summaryrefslogtreecommitdiff
path: root/ansible/solace.yml
blob: 0118092304b0bd31b19624d8cc119444fe25878e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
- hosts: solace
  remote_user: root
  become: no
  roles:
    - role: sane_debian_system
    - role: sshd
    - role: ssd
    - role: comfortable-debian-system
    - role: version-controller
    - role: vmhost
    - role: smarthost-client
    - role: mail-client
    - role: unix_users
    - role: rust-rustup
    - role: liw
    - role: self-updating-system

  tasks:
    # Remove ping to force it be reinstalled so that the right
    # capabilities are set.
    - apt:
        name: iputils-ping
        state: absent

    - name: install command line utilities
      apt:
        name:
        - build-essential
        - firmware-misc-nonfree
        - iputils-ping
        - locales-all
        - python3
        - rsync
        - vim

    - apt:
        name:
          - ansible
          - build-essential
          - cmdtest
          - cryptsetup
          - debhelper
          - debian-ports-archive-keyring
          - debootstrap
          - dosfstools
          - expect
          - fonts-freefont-ttf
          - kpartx
          - lvm2
          - moreutils
          - ovmf
          - pandoc
          - parted
          - python3-all
          - python3-cliapp
          - python3-coverage-test-runner
          - python3-jinja2
          - python3-yaml
          - qemu-system-arm
          - qemu-system-ppc
          - qemu-system-x86
          - qemu-user-static
          - qemu-utils
          - subplot
          - texlive-fonts-recommended
          - texlive-latex-base
          - texlive-latex-recommended
          - zerofree

    - apt:
        name:
          - wireless-regdb
          - firmware-realtek

  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://deb.debian.org/debian bookworm contrib non-free non-free-firmware

      - repo: |
          deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware


      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
        signing_key: "{{ ci_prod_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes
        groups:
          - libvirt
          - kvm

    mailname: "{{ sane_debian_system_hostname }}.liw.fi"

    relayhost: pieni.net:587
    smarthost: pieni.net
    smarthost_user: pienirelay
    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"

    rustup_cargo_install: |
      starship \
      ytop

    sshd_version: 1