53 lines
2 KiB
Text
53 lines
2 KiB
Text
|
variant: fcos
|
||
|
|
version: 1.4.0
|
||
|
|
passwd:
|
||
|
|
users:
|
||
|
|
- name: core
|
||
|
|
ssh_authorized_keys:
|
||
|
|
- YOUR_SSH_PUB_KEY_HERE
|
||
|
|
password_hash: YOUR_GOOD_PASSWORD_HASH_HERE
|
||
|
|
groups:
|
||
|
|
- docker
|
||
|
|
storage:
|
||
|
|
directories:
|
||
|
|
- path: /etc/rosenvold-core-autorebase
|
||
|
|
mode: 0754
|
||
|
|
systemd:
|
||
|
|
units:
|
||
|
|
- name: rosenvold-core-unsigned-autorebase.service
|
||
|
|
enabled: true
|
||
|
|
contents: |
|
||
|
|
[Unit]
|
||
|
|
Description=rosenvold-core autorebase to unsigned OCI and reboot
|
||
|
|
ConditionPathExists=!/etc/rosenvold-core-autorebase/unverified
|
||
|
|
ConditionPathExists=!/etc/rosenvold-core-autorebase/signed
|
||
|
|
After=network-online.target
|
||
|
|
Wants=network-online.target
|
||
|
|
[Service]
|
||
|
|
Type=oneshot
|
||
|
|
StandardOutput=journal+console
|
||
|
|
ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-unverified-registry:ghcr.io/rosenvold-technology/rosenvold-core:stable
|
||
|
|
ExecStart=/usr/bin/touch /etc/rosenvold-core-autorebase/unverified
|
||
|
|
ExecStart=/usr/bin/systemctl disable rosenvold-core-unsigned-autorebase.service
|
||
|
|
ExecStart=/usr/bin/systemctl reboot
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|
||
|
|
- name: rosenvold-core-signed-autorebase.service
|
||
|
|
enabled: true
|
||
|
|
contents: |
|
||
|
|
[Unit]
|
||
|
|
Description=rosenvold-core autorebase to signed OCI and reboot
|
||
|
|
ConditionPathExists=/etc/rosenvold-core-autorebase/unverified
|
||
|
|
ConditionPathExists=!/etc/rosenvold-core-autorebase/signed
|
||
|
|
After=network-online.target
|
||
|
|
Wants=network-online.target
|
||
|
|
[Service]
|
||
|
|
Type=oneshot
|
||
|
|
StandardOutput=journal+console
|
||
|
|
ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-image-signed:docker://ghcr.io/rosenvold-technology/rosenvold-core:stable
|
||
|
|
ExecStart=/usr/bin/touch /etc/rosenvold-core-autorebase/signed
|
||
|
|
ExecStart=/usr/bin/systemctl disable rosenvold-core-signed-autorebase.service
|
||
|
|
ExecStart=/usr/bin/systemctl reboot
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|