## template:jinja # The top level settings are used as module # and system configuration. {% if variant.endswith("bsd") %} syslog_fix_perms: root:wheel {% elif variant in ["suse"] %} syslog_fix_perms: root:root {% endif %} # A set of users which may be applied and/or used by various modules # when a 'default' entry is found it will reference the 'default_user' # from the distro configuration specified below users: - default # If this is set, 'root' will not be able to ssh in and they # will get a message to login instead as the default $user {% if variant in ["freebsd"] %} disable_root: false {% else %} disable_root: true {% endif %} {% if variant in ["amazon", "centos", "fedora", "rhel"] %} mount_default_fields: [~, ~, 'auto', 'defaults,nofail', '0', '2'] {% if variant == "amazon" %} resize_rootfs: noblock {% endif %} resize_rootfs_tmp: /dev ssh_pwauth: 0 {% endif %} # This will cause the set+update hostname module to not operate (if true) preserve_hostname: false {% if variant.endswith("bsd") %} # This should not be required, but leave it in place until the real cause of # not finding -any- datasources is resolved. datasource_list: ['NoCloud', 'ConfigDrive', 'Azure', 'OpenStack', 'Ec2'] {% endif %} # Example datasource config # datasource: # Ec2: # metadata_urls: [ 'blah.com' ] # timeout: 5 # (defaults to 50 seconds) # max_wait: 10 # (defaults to 120 seconds) {% if variant == "amazon" %} # Amazon Linux relies on ec2-net-utils for network configuration network: config: disabled {% endif %} # The modules that run in the 'init' stage cloud_init_modules: - migrator {% if variant not in ["netbsd"] %} - seed_random {% endif %} - bootcmd - write-files {% if variant not in ["netbsd"] %} - growpart - resizefs {% endif %} {% if variant not in ["freebsd", "netbsd"] %} - disk_setup - mounts {% endif %} - set_hostname - update_hostname - update_etc_hosts {% if not variant.endswith("bsd") %} - ca-certs - rsyslog {% endif %} - users-groups - ssh # The modules that run in the 'config' stage cloud_config_modules: {% if variant in ["ubuntu", "unknown", "debian"] %} # Emit the cloud config ready event # this can be used by upstart jobs for 'start on cloud-config'. - emit_upstart - snap {% endif %} - ssh-import-id - locale - set-passwords {% if variant in ["rhel", "fedora"] %} - spacewalk - yum-add-repo {% endif %} {% if variant in ["ubuntu", "unknown", "debian"] %} - grub-dpkg - apt-pipelining - apt-configure {% endif %} {% if variant in ["ubuntu"] %} - ubuntu-advantage {% endif %} {% if variant in ["suse"] %} - zypper-add-repo {% endif %} {% if variant not in ["freebsd", "netbsd"] %} - ntp {% endif %} - timezone - disable-ec2-metadata - runcmd {% if variant in ["ubuntu", "unknown", "debian"] %} - byobu {% endif %} # The modules that run in the 'final' stage cloud_final_modules: - package-update-upgrade-install {% if variant in ["ubuntu", "unknown", "debian"] %} - fan - landscape - lxd {% endif %} {% if variant in ["ubuntu", "unknown"] %} - ubuntu-drivers {% endif %} - puppet - chef - mcollective - salt-minion - rightscale_userdata - scripts-vendor - scripts-per-once - scripts-per-boot - scripts-per-instance - scripts-user - ssh-authkey-fingerprints - keys-to-console - phone-home - final-message - power-state-change # System and/or distro specific settings # (not accessible to handlers/transforms) system_info: # This will affect which distro class gets used {% if variant in ["amazon", "arch", "centos", "debian", "fedora", "freebsd", "netbsd", "openbsd", "rhel", "suse", "ubuntu"] %} distro: {{ variant }} {% else %} # Unknown/fallback distro. distro: ubuntu {% endif %} {% if variant in ["ubuntu", "unknown", "debian"] %} # Default user name + that default users groups (if added/used) default_user: name: ubuntu lock_passwd: True gecos: Ubuntu groups: [adm, audio, cdrom, dialout, dip, floppy, lxd, netdev, plugdev, sudo, video] sudo: ["ALL=(ALL) NOPASSWD:ALL"] shell: /bin/bash {# SRU_BLOCKER: do not ship network renderers on Xenial, Bionic or Eoan #} network: renderers: ['netplan', 'eni', 'sysconfig'] # Automatically discover the best ntp_client ntp_client: auto # Other config here will be given to the distro class and/or path classes paths: cloud_dir: /var/lib/cloud/ templates_dir: /etc/cloud/templates/ upstart_dir: /etc/init/ package_mirrors: - arches: [i386, amd64] failsafe: primary: http://archive.ubuntu.com/ubuntu security: http://security.ubuntu.com/ubuntu search: primary: - http://%(ec2_region)s.ec2.archive.ubuntu.com/ubuntu/ - http://%(availability_zone)s.clouds.archive.ubuntu.com/ubuntu/ - http://%(region)s.clouds.archive.ubuntu.com/ubuntu/ security: [] - arches: [arm64, armel, armhf] failsafe: primary: http://ports.ubuntu.com/ubuntu-ports security: http://ports.ubuntu.com/ubuntu-ports search: primary: - http://%(ec2_region)s.ec2.ports.ubuntu.com/ubuntu-ports/ - http://%(availability_zone)s.clouds.ports.ubuntu.com/ubuntu-ports/ - http://%(region)s.clouds.ports.ubuntu.com/ubuntu-ports/ security: [] - arches: [default] failsafe: primary: http://ports.ubuntu.com/ubuntu-ports security: http://ports.ubuntu.com/ubuntu-ports ssh_svcname: ssh {% elif variant in ["amazon", "arch", "centos", "fedora", "rhel", "suse"] %} # Default user name + that default users groups (if added/used) default_user: {% if variant == "amazon" %} name: ec2-user lock_passwd: True gecos: EC2 Default User {% else %} name: {{ variant }} lock_passwd: True gecos: {{ variant }} Cloud User {% endif %} {% if variant == "suse" %} groups: [cdrom, users] {% elif variant == "arch" %} groups: [wheel, users] {% else %} groups: [wheel, adm, systemd-journal] {% endif %} sudo: ["ALL=(ALL) NOPASSWD:ALL"] shell: /bin/bash # Other config here will be given to the distro class and/or path classes paths: cloud_dir: /var/lib/cloud/ templates_dir: /etc/cloud/templates/ ssh_svcname: sshd {% elif variant in ["freebsd"] %} # Default user name + that default users groups (if added/used) default_user: name: freebsd lock_passwd: True gecos: FreeBSD groups: [wheel] sudo: ["ALL=(ALL) NOPASSWD:ALL"] shell: /bin/tcsh {% elif variant in ["netbsd"] %} default_user: name: netbsd lock_passwd: True gecos: NetBSD groups: [wheel] sudo: ["ALL=(ALL) NOPASSWD:ALL"] shell: /bin/sh {% elif variant in ["openbsd"] %} default_user: name: openbsd lock_passwd: True gecos: OpenBSD groups: [wheel] sudo: ["ALL=(ALL) NOPASSWD:ALL"] shell: /bin/ksh {% endif %} {% if variant in ["freebsd", "netbsd", "openbsd"] %} network: renderers: ['{{ variant }}'] {% endif %}