summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2023-10-28 11:19:12 +0300
committerLars Wirzenius <liw@liw.fi>2023-10-28 11:19:12 +0300
commitc4cc6796a5198731af1e145fc777bcaca3705a43 (patch)
tree80bca7fde4d93a8f9966a196ef0ca6cc2979fb90
parent22e507ae606c1fb887bb4076710b6d03e5ede587 (diff)
downloadpuomi-c4cc6796a5198731af1e145fc777bcaca3705a43.tar.gz
chore: drop obsolete custom installer stuff
Use of the standard v-i image replaces this. Signed-off-by: Lars Wirzenius <liw@liw.fi> Sponsored-by: author
-rw-r--r--puomi-installer-playbook.yml126
-rw-r--r--puomi-qotom.yaml12
-rw-r--r--puomi-x220.yaml20
3 files changed, 0 insertions, 158 deletions
diff --git a/puomi-installer-playbook.yml b/puomi-installer-playbook.yml
deleted file mode 100644
index eb80b5b..0000000
--- a/puomi-installer-playbook.yml
+++ /dev/null
@@ -1,126 +0,0 @@
-# Ansible playbook for installing a router.
-
-- hosts: image
- pre_tasks:
- - name: "add contrib and non-free to APT sources"
- apt_repository:
- repo: "deb http://deb.debian.org/debian bullseye contrib non-free"
-
- - name: "install software"
- apt:
- name:
- - hostapd
- - firmware-iwlwifi
- - haveged
- - bridge-utils
- - man
- - ferm
- - dnsmasq
- - bind9-dnsutils
- - locales-all
-
- - name: "configure dnsmasq for .d support"
- lineinfile:
- path: /etc/dnsmasq.conf
- regexp: ^conf-dir
- line: "conf-dir=/etc/dnsmasq.d/,*.conf"
-
- - name: "configure dnsmasq for router"
- copy:
- content: |
- dhcp-range=10.1.1.10,10.1.1.250,255.255.255.0,1h
- host-record=puomi,10.1.1.1
- interface=br0
- interface=lo
- max-cache-ttl=30
- neg-ttl=10
- dest: /etc/dnsmasq.d/router.conf
-
- - name: "configure hostapd"
- copy:
- content: |
- interface=wlan0
- bridge=br0
- driver=nl80211
- ssid={{ wifi_essid }}
- country_code={{ wifi_country_code }}
- hw_mode=g
- ieee80211n=1
- channel=2
- macaddr_acl=0
- auth_algs=1
- ignore_broadcast_ssid=0
- wmm_enabled=1
- wpa=2
- wpa_passphrase={{ wifi_passphrase }}
- wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256
- wpa_pairwise=TKIP
- rsn_pairwise=CCMP
- dest: /etc/hostapd/hostapd.conf
-
- - name: "configure ferm firewall"
- copy:
- content: |
- table filter {
- chain INPUT policy ACCEPT;
- chain OUTPUT policy ACCEPT;
- chain FORWARD {
- policy ACCEPT;
-
- # Printer
- saddr 10.0.0.73 proto tcp DROP;
- saddr 10.0.0.73 proto udp DROP;
- }
- }
-
- table nat {
- chain POSTROUTING MASQUERADE;
- }
- dest: /etc/ferm/ferm.conf
-
- - name: "configure bridge device br0"
- copy:
- content: |
- [NetDev]
- Name=br0
- Kind=bridge
- dest: /etc/systemd/network/br0.netdev
-
- - name: "add wired devices to br0"
- copy:
- content: |
- [Match]
- Name=eth[^0]*
-
- [Network]
- Bridge=br0
- dest: /etc/systemd/network/wired.network
-
- - name: "configure br0 to provide DHCP and NAT"
- copy:
- content: |
- [Match]
- Name=br0
-
- [Network]
- Address=10.1.1.1/24
- DHCPServer=false
- IPMasquerade=true
- ConfigureWithoutCarrier=true
- dest: /etc/systemd/network/br0.network
-
- vars:
- ansible_python_interpreter: /usr/bin/python3
-
- sane_debian_system_version: 2
- sane_debian_system_codename: bullseye
- sane_debian_system_timezone: Europe/Helsinki
- sane_debian_system_sources_lists:
- - repo: |
- deb http://deb.debian.org/debian bullseye contrib non-free
-
- unix_users_version: 2
-
- wifi_essid: Valkama2
- wifi_country_code: FI
- wifi_passphrase: Oomam2ah
diff --git a/puomi-qotom.yaml b/puomi-qotom.yaml
deleted file mode 100644
index 70cfe27..0000000
--- a/puomi-qotom.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-# A target specification file for v-i for Puomi on a Lenovo Thinkpad
-# X220 laptop.
-
-drive: /dev/sda
-hostname: qotom
-extra_playbooks:
- - puomi-playbook.yml
-ansible_vars:
- user_pub: |
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPQe6lsTapAxiwhhEeE/ixuK+5N8esCsMWoekQqjtxjP liw personal systems
-ansible_vars_files:
- - hostid.yml
diff --git a/puomi-x220.yaml b/puomi-x220.yaml
deleted file mode 100644
index 42d27e2..0000000
--- a/puomi-x220.yaml
+++ /dev/null
@@ -1,20 +0,0 @@
-# A target specification file for v-i for Puomi on a Lenovo Thinkpad
-# X220 laptop.
-
-drive: /dev/sdb
-hostname: x220
-extra_playbooks:
- - puomi-playbook.yml
-ansible_vars:
- user_ca_pubkey: |
- sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIAnrswi6ZNElxSgt6ak5hjSNIkVte11ht7BG3qpBJU4hAAAABHNzaDo=
- host_key: |
- -----BEGIN OPENSSH PRIVATE KEY-----
- b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
- QyNTUxOQAAACBLyRiXsVpDGLYeaSrqLaQEk9xPGdpaYYln5ZzvCmtTrwAAAIja9k5L2vZO
- SwAAAAtzc2gtZWQyNTUxOQAAACBLyRiXsVpDGLYeaSrqLaQEk9xPGdpaYYln5ZzvCmtTrw
- AAAEDWNzJ+c1v8VHN0TezEBADgaaww2RdzHNF9pA+el40MyEvJGJexWkMYth5pKuotpAST
- 3E8Z2lphiWflnO8Ka1OvAAAAAAECAwQF
- -----END OPENSSH PRIVATE KEY-----
- host_cert: |
- ssh-ed25519-cert-v01@openssh.com AAAAIHNzaC1lZDI1NTE5LWNlcnQtdjAxQG9wZW5zc2guY29tAAAAIONCUIfScV7h4bHqDUQ4dnLwxjs22oS8TdQkZzFfVVYkAAAAIEvJGJexWkMYth5pKuotpAST3E8Z2lphiWflnO8Ka1OvAAAAAAAAAAAAAAACAAAAGWNlcnRpZmljYXRlIGZvciBob3N0IHgyMjAAAAAIAAAABHgyMjAAAAAAYxxgIAAAAABjkwdxAAAAAAAAAAAAAAAAAAAAMwAAAAtzc2gtZWQyNTUxOQAAACD7tWzrRUC8C8aZNM0tWvEBW/VJQ2zjjh9THBOYQ07ZxAAAAFMAAAALc3NoLWVkMjU1MTkAAABA1y9CkOOEoocjnaFWw4DCWrl90E5E0/s56Aoz5pCV8GocIlUCkbs9dFC2pQbubMCNw+5RnMWLoA8QJ6/uIsZ3CQ== /tmp/.tmp5sslvF/sub.pub