-
Notifications
You must be signed in to change notification settings - Fork 30
/
full.bu
78 lines (68 loc) · 1.99 KB
/
full.bu
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
variant: r4e
version: 1.0.0
passwd:
users:
- name: core
groups:
- wheel
password_hash: $y$j9T$3F1aS4Q56GjixkuY3blcX.$M2WV2kJ7hi1XOkdexQMkBqaDWizidOMcIiCvZU15XW/
ssh_authorized_keys:
- ssh-rsa AAAA........
systemd:
units:
- name: applyupdate.service
contents: |
[Unit]
Description=Apply Update Check
[Service]
Type=oneshot
ExecStart=/bin/sh -c 'if [[ $(rpm-ostree status -v | grep "Staged: yes") ]]; then systemctl --message="Applying OTA update" reboot; else logger "Running latest available update"; fi'
[Install]
WantedBy=multi-user.target
- name: applyupdate.timer
enabled: true
contents: |
[Unit]
Description=Daily Update Reboot Check
[Timer]
#Nightly example maintenance window
OnCalendar=*-*-* 01:30:00
#weekly example for Sunday at midnight
#OnCalendar=Sun *-*-* 00:00:00
[Install]
WantedBy=multi-user.target
- name: podman-auto-update.timer
enabled: true
dropins:
- name: splay.conf
contents: |
[Timer]
RandomizedDelaySec=7200
- name: rpm-ostreed-automatic.timer
enabled: true
storage:
files:
- path: /etc/containers/systemd/boinc.container
mode: 0600
contents:
inline: |
[Service]
Restart=always
ExecStartPre=-/bin/mkdir -p /opt/appdata/boinc/slots
ExecStartPre=-/bin/mkdir -p /opt/appdata/boinc/locale
[Container]
ContainerName=boinc
Image=docker.io/boinc/client:latest
Label="io.containers.autoupdate=image"
Network=host
PublishPort=31416:31416
Timezone=local
Volume=/opt/appdata/boinc:/var/lib/boinc:Z
[Install]
WantedBy=default.target
- path: /etc/rpm-ostree.conf
mode: 0600
contents:
inline: |
[Daemon]
AutomaticUpdatePolicy=stage