apiVersion: v1
data:
  cloudInit: |
    #cloud-config
    package_update: false
    package_upgrade: false
    snap:
      commands:
        00: snap refresh --hold=forever
    package_reboot_if_required: true
    packages:
      - qemu-guest-agent
      - yq
      - jq

    runcmd:
      - sysctl -w net.ipv6.conf.all.disable_ipv6=1
      - systemctl enable --now qemu-guest-agent.service
      - [sh, '/root/updates.sh']

    disable_root: true
    ssh_pwauth: false
    users:
      - name: rancher
        gecos: Rancher service account
        hashed_passwd: $6$Jn9gljJAbr9tjxD2$4D4O5YokrpYvYd5lznvtuWRPWWcREo325pEhn5r5vzfIU/1fX6werOG4LlXxNNBOkmbKaabekQ9NQL32IZOiH1
        lock_passwd: false
        shell: /bin/bash
        groups: [users, sudo, docker]
        sudo: ALL=(ALL:ALL) ALL
        ssh_authorized_keys:
        - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEwWnnOTAu0LlAZRczQ0Z0KvNlUdPhGQhpZie+nF1O3s'

    write_files:
      - path: /root/updates.sh
        permissions: '0550'
        content: |
          #!/bin/bash
          export DEBIAN_FRONTEND=noninteractive
          apt-mark hold linux-headers-generic
          apt-mark hold linux-headers-virtual
          apt-mark hold linux-image-virtual
          apt-mark hold linux-virtual
          apt-get update
          apt-get upgrade -y
          apt-get autoremove -y
kind: ConfigMap
metadata:
  labels:
    harvesterhci.io/cloud-init-template: user
  name: rke2-ubuntu-24.04-cloudinit
  namespace: vanderlande