改由 cloud-init 声明 Ayatori 容器静态地址

- Terraform 写 cloud-init.network-config，地址从 records.yml 读取，与 AD DNS 同源 - 撤销 Ansible 直接改 netplan 的做法；镜像模板只在 create/copy 渲染 seed，故两台空容器已用 -replace 重建 - 固定指纹已从上游 images: 下架，改从 local: 缓存创建 - sshd -t 前预建 /run/sshd：新装 24.04 只有 ssh.socket 运行，目录尚不存在 Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-01 17:11:42 +00:00
parent 5dcfcad098
commit 094b38b4b5
6 changed files with 40 additions and 73 deletions
@@ -7,8 +7,8 @@ homelab_dns:
    # RRsets are reconciled; Samba-generated AD/Kerberos records are untouched.
    records:
      - { zone: ad.ddupan.top, name: incus, type: A, values: [192.168.10.127] }
-      # Static, outside the NEC IX pool (.128-.250); infrastructure/incus/ansible/containers.yml
-      # reads these same values to pin each container's netplan address.
+      # Static, outside the NEC IX pool (.128-.250); infrastructure/incus/terraform reads
+      # these same values into each container's cloud-init network-config.
      - { zone: ad.ddupan.top, name: ayatori-dev, type: A, values: [192.168.10.11] }
      - { zone: ad.ddupan.top, name: ayatori-prod, type: A, values: [192.168.10.12] }
      - { zone: ad.ddupan.top, name: bao, type: A, values: [192.168.10.8] }