#cloud-config
disable_root: false
ssh_pwauth: true
chpasswd:
  expire: false
  users:
  - {name: root, password: Cloud1234!@#$, type: text}
  - {name: ubuntu, password: cloud1234, type: text}

write_files:
  - path: /etc/netplan/00-installer-config.yaml
    permissions: '0600'
    content: |
      # This is the network config written by 'subiquity'
      network:
        ethernets:
          ens10f0:
            dhcp4: false
          ens10f1:
            dhcp4: false
          ens10f2:
            dhcp4: false
          ens10f3:
            dhcp4: false
          ens1f0np0:
            dhcp4: false
          ens1f1np1:
            dhcp4: false
          ens3f0np0:
            dhcp4: false
          ens3f1np1:
            dhcp4: false
          ens4f0np0:
            dhcp4: false
          ens4f1np1:
            dhcp4: false
          ens6f0np0:
            dhcp4: false
          ens6f1np1:
            dhcp4: false
        bonds:
          bond0:
            addresses: []
            interfaces:
              - ens1f0np0
              - ens1f1np1
            parameters:
              mode: 802.3ad
              lacp-rate: fast
              mii-monitor-interval: 100
          bond1:
            addresses: []
            interfaces:
              - ens3f0np0
              - ens3f1np1
            parameters:
              mode: active-backup
              primary: ens3f0np0
              mii-monitor-interval: 100
          bond2:
            addresses: []
            interfaces:
              - ens4f0np0
              - ens4f1np1
            parameters:
              mode: 802.3ad
              lacp-rate: fast
              mii-monitor-interval: 100
          bond3:
            addresses:
              - 192.168.40.16/24
            interfaces:
              - ens6f0np0
              - ens6f1np1
            parameters:
              mode: active-backup
              primary: ens6f0np0
              mii-monitor-interval: 100
          bond4:
            addresses: []
            interfaces:
              - ens10f0
              - ens10f1
            parameters:
              mode: 802.3ad
              lacp-rate: fast
              mii-monitor-interval: 100
          bond5:
            addresses:
              - 192.168.1.16/23
            interfaces:
              - ens10f2
              - ens10f3
            parameters:
              mode: active-backup
              primary: ens10f2
              mii-monitor-interval: 100
            routes:
              - to: default
                via: 192.168.0.1
        vlans:
          vlan.10:
            id: 10
            link: bond0
            addresses:
              - 192.168.10.16/24
            routes:
              - to: 172.168.10.0/24
                via: 192.168.10.1
          vlan.20:
            id: 20
            link: bond1
            addresses:
              - 192.168.20.16/24
            routes:
              - to: 172.168.20.0/24
                via: 192.168.20.1
              - to: 192.168.21.0/24
                via: 192.168.20.1
              - to: 172.168.21.0/24
                via: 192.168.20.1
          vlan.21:
            id: 21
            link: bond1
            addresses: []
          vlan.30:
            id: 30
            link: bond2
            addresses:
              - 192.168.30.16/24
            routes:
              - to: 172.168.30.0/24
                via: 192.168.30.1
              - to: 192.168.31.0/24
                via: 192.168.30.1
              - to: 172.168.31.0/24
                via: 192.168.30.1
          vlan.31:
            id: 31
            link: bond2
            addresses: []
        version: 2
        
runcmd:
  - [ mv, /etc/netplan/50-cloud-init.yaml, /etc/netplan/50-cloud-init.yaml.org ]
  - [ netplan, apply ]  
  - [ systemctl, disable, --now, systemd-timesyncd.service ]
  - [ rm, -rf, /etc/ssh/sshd_config.d/* ]
  - [ rm, -rf, /root/.ssh/authorized_keys ]
  - [ sed, -i, 's/^#*PermitRootLogin.*/PermitRootLogin yes/', /etc/ssh/sshd_config ]
  - [ sed, -i, 's/^#*PasswordAuthentication.*/PasswordAuthentication yes/', /etc/ssh/sshd_config ]
  - [ systemctl, restart, ssh ]
  - [ sed, -i, 's/^deb http:\/\/101.202.40.5\/ubuntu-24.04-1\/ubuntu noble-security.*/#deb http:\/\/101.202.40.5\/ubuntu-24.04-1\/ubuntu noble-security universe restricted multiverse main/g', /etc/apt/sources.list ]
  - [ rm, -f, /etc/apt/sources.list.d/ubuntu.sources ]
  - [ apt, -y, update ]
  - [ systemctl, disable, cloud-final.service, cloud-init.service, cloud-config.service, cloud-init-local.service ]
  - [ sed, -i, '/^127\.0\.1\.1/ s/^/# /', /etc/hosts ]
  - [ sed, -i, 's/^GRUB_CMDLINE_LINUX_DEFAULT=".*"/GRUB_CMDLINE_LINUX="intel_iommu=on"/', /etc/default/grub ]
  - [ update-grub ]
  - [ wipefs, -a, /dev/sdb ]
  - [ wipefs, -a, /dev/sdc ]
  - [ mdadm, --zero-superblock, /dev/sdb, /dev/sdc ]
  - [ parted, /dev/sdb, --script, mklabel, gpt ]
  - [ parted, /dev/sdc, --script, mklabel, gpt ]
  - [ parted, /dev/sdb, --script, mkpart, primary, 0%, 100% ]
  - [ parted, /dev/sdc, --script, mkpart, primary, 0%, 100% ]
  - [ parted, /dev/sdb, --script, set, 1, raid, on ]
  - [ parted, /dev/sdc, --script, set, 1, raid, on ]
  - [ reboot ]