ansible-personal/roles/common/tasks/main.yml

---

# ported from top-level play because it stopped working around Ansible 2.4.0.0
- name: Import OS-specific variables
  include_vars: "vars/{{ ansible_os_family }}.yml"
  tags: always

- name: Configure network time
  import_tasks: ntp.yml
  tags: ntp

- name: Install common packages
  import_tasks: packages_Debian.yml
  when: ansible_distribution == 'Debian'
  tags: packages

- name: Install common packages
  import_tasks: packages_Ubuntu.yml
  when: ansible_distribution == 'Ubuntu'
  tags: packages

- name: Configure firewall
  import_tasks: firewall_Debian.yml
  when: ansible_distribution == 'Debian'
  tags: firewall

- name: Configure firewall
  import_tasks: firewall_Ubuntu.yml
  when: ansible_distribution == 'Ubuntu'
  tags: firewall

- name: Configure secure shell daemon
  import_tasks: sshd.yml
  tags: sshd

# containers identify as virtualization hosts, which makes this tricky, because we have actual Debian VM hosts!
- name: Reconfigure /etc/sysctl.conf
  when: ansible_virtualization_role != 'host'
  template: src=sysctl_{{ ansible_distribution }}.j2 dest=/etc/sysctl.conf owner=root group=root mode=0644
  notify:
    - reload sysctl
  tags: sysctl

- name: Reconfigure /etc/rc.local
  when: ansible_distribution == 'Ubuntu'
  template: src=rc.local_Ubuntu.j2 dest=/etc/rc.local owner=root group=root mode=0755

- name: Set I/O scheduler
  template: src=etc/udev/rules.d/60-scheduler.rules.j2 dest=/etc/udev/rules.d/60-scheduler.rules owner=root group=root mode=0644
  tags: udev

- name: Copy admin SSH keys
  import_tasks: ssh-keys.yml
  tags: ssh-keys

# vim: set sw=2 ts=2:
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`---`

Import OS-specific vars in tasks instead of play Something seems to have happened as of Ansible 2.4.0.0 where this no longer works. I suspect it is related to the major changes to static and dynamic imports that landed around this same time. We make sure that this tasks always runs by using the special tag of the same name. 2017-11-01 00:21:48 +01:00			`# ported from top-level play because it stopped working around Ansible 2.4.0.0`
			`- name: Import OS-specific variables`
			`include_vars: "vars/{{ ansible_os_family }}.yml"`
			`tags: always`

Add names to include tasks Raised by ansible-lint in the following rule: [ANSIBLE0011] All tasks should be named 2017-10-03 14:02:38 +02:00			`- name: Configure network time`
			`import_tasks: ntp.yml`
roles/common: Use systemd's timedatectl for time stuff Debian 8 and Ubuntu 16.04 use systemd, so we can make use of its NTP stuff rather than using the standalone `ntp` package. 2016-06-27 09:30:11 +02:00			`tags: ntp`

Add names to include tasks Raised by ansible-lint in the following rule: [ANSIBLE0011] All tasks should be named 2017-10-03 14:02:38 +02:00			`- name: Install common packages`
roles/common: Use static imports for tasks Something seems to have happened as of Ansible 2.4.0.0 where this no longer works. I suspect it is related to the major changes to static and dynamic imports that landed around this same time. In practice this achieves the same function, but without the "magic" ability to use one task for different operating systems. 2017-11-01 00:25:46 +01:00			`import_tasks: packages_Debian.yml`
			`when: ansible_distribution == 'Debian'`
			`tags: packages`

			`- name: Install common packages`
			`import_tasks: packages_Ubuntu.yml`
			`when: ansible_distribution == 'Ubuntu'`
roles/common: Add playbook for Debian packages Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-07-24 18:52:54 +02:00			`tags: packages`

Add names to include tasks Raised by ansible-lint in the following rule: [ANSIBLE0011] All tasks should be named 2017-10-03 14:02:38 +02:00			`- name: Configure firewall`
roles/common: Use static imports for tasks Something seems to have happened as of Ansible 2.4.0.0 where this no longer works. I suspect it is related to the major changes to static and dynamic imports that landed around this same time. In practice this achieves the same function, but without the "magic" ability to use one task for different operating systems. 2017-11-01 00:25:46 +01:00			`import_tasks: firewall_Debian.yml`
			`when: ansible_distribution == 'Debian'`
			`tags: firewall`

			`- name: Configure firewall`
			`import_tasks: firewall_Ubuntu.yml`
			`when: ansible_distribution == 'Ubuntu'`
roles/common: Move tags from subtask to main one Child tasks inherit the tag of the parent. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:33:48 +01:00			`tags: firewall`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00
Add names to include tasks Raised by ansible-lint in the following rule: [ANSIBLE0011] All tasks should be named 2017-10-03 14:02:38 +02:00			`- name: Configure secure shell daemon`
			`import_tasks: sshd.yml`
roles/common: Add DSA/ECDSA cleanup to ssh tasks We don't want to support these signature algorithms! Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-01-20 14:28:06 +01:00			`tags: sshd`

roles/common: Add sysctl template for Debian hosts Note: I've only tested this on a Debian container, and you can't set these sysctls on containers (the host controls them). To make matters worse, there is no fact to make ansible skip this on hosts that are running in containers. For now I will just skip it on hosts that are "virtualization" servers... even though we actually do have KVM running on Debian on real hardware. sigh Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-22 23:12:17 +02:00			`# containers identify as virtualization hosts, which makes this tricky, because we have actual Debian VM hosts!`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`- name: Reconfigure /etc/sysctl.conf`
roles/common: Add sysctl template for Debian hosts Note: I've only tested this on a Debian container, and you can't set these sysctls on containers (the host controls them). To make matters worse, there is no fact to make ansible skip this on hosts that are running in containers. For now I will just skip it on hosts that are "virtualization" servers... even though we actually do have KVM running on Debian on real hardware. sigh Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-22 23:12:17 +02:00			`when: ansible_virtualization_role != 'host'`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`template: src=sysctl_{{ ansible_distribution }}.j2 dest=/etc/sysctl.conf owner=root group=root mode=0644`
			`notify:`
roles/common: Indent some yaml stuff in main.yml Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:31:29 +01:00			`- reload sysctl`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`tags: sysctl`

			`- name: Reconfigure /etc/rc.local`
roles/common: Fix one logic mistake in rc.local task I think it was originally supposed to be `ansible_os_family` but we don't have anything other than Ubuntu, so let's just use that. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:43:21 +01:00			`when: ansible_distribution == 'Ubuntu'`
roles/common: Don't use ansible facts when we don't need to No use testing the distro version only to use an ansible fact to find the correct template. 2016-08-24 09:11:13 +02:00			`template: src=rc.local_Ubuntu.j2 dest=/etc/rc.local owner=root group=root mode=0755`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00
roles/common: Set I/O scheduler via udev All servers with non-rotating disks (SSDs) should be running noop, and the rest should be running deadline. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:52:05 +01:00			`- name: Set I/O scheduler`
			`template: src=etc/udev/rules.d/60-scheduler.rules.j2 dest=/etc/udev/rules.d/60-scheduler.rules owner=root group=root mode=0644`
			`tags: udev`

Add names to include tasks Raised by ansible-lint in the following rule: [ANSIBLE0011] All tasks should be named 2017-10-03 14:02:38 +02:00			`- name: Copy admin SSH keys`
			`import_tasks: ssh-keys.yml`
roles/common: Add functionality to copy user keys to provisioning user Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-10-11 11:13:45 +02:00			`tags: ssh-keys`

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`# vim: set sw=2 ts=2:`