- hosts: image
  tasks:
    - name: set hostname in /etc/hostname
      copy:
        content: "{{ hostname }}"
        dest: /etc/hostname
        owner: root
        group: root
        mode: 0600

    - name: add hostname to /etc/hosts
      lineinfile:
        dest: /etc/hosts
        regexp: '^127\.0\.1\.1'
        line: "127.0.0.1 {{ hostname }}"

    - name: remove password for root
      shell: |
        sed -i 's/^root:x:/root::/' /etc/passwd

    - name: add ansible user
      user:
        name: ansible
        comment: "Ansible config mangement"
        shell: /bin/bash

    - name: add ssh key to ansible authorized keys
      authorized_key:
        user: ansible
        state: present
        key: "{{ ssh_key_for_ansible }}"

    - name: add dhcp client to eth0
      copy:
        content: |
          auto eth0
          iface eth0 inet dhcp
        dest: /etc/network/interfaces.d/eth0
        owner: root
        group: root
        mode: 0644

    - name: install sshd
      apt:
        name: ssh

    - name: install sudo
      apt:
        name: sudo

    - name: allow passwordless sudo for ansible
      copy:
        content: "ansible ALL=(ALL:ALL) NOPASSWD: ALL"
        dest: /etc/sudoers.d/ansible
        owner: root
        group: root
        mode: 0600

  vars:
    hostname: stretch-amd64
    ssh_key_for_ansible: ssh-rsa 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 openpgp:0xBBE80E50