Hermes 284313f908
Some checks are pending
Bidi Control Character Guard / bidi-control-guard (push) Waiting to run
Circular Dependency Check / Check for new circular dependencies (push) Waiting to run
Citus Migration Smoke / Combined migrations on single-node Citus (push) Waiting to run
E2E Fresh Install Tests / fresh-install-e2e (push) Waiting to run
ext-v2 guardrails / Run ext-v2 guard and ESLint (push) Waiting to run
Integration Tests / Check for relevant changes (push) Waiting to run
Integration Tests / ${{ (github.event_name == 'schedule' || github.event.inputs.suite == 'full') && 'Full integration suite' || 'Tier-1 integration subset' }} (push) Blocked by required conditions
Mobile checks / Mobile lint + typecheck (push) Waiting to run
Mobile checks / Mobile unit tests (push) Waiting to run
Mobile checks / Mobile dependency audit (report) (push) Waiting to run
Mobile checks / Mobile reproducibility checks (push) Waiting to run
Secrets guard (env backups) / Ensure no tracked env backup files (push) Waiting to run
Temporal Readiness / fast-readiness (push) Waiting to run
Temporal Readiness / docker-parity (push) Waiting to run
TypeScript Type Check / Nx affected typecheck (push) Waiting to run
Unit Tests / Skipped-test budget (push) Waiting to run
Unit Tests / Nx affected unit tests (push) Waiting to run
Unit Tests / Server unit coverage (informational) (push) Waiting to run
Validate Tenant Management Schema / Check for relevant changes (push) Waiting to run
Validate Tenant Management Schema / Validate Tenant Management Schema (push) Blocked by required conditions
EE Workflows Build Guard / ee-workflows-build-guard (push) Waiting to run
Initial import of AlgaPSA codebase from PSA server
Excluded: .git, node_modules, secrets/, compose.env, assemblyscript tgz

Source: /opt/alga-psa on psa.joliet.tech
2026-06-22 16:12:17 -05:00

65 lines
3.2 KiB
Plaintext

#cloud-config
autoinstall:
version: 1
interactive-sections:
- network
- storage
- identity
locale: en_US.UTF-8
keyboard:
layout: us
timezone: UTC
apt:
geoip: true
preserve_sources_list: false
# identity is collected interactively on the Subiquity "Profile setup" screen:
# the operator creates their own login account (name, server name, username,
# password). No credential is baked into the image, and nothing downstream
# depends on a fixed username — systemd units run as root and the management
# password for the setup UI is a separate, in-app credential.
ssh:
install-server: true
allow-pw: true
storage:
layout:
name: direct
sizing-policy: all
packages:
- ca-certificates
- curl
- git
- jq
- net-tools
- nodejs
- openssh-server
- unzip
- ufw
user-data:
disable_root: true
late-commands:
- mkdir -p /target/opt/alga-appliance /target/etc/alga-appliance /target/var/lib/alga-appliance /target/var/log/alga-appliance
- bash -lc 'if [ -d /cdrom/alga-overlay ]; then cp -a /cdrom/alga-overlay/. /target/; fi'
- curtin in-target --target=/target -- chown -R root:root /opt/alga-appliance /etc/alga-appliance /var/lib/alga-appliance /var/log/alga-appliance
- curtin in-target --target=/target -- chmod 0755 /opt/alga-appliance
- curtin in-target --target=/target -- chmod 0750 /etc/alga-appliance /var/lib/alga-appliance /var/log/alga-appliance
- curtin in-target --target=/target -- find /opt/alga-appliance -type f -name '*.sh' -exec chmod 0755 {} \;
- curtin in-target --target=/target -- chmod 0755 /opt/alga-appliance/appliance
- curtin in-target --target=/target -- bash -lc 'if [ -x /opt/alga-appliance/bin/alga-appliance-reset-admin ]; then ln -sf /opt/alga-appliance/bin/alga-appliance-reset-admin /usr/local/bin/alga-appliance-reset-admin; fi'
- curtin in-target --target=/target -- bash -lc 'if command -v vgs >/dev/null 2>&1 && command -v lvextend >/dev/null 2>&1 && vgs --noheadings -o vg_free --units b --nosuffix ubuntu-vg 2>/dev/null | awk '\''{ exit !($1 > 0) }'\''; then lvextend -r -l +100%FREE /dev/ubuntu-vg/ubuntu-lv || true; fi'
- mkdir -p /target/etc/alga-appliance
- touch /target/etc/alga-appliance/booted-from-disk
- curtin in-target --target=/target -- bash -lc 'if command -v ssh-keygen >/dev/null 2>&1; then rm -f /etc/ssh/ssh_host_* && ssh-keygen -A; fi'
- curtin in-target --target=/target -- bash -lc 'if [ -f /etc/systemd/system/alga-appliance.service ] || [ -L /etc/systemd/system/alga-appliance.service ]; then systemctl disable alga-appliance.service || true; systemctl mask alga-appliance.service || true; fi'
- curtin in-target --target=/target -- bash -lc 'if [ -f /etc/systemd/system/alga-appliance-console.service ]; then systemctl enable alga-appliance-console.service; fi'
- curtin in-target --target=/target -- bash -lc 'if [ -f /etc/systemd/system/alga-appliance-bootstrap.service ]; then systemctl enable alga-appliance-bootstrap.service; fi'
- curtin in-target --target=/target -- bash -lc 'if [ -f /etc/systemd/system/alga-host-agent.service ]; then systemctl enable alga-host-agent.service; fi'
shutdown: reboot