alanorth/ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
9abfe80245
ansible-personal/roles/common/tasks/packages_Ubuntu.yml

99 lines
3.1 KiB
YAML
Raw Normal View History

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
---
roles/common: Use blocks to tag children of dynamic tasks When using dynamic includes, child tasks do not inherit tags from their parents. You must tag the parent and each child task separately, or use a block to group children and then apply a tag to a block. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-04-26 15:58:35 +02:00
- block:
- name: Configure apt mirror
template: src=sources.list.j2 dest=/etc/apt/sources.list owner=root group=root mode=0644
when: ansible_architecture != 'armv7l'
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
roles/common: Use blocks to tag children of dynamic tasks When using dynamic includes, child tasks do not inherit tags from their parents. You must tag the parent and each child task separately, or use a block to group children and then apply a tag to a block. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-04-26 15:58:35 +02:00
- name: Upgrade base OS
roles/common: Only update apt index if cache is older than 1 hour
2018-12-20 08:37:09 +01:00
apt: upgrade=dist update_cache=yes cache_valid_time=3600
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
roles/common: Use an Ansible fact for Ubuntu packages
2018-12-20 08:36:43 +01:00
- name: Set Ubuntu base packages
set_fact:
ubuntu_base_packages:
roles/common: Use blocks to tag children of dynamic tasks When using dynamic includes, child tasks do not inherit tags from their parents. You must tag the parent and each child task separately, or use a block to group children and then apply a tag to a block. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-04-26 15:58:35 +02:00
- git
- tmux
- iotop
- htop
- strace
- cron-apt
- safe-rm
- debian-goodies
- mosh
- python-pycurl # for ansible's apt_repository
- vim
- unzip
- apt-transport-https # for https support in apt
roles/common: Add zstd to base packages
2019-09-14 19:36:40 +02:00
- zstd
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
roles/common: Use an Ansible fact for Ubuntu packages
2018-12-20 08:36:43 +01:00
- name: Install base packages
roles/common: Update apt cache only if it's older than 1 hour
2018-12-20 08:40:10 +01:00
apt: pkg={{ ubuntu_base_packages }} state=present update_cache=yes cache_valid_time=3600
roles/common: Use an Ansible fact for Ubuntu packages
2018-12-20 08:36:43 +01:00
roles/common: Remove snaps on Ubuntu 20.04 The list of pre-installed snaps and system packages is different on Ubuntu 20.04 than it was in previous LTS releases. See: https://www.kevin-custer.com/blog/disabling-snaps-in-ubuntu-20-04/
2020-04-25 09:02:52 +02:00
# We have to remove snaps one by one in a specific order because some depend
# on others. Only after that can we remove the corresponding system packages.
- name: Remove lxd snap
snap: name=lxd state=absent
when: ansible_distribution_version is version('20.04', '==')
roles/common: Ignore errors removing snaps If the snap binary doesn't even exist then it means we've probably already run this playbook and removed all installed snaps as well.
2020-05-19 15:05:58 +02:00
ignore_errors: yes
roles/common: Remove snaps on Ubuntu 20.04 The list of pre-installed snaps and system packages is different on Ubuntu 20.04 than it was in previous LTS releases. See: https://www.kevin-custer.com/blog/disabling-snaps-in-ubuntu-20-04/
2020-04-25 09:02:52 +02:00
- name: Remove core18 snap
snap: name=core18 state=absent
when: ansible_distribution_version is version('20.04', '==')
roles/common: Ignore errors removing snaps If the snap binary doesn't even exist then it means we've probably already run this playbook and removed all installed snaps as well.
2020-05-19 15:05:58 +02:00
ignore_errors: yes
roles/common: Remove snaps on Ubuntu 20.04 The list of pre-installed snaps and system packages is different on Ubuntu 20.04 than it was in previous LTS releases. See: https://www.kevin-custer.com/blog/disabling-snaps-in-ubuntu-20-04/
2020-04-25 09:02:52 +02:00
- name: Remove snapd snap
snap: name=snapd state=absent
when: ansible_distribution_version is version('20.04', '==')
roles/common: Ignore errors removing snaps If the snap binary doesn't even exist then it means we've probably already run this playbook and removed all installed snaps as well.
2020-05-19 15:05:58 +02:00
ignore_errors: yes
roles/common: Remove snaps on Ubuntu 20.04 The list of pre-installed snaps and system packages is different on Ubuntu 20.04 than it was in previous LTS releases. See: https://www.kevin-custer.com/blog/disabling-snaps-in-ubuntu-20-04/
2020-04-25 09:02:52 +02:00
- name: Set fact for packages to remove (Ubuntu <= 18.04)
roles/common: Remove more annoying packages on Ubuntu Ubuntu 16.04 and up install a bunch of their technologies that I'm not using, like lxc, lxd, and snaps.
2018-12-20 08:31:58 +01:00
set_fact:
ubuntu_annoying_packages:
roles/common: Use one task to remove Ubuntu packages I had previously been removing some packages for security reasons, then removing others because they were annoying, and yet *others* because they were annoying on newer Ubuntus only. It is easier to just unify these tasks and remove them all in one go. On older Ubuntus where some packages don't exist the task will just succeed because the package is absent anyways.
2018-12-20 08:54:46 +01:00
- whoopsie # security (CIS 4.1)
- apport # security (CIS 4.1)
- command-not-found # annoying
- command-not-found-data # annoying
- python3-commandnotfound # annoying
- snapd # annoying (Ubuntu >= 16.04)
- lxd # annoying (Ubuntu >= 16.04)
- lxd-client # annoying (Ubuntu >= 16.04)
- liblxc1 # annoying (Ubuntu >= 16.04)
- lxc-common # annoying (Ubuntu >= 16.04)
- lxcfs #annoying (Ubuntu >= 16.04)
roles/common: Remove snaps on Ubuntu 20.04 The list of pre-installed snaps and system packages is different on Ubuntu 20.04 than it was in previous LTS releases. See: https://www.kevin-custer.com/blog/disabling-snaps-in-ubuntu-20-04/
2020-04-25 09:02:52 +02:00
when: ansible_distribution_version is version('18.04', '<=')
- name: Set fact for packages to remove (Ubuntu 20.04)
set_fact:
ubuntu_annoying_packages:
- whoopsie # security (CIS 4.1)
- apport # security (CIS 4.1)
- command-not-found # annoying
- command-not-found-data # annoying
- python3-commandnotfound # annoying
- snapd # annoying (Ubuntu >= 16.04)
- lxd-agent-loader # annoying (Ubuntu 20.04)
when: ansible_distribution_version is version('20.04', '==')
roles/common: Use one task to remove Ubuntu packages I had previously been removing some packages for security reasons, then removing others because they were annoying, and yet *others* because they were annoying on newer Ubuntus only. It is easier to just unify these tasks and remove them all in one go. On older Ubuntus where some packages don't exist the task will just succeed because the package is absent anyways.
2018-12-20 08:54:46 +01:00
- name: Remove packages
apt: name={{ ubuntu_annoying_packages }} state=absent purge=yes
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
roles/common: Disable Canonical spam in MOTD
2018-12-20 09:27:52 +01:00
- name: Disable annoying Canonical spam in MOTD
roles/common: Actually remove annoying Ubuntu motd spam
2020-04-24 21:37:50 +02:00
file: path={{ item }} mode=0644 state=absent
roles/common: Disable Canonical spam in MOTD
2018-12-20 09:27:52 +01:00
loop:
- /etc/update-motd.d/99-esm # Ubuntu 14.04
roles/common: Update comment
2018-12-20 09:31:18 +01:00
- /etc/update-motd.d/10-help-text # Ubuntu 14.04+
roles/common: Disable Canonical spam in MOTD
2018-12-20 09:27:52 +01:00
- /etc/update-motd.d/50-motd-news # Ubuntu 18.04+
- /etc/update-motd.d/80-esm # Ubuntu 18.04+
- /etc/update-motd.d/80-livepatch # Ubuntu 18.04+
ignore_errors: yes
roles/common: Use blocks to tag children of dynamic tasks When using dynamic includes, child tasks do not inherit tags from their parents. You must tag the parent and each child task separately, or use a block to group children and then apply a tag to a block. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-04-26 15:58:35 +02:00
- name: Configure cron-apt
import_tasks: cron-apt.yml
tags: cron-apt
roles/common: Add vim modeline Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-05-24 22:55:04 +02:00
roles/common: Use blocks to tag children of dynamic tasks When using dynamic includes, child tasks do not inherit tags from their parents. You must tag the parent and each child task separately, or use a block to group children and then apply a tag to a block. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-04-26 15:58:35 +02:00
- name: Install tarsnap
import_tasks: tarsnap.yml
roles/common: Use dynamic include_tasks for packages Basically, when using conditionals or variables in your tasks you should use include_tasks instead of import_tasks. The down side is that you now need to tag all included tasks individually or with a block, unlike when using static imports (tags are applied to all imported child tasks). I would actually like to reduce this task to a single one that uses the host's ansible_distribution variable, but Ansible 2.5.1 currently gives the following error: ansible_distribution is undefined.
2018-04-25 17:46:28 +02:00
tags: packages
roles/common: Add tasks to install tarsnap Now that Tarsnap has official packages this is one less thing that needs to be manually installed from source after bringing a machine up. See: http://mail.tarsnap.com/tarsnap-announce/msg00037.html
2017-02-07 16:28:35 +01:00
roles/common: Add vim modeline Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-05-24 22:55:04 +02:00
# vim: set sw=2 ts=2:
Reference in New Issue Copy Permalink