variant: fcos version: 1.4.0 passwd: users: - name: cloud-user groups: - wheel password_hash: $y$j9T$90Mqu2Viusm6XbBpEBUW60$IF9ZBdoOtbJel4UxNLJDduWBj1ND93FdO5cTDndcXjB ssh_authorized_keys: - ssh-rsa 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 root@ceph-03.rhts.gsslab.pek2.redhat.com systemd: units: - name: rpm-ostree-install-python3.service enabled: true contents: | [Unit] Description=Layer vim with rpm-ostree Wants=network-online.target After=network-online.target # We run before `zincati.service` to avoid conflicting rpm-ostree # transactions. Before=zincati.service ConditionPathExists=!/var/lib/%N.stamp [Service] Type=oneshot RemainAfterExit=yes # `--allow-inactive` ensures that rpm-ostree does not return an error # if the package is already installed. This is useful if the package is # added to the root image in a future Fedora CoreOS release as it will # prevent the service from failing. ExecStart=/usr/bin/rpm-ostree install --apply-live --allow-inactive python3 ConditionPathExists=!/var/lib/%N.stamp [Install] WantedBy=multi-user.target storage: disks: - device: /dev/disk/by-id/coreos-boot-disk wipe_table: false partitions: - number: 4 label: root # Allocate at least 8 GiB to the rootfs. See NOTE above about this. size_mib: 8192 resize: true - size_mib: 0 label: containers filesystems: - path: /var/lib/containers device: /dev/disk/by-partlabel/containers format: xfs with_mount_unit: true files: - path: /etc/ssh/sshd_config.d/20-enable-passwords.conf mode: 0644 contents: inline: | # Fedora CoreOS disables SSH password login by default. # Enable it. # This file must sort before 40-disable-passwords.conf. PasswordAuthentication yes