@ydkn/pulumi-components 0.8.8 → 0.9.1

package/lib/dhcpd/deployment.js

@@ -29,13 +29,40 @@ export class Dhcpd extends ComponentResource {
         this.config = new k8s.core.v1.ConfigMap(name, {
             metadata,
             data: {
-                "dhcpd.conf": pulumi.all([args.subnets]).apply(([subnets]) => {
-                    const confOptions = ["authoritative;", "ddns-update-style none;"];
-                    for (const s of subnets) {
-                        confOptions.push(`subnet ${s.subnet} netmask ${s.netmask} {`, `range ${s.start} ${s.end};`, `option domain-name-servers ${s.nameservers.join(", ")};`, `option routers ${s.router};`, "default-lease-time 3600;", "max-lease-time 86400;", "}");
-                    }
-                    return confOptions.join("\n");
-                }),
+                "dhcp4.conf": pulumi.all([args.subnets]).apply(([subnets]) => pulumi.all(subnets).apply((subnets) => {
+                    return JSON.stringify({
+                        Dhcp4: {
+                            "valid-lifetime": 86400,
+                            "renew-timer": 3600,
+                            "rebind-timer": 7200,
+                            "interfaces-config": {
+                                interfaces: subnets.map((subnet) => subnet.interface),
+                            },
+                            "lease-database": {
+                                type: "memfile",
+                                persist: true,
+                                name: "/usr/local/var/lib/kea/dhcp4.leases",
+                            },
+                            subnet4: subnets.map((subnet, idx) => {
+                                return {
+                                    id: idx + 1,
+                                    subnet: subnet.cidr,
+                                    pools: [{ pool: `${subnet.start} - ${subnet.end}` }],
+                                    "option-data": [
+                                        {
+                                            name: "domain-name-servers",
+                                            data: subnet.nameservers.join(", "),
+                                        },
+                                        {
+                                            name: "routers",
+                                            data: subnet.router,
+                                        },
+                                    ],
+                                };
+                            }),
+                        },
+                    });
+                })),
             },
         }, opts);
         this.deployment = new k8s.apps.v1.Deployment(name, {
@@ -53,41 +80,24 @@ export class Dhcpd extends ComponentResource {
                             { effect: "NoExecute", operator: "Exists" },
                         ],
                         hostNetwork: true,
-                        initContainers: [
-                            {
-                                name: "settings",
-                                image: "busybox:latest",
-                                command: ["/bin/sh"],
-                                args: ["-c", "cat /config/dhcpd.conf > /data/dhcpd.conf"],
-                                volumeMounts: [
-                                    { name: "config", mountPath: "/config" },
-                                    { name: "data", mountPath: "/data" },
-                                ],
-                                resources: {
-                                    requests: { memory: "8Mi", cpu: "100m" },
-                                    limits: { memory: "16Mi", cpu: "200m" },
-                                },
-                            },
-                        ],
                         containers: [
                             {
-                                name: "dhcpd",
-                                image: "networkboot/dhcpd:latest",
+                                name: "kea",
+                                image: "kometchtech/kea:latest",
                                 securityContext: {
                                     privileged: true,
                                     capabilities: { add: ["NET_ADMIN"] },
                                 },
-                                volumeMounts: [{ name: "data", mountPath: "/data" }],
+                                volumeMounts: [
+                                    { name: "config", mountPath: "/usr/local/etc/kea/kea-dhcp4.conf", subPath: "dhcp4.conf" },
+                                ],
                                 resources: {
                                     requests: { memory: "16Mi", cpu: "100m" },
                                     limits: { memory: "32Mi", cpu: "400m" },
                                 },
                             },
                         ],
-                        volumes: [
-                            { name: "config", configMap: { name: this.config.metadata.name } },
-                            { name: "data", emptyDir: {} },
-                        ],
+                        volumes: [{ name: "config", configMap: { name: this.config.metadata.name } }],
                         affinity: {
                             podAntiAffinity: {
                                 preferredDuringSchedulingIgnoredDuringExecution: [

package/lib/dhcpd/deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/dhcpd/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAiBvD,MAAM,OAAO,KAAM,SAAQ,iBAAiB;IACzB,MAAM,CAAwB;IAC9B,UAAU,CAAyB;IAEpD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAe,EAAE,IAAsC;QAC/E,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1F,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS;YACT,MAAM,EAAE;gBACN,wBAAwB,EAAE,OAAO;gBACjC,6BAA6B,EAAE,OAAO;gBACtC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACrC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE;oBAC3D,MAAM,WAAW,GAAG,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;oBAElE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;wBACxB,WAAW,CAAC,IAAI,CACd,UAAU,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,OAAO,IAAI,EAC3C,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,EAC5B,8BAA8B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACzD,kBAAkB,CAAC,CAAC,MAAM,GAAG,EAC7B,0BAA0B,EAC1B,uBAAuB,EACvB,GAAG,CACJ,CAAC;oBACJ,CAAC;oBAED,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC,CAAC;aACH;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,YAAY,EAAE,IAAI,CAAC,YAAY;wBAC/B,WAAW,EAAE;4BACX,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE;4BAC5C,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE;yBAC5C;wBACD,WAAW,EAAE,IAAI;wBACjB,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,UAAU;gCAChB,KAAK,EAAE,gBAAgB;gCACvB,OAAO,EAAE,CAAC,SAAS,CAAC;gCACpB,IAAI,EAAE,CAAC,IAAI,EAAE,2CAA2C,CAAC;gCACzD,YAAY,EAAE;oCACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE;oCACxC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;iCACrC;gCACD,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;oCACxC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;iCACxC;6BACF;yBACF;wBACD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,OAAO;gCACb,KAAK,EAAE,0BAA0B;gCACjC,eAAe,EAAE;oCACf,UAAU,EAAE,IAAI;oCAChB,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE;iCACrC;gCACD,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;gCACpD,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;oCACzC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;iCACxC;6BACF;yBACF;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;4BAClE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;yBAC/B;wBACD,QAAQ,EAAE;4BACR,eAAe,EAAE;gCACf,+CAA+C,EAAE;oCAC/C;wCACE,MAAM,EAAE,GAAG;wCACX,eAAe,EAAE;4CACf,aAAa,EAAE;gDACb,gBAAgB,EAAE;oDAChB;wDACE,GAAG,EAAE,wBAAwB;wDAC7B,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;qDACpD;oDACD;wDACE,GAAG,EAAE,4BAA4B;wDACjC,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;qDACxD;iDACF;6CACF;4CACD,WAAW,EAAE,wBAAwB;yCACtC;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/dhcpd/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAiBvD,MAAM,OAAO,KAAM,SAAQ,iBAAiB;IACzB,MAAM,CAAwB;IAC9B,UAAU,CAAyB;IAEpD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAe,EAAE,IAAsC;QAC/E,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1F,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS;YACT,MAAM,EAAE;gBACN,wBAAwB,EAAE,OAAO;gBACjC,6BAA6B,EAAE,OAAO;gBACtC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACrC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAC3D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;oBACpC,OAAO,IAAI,CAAC,SAAS,CAAC;wBACpB,KAAK,EAAE;4BACL,gBAAgB,EAAE,KAAK;4BACvB,aAAa,EAAE,IAAI;4BACnB,cAAc,EAAE,IAAI;4BACpB,mBAAmB,EAAE;gCACnB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;6BACtD;4BACD,gBAAgB,EAAE;gCAChB,IAAI,EAAE,SAAS;gCACf,OAAO,EAAE,IAAI;gCACb,IAAI,EAAE,qCAAqC;6BAC5C;4BACD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;gCACnC,OAAO;oCACL,EAAE,EAAE,GAAG,GAAG,CAAC;oCACX,MAAM,EAAE,MAAM,CAAC,IAAI;oCACnB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;oCACpD,aAAa,EAAE;wCACb;4CACE,IAAI,EAAE,qBAAqB;4CAC3B,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;yCACpC;wCACD;4CACE,IAAI,EAAE,SAAS;4CACf,IAAI,EAAE,MAAM,CAAC,MAAM;yCACpB;qCACF;iCACF,CAAC;4BACJ,CAAC,CAAC;yBACH;qBACF,CAAC,CAAC;gBACL,CAAC,CAAC,CACH;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,YAAY,EAAE,IAAI,CAAC,YAAY;wBAC/B,WAAW,EAAE;4BACX,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE;4BAC5C,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE;yBAC5C;wBACD,WAAW,EAAE,IAAI;wBACjB,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,KAAK;gCACX,KAAK,EAAE,wBAAwB;gCAC/B,eAAe,EAAE;oCACf,UAAU,EAAE,IAAI;oCAChB,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE;iCACrC;gCACD,YAAY,EAAE;oCACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,mCAAmC,EAAE,OAAO,EAAE,YAAY,EAAE;iCAC1F;gCACD,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;oCACzC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;iCACxC;6BACF;yBACF;wBACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;wBAC7E,QAAQ,EAAE;4BACR,eAAe,EAAE;gCACf,+CAA+C,EAAE;oCAC/C;wCACE,MAAM,EAAE,GAAG;wCACX,eAAe,EAAE;4CACf,aAAa,EAAE;gDACb,gBAAgB,EAAE;oDAChB;wDACE,GAAG,EAAE,wBAAwB;wDAC7B,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;qDACpD;oDACD;wDACE,GAAG,EAAE,4BAA4B;wDACjC,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;qDACxD;iDACF;6CACF;4CACD,WAAW,EAAE,wBAAwB;yCACtC;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF"}

package/lib/externalDns/operator.d.ts

@@ -1,11 +1,11 @@
 import * as pulumi from "@pulumi/pulumi";
 import { ComponentResource } from "../common/index.js";
 export interface CloudflareArgs {
-    apiToken: pulumi.Input<string>;
+    token: pulumi.Input<string>;
     proxied?: pulumi.Input<boolean>;
 }
 export interface HetznerArgs {
-    apiToken: pulumi.Input<string>;
+    token: pulumi.Input<string>;
 }
 export interface ExternalDnsArgs {
     namespace?: pulumi.Input<string>;

package/lib/externalDns/operator.js

@@ -65,7 +65,7 @@ export class ExternalDns extends ComponentResource {
             this.providerSecret = new kubernetes.v1.Secret(`${name}-cloudflare`, {
                 metadata: { namespace: this.namespace, name: pulumi.interpolate `${name}-cloudflare` },
                 stringData: {
-                    cloudflare_api_token: pulumi.all([args.cloudflare]).apply(([cloudflare]) => cloudflare.apiToken),
+                    cloudflare_api_token: pulumi.all([args.cloudflare]).apply(([cloudflare]) => cloudflare.token),
                 },
             }, opts);
             helmValues.provider.name = "cloudflare";
@@ -93,33 +93,22 @@ export class ExternalDns extends ComponentResource {
             this.providerSecret = new kubernetes.v1.Secret(`${name}-hetzner`, {
                 metadata: { namespace: this.namespace, name: pulumi.interpolate `${name}-hetzner` },
                 stringData: {
-                    api_token: pulumi.all([args.hetzner]).apply(([hetzner]) => hetzner.apiToken),
+                    token: pulumi.all([args.hetzner]).apply(([hetzner]) => hetzner.token),
                 },
             }, opts);
             helmValues.provider.name = "webhook";
             helmValues.provider.webhook = {
-                image: { repository: "ghcr.io/mconfalonieri/external-dns-hetzner-webhook", tag: "latest" },
+                image: { repository: "docker.io/hetzner/external-dns-hetzner-webhook", tag: "v0.3.2" },
                 env: [
                     {
-                        name: "HETZNER_API_KEY",
-                        valueFrom: { secretKeyRef: { name: this.providerSecret.metadata.name, key: "api_token" } },
+                        name: "HETZNER_TOKEN",
+                        valueFrom: { secretKeyRef: { name: this.providerSecret.metadata.name, key: "token" } },
                     },
-                    { name: "DEFAULT_TTL", value: "3600" },
                 ],
                 resources: {
                     requests: { memory: "24Mi" },
                     limits: { memory: "32Mi" },
                 },
-                livenessProbe: {
-                    httpGet: { path: "/health", port: "http-webhook" },
-                    initialDelaySeconds: 10,
-                    timeoutSeconds: 5,
-                },
-                readinessProbe: {
-                    httpGet: { path: "/ready", port: "http-webhook" },
-                    initialDelaySeconds: 10,
-                    timeoutSeconds: 5,
-                },
             };
         }
         this.helmRelease = new kubernetes.helm.v3.Release(name, {

package/lib/externalDns/operator.js.map

@@ -1 +1 @@
-{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/externalDns/operator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAmBrD,MAAM,OAAO,WAAY,SAAQ,iBAAiB;IAC/B,cAAc,CAAsB;IACpC,WAAW,CAA6B;IACzC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAsC;QACrF,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAExC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC;QAEpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,UAAU,GAAG;YACjB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;YACtC,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;YACxB,SAAS,EAAE,CAAC,6BAA6B,EAAE,mBAAmB,CAAyC;YACvG,GAAG,EAAE,EAAkE;YACvE,QAAQ,EAAE;gBACR,IAAI,EAAE,SAA+B;gBACrC,OAAO,EAAE,SAQI;aACd;YACD,OAAO,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE;YAC9C,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACjC,QAAQ,EAAE;gBACR,eAAe,EAAE;oBACf,+CAA+C,EAAE;wBAC/C;4BACE,MAAM,EAAE,GAAG;4BACX,eAAe,EAAE;gCACf,aAAa,EAAE;oCACb,gBAAgB,EAAE;wCAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;wCAC3E,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;qCACtE;iCACF;gCACD,WAAW,EAAE,wBAAwB;6BACtC;yBACF;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC3B;SACF,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAC5C,GAAG,IAAI,aAAa,EACpB;gBACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,aAAa,EAAE;gBACrF,UAAU,EAAE;oBACV,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACjG;aACF,EACD,IAAI,CACL,CAAC;YAEF,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC;YAExC,UAAU,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC3G,SAAS,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBAEzD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;oBACvB,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACzC,CAAC;gBAED,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC3G,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,cAAc;oBACpB,SAAS,EAAE;wBACT,YAAY,EAAE;4BACZ,IAAI,EAAE,UAAU;4BAChB,GAAG,EAAE,sBAAsB;yBAC5B;qBACF;iBACF,CAAC,CAAC;gBAEH,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAC5C,GAAG,IAAI,UAAU,EACjB;gBACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,UAAU,EAAE;gBAClF,UAAU,EAAE;oBACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;iBAC7E;aACF,EACD,IAAI,CACL,CAAC;YAEF,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC;YACrC,UAAU,CAAC,QAAQ,CAAC,OAAO,GAAG;gBAC5B,KAAK,EAAE,EAAE,UAAU,EAAE,oDAAoD,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC1F,GAAG,EAAE;oBACH;wBACE,IAAI,EAAE,iBAAiB;wBACvB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE;qBAC3F;oBACD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE;iBACvC;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3B;gBACD,aAAa,EAAE;oBACb,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE;oBAClD,mBAAmB,EAAE,EAAE;oBACvB,cAAc,EAAE,CAAC;iBAClB;gBACD,cAAc,EAAE;oBACd,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;oBACjD,mBAAmB,EAAE,EAAE;oBACvB,cAAc,EAAE,CAAC;iBAClB;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,gDAAgD,EAAE;YAC1E,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,UAAU;SACnB,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/externalDns/operator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AAmBrD,MAAM,OAAO,WAAY,SAAQ,iBAAiB;IAC/B,cAAc,CAAsB;IACpC,WAAW,CAA6B;IACzC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAsC;QACrF,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAExC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC;QAEpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,UAAU,GAAG;YACjB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;YACtC,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;YACxB,SAAS,EAAE,CAAC,6BAA6B,EAAE,mBAAmB,CAAyC;YACvG,GAAG,EAAE,EAAkE;YACvE,QAAQ,EAAE;gBACR,IAAI,EAAE,SAA+B;gBACrC,OAAO,EAAE,SAQI;aACd;YACD,OAAO,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE;YAC9C,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACjC,QAAQ,EAAE;gBACR,eAAe,EAAE;oBACf,+CAA+C,EAAE;wBAC/C;4BACE,MAAM,EAAE,GAAG;4BACX,eAAe,EAAE;gCACf,aAAa,EAAE;oCACb,gBAAgB,EAAE;wCAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;wCAC3E,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;qCACtE;iCACF;gCACD,WAAW,EAAE,wBAAwB;6BACtC;yBACF;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC3B;SACF,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAC5C,GAAG,IAAI,aAAa,EACpB;gBACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,aAAa,EAAE;gBACrF,UAAU,EAAE;oBACV,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;iBAC9F;aACF,EACD,IAAI,CACL,CAAC;YAEF,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC;YAExC,UAAU,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC3G,SAAS,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBAEzD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;oBACvB,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACzC,CAAC;gBAED,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC3G,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,cAAc;oBACpB,SAAS,EAAE;wBACT,YAAY,EAAE;4BACZ,IAAI,EAAE,UAAU;4BAChB,GAAG,EAAE,sBAAsB;yBAC5B;qBACF;iBACF,CAAC,CAAC;gBAEH,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAC5C,GAAG,IAAI,UAAU,EACjB;gBACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,UAAU,EAAE;gBAClF,UAAU,EAAE;oBACV,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;iBACtE;aACF,EACD,IAAI,CACL,CAAC;YAEF,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC;YACrC,UAAU,CAAC,QAAQ,CAAC,OAAO,GAAG;gBAC5B,KAAK,EAAE,EAAE,UAAU,EAAE,gDAAgD,EAAE,GAAG,EAAE,QAAQ,EAAE;gBACtF,GAAG,EAAE;oBACH;wBACE,IAAI,EAAE,eAAe;wBACrB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;qBACvF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3B;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,gDAAgD,EAAE;YAC1E,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,UAAU;SACnB,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF"}

package/lib/fcos/assets/install-ready.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Create file to indicate the system is ready
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=touch /tmp/install-ready
+
+[Install]
+WantedBy=multi-user.target

package/lib/fcos/assets/install-run.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Run abitrary commands after provisioning
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/sbin/install-run
+ExecStartPost=/usr/bin/touch /etc/install-run.done
+ConditionPathExists=!/etc/install-run.done
+
+[Install]
+WantedBy=multi-user.target

package/lib/fcos/config.d.ts

@@ -1,9 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
 import { ComponentResource } from "../common/index.js";
-import { IgnitionArgs } from "../node/index.js";
-export interface ConfigArgs extends IgnitionArgs {
-    hostname: pulumi.Input<string>;
-}
+import { OperatingSystemConfigArgs } from "../node/index.js";
 export declare class Config extends ComponentResource {
     readonly ignitionConfig: pulumi.Output<string>;
     /**
@@ -12,7 +9,7 @@ export declare class Config extends ComponentResource {
      * @param args A bag of arguments to control the FCOS config creation.
      * @param opts A bag of options that control this resource's behavior.
      */
-    constructor(name: string, args: ConfigArgs, opts?: pulumi.ComponentResourceOptions);
+    constructor(name: string, args: OperatingSystemConfigArgs, opts?: pulumi.ComponentResourceOptions);
     private defaultConfig;
     private assetContent;
     private encodeContents;

package/lib/fcos/config.js

@@ -15,16 +15,8 @@ export class Config extends ComponentResource {
     constructor(name, args, opts) {
         super("fcos:config", name, args, opts);
         this.ignitionConfig = pulumi
-            .all([
-            this.defaultConfig(),
-            args.hostname,
-            args.users,
-            args.disks,
-            args.filesystems,
-            args.files,
-            args.systemdUnits,
-        ])
-            .apply(([config, hostname, users, disks, filesystems, files, systemdUnits]) => {
+            .all([this.defaultConfig(), args.hostname, args.packages, args.users, args.filesystems, args.files, args.run])
+            .apply(([config, hostname, packages, users, filesystems, files, run]) => {
             /* eslint-disable @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-unsafe-call */
             if (hostname !== undefined) {
                 config.storage.files.push({
@@ -34,30 +26,23 @@ export class Config extends ComponentResource {
                     overwrite: true,
                 });
             }
+            for (const pkg of packages ?? []) {
+                config.storage.files.push({
+                    path: `/etc/rpm-ostree-install/${pkg}`,
+                    contents: this.encodeContents(pkg),
+                    mode: 0o644,
+                    overwrite: true,
+                });
+            }
             for (const user of users ?? []) {
+                user.sshAuthorizedKeys = (user.sshAuthorizedKeys ?? []).map((key) => key.trim());
                 config.passwd.users.push(user);
             }
-            for (const disk of disks ?? []) {
-                config.storage.disks.push({
-                    device: disk.device,
-                    partitions: disk.partitions.map((partition) => {
-                        return {
-                            label: partition.label,
-                            size_mib: partition.size,
-                            start_mib: partition.start,
-                            number: partition.number,
-                            resize: partition.resize,
-                        };
-                    }),
-                    wipe_table: disk.wipeTable,
-                });
-            }
             for (const filesystem of filesystems ?? []) {
                 config.storage.filesystems.push({
                     device: filesystem.device,
                     path: filesystem.path,
                     format: filesystem.format,
-                    label: filesystem.label,
                 });
                 if (filesystem.path !== undefined) {
                     const checkSystemdName = filesystem.device.replace(/-/g, "\\x2d").replace(/^\//, "").replace(/\//g, "-");
@@ -85,12 +70,17 @@ export class Config extends ComponentResource {
                     path: file.path,
                     contents: this.encodeContents(file.contents),
                     mode: file.mode ?? 0o644,
-                    overwrite: file.overwrite ?? true,
+                    user: file.user,
+                    group: file.group,
+                    overwrite: true,
                 });
             }
-            for (const unit of systemdUnits ?? []) {
-                config.systemd.units.push(unit);
-            }
+            config.storage.files.push({
+                path: "/usr/local/sbin/install-run",
+                contents: this.encodeContents(["#!/bin/bash", "", ...(run ?? []), "", "exit 0"].join("\n")),
+                mode: 0o755,
+                overwrite: true,
+            });
             return JSON.stringify(config);
         });
         this.registerOutputs();
@@ -107,6 +97,12 @@ export class Config extends ComponentResource {
                 filesystems: [],
                 directories: [{ path: "/etc/rpm-ostree-install" }],
                 files: [
+                    {
+                        path: "/etc/modules-load.d/wireguard.conf",
+                        contents: this.encodeContents("wireguard"),
+                        mode: 0o644,
+                        overwrite: true,
+                    },
                     {
                         path: "/etc/sysctl.d/20-silence-audit.conf",
                         contents: this.encodeContents("kernel.printk=4"),
@@ -114,8 +110,12 @@ export class Config extends ComponentResource {
                         overwrite: true,
                     },
                     {
-                        path: "/etc/sysctl.d/10-fs-inotify.conf",
-                        contents: this.encodeContents("fs.inotify.max_user_instances = 8192\nfs.inotify.max_user_watches = 524288"),
+                        path: "/etc/sysctl.d/10-fs.conf",
+                        contents: this.encodeContents([
+                            "fs.file-max = 65536",
+                            "fs.inotify.max_user_instances = 8192",
+                            "fs.inotify.max_user_watches = 524288",
+                        ].join("\n")),
                         overwrite: true,
                     },
                     {
@@ -128,7 +128,6 @@ export class Config extends ComponentResource {
                         contents: this.encodeContents("net.ipv6.conf.all.forwarding = 1"),
                         overwrite: true,
                     },
-                    { path: "/etc/systemd/resolved.conf", append: [this.encodeContents("LLMNR=no")], overwrite: false },
                     {
                         path: "/usr/local/sbin/rpm-ostree-install",
                         contents: this.encodeContents(this.assetContent("rpm-ostree-install.sh")),
@@ -136,15 +135,26 @@ export class Config extends ComponentResource {
                         overwrite: true,
                     },
                 ],
-                links: [],
             },
             systemd: {
                 units: [
+                    { mask: true, name: "docker.service" },
+                    { mask: true, name: "docker.socket" },
                     {
                         name: "rpm-ostree-install.service",
                         enabled: true,
                         contents: this.assetContent("rpm-ostree-install.service"),
                     },
+                    {
+                        name: "install-ready.service",
+                        enabled: true,
+                        contents: this.assetContent("install-ready.service"),
+                    },
+                    {
+                        name: "install-run.service",
+                        enabled: true,
+                        contents: this.assetContent("install-run.service"),
+                    },
                 ],
             },
         };

package/lib/fcos/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../lib/fcos/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,KAAK,QAAQ,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAOvD,MAAM,OAAO,MAAO,SAAQ,iBAAiB;IAC3B,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,MAAM;aACzB,GAAG,CAAC;YACH,IAAI,CAAC,aAAa,EAAE;YACpB,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,YAAY;SAClB,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE;YAC5E,kGAAkG;YAClG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;oBACvC,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAgC,EAAE,EAAE;wBACnE,OAAO;4BACL,KAAK,EAAE,SAAS,CAAC,KAAK;4BACtB,QAAQ,EAAE,SAAS,CAAC,IAAI;4BACxB,SAAS,EAAE,SAAS,CAAC,KAAK;4BAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;4BACxB,MAAM,EAAE,SAAS,CAAC,MAAM;yBACzB,CAAC;oBACJ,CAAC,CAAC;oBACF,UAAU,EAAE,IAAI,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,UAAU,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;oBAC9B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;iBACxB,CAAC,CAAC;gBAEH,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAEzG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;wBACxB,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ;wBACvE,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE;4BACR,QAAQ;4BACR,wBAAwB;4BACxB,yBAAyB,gBAAgB,UAAU;4BACnD,sBAAsB,gBAAgB,UAAU;4BAChD,SAAS;4BACT,SAAS,UAAU,CAAC,IAAI,EAAE;4BAC1B,QAAQ,UAAU,CAAC,MAAM,EAAE;4BAC3B,QAAQ,UAAU,CAAC,MAAM,EAAE;4BAC3B,0BAA0B;4BAC1B,WAAW;4BACX,4BAA4B;yBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC5C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;oBACxB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;gBACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,8DAA8D;IACtD,aAAa;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;YAC9B,MAAM,EAAE;gBACN,KAAK,EAAE,EAAE;aACV;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,EAAE;gBACT,WAAW,EAAE,EAAE;gBACf,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;gBAClD,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,qCAAqC;wBAC3C,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;wBAChD,IAAI,EAAE,KAAK;wBACX,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,kCAAkC;wBACxC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,4EAA4E,CAAC;wBAC3G,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,uCAAuC;wBAC7C,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBACxD,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,0CAA0C;wBAChD,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,kCAAkC,CAAC;wBACjE,SAAS,EAAE,IAAI;qBAChB;oBACD,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;oBACnG;wBACE,IAAI,EAAE,oCAAoC;wBAC1C,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;wBACzE,IAAI,EAAE,KAAK;wBACX,SAAS,EAAE,IAAI;qBAChB;iBACF;gBACD,KAAK,EAAE,EAAE;aACV;YACD,OAAO,EAAE;gBACP,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,4BAA4B;wBAClC,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC;qBAC1D;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,mEAAmE;QACnE,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IACnH,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,OAAO;YACL,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;SAChG,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../lib/fcos/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,KAAK,QAAQ,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,MAAM,OAAO,MAAO,SAAQ,iBAAiB;IAC3B,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAA+B,EAAE,IAAsC;QAC/F,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,MAAM;aACzB,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAC7G,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE;YACtE,kGAAkG;YAClG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;oBACvC,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACjC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,2BAA2B,GAAG,EAAE;oBACtC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;oBAClC,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAEjF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YAED,KAAK,MAAM,UAAU,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;oBAC9B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAEzG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;wBACxB,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ;wBACvE,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE;4BACR,QAAQ;4BACR,wBAAwB;4BACxB,yBAAyB,gBAAgB,UAAU;4BACnD,sBAAsB,gBAAgB,UAAU;4BAChD,SAAS;4BACT,SAAS,UAAU,CAAC,IAAI,EAAE;4BAC1B,QAAQ,UAAU,CAAC,MAAM,EAAE;4BAC3B,QAAQ,UAAU,CAAC,MAAM,EAAE;4BAC3B,0BAA0B;4BAC1B,WAAW;4BACX,4BAA4B;yBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC5C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;oBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3F,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,8DAA8D;IACtD,aAAa;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;YAC9B,MAAM,EAAE;gBACN,KAAK,EAAE,EAAE;aACV;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,EAAE;gBACT,WAAW,EAAE,EAAE;gBACf,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;gBAClD,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,oCAAoC;wBAC1C,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;wBAC1C,IAAI,EAAE,KAAK;wBACX,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,qCAAqC;wBAC3C,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;wBAChD,IAAI,EAAE,KAAK;wBACX,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,0BAA0B;wBAChC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAC3B;4BACE,qBAAqB;4BACrB,sCAAsC;4BACtC,sCAAsC;yBACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;wBACD,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,uCAAuC;wBAC7C,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBACxD,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,0CAA0C;wBAChD,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,kCAAkC,CAAC;wBACjE,SAAS,EAAE,IAAI;qBAChB;oBACD;wBACE,IAAI,EAAE,oCAAoC;wBAC1C,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;wBACzE,IAAI,EAAE,KAAK;wBACX,SAAS,EAAE,IAAI;qBAChB;iBACF;aACF;YACD,OAAO,EAAE;gBACP,KAAK,EAAE;oBACL,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE;oBACtC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE;oBACrC;wBACE,IAAI,EAAE,4BAA4B;wBAClC,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC;qBAC1D;oBACD;wBACE,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,uBAAuB,CAAC;qBACrD;oBACD;wBACE,IAAI,EAAE,qBAAqB;wBAC3B,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC;qBACnD;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,mEAAmE;QACnE,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IACnH,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,OAAO;YACL,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;SAChG,CAAC;IACJ,CAAC;CACF"}

package/lib/fcos/host.d.ts

@@ -1,21 +1,17 @@
 import * as pulumi from "@pulumi/pulumi";
 import * as tls from "@pulumi/tls";
 import { ComponentResource } from "../common/index.js";
-import { ConfigArgs } from "./config.js";
-export interface HostUserArgs {
-    name: pulumi.Input<string>;
-    groups?: pulumi.Input<pulumi.Input<string>[]>;
-}
-export interface HostArgs extends ConfigArgs {
-    sshUsers?: pulumi.Input<pulumi.Input<HostUserArgs>[]>;
+import { OperatingSystemConfigArgs } from "../node/index.js";
+export interface HostArgs extends OperatingSystemConfigArgs {
+    sshAuthorizedKeys?: pulumi.Input<pulumi.Input<string>[]>;
 }
 export declare class Host extends ComponentResource {
-    private static readonly defaultModules;
+    static readonly defaultUsername = "core";
+    private static readonly defaultDeployUsername;
     private static readonly defaultPackages;
-    readonly sshPrivateKeys: pulumi.Output<{
-        [key: string]: tls.PrivateKey;
-    }>;
-    readonly ignitionConfig: pulumi.Output<string>;
+    readonly deployUsername: string;
+    readonly deployPrivateKey: tls.PrivateKey;
+    readonly initConfig: pulumi.Output<string>;
     /**
      * Create a new FCOS host resource.
      * @param name The name of the FCOS host resource.

package/lib/fcos/host.js

@@ -3,17 +3,20 @@ import * as tls from "@pulumi/tls";
 import { ComponentResource } from "../common/index.js";
 import { Config } from "./config.js";
 export class Host extends ComponentResource {
-    static defaultModules = ["wireguard"];
+    static defaultUsername = "core";
+    static defaultDeployUsername = "pulumi";
     static defaultPackages = [
         "netcat",
         "tcpdump",
         "iperf3",
         "htop",
-        "golang-gvisor",
-        "container-selinux",
+        "glances",
+        "tmux",
+        "smartmontools",
     ];
-    sshPrivateKeys;
-    ignitionConfig;
+    deployUsername;
+    deployPrivateKey;
+    initConfig;
     /**
      * Create a new FCOS host resource.
      * @param name The name of the FCOS host resource.
@@ -23,45 +26,48 @@ export class Host extends ComponentResource {
     constructor(name, args, opts) {
         super("fcos:host", name, args, opts);
         const emptyOpts = this.opts();
-        this.sshPrivateKeys = pulumi.all([args.sshUsers]).apply(([sshUsers]) => {
-            const sshPrivateKeys = {};
-            for (const sshUser of sshUsers ?? []) {
-                sshPrivateKeys[sshUser.name] = new tls.PrivateKey(`${name}-${sshUser.name}`, { algorithm: "ED25519" }, emptyOpts);
-            }
-            return sshPrivateKeys;
-        });
-        this.ignitionConfig = new Config(name, {
+        this.deployUsername = Host.defaultDeployUsername;
+        this.deployPrivateKey = new tls.PrivateKey(`${name}-${Host.defaultDeployUsername}`, { algorithm: "ED25519" }, emptyOpts);
+        this.initConfig = new Config(name, {
             ...args,
-            files: pulumi.all([args.files ?? []]).apply(([files]) => files.concat(Host.defaultModules
-                .map((module) => ({
-                path: `/etc/modules-load.d/${module}.conf`,
-                contents: module,
-                mode: 0o644,
-            }))
-                .concat(Host.defaultPackages.map((pkg) => ({
-                path: `/etc/rpm-ostree-install/${pkg}`,
-                contents: "",
-                mode: 0o644,
-            }))))),
+            packages: pulumi
+                .all([args.packages])
+                .apply(([packages]) => pulumi.all(packages ?? []).apply((packages) => packages.concat(Host.defaultPackages))),
             users: pulumi
-                .all([args.users, args.sshUsers, this.sshPrivateKeys])
-                .apply(([users, sshUsers, sshPrivateKeys]) => {
-                const allUsers = [];
-                for (const user of users ?? []) {
-                    allUsers.push(user);
+                .all([this.deployUsername, this.deployPrivateKey.publicKeyOpenssh, args.users, args.sshAuthorizedKeys])
+                .apply(([deployUsername, deployPublicKeyOpenssh, users, sshAuthorizedKeys]) => pulumi.all(users ?? []).apply((users) => {
+                let foundDefaultUser = false;
+                let foundDeployUser = false;
+                for (const user of users) {
+                    if (user.name === Host.defaultUsername) {
+                        user.sshAuthorizedKeys = (sshAuthorizedKeys ?? []).concat(user.sshAuthorizedKeys ?? []);
+                        user.groups = (user.groups ?? []).concat(["sudo"]);
+                        user.lockPasswd = true;
+                        foundDefaultUser = true;
+                    }
+                    if (user.name === deployUsername) {
+                        user.sshAuthorizedKeys = [deployPublicKeyOpenssh].concat(user.sshAuthorizedKeys ?? []);
+                        user.groups = (user.groups ?? []).concat(["sudo"]);
+                        user.lockPasswd = true;
+                        foundDeployUser = true;
+                    }
                 }
-                for (const sshUser of sshUsers ?? []) {
-                    allUsers.push({
-                        name: sshUser.name,
-                        groups: sshUser.groups,
-                        sshAuthorizedKeys: sshPrivateKeys[sshUser.name].publicKeyOpenssh.apply((key) => [key.trim()]),
+                if (!foundDefaultUser) {
+                    users.push({
+                        name: Host.defaultUsername,
+                        groups: ["sudo"],
+                        sshAuthorizedKeys,
                     });
                 }
-                return allUsers;
-            }),
-            systemdUnits: pulumi
-                .all([args.systemdUnits])
-                .apply(([systemdUnits]) => (systemdUnits ?? []).concat({ mask: true, name: "docker.service" }, { mask: true, name: "docker.socket" })),
+                if (!foundDeployUser) {
+                    users.push({
+                        name: deployUsername,
+                        groups: ["sudo"],
+                        sshAuthorizedKeys: [deployPublicKeyOpenssh],
+                    });
+                }
+                return users;
+            })),
         }, emptyOpts).ignitionConfig;
         this.registerOutputs();
     }

package/lib/fcos/host.js.map

@@ -1 +1 @@
-{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../lib/fcos/host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAc,MAAM,EAAE,MAAM,aAAa,CAAC;AAWjD,MAAM,OAAO,IAAK,SAAQ,iBAAiB;IACjC,MAAM,CAAU,cAAc,GAAa,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,CAAU,eAAe,GAAa;QAClD,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,MAAM;QACN,eAAe;QACf,mBAAmB;KACpB,CAAC;IAEc,cAAc,CAAmD;IACjE,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAc,EAAE,IAAsC;QAC9E,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE;YACrE,MAAM,cAAc,GAAsC,EAAE,CAAC;YAE7D,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACrC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAC/C,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EACzB,EAAE,SAAS,EAAE,SAAS,EAAE,EACxB,SAAS,CACV,CAAC;YACJ,CAAC;YAED,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,GAAG,IAAI,MAAM,CAC9B,IAAI,EACJ;YACE,GAAG,IAAI;YACP,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CACtD,KAAK,CAAC,MAAM,CACV,IAAI,CAAC,cAAc;iBAChB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChB,IAAI,EAAE,uBAAuB,MAAM,OAAO;gBAC1C,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;iBACF,MAAM,CACL,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACjC,IAAI,EAAE,2BAA2B,GAAG,EAAE;gBACtC,QAAQ,EAAE,EAAE;gBACZ,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC,CACJ,CACJ,CACF;YACD,KAAK,EAAE,MAAM;iBACV,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;iBACrD,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAqC,EAAE,CAAC;gBAEtD,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBAED,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;oBACrC,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,iBAAiB,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;qBAC9F,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC;YACJ,YAAY,EAAE,MAAM;iBACjB,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;iBACxB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CACxB,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAC3G;SACJ,EACD,SAAS,CACV,CAAC,cAAc,CAAC;QAEjB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC"}
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../lib/fcos/host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAMrC,MAAM,OAAO,IAAK,SAAQ,iBAAiB;IAClC,MAAM,CAAU,eAAe,GAAG,MAAM,CAAC;IACxC,MAAM,CAAU,qBAAqB,GAAG,QAAQ,CAAC;IACjD,MAAM,CAAU,eAAe,GAAa;QAClD,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,MAAM;QACN,SAAS;QACT,MAAM;QACN,eAAe;KAChB,CAAC;IACc,cAAc,CAAS;IACvB,gBAAgB,CAAiB;IACjC,UAAU,CAAwB;IAElD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAc,EAAE,IAAsC;QAC9E,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAEjD,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,UAAU,CACxC,GAAG,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,EACvC,EAAE,SAAS,EAAE,SAAS,EAAE,EACxB,SAAS,CACV,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,MAAM,CAC1B,IAAI,EACJ;YACE,GAAG,IAAI;YACP,QAAQ,EAAE,MAAM;iBACb,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;iBACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YAC/G,KAAK,EAAE,MAAM;iBACV,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;iBACtG,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,sBAAsB,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtC,IAAI,gBAAgB,GAAG,KAAK,CAAC;gBAC7B,IAAI,eAAe,GAAG,KAAK,CAAC;gBAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;wBACvC,IAAI,CAAC,iBAAiB,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;wBACxF,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;wBACnD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;wBAEvB,gBAAgB,GAAG,IAAI,CAAC;oBAC1B,CAAC;oBAED,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;wBACjC,IAAI,CAAC,iBAAiB,GAAG,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;wBACvF,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;wBACnD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;wBAEvB,eAAe,GAAG,IAAI,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,IAAI,CAAC,eAAe;wBAC1B,MAAM,EAAE,CAAC,MAAM,CAAC;wBAChB,iBAAiB;qBAClB,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,cAAc;wBACpB,MAAM,EAAE,CAAC,MAAM,CAAC;wBAChB,iBAAiB,EAAE,CAAC,sBAAsB,CAAC;qBAC5C,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CACH;SACJ,EACD,SAAS,CACV,CAAC,cAAc,CAAC;QAEjB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC"}

package/lib/fcos/index.d.ts

@@ -1,3 +1,3 @@
-import { ConfigArgs, Config } from "./config.js";
-import { HostUserArgs, HostArgs, Host } from "./host.js";
-export { ConfigArgs, Config, HostUserArgs, HostArgs, Host };
+import { Config } from "./config.js";
+import { HostArgs, Host } from "./host.js";
+export { Config, HostArgs, Host };

package/lib/fcos/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/fcos/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,MAAM,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAA0B,IAAI,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAc,MAAM,EAA0B,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/fcos/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAY,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,MAAM,EAAY,IAAI,EAAE,CAAC"}

package/lib/flatcar/assets/install-ready.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Create file to indicate the system is ready
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=touch /tmp/install-ready
+
+[Install]
+WantedBy=multi-user.target

package/lib/flatcar/assets/install-run.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Run abitrary commands after provisioning
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/sbin/install-run
+ExecStartPost=/usr/bin/touch /etc/install-run.done
+ConditionPathExists=!/etc/install-run.done
+
+[Install]
+WantedBy=multi-user.target