uCore configuration
This commit is contained in:
commit
d4ec63f023
|
|
@ -0,0 +1,50 @@
|
||||||
|
variant: fcos
|
||||||
|
version: 1.4.0
|
||||||
|
passwd:
|
||||||
|
users:
|
||||||
|
- name: winsdominoes
|
||||||
|
ssh_authorized_keys:
|
||||||
|
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMVzX/hQ3xkrlC3HsHq2cjBdNVQH1A/+Z7JIumI+mg28 winsdominoes@bluefin
|
||||||
|
password_hash: $y$j9T$LAiUhXMPLuiJHZuAruYjd.$A5SD33aKAxicLEuPw7OHUTq3HyPoAT2NM7sGBjVRQx2
|
||||||
|
storage:
|
||||||
|
directories:
|
||||||
|
- path: /etc/ucore-autorebase
|
||||||
|
mode: 0754
|
||||||
|
systemd:
|
||||||
|
units:
|
||||||
|
- name: ucore-unsigned-autorebase.service
|
||||||
|
enabled: true
|
||||||
|
contents: |
|
||||||
|
[Unit]
|
||||||
|
Description=uCore autorebase to unsigned OCI and reboot
|
||||||
|
ConditionPathExists=!/etc/ucore-autorebase/unverified
|
||||||
|
ConditionPathExists=!/etc/ucore-autorebase/signed
|
||||||
|
After=network-online.target
|
||||||
|
Wants=network-online.target
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
StandardOutput=journal+console
|
||||||
|
ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-unverified-registry:ghcr.io/ublue-os/ucore:stable
|
||||||
|
ExecStart=/usr/bin/touch /etc/ucore-autorebase/unverified
|
||||||
|
ExecStart=/usr/bin/systemctl disable ucore-unsigned-autorebase.service
|
||||||
|
ExecStart=/usr/bin/systemctl reboot
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
- name: ucore-signed-autorebase.service
|
||||||
|
enabled: true
|
||||||
|
contents: |
|
||||||
|
[Unit]
|
||||||
|
Description=uCore autorebase to signed OCI and reboot
|
||||||
|
ConditionPathExists=/etc/ucore-autorebase/unverified
|
||||||
|
ConditionPathExists=!/etc/ucore-autorebase/signed
|
||||||
|
After=network-online.target
|
||||||
|
Wants=network-online.target
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
StandardOutput=journal+console
|
||||||
|
ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-image-signed:docker://ghcr.io/ublue-os/ucore:stable
|
||||||
|
ExecStart=/usr/bin/touch /etc/ucore-autorebase/signed
|
||||||
|
ExecStart=/usr/bin/systemctl disable ucore-signed-autorebase.service
|
||||||
|
ExecStart=/usr/bin/systemctl reboot
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
@ -0,0 +1,38 @@
|
||||||
|
{
|
||||||
|
"ignition": {
|
||||||
|
"version": "3.3.0"
|
||||||
|
},
|
||||||
|
"passwd": {
|
||||||
|
"users": [
|
||||||
|
{
|
||||||
|
"name": "winsdominoes",
|
||||||
|
"passwordHash": "$y$j9T$LAiUhXMPLuiJHZuAruYjd.$A5SD33aKAxicLEuPw7OHUTq3HyPoAT2NM7sGBjVRQx2",
|
||||||
|
"sshAuthorizedKeys": [
|
||||||
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMVzX/hQ3xkrlC3HsHq2cjBdNVQH1A/+Z7JIumI+mg28 winsdominoes@bluefin"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
]
|
||||||
|
},
|
||||||
|
"storage": {
|
||||||
|
"directories": [
|
||||||
|
{
|
||||||
|
"path": "/etc/ucore-autorebase",
|
||||||
|
"mode": 492
|
||||||
|
}
|
||||||
|
]
|
||||||
|
},
|
||||||
|
"systemd": {
|
||||||
|
"units": [
|
||||||
|
{
|
||||||
|
"contents": "[Unit]\nDescription=uCore autorebase to unsigned OCI and reboot\nConditionPathExists=!/etc/ucore-autorebase/unverified\nConditionPathExists=!/etc/ucore-autorebase/signed\nAfter=network-online.target\nWants=network-online.target\n[Service]\nType=oneshot\nStandardOutput=journal+console\nExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-unverified-registry:ghcr.io/ublue-os/ucore:stable\nExecStart=/usr/bin/touch /etc/ucore-autorebase/unverified\nExecStart=/usr/bin/systemctl disable ucore-unsigned-autorebase.service\nExecStart=/usr/bin/systemctl reboot\n[Install]\nWantedBy=multi-user.target\n",
|
||||||
|
"enabled": true,
|
||||||
|
"name": "ucore-unsigned-autorebase.service"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"contents": "[Unit]\nDescription=uCore autorebase to signed OCI and reboot\nConditionPathExists=/etc/ucore-autorebase/unverified\nConditionPathExists=!/etc/ucore-autorebase/signed\nAfter=network-online.target\nWants=network-online.target\n[Service]\nType=oneshot\nStandardOutput=journal+console\nExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-image-signed:docker://ghcr.io/ublue-os/ucore:stable\nExecStart=/usr/bin/touch /etc/ucore-autorebase/signed\nExecStart=/usr/bin/systemctl disable ucore-signed-autorebase.service\nExecStart=/usr/bin/systemctl reboot\n[Install]\nWantedBy=multi-user.target\n",
|
||||||
|
"enabled": true,
|
||||||
|
"name": "ucore-signed-autorebase.service"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue