mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-14 23:43:56 +01:00
test(packer): add initial cloud-init files.
This commit is contained in:
parent
bbb43cdf55
commit
e75d07b865
78
tests/packer/init/archlinux-gnome.user-data.yml
Normal file
78
tests/packer/init/archlinux-gnome.user-data.yml
Normal file
@ -0,0 +1,78 @@
|
||||
#cloud-config
|
||||
|
||||
hostname: ${hostname}
|
||||
|
||||
ssh_pwauth: true
|
||||
users:
|
||||
- name: ${username}
|
||||
plain_text_passwd: ${password}
|
||||
shell: /bin/bash
|
||||
ssh_authorized_keys:
|
||||
- ${ssh_key}
|
||||
lock_passwd: false
|
||||
sudo: ALL=(ALL) NOPASSWD:ALL
|
||||
|
||||
package_update: true
|
||||
package_upgrade: true
|
||||
package_reboot_if_required: false
|
||||
packages:
|
||||
# Install core packages
|
||||
- apparmor
|
||||
- base-devel
|
||||
- firewalld
|
||||
- qemu-guest-agent
|
||||
- rng-tools
|
||||
- spice-vdagent
|
||||
|
||||
# Install usefull core packages
|
||||
- bash-completion
|
||||
- git
|
||||
- htop
|
||||
- lsb-release
|
||||
- man
|
||||
- pass
|
||||
- python-notify2
|
||||
- vim
|
||||
- wget
|
||||
|
||||
# Install basic services
|
||||
- networkmanager
|
||||
|
||||
# Install Graphical Interface
|
||||
- gnome
|
||||
- gnome-extra
|
||||
- seahorse
|
||||
- alacarte
|
||||
|
||||
# Install Applications
|
||||
- firefox
|
||||
- terminator
|
||||
|
||||
runcmd:
|
||||
|
||||
# Regenerate grub.cfg
|
||||
- [ grub-mkconfig, -o, /boot/grub/grub.cfg ]
|
||||
|
||||
# Enable firewall
|
||||
|
||||
# Enable core services
|
||||
- [ systemctl, enable, apparmor ]
|
||||
- [ systemctl, enable, auditd ]
|
||||
- [ systemctl, enable, gdm ]
|
||||
- [ systemctl, enable, NetworkManager ]
|
||||
- [ systemctl, enable, rngd ]
|
||||
- [ systemctl, enable, systemd-timesyncd.service ]
|
||||
|
||||
write_files:
|
||||
|
||||
# Enable AppArmor in kernel parameters
|
||||
- path: /etc/default/grub
|
||||
append: true
|
||||
content: |
|
||||
GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT lsm=landlock,lockdown,yama,integrity,apparmor,bpf"
|
||||
|
||||
# Set some bash aliases
|
||||
- path: /etc/skel/.bashrc
|
||||
append: true
|
||||
content: |
|
||||
[[ -f ~/.bash_aliases ]] && source ~/.bash_aliases
|
79
tests/packer/init/archlinux-kde.user-data.yml
Normal file
79
tests/packer/init/archlinux-kde.user-data.yml
Normal file
@ -0,0 +1,79 @@
|
||||
#cloud-config
|
||||
|
||||
hostname: ${hostname}
|
||||
|
||||
ssh_pwauth: true
|
||||
users:
|
||||
- name: ${username}
|
||||
plain_text_passwd: ${password}
|
||||
shell: /bin/bash
|
||||
ssh_authorized_keys:
|
||||
- ${ssh_key}
|
||||
lock_passwd: false
|
||||
sudo: ALL=(ALL) NOPASSWD:ALL
|
||||
|
||||
package_update: true
|
||||
package_upgrade: true
|
||||
package_reboot_if_required: false
|
||||
packages:
|
||||
# Install core packages
|
||||
- apparmor
|
||||
- base-devel
|
||||
- firewalld
|
||||
- qemu-guest-agent
|
||||
- rng-tools
|
||||
- spice-vdagent
|
||||
|
||||
# Install usefull core packages
|
||||
- bash-completion
|
||||
- git
|
||||
- htop
|
||||
- lsb-release
|
||||
- man
|
||||
- pass
|
||||
- python-notify2
|
||||
- vim
|
||||
- wget
|
||||
|
||||
# Install basic services
|
||||
- networkmanager
|
||||
|
||||
# Install Graphical Interface
|
||||
- xorg-server
|
||||
- plasma
|
||||
- sddm
|
||||
- konsole
|
||||
- kde-applications
|
||||
|
||||
# Install Applications
|
||||
- firefox
|
||||
- terminator
|
||||
|
||||
runcmd:
|
||||
|
||||
# Regenerate grub.cfg
|
||||
- [ grub-mkconfig, -o, /boot/grub/grub.cfg ]
|
||||
|
||||
# Enable firewall
|
||||
|
||||
# Enable core services
|
||||
- [ systemctl, enable, apparmor ]
|
||||
- [ systemctl, enable, auditd ]
|
||||
- [ systemctl, enable, sddm ]
|
||||
- [ systemctl, enable, NetworkManager ]
|
||||
- [ systemctl, enable, rngd ]
|
||||
- [ systemctl, enable, systemd-timesyncd.service ]
|
||||
|
||||
write_files:
|
||||
|
||||
# Enable AppArmor in kernel parameters
|
||||
- path: /etc/default/grub
|
||||
append: true
|
||||
content: |
|
||||
GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT lsm=landlock,lockdown,yama,integrity,apparmor,bpf"
|
||||
|
||||
# Set some bash aliases
|
||||
- path: /etc/skel/.bashrc
|
||||
append: true
|
||||
content: |
|
||||
[[ -f ~/.bash_aliases ]] && source ~/.bash_aliases
|
45
tests/packer/init/ubuntu-server.user-data.yml
Normal file
45
tests/packer/init/ubuntu-server.user-data.yml
Normal file
@ -0,0 +1,45 @@
|
||||
#cloud-config
|
||||
|
||||
hostname: ${hostname}
|
||||
|
||||
ssh_pwauth: true
|
||||
users:
|
||||
- name: ${username}
|
||||
plain_text_passwd: ${password}
|
||||
shell: /bin/bash
|
||||
ssh_authorized_keys:
|
||||
- ${ssh_key}
|
||||
lock_passwd: false
|
||||
sudo: ALL=(ALL) NOPASSWD:ALL
|
||||
|
||||
package_update: true
|
||||
package_upgrade: true
|
||||
package_reboot_if_required: false
|
||||
packages:
|
||||
- apparmor-profiles
|
||||
- build-essential
|
||||
- config-package-dev
|
||||
- debhelper
|
||||
- devscripts
|
||||
- golang-go
|
||||
- htop
|
||||
- lsb-release
|
||||
- qemu-guest-agent
|
||||
- rsync
|
||||
- vim
|
||||
|
||||
write_files:
|
||||
|
||||
# Network configuration
|
||||
- path: /etc/systemd/network/20-wired.network
|
||||
owner: 'root:root'
|
||||
permissions: '0644'
|
||||
content: |
|
||||
[Match]
|
||||
Name=en*
|
||||
|
||||
[Network]
|
||||
DHCP=yes
|
||||
|
||||
[DHCPv4]
|
||||
RouteMetric=10
|
Loading…
Reference in New Issue
Block a user