24746679281fc2bd to your computer and use it in GitHub Desktop.
Core OS Linode 参考配置包
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#cloud-config | |
# 修改主机名称 | |
hostname: coreos-01 | |
# 将主机名称在/etc/hosts里解析为127.0.0.1 | |
manage_etc_hosts: localhost | |
# 此处的ssh_authorized_keys只对core用户生效 | |
ssh_authorized_keys: | |
- ssh-rsa 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 admin@lijingquan.net | |
write_files: | |
- path: /etc/ssh/sshd_config | |
permissions: 0600 | |
owner: root | |
content: | | |
# Use most defaults for sshd configuration. | |
UsePrivilegeSeparation sandbox | |
Subsystem sftp internal-sftp | |
PermitRootLogin no | |
AllowUsers core | |
PasswordAuthentication no | |
ChallengeResponseAuthentication no | |
X11Forwarding no | |
PubkeyAuthentication yes | |
Protocol 2 | |
ChallengeResponseAuthentication no | |
# 更新coreos系统服务 | |
coreos: | |
# 系统自动更新后重启,安全性更好,关闭就业务SLA保证. | |
update: | |
reboot-strategy: reboot | |
# 更新systemd units | |
units: | |
# 之前更新了/etc/ssh/sshd_config,启动服务生效;若服务已启动则使用`reload` | |
- name: sshd.service | |
command: restart | |
- name: swap.service | |
command: start | |
content: | | |
[Unit] | |
Description=Turn on swap | |
[Service] | |
Type=oneshot | |
RemainAfterExit=true | |
ExecStart=/usr/bin/sh -c "/sbin/swapon /dev/sdb" | |
ExecStop=/usr/bin/sh -c "/sbin/swapoff /dev/sdb" | |
[Install] | |
WantedBy=multi-user.target | |
# 设置系统时区 | |
- name: localtime.service | |
command: start | |
content: | | |
[Unit] | |
Description=Set Local TimeZone | |
[Service] | |
ExecStart=/usr/bin/timedatectl set-timezone Asia/Shanghai | |
RemainAfterExits=yes | |
Type=oneshot | |
# 设置网络,假定本地网卡名称是eth0 | |
- name: 10-eth0.network | |
content: | | |
[Match] | |
Name=eth0 | |
[Network] | |
Address=172.105.229.197/24 | |
Gateway=172.105.229.1 | |
DNS=139.162.67.5 | |
DNS=139.162.68.5 | |
DNS=139.162.69.5 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment