ada/hac
2
0
Fork 0
Code Issues Pull requests 1 Packages Projects Releases Wiki Activity

Make alma linux install rootless
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details

Browse source
This commit is contained in:
Ada 2024-03-23 22:55:44 +01:00
parent 5d1011ed41
commit 9031361059
Signed by: ada
GPG key ID: 6A7F898157C6DE6E
2 changed files with 16 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
packer/alma/alma-9.pkr.hcl
View file

@ -11,7 +11,6 @@ packer {
}
}
variable "proxmox_user" {
type = string
default = "packer"
@ -42,9 +41,15 @@ variable "ssh_password" {
default = null
}
variable "ssh_user" {
type = string
default = null
}
source "proxmox-iso" "alma-9" {
http_content = {
"/ks.cfg" = templatefile("http/ks.cfg", { grub_password = var.grub_password_crypt, password_crypt = var.ssh_password_crypt })
"/ks.cfg" = templatefile("http/ks.cfg", { grub_password = var.grub_password_crypt, password_crypt = var.ssh_password_crypt, user = var.ssh_user, })
}
@ -93,8 +98,8 @@ source "proxmox-iso" "alma-9" {
username = "${var.proxmox_user}"
token = "${var.proxmox_token}"
proxmox_url = "${var.proxmox_url}/api2/json"
ssh_username = "root"
ssh_password = "${var.ssh_password}"
ssh_username = "${var.ssh_user}"
ssh_private_key_file = "~/.ssh/id_ed25519"
ssh_timeout = "15m"
template_description = "Alma Linux 9 build by packer on ${timestamp()}"
template_name = "alma-9-r4"

9
packer/alma/http/ks.cfg
View file

@ -35,6 +35,7 @@ part /boot --fstype=xfs --onpart=vda3
part / --fstype=xfs --onpart=vda4
rootpw ${password_crypt} --iscrypted
user --name=${user} --password=${password_crypt} --groups=wheel --iscrypted
reboot
@ -60,7 +61,11 @@ cloud-init
grub2-install --target=i386-pc /dev/vda
# permit root login via SSH with password authetication
echo "PermitRootLogin yes" > /etc/ssh/sshd_config.d/01-permitrootlogin.conf
mkdir -m0700 /home/${user}/.ssh/
cat <<EOF >/home/${user}/.ssh/authorized_keys
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILBPOnqmExTKt8OceAq9K4d/MkVu4WsU+sqiEV7KbtyH
EOF
chmod 0600 /home/${user}/.ssh/authorized_keys
chown -R ${user}:${user} /home/${user}/.ssh
%end