ambient-driver: add

Signed-off-by: Lars Wirzenius <liw@liw.fi>
Sponsored-by: author

2 files changed, 99 insertions, 0 deletions

diff --git a/ansible/ambient-driver.yml b/ansible/ambient-driver.yml
new file mode 100644
index 0000000..3cfaccc
--- /dev/null
+++ b/ansible/ambient-driver.yml
@@ -0,0 +1,98 @@
+- hosts: ambient-driver
+  remote_user: debian
+  become: yes
+  roles:
+    - role: sane_debian_system
+    - role: sshd
+    - role: comfortable-debian-system
+    - role: unix_users
+    - role: liw
+    - role: rust-rustup
+  tasks:
+    - apt:
+        name:
+          - ambient-driver
+          - build-essential
+          - cpu-checker
+          - dput
+          - qemu-system-x86
+          - qemu-utils
+    - file:
+        state: directory
+        path: /home/liw/.config/ambient-driver
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          tmpdir: /tmp
+          log: ~/log
+          run_ci: /usr/bin/run-ci
+          cpus: 12
+          memory: 25769803776
+          cache_max_size: 536870912000
+          dput_target: apt.liw.fi
+        dest: /home/liw/.config/ambient-driver/config.yaml
+    - copy:
+        content: |
+          [apt.liw.fi]
+          login = incoming
+          fqdn = apt.liw.fi
+          method = scp
+          incoming = /srv/apt/incoming
+          allow_unsigned_uploads = 1
+          check_version = 0
+          run_dinstall = 0
+        dest: /home/liw/.dput.cf
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          {{ lookup('pipe', 'pass ambient-driver-apt/key') }}
+        dest: /home/liw/.ssh/id_ed25519
+        owner: liw
+        group: liw
+        mode: 0600
+    - copy:
+        content: |
+          {{ lookup('pipe', 'pass ambient-driver-apt/key.pub') }}
+        dest: /home/liw/.ssh/id_ed25519.pub
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          ssh-ed25519-cert-v01@openssh.com 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 liw@tursas
+        dest: /home/liw/.ssh/id_ed25519-cert.pub
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          Host *
+              IdentityFile ~/.ssh/id_ed25519
+              PasswordAuthentication no
+              IdentitiesOnly yes
+        dest: /home/liw/.ssh/config
+        owner: liw
+        group: liw
+  vars:
+    ansible_python_interpreter: python3
+
+    sane_debian_system_version: 2
+    sane_debian_system_hostname: "{{ inventory_hostname }}"
+    sane_debian_system_codename: bookworm
+
+    timezone: Europe/Helsinki
+
+    unix_users_version: 2
+    unix_users:
+      - username: liw
+        comment: Lars Wirzenius
+        groups:
+          - kvm
+        sudo: yes
+
+    sane_debian_system_sources_lists:
+      - repo: deb http://apt.liw.fi/debian unstable main
+        signing_key: "{{ apt_liw_fi_signing_key }}"
+
+    sshd_version: 1
+
diff --git a/ansible/hosts b/ansible/hosts
index 2b5e6c6..67a1e88 100644
--- a/ansible/hosts
+++ b/ansible/hosts
@@ -9,6 +9,7 @@ texlive
 [dev]
 aptrepo
 ambient-dev
+ambient-driver
 debian-ansible-dev
 icktool
 obnam-bench