Zen

Source string Source string

69/10000 · 69

The string is read only.

English Actions
Setting up SSH access and starting containers at boot
Complete all the steps described in the xref:tutorial-setup.adoc[initial setup page] before starting this tutorial. Make sure you have create file `ssh-key.pub` following the instructions provided in the https://docs.fedoraproject.org/en-US/fedora-coreos/tutorial-setup/#_ssh_public_key[prerequisites] for the tutorial. We will use this key in the Butane configuration file that we are about to write.
In this tutorial, we will set up SSH access and start a container at boot. Fedora CoreOS is focused on running applications/services in containers thus we recommend trying to run containers and avoid modifying the host directly. Running containers and keeping a pristine host layer makes automatic updates more reliable and allows for separation of concerns with the Fedora CoreOS team responsible for the OS and end-user operators/sysadmins responsible for the applications.
As usual, we will set up console autologin, a hostname, systemd pager configuration, but we will also:
Add an SSH Key for the `core` user from the local `ssh-key.pub` file.
Add a systemd service (`failure.service`) that fails on boot.
Add a running container via a Podman https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html[quadlet systemd.unit container file].
This `etcd-member.container` will then be associated with a `etcd-member.service` on the running system.
`etcd-member.service` will launch and manage the lifecycle of the container using `podman`.
Writing the Butane config and converting to Ignition
Similarly to what we did in the second provisioning scenario, we will write the following Butane config in a file called `containers.bu`:
Example with automatic serial console login, SSH key, and multiple systemd units
variant: fcos
version: {butane-latest-stable-spec}
passwd:
users:
- name: core
ssh_authorized_keys_local:
- ssh-key.pub
systemd:
units:
- name: serial-getty@ttyS0.service
dropins:
- name: autologin-core.conf
contents: |
[Service]
# Override Execstart in main unit
ExecStart=
# Add new Execstart with `-` prefix to ignore failure
ExecStart=-/usr/sbin/agetty --autologin core --noclear %I $TERM
TTYVTDisallocate=no
- name: failure.service
enabled: true
contents: |
[Service]
Type=oneshot
ExecStart=/usr/bin/false
RemainAfterExit=yes
[Install]
WantedBy=multi-user.target
storage:
files:
- path: /etc/hostname
mode: 0644
contents:
inline: |
tutorial
- path: /etc/profile.d/systemd-pager.sh
mode: 0644
contents:
inline: |
# Tell systemd to not use a pager when printing information
export SYSTEMD_PAGER=cat
- path: /etc/containers/systemd/etcd-member.container
mode: 0644
contents:
inline: |
[Unit]
Description=Run a single node etcd
After=network-online.target
Wants=network-online.target
[Container]
ContainerName=etcd
Image=quay.io/coreos/etcd:latest
Network=host
Volume=etcd-data:/etcd-data
Exec=/usr/local/bin/etcd \
--name node1 --data-dir /etcd-data \
--initial-advertise-peer-urls http://127.0.0.1:2380 \
--listen-peer-urls http://127.0.0.1:2380 \
--advertise-client-urls http://127.0.0.1:2379 \
--listen-client-urls http://127.0.0.1:2379 \
--initial-cluster node1=http://127.0.0.1:2380
[Install]
WantedBy=multi-user.target
Run Butane to convert that to an Ignition config:
butane --pretty --strict --files-dir=./ containers.bu --output containers.ign
Now let's provision it:
# Setup the correct SELinux label to allow access to the config
chcon --verbose --type svirt_home_t containers.ign

Loading…

User avatar None

String updated in the repository

  1. fedora-docs-l10n/fedora-coreos
  2. master/pages/tutorial-containers
  3. English
Add an SSH Key for the `core` user from the local `ssh-key.pub` file.
Add an SSH Key for the `core` user from the local `ssh-key.pub` file.
9 months ago
Browse all string changes

Things to check

Multiple failing checks

Following checks are failing:
Placeholders: Spanish, Portuguese (Brazil)

Reset

Glossary

English English
No related strings found in the glossary.

String information

Source string description
type: Plain text
Flags
placeholders:r"`[\w.\/\-_=@&*:$●+~()\] ]*`", read-only
Source string location
./pages/tutorial-containers.adoc:10
String age
9 months ago
Last updated
9 months ago
Source string age
9 months ago
Translation file
pot/master/pages/tutorial-containers.pot, string 5