- build-iso.sh erkennt Modell/Hostname aus user-data und sucht
passende Config in wireguard/{hostname}.conf oder wireguard/m{model}.conf
- user-data: late-commands kopieren wg0.conf vom Installationsmedium
nach /etc/wireguard/ und aktivieren wg-quick@wg0
- wireguard/ in .gitignore (keine Secrets im Repo)
37 lines
1.8 KiB
Text
37 lines
1.8 KiB
Text
#cloud-config
|
|
autoinstall:
|
|
version: 1
|
|
locale: de_DE.UTF-8
|
|
keyboard:
|
|
layout: de
|
|
variant: mac
|
|
identity:
|
|
hostname: m16
|
|
username: rene
|
|
password: "$6$lXt4c5wub9FgGOj2$rjwW.UjraH2yYwxabXH.diOu86KSfW.AZvIVRmScbH7Nmh.zLbeMbNITGtRKfpGhe01nqgw4fL8QK67B1oWaq."
|
|
ssh:
|
|
install-server: true
|
|
storage:
|
|
layout:
|
|
name: lvm
|
|
late-commands:
|
|
# User rene zur sudo-Gruppe hinzufuegen
|
|
- curtin in-target --target=/target -- usermod -aG sudo rene
|
|
# WireGuard-Config vom Installationsmedium kopieren (falls vorhanden)
|
|
- bash -c 'if [ -f /cdrom/autoinstall/wg0.conf ]; then mkdir -p /target/etc/wireguard && cp /cdrom/autoinstall/wg0.conf /target/etc/wireguard/wg0.conf && chmod 600 /target/etc/wireguard/wg0.conf; fi'
|
|
# WireGuard beim Boot aktivieren
|
|
- curtin in-target --target=/target -- bash -c 'if [ -f /etc/wireguard/wg0.conf ]; then systemctl enable wg-quick@wg0; fi'
|
|
# System-Setup in chroot (Pakete, Configs, Locale, Services)
|
|
- curtin in-target --target=/target -- bash -c 'curl -fsSL https://git.motocamp.de/rene/macbook-setup/raw/branch/main/setup-base.sh | bash -s -- 16'
|
|
# Desktop-Setup als Firstboot-Autostart einrichten
|
|
- curtin in-target --target=/target -- mkdir -p /home/rene/.config/autostart
|
|
- curtin in-target --target=/target -- bash -c 'cat > /home/rene/.config/autostart/macbook-setup-desktop.desktop <<AUTOSTART
|
|
[Desktop Entry]
|
|
Type=Application
|
|
Name=MacBook Setup Desktop
|
|
Exec=bash -c "curl -fsSL https://git.motocamp.de/rene/macbook-setup/raw/branch/main/setup-desktop.sh | bash 2>&1 | tee /tmp/setup-desktop.log; exec xfce4-terminal -e \"bash -c less /tmp/setup-desktop.log\""
|
|
Hidden=false
|
|
X-GNOME-Autostart-enabled=true
|
|
AUTOSTART'
|
|
- curtin in-target --target=/target -- chown -R 1000:1000 /home/rene/.config
|
|
# Fuer MBP 16": oben "13" durch "16" ersetzen
|