uCore configuration
This commit is contained in:
commit
d4ec63f023
|
|
@ -0,0 +1,50 @@
|
|||
variant: fcos
|
||||
version: 1.4.0
|
||||
passwd:
|
||||
users:
|
||||
- name: winsdominoes
|
||||
ssh_authorized_keys:
|
||||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMVzX/hQ3xkrlC3HsHq2cjBdNVQH1A/+Z7JIumI+mg28 winsdominoes@bluefin
|
||||
password_hash: $y$j9T$LAiUhXMPLuiJHZuAruYjd.$A5SD33aKAxicLEuPw7OHUTq3HyPoAT2NM7sGBjVRQx2
|
||||
storage:
|
||||
directories:
|
||||
- path: /etc/ucore-autorebase
|
||||
mode: 0754
|
||||
systemd:
|
||||
units:
|
||||
- name: ucore-unsigned-autorebase.service
|
||||
enabled: true
|
||||
contents: |
|
||||
[Unit]
|
||||
Description=uCore autorebase to unsigned OCI and reboot
|
||||
ConditionPathExists=!/etc/ucore-autorebase/unverified
|
||||
ConditionPathExists=!/etc/ucore-autorebase/signed
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
[Service]
|
||||
Type=oneshot
|
||||
StandardOutput=journal+console
|
||||
ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-unverified-registry:ghcr.io/ublue-os/ucore:stable
|
||||
ExecStart=/usr/bin/touch /etc/ucore-autorebase/unverified
|
||||
ExecStart=/usr/bin/systemctl disable ucore-unsigned-autorebase.service
|
||||
ExecStart=/usr/bin/systemctl reboot
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
- name: ucore-signed-autorebase.service
|
||||
enabled: true
|
||||
contents: |
|
||||
[Unit]
|
||||
Description=uCore autorebase to signed OCI and reboot
|
||||
ConditionPathExists=/etc/ucore-autorebase/unverified
|
||||
ConditionPathExists=!/etc/ucore-autorebase/signed
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
[Service]
|
||||
Type=oneshot
|
||||
StandardOutput=journal+console
|
||||
ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-image-signed:docker://ghcr.io/ublue-os/ucore:stable
|
||||
ExecStart=/usr/bin/touch /etc/ucore-autorebase/signed
|
||||
ExecStart=/usr/bin/systemctl disable ucore-signed-autorebase.service
|
||||
ExecStart=/usr/bin/systemctl reboot
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
{
|
||||
"ignition": {
|
||||
"version": "3.3.0"
|
||||
},
|
||||
"passwd": {
|
||||
"users": [
|
||||
{
|
||||
"name": "winsdominoes",
|
||||
"passwordHash": "$y$j9T$LAiUhXMPLuiJHZuAruYjd.$A5SD33aKAxicLEuPw7OHUTq3HyPoAT2NM7sGBjVRQx2",
|
||||
"sshAuthorizedKeys": [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMVzX/hQ3xkrlC3HsHq2cjBdNVQH1A/+Z7JIumI+mg28 winsdominoes@bluefin"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"storage": {
|
||||
"directories": [
|
||||
{
|
||||
"path": "/etc/ucore-autorebase",
|
||||
"mode": 492
|
||||
}
|
||||
]
|
||||
},
|
||||
"systemd": {
|
||||
"units": [
|
||||
{
|
||||
"contents": "[Unit]\nDescription=uCore autorebase to unsigned OCI and reboot\nConditionPathExists=!/etc/ucore-autorebase/unverified\nConditionPathExists=!/etc/ucore-autorebase/signed\nAfter=network-online.target\nWants=network-online.target\n[Service]\nType=oneshot\nStandardOutput=journal+console\nExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-unverified-registry:ghcr.io/ublue-os/ucore:stable\nExecStart=/usr/bin/touch /etc/ucore-autorebase/unverified\nExecStart=/usr/bin/systemctl disable ucore-unsigned-autorebase.service\nExecStart=/usr/bin/systemctl reboot\n[Install]\nWantedBy=multi-user.target\n",
|
||||
"enabled": true,
|
||||
"name": "ucore-unsigned-autorebase.service"
|
||||
},
|
||||
{
|
||||
"contents": "[Unit]\nDescription=uCore autorebase to signed OCI and reboot\nConditionPathExists=/etc/ucore-autorebase/unverified\nConditionPathExists=!/etc/ucore-autorebase/signed\nAfter=network-online.target\nWants=network-online.target\n[Service]\nType=oneshot\nStandardOutput=journal+console\nExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-image-signed:docker://ghcr.io/ublue-os/ucore:stable\nExecStart=/usr/bin/touch /etc/ucore-autorebase/signed\nExecStart=/usr/bin/systemctl disable ucore-signed-autorebase.service\nExecStart=/usr/bin/systemctl reboot\n[Install]\nWantedBy=multi-user.target\n",
|
||||
"enabled": true,
|
||||
"name": "ucore-signed-autorebase.service"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
Loading…
Reference in New Issue