ilkermanap
40b5d50ec9
Parts of this repository are derived from canonical/packer-maas, which Canonical
distributes under the AGPLv3, so its copyleft carries over and a permissive or
plain-GPL licence is not available:
* maas/curtin_userdata_custom.in is adapted from upstream's
debian/curtin_userdata_custom_amd64, with several late_commands copied
verbatim (the PXE-disable call, the target bind mount, the cloud.cfg rewrite
and the zz-update-grub fix)
* overlay/curtin/curtin-hooks follows upstream's debian/scripts/curtin-hooks:
same imports, same load_command_environment -> load_command_config ->
builtin_curthooks -> cleanup structure, near-identical cleanup(). The
kernel-disabling and interface-pinning functions are original.
The upstream template itself is not vendored; it is cloned at build time and
pinned by PM_REF.
Adds the full AGPL-3.0 text as LICENSE and SPDX-License-Identifier headers to
every source file, placed after the shebang or the #cloud-config marker so both
keep working. deploy-cluster.sh's --help filters the new header lines out of the
usage text it extracts from its own comment block.
GitHub Pages serves index.md, which includes README.md, so the site cannot drift
from the repository documentation. Nothing but build/ is excluded, which keeps
the README's relative links to LICENSE, scripts/ and maas/examples/ resolving on
the published site.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
102 lines
3.2 KiB
Plaintext
102 lines
3.2 KiB
Plaintext
# Copyright (C) 2026 Ilker Manap
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
# /etc/pve-maas/pve-maas.conf
|
|
#
|
|
# pve-maas-init varsayilan yapilandirmasi. BU DOSYAYI DUZENLEMEYIN.
|
|
# Dugume ozel ayarlari MAAS deploy sirasinda cloud-init ile
|
|
# /etc/pve-maas/conf.d/*.conf altina yazin; oradaki degerler bunlari ezer.
|
|
#
|
|
# Ornek (cloud-init user-data):
|
|
# write_files:
|
|
# - path: /etc/pve-maas/conf.d/50-cluster.conf
|
|
# permissions: "0600"
|
|
# content: |
|
|
# PVE_ROOT_PASSWORD='...'
|
|
# PVE_CLUSTER_MODE=join
|
|
# PVE_CLUSTER_PEER=192.0.2.11
|
|
# PVE_CLUSTER_PEER_PASSWORD='...'
|
|
|
|
# ---------------------------------------------------------------- genel
|
|
# Tum ilk acilis otomasyonunu kapatmak icin false yapin.
|
|
PVE_ENABLED=true
|
|
|
|
# Bos birakilirsa hostname -f / resolv.conf'tan turetilir.
|
|
PVE_FQDN=
|
|
|
|
# ---------------------------------------------------------------- ag
|
|
# MAAS'in yapilandirdigi arayuz vmbr0 koprusune donusturulsun mu?
|
|
# Bond/VLAN gibi karmasik topolojilerde false yapip /etc/network/interfaces
|
|
# dosyasini cloud-init ile kendiniz yazin.
|
|
PVE_NET_MANAGE=true
|
|
|
|
PVE_NET_BRIDGE=vmbr0
|
|
|
|
# Bos ise varsayilan rotayi tasiyan arayuz kullanilir.
|
|
PVE_NET_UPLINK=
|
|
|
|
# auto | static | dhcp (auto: MAAS'in yazdigi yapilandirmadan tespit edilir)
|
|
PVE_NET_MODE=auto
|
|
|
|
# reboot | reload | none
|
|
# reboot : yapilandirmayi yazip bir kez yeniden baslatir (en guvenilir)
|
|
# reload : ifreload -a ile canli uygular (yeniden baslatma yok)
|
|
# none : sadece yazar, uygulamaz
|
|
PVE_NET_APPLY=reboot
|
|
|
|
# Koprude VLAN farkindaligi (bridge-vlan-aware yes, vids 2-4094)
|
|
PVE_NET_VLAN_AWARE=false
|
|
|
|
# /etc/network/interfaces sonuna eklenecek ham metin (ek kopruler vb.)
|
|
PVE_NET_EXTRA=
|
|
|
|
# ---------------------------------------------------------------- root parolasi
|
|
# root@pam web arayuzu girisi ve baska dugumlerin bu dugume katilmasi icin gerekli.
|
|
# Duz metin yerine hash tercih edin: openssl passwd -6
|
|
PVE_ROOT_PASSWORD=
|
|
PVE_ROOT_PASSWORD_HASH=
|
|
|
|
# ---------------------------------------------------------------- kume
|
|
# none | create | join
|
|
PVE_CLUSTER_MODE=none
|
|
|
|
# create icin
|
|
PVE_CLUSTER_NAME=
|
|
|
|
# join icin: mevcut bir kume dugumunun IP/hostname'i ve root@pam parolasi
|
|
PVE_CLUSTER_PEER=
|
|
PVE_CLUSTER_PEER_PASSWORD=
|
|
PVE_CLUSTER_PEER_PASSWORD_FILE=
|
|
|
|
# Sertifika parmak izi. Bos ve DISCOVER=true ise dugumden okunur (TOFU).
|
|
# Guvenlik icin degeri onceden vermeniz onerilir:
|
|
# openssl s_client -connect NODE:8006 </dev/null 2>/dev/null | \
|
|
# openssl x509 -noout -fingerprint -sha256 | cut -d= -f2
|
|
PVE_CLUSTER_FINGERPRINT=
|
|
PVE_CLUSTER_FINGERPRINT_DISCOVER=true
|
|
|
|
# Corosync baglantilari (ayri bir kume agi kullaniyorsaniz)
|
|
PVE_CLUSTER_LINK0=
|
|
PVE_CLUSTER_LINK1=
|
|
PVE_CLUSTER_NODEID=
|
|
PVE_CLUSTER_VOTES=
|
|
|
|
# Kume dugumunun erisilebilir olmasi icin beklenecek sure (saniye) ve deneme sayisi
|
|
PVE_CLUSTER_WAIT=900
|
|
PVE_CLUSTER_RETRIES=5
|
|
|
|
# Katilimdan sonra conf.d icindeki parolalari sil
|
|
PVE_CLUSTER_WIPE_SECRETS=true
|
|
|
|
# ---------------------------------------------------------------- depolama
|
|
# auto | off | <vg-adi>
|
|
# auto: en cok bos alani olan VG secilir
|
|
PVE_THINPOOL=auto
|
|
PVE_THINPOOL_NAME=data
|
|
PVE_THINPOOL_STORAGE=local-lvm
|
|
PVE_THINPOOL_MIN_GB=16
|
|
|
|
# Ayri bir disk verilirse o diskten yeni bir VG olusturulur.
|
|
PVE_THINPOOL_DISK=
|
|
PVE_THINPOOL_VG=pve
|