This Is Why We Don't Push To Production On Fridays

2025-06-04 22:43:22 -04:00
commit 49eaf662e8
3 changed files with 70 additions and 0 deletions
--- a/ignition.bu
+++ b/ignition.bu
@@ -0,0 +1,35 @@
+variant: fcos
+version: 1.6.0
+passwd:
+  users:
+    - name: core
+      ssh_authorized_keys:
+        - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJUIc1V15Cf16Hm4HvhWV4hTUUO5iC+YkzUhE8O8c0Yy cardno:23_538_379
+        - ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBFqTkrlJyOBIPlBeDxtCsH6IFL+C8i8KZToxsmCyd1cdwc9+RXc864hHYP3QA+2MVdi396W62vf+w3BF0P3GyzyTDzw7gr4/iOEFCpW0UCtAnqklfQ72Mli1lxkV8LBxQA== cardno:23_538_379
+      groups:
+        - wheel
+        - sudo
+        - docker
+systemd:
+  units:
+    - name: postinst.service
+      enabled: true
+      contents: |
+        [Unit]
+        Description=Initial System Setup
+        After=systemd-machine-id-commit.service
+        After=network-online.target
+        Before=zincati.service
+        ConditionPathExists=!/var/lib/%N.stamp
+
+        [Service]
+        Type=oneshot
+        RemainAfterExit=yes
+        ExecStart=/usr/bin/rpm-ostree install -y --allow-inactive qemu-guest-agent
+        ExecStart=/usr/bin/curl --output-dir "/etc/yum.repos.d" --remote-name https://download.docker.com/linux/fedora/docker-ce.repo
+        ExecStart=/usr/bin/rpm-ostree override remove moby-engine containerd runc docker-cli --install docker-ce
+        ExecStart=/bin/touch /var/lib/%N.stamp
+        ExecStart=/bin/systemctl --no-block reboot
+
+        [Install]
+        WantedBy=multi-user.target