workflow-cli/contrib/linode/linode-user-data-template.yaml at 534aefcc15892b628f15ca0d80e81a1ae40b1a37 · drycc/workflow-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
#cloud-config
hostname: $hostname
coreos:
  fleet:
    metadata: name=%H
  units:
  - name: 00-eth0.network
    runtime: true
    content: |
      [Match]
      Name=eth0

      [Network]
      DHCP=ipv4
      Address=$public_ipv4/24
      Address=$private_ipv4/17
      Gateway=$gateway.1
      DNS=72.14.179.5
      DNS=8.8.8.8
      DNS=208.67.222.222

      [DHCP]
      UseDNS=false
      CriticalConnection=true
  - name: disable-ipv6.service
    command: start
    content: |
      [Unit]
      Description=Disable IPv6. The notion of a security group does not exist on Linode. To make firewalling each Linode easier, disable IPv6.
      Before=network.target

      [Service]
      Type=oneshot
      ExecStart=/bin/sh -c "sysctl -w net.ipv6.conf.all.disable_ipv6=1"
    # use ntpd rather than timesyncd. timesyncd was not keeping the nodes close enough to keep ceph happy
  - name: systemd-timesyncd.service
    command: stop
    mask: true
  - name: ntpd.service
    command: start
    enable: true
write_files:
  - path: /etc/environment
    content: |
      COREOS_PUBLIC_IPV4=$public_ipv4
      COREOS_PRIVATE_IPV4=$private_ipv4
  - path: /etc/systemd/system/ntpd.service.d/debug.conf
    content: |
      [Service]
      ExecStart=
      ExecStart=/usr/sbin/ntpd -g -n -f /var/lib/ntp/ntp.drift