packer: use lvm, optimize and harden debian template

1 files changed, 31 insertions, 30 deletions

diff --git a/packer/debian-server-bookworm/files/cloud.cfg b/packer/debian-server-bookworm/files/cloud.cfg
index 29d451e..5a984b2 100644
--- a/packer/debian-server-bookworm/files/cloud.cfg
+++ b/packer/debian-server-bookworm/files/cloud.cfg
@@ -1,6 +1,12 @@
 # The top level settings are used as module
 # and system configuration.
 
+# A set of users which may be applied and/or used by various modules
+# when a 'default' entry is found it will reference the 'default_user'
+# from the distro configuration specified below
+users:
+   - default
+
 # If this is set, 'root' will not be able to ssh in and they
 # will get a message to login instead as the above $user (debian)
 disable_root: true
@@ -36,38 +42,32 @@ cloud_init_modules:
 cloud_config_modules:
 # Emit the cloud config ready event
 # this can be used by upstart jobs for 'start on cloud-config'.
- - emit_upstart
- - ssh-import-id
- - locale
- - set-passwords
- - grub-dpkg
- - apt-pipelining
- - apt-configure
- - ntp
- - timezone
- - disable-ec2-metadata
- - runcmd
- - byobu
+cloud_config_modules:
+  - emit_upstart
+  - ssh-import-id
+  - locale
+  - set-passwords
+  - grub-dpkg
+  - apt-pipelining
+  - apt-configure
+  - ntp
+  - timezone
+  - disable-ec2-metadata
+  - runcmd
+  - byobu
 
 # The modules that run in the 'final' stage
 cloud_final_modules:
- - package-update-upgrade-install
- - fan
- - puppet
- - chef
- - salt-minion
- - mcollective
- - rightscale_userdata
- - scripts-vendor
- - scripts-per-once
- - scripts-per-boot
- - scripts-per-instance
- - scripts-user
- - ssh-authkey-fingerprints
- - keys-to-console
- - phone-home
- - final-message
- - power-state-change
+  - package-update-upgrade-install
+  - scripts-vendor
+  - scripts-per-once
+  - scripts-per-boot
+  - scripts-per-instance
+  - scripts-user
+  - ssh-authkey-fingerprints
+  - keys-to-console
+  - final-message
+  - power-state-change
 
 final_message: "The system is finally up, after $UPTIME seconds"
 
@@ -85,7 +85,8 @@ system_info:
      sudo: ["ALL=(ALL) NOPASSWD:ALL"]
      shell: /bin/bash
      # Don't forget to add your public key here -- if you want. You can still add account after cloning thanks to Cloud-Init
-     #ssh_authorized_keys:
+     ssh_authorized_keys:
+       - ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCtB9NZgJMVovVR4foT0OOV9GdHeHZoPtK1TGko2W4wli/reKjpUYBhlSPWbaWD9WUbl0RRqdzkODy1fB001zxs= mas@TMV2
    # Other config here will be given to the distro class and/or path classes
    paths:
       cloud_dir: /var/lib/cloud/