260 lines
8.2 KiB
YAML
260 lines
8.2 KiB
YAML
image:
|
|
distribution: "alpinelinux"
|
|
release: "3.18"
|
|
|
|
source:
|
|
downloader: alpinelinux-http
|
|
same_as: 3.12
|
|
keyserver: keys.openpgp.org
|
|
#InitDownloadREPO
|
|
url: http://dl-4.alpinelinux.org/alpine/
|
|
keys:
|
|
- |-
|
|
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
Version: GnuPG v2
|
|
|
|
mQINBFSIEDwBEADbib88gv1dBgeEez1TIh6A5lAzRl02JrdtYkDoPr5lQGYv0qKP
|
|
lWpd3jgGe8n90krGmT9W2nooRdyZjZ6UPbhYSJ+tub6VuKcrtwROXP2gNNqJA5j3
|
|
vkXQ40725CVig7I3YCpzjsKRStwegZAelB8ZyC4zb15J7YvTVkd6qa/uuh8H21X2
|
|
h/7IZJz50CMxyz8vkdyP2niIGZ4fPi0cVtsg8l4phbNJ5PwFOLMYl0b5geKMviyR
|
|
MxxQ33iNa9X+RcWeR751IQfax6xNcbOrxNRzfzm77fY4KzBezcnqJFnrl/p8qgBq
|
|
GHKmrrcjv2MF7dCWHGAPm1/vdPPjUpOcEOH4uGvX7P4w2qQ0WLBTDDO47/BiuY9A
|
|
DIwEF1afNXiJke4fmjDYMKA+HrnhocvI48VIX5C5+C5aJOKwN2EOpdXSvmsysTSt
|
|
gIc4ffcaYugfAIEn7ZdgcYmTlbIphHmOmOgt89J+6Kf9X6mVRmumI3cZWetf2FEV
|
|
fS9v24C2c8NRw3LESoDT0iiWsCHcsixCYqqvjzJBJ0TSEIVCZepOOBp8lfMl4YEZ
|
|
BVMzOx558LzbF2eR/XEsr3AX7Ga1jDu2N5WzIOa0YvJl1xcQxc0RZumaMlZ81dV/
|
|
uu8G2+HTrJMZK933ov3pbxaZ38/CbCA90SBk5xqVqtTNAHpIkdGj90v2lwARAQAB
|
|
tCVOYXRhbmFlbCBDb3BhIDxuY29wYUBhbHBpbmVsaW51eC5vcmc+iQI2BBMBCAAg
|
|
BQJUiBA8AhsDBQsJCAcCBhUICQoLAgMWAgECHgECF4AACgkQKTrNCQfZSVrcNxAA
|
|
mEzX9PQaczzlPAlDe3m1AN0lP6E/1pYWLBGs6qGh18cWxdjyOWsO47nA1P+cTGSS
|
|
AYe4kIOIx9kp2SxObdKeZTuZCBdWfQu/cuRE12ugQQFERlpwVRNd6NYuT3WyZ7v8
|
|
ZXRw4f33FIt4CSrW1/AyM/vrA+tWNo7bbwr/CFaIcL8kINPccdFOpWh14erONd/P
|
|
Eb3gO81yXIA6c1Vl4mce2JS0hd6EFohxS5yMQJMRIS/Zg8ufT3yHJXIaSnG+KRP7
|
|
WWLR0ZaLraCykYi/EW9mmQ49LxQqvKOgjpRW9aNgDA+arKl1umjplkAFI1GZ0/qA
|
|
sgKm4agdvLGZiCZqDXcRWNolG5PeOUUpim1f59pGnupZ3Rbz4BF84U+1uL+yd0OR
|
|
5Y98AxWFyq0dqKz/zFYwQkMVnl9yW0pkJmP7r6PKj0bhWksQX+RjYPosj3wxPZ7i
|
|
SKMX7xZaqon/CHpH9/Xm8CabGcDITrS6h+h8x0FFT/MV/LKgc3q8E4mlXelew1Rt
|
|
xK4hzXFpXKl0WcQg54fj1Wqy47FlkArG50di0utCBGlmVZQA8nqE5oYkFLppiFXz
|
|
1SXCXojff/XZdNF2WdgV8aDKOYTK1WDPUSLmqY+ofOkQL49YqZ9M5FR8hMAbvL6e
|
|
4CbxVXCkWJ6Q9Lg79AzS3pvOXCJ/CUDQs7B30v026Ba5Ag0EVIgQPAEQAMHuPAv/
|
|
B0KP9SEA1PsX5+37k46lTP7lv7VFd7VaD1rAUM/ZyD2fWgrJprcCPEpdMfuszfOH
|
|
jGVQ708VQ+vlD3vFoOZE+KgeKnzDG9FzYXXPmxkWzEEqI168ameF/LQhN12VF1mq
|
|
5LbukiAKx2ytb1I8onvCvNJDvH1D/3BxSj7ThV9bP/bFufcOHFBMFwtyBmUaR5Wx
|
|
96Bq+7DEbTrxhshoQgUqILEudUyhZa05/TrpUvC4f8qc0deaqJFO1zD6guZxRWZd
|
|
SWJdcFzTadyg36P4eyFMxa1Ft7BlDKdKLAFlCGgR0jfOnKRmdRKGRNFTLQ68aBld
|
|
N4wxBuMwe0tmRw9zYwWwD43Aq9E26YtuxVR1wb3zUmi+47QH4ANAzMioimE9Mj5S
|
|
qYrgzQJ0IGwIjBt+HNzHvYX+kyMuVFK41k2Vo6oUOVHuQMu3UgLvSPMsyw69d+Iw
|
|
K/rrsQwuutrvJ8Qcda3rea1HvWBVcY/uyoRsOsCS7itS6MK6KKTKaW8iskmEb2/h
|
|
Q1ZB1QaWm2sQ8Xcmb3QZgtyBfZKuC95T/mAXPT0uET6bTpP5DdEi3wFs+qw/c9FZ
|
|
SNDZ4hfNuS24d2u3Rh8LWt/U83ieAutNntOLGhvuZm1jLYt2KvzXE8cLt3V75/ZF
|
|
O+xEV7rLuOtrHKWlzgJQzsDp1gM4Tz9ULeY7ABEBAAGJAh8EGAEIAAkFAlSIEDwC
|
|
GwwACgkQKTrNCQfZSVrIgBAArhCdo3ItpuEKWcxx22oMwDm+0dmXmzqcPnB8y9Tf
|
|
NcocToIXP47H1+XEenZdTYZJOrdqzrK6Y1PplwQv6hqFToypgbQTeknrZ8SCDyEK
|
|
cU4id2r73THTzgNSiC4QAE214i5kKd6PMQn7XYVjsxvin3ZalS2x4m8UFal2C9nj
|
|
o8HqoTsDOSRy0mzoqAqXmeAe3X9pYme/CUwA6R8hHEgX7jUhm/ArVW5wZboAinw5
|
|
BmKBjWiIwT1vxfvwgbC0EA1O24G4zQqEJ2ILmcM3RvWwtFFWasQqV7qnKdpD8EIb
|
|
oPa8Ocl7joDc5seK8BzsI7tXN4Yjw0aHCOlZ15fWHPYKgDFRQaRFffODPNbxQNiz
|
|
Yru3pbEWDLIUoQtJyKl+o2+8m4aWCYNzJ1WkEQje9RaBpHNDcyen5yC73tCEJsvT
|
|
ZuMI4Xqc4xgLt8woreKE57GRdg2fO8fO40X3R/J5YM6SqG7y2uwjVCHFBeO2Nkkr
|
|
8nOno+Rbn2b03c9MapMT4ll8jJds4xwhhpIjzPLWd2ZcX/ZGqmsnKPiroe9p1VPo
|
|
lN72Ohr9lS+OXfvOPV2N+Ar5rCObmhnYbXGgU/qyhk1qkRu+w2bBZOOQIdaCfh5A
|
|
Hbn3ZGGGQskgWZDFP4xZ3DWXFSWMPuvEjbmUn2xrh9oYsjsOGy9tyBFFySU2vyZP
|
|
Mkc=
|
|
=FcYC
|
|
-----END PGP PUBLIC KEY BLOCK-----
|
|
|
|
targets:
|
|
lxc:
|
|
#create-message: |
|
|
# You just created an {{ image.description }} container.
|
|
|
|
config:
|
|
- type: all
|
|
before: 5
|
|
content: |-
|
|
lxc.include = LXC_TEMPLATE_CONFIG/sabayon.common.conf
|
|
|
|
- type: user
|
|
before: 5
|
|
content: |-
|
|
lxc.include = LXC_TEMPLATE_CONFIG/sabayon.userns.conf
|
|
|
|
- type: all
|
|
after: 4
|
|
content: |-
|
|
lxc.include = LXC_TEMPLATE_CONFIG/common.conf
|
|
|
|
- type: user
|
|
after: 4
|
|
content: |-
|
|
lxc.include = LXC_TEMPLATE_CONFIG/userns.conf
|
|
|
|
- type: all
|
|
content: |-
|
|
lxc.arch = {{ image.architecture_kernel }}
|
|
|
|
files:
|
|
- path: /etc/hostname
|
|
generator: hostname
|
|
|
|
- path: /etc/hosts
|
|
generator: hosts
|
|
|
|
- path: /var/lib/dbus/machine-id
|
|
generator: remove
|
|
|
|
- path: /etc/netplan/10-lxc.yaml
|
|
generator: dump
|
|
content: |-
|
|
|
|
|
|
- path: /etc/network/interfaces
|
|
generator: dump
|
|
content: |-
|
|
auto eth0
|
|
iface eth0 inet dhcp
|
|
hostname $(hostname)
|
|
|
|
- path: /etc/inittab
|
|
generator: dump
|
|
content: |-
|
|
# /etc/inittab
|
|
::sysinit:/sbin/openrc sysinit
|
|
::sysinit:/sbin/openrc boot
|
|
::wait:/sbin/openrc default
|
|
|
|
# Set up a couple of getty's
|
|
::respawn:/sbin/getty 38400 console
|
|
#tty1::respawn:/sbin/getty 38400 tty1
|
|
#tty2::respawn:/sbin/getty 38400 tty2
|
|
#tty3::respawn:/sbin/getty 38400 tty3
|
|
#tty4::respawn:/sbin/getty 38400 tty4
|
|
|
|
# Stuff to do for the 3-finger salute
|
|
::ctrlaltdel:/sbin/reboot
|
|
|
|
# Stuff to do before rebooting
|
|
::shutdown:/sbin/openrc shutdown
|
|
|
|
- path: /etc/inittab
|
|
generator: template
|
|
name: inittab
|
|
content: |-
|
|
# /etc/inittab
|
|
::sysinit:/sbin/openrc sysinit
|
|
::sysinit:/sbin/openrc boot
|
|
::wait:/sbin/openrc default
|
|
|
|
# Set up a couple of getty's
|
|
::respawn:/sbin/getty 38400 console
|
|
|
|
# Stuff to do for the 3-finger salute
|
|
::ctrlaltdel:/sbin/reboot
|
|
|
|
# Stuff to do before rebooting
|
|
::shutdown:/sbin/openrc shutdown
|
|
|
|
packages:
|
|
manager: apk
|
|
update: true
|
|
cleanup: true
|
|
sets:
|
|
- packages:
|
|
- alpine-base
|
|
- tzdata
|
|
action: install
|
|
|
|
#PKGS for Default
|
|
- packages:
|
|
- nano
|
|
- openssh-server
|
|
action: install
|
|
variants:
|
|
- default
|
|
|
|
#PKGS for jenkinsAPKbuilder
|
|
- packages:
|
|
- nano
|
|
- openssh-server
|
|
- git
|
|
- doas
|
|
- doas-sudo-shim
|
|
- alpine-sdk
|
|
action: install
|
|
variants:
|
|
- jenkinsAPKbuilder
|
|
|
|
- packages:
|
|
- openjdk17-jre-headless
|
|
action: install
|
|
variants:
|
|
- jenkinsAPKbuilder
|
|
architectures:
|
|
- aarch64
|
|
- x86_64
|
|
|
|
- packages:
|
|
- openjdk8-jre
|
|
action: install
|
|
variants:
|
|
- jenkinsAPKbuilder
|
|
architectures:
|
|
- armhf
|
|
- armv7
|
|
|
|
repositories:
|
|
- name: /etc/apk/repositories
|
|
url: |-
|
|
#StartREPOS
|
|
http://dl-4.alpinelinux.org/alpine/v{{ image.release }}/main
|
|
http://dl-4.alpinelinux.org/alpine/v{{ image.release }}/community
|
|
#EndREPOS
|
|
|
|
actions:
|
|
- trigger: post-unpack
|
|
action: |-
|
|
#!/bin/sh
|
|
sed -i '/dl-cdn.alpinelinux.org/d' /etc/apk/repositories
|
|
|
|
- trigger: post-packages
|
|
action: |-
|
|
#!/bin/sh
|
|
set -eux
|
|
|
|
# Rewrite configuration for LXC
|
|
sed -i 's/#rc_sys=""/rc_sys="lxc"/' /etc/rc.conf
|
|
|
|
# Enable services
|
|
for svc_name in bootmisc syslog; do
|
|
ln -s /etc/init.d/${svc_name} /etc/runlevels/boot/${svc_name}
|
|
done
|
|
|
|
for svc_name in networking crond; do
|
|
ln -s /etc/init.d/${svc_name} /etc/runlevels/default/${svc_name}
|
|
done
|
|
|
|
#Set TimeZone
|
|
echo "Europe/Amsterdam" > /etc/timezone
|
|
ln -s /usr/share/zoneinfo/Europe/Amsterdam /etc/localtime
|
|
|
|
- trigger: post-packages
|
|
action: |-
|
|
#!/bin/sh
|
|
adduser --disabled-password --gecos "" jenkins
|
|
passwd jenkins -d $(openssl rand -base64 64)
|
|
addgroup jenkins abuild
|
|
chgrp abuild /var/cache/distfiles
|
|
chmod g+w /var/cache/distfiles
|
|
echo "permit nopass root" > /etc/doas.d/jenkinsAPKbuilder.conf
|
|
echo "permit nopass jenkins" >> /etc/doas.d/jenkinsAPKbuilder.conf
|
|
chmod 0600 /etc/doas.d/jenkinsAPKbuilder.conf
|
|
doas -u jenkins abuild-keygen -a -i -n
|
|
rc-update add sshd
|
|
doas -u jenkins mkdir -p /home/jenkins/.ssh
|
|
doas -u jenkins echo "ssh-rsa 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 BuilderNodes@Jenkins" > /home/jenkins/.ssh/authorized_keys
|
|
variants:
|
|
- jenkinsAPKbuilder
|
|
|
|
mappings:
|
|
architecture_map: alpinelinux
|