exolobe1: configure for playing with openpgp-card-tools

Sponsored-by: author

1 files changed, 8 insertions, 160 deletions

diff --git a/ansible/exolobe1.yml b/ansible/exolobe1.yml
index c453d8e..8380ccb 100644
--- a/ansible/exolobe1.yml
+++ b/ansible/exolobe1.yml
@@ -1,135 +1,34 @@
 - hosts: exolobe1
-  remote_user: liw
-  become: yes
+  remote_user: root
+  become: no
   roles:
     - role: sane_debian_system
     - role: ssd
     - role: comfortable-debian-system
-    - role: chaoskey-host
     - role: intel-wifi
     - role: version-controller
     - role: emacs
-    - role: gnupg-workstation
     - role: gnome-system
-    - role: ansible
-    - role: vmhost
-    - role: backup-client
-    - role: smarthost-client
-    - role: mail-client
-    - role: annexed
-    - role: riot-host
-    - role: liw-usual
-    - role: writing-dev-env
-    - role: journal-workstation
-    - role: debian-dev-env
-#    - role: subplot-dev-env
-#    - role: obnam-dev-env
-    - role: tex-dev-env
-    - role: python-dev-env
     - role: unix_users
     - role: thinkpad
     - role: rust-rustup
       tags: [rustup]
+    - role: liw
 
   tasks:
-    # Remove ping to force it be reinstalled so that the right
-    # capabilities are set.
-    - apt:
-        name: iputils-ping
-        state: absent
-
     - apt:
         name:
-          - black
           - build-essential
-          - capnproto
           - clang
-          - daemonize
-          - expect
-          - extrautils
-          - fling
-          - gimp
-          - inkscape
-          - iputils-ping
-          - isync
-          - jq
-          - jt
-          - libclang-dev
-          - libsqlite3-dev
-          - libssl-dev
-          - libvirt-dev
-          - linux-perf
-          - liw-automation
-          - llvm
-          - nettle-dev
-          - nfs-common
-          - obnam
-          - obnam-benchmark
-          - openpgp-ca
-          - pandoc-filter-diagram
-          - pavucontrol
           - pkg-config
-          - printer-driver-ptouch
-          - qemu-user-static
-          - sequoia-chameleon-gnupg
-          - shellcheck
-          - sq-liw
-          - sqlite3
-          - sshca
-          - subplot
-          - texlive-latex-extra
-          - texlive-latex-recommended
-          - uuid
-          - validns
-          - vlc
-          - vmdb2
-          - xpdf
-          - zerofree
-
-    - lineinfile:
-        path: /etc/gdm3/daemon.conf
-        regexp: WaylandEnable=
-        line: WaylandEnable=false
-
-    - lineinfile:
-        path: /etc/xdg/autostart/gnome-keyring-ssh.desktop
-        line: Hidden=true
-
-    - lineinfile:
-        path: /etc/X11/Xsession.options
-        line: use-ssh-agent
-        state: absent
-
-    - file:
-        state: directory
-        path: /home/liw/.config/autostart
-        owner: liw
-        group: liw
-
-    - copy:
-        content: |
-          [Desktop Entry]
-          Type=Application
-          Name=gpg-agent
-          Comment=gpg-agent
-          Exec=/usr/bin/gpg-agent --daemon
-          OnlyShowIn=GNOME;Unity;MATE;
-          X-GNOME-Autostart-Phase=PreDisplayServer
-          X-GNOME-AutoRestart=false
-          X-GNOME-Autostart-Notify=true
-          X-GNOME-Bugzilla-Bugzilla=GNOME
-          X-GNOME-Bugzilla-Product=gnome-keyring
-          X-GNOME-Bugzilla-Component=general
-          X-GNOME-Bugzilla-Version=3.20.0
-        dest: /home/liw/.config/autostart/gpg-agent.desktop
-        owner: liw
-        group: liw
-
+          - nettle-dev
+          - libpcsclite-dev
+          - pcscd
   vars:
     ansible_python_interpreter: /usr/bin/python3
 
     sane_debian_system_version: 2
-    sane_debian_system_hostname: exolobe1
+    sane_debian_system_hostname: "{{ inventory_hostname }}"
     sane_debian_system_codename: bullseye
     sane_debian_system_timezone: Europe/Helsinki
     sane_debian_system_sources_lists:
@@ -137,66 +36,15 @@
           deb http://deb.debian.org/debian bullseye contrib non-free
 
       - repo: |
-          deb-src http://deb.debian.org/debian bullseye main contrib non-free
-
-      - repo: |
           deb http://security.debian.org/debian-security bullseye-security main contrib non-free
 
-      - repo: |
-          deb http://code.liw.fi/debian unstable main
-        signing_key: "{{ code_liw_fi_signing_key }}"
-
-      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
-        signing_key: "{{ ci_prod_signing_key }}"
-
-      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable main
-        signing_key: "{{ ci_prod_signing_key }}"
-
     unix_users_version: 2
     unix_users:
       - username: liw
         comment: Lars Wirzenius
         sudo: yes
-        groups:
-          - audio
-          - bluetooth
-          - cdrom
-          - dialout
-          - dip
-          - floppy
-          - libvirt
-          - netdev
-          - plugdev
-          - scanner
-          - video
         authorized_keys: |
           {{ liw_personal_ssh_pub }}
 
-    mailname: exolobe1.liw.fi
-
-    hostname: "{{ sane_debian_system_hostname }}"
-    relayhost: pieni.net:587
-    smarthost: pieni.net
-    smarthost_user: pienirelay
-    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"
-
     rustup_cargo_install: |
-      cargo-audit \
-      cargo-deny \
-      cargo-deps \
-      bandwhich \
-      bat \
-      cargo-edit \
-      cargo-geiger \
-      cargo-outdated \
-      exa \
-      fd-find \
-      flamegraph \
-      git-delta \
-      hyperfine \
-      ripgrep \
-      starship \
-      tokei \
-      zoxide \
-      fzf \
-      ytop
+      starship