diff options
| author | Lars Wirzenius <liw@liw.fi> | 2022-10-16 09:57:10 +0300 |
|---|---|---|
| committer | Lars Wirzenius <liw@liw.fi> | 2022-10-16 09:57:10 +0300 |
| commit | cd6e156377bdf784de10260030145ebf7033ce5c (patch) | |
| tree | 3edbb693bb12fc470d996a39a281f5276333ddf5 | |
| parent | bd957eabc616a14e55c75dc602c2b3f178946e72 (diff) | |
| download | ansibleness-cd6e156377bdf784de10260030145ebf7033ce5c.tar.gz | |
exolobe1: prepare for my work on Heiko's NLnet project
Sponsored-by: author
| -rw-r--r-- | ansible/exolobe1.yml | 43 | ||||
| -rw-r--r-- | v-i/exolobe1-spec.yaml | 15 |
2 files changed, 32 insertions, 26 deletions
diff --git a/ansible/exolobe1.yml b/ansible/exolobe1.yml index 427ad5d..5e03526 100644 --- a/ansible/exolobe1.yml +++ b/ansible/exolobe1.yml @@ -5,9 +5,32 @@ - sane_debian_system - sshd - unix_users - - gnome-system - - role: intel-wifi - tags: wifi + - version-controller + - rust-rustup + - liw + + tasks: + - apt: + name: + - build-essential + - debhelper + - dh-cargo + - docker.io + - libclang-dev + - libpcsclite-dev + - lintian + - moreutils + - nettle-dev + - ntp + - pcscd + - pkg-config + - psmisc + - subplot + - user: + name: liw + groups: + - docker + vars: ansible_python_interpreter: /usr/bin/python3 @@ -16,12 +39,6 @@ sane_debian_system_codename: bullseye sane_debian_system_timezone: Europe/Helsinki sane_debian_system_sources_lists: - - repo: | - deb http://deb.debian.org/debian bullseye contrib non-free - - - repo: | - deb http://security.debian.org/debian-security bullseye-security main contrib non-free - - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main signing_key: "{{ ci_prod_signing_key }}" @@ -29,13 +46,13 @@ unix_users: - username: liw comment: Lars Wirzenius - authorized_keys: | - {{ liw_personal_ssh_pub }} sshd_version: 1 sshd_host_key: "{{ lookup('pipe', 'sshca host private-key exolobe1') }}" - sshd_host_cert: "{{ lookup('pipe', 'sshca host certify liw.fi/ca/host/v4 exolobe1') }}" - sshd_user_ca_pub: "{{ lookup('pipe', 'sshca ca public-key liw.fi/ca/user/v3') }}" + sshd_host_cert: "{{ lookup('pipe', 'sshca host certify liw.fi/ca/host/v5 exolobe1') }}" + sshd_user_ca_pub: "{{ lookup('pipe', 'sshca ca public-key liw.fi/ca/user/v5') }}" rustup_cargo_install: | + bat \ + ripgrep \ starship diff --git a/v-i/exolobe1-spec.yaml b/v-i/exolobe1-spec.yaml index b063753..bfabb29 100644 --- a/v-i/exolobe1-spec.yaml +++ b/v-i/exolobe1-spec.yaml @@ -4,16 +4,5 @@ extra_lvs: - name: home size: 300G mounted: /home -ansible_vars: - host_key: | - -----BEGIN OPENSSH PRIVATE KEY----- - b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW - QyNTUxOQAAACDrR+77pLmmtG2oAtcaot5ZIgU7FriMoDSCejG33dsfjgAAAIietrwbnra8 - GwAAAAtzc2gtZWQyNTUxOQAAACDrR+77pLmmtG2oAtcaot5ZIgU7FriMoDSCejG33dsfjg - AAAEAugoV1wqYMsAYSW1su3W3WyWh4ZIWNbvDIkphOGOS0eetH7vukuaa0bagC1xqi3lki - BTsWuIygNIJ6Mbfd2x+OAAAAAAECAwQF - -----END OPENSSH PRIVATE KEY----- - host_cert: | - ssh-ed25519-cert-v01@openssh.com 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 /tmp/.tmpximUbQ/sub.pub - user_pub: | - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPQe6lsTapAxiwhhEeE/ixuK+5N8esCsMWoekQqjtxjP liw personal systems +ansible_vars_files: + - hostid.yml |