By writing into /etc/ssh/sshd_config we override default config which
usually defines include /etc/ssh/sshd_config.d/*.conf. This breaks an
ability to cusomize config further. And disables include any files dropped
into sshd_config.d directory.
This commit moves RKE2 sshd config into subdirectory with 010 index
so it will be loaded first.
Signed-off-by: Dinar Valeev <k0da@opensuse.org>
This is not mounted by default, therefore we cannot write the
/opt/rke2-cis-script.sh script.
So add configuration to mount the subvolume, as described in
https://en.opensuse.org/Portal:MicroOS/Ignition#Mounts
Signed-off-by: Steven Hardy <steven.hardy@suse.com>
This aligns with the default cloud-init behavior and enables e.g
overwriting distro-default files via RKE2ConfigTemplate using the
spec.template.spec.files API.
Signed-off-by: Steven Hardy <steven.hardy@suse.com>
The rke2-install.sh script sets the exit on error flag ('set -e'), however
the script might fail to exit when a command in a pipe fails.
Add the '-u' and '-o pipefail' flags to better identify errors within the
install script.
Signed-off-by: Marco Chiappero <marco.chiappero@suse.com>