blob: dd9a94986794861e6b55877b6db91ed945cda3ac (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
- hosts: radicle.liw.fi
remote_user: root
become: yes
roles:
- role: run-finntroll-playbook-instead
- role: sane_debian_system
- role: sshd
- role: unix_users
- role: rust-rustup
- role: radicle_node
tasks:
- name: "install convenience packages"
apt:
name:
- jq
- moreutils
- psmisc
vars:
ansible_python_interpreter: /usr/bin/python3
sane_debian_system_version: 2
sane_debian_system_hostname: "{{ inventory_hostname }}"
sane_debian_system_codename: bookworm
sane_debian_system_timezone: Europe/Helsinki
sane_debian_system_sources_lists:
- repo: |
deb http://security.debian.org/debian-security bookworm-security main contrib non-free
- repo: deb http://apt.liw.fi/debian unstable main
signing_key: "{{ apt_liw_fi_signing_key }}"
unix_users_version: 2
unix_users:
- username: _rad
comment: Radicle node
sshd_version: 1
radicle_node_version: 1
radicle_node_key: "{{ lookup('pipe', 'pass radicle/radicle.liw.fi/key') }}"
radicle_node_key_pub: "{{ lookup('pipe', 'pass radicle/radicle.liw.fi/key.pub') }}"
radicle_node_connections: []
radicle_node_repositories:
# heartwood
- rid: "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5"
# pathdedup test repo
- rid: "rad:zZnk3hS8C3WAhnv7mWcCUToCqpBs"
# ansibleness
- rid: "rad:z3sckw1Xm8j5URDJz1zeESHfFYDEc"
# debian-ansible
- rid: "rad:z3LXXus6Wu93LuSuuuSBPcFkDiyCW"
# html-page
- rid: "rad:z2i9UF8soK1X6L9hae8UcQPSvdHjW"
# liw-dot-files
- rid: "rad:z2xcsrnG8dC76bkxXsASZbWGH5N2w"
# radicle-stress-test
- rid: "rad:z2HXqzZMRhZUiYm33pLgYfqBgcGCj"
# radicle-ci-broker
- rid: "rad:zwTxygwuz5LDGBq255RA2CbNGrz8"
# radicle-native-ci
- rid: "rad:z3qg5TKmN83afz2fj9z3fQjU8vaYE"
# riki
- rid: "rad:zw9BgStPgCkdsMspzs7EGbwnXq3r"
# wumpus hunter
- rid: "rad:zd4kAF7rQFKbCHAdbcF6zVkx8MyN"
# missing-dependencies
- rid: "rad:z3PKKNstRjLYqhvGq9rxGy7LoEVr5"
# vmdb2
- rid: "rad:z2kxCtBwDQMPcaf9vGTNH5nYkp9qk"
# vmdb2-web
- rid: "rad:z2mn6wzpVAuJoeWx7TZo33nCHuDfQ"
# unpack-debian-sources
- rid: "rad:zgYpM7b29D6wTMjEUxxzBjcF9EvK"
radicle_node_domain_name: radicle.liw.fi
radicle_node_wumpus_domain_name: wumpus.liw.fi
radicle_node_ci_domain_name: ci.radicle.liw.fi
radicle_node_ci_broker_config: |
db: /home/_rad/ci-broker.db
report_dir: /srv/http
default_adapter: native
adapters:
native:
command: /bin/radicle-native-ci
env:
RADICLE_NATIVE_CI: /home/_rad/native-ci.yaml
filters:
- !Or
- !And
- !Repository "rad:zZnk3hS8C3WAhnv7mWcCUToCqpBs"
- !AnyPatch
- !And
- !Repository "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5"
- !AnyPatch
- !And
- !Repository "rad:zwTxygwuz5LDGBq255RA2CbNGrz8"
- !AnyPatch
- !And
- !Repository "rad:z3qg5TKmN83afz2fj9z3fQjU8vaYE"
- !AnyPatch
radicle_node_policy: block
radicle_node_scope: all
# radicle_node_backup: /home/liw/data/radicle.liw.fi/.
rust_rustup_user: _rad
|