infrastructure/os/config/roles/common/tasks/main.yml

87 lines
2.1 KiB
YAML
Raw Normal View History

2019-06-01 14:02:49 +00:00
- name: "Check that host runs Debian buster/sid on armv7l or x86_64"
assert:
that:
- "ansible_architecture == 'aarch64' or ansible_architecture == 'armv7l' or ansible_architecture == 'x86_64'"
- "ansible_os_family == 'Debian'"
- name: "Upgrade system"
apt:
upgrade: dist # Should we do a full uprade instead of a dist one?
update_cache: yes
cache_valid_time: 3600
autoclean: yes
autoremove: yes
- name: "Install base tools"
apt:
name:
# Essentials
2019-06-01 14:02:49 +00:00
- curl
- less
- sudo
- tar
- unzip
# User tooling
- screen
- vim
# Monitoring
2019-06-01 14:02:49 +00:00
- bmon
- htop
2019-06-01 14:02:49 +00:00
- iftop
- iotop
- iputils-ping
- pciutils
2019-06-01 14:02:49 +00:00
- strace
- tcpdump
# Networking
2021-03-23 16:12:13 +00:00
- dnsutils # now called bind9-dnsutils (still valid)
2021-02-01 18:56:16 +00:00
- ethtool
- iproute2 # advanced net-tools
- iptables # legacy firewall (still used by diplonat)
- iptables-persistent
- net-tools # basic network tools
- nftables # iptables' successor (will replace it eventually)
# Optional / Dispensable
#- docker.io # Adrien n'approuve pas (il faut utiliser le repo Docker)
- parted
#- btrfs-tools
#- libnss-resolve # provides DNS/LLMNR utilities via systemd-resolved
2019-06-01 14:02:49 +00:00
state: present
2020-02-16 19:05:47 +00:00
# Install Docker if need be
- name: Check if Docker is installed
command: 'which docker'
args:
warn: no
register: docker_exists
changed_when: docker_exists.rc != 0
ignore_errors: true
- name: "Install Docker"
include_tasks: docker.yml
when: docker_exists.rc != 0
# Install Nomad & Consul if need be
- name: Check if Nomad is installed
command: 'which nomad'
args:
warn: no
register: nomad_exists
changed_when: nomad_exists.rc != 0
ignore_errors: true
- name: "Install Nomad & Consul"
include_tasks: hashicorp.yml
when: nomad_exists.rc != 0
2021-03-23 16:12:13 +00:00
# Cool stuff
2020-02-16 19:05:47 +00:00
- name: "Passwordless sudo"
lineinfile:
path: /etc/sudoers
state: present
regexp: '^%sudo'
line: '%sudo ALL=(ALL) NOPASSWD: ALL'
validate: 'visudo -cf %s'