templates.yaml

aliases:
  - &command_permit_root_login >-
    if grep -E '^PermitRootLogin\s' /etc/ssh/sshd_config >/dev/null 2>&1;
    then sed -i -E 's/^(PermitRootLogin\s.*)+$/PermitRootLogin yes # \1/' /etc/ssh/sshd_config;
    else printf "\nPermitRootLogin yes\n" >> /etc/ssh/sshd_config;
    fi

  - &command_install_qga |
    #!/bin/sh
    # 安装并启用 qemu-guest-agent（适配 Debian/Ubuntu EOL、RHEL/CentOS、openSUSE、Arch）
    # 目标：即使装不到也不会让 virt-customize 失败；最后必须 exit 0
    set -u

    ok=0

    fix_debian_eol_sources() {
      # 切到 archive.debian.org，并关闭 Valid-Until 校验
      mkdir -p /etc/apt/apt.conf.d || true
      printf 'Acquire::Check-Valid-Until "false";\n' > /etc/apt/apt.conf.d/99ignore-valid-until || true
      for f in /etc/apt/sources.list /etc/apt/sources.list.d/*.list; do
        [ -f "$f" ] || continue
        sed -i -E 's@https?://deb\.debian\.org/debian@http://archive.debian.org/debian@g' "$f" || true
        sed -i -E 's@https?://security\.debian\.org/debian-security@http://archive.debian.org/debian-security@g' "$f" || true
        sed -i -E '/stretch-updates/d' "$f" || true
      done
    }

    fix_ubuntu_eol_sources() {
      # Ubuntu EOL → old-releases.ubuntu.com
      for f in /etc/apt/sources.list /etc/apt/sources.list.d/*.list; do
        [ -f "$f" ] || continue
        sed -i -E 's@https?://([a-z0-9.-]+\.)?ubuntu\.com/?ubuntu@http://old-releases.ubuntu.com/ubuntu@g' "$f" || true
        sed -i -E 's@https?://security\.ubuntu\.com/ubuntu@http://old-releases.ubuntu.com/ubuntu@g' "$f" || true
      done
    }

    enable_systemd_wants_link() {
      # 不跑 systemctl；仅放 wants 链接，首启自然拉起
      mkdir -p /etc/systemd/system/multi-user.target.wants || true
      if   [ -e /lib/systemd/system/qemu-guest-agent.service ]; then
        ln -sf /lib/systemd/system/qemu-guest-agent.service \
               /etc/systemd/system/multi-user.target.wants/qemu-guest-agent.service || true
      elif [ -e /usr/lib/systemd/system/qemu-guest-agent.service ]; then
        ln -sf /usr/lib/systemd/system/qemu-guest-agent.service \
               /etc/systemd/system/multi-user.target.wants/qemu-guest-agent.service || true
      fi
    }

    # --- APT 系（Debian/Ubuntu） ---
    if command -v apt-get >/dev/null 2>&1; then
      export DEBIAN_FRONTEND=noninteractive
      . /etc/os-release 2>/dev/null || true
      low_id="$(printf '%s' "${ID:-}" | tr '[:upper:]' '[:lower:]')"
      case ",$low_id," in
        *,debian,*) fix_debian_eol_sources ;;
        *,ubuntu,*) fix_ubuntu_eol_sources ;;
        *) : ;;
      esac

      apt-get -o Acquire::Check-Valid-Until=false update || true
      if apt-get install -y --no-install-recommends qemu-guest-agent; then
        ok=1
      fi
      enable_systemd_wants_link
    fi

    # --- DNF / YUM 系（RHEL/CentOS/Alma/Rocky 等） ---
    if [ "$ok" -eq 0 ] && command -v dnf >/dev/null 2>&1; then
      dnf -y install qemu-guest-agent && ok=1 || true
      enable_systemd_wants_link
    fi
    if [ "$ok" -eq 0 ] && command -v yum >/dev/null 2>&1; then
      yum -y install qemu-guest-agent && ok=1 || true
      enable_systemd_wants_link
    fi
    if [ "$ok" -eq 0 ] && command -v microdnf >/dev/null 2>&1; then
      microdnf -y install qemu-guest-agent && ok=1 || true
      enable_systemd_wants_link
    fi

    # --- openSUSE ---
    if [ "$ok" -eq 0 ] && command -v zypper >/dev/null 2>&1; then
      zypper --non-interactive install -y qemu-guest-agent && ok=1 || true
      enable_systemd_wants_link
    fi

    # --- Arch ---
    if [ "$ok" -eq 0 ] && command -v pacman >/dev/null 2>&1; then
      pacman -Sy --noconfirm qemu-guest-agent && ok=1 || true
      enable_systemd_wants_link
    fi

    if [ "$ok" -eq 0 ]; then
      echo "[WARN] qemu-guest-agent not installed (pkg manager absent or repos unavailable). Skipping." >&2
    fi

    exit 0

  - &command_enable_bbr_optimized >-
    set -eux
    echo tcp_bbr >/etc/modules-load.d/bbr.conf
    cat > /etc/sysctl.d/99-network-tuning.conf << "EOF"
    net.core.default_qdisc = fq
    net.ipv4.tcp_congestion_control = bbr

    net.ipv4.tcp_syncookies = 1
    net.ipv4.tcp_fin_timeout = 30
    net.ipv4.tcp_tw_reuse = 1
    net.ipv4.tcp_max_syn_backlog = 1024

    net.ipv4.conf.all.arp_ignore = 1
    net.ipv4.conf.all.arp_announce = 2
    net.ipv4.conf.default.arp_ignore = 1
    net.ipv4.conf.default.arp_announce = 2
    EOF

# 镜像源配置 - 用于内网环境
# 使用方法：python3 import.py local-lvm 900 --mirror aliyun
mirrors:
  # 阿里云镜像源
  aliyun:
    ubuntu:
      url: http://mirrors.aliyun.com/ubuntu
    debian:
      url: http://mirrors.aliyun.com/debian
    rhel:
      url: http://mirrors.aliyun.com/centos
    alpine:
      url: http://mirrors.aliyun.com/alpine
    arch:
      url: http://mirrors.aliyun.com/archlinux

  # 清华大学镜像源
  tsinghua:
    ubuntu:
      url: https://mirrors.tuna.tsinghua.edu.cn/ubuntu
    debian:
      url: https://mirrors.tuna.tsinghua.edu.cn/debian
    rhel:
      url: https://mirrors.tuna.tsinghua.edu.cn/centos
    alpine:
      url: https://mirrors.tuna.tsinghua.edu.cn/alpine
    arch:
      url: https://mirrors.tuna.tsinghua.edu.cn/archlinux

  # 华为云镜像源
  huawei:
    ubuntu:
      url: https://repo.huaweicloud.com/ubuntu
    debian:
      url: https://repo.huaweicloud.com/debian
    rhel:
      url: https://repo.huaweicloud.com/centos
    alpine:
      url: https://repo.huaweicloud.com/alpine
    arch:
      url: https://repo.huaweicloud.com/archlinux

  # 腾讯云镜像源
  tencent:
    ubuntu:
      url: http://mirrors.cloud.tencent.com/ubuntu
    debian:
      url: http://mirrors.cloud.tencent.com/debian
    rhel:
      url: http://mirrors.cloud.tencent.com/centos
    alpine:
      url: http://mirrors.cloud.tencent.com/alpine
    arch:
      url: http://mirrors.cloud.tencent.com/archlinux

  # 中科大镜像源
  ustc:
    ubuntu:
      url: https://mirrors.ustc.edu.cn/ubuntu
    debian:
      url: https://mirrors.ustc.edu.cn/debian
    rhel:
      url: https://mirrors.ustc.edu.cn/centos
    alpine:
      url: https://mirrors.ustc.edu.cn/alpine
    arch:
      url: https://mirrors.ustc.edu.cn/archlinux

  # 内网示例 - 可自定义为您的内网镜像服务器
  # internal:
  #   ubuntu:
  #     url: http://your-internal-mirror.local/ubuntu
  #   debian:
  #     url: http://your-internal-mirror.local/debian
  #   rhel:
  #     url: http://your-internal-mirror.local/centos

templates:
  - name: ubuntu-18.04
    url: https://cloud-images.ubuntu.com/bionic/current/bionic-server-cloudimg-amd64.img
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: ubuntu-20.04
    url: https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: ubuntu-22.04
    url: https://cloud-images.ubuntu.com/jammy/current/jammy-server-cloudimg-amd64.img
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga
        - *command_enable_bbr_optimized

  - name: ubuntu-24.04
    url: https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga
        - *command_enable_bbr_optimized

  - name: debian-10
    url: https://cloud.debian.org/images/openstack/current-10/debian-10-openstack-amd64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga
        - *command_enable_bbr_optimized

  - name: debian-11
    url: https://cloud.debian.org/images/cloud/bullseye/latest/debian-11-genericcloud-amd64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga
        - *command_enable_bbr_optimized

  - name: debian-12
    url: https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-genericcloud-amd64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga
        - *command_enable_bbr_optimized

  - name: debian-13
    url: https://cloud.debian.org/images/cloud/trixie/latest/debian-13-genericcloud-amd64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga
        - *command_enable_bbr_optimized

  - name: centos-stream-8
    url: https://cloud.centos.org/centos/8-stream/x86_64/images/CentOS-Stream-GenericCloud-8-latest.x86_64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: centos-stream-9
    url: https://cloud.centos.org/centos/9-stream/x86_64/images/CentOS-Stream-GenericCloud-9-latest.x86_64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: centos-stream-10
    url: https://cloud.centos.org/centos/10-stream/x86_64/images/CentOS-Stream-GenericCloud-x86_64-10-latest.x86_64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: archLinux
    url: https://geo.mirror.pkgbuild.com/images/latest/Arch-Linux-x86_64-cloudimg.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: alpineLinux-3.22
    url: https://dl-cdn.alpinelinux.org/alpine/v3.22/releases/cloud/generic_alpine-3.22.1-x86_64-bios-cloudinit-r0.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
        - ./uploads/resolv.conf:/etc/resolv.conf
      commands:
        - *command_permit_root_login  # apk 未覆盖，暂不尝试安装 qga
        
  - name: alpineLinux-3.23
    url: https://dl-cdn.alpinelinux.org/alpine/v3.23/releases/cloud/generic_alpine-3.23.2-x86_64-bios-cloudinit-r0.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
        - ./uploads/resolv.conf:/etc/resolv.conf
      commands:
        - *command_permit_root_login  # apk 未覆盖，暂不尝试安装 qga

  - name: almaLinux-8
    url: https://repo.almalinux.org/almalinux/8/cloud/x86_64/images/AlmaLinux-8-GenericCloud-latest.x86_64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: almaLinux-9
    url: https://repo.almalinux.org/almalinux/9/cloud/x86_64/images/AlmaLinux-9-GenericCloud-latest.x86_64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga

  - name: almaLinux-10
    url: https://repo.almalinux.org/almalinux/10/cloud/x86_64/images/AlmaLinux-10-GenericCloud-latest.x86_64.qcow2
    cloud_init: true
    customize:
      uploads:
        - ./uploads/ssh.cfg:/etc/cloud/cloud.cfg.d/50_ssh.cfg
      commands:
        - *command_permit_root_login
        - *command_install_qga