pxe-server/autoinstall/user-data

#cloud-config
autoinstall:
  version: 1

  # Locale, keyboard, timezone
  locale: en_US.UTF-8
  keyboard:
    layout: us
    variant: ""
  timezone: America/New_York

  # Network: DHCP only, on every wired NIC. On the standard two-NIC box the
  # GE corporate NIC gets an address and the imaging NIC (no DHCP server on
  # the imaging LAN) stays without one. No static 172.16.9.1 here: matched
  # by name it would land on EVERY NIC, the GE one included, and the box
  # would answer as 172.16.9.1 on the corporate network. First boot's
  # playbook replaces this file with the two-NIC config pinned by MAC
  # (pxe_nic_mac / corp_nic_mac in playbook/site-vars.yml). optional: the
  # install and boot never wait for a lease (air-gapped is fine).
  network:
    version: 2
    ethernets:
      any-eth:
        match:
          name: "en*"
        dhcp4: true
        dhcp6: false
        optional: true

  # The corp NIC may now have a lease, but the install stays offline-capable:
  # no geoip lookup, and if the Ubuntu mirror is unreachable (Zscaler,
  # no route) install from the ISO instead of failing.
  apt:
    geoip: false
    fallback: offline-install

  # Storage configuration
  storage:
    layout:
      name: lvm
      match:
        size: largest
    swap:
      size: 0

  # User identity
  identity:
    hostname: pxeserver
    username: pxe
    password: '$6$MV3UwfSxKqxDYCwt$2IPUfSvqpzUdH6QVKHfPH8I9E0SPqNCh0lLvn.D9btxhZUYmceOGcB51Ryfg1Fojlroin.qguSKYFoIDGUIC20'

  # Enable SSH
  ssh:
    install-server: true
    allow-pw: true

  # Installer-stage late commands
  late-commands:
    # Step 1: Install deb packages from CIDATA USB
    - |
      curtin in-target --target=/target -- bash -c '
      mkdir -p /mnt/cidata
      CIDATA_DEV=$(blkid -L CIDATA)
      if [ -n "$CIDATA_DEV" ]; then
        mount "$CIDATA_DEV" /mnt/cidata
        if compgen -G "/mnt/cidata/packages/*.deb" > /dev/null; then
          cp /mnt/cidata/packages/*.deb /tmp/
          dpkg -i /tmp/*.deb 2>/dev/null || true
          dpkg -i /tmp/*.deb 2>/dev/null || true
          dpkg --configure -a 2>/dev/null || true
          if command -v nmcli >/dev/null; then
            systemctl enable NetworkManager
          fi
        fi
        umount /mnt/cidata
      fi
      '

    # Step 2: Disable networkd-wait-online (hangs on air-gapped network)
    - ln -sf /dev/null /target/etc/systemd/system/systemd-networkd-wait-online.service

    # Step 3: Create first-boot.sh
    - |
      curtin in-target --target=/target -- bash -c '
      cat <<"EOF" > /opt/first-boot.sh
      #!/bin/bash
      # Expand root LV to full disk BEFORE playbook (playbook copies ~130GB of drivers+PPKGs)
      ROOT_DEV=$(findmnt -n -o SOURCE /)
      ROOT_DISK=$(lsblk -n -o PKNAME "$(readlink -f "$ROOT_DEV")" | tail -1)
      PV_PART=$(pvs --noheadings -o pv_name 2>/dev/null | tr -d "[:space:]" | head -1)
      if [ -n "$ROOT_DISK" ] && [ -n "$PV_PART" ]; then
        PART_NUM=$(echo "$PV_PART" | grep -o "[0-9]*$")
        growpart "/dev/${ROOT_DISK}" "${PART_NUM}" 2>&1 || true
        pvresize "$PV_PART" 2>&1 || true
      fi
      lvextend -r -l +100%FREE /dev/mapper/ubuntu--vg-ubuntu--lv 2>&1 || true
      CIDATA_DEV=$(blkid -L CIDATA)
      if [ -n "$CIDATA_DEV" ]; then
        mkdir -p /mnt/usb
        mount "$CIDATA_DEV" /mnt/usb
        if compgen -G "/mnt/usb/packages/*.deb" > /dev/null; then
          dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
          dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
          dpkg --configure -a 2>/dev/null || true
        fi
        if [ -f /mnt/usb/playbook/pxe_server_setup.yml ]; then
          cd /mnt/usb/playbook
          ansible-playbook -i localhost, -c local pxe_server_setup.yml
        fi
        umount /mnt/usb
      fi
      sed -i "s|^/opt/first-boot.sh.*|# &|" /etc/rc.local
      EOF
      chmod +x /opt/first-boot.sh
      '

    # Step 4: Create rc.local
    - |
      curtin in-target --target=/target -- bash -c '
      cat <<"EOF" > /etc/rc.local
      #!/bin/bash
      /opt/first-boot.sh > /var/log/first-boot.log 2>&1 &
      exit 0
      EOF
      chmod +x /etc/rc.local
      '

  user-data:
    disable_root: false

  refresh-installer:
    update: no