2014-08-16 23:35:57 +02:00
|
|
|
---
|
|
|
|
|
- name: Configure apt mirror
|
|
|
|
|
template: src=sources.list.j2 dest=/etc/apt/sources.list owner=root group=root mode=0644
|
2016-09-29 15:47:44 +02:00
|
|
|
when: ansible_architecture != 'armv7l'
|
2014-08-16 23:35:57 +02:00
|
|
|
|
|
|
|
|
- name: Add GPG key for Extras repo
|
2016-08-22 15:30:20 +02:00
|
|
|
apt_key: id=0xC47415DFF48C09645B78609416126D3A3E5C1192 url=https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xC47415DFF48C09645B78609416126D3A3E5C1192 state=present
|
2016-12-20 14:04:47 +01:00
|
|
|
when: ansible_distribution_version | version_compare('14.04', '==')
|
2014-08-16 23:35:57 +02:00
|
|
|
|
|
|
|
|
- name: Upgrade base OS
|
2016-08-25 11:58:15 +02:00
|
|
|
apt: upgrade=dist update_cache=yes
|
2014-08-16 23:35:57 +02:00
|
|
|
|
|
|
|
|
- name: Install base packages
|
|
|
|
|
apt: pkg={{ item }}
|
|
|
|
|
with_items:
|
|
|
|
|
- git
|
|
|
|
|
- tmux
|
|
|
|
|
- iotop
|
|
|
|
|
- htop
|
|
|
|
|
- strace
|
|
|
|
|
- s3cmd
|
|
|
|
|
- cron-apt
|
|
|
|
|
- safe-rm
|
|
|
|
|
- debian-goodies
|
|
|
|
|
- mosh
|
|
|
|
|
- python-pycurl # for ansible's apt_repository
|
|
|
|
|
- sysv-rc-conf
|
|
|
|
|
- lzop
|
|
|
|
|
- vim
|
2014-09-07 15:32:06 +02:00
|
|
|
- lrzip
|
2014-10-05 14:21:47 +02:00
|
|
|
- unzip
|
2014-08-16 23:35:57 +02:00
|
|
|
|
|
|
|
|
- name: Security hardening (CIS Benchmark 1.0)
|
|
|
|
|
apt: pkg={{ item }} state=absent purge=yes
|
|
|
|
|
with_items:
|
|
|
|
|
- whoopsie # CIS 4.1
|
|
|
|
|
- apport # CIS 4.1
|
|
|
|
|
|
|
|
|
|
- name: Remove annoying packages
|
|
|
|
|
apt: pkg={{ item }} state=absent purge=yes
|
|
|
|
|
with_items:
|
|
|
|
|
- command-not-found
|
|
|
|
|
- command-not-found-data
|
|
|
|
|
- python3-commandnotfound
|
|
|
|
|
|
2015-08-22 22:39:22 +02:00
|
|
|
- include: cron-apt.yml
|
|
|
|
|
tags: cron-apt
|
2015-05-24 22:55:04 +02:00
|
|
|
|
|
|
|
|
# vim: set sw=2 ts=2:
|
