user-data.j2

#cloud-config
# vim: syntax=yaml

timezone: 'America/New_York'

users:
  - name: opc
    ssh_authorized_keys:
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ4+TVVmMa9BEk+gHJkYuoVv7SLBe+vyD8rc
write_files:
  - path: /usr/lib/tmpfiles.d/oracle-tmp-files.conf
    content: |
      # Do not remove Oracle tmp files
      x /tmp/.oracle*
      x /var/tmp/.oracle*
    owner: 'root:root'
    permissions: '0644'
  - path: /etc/chrony.conf
    content: |
      server 10.1.0.1 iburst minpoll 6 maxpoll 10 xleave
      driftfile /var/lib/chrony/drift
      makestep 0.1 3
      rtcsync
      logdir /var/log/chrony
    owner: 'root:root'
    permissions: '0644'
  - path: /etc/sysctl.d/99-kernel-panic.conf
    content: |
      kernel.panic=1
    owner: 'root:root'
    permissions: '0644'
  - path: /etc/fstab
    content: |
      10.1.0.5:/mnt/rust/oradepot   /mnt/oradepot   nfs defaults    0   0
    append: true
  - path: /etc/yum.repos.d/local.repo
    content: |
      [local_ol8_baseos_latest]
      name=Oracle Linux $releasever Latest ($basearch)
      baseurl=http://10.1.0.4:8080/repo/OracleLinux/ol8_baseos_latest/$basearch/
      gpgkey=http://10.1.0.4:8080/RPM-GPG-KEY-oracle-ol8
      gpgcheck=1
      enabled=1

      [local_ol8_appstream]
      name=Oracle Linux AppStream $releasever Latest ($basearch)
      baseurl=http://10.1.0.4:8080/repo/OracleLinux/ol8_appstream/$basearch/
      gpgkey=http://10.1.0.4:8080/RPM-GPG-KEY-oracle-ol8
      gpgcheck=1
      enabled=1

      [local_ol8_UEKR7]
      name=Latest Unbreakable Enterprise Kernel for Oracle Linux $releasever ($basearch)
      baseurl=http://10.1.0.4:8080/repo/OracleLinux/ol8_UEKR7/$basearch/
      gpgkey=http://10.1.0.4:8080/RPM-GPG-KEY-oracle-ol8
      gpgcheck=1
      enabled=1
    owner: 'root:root'
    permissions: '0644'

runcmd:
  # Grow the partition for rootfs
  - growpart /dev/sda 4
  # add 6GB to swap for a total of 10G
  - lvextend -L+6G /dev/mapper/vg_main-lv_swap
  # recreate swap
  - swapoff /dev/mapper/vg_main-lv_swap
  - mkswap /dev/mapper/vg_main-lv_swap
  - swapon /dev/mapper/vg_main-lv_swap
  # extend the default lv to all available
  - lvextend -l +100%FREE /dev/mapper/vg_main-lv_root
  # grow the file system
  - xfs_growfs /dev/mapper/vg_main-lv_root
  # Disable Selinux
  - sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
  - sed -i "s/RemoveIPC.*/RemoveIPC=no/g" /etc/ssh/sshd_config
  # backup default repo configuration
  # - mkdir -p /root/repo-backups
  # - cp /etc/yum.repos.d/*.repo /root/repo-backups/ 2> /dev/null || true
  - sed -i.bak 's/enabled=1/enabled=0/g' /etc/yum.repos.d/oracle-linux-ol8.repo
  - sed -i.bak 's/enabled=1/enabled=0/g' /etc/yum.repos.d/uek-ol8.repo 2>/dev/null || true
  - sed -i.bak 's/enabled=1/enabled=0/g' /etc/yum.repos.d/ol8_*.repo 2>/dev/null || true
  - mkdir /u01
  - mkdir /mnt/oradepot
  - chown oracle:oinstall /u01
  - shutdown -h now

package_update: true
package_upgrade: true
packages:
  - bind-utils
  - dnf-utils
  - elfutils-libelf-devel
  - expect
  - libvirt-devel
  - libvirt-libs
  - libX11
  - libXext
  - libXt
  - lsof
  - net-tools
  - network-scripts
  - nfs-utils
  - oracle-database-preinstall-19c
  - parted
  - python36
  - redhat-lsb-core
  - rsync
  - selinux-policy-devel
  - strace
  - wget
  - git
  - ansible-core