Compare commits
No commits in common. "efd48de6c734d8052d94cea0442a8ebe90be4f39" and "e060ba9161949a42593bd658dae0a45b231c4d70" have entirely different histories.
efd48de6c7
...
e060ba9161
14 changed files with 667 additions and 702 deletions
1327
inventory.yml
1327
inventory.yml
File diff suppressed because it is too large
Load diff
|
@ -220,7 +220,7 @@
|
||||||
ansible.builtin.blockinfile:
|
ansible.builtin.blockinfile:
|
||||||
path: /usr/share/sddm/themes/debian-breeze/Main.qml
|
path: /usr/share/sddm/themes/debian-breeze/Main.qml
|
||||||
marker: // {mark} ANSIBLE MANAGED BLOCK
|
marker: // {mark} ANSIBLE MANAGED BLOCK
|
||||||
insertbefore: '^}$'
|
insertbefore: '\s+//Footer'
|
||||||
block: |
|
block: |
|
||||||
Text {
|
Text {
|
||||||
id: hostname
|
id: hostname
|
||||||
|
|
|
@ -14,7 +14,7 @@
|
||||||
main non-free-firmware
|
main non-free-firmware
|
||||||
state: present
|
state: present
|
||||||
update_cache: true
|
update_cache: true
|
||||||
when: extra_pkgs_bpo | length > 0 or extra_pkgs_bpo1 | length > 0 or extra_pkgs_bpo2 | length > 0
|
# when: extra_pkgs_bpo|length
|
||||||
|
|
||||||
- name: Install extra packages from backports
|
- name: Install extra packages from backports
|
||||||
ansible.builtin.apt:
|
ansible.builtin.apt:
|
||||||
|
@ -25,7 +25,6 @@
|
||||||
- "{{ extra_pkgs_bpo }}"
|
- "{{ extra_pkgs_bpo }}"
|
||||||
- "{{ extra_pkgs_bpo1 }}"
|
- "{{ extra_pkgs_bpo1 }}"
|
||||||
- "{{ extra_pkgs_bpo2 }}"
|
- "{{ extra_pkgs_bpo2 }}"
|
||||||
when: extra_pkgs_bpo | length > 0 or extra_pkgs_bpo1 | length > 0 or extra_pkgs_bpo2 | length > 0
|
|
||||||
|
|
||||||
- name: Timestamp successfull run and send up-to-date report
|
- name: Timestamp successfull run and send up-to-date report
|
||||||
ansible.builtin.shell:
|
ansible.builtin.shell:
|
||||||
|
|
|
@ -6,7 +6,6 @@ kde_desktop_pkg:
|
||||||
- calligra
|
- calligra
|
||||||
- codeblocks
|
- codeblocks
|
||||||
- dia
|
- dia
|
||||||
- filius
|
|
||||||
- flameshot
|
- flameshot
|
||||||
- freecad
|
- freecad
|
||||||
- fritzing
|
- fritzing
|
||||||
|
@ -15,9 +14,8 @@ kde_desktop_pkg:
|
||||||
- inkscape
|
- inkscape
|
||||||
- kde-full
|
- kde-full
|
||||||
- keepassxc
|
- keepassxc
|
||||||
- kicad
|
|
||||||
- kicad-doc-de
|
|
||||||
- librecad
|
- librecad
|
||||||
|
- mu-editor
|
||||||
- openboard
|
- openboard
|
||||||
- qtcreator
|
- qtcreator
|
||||||
- spyder
|
- spyder
|
||||||
|
@ -36,5 +34,3 @@ kde_desktop_pkg:
|
||||||
- xdg-desktop-portal-kde
|
- xdg-desktop-portal-kde
|
||||||
- xdg-desktop-portal-wlr # share screen in browser
|
- xdg-desktop-portal-wlr # share screen in browser
|
||||||
- xournalpp
|
- xournalpp
|
||||||
|
|
||||||
kde_desktop_pkg_bpo: [ ]
|
|
||||||
|
|
|
@ -8,14 +8,19 @@
|
||||||
repo: deb http://deb.debian.org/debian/ {{ ansible_distribution_release }}-backports main non-free-firmware
|
repo: deb http://deb.debian.org/debian/ {{ ansible_distribution_release }}-backports main non-free-firmware
|
||||||
state: present
|
state: present
|
||||||
update_cache: true
|
update_cache: true
|
||||||
when: kde_desktop_pkg_bpo | length > 0
|
|
||||||
|
|
||||||
- name: Install extra packages from backports
|
- name: Install extra packages from backports
|
||||||
ansible.builtin.apt:
|
ansible.builtin.apt:
|
||||||
name: "{{ kde_desktop_pkg_bpo }}"
|
name:
|
||||||
|
- filius
|
||||||
|
- kicad
|
||||||
|
- kicad-doc-de
|
||||||
|
- libreoffice
|
||||||
|
- libreoffice-l10n-de
|
||||||
|
- libreoffice-qt5
|
||||||
|
state: latest # noqa package-latest
|
||||||
autoremove: true
|
autoremove: true
|
||||||
default_release: "{{ ansible_distribution_release }}-backports"
|
default_release: "{{ ansible_distribution_release }}-backports"
|
||||||
when: kde_desktop_pkg_bpo | length > 0
|
|
||||||
|
|
||||||
|
|
||||||
- name: Create akonadi config dir
|
- name: Create akonadi config dir
|
||||||
|
|
|
@ -9,7 +9,7 @@
|
||||||
ansible.builtin.blockinfile:
|
ansible.builtin.blockinfile:
|
||||||
path: /usr/share/sddm/themes/debian-breeze/Main.qml
|
path: /usr/share/sddm/themes/debian-breeze/Main.qml
|
||||||
marker: // {mark} ANSIBLE MANAGED BLOCK localhome
|
marker: // {mark} ANSIBLE MANAGED BLOCK localhome
|
||||||
insertbefore: '^}$'
|
insertbefore: '\s+//Footer'
|
||||||
block: |
|
block: |
|
||||||
Text {
|
Text {
|
||||||
id: localhome
|
id: localhome
|
||||||
|
|
|
@ -98,7 +98,7 @@
|
||||||
export superusers
|
export superusers
|
||||||
password_pbkdf2 root {{ grub_pwd }}
|
password_pbkdf2 root {{ grub_pwd }}
|
||||||
notify: Run update-grub
|
notify: Run update-grub
|
||||||
when: grub_pwd | bool | default(false)
|
when: grub_pwd|default(false)
|
||||||
|
|
||||||
- name: Allow booting grub menu entries
|
- name: Allow booting grub menu entries
|
||||||
ansible.builtin.lineinfile:
|
ansible.builtin.lineinfile:
|
||||||
|
|
|
@ -5,14 +5,14 @@
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
content: >
|
content: >
|
||||||
{{ apt_conf }}
|
{{ apt_conf }}
|
||||||
when: apt_conf | bool | default(false)
|
when: apt_conf|default(false)
|
||||||
|
|
||||||
- name: Set NTP server
|
- name: Set NTP server
|
||||||
ansible.builtin.lineinfile:
|
ansible.builtin.lineinfile:
|
||||||
path: /etc/systemd/timesyncd.conf
|
path: /etc/systemd/timesyncd.conf
|
||||||
insertafter: '^#NTP='
|
insertafter: '^#NTP='
|
||||||
line: NTP={{ ntp_serv }}
|
line: NTP={{ ntp_serv }}
|
||||||
when: ntp_serv | bool | default(false)
|
when: ntp_serv|default(false)
|
||||||
|
|
||||||
- name: Add proposed-updates repository
|
- name: Add proposed-updates repository
|
||||||
ansible.builtin.apt_repository:
|
ansible.builtin.apt_repository:
|
||||||
|
|
|
@ -37,7 +37,7 @@
|
||||||
line: "SystemGroup root lpadmin {{ printer_admin_group }}"
|
line: "SystemGroup root lpadmin {{ printer_admin_group }}"
|
||||||
regexp: '^SystemGroup'
|
regexp: '^SystemGroup'
|
||||||
state: present
|
state: present
|
||||||
when: printer_admin_group | length > 0
|
when: printer_admin_group | length
|
||||||
|
|
||||||
- name: Disable cups-browsed
|
- name: Disable cups-browsed
|
||||||
ansible.builtin.systemd:
|
ansible.builtin.systemd:
|
||||||
|
|
|
@ -216,7 +216,7 @@ while true; do
|
||||||
shift
|
shift
|
||||||
;;
|
;;
|
||||||
-o | --options )
|
-o | --options )
|
||||||
LIBVIRTOPTS="${LIBVIRTOPTS} $2"
|
LIBVIRTOPTS=$2
|
||||||
shift 2
|
shift 2
|
||||||
;;
|
;;
|
||||||
--no-viewer )
|
--no-viewer )
|
||||||
|
@ -267,7 +267,6 @@ while true; do
|
||||||
type="ethernet,mac=${mac},target.dev=${interface},xpath1.set=./target/@managed=no,model.type=virtio"
|
type="ethernet,mac=${mac},target.dev=${interface},xpath1.set=./target/@managed=no,model.type=virtio"
|
||||||
LIBVIRTOPTS="${LIBVIRTOPTS} --network type=$type"
|
LIBVIRTOPTS="${LIBVIRTOPTS} --network type=$type"
|
||||||
done
|
done
|
||||||
LIBVIRTOPTS="${LIBVIRTOPTS} --check mac_in_use=off"
|
|
||||||
shift
|
shift
|
||||||
;;
|
;;
|
||||||
--os )
|
--os )
|
||||||
|
|
|
@ -18,7 +18,6 @@
|
||||||
- mktorrent
|
- mktorrent
|
||||||
- libvirt-daemon-system
|
- libvirt-daemon-system
|
||||||
- virt-manager
|
- virt-manager
|
||||||
- virt-viewer
|
|
||||||
- dialog # for vm-netboot menu
|
- dialog # for vm-netboot menu
|
||||||
|
|
||||||
# - name: allow all users to use VMs
|
# - name: allow all users to use VMs
|
||||||
|
|
|
@ -20,9 +20,7 @@
|
||||||
when: result.stdout is not defined or result.stdout!="reachable"
|
when: result.stdout is not defined or result.stdout!="reachable"
|
||||||
|
|
||||||
- name: Configure WG Server
|
- name: Configure WG Server
|
||||||
when:
|
when: result.stdout is defined and result.stdout=="reachable"
|
||||||
- result.stdout is defined and result.stdout=="reachable"
|
|
||||||
- not run_in_installer|default(false)|bool
|
|
||||||
block:
|
block:
|
||||||
- name: Set facts wg_clientname
|
- name: Set facts wg_clientname
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
|
|
|
@ -46,7 +46,6 @@
|
||||||
ansible.builtin.include_tasks: eap-tls_issue-certificate.yaml
|
ansible.builtin.include_tasks: eap-tls_issue-certificate.yaml
|
||||||
when:
|
when:
|
||||||
- radius_reachable.stdout is defined and radius_reachable.stdout=="reachable"
|
- radius_reachable.stdout is defined and radius_reachable.stdout=="reachable"
|
||||||
- not run_in_installer|default(false)|bool
|
|
||||||
- |
|
- |
|
||||||
( not cert_client_active.stat.exists ) or
|
( not cert_client_active.stat.exists ) or
|
||||||
(cert_serial.stdout | replace('serial=','') | int(base=16) ) in ( radius_crl.revoked_certificates | map(attribute='serial_number') | list ) or
|
(cert_serial.stdout | replace('serial=','') | int(base=16) ) in ( radius_crl.revoked_certificates | map(attribute='serial_number') | list ) or
|
||||||
|
|
|
@ -3,6 +3,7 @@
|
||||||
- name: Install packages related to wifi
|
- name: Install packages related to wifi
|
||||||
ansible.builtin.apt:
|
ansible.builtin.apt:
|
||||||
name:
|
name:
|
||||||
|
- systemd-resolved
|
||||||
- firmware-realtek # for our wifi sticks
|
- firmware-realtek # for our wifi sticks
|
||||||
|
|
||||||
- name: Provide service to enable WiFi on boot
|
- name: Provide service to enable WiFi on boot
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue