mirror of
https://github.com/bin456789/reinstall.git
synced 2025-01-18 20:39:14 +08:00
37 lines
1.9 KiB
YAML
37 lines
1.9 KiB
YAML
#cloud-config
|
||
datasource_list: [None]
|
||
timezone: Asia/Shanghai
|
||
disable_root: false
|
||
ssh_pwauth: true
|
||
users:
|
||
- name: root
|
||
lock_passwd: false
|
||
chpasswd:
|
||
expire: false
|
||
# <= cloud-init 22.2.x 需要
|
||
list: |
|
||
root:@PASSWORD@
|
||
users:
|
||
- name: root
|
||
password: "@PASSWORD@"
|
||
type: hash
|
||
runcmd:
|
||
# opensuse tumbleweed 镜像有 /etc/ssh/sshd_config.d/ 文件夹，没有 /etc/ssh/sshd_config，有/usr/etc/ssh/sshd_config
|
||
# opensuse tumbleweed cloud-init 直接创建并写入 /etc/ssh/sshd_config，造成默认配置丢失
|
||
# 下面这行删除 clout-init 创建的 sshd_config
|
||
- test $(wc -l </etc/ssh/sshd_config) -le 1 && cat /etc/ssh/sshd_config >>/etc/ssh/sshd_config.d/50-cloud-init.conf && rm -f /etc/ssh/sshd_config
|
||
- echo "PermitRootLogin yes" >/etc/ssh/sshd_config.d/01-permitrootlogin.conf 2>/dev/null || sed -Ei 's/^#?PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config
|
||
- echo "Port @SSH_PORT@" >/etc/ssh/sshd_config.d/01-change-ssh-port.conf || sed -Ei 's/^#?Port .*/Port @SSH_PORT@/' /etc/ssh/sshd_config
|
||
# 已创建的 ssh 连接会沿用旧的配置（未开启密码登录），这时即使输入正确的密码，也会提示 Access Denied
|
||
# systemctl restart sshd 只会重启监听进程，不会关闭已创建的连接（子进程）
|
||
- pkill sshd || true
|
||
# daemon-reload 会刷新 /run/systemd/generator/ssh.socket.d/addresses.conf
|
||
- systemctl daemon-reload
|
||
- for s in ssh.socket ssh.service sshd.socket sshd.service; do systemctl is-enabled $s 2>/dev/null && systemctl restart $s && break; done
|
||
# 删除有密码的行
|
||
- sed -i -e '/^[[:space:]]*password:/d' -e '/[[:space:]]*root:/d' /etc/cloud/cloud.cfg.d/99_fallback.cfg
|
||
- touch /etc/cloud/cloud-init.disabled
|
||
# ubuntu 镜像运行 echo -e '\nDone' ，-e 会被显示出来
|
||
# 加 true 因为有的 tty 不可写
|
||
- for tty in tty0 ttyS0 ttyAMA0; do [ -c /dev/$tty ] && printf '\n%s\n' 'reinstall done' >/dev/$tty || true; done
|