47 lines
1.4 KiB
Bash
47 lines
1.4 KiB
Bash
|
#!/bin/bash
|
||
|
|
# enhance-vm-template.sh
|
||
|
|
# Template for enhancing VM YAML files - use as reference
|
||
|
|
|
||
|
|
# This script shows the pattern for enhancing VM YAML files
|
||
|
|
# Apply these changes to each VM file:
|
||
|
|
|
||
|
|
# 1. Add packages after lsb-release:
|
||
|
|
# - chrony
|
||
|
|
# - unattended-upgrades
|
||
|
|
# - apt-listchanges
|
||
|
|
|
||
|
|
# 2. Add NTP configuration after package_upgrade:
|
||
|
|
# # Time synchronization (NTP)
|
||
|
|
# ntp:
|
||
|
|
# enabled: true
|
||
|
|
# ntp_client: chrony
|
||
|
|
# servers:
|
||
|
|
# - 0.pool.ntp.org
|
||
|
|
# - 1.pool.ntp.org
|
||
|
|
# - 2.pool.ntp.org
|
||
|
|
# - 3.pool.ntp.org
|
||
|
|
|
||
|
|
# 3. Update package verification:
|
||
|
|
# for pkg in qemu-guest-agent curl wget net-tools chrony unattended-upgrades; do
|
||
|
|
|
||
|
|
# 4. Add security configuration before final_message:
|
||
|
|
# # Configure automatic security updates
|
||
|
|
# # Configure NTP (Chrony)
|
||
|
|
# # SSH hardening
|
||
|
|
|
||
|
|
# 5. Add write_files section before final_message:
|
||
|
|
# write_files:
|
||
|
|
# - path: /etc/apt/apt.conf.d/20auto-upgrades
|
||
|
|
# content: |
|
||
|
|
# APT::Periodic::Update-Package-Lists "1";
|
||
|
|
# APT::Periodic::Download-Upgradeable-Packages "1";
|
||
|
|
# APT::Periodic::AutocleanInterval "7";
|
||
|
|
# APT::Periodic::Unattended-Upgrade "1";
|
||
|
|
# permissions: '0644'
|
||
|
|
# owner: root:root
|
||
|
|
|
||
|
|
# 6. Enhance final_message with comprehensive status
|
||
|
|
|
||
|
|
echo "This is a template script - use as reference for manual updates"
|
||
|
|
|