cb442f971b
- Fix pip/distutils incompatibility: install Python wheels directly via zipfile extraction instead of broken pip3 from Ubuntu 22.04 .debs (pip3 crashes on Python 3.12 with ModuleNotFoundError: distutils) - Fix UFW port types: quote loop items so string comparison works correctly, giving ports 67/69 UDP rules instead of TCP - Fix autoinstall crash: set refresh-installer to no (can't reach internet on air-gapped network, was crashing subiquity) - Remove python3-pip and python3-venv from download-packages.sh (no longer needed with direct wheel extraction) - Add ignore_errors to WinPE/iPXE copy tasks (files only present on real USB media, not test VM) - Use system python3 instead of venv for webapp service Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
110 lines
2.9 KiB
Plaintext
110 lines
2.9 KiB
Plaintext
#cloud-config
|
|
autoinstall:
|
|
version: 1
|
|
|
|
# Locale, keyboard, timezone
|
|
locale: en_US.UTF-8
|
|
keyboard:
|
|
layout: us
|
|
variant: ""
|
|
timezone: America/New_York
|
|
|
|
# Network: static IP for isolated PXE LAN (no internet/DHCP needed)
|
|
network:
|
|
version: 2
|
|
ethernets:
|
|
any-eth:
|
|
match:
|
|
name: "en*"
|
|
addresses:
|
|
- 10.9.100.1/24
|
|
dhcp4: false
|
|
dhcp6: false
|
|
optional: true
|
|
|
|
# Storage configuration
|
|
storage:
|
|
layout:
|
|
name: lvm
|
|
match:
|
|
size: largest
|
|
swap:
|
|
size: 0
|
|
|
|
# User identity
|
|
identity:
|
|
hostname: pxeserver
|
|
username: pxe
|
|
password: "$6$rounds=656000$TpsuBw0N85085mpx$KtKsCwFlowg4NY41gUqx5ljef8cJ8uPFfgg43MyCPWByfXkhM5XushcdtkNps6lKeQFQZtli/QU.s52AUc7XC."
|
|
|
|
# Enable SSH
|
|
ssh:
|
|
install-server: true
|
|
allow-pw: true
|
|
|
|
# Installer-stage late commands
|
|
late-commands:
|
|
# Install deb packages from CIDATA USB
|
|
- |
|
|
curtin in-target --target=/target -- bash -c '
|
|
mkdir -p /mnt/cidata
|
|
CIDATA_DEV=$(blkid -L CIDATA)
|
|
if [ -n "$CIDATA_DEV" ]; then
|
|
mount "$CIDATA_DEV" /mnt/cidata
|
|
if compgen -G "/mnt/cidata/packages/*.deb" > /dev/null; then
|
|
cp /mnt/cidata/packages/*.deb /tmp/
|
|
dpkg -i /tmp/*.deb 2>/dev/null || true
|
|
dpkg -i /tmp/*.deb 2>/dev/null || true
|
|
if command -v nmcli >/dev/null; then
|
|
systemctl enable NetworkManager
|
|
fi
|
|
fi
|
|
umount /mnt/cidata
|
|
fi
|
|
'
|
|
|
|
# Create first-boot.sh
|
|
- |
|
|
curtin in-target --target=/target -- bash -c '
|
|
cat <<"EOF" > /opt/first-boot.sh
|
|
#!/bin/bash
|
|
CIDATA_DEV=$(blkid -L CIDATA)
|
|
if [ -n "$CIDATA_DEV" ]; then
|
|
mkdir -p /mnt/usb
|
|
mount "$CIDATA_DEV" /mnt/usb
|
|
# Install all offline .deb packages (ansible, dnsmasq, apache2, samba, etc.)
|
|
if compgen -G "/mnt/usb/packages/*.deb" > /dev/null; then
|
|
dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
|
|
dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
|
|
fi
|
|
# Run the Ansible playbook
|
|
if [ -f /mnt/usb/playbook/pxe_server_setup.yml ]; then
|
|
cd /mnt/usb/playbook
|
|
ansible-playbook -i localhost, -c local pxe_server_setup.yml
|
|
fi
|
|
umount /mnt/usb
|
|
fi
|
|
# Disable rc.local to prevent rerunning
|
|
sed -i "s|^/opt/first-boot.sh.*|# &|" /etc/rc.local
|
|
lvextend -r -l +100%FREE /dev/mapper/ubuntu--vg-ubuntu--lv || true
|
|
EOF
|
|
'
|
|
- curtin in-target --target=/target -- chmod +x /opt/first-boot.sh
|
|
|
|
# Create rc.local without unintended indentation
|
|
- |
|
|
curtin in-target --target=/target -- bash -c '
|
|
cat <<"EOF" > /etc/rc.local
|
|
#!/bin/bash
|
|
/opt/first-boot.sh > /var/log/first-boot.log 2>&1 &
|
|
exit 0
|
|
EOF
|
|
'
|
|
- curtin in-target --target=/target -- chmod +x /etc/rc.local
|
|
|
|
user-data:
|
|
disable_root: false
|
|
|
|
refresh-installer:
|
|
update: no
|