Skip to content

Instantly share code, notes, and snippets.

@youyo
Last active November 25, 2016 11:41
Show Gist options
  • Save youyo/808444eb19bb4d83b1fff05136a8eeb4 to your computer and use it in GitHub Desktop.
Save youyo/808444eb19bb4d83b1fff05136a8eeb4 to your computer and use it in GitHub Desktop.
Notes when coreos install.
#cloud-config
hostname: coreos1
ssh_authorized_keys:
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClVm7p5ckjmscB4gfJrI9O9Pa7Wo/7VEVkkgACZut7xBDK7dpD2wsavCUe9s2Ll4jFDc4UjsvypgPYhAGu3k9tGb8v7ysPHC2ZMh1zCdqrvuNMl+w3EnoEJW9iY5/NgCT807TqW890CUww3rHAYyyB0msmN62UgHdELFQHWAa7wNcQeTPUG0r8FaxwTYiMAtKoHz9YQMQJdDrTd6UmOSBWx0SEyBk0RL5v9kWzz4hIsQV80psDcDoSxrj37fSkG3oZDu7sG2owjAaxG5bKgQ3g9e953LnGEiI8ywHVeerL/A1cZTWcoM91aqyiT3goLF7dQFzXzL3iw3OQN/BL3ExN
write_files:
- path: /etc/ssh/sshd_config
permissions: 0600
owner: root:root
content: |
# Use most defaults for sshd configuration.
UsePrivilegeSeparation sandbox
Subsystem sftp internal-sftp
ClientAliveInterval 180
PermitRootLogin no
MaxAuthTries 5
PasswordAuthentication no
ChallengeResponseAuthentication no
AllowUsers core
- path: /etc/systemd/logind.conf
permissions: 644
owner: root:root
content: |
[Login]
#NAutoVTs=6
#ReserveVT=6
#KillUserProcesses=no
#KillOnlyUsers=
#KillExcludeUsers=root
#InhibitDelayMaxSec=5
#HandleLidSwitchDocked=ignore
#PowerKeyIgnoreInhibited=no
#SuspendKeyIgnoreInhibited=no
#HibernateKeyIgnoreInhibited=no
#LidSwitchIgnoreInhibited=yes
#HoldoffTimeoutSec=30s
#IdleAction=ignore
#IdleActionSec=30min
#RuntimeDirectorySize=10%
#RemoveIPC=yes
#InhibitorsMax=8192
#SessionsMax=8192
#UserTasksMax=33%
HandleSuspendKey=ignore
HandleHibernateKey=ignore
HandleLidSwitch=ignore
HandlePowerKey=ignore
coreos:
units:
- name: 10-static0.network
content: |
[Match]
MACAddress=dc:0e:a1:da:e8:5e
[Network]
Address=192.168.0.10/24
Gateway=192.168.0.1
DNS=192.168.0.1
# install
vim ~/cloud-config.yaml
sudo coreos-install -d /dev/sda -C beta -c ~/cloud-config.yaml
sudo reboot
# update
sudo vim /var/lib/coreos-install/user_data
sudo reboot
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment