rudl-project

Provision Nodes

How to start the client Nodes including Setup for Nodes

Provisioning Nodes

To provision the nodes, we provide a pure Bash provisioning script. The hard manual way is documented here.

Compatibility: currently only Ubuntu 26.04 is supported by the provisioning script.

We also keep a cloud-init.yml template in this directory, but the recommended setup flow is the Bash script below.

Use the Provision Script

Use rudl-provision-maschine.sh to provision the machine directly on the server without running cloud-init.

Step-by-Step Instructions

1) Login as root to your new server. 2) Go to /root and run:

apt-get update
apt-get install -y curl vim lsb-release
export RUDL_DOWNLOAD_URL=https://raw.githubusercontent.com/rudl-project/rudl.infracamp.org/refs/heads/main/docs/setup/provision/script/

Problem with vim on new Ubuntu 26.04:

Copy n paste issue with mouse support. Disable mouse support for vim:

update-alternatives --config editor  ## Set Editor to vim.basic
echo "set mouse=" > ~/.vimrc        ## Disable mouse support for vim

3) Create the server.env file with the required variables.

Download the template:

curl -fsSL ${RUDL_DOWNLOAD_URL}server.env.txt -o server.env

Important variables:

# Firewall
OPEN_PORTS_TCP="22,80,443"
OPEN_PORTS_UDP=""

# DNS
DISABLE_SYSTEMD_RESOLVED_STUB="false"

Notes:

  • Leave OPEN_PORTS_TCP or OPEN_PORTS_UDP empty ("") if no ports should be opened for that protocol.
  • If a port list is empty, the corresponding nftables dport { ... } rule is not written.
  • If you want to run your own DNS service on the host, usually open port 53 for both TCP and UDP.
  • Warning: if you set DISABLE_SYSTEMD_RESOLVED_STUB="true", you must provide working nameservers in your netplan configuration, otherwise DNS resolution may stop working.

4) Download the provisioning script and run it:

curl -fsSL ${RUDL_DOWNLOAD_URL}rudl-provision-maschine.sh -o rudl-provision-maschine.sh
chmod +x rudl-provision-maschine.sh
./rudl-provision-maschine.sh ./server.env

For debugging:

./rudl-provision-maschine.sh ./server.env --debug

What the script does:

  • installs required packages
  • creates the admin user and SSH authorized key
  • disables root SSH login and password SSH login
  • configures nftables
  • enables unattended upgrades
  • optionally enables the Docker prune cron job
  • optionally disables the systemd-resolved stub listener

The script does not edit netplan. If you disable the stub listener, configure nameservers manually in your netplan config first.