Content-Type: multipart/mixed; boundary="===============8645434374073493512=="
MIME-Version: 1.0

--===============8645434374073493512==
MIME-Version: 1.0
Content-Type: text/cloud-config; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="cloud-config"

#cloud-config

# Enable root and password auth
disable_root: false
ssh_pwauth: false

# Allow cloud-init to manage /etc/hosts
manage_etc_hosts: true

# Set the default user to root and define the package mirrors
system_info:
   distro: ubuntu
   default_user:
      name: root
      shell: /bin/bash
      lock_passwd: false
   package_mirrors:
     - arches: [i386, amd64]
       failsafe:
         primary: http://archive.ubuntu.com/ubuntu
         security: http://security.ubuntu.com/ubuntu
       search:
         primary:
           - http://mirrors.digitalocean.com/ubuntu/
         security: []


--===============8645434374073493512==
MIME-Version: 1.0
Content-Type: text/cloud-boothook; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="resolver-fix"

#!/bin/sh -x
# DigitalOcean resolver fixup script
cloud-init-per instance do-resolved-conf /bin/false && exit 0
[ -f /etc/systemd/resolved.conf ] || grep -q 'Fedora Linux 40' /etc/os-release || exit 0
logger -t DigitalOcean 'writing resolvers  to /etc/systemd/resolved.conf.d/DigitalOcean.conf'
mkdir -p /etc/systemd/resolved.conf.d
printf "[Resolve]\nDNS=67.207.67.3 67.207.67.2\n" > /etc/systemd/resolved.conf.d/DigitalOcean.conf
systemctl try-reload-or-restart systemd-resolved


--===============8645434374073493512==
MIME-Version: 1.0
Content-Type: text/cloud-boothook; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="entropy-seed"

#!/bin/sh -x
# DigitalOcean Entropy Seed script
logger -t DigitalOcean 'adding random seed to /dev/urandom'
(base64 -d <<EOE
1SvAbdq/pXmIQDr8OI0wVONj/5BPm+LvREFzS563FKhr/Fe1KVrQzKACDLSXNElCvcmRUnCOyAVl
yJ7NdWHzqLfYQ7QcKM0dUUsOj21WgJ2Pjk2nrooI7eukGNJZKaBPKx3LYkGT0g2PVbY1uIhvOtnF
QXY+m77/A6xJuvFd30rDgPRiiNeHOF7OlCYXfSnMCt0T1+vuzx7z/n5y2dUiC+YbllxLI1I+kDVX
nZwERGf7gwxPj9jkcRsdlIApm8Yhb80Vsr8M6FLxrGobXpFyQhFuftMvZH238p0Kg5hlWNQ3ow8j
7ph1kXBfVum2YrXZqfrVPVKlAaEY8k4eRb01BzyOjiGmAeU6bnocWbjexk6fJsJMo993x0jwqCmb
I2fyxHH1hhGKlv0F1Ih4K6sd7+5cSPOsOV/l75n2g3ksIgTmzfxCV+x0vHYwlZdlNtcDcBkzEGC7
iYmVrpiArvgFou/sYLo1krm1Bdonir2PyFZSJYNA6zwTL8PSoJV7gNljzrVtgFe/Hnpau72MQWwr
MzG6f+0sVeJL14NMelJQXrRtLgjqHFX533CJrDWqiFnl2Qcj8lZ/8E3n6uvMJVIBeTDrCpNOxD7V
DK9dJr9GqfT/saQB1CQ0pUgRLLQ/En6maiXvD/o9hPNQduvZLnL9oZOPH8TlYdK1ItriwCgVIMyM
6/3A+1O5ovMPCXk4UdljCEuM1M29pdwjV/oY1sDQTT7dnAQ04PNvU84bPWloF4izZaSRd5pW3qmq
ksFQVE76Pbdj2XPP+osBvnxQHKxiBF5K3QlMSXWOS5evvAzAqZ+XTaTrDbbnM1yenUaNrDud1azb
AuOJ/eRcQzhjdhPhHXKdm08v1UTW9kRfPKwrVKcrR0t+OcFw99P0497UlVlRGkQybMenZcN5miDK
5b+aRumzpruvOXp2uyXlsaylMbze3DZAxEmFBFXquqmv9bQ/X19d5dOd4E+0fNhMA7c0QsAD8cfg
tJE+4yU3JZ5KTp46cIn/qgIWZmzs0VrvC9uUNYUxJ4wG/DTxw4Q/ia/eC5qU4+Oen8/pcKuOFugR
SV3lEtua8H2IYDg6Hm9EHjP3p4lALneFMMJatFL/b7hVX6gjUBFVXqO2ZEvodIvb/Q89wvMHfbVy
SFIG1Wt3pYPT+6cL47OI9o7bhysx1J+q71M7jlQrb8BKg0wuoXZ2F39A4cKR0yqKJLyKzgTxRIYf
8/Ng+Y56cb5fnvLfcg56TK5olAviYPhD36eH/VtFOj2xgO8Nrtvnd2NKR870GpFmZx1/ZZyCvP3k
/uIFRgm1qqqX+LmbDS636IGZ6oZyj78W6T8LT/n4Jupslor1iMSYRtBMrx2vCliDVdQQenFqtWaJ
HvufrDNQh3o4JsneKxawzEJVGZGNHJIR2PZVUVFZLeDRYs1w7QHZ+ebguEEi0tBgrOCsMaKjvdQO
PVBes/vmIa7tWOH+isAsKMUTXHI/jZ8SusJ5N/S1kTkwSUV8RCTdjx7SPHHNOAq0W0eJOjqL0EZK
rCo5mZ2SQvBVdWGYgEvczAN0K0M5dyrWwLWfaH1UeYRGAq0qw15meAhv4VZ754EYjhbiVr5haRx3
sputqwULqCbB1Azu6hbLuevbwiigMdUrMlk5RV0DcIeo4TKUDZ3k+oExWGu8lUIEorV+FRwLEIN3
Wbj+NAtvmWig8sD9sTeTRxRSARRYqhlJNlsCbWhTn2Tux9+ShhltFTLcskl6nhKLTA30fPvPGLNQ
dbauGZGCxt/l/6vChKX3DJAhLpcBv5pzbFgbMZCzz9dSOZv7dRdTsulvGnjlzyFiErzOUXlPfjt0
6vIgkXSUP0tNU8Z//AFxLlQJVedn3m/3lmR4TjFUpA585tEb8QqBFRnTqmfu+xPXlGOkDanhHXeD
lw1LyN6c4tC9y/mAo9ZCgFQrGgMax4ugWLFC3A6nc3UEtgipZ3vWDaZxeRf/2baXeaU3H9dFDe24
qIQyO1nqnSL3DQiyA8zmN28NzTzFvMlfsW+M6mKvdqvyihUddvBZYfdTwvxK6uwGg6OUgPRWhxpF
nZsJ5mj/ZwdGVXUfB1hq7ftSDVREkJYxzV122e6lvab4VL1vneZbsT8fKYLF4EveufunYpSHErfw
tF4SmPdhNqJEq3GzhecMD7Flg+0b+ZjYwlVegxwW+pC8EWq4VicApFvbHjCsHeFjIsY/SNrZNgtO
mDphSl9MS9lHeO5vY5J3wPB9m+6eGy4TKbmdfj75ugxjMLSpaKIMvZZ7+2yJw3Wk5j8UCUP6oKvg
Pd5F4EKwuRHntYoFl5okWAatrt5w8QQg9nnCuQjBzffgrNlTEHEUBI1TD97q1HIx+xf+gELMH2yA
dTt7AEosUT7KUdAj4K5ieYAqLpMZnA5w0zVaOcapkX54X+AmeBCDLuKCehuj/2l+7FS6N9mZvGan
1v9VtZDgqdfcXhBgS85+Dj62F9MHnyY/Z5SFvZJgI1Fx3TZth3xQyTRjh7BhI4DiI+2vj6T0BHu3
0SuqhlUmiApMftFNdkvV5HoYweDf5Gp652BTl6SHGosXDFv4oN2KAYIbYYjgigdmGPEV6yQGk5kl
OTD8SlRq+7Jl8Q4wcxRHZztQaHBlde/jsLgnMWSRJPu7rzGKJMscdgrNmHwZai7FK6zJijUVHjV1
Ai1sy5pwS0bogR9lr699BAdPJ1Dl5VHBG5hmKAMngFRvbldC1f7CVYcwfLdwg3HAxDWkH2Pet10s
3ijM2Ebzvwufys0kRAdS+tqy+8mKzt2CN7BjcT25rlBwBbYpIRk4okZZaL3ALDXotAMoYO7l9CRt
87mfGLr11eq5sChN6AtbGNM6Z0PX9zkh88lkSRvzJRGKZGMXxpaye7TMKSkNqp9SnSuw8HPIX0se
UoDMZv0MxnsfVXHzwSY1oYqGHEX1HID62DLqb+6u7ZuVlWk5dPqqZrz4eJWg3zJn//W7hwkgmEQL
4Y8U8qBPQiicPwjV4IuyXyhLt30lM0tiZ64cvLZl+O0dRzg0HHLrP8AwoYe0zwRrcUPurpXwSu7G
dCKUcYw0RmhRlQG68DFvPnHwC4IYjJqJsGR9PT5T7zxrmwnOrNSkzHftsd3NLqmMK8s2sn1pG20S
w+4ViVEh0Y4AA1au4jcbHEdNnDX7jnb0yNx6ozVCxtFq8e9BcpqUbfQFUT9TAVeq6Y6zqsc6Ln1z
RdNIzUuU/nel/OiJKPsDkUgOoTrNyr56rDID5ybDkJqw8r6VZP4FyOk1i3Prg5AagGHkrH++ABcZ
/dmC2nbph4ZcjMFd1TbEtHgL/bsy0F+VwfvMuhNPUNlFhVOToYAjfi6aUSkY296Azlqk+FoyK2U7
t9aGICS3RRHVskSmkDh8EhrTZlTFj8MVrcEwUZfUGGBVEaCW0SaZ0f8Xy8E12DNkSvCREZRSwFdt
KrPQDApVosxun+ehk9WjZtqK5+hhJfZMTJ81XRq0Ww+GDd1yZz4EU6LmS3GmiQAPqRvVZkCdIkzJ
VXVeTI4NHXDHEDoa3Nch7YmPus2uMbZMlYwN8TeRAavpbSIf+nBjGoQLs7iNndGfP6VG2LNPnUjV
wKZ7cC4P/r6fOQsTAvnTJt5B+diYNXdva4e5tOEADgqkr9TIfcmeVj9GPpPD5Ui1xWI2SN5QzDw9
26c7gVQYbJoIjkQtjgHBK9i/cPFK9N0lnEYO7sYEBIpYKTJ91R9hH1gUlR7OJWs4//psmlSSGzhI
IvUs0fUHeKSbxIA4f0CdR8b+pW3sAU8+VQRn30lvzSt5LDM0Bb1/74JJTWplmm4lZQRgtOk1qhDW
mWvlYiWERHmlJBtQtMSNcmQOWBGlpcUAH9bpDSLP6/SJOpXxfu8Pu9GLV+cBPt2YLkT9irkMA7+V
of3rmR/WLZft5lexWrmbN0Xr4itm7jFGjD8Tf1DuxzH6X26qqUKzC3++NxU45UY6rVj/2MkDzKaP
3h5zKeizzJyFWUw2Ws5fYQ2dhl01UbH6RPOdDdHiPFOsn4nIjoEJwGwykAJ+heRP9iknqGK/PmhQ
BJFCk2wBwi7pkTBwv3gYqbDT7hdHBluxuNOFyDDUlJUEPOvqthqEhrmMTDIgXP7o9WNz

EOE
) > /dev/urandom 


--===============8645434374073493512==
MIME-Version: 1.0
Content-Type: text/cloud-boothook; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="digitalocean_fixups"

#!/bin/sh

# These are udev rules and scripts that are placed here for the sake of readability 
# later in this script.
no_systemd_mount_rules=$(cat <<'EOM'
# Only try to automount DO block volumes.
SUBSYSTEM!="block", GOTO="do_automount_end"
ENV{ID_VENDOR}!="DO", GOTO="do_automount_end"
ENV{ID_MODEL}!="Volume", GOTO="do_automount_end"
# Only automount on the "add" action.
ACTION!="add", GOTO="do_automount_end"
# Only try to automount filesystems we know about.
ENV{ID_FS_TYPE}!="ext4|xfs", GOTO="do_automount_end"

# Create a temporary mountpoint and temporary location for the first-mount script.
IMPORT{program}="/bin/sh -c 'echo TMP_MOUNT_DIR=$(mktemp -d -p /mnt .do-first-mount-XXXXXXXXX)'"
# Handle temporary mountpoint creation failure.
ENV{TMP_MOUNT_DIR}=="", GOTO="do_automount_end"
IMPORT{program}="/bin/sh -c 'echo TMP_SCRIPT=$(mktemp -t .do-first-mount-XXXXXXXXX.sh)'"
# Handle temporary script location creation failure.
ENV{TMP_SCRIPT}=="", PROGRAM="/bin/sh -c '/bin/rmdir %E{TMP_MOUNT_DIR} || exit 0'", GOTO="do_automount_end"

# Mount the volume at the temp mountpoint and copy the script off, then unmount.
RUN{program}+="/bin/mount -o ro /dev/%k %E{TMP_MOUNT_DIR}"
RUN{program}+="/bin/sh -c '/bin/cp %E{TMP_MOUNT_DIR}/.first-mount.sh %E{TMP_SCRIPT} || exit 0'"
RUN{program}+="/bin/umount %E{TMP_MOUNT_DIR}"
RUN{program}+="/bin/rmdir %E{TMP_MOUNT_DIR}"

# Run the first-mount script. If it didn't exist this will be a no-op.
RUN{program}+="/bin/sh %E{TMP_SCRIPT} '%E{ID_SERIAL}' '%E{ID_FS_TYPE}' '%E{ID_SERIAL_SHORT}' '%E{ID_FS_UUID}' '%E{ID_FS_LABEL}'"

# Clean up.
RUN{program}+="/bin/rm %E{TMP_SCRIPT}"

# Finally, try and mount the volume. On first mount this will fail, but that's
# OK because the volume was already mounted by the first-mount script.
RUN{program}+="/bin/sh -c '/bin/mount /dev/%k || exit 0'"

LABEL="do_automount_end"
EOM
)

systemd_mount_rules=$(cat <<'EOM'
# Only try to automount DO block volumes.
SUBSYSTEM!="block", GOTO="do_automount_end"
ENV{ID_VENDOR}!="DO", GOTO="do_automount_end"
ENV{ID_MODEL}!="Volume", GOTO="do_automount_end"

# Only automount on "add" or "change" actions.
ACTION!="add|change", GOTO="do_automount_end"
# Only try to automount filesystems we know about.
ENV{ID_FS_TYPE}!="ext4|xfs", GOTO="do_automount_end"

# Create a temporary location for the first-mount script.
IMPORT{program}="/bin/sh -c 'echo TMP_SCRIPT=$$(mktemp -t .do-first-mount-XXXXXXXXX.sh)'"
# Handle temporary script location creation failure.
ENV{TMP_SCRIPT}=="", GOTO="do_automount_end"

RUN{program}+="/var/lib/cloud/scripts/per-instance/systemd_automount.sh %k %E{TMP_SCRIPT} '%E{ID_SERIAL}' '%E{ID_FS_TYPE}' '%E{ID_SERIAL_SHORT}' '%E{ID_FS_UUID}' '%E{ID_FS_LABEL}'"

LABEL="do_automount_end"
EOM
)

systemd_mount_script=$(cat <<'EOM'
#!/bin/bash

DEVICE=$1
TMP_SCRIPT=$2
ID_SERIAL=$3
ID_FS_TYPE=$4
ID_SERIAL_SHORT=$5
ID_FS_UUID=$6
ID_FS_LABEL=$7

function cleanup() {
   if [ -f "${TMP_SCRIPT}" ]; then
      rm -f "${TMP_SCRIPT}"
   fi
}

trap cleanup EXIT

# If device is blank or unset exit. Can happen on first start
if [ -z "$DEVICE" ]; then
    exit 0
fi

devpath="/dev/${DEVICE}"

# New first-mount approach
magic_size=14
size=$(( 512 * $(cat /sys/block/${DEVICE}/size) ))
offset=$(( ${size} - ${magic_size} ))
magic=$(dd if="${devpath}" bs=${magic_size} count=1 skip=${offset} iflag=skip_bytes 2>/dev/null | tr -d '\000')

if [ "${magic}" == "DO_FIRST_MOUNT" ]; then
   logger -t digitalocean-automount "detected first mount magic"

   # Clear magic so this script won't trigger again
   dd if=/dev/zero of="${devpath}" bs=${magic_size} count=1 seek=${offset} oflag=seek_bytes 2>/dev/null

   # First mount trailer format:
   # <script body>
   # <metadata>
   # <script size - 7 bytes>
   # <metadata size - 6 bytes>
   # DO_FIRST_MOUNT
   # <end-of-disk>

   # Metadata is a list of key=value pairs separated by ';'
   # Available metadata keys:
   # fs=<string>      - filesystem type [required]
   # md5=<string>     - script md5 schecksum
   
   md_header_size=6
   script_header_size=7
   
   # DO_FIRST_MOUNT (14 bytes)
   offset=$(( ${size} - ${magic_size} - ${md_header_size} ))
   
   # Metadata size (6 bytes)
   md_size=$(dd if="${devpath}" bs=${md_header_size} count=1 skip=${offset} iflag=skip_bytes 2>/dev/null | tr -d '\000')
   offset=$((${offset} - ${script_header_size}))
   
   # Script size (7 bytes)
   script_size=$(dd if="${devpath}" bs=${script_header_size} count=1 skip=${offset} iflag=skip_bytes 2>/dev/null | tr -d '\000')
   offset=$((${offset} - ${md_size}))
   
   # Metadata
   md=$(dd if="${devpath}" bs="${md_size}" count=1 skip=${offset} iflag=skip_bytes 2>/dev/null | tr -d '\000')
   offset=$((${offset} - ${script_size}))
   
   # Script
   script=$(dd if="${devpath}" bs="${script_size}" count=1 skip=${offset} iflag=skip_bytes 2>/dev/null | tr -d '\000')
   
   # Parse metadata
   md_fs=""
   md_md5=""
   
   IFS=';' read -ra MD <<< "${md}"
   for i in "${MD[@]}"; do
      key=$(echo "${i}" | cut -f1 -d'=')
      value=$(echo "${i}" | cut -f2 -d'=')
   
      case ${key} in
         fs)
            md_fs=$value
            ;;
         md5)
            md_md5=$value
            ;;
         *)
            export "DO_FIRST_MOUNT_${key}=${value}"
      esac
   done
   
   if [ -z "${md_fs}" ]; then
      logger -t digitalocean-automount -p user.err "required metadata key not set: fs"
      exit 1
   fi
   
   # Verify script checksum if provided
   if [ -n "${md_md5}" ]; then
      script_md5=$(echo "${script}" | md5sum | cut -f1 -d" ")
   
      if [ "${script_md5}" != "${md_md5}" ]; then
         logger -t digitalocean-automount -p user.err "script checksum mismatch: ${script_md5} (actual) != ${md_md5} (expected)"
         exit 1;
      else
         logger -t digitalocean-automount "script checksum verified"
      fi
   fi
   
   # Copy script to a temporary location
   echo "${script}" > "${TMP_SCRIPT}"
   chmod 755 "${TMP_SCRIPT}"
   
   # Execute first mount script
   if [ $(command -v systemd-run) ]; then
      systemd-run -G --no-block --scope /bin/sh "${TMP_SCRIPT}" "${ID_SERIAL}" "${md_fs}" "${ID_SERIAL_SHORT}" "${ID_FS_UUID}" "${ID_FS_LABEL}"
   else
      /bin/sh "${TMP_SCRIPT}" "${ID_SERIAL}" "${md_fs}" "${ID_SERIAL_SHORT}" "${ID_FS_UUID}" "${ID_FS_LABEL}"
   fi
fi
EOM
)

# Disable the locale warning: by default imported cloud-images check the default
# local and give a warning about invalid locales. The following line disable
# the warning.

# do not assume that /etc/skel exists
if [ -d /etc/skel ]; then
    touch /etc/skel/.cloud-locale-test.skip
fi
touch /root/.cloud-locale-test.skip

# Disable Ubuntu MOTD
if [ -f /etc/default/motd-news ]; then
    sed -e "s/ENABLED=1/ENABLED=0/g" \
        -i /etc/default/motd-news
fi

# Fix buggy cloud-init routes for IPv6
r6c="/etc/sysconfig/network-scripts/route6-eth0"
if [ -f "${r6c}" ]; then
    sed -e "s|::/::|default|g" -i "${r6c}"
    awk '/default via/{system("ip -6 route add default via "$NF" dev eth0")}' "${r6c}"
elif [ -d "/etc/sysconfig/network-scripts" -a -f "/etc/network/interfaces" ]; then
    # This deals with a bug in Fedora 27 where the network interface is not set
    # properly by Cloud-init.
    i6gw=$(egrep -A3 'iface eth0:1 inet6 static' /etc/network/interfaces | awk '/gateway/{print$NF}')
    if [ -n "${i6gw}" ]; then
        ip -6 route add default via ${i6gw} dev eth0
        cat > ${r6c} <<EOM
# DigitalOcean: written by ConfigDrive customization.
default via ${i6gw}
EOM
    fi
fi

# Fix screwy file permmissions on the system resolvers.
chmod 0644 /etc/resolv.conf

# Support automatic disk resizing per boot.
# Only update /etc/hosts once per instance.
mkdir -p /etc/cloud/cloud.cfg.d
cat > /etc/cloud/cloud.cfg.d/90-digitalocean.cfg <<EOM
####
# DigitalOcean: this file was written via cloud-init and composed from /etc/cloud/cloud.cfg
#               In order to support resize events, 'growpart' and 'resizefs' are run each boot.
#               'update_etc_hosts' will be run only once per instance. To see the differences, run
#               'diff -u /etc/cloud/cloud.cfg /etc/cloud/cloud.cfg.d/90-digitalocean.cfg'.
#
#               This file was written to support Droplet $(</sys/devices/virtual/dmi/id/product_serial) on $(date +%Y-%m-%d)
####

EOM
sed -e "s/- growpart$/- [ growpart, always ]/g" \
    -e "s/- resizefs$/- [ resizefs, always ]/g" \
    -e "s/- update_etc_hosts$/- [ update_etc_hosts, once-per-instance ]/g" \
    /etc/cloud/cloud.cfg >> /etc/cloud/cloud.cfg.d/90-digitalocean.cfg

# Fix for machine-id's being dubiously present
cat > /var/lib/cloud/scripts/per-instance/machine_id.sh <<EOM
#!/bin/bash
CT=\$(date +%s);
FT=\$(stat /etc/machine-id -c %Y);
DIFF=\$(expr \$CT - \$FT)
# record timestamp on machine-id for testing
# If /etc/machine_id is over 10m old on first-boot, delete it
if [ -f /etc/machine-id ]; then
    if [ \$DIFF -lt 600 ]; then
        exit 0
    fi
rm -rf /etc/machine-id
fi

# systemd will use dbus uudigen if its there
# we need to reset this for Debain 9.
if which dbus-uuidgen &> /dev/null; then
    rm -rf /var/lib/dbus/machine-id
    dbus-uuidgen --ensure=/var/lib/dbus/machine-id
fi

if which systemd-machine-id-setup &> /dev/null; then
    rm -rf /etc/machine-id
    systemd-machine-id-setup
fi
EOM
chmod 0700 /var/lib/cloud/scripts/per-instance/machine_id.sh

# DigitalOcean updated the vendor-data to better support various distributions.
# This script makes it so older snapshots will work by restoring the default behavior
# of cloud-init.
if [ -e /etc/cloud/cloud.cfg.disabled ]; then
    mv /etc/cloud/cloud.cfg /etc/cloud/cloud.cfg.d/99-digitalocean.cfg
    mv /etc/cloud/cloud.cfg.disabled /etc/cloud/cloud.cfg
    logger -t DigitalOcean "restored default cloud-init behavior by renaming /etc/cloud/cloud.cfg.disabled to /etc/cloud/cloud.cfg"
fi

# Newer versions of systemd-udevd behave badly when trying to run the original udev rules.
# Using mount in udev is highly discouraged and behaves poorly when systemd-mount is available
# The script enforces serialization of commands without changing udev settings
# See BLOCK-1832
if [ -d /etc/udev/rules.d ]; then
    if command -v systemd-mount > /dev/null 2>&1 && command -v systemd-umount > /dev/null 2>&1; then
        # Add udev rules to automount block storage volumes using systemd-mount.
        /bin/echo "$systemd_mount_rules" > /etc/udev/rules.d/99-digitalocean-automount.rules
        /bin/echo "$systemd_mount_script" > /var/lib/cloud/scripts/per-instance/systemd_automount.sh
        chmod 0700 /var/lib/cloud/scripts/per-instance/systemd_automount.sh
    else
        # Add udev rules to automount block storage volumes.
        /bin/echo "$no_systemd_mount_rules" > /etc/udev/rules.d/99-digitalocean-automount.rules
    fi

    # Some versions of systemd-udevd end up in a weird state when we add and
    # trigger rules on-the-fly, as below. Restarting the service seems to
    # resolve things. See BLOCK-1435 for details.
    if command -v systemctl > /dev/null 2>&1; then
        systemctl restart systemd-udevd.service
    fi

    # Load the newly-added udev rules and then manually trigger them to catch
    # any automount volumes that were attached at boot.
    if command -v udevadm > /dev/null 2>&1; then
        udevadm control -R
        if command -v systemd-mount > /dev/null 2>&1 && command -v systemd-umount > /dev/null 2>&1; then
            udevadm trigger --action=change --subsystem-match=block
        else
            udevadm trigger --action=add --subsystem-match=block
        fi
    fi
fi


--===============8645434374073493512==
MIME-Version: 1.0
Content-Type: text/x-shellscript; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="00-vpc-peering"

#!/usr/bin/env sh
#
# This injects hooks into the network management service of the
# droplet with content to add routes into host for vpc peering.

peering_route_script='/var/lib/cloud/scripts/peering.sh'

# Detects the network service used by the system
detect_network_service () {
        if systemctl --quiet is-active NetworkManager; then
                netsvc='NetworkManager'
        elif systemctl --quiet is-active systemd-networkd; then
                netsvc='networkd'
        elif systemctl --quiet is-active networking; then
                netsvc='ifupdown'
        else
                >&2 echo "Unable to detect network service to properly inject vpc peering routes"
                exit 1
        fi
}

# Place the peering script in peering_route_script location
place_route_injection_script() {
        cat > "$peering_route_script" << 'EOM'
#!/bin/sh

for i in $(seq 1 10); do
    VPC_PEERING_ENABLED=$(curl -fs --connect-timeout 5 169.254.169.254/metadata/v1/features/vpc_peering_enabled)
    if [ $? -ne 0 ]; then
        sleep 5
        continue
    fi

    if [ "${VPC_PEERING_ENABLED}" != "true" ]; then
        exit 0
    fi

    VPC_GATEWAY_IP=$(curl -fs --connect-timeout 5 169.254.169.254/metadata/v1/interfaces/private/0/ipv4/gateway)
    if [ $? -ne 0 ]; then
        sleep 5
        continue
    fi

    ip route replace 192.168.0.0/16 via "${VPC_GATEWAY_IP}" dev eth1 mtu 1500 metric 101 && \
        ip route replace 10.0.0.0/8 via "${VPC_GATEWAY_IP}" dev eth1 mtu 1500 metric 101 && \
        ip route replace 172.16.0.0/12 via "${VPC_GATEWAY_IP}" dev eth1 mtu 1500 metric 101;
    if [ $? -eq 0 ]; then
        exit 0
    fi

    sleep 5
done

exit 1
EOM

        chmod +x "$peering_route_script"
}

# Inject hook into /etc/network/if-up.d/
inject_ifupdown() {
        cat > /etc/network/if-up.d/vpc-peering << EOM
#!/bin/sh

[ "\$IFACE" = "eth1" ] && ${peering_route_script}

exit 0
EOM

        chmod +x /etc/network/if-up.d/vpc-peering
        "$peering_route_script"
}

# Inject hook into /etc/NetworkManager/dispatcher.d/
inject_network_manager() {
        cat > /etc/NetworkManager/dispatcher.d/vpc-peering << EOM
#!/bin/sh

interface=\$1
event=\$2

if [ "\$interface" != "eth1" ] || [ "\$event" != "up" ]; then
        exit 0
fi

${peering_route_script}
EOM

        chmod +x /etc/NetworkManager/dispatcher.d/vpc-peering
        "$peering_route_script"
}

# systemd-networkd does not supports hooks, we inject a oneshot
# systemd unit that is invoked after eth0/1 is online and if systemd-networkd restarts.
inject_networkd() {
        cat > /etc/systemd/system/vpc-peering.service << EOM
[Unit]
Description=VPC Peering Route Injection
Requires=systemd-networkd-wait-online.service systemd-networkd.service
After=systemd-networkd-wait-online.service systemd-networkd.service
PartOf=systemd-networkd.service

[Service]
Type=oneshot
ExecStart=${peering_route_script}
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target
EOM

        systemctl daemon-reload
        systemctl enable --now vpc-peering.service
}

detect_network_service
place_route_injection_script

case $netsvc in
        ifupdown) inject_ifupdown ;;
        networkd) inject_networkd ;;
        NetworkManager) inject_network_manager ;;
esac


--===============8645434374073493512==
MIME-Version: 1.0
Content-Type: text/x-shellscript; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="install-dotty-agent"

#!/bin/sh
#
# This is a wrapper that ensures that the agent is only installed _once_ automatically
# via cloud-init. Cloud-init 0.7.8 and earlier re-execute included URL's each boot.
# This script ensures that the agent is only ever installed once.

i_file=https://repos-droplet.digitalocean.com/install.sh
s_path="/var/lib/cloud/instance/sem"
s_file="${s_path}/dotty_agent"
download_timeout=20 # maximum allowed time for downloading the install script, in seconds

mkdir -p ${s_path}

test -f ${s_file} && exit 0

logger -t DOTTY-Agent "fetching and installing DOTTY agent"

if command -v wget &>/dev/null; then
  n=0
  until [ "$n" -ge 5 ]; do
    wget --timeout=${download_timeout} -O ${s_file} ${i_file} && break
    n=$((n + 1))
    sleep 2
  done
elif command -v curl &>/dev/null; then
  n=0
  until [ "$n" -ge 5 ]; do
    curl --max-time ${download_timeout} -SL --output ${s_file} ${i_file} && break
    n=$((n + 1))
    sleep 2
  done
else
  echo "Neither wget nor curl is supported"
  exit 1
fi

if [ ! -f ${s_file} ] || [ ! -s ${s_file} ]; then
  echo "failed to download DOTTY agent install script"
  exit 1
fi

chmod 0755 ${s_file}

if test -x ${s_file}; then
  exec ${s_file} || logger -t DOTTY-Agent "failed to install DOTTY agent"
fi

--===============8645434374073493512==--