summaryrefslogtreecommitdiff
path: root/_posts/2017-05-16-coreos-installation-on-a-hetzner-server.md
blob: 2dcf58051cb47cbbbd6057d7e3f1be414ebbff86 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
---
layout: post
title: "CoreOS Installation on a Hetzner Server"
description: ""
category: 
tags: []
---
{% include JB/setup %}

- log into the rescue system

    `ssh root@{sever-ip}`

- run `installimage`

  - choose "Other" -> "CoreOS-XXX"
  - set the hostname
  - keep the remaining defaults in install.conf (you may have to quit with ESC 0, if F10 does not work)
  - confirm deletion of partitions

Beware: Contrary to the output info `installimage` does not create a software raid. CoreOS is installed on /dev/sda, /dev/sdb remains unpartitioned.

* adjust CoreOS configuration

  - mount ROOT partition

    `mount /dev/sda9 /mnt`

  - add keys to `/mnt/home/core/.ssh/authorized_keys`
  * disable root and password logins

    ```
    echo "PermitRootLogin no" > /mnt/etc/ssh/sshd_config
    echo "PasswordAuthentication no" >> /mnt/etc/ssh/sshd_config
    ```

  - remove user and sshd entries from coreos-install (to make above changes permanent between reboots)

    ```
    cp /mnt/var/lib/coreos-install/user_data /mnt/var/lib/coreos-install/user_data~
    sed -i '/users:/,$d' /mnt/var/lib/coreos-install/user_data
    ```

* reboot into CoreOS

    `reboot`

- log into CoreOS

    `ssh core@{sever-ip}`

The docker systemd service is not enabled by default, but we need it to restart docker services after a reboot:

    `sudo systemctl start docker.service`
    `sudo systemctl enable docker.service`