This commit is contained in:
		
							
								
								
									
										26
									
								
								packer/files/flatcar/clc/bootstrap.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										26
									
								
								packer/files/flatcar/clc/bootstrap.yaml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,26 @@
 | 
			
		||||
# This file is used for initial provisioning of a Flatcar machine, before Packer provisioners (e.g.
 | 
			
		||||
# Ansible) are executed.
 | 
			
		||||
passwd:
 | 
			
		||||
  users:
 | 
			
		||||
  - name: builder
 | 
			
		||||
    # "BUILDERPASSWORDHASH" gets overwritten by Packer on platforms where SSH password auth is used.
 | 
			
		||||
    password_hash: BUILDERPASSWORDHASH
 | 
			
		||||
    # "BUILDERSSHAUTHKEY" gets overwritten by Packer on platforms where SSH key auth is used.
 | 
			
		||||
    # TODO: Once https://github.com/kubernetes-sigs/image-builder/pull/882 is merged we can remove
 | 
			
		||||
    # the ssh_authorized_keys key altogether since the QEMU and raw targets would be using password
 | 
			
		||||
    # auth and the rest of the targets have provider-specific authorization mechanisms, meaning SSH
 | 
			
		||||
    # keys don't have to be specified in this CLC file.
 | 
			
		||||
    ssh_authorized_keys: ["BUILDERSSHAUTHKEY"]
 | 
			
		||||
    groups:
 | 
			
		||||
    - wheel
 | 
			
		||||
    - sudo
 | 
			
		||||
    - docker
 | 
			
		||||
systemd:
 | 
			
		||||
  units:
 | 
			
		||||
  - name: docker.service
 | 
			
		||||
    enable: true
 | 
			
		||||
  # Mask update-engine and locksmithd to disable automatic updates during image creation.
 | 
			
		||||
  - name: update-engine.service
 | 
			
		||||
    mask: true
 | 
			
		||||
  - name: locksmithd.service
 | 
			
		||||
    mask: true
 | 
			
		||||
		Reference in New Issue
	
	Block a user