ansible-install-server/roles/fai/tasks/os.yml

73 lines
1.6 KiB
YAML

### OPERATING SYSTEM CONFIGURATION
- name: "Debug conditions"
ansible.builtin.debug:
var: item
verbosity: 2
loop:
- "{{ ansible_nopasswd }}"
- "{{ ansible_user_id }}"
tags:
- ansible_nopasswd
- name: "Allow ansible user to use sudo without password (only for testing)"
become: true
ansible.builtin.template:
src: "sudoers.d/ansible.jn2"
dest: "/etc/sudoers.d/ansible"
owner: root
group: root
mode: '0440'
lstrip_blocks: true
backup: false
validate: /usr/sbin/visudo -cf %s
when:
- ansible_nopasswd
- ansible_user_id != "root"
tags:
- ansible_nopasswd
- name: "Make sure to remove sudo without password (only for testing)"
become: true
ansible.builtin.file:
path: "/etc/sudoers.d/ansible"
state: absent
when: not ansible_nopasswd
tags:
- ansible_nopasswd
- name: "Configure bashrc"
become: true
ansible.builtin.copy:
src: "bashrc"
dest: "/root/.bashrc"
owner: root
group: root
mode: '0644'
tags:
- bashrc
- name: "Configure global vimrc.local"
become: true
ansible.builtin.copy:
src: "vimrc.local"
dest: "/etc/vim/vimrc.local"
owner: root
group: root
mode: '0644'
tags:
- vimrc.local
- name: "Install essential packages"
become: true
vars:
distrib: "{{ ansible_distribution|lower }}"
package:
name: '{{ package_set.core[distrib].standard }}'
state: present
update_cache: false
### ONLY A SET FOR DEBIAN/UBUNTU HAS BEEN DEFINED YET
when: ansible_facts['os_family'] == "Debian"
tags:
- packages