To be fair, you can set your DHCP settings in cloud init, and if you don't use DHCP, you probably shouldn't use the option. So I wouldn't blame the debian cloud team, when you clearly had a choice. I know I had, and I made the wrong one as stated.
The Debian cloud image has a helper script assuming that the DHCP is always in use to configure a NIC. The helper is: /etc/network/cloud-ifupdown-helper. This helper uses a template file to generate the network configuration file. The template is: /etc/network/cloud-interfaces-template. Look at that template and you will see that DHCP is always set as NIC configuration method.
(yaml file shown below)
#!/bin/bash
#Create template
#args:
# vm_id
# vm_name
# file name in the current directory
function create_template() {
#Print all of the configuration
echo "Creating template $2 ($1)"
#Create new VM
#Feel free to change any of these to your liking
qm create $1 --name $2 --ostype l26 --hotplug disk,usb --tablet 0
#Set networking to default bridge
qm set $1 --net0 virtio,bridge=vmbr4000,mtu=1400
#Set display to serial
qm set $1 --serial0 socket --vga serial0
#Set memory, cpu, type defaults
#If you are in a cluster, you might need to change cpu type
qm set $1 --memory 1024 --cores 4 --cpu host
#Set boot device to new file
qm set $1 --scsi0 ${storage}:0,import-from="$3",discard=on,ssd=1
#Set scsi hardware as default boot disk using virtio scsi single
qm set $1 --boot order=scsi0 --scsihw virtio-scsi-pci
#Enable Qemu guest agent in case the guest has it available
qm set $1 --agent enabled=1,fstrim_cloned_disks=1
#Add cloud-init device
qm set $1 --ide2 ${storage}:cloudinit
#Set CI ip config
#IP6 = auto means SLAAC (a reliable default with no bad effects on non-IPv6 networks)
#IP = DHCP means what it says, so leave that out entirely on non-IPv4 networks to avoid DHCP delays
qm set $1 --ipconfig0 "ip=dhcp" --nameserver 10.13.14.250
#Import the ssh keyfile
qm set $1 --sshkeys ${ssh_keyfile}
#If you want to do password-based auth instaed
#Then use this option and comment out the line above
qm set $1 --cipassword verystrongandsecretpasswordbaby
#Add the user, not relevant for us
# qm set $1 --ciuser ${username}
# Resize the disk to 8G, a reasonable minimum. You can expand it more later.
# If the disk is already bigger than 8G, this will fail, and that is okay.
qm disk resize $1 scsi0 8G
# Custom actions
qm set $1 --cicustom "user=local:snippets/rabbitmq.yaml"
# Update cloudinit drive
qm cloudinit update $1
#Make it a template
qm template $1
#Remove file when done, prefer not yet
#rm $3
}
#Path to your ssh authorized_keys file
export ssh_keyfile=/var/lib/vz/template/cloud-images/id_rsa_pongraczi.pub
#Name of your storage
export storage=local-zfs
## Debian
#Bookworm (11) (stable) - fix your PATH!!!!
wget "https://cloud.debian.org/images/cloud/bullseye/latest/debian-11-genericcloud-amd64.qcow2"
create_template 910 "deb11gencloud" "/var/lib/vz/template/cloud-images/debian-11-genericcloud-amd64.qcow2"#cloud-config
#ssh_pwauth: true
#disable_root: false
#chpasswd:
# list: |
# root:othergoodpassword
# expire: false
write_files:
- path: /etc/sudoers.d/cloud-init
content: |
Defaults !requiretty
- path: /etc/rabbitmq/enabled_plugins
content: |
[rabbitmq_amqp1_0,rabbitmq_auth_backend_ldap,rabbitmq_federation,rabbitmq_federation_management,rabbitmq_management,rabbitmq_mqtt,rabbitmq_peer_discovery_common,rabbitmq_prometheus,rabbitmq_shovel,rabbitmq_shovel_management,rabbitmq_stomp,rabbitmq_stream,rabbitmq_stream_management,rabbitmq_web_mqtt,rabbitmq_web_mqtt_examples,rabbitmq_web_stomp].
- path: /etc/apt/sources.list.d/rabbitmq
content: |
## Provides modern Erlang/OTP releases from a Cloudsmith mirror
##
deb [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-erlang/deb/debian bullseye main
deb-src [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-erlang/deb/debian bullseye main
deb [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-erlang/deb/debian bullseye main
deb-src [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-erlang/deb/debian bullseye main
## Provides RabbitMQ from a Cloudsmith mirror
##
deb [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-server/deb/debian bullseye main
deb-src [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-server/deb/debian bullseye main
# another mirror for redundancy
deb [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-server/deb/debian bullseye main
deb-src [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-server/deb/debian bullseye main
- path: /etc/systemd/system/rabbitmq-server.service.d/limits.conf
content: |
[Service]
LimitNOFILE=64000
- path: /root/configure.sh
content: |
#!/usr/bin/env bash
apt-get install curl gnupg apt-transport-https -y
curl -1sLf "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA" | gpg --dearmor | tee /usr/share/keyrings/com.rabbitmq.team.gpg > /dev/null
curl -1sLf https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key | gpg --dearmor | tee /usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg > /dev/null
curl -1sLf https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key | gpg --dearmor | tee /usr/share/keyrings/rabbitmq.9F4587F226208342.gpg > /dev/null
mv /etc/apt/sources.list.d/rabbitmq /etc/apt/sources.list.d/rabbitmq.list
apt-get update -y
apt-get install -y erlang-base erlang-asn1 erlang-crypto erlang-eldap erlang-ftp erlang-inets erlang-mnesia erlang-os-mon erlang-parsetools erlang-public-key erlang-runtime-tools erlang-snmp erlang-ssl erlang-syntax-tools erlang-tftp erlang-tools erlang-xmerl
apt-get install rabbitmq-server -y --fix-missing
service rabbitmq-server start
rabbitmqctl add_user rabbituser belongingpassword
rabbitmqctl set_user_tags rmqadmin administrator
fqdn: rabbitmq.example.tld
ssh_authorized_keys:
- ssh-rsa longkey pongi@ipc5
package_update: true
package_upgrade: true
packages:
- qemu-guest-agent
- mc
runcmd:
- systemctl enable qemu-guest-agent
- systemctl start qemu-guest-agent
- bash /root/configure.sh