1 files changed, 103 insertions, 0 deletions
diff --git a/ansible/ambient-driver.yml b/ansible/ambient-driver.yml
new file mode 100644
index 0000000..6abdde7
--- /dev/null
+++ b/ansible/ambient-driver.yml
@@ -0,0 +1,103 @@
+- hosts: ambient-driver
+  remote_user: debian
+  become: yes
+  roles:
+    - role: sane_debian_system
+    - role: sshd
+    - role: comfortable-debian-system
+    - role: unix_users
+    - role: liw
+    - role: rust-rustup
+  tasks:
+    - apt:
+        name:
+          - ambient-driver
+          - build-essential
+          - cpu-checker
+          - dput
+          - qemu-system-x86
+          - qemu-utils
+    - file:
+        state: directory
+        path: /home/liw/.config/ambient-driver
+        owner: liw
+        group: liw
+    - file:
+        state: directory
+        path: /home/liw/images
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          tmpdir: /tmp
+          log: ~/log
+          run_ci: /usr/bin/run-ci
+          cpus: 12
+          memory: 25769803776
+          cache_max_size: 536870912000
+          dput_target: apt.liw.fi
+        dest: /home/liw/.config/ambient-driver/config.yaml
+    - copy:
+        content: |
+          [apt.liw.fi]
+          login = incoming
+          fqdn = apt.liw.fi
+          method = scp
+          incoming = /srv/apt/incoming
+          allow_unsigned_uploads = 1
+          check_version = 0
+          run_dinstall = 0
+        dest: /home/liw/.dput.cf
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          {{ lookup('pipe', 'pass ambient-driver-apt/key') }}
+        dest: /home/liw/.ssh/id_ed25519
+        owner: liw
+        group: liw
+        mode: 0600
+    - copy:
+        content: |
+          {{ lookup('pipe', 'pass ambient-driver-apt/key.pub') }}
+        dest: /home/liw/.ssh/id_ed25519.pub
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          ssh-ed25519-cert-v01@openssh.com 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 liw@tursas
+        dest: /home/liw/.ssh/id_ed25519-cert.pub
+        owner: liw
+        group: liw
+    - copy:
+        content: |
+          Host *
+              IdentityFile ~/.ssh/id_ed25519
+              PasswordAuthentication no
+              IdentitiesOnly yes
+        dest: /home/liw/.ssh/config
+        owner: liw
+        group: liw
+  vars:
+    ansible_python_interpreter: python3
+
+    sane_debian_system_version: 2
+    sane_debian_system_hostname: "{{ inventory_hostname }}"
+    sane_debian_system_codename: bookworm
+
+    timezone: Europe/Helsinki
+
+    unix_users_version: 2
+    unix_users:
+      - username: liw
+        comment: Lars Wirzenius
+        groups:
+          - kvm
+        sudo: yes
+
+    sane_debian_system_sources_lists:
+      - repo: deb http://apt.liw.fi/debian unstable main
+        signing_key: "{{ apt_liw_fi_signing_key }}"
+
+    sshd_version: 1
+