alanorth/ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
12711afac9
ansible-personal/roles/common/tasks/packages_Ubuntu.yml

56 lines
1.1 KiB
YAML
Raw Normal View History

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
---
- name: Configure apt mirror
template: src=sources.list.j2 dest=/etc/apt/sources.list owner=root group=root mode=0644
roles/common: Don't set up apt sources on arm The package archives appear to be different for some reason.
2016-09-29 15:47:44 +02:00
when: ansible_architecture != 'armv7l'
roles/common: Use dynamic include_tasks for packages Basically, when using conditionals or variables in your tasks you should use include_tasks instead of import_tasks. The down side is that you now need to tag all included tasks individually or with a block, unlike when using static imports (tags are applied to all imported child tasks). I would actually like to reduce this task to a single one that uses the host's ansible_distribution variable, but Ansible 2.5.1 currently gives the following error: ansible_distribution is undefined.
2018-04-25 17:46:28 +02:00
tags: packages
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- name: Upgrade base OS
Revert "Only update packages indexes if the cache is 1 hour old" This reverts commit 201165cff662caad9b51508272e7f8f2eece7b0c. Turns out this actually breaks initial deployments, because the cache gets updated in the first task, then you add sources for nginx and mariadb, but it doesn't update the indexes because the cache is < 3600 seconds old, so you end up getting the distro's versions of nginx and mariadb.
2016-08-25 11:58:15 +02:00
apt: upgrade=dist update_cache=yes
roles/common: Use dynamic include_tasks for packages Basically, when using conditionals or variables in your tasks you should use include_tasks instead of import_tasks. The down side is that you now need to tag all included tasks individually or with a block, unlike when using static imports (tags are applied to all imported child tasks). I would actually like to reduce this task to a single one that uses the host's ansible_distribution variable, but Ansible 2.5.1 currently gives the following error: ansible_distribution is undefined.
2018-04-25 17:46:28 +02:00
tags: packages
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- name: Install base packages
apt: pkg={{ item }}
Update with_items loops to use new-ish "loop" keyword Ansible 2.4 and 2.5 are moving away from specialized loop functions and the old syntax will eventually be deprecated and removed. I did not change the with_fileglob loops because I'm not sure about their syntax yet. See: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html
2018-04-02 14:52:51 +02:00
loop:
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- git
- tmux
- iotop
- htop
- strace
- s3cmd
- cron-apt
- safe-rm
- debian-goodies
- mosh
- python-pycurl # for ansible's apt_repository
- lzop
- vim
roles/common: Add lrzip to base packages Provides good mix of compression/decompression speed with size, see: http://ck.kolivas.org/apps/lrzip/README.benchmarks Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-09-07 15:32:06 +02:00
- lrzip
roles/common: Add unzip to Ubuntu base packages Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-10-05 14:21:47 +02:00
- unzip
roles/common: Add apt-transport-https to base packages Allows fetching debian repositories over HTTPS.
2017-11-05 00:29:00 +01:00
- apt-transport-https # for https support in apt
roles/common: Use dynamic include_tasks for packages Basically, when using conditionals or variables in your tasks you should use include_tasks instead of import_tasks. The down side is that you now need to tag all included tasks individually or with a block, unlike when using static imports (tags are applied to all imported child tasks). I would actually like to reduce this task to a single one that uses the host's ansible_distribution variable, but Ansible 2.5.1 currently gives the following error: ansible_distribution is undefined.
2018-04-25 17:46:28 +02:00
tags: packages
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- name: Security hardening (CIS Benchmark 1.0)
apt: pkg={{ item }} state=absent purge=yes
Update with_items loops to use new-ish "loop" keyword Ansible 2.4 and 2.5 are moving away from specialized loop functions and the old syntax will eventually be deprecated and removed. I did not change the with_fileglob loops because I'm not sure about their syntax yet. See: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html
2018-04-02 14:52:51 +02:00
loop:
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- whoopsie # CIS 4.1
- apport # CIS 4.1
roles/common: Use dynamic include_tasks for packages Basically, when using conditionals or variables in your tasks you should use include_tasks instead of import_tasks. The down side is that you now need to tag all included tasks individually or with a block, unlike when using static imports (tags are applied to all imported child tasks). I would actually like to reduce this task to a single one that uses the host's ansible_distribution variable, but Ansible 2.5.1 currently gives the following error: ansible_distribution is undefined.
2018-04-25 17:46:28 +02:00
tags: packages
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- name: Remove annoying packages
apt: pkg={{ item }} state=absent purge=yes
Update with_items loops to use new-ish "loop" keyword Ansible 2.4 and 2.5 are moving away from specialized loop functions and the old syntax will eventually be deprecated and removed. I did not change the with_fileglob loops because I'm not sure about their syntax yet. See: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html
2018-04-02 14:52:51 +02:00
loop:
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- command-not-found
- command-not-found-data
- python3-commandnotfound
roles/common: Use dynamic include_tasks for packages Basically, when using conditionals or variables in your tasks you should use include_tasks instead of import_tasks. The down side is that you now need to tag all included tasks individually or with a block, unlike when using static imports (tags are applied to all imported child tasks). I would actually like to reduce this task to a single one that uses the host's ansible_distribution variable, but Ansible 2.5.1 currently gives the following error: ansible_distribution is undefined.
2018-04-25 17:46:28 +02:00
tags: packages
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
roles/common: Add names to include tasks I'm not sure why these weren't caught by ansible-lint.
2017-10-03 16:46:55 +02:00
- name: Configure cron-apt
import_tasks: cron-apt.yml
roles/common: Adjust cron-apt stuff - Don't run the static files as templates - Use a separate playbook for related tasks - Use a template for security.sources.list Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-08-22 22:39:22 +02:00
tags: cron-apt
roles/common: Add vim modeline Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-05-24 22:55:04 +02:00
roles/common: Add names to include tasks I'm not sure why these weren't caught by ansible-lint.
2017-10-03 16:46:55 +02:00
- name: Install tarsnap
import_tasks: tarsnap.yml
roles/common: Use dynamic include_tasks for packages Basically, when using conditionals or variables in your tasks you should use include_tasks instead of import_tasks. The down side is that you now need to tag all included tasks individually or with a block, unlike when using static imports (tags are applied to all imported child tasks). I would actually like to reduce this task to a single one that uses the host's ansible_distribution variable, but Ansible 2.5.1 currently gives the following error: ansible_distribution is undefined.
2018-04-25 17:46:28 +02:00
tags: packages
roles/common: Add tasks to install tarsnap Now that Tarsnap has official packages this is one less thing that needs to be manually installed from source after bringing a machine up. See: http://mail.tarsnap.com/tarsnap-announce/msg00037.html
2017-02-07 16:28:35 +01:00
roles/common: Add vim modeline Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-05-24 22:55:04 +02:00
# vim: set sw=2 ts=2:
Reference in New Issue Copy Permalink