2020-11-28 15:12:53 +00:00
|
|
|
---
|
|
|
|
- hosts: all
|
|
|
|
|
|
|
|
gather_facts: no
|
|
|
|
|
|
|
|
serial: 1
|
|
|
|
|
|
|
|
vars:
|
|
|
|
# List(!) of SSH keys for authorized_keys. Set here or in group_vars/all.yml
|
|
|
|
#ssh_keys: []
|
|
|
|
|
|
|
|
cmdline_python:
|
|
|
|
alpine:
|
|
|
|
- "apk add -U python3"
|
|
|
|
centos: &cmdline_python_centos
|
|
|
|
- "yum clean all"
|
|
|
|
- "yum makecache"
|
|
|
|
- "yum install -y python3 || true"
|
|
|
|
debian: &cmdline_python_debian
|
|
|
|
- "apt-get -y update"
|
|
|
|
- "apt-get install -y python3 python3-apt"
|
|
|
|
devuan: *cmdline_python_debian
|
|
|
|
fedora: *cmdline_python_centos
|
|
|
|
opensuse:
|
|
|
|
- "zypper --gpg-auto-import-keys --no-gpg-checks -n refresh"
|
|
|
|
- "zypper --gpg-auto-import-keys --no-gpg-checks -n install python3"
|
|
|
|
ubuntu: *cmdline_python_debian
|
|
|
|
voidlinux:
|
|
|
|
- "xbps-install -Suy python3 libgcc"
|
|
|
|
|
|
|
|
ssh_package_name:
|
|
|
|
opensuse: openssh
|
|
|
|
voidlinux: openssh
|
|
|
|
|
|
|
|
ssh_service_name:
|
|
|
|
devuan: ssh
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
tasks:
|
|
|
|
|
|
|
|
- name: End for non-LXContainer
|
|
|
|
meta: end_host
|
|
|
|
when: inventory_hostname in groups.lxc_hosts
|
|
|
|
|
|
|
|
|
|
|
|
- name: Create LXContainer
|
|
|
|
lxc_container:
|
|
|
|
name: "{{ inventory_hostname }}"
|
|
|
|
state: started
|
|
|
|
template: download
|
|
|
|
template_options: "-a amd64 -d {{ os_d }} -r {{ os_r }} --no-validate"
|
|
|
|
config: /etc/lxc/ansible.conf
|
|
|
|
register: lxc_created
|
|
|
|
delegate_to: "{{ ansible_host }}"
|
|
|
|
|
|
|
|
|
|
|
|
- pause:
|
|
|
|
seconds: 10
|
|
|
|
when: lxc_created is changed
|
|
|
|
|
|
|
|
|
|
|
|
- name: Raw-Install Python
|
|
|
|
raw: "{{ item }}"
|
|
|
|
loop: "{{ cmdline_python[os_d] }}"
|
|
|
|
|
|
|
|
|
|
|
|
- setup:
|
|
|
|
|
|
|
|
|
|
|
|
- name: Set root password
|
2021-02-26 15:42:50 +00:00
|
|
|
shell: "echo root:root | chpasswd -c SHA256"
|
2020-11-28 15:12:53 +00:00
|
|
|
|
|
|
|
|
|
|
|
- name: Install SSH
|
|
|
|
package:
|
|
|
|
name: "{{ ssh_package_name[os_d]|default('openssh-server') }}"
|
|
|
|
state: latest
|
|
|
|
|
|
|
|
|
|
|
|
- name: "Set «PermitRootLogin» to «yes»"
|
|
|
|
lineinfile:
|
|
|
|
dest: /etc/ssh/sshd_config
|
|
|
|
regexp: '^#? *PermitRootLogin'
|
|
|
|
line: "PermitRootLogin yes"
|
|
|
|
backup: yes
|
|
|
|
notify: "Restart SSH"
|
|
|
|
|
|
|
|
|
|
|
|
- name: Enable SSH
|
|
|
|
service:
|
|
|
|
name: "{{ ssh_service_name[os_d]|default('sshd') }}"
|
|
|
|
enabled: yes
|
|
|
|
|
|
|
|
|
|
|
|
- name: Start SSH
|
|
|
|
service:
|
|
|
|
name: "{{ ssh_service_name[os_d]|default('sshd') }}"
|
|
|
|
state: started
|
|
|
|
ignore_errors: yes
|
|
|
|
|
|
|
|
|
|
|
|
- name: Add SSH keys
|
|
|
|
authorized_key:
|
|
|
|
user: root
|
|
|
|
key: "{{ item }}"
|
|
|
|
loop: "{{ ssh_keys }}"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
handlers:
|
|
|
|
|
|
|
|
- name: Restart SSH
|
|
|
|
service:
|
|
|
|
name: "{{ ssh_service_name[os_d]|default('sshd') }}"
|
|
|
|
state: restarted
|
|
|
|
|
|
|
|
|