Move autoinstall/ to 412friendly/backups.git (staging repo) — Iron-Legion repo is ansible-pull only
This commit is contained in:
Artemis (Iron Legion)
@@ -1,88 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# first-boot.sh — Iron Legion Fleet Node Post-Install Bootstrap
|
|
||||||
# Run manually AFTER confirming autoinstall boots successfully
|
|
||||||
# Date: May 23, 2026
|
|
||||||
|
|
||||||
set -euo pipefail
|
|
||||||
|
|
||||||
# ========== CONFIG ==========
|
|
||||||
TRUENAS_IP="192.168.16.254"
|
|
||||||
NFS_SHARE="/mnt/Ice/Backup/swarm-data"
|
|
||||||
LOCAL_MOUNT="/mnt/swarm-data"
|
|
||||||
ANSIBLE_REPO="https://gitea.nb.bobbysh.me/Iron-Legion/ansible-pull-deploy.git"
|
|
||||||
ANSIBLE_DIR="/var/lib/ansible/local"
|
|
||||||
TAILSCALE_API_KEY="${TAILSCALE_API_KEY:-}" # Set before running, or hardcode for unattended
|
|
||||||
|
|
||||||
# ========== DOCKER ==========
|
|
||||||
echo "[1/6] Installing Docker CE..."
|
|
||||||
if ! command -v docker >/dev/null 2>&1; then
|
|
||||||
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /usr/share/keyrings/docker.gpg
|
|
||||||
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu noble stable" > /etc/apt/sources.list.d/docker.list
|
|
||||||
apt-get update
|
|
||||||
apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
|
||||||
systemctl enable docker
|
|
||||||
systemctl start docker
|
|
||||||
usermod -aG docker jarvis
|
|
||||||
echo "Docker installed."
|
|
||||||
else
|
|
||||||
echo "Docker already present."
|
|
||||||
fi
|
|
||||||
|
|
||||||
# ========== NFS AUTOMOUNT ==========
|
|
||||||
echo "[2/6] Configuring NFS automount for TrueNAS..."
|
|
||||||
mkdir -p "$LOCAL_MOUNT"
|
|
||||||
if ! grep -q "$TRUENAS_IP:$NFS_SHARE" /etc/fstab; then
|
|
||||||
echo "$TRUENAS_IP:$NFS_SHARE $LOCAL_MOUNT nfs defaults,_netdev 0 0" >> /etc/fstab
|
|
||||||
mount "$LOCAL_MOUNT"
|
|
||||||
echo "NFS mount added to fstab and mounted."
|
|
||||||
else
|
|
||||||
echo "NFS fstab entry already exists."
|
|
||||||
fi
|
|
||||||
|
|
||||||
# ========== ANSIBLE-PULL REPO ==========
|
|
||||||
echo "[3/6] Cloning ansible-pull repo..."
|
|
||||||
mkdir -p "$ANSIBLE_DIR"
|
|
||||||
if [ ! -d "$ANSIBLE_DIR/.git" ]; then
|
|
||||||
cd "$ANSIBLE_DIR"
|
|
||||||
git clone "$ANSIBLE_REPO" .
|
|
||||||
echo "Ansible repo cloned."
|
|
||||||
else
|
|
||||||
echo "Ansible repo already present."
|
|
||||||
fi
|
|
||||||
|
|
||||||
# ========== TAILSCALE ==========
|
|
||||||
echo "[4/6] Installing Tailscale..."
|
|
||||||
if ! command -v tailscale >/dev/null 2>&1; then
|
|
||||||
curl -fsSL https://tailscale.com/install.sh | sh
|
|
||||||
echo "Tailscale installed."
|
|
||||||
else
|
|
||||||
echo "Tailscale already present."
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "$TAILSCALE_API_KEY" ]; then
|
|
||||||
echo "[5/6] Joining Tailnet..."
|
|
||||||
tailscale up --auth-key="$TAILSCALE_API_KEY" --ssh --accept-routes
|
|
||||||
echo "Tailscale joined."
|
|
||||||
else
|
|
||||||
echo "[5/6] TAILSCALE_API_KEY not set. Run manually:"
|
|
||||||
echo " export TAILSCALE_API_KEY=tskey-..."
|
|
||||||
echo " tailscale up --auth-key=\$TAILSCALE_API_KEY --ssh --accept-routes"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# ========== ENABLE SERVICES ==========
|
|
||||||
echo "[6/6] Enabling services..."
|
|
||||||
systemctl enable ssh docker
|
|
||||||
systemctl restart ssh docker
|
|
||||||
|
|
||||||
# ========== DONE ==========
|
|
||||||
echo ""
|
|
||||||
echo "========================================"
|
|
||||||
echo " Fleet node bootstrap complete"
|
|
||||||
echo "========================================"
|
|
||||||
echo "Docker: $(docker --version)"
|
|
||||||
echo "Tailscale: $(tailscale version 2>/dev/null | head -1 || echo 'not joined')"
|
|
||||||
echo "NFS mount: $(df -h | grep swarm-data || echo 'not mounted')"
|
|
||||||
echo "Ansible: $(ansible --version | head -1 || echo 'not checked')"
|
|
||||||
echo ""
|
|
||||||
echo "Next: run ansible-pull from $ANSIBLE_DIR"
|
|
||||||
echo " cd $ANSIBLE_DIR && ansible-pull -d . -U $ANSIBLE_REPO"
|
|
||||||
@@ -1,95 +0,0 @@
|
|||||||
# Ubuntu Autoinstall — Iron Legion Fleet Standard (MINIMAL)
|
|
||||||
# Targets: GMKtec G9 N150, 1TB NVMe (/dev/nvme0n1)
|
|
||||||
# Date: May 23, 2026
|
|
||||||
# Role: Bare-metal bootable fleet node — manual post-install via first-boot.sh
|
|
||||||
|
|
||||||
version: 1
|
|
||||||
reporting:
|
|
||||||
builtin:
|
|
||||||
type: print
|
|
||||||
|
|
||||||
autoinstall:
|
|
||||||
identity:
|
|
||||||
hostname: fleet-node
|
|
||||||
username: jarvis
|
|
||||||
password: "$6$0DL8vh2WMWRpPiOt$xP1XyKFbX8J0hGSwd9GD6RsPAM5Ajdkrd8PYW2KJAv64YBJC3NAHgGr4BNYORodCVf1hkv3D2KhbezFoIlVsL1"
|
|
||||||
|
|
||||||
ssh:
|
|
||||||
install-server: true
|
|
||||||
authorized-keys:
|
|
||||||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPSBrRCROUHOiZX9IB3teEK89VFfghbdu7OF5NoJ1Y6g Generated By Termius
|
|
||||||
allow-pw: true
|
|
||||||
|
|
||||||
network:
|
|
||||||
version: 2
|
|
||||||
ethernets:
|
|
||||||
enp4s0:
|
|
||||||
dhcp4: true
|
|
||||||
optional: true
|
|
||||||
enp5s0:
|
|
||||||
dhcp4: true
|
|
||||||
optional: true
|
|
||||||
enp6s0:
|
|
||||||
dhcp4: true
|
|
||||||
optional: true
|
|
||||||
|
|
||||||
storage:
|
|
||||||
config:
|
|
||||||
- type: disk
|
|
||||||
id: nvme0n1
|
|
||||||
path: /dev/nvme0n1
|
|
||||||
ptable: gpt
|
|
||||||
wipe: superblock-recursive
|
|
||||||
- type: partition
|
|
||||||
id: boot-part
|
|
||||||
device: nvme0n1
|
|
||||||
size: 1GiB
|
|
||||||
flag: boot
|
|
||||||
- type: partition
|
|
||||||
id: root-part
|
|
||||||
device: nvme0n1
|
|
||||||
size: -1
|
|
||||||
- type: format
|
|
||||||
id: boot-format
|
|
||||||
volume: boot-part
|
|
||||||
fstype: ext4
|
|
||||||
- type: format
|
|
||||||
id: root-format
|
|
||||||
volume: root-part
|
|
||||||
fstype: ext4
|
|
||||||
- type: mount
|
|
||||||
id: boot-mount
|
|
||||||
device: boot-format
|
|
||||||
path: /boot
|
|
||||||
- type: mount
|
|
||||||
id: root-mount
|
|
||||||
device: root-format
|
|
||||||
path: /
|
|
||||||
swap:
|
|
||||||
size: 0
|
|
||||||
|
|
||||||
packages:
|
|
||||||
- openssh-server
|
|
||||||
- curl
|
|
||||||
- nfs-common
|
|
||||||
- cifs-utils
|
|
||||||
- net-tools
|
|
||||||
- ca-certificates
|
|
||||||
- gnupg
|
|
||||||
- ansible
|
|
||||||
- git
|
|
||||||
|
|
||||||
late-commands:
|
|
||||||
# Prevent cloud-init from stomping hostname on first boot
|
|
||||||
- echo 'preserve_hostname: true' > /target/etc/cloud/cloud.cfg.d/99_preserve_hostname.cfg
|
|
||||||
|
|
||||||
# Add jarvis to sudoers with NOPASSWD
|
|
||||||
- echo 'jarvis ALL=(ALL) NOPASSWD: ALL' > /target/etc/sudoers.d/jarvis
|
|
||||||
- chmod 440 /target/etc/sudoers.d/jarvis
|
|
||||||
|
|
||||||
# Ensure SSH key has correct permissions
|
|
||||||
- chmod 600 /target/home/jarvis/.ssh/authorized_keys
|
|
||||||
- chown -R 1000:1000 /target/home/jarvis/.ssh
|
|
||||||
|
|
||||||
# Auto-reboot after install completes
|
|
||||||
shutdown: reboot
|
|
||||||
@@ -1,126 +0,0 @@
|
|||||||
# Ubuntu Autoinstall Template — Iron Legion Fleet Standard
|
|
||||||
# Generated May 23, 2026. Targets GMKtec G9 N150, 1TB NVMe (/dev/nvme0n1)
|
|
||||||
# Includes: jarvis user, SSH key, Docker, NFS client, Tailscale (optional)
|
|
||||||
|
|
||||||
version: 1
|
|
||||||
reporting:
|
|
||||||
builtin:
|
|
||||||
type: print
|
|
||||||
|
|
||||||
autoinstall:
|
|
||||||
identity:
|
|
||||||
hostname: ubuntu-fleet-node
|
|
||||||
username: jarvis
|
|
||||||
password: "$6$rounds=5000$fleet$salts$hashedpassword"
|
|
||||||
# ^^^ Generate with: mkpasswd -m sha-512 ubuntu
|
|
||||||
# Or use: python3 -c "import crypt; print(crypt.crypt('ubuntu', crypt.mksalt(crypt.METHOD_SHA512)))"
|
|
||||||
|
|
||||||
ssh:
|
|
||||||
install-server: true
|
|
||||||
authorized-keys:
|
|
||||||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPSBrRCROUHOiZX9IB3teEK89VFfghbdu7OF5NoJ1Y6g Generated By Termius
|
|
||||||
allow-pw: true
|
|
||||||
|
|
||||||
network:
|
|
||||||
version: 2
|
|
||||||
ethernets:
|
|
||||||
enp4s0:
|
|
||||||
dhcp4: true
|
|
||||||
optional: true
|
|
||||||
enp5s0:
|
|
||||||
dhcp4: true
|
|
||||||
optional: true
|
|
||||||
enp6s0:
|
|
||||||
dhcp4: true
|
|
||||||
optional: true
|
|
||||||
# Note: enp5s0 is the Intel I226-V which drops link on some G9 units.
|
|
||||||
# Fallback to enp4s0 if enp5s0 fails.
|
|
||||||
|
|
||||||
storage:
|
|
||||||
config:
|
|
||||||
- type: disk
|
|
||||||
id: nvme0n1
|
|
||||||
path: /dev/nvme0n1
|
|
||||||
ptable: gpt
|
|
||||||
wipe: superblock-recursive
|
|
||||||
- type: partition
|
|
||||||
id: boot-part
|
|
||||||
device: nvme0n1
|
|
||||||
size: 1GiB
|
|
||||||
flag: boot
|
|
||||||
- type: partition
|
|
||||||
id: root-part
|
|
||||||
device: nvme0n1
|
|
||||||
size: -1
|
|
||||||
- type: format
|
|
||||||
id: boot-format
|
|
||||||
volume: boot-part
|
|
||||||
fstype: ext4
|
|
||||||
- type: format
|
|
||||||
id: root-format
|
|
||||||
volume: root-part
|
|
||||||
fstype: ext4
|
|
||||||
- type: mount
|
|
||||||
id: boot-mount
|
|
||||||
device: boot-format
|
|
||||||
path: /boot
|
|
||||||
- type: mount
|
|
||||||
id: root-mount
|
|
||||||
device: root-format
|
|
||||||
path: /
|
|
||||||
swap:
|
|
||||||
size: 0
|
|
||||||
|
|
||||||
packages:
|
|
||||||
- openssh-server
|
|
||||||
- curl
|
|
||||||
- nfs-common
|
|
||||||
- cifs-utils
|
|
||||||
- net-tools
|
|
||||||
- ca-certificates
|
|
||||||
- gnupg
|
|
||||||
|
|
||||||
late-commands:
|
|
||||||
# Fix hostname preservation (cloud-init stomp bug)
|
|
||||||
- echo 'preserve_hostname: true' > /target/etc/cloud/cloud.cfg.d/99_preserve_hostname.cfg
|
|
||||||
|
|
||||||
# Set hostname explicitly
|
|
||||||
- hostnamectl set-hostname ubuntu-fleet-node
|
|
||||||
|
|
||||||
# Add jarvis to sudoers with NOPASSWD
|
|
||||||
- echo 'jarvis ALL=(ALL) NOPASSWD: ALL' > /target/etc/sudoers.d/jarvis
|
|
||||||
- chmod 440 /target/etc/sudoers.d/jarvis
|
|
||||||
|
|
||||||
# Create SSH directory and inject key (fallback if ssh section fails)
|
|
||||||
- mkdir -p /target/home/jarvis/.ssh
|
|
||||||
- echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPSBrRCROUHOiZX9IB3teEK89VFfghbdu7OF5NoJ1Y6g Generated By Termius' > /target/home/jarvis/.ssh/authorized_keys
|
|
||||||
- chmod 600 /target/home/jarvis/.ssh/authorized_keys
|
|
||||||
- chown -R 1000:1000 /target/home/jarvis/.ssh
|
|
||||||
|
|
||||||
# Install Docker
|
|
||||||
- curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /usr/share/keyrings/docker.gpg
|
|
||||||
- echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu noble stable" > /target/etc/apt/sources.list.d/docker.list
|
|
||||||
- curtin in-target -- apt-get update
|
|
||||||
- curtin in-target -- apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
|
||||||
|
|
||||||
# Add jarvis to docker group
|
|
||||||
- usermod -aG docker jarvis
|
|
||||||
|
|
||||||
# Enable and start services
|
|
||||||
- systemctl enable docker
|
|
||||||
- systemctl enable ssh
|
|
||||||
|
|
||||||
# Install Tailscale (optional — needs auth key for auto-join)
|
|
||||||
# Uncomment and add TAILSCALE_AUTH_KEY to user-data if auto-join desired
|
|
||||||
# - curl -fsSL https://tailscale.com/install.sh | sh
|
|
||||||
# - tailscale up --auth-key=${TAILSCALE_AUTH_KEY}
|
|
||||||
|
|
||||||
# Clone ansible-pull repo (optional — needs git and network)
|
|
||||||
# - mkdir -p /target/var/lib/ansible/local
|
|
||||||
# - cd /target/var/lib/ansible/local && git clone https://gitea.nb.bobbysh.me/Iron-Legion/ansible-pull-deploy.git .
|
|
||||||
|
|
||||||
# Re-enable netplan for actual NIC that comes up
|
|
||||||
- sed -i 's/optional: true/optional: false/g' /target/etc/netplan/00-installer-config.yaml 2>/dev/null || true
|
|
||||||
|
|
||||||
# Shutdown after install (remove for auto-reboot)
|
|
||||||
# shutdown: reboot
|
|
||||||
Reference in New Issue
Block a user