infrastructure/ansible/roles/common/tasks/main.yml

54 lines
1.1 KiB
YAML
Raw Normal View History

2019-06-01 14:02:49 +00:00
- name: "Check that host runs Debian buster/sid on armv7l or x86_64"
assert:
that:
- "ansible_architecture == 'aarch64' or ansible_architecture == 'armv7l' or ansible_architecture == 'x86_64'"
- "ansible_os_family == 'Debian'"
2020-01-18 14:39:34 +00:00
- "ansible_distribution_version == '10'"
2019-06-01 14:02:49 +00:00
- name: "Upgrade system"
apt:
upgrade: dist # Should we do a full uprade instead of a dist one?
update_cache: yes
cache_valid_time: 3600
autoclean: yes
autoremove: yes
- name: "Install base tools"
apt:
name:
2020-01-18 14:39:34 +00:00
- sudo
2019-06-01 14:02:49 +00:00
- vim
- htop
- screen
- iptables
- iptables-persistent
- nftables
- iproute2
- curl
- iputils-ping
- dnsutils
- bmon
- iftop
- iotop
- docker.io
- unzip
- tar
- tcpdump
- less
- parted
- btrfs-tools
- libnss-resolve
- net-tools
- strace
2020-02-16 18:57:53 +00:00
- sudo
2019-06-01 14:02:49 +00:00
state: present
2020-02-16 19:05:47 +00:00
- name: "Passwordless sudo"
lineinfile:
path: /etc/sudoers
state: present
regexp: '^%sudo'
line: '%sudo ALL=(ALL) NOPASSWD: ALL'
validate: 'visudo -cf %s'