forked from Deuxfleurs/infrastructure
64 lines
1.3 KiB
YAML
64 lines
1.3 KiB
YAML
- name: "Check that host runs Debian buster/sid on armv7l or x86_64"
|
|
assert:
|
|
that:
|
|
- "ansible_architecture == 'aarch64' or ansible_architecture == 'armv7l' or ansible_architecture == 'x86_64'"
|
|
- "ansible_os_family == 'Debian'"
|
|
|
|
- name: "Upgrade system"
|
|
apt:
|
|
upgrade: dist # Should we do a full uprade instead of a dist one?
|
|
update_cache: yes
|
|
cache_valid_time: 3600
|
|
autoclean: yes
|
|
autoremove: yes
|
|
|
|
- name: "Install base tools"
|
|
apt:
|
|
name:
|
|
- vim
|
|
- htop
|
|
- screen
|
|
- iptables
|
|
- iptables-persistent
|
|
- nftables
|
|
- iproute2
|
|
- curl
|
|
- iputils-ping
|
|
- dnsutils
|
|
- bmon
|
|
- iftop
|
|
- iotop
|
|
# - docker.io # The bad way of installing Docker
|
|
- locales
|
|
- unzip
|
|
- tar
|
|
- tcpdump
|
|
- less
|
|
- parted
|
|
# - btrfs-tools # not in Debian 11
|
|
- libnss-resolve
|
|
- net-tools
|
|
- strace
|
|
- sudo
|
|
- ethtool
|
|
- pciutils
|
|
- pv
|
|
- zstd
|
|
- miniupnpc
|
|
- rsync
|
|
- ncdu
|
|
- smartmontools
|
|
- ioping
|
|
- lm-sensors
|
|
- netcat
|
|
- sysstat
|
|
state: present
|
|
|
|
- name: "Passwordless sudo"
|
|
lineinfile:
|
|
path: /etc/sudoers
|
|
state: present
|
|
regexp: '^%sudo'
|
|
line: '%sudo ALL=(ALL) NOPASSWD: ALL'
|
|
validate: 'visudo -cf %s'
|
|
|