CoreOS

cloud-config.yaml

#cloud-config
# ? to set enviroment variables >>>
# https://github.com/coreos/coreos-overlay/blob/15679bcb6fee5361ea7081d611be3b638db1d4ab/coreos-base/oem-rackspace/files/coreos-setup-environment
hostname: Schuit-CoreOS-01

users:
  - name: core
    passwd: $6$rounds=9056$7vhPevh3ymNyHv/9$DtAfk2hcJeWtEbOvQmap/TeQnjZV5tJCGFc4iHnFDaHOT7hcgaPQajXtc2WxMlK3uA3pgmeIuffoX7/Eiy15q1
    ssh-authorized-keys:
      - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv3sOmjO+lcS67HpB/Z6cjI+1X1RphxBpR6So5Ire4rnLJTqTwA8UtsV5oQk4l+laPJP6Ef2v1Dhpq+YRoYLIriUC4ZxA/MFtJxNbN0cWz3QGhPJsrhd7Eifraw/WJVd8ywdJ/s5rg+0aCGSRbGt/H7IOji71vhuGDIbLq6tPhiM93XmLFmj6KNW+9aWDw1CFXMDMT0XpumFHrfba1sbGDA1wGr9PhP0Isf+zutTRY0hJO3c/HATtOs+QA4gmEOCp/bTFqdoli8CiKUbMjC+VdJP09q7iS9EEHM2ldeC9MmVZmaIJe6Uo55pcjgMd6gjEX/xvTNY5Yqjy+VrAY7eI7 schuit@analysis
write_files:
  - path: /etc/systemd/system/docker.service.d/increase-ulimit.conf
    owner: "core:core"
    permissions: 0644
    content: |
      [Service]
      LimitMEMLOCK=infinity
      LimitFSIZE=infinity
      LimitCPU=infinity
      LimitAS=infinity
      LimitNOFILE=64000
      LimitNPROC=64000
  - path: /etc/sysctl.d/99-inotify.conf
    owner: "root:root"
    permissions: 0644
    content: |
      fs.inotify.max_user_instances = 8192
  - path: /etc/systemd/system/docker.service.d/http-proxy.conf
    owner: core:core
    permissions: 0644
    content: |
      [Service]
      Environment="HTTP_PROXY=http://192.168.14.12:3128/"
coreos:
  update:
    group: stable
  etcd2:
    #https://coreos.com/os/docs/latest/cloud-config.html
    discovery: https://discovery.etcd.io/13eaf52dfebbd73d64af567315a0d296
    # generate a new token for each unique cluster from https://discovery.etcd.io/new?size=3
    discovery: "https://discovery.etcd.io/<token>"
    # multi-region and multi-cloud deployments need to use $public_ipv4
    advertise-client-urls: "http://$public_ipv4:2379"
    initial-advertise-peer-urls: "http://$private_ipv4:2380"
    # listen on both the official ports and the legacy ports
    # legacy ports can be omitted if your application doesn't depend on them
    listen-client-urls: "http://0.0.0.0:2379,http://0.0.0.0:4001"
    listen-peer-urls: "http://$private_ipv4:2380,http://$private_ipv4:7001"
  fleet:
    metadata: role=services
  units:
    - name: etcd.service
      command: start
    - name: fleet.service
      command: start
    - name: docker.service
      command: restart
      content: |
        [Unit]
        Description=Docker Application Container Engine
        Documentation=http://docs.docker.io
        After=network.target
        [Service]
        ExecStartPre=/bin/mount --make-rprivate /
        ExecStart=/usr/bin/docker -d -s=btrfs -r=false -H fd://
        [Install]
        WantedBy=multi-user.target
    - name: 00-ens192.network
      runtime: true
      content: |
        [Match]
        Name=ens192
        [Network]
        DNS=8.8.8.8
        Address=172.24.156.157/24
        Gateway=172.24.156.254