44r0n7
0265afa054
Import the runnable game code, content, docs, scripts, and repo guidance while leaving local agent state, dependency installs, build output, and backup copies out of the published tree.
104 lines
3.4 KiB
Bash
Executable File
104 lines
3.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Profile: sc-build-machine (vulcan)
|
|
# Role: Arch Linux build machine — compiles AxiomFlow artifacts, runs scheduled
|
|
# jobs, deploys to hermes. Intentionally different distro from Debian servers.
|
|
# Distro: Arch Linux cloud image
|
|
|
|
DOMAIN="sc-build-machine"
|
|
HOSTNAME="vulcan"
|
|
RAM_MB=768
|
|
VCPUS=2
|
|
DISK_SIZE="10G"
|
|
GRAPHICS="vnc"
|
|
BASE_URL="https://geo.mirror.pkgbuild.com/images/latest/Arch-Linux-x86_64-cloudimg.qcow2"
|
|
BASE_IMAGE="$SC_BASE_DIR/Arch-Linux-x86_64-cloudimg.qcow2"
|
|
|
|
generate_user_data() {
|
|
cat <<EOF
|
|
#cloud-config
|
|
hostname: ${HOSTNAME}
|
|
fqdn: ${HOSTNAME}.axiomworks.internal
|
|
manage_etc_hosts: false
|
|
ssh_pwauth: false
|
|
users:
|
|
- default
|
|
- name: player
|
|
gecos: Axiom Works Builder
|
|
groups: [wheel]
|
|
shell: /bin/bash
|
|
sudo: ["ALL=(ALL) NOPASSWD:ALL"]
|
|
ssh_authorized_keys:
|
|
- ${PUBKEY}
|
|
write_files:
|
|
- path: /etc/hosts
|
|
owner: root:root
|
|
permissions: '0644'
|
|
content: |
|
|
127.0.0.1 localhost
|
|
127.0.1.1 vulcan vulcan.axiomworks.internal
|
|
${GAME_HOST_IP} axiomworks.internal portal.axiomworks.internal
|
|
10.42.0.40 hermes hermes.axiomworks.internal
|
|
- path: /etc/sudoers.d/99-player
|
|
owner: root:root
|
|
permissions: '0440'
|
|
content: |
|
|
player ALL=(ALL) NOPASSWD:ALL
|
|
- path: /etc/sysctl.d/99-sc-vulcan.conf
|
|
owner: root:root
|
|
permissions: '0644'
|
|
content: |
|
|
vm.swappiness=10
|
|
vm.vfs_cache_pressure=50
|
|
vm.dirty_ratio=25
|
|
vm.dirty_background_ratio=5
|
|
net.ipv6.conf.all.disable_ipv6=1
|
|
net.ipv6.conf.default.disable_ipv6=1
|
|
- path: /home/player/.bashrc
|
|
owner: root:root
|
|
permissions: '0644'
|
|
content: |
|
|
[ -z "\$PS1" ] && return
|
|
export PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin
|
|
export TERM=xterm-256color
|
|
export EDITOR=vim
|
|
PS1='\[\e[0;35m\]\u@\h\[\e[0m\]:\[\e[0;34m\]\w\[\e[0m\]\$ '
|
|
HISTSIZE=5000
|
|
HISTFILESIZE=10000
|
|
HISTCONTROL=ignoredups:erasedups
|
|
shopt -s histappend
|
|
alias ll='ls -lh --color=auto'
|
|
alias la='ls -lha --color=auto'
|
|
alias grep='grep --color=auto'
|
|
alias ..='cd ..'
|
|
alias pacs='pacman -Ss'
|
|
alias paci='sudo pacman -S'
|
|
alias pacq='pacman -Qi'
|
|
if [ -f /usr/share/bash-completion/bash_completion ]; then
|
|
. /usr/share/bash-completion/bash_completion
|
|
fi
|
|
- path: /home/player/.bash_profile
|
|
owner: root:root
|
|
permissions: '0644'
|
|
content: |
|
|
[[ -f ~/.bashrc ]] && . ~/.bashrc
|
|
runcmd:
|
|
- pacman -Sy --noconfirm archlinux-keyring
|
|
- pacman -Su --noconfirm
|
|
- pacman -S --noconfirm --needed sudo openssh qemu-guest-agent base-devel git inetutils iproute2 curl wget rsync vim nano htop python python-pip jq less tree unzip tcpdump lsof strace bind-tools openbsd-netcat bash-completion
|
|
- systemctl enable qemu-guest-agent sshd
|
|
- systemctl start qemu-guest-agent sshd
|
|
- mkdir -p /srv/repo /srv/builds /var/log/axiomworks
|
|
- printf 'vulcan — AxiomFlow build machine\n' > /srv/repo/README.txt
|
|
- dd if=/dev/zero of=/swapfile bs=1M count=1024 status=progress
|
|
- chmod 600 /swapfile
|
|
- mkswap /swapfile
|
|
- swapon /swapfile
|
|
- echo '/swapfile none swap sw 0 0' >> /etc/fstab
|
|
- sysctl -p /etc/sysctl.d/99-sc-vulcan.conf
|
|
- chown -R player:player /home/player /srv/repo /srv/builds
|
|
- systemctl disable ModemManager || true
|
|
- systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target
|
|
final_message: "Vulcan build machine is ready."
|
|
EOF
|
|
}
|