blob: 3904a228d4e434d3fe02a3ee47acf93786f69cc5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
- hosts: radicle-other-node
remote_user: debian
become: yes
roles:
- role: sane_debian_system
- role: sshd
- role: unix_users
tasks:
- name: "install important additional packages"
apt:
name:
- curl
- git
- name: "create directory for Radicle keys"
file:
state: directory
path: /home/_rad/.radicle/keys
owner: _rad
group: _rad
mode: 0755
- name: "install Radicle private key"
copy:
content: "{{ radicle_key }}"
dest: /home/_rad/.radicle/keys/radicle
owner: _rad
group: _rad
mode: 0600
- name: "install Radicle public key"
copy:
content: "{{ radicle_pub }}"
dest: /home/_rad/.radicle/keys/radicle.pub
owner: _rad
group: _rad
mode: 0644
- name: "install of upgrade Radicle using installer"
shell: |
# Can't use "set -o pipefail" here, because shell may not be
# bash. So we don't use a pipe from curl to bash, and download
# as one command and run script as a second command. If the
# download fails, the task fails.
curl -sSf https://radicle.xyz/install > radicle-install
sudo -u _rad bash radicle-install
vars:
sane_debian_system_version: 2
sane_debian_system_hostname: "{{ inventory_hostname }}"
sane_debian_system_codename: bookworm
sane_debian_system_timezone: Europe/Helsinki
sane_debian_system_sources_lists:
- repo: |
deb http://security.debian.org/debian-security bookworm-security main
unix_users_version: 2
unix_users:
- username: _rad
comment: Radicle node
sshd_version: 1
radicle_key: "{{ lookup('pipe', 'pass radicle/radicle-other-node/key') }}"
radicle_pub: "{{ lookup('pipe', 'pass radicle/radicle-other-node/key.pub') }}"
|
