59eb56f659
Some checks failed
CI / skinny-install (aco) (push) Successful in 1m18s
CI / skinny-install (api) (push) Successful in 40s
CI / skinny-install (bcda) (push) Successful in 35s
CI / skinny-install (bib) (push) Successful in 38s
CI / skinny-install (cli) (push) Successful in 46s
CI / skinny-install (conf) (push) Successful in 36s
CI / skinny-install (opps) (push) Successful in 38s
CI / skinny-install (pfs) (push) Successful in 47s
CI / skinny-install (rex) (push) Successful in 35s
Infra CI / notebooks (push) Successful in 3m17s
CI / lint-test (push) Failing after 3m30s
CI / skinny-install (bls) (push) Successful in 34s
CI / skinny-install (ccw) (push) Successful in 45s
CI / skinny-install (cms) (push) Successful in 32s
CI / skinny-install (perf) (push) Successful in 43s
Deploy / build-scan-report (push) Has been cancelled
Infra CI / docs (push) Failing after 20s
Infra CI / api (push) Successful in 16s
Infra CI / mc (push) Successful in 12s
Package Supply Chain / pkg-supply-chain (push) Successful in 1m27s
Infra CI / zotero (push) Successful in 6m10s
123 lines
3.2 KiB
YAML
123 lines
3.2 KiB
YAML
# Storage Node ISO Configuration
|
|
# Single source of truth for building the bootable Alpine USB
|
|
|
|
alpine:
|
|
version: "3.21"
|
|
arch: x86_64
|
|
mirror: https://dl-cdn.alpinelinux.org/alpine
|
|
|
|
host:
|
|
name: storagenode
|
|
timezone: UTC
|
|
keymap: us
|
|
|
|
network:
|
|
# DHCP for initial boot / diagnostics; switch to static after setup
|
|
mode: dhcp
|
|
interface: eth0
|
|
# Uncomment for static:
|
|
# mode: static
|
|
# address: 192.168.1.100/24
|
|
# gateway: 192.168.1.1
|
|
dns:
|
|
- 1.1.1.1
|
|
- 1.0.0.1
|
|
|
|
ssh:
|
|
port: 22
|
|
permit_root: true
|
|
password_auth: false
|
|
authorized_keys:
|
|
# YubiKey 1 (ECDSA-SK FIDO2)
|
|
- sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBK8W6v3/ZzVu7jfZvNW+fbs7tHB2YbZVNrhI0qtzX40D1QFwAGi1BD1quiz4tNgTWJYN76Sj/kn4HhGw1K/hrbAAAAAEc3NoOg==
|
|
# YubiKey 2 (Ed25519-SK FIDO2)
|
|
- sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIA3YeQ1/H4U+VaYpI+1BH3xOvwCrF/swxHcXDNyynJP+AAAABHNzaDo= yubikey-2-storagenode
|
|
# Fallback keys (non-FIDO2)
|
|
- ssh-rsa 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 kert@notebook
|
|
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOhs9dzoN/4zNOzpVng2dAPVk7RDF4RmCbmZYA12pzaz kert@homelab
|
|
|
|
drives:
|
|
# Enrolled one at a time via USB adapter. Serial numbers used to resolve
|
|
# /dev paths at runtime regardless of plug order.
|
|
sata:
|
|
- serial: "21044J801864"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21030X801599"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21030X801577"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21044J801753"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21044J800938"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21044J800830"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
nvme:
|
|
- serial: "19081510241793"
|
|
model: "PCIe SSD"
|
|
size: "1TB"
|
|
hdd:
|
|
- serial: "69HEN2NNSW47"
|
|
model: "TOSHIBA DT01ABA100V"
|
|
revision: "ASA AB10"
|
|
size: "1TB"
|
|
|
|
packages:
|
|
base:
|
|
- openssh
|
|
- chrony
|
|
- htop
|
|
- nano
|
|
- curl
|
|
- bash
|
|
- lm-sensors
|
|
- smartmontools
|
|
- pciutils
|
|
- usbutils
|
|
- ethtool
|
|
- util-linux
|
|
- lsblk
|
|
storage:
|
|
- e2fsprogs
|
|
- xfsprogs
|
|
- dosfstools
|
|
- sgdisk
|
|
- sfdisk
|
|
- parted
|
|
- cryptsetup
|
|
- lvm2
|
|
- nvme-cli
|
|
- fio
|
|
- bonnie++
|
|
docker:
|
|
- docker
|
|
- docker-cli
|
|
- docker-compose
|
|
network:
|
|
- wireguard-tools
|
|
- nftables
|
|
- cloudflared
|
|
- certbot
|
|
- openssl
|
|
hardware:
|
|
- amd-ucode
|
|
- cpufrequtils
|
|
- irqbalance
|
|
- haveged
|
|
yubikey:
|
|
- yubikey-manager
|
|
- yubico-pam
|
|
- libfido2
|
|
- openssh-server-common-openrc
|
|
tools:
|
|
- wget
|
|
- rsync
|
|
- logrotate
|
|
- iotop
|