Migrating sudo directive to 'become', standard from v1.9 and to be removed in v2.2 of Ansible.
This commit is contained in:
parent
7ec0ee620b
commit
0f5dab90eb
@ -4,7 +4,7 @@
|
|||||||
apt:
|
apt:
|
||||||
name: ansible
|
name: ansible
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Updating ansible-pull custom scripts
|
- name: Updating ansible-pull custom scripts
|
||||||
get_url:
|
get_url:
|
||||||
|
@ -7,13 +7,13 @@
|
|||||||
register: check_edubuntu_pkg
|
register: check_edubuntu_pkg
|
||||||
changed_when: check_edubuntu_pkg.rc != 0
|
changed_when: check_edubuntu_pkg.rc != 0
|
||||||
tags: edu-install
|
tags: edu-install
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Installation of the desktop environment
|
- name: Installation of the desktop environment
|
||||||
shell: "DEBIAN_FRONTEND=noninteractive /usr/bin/apt-get -y install edubuntu-desktop-gnome^"
|
shell: "DEBIAN_FRONTEND=noninteractive /usr/bin/apt-get -y install edubuntu-desktop-gnome^"
|
||||||
when: check_edubuntu_pkg|changed
|
when: check_edubuntu_pkg|changed
|
||||||
tags: edu-install
|
tags: edu-install
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Change default desktop environment
|
- name: Change default desktop environment
|
||||||
replace:
|
replace:
|
||||||
|
@ -2,44 +2,59 @@
|
|||||||
# Management of packages
|
# Management of packages
|
||||||
|
|
||||||
- name: Removing packages commonly not required
|
- name: Removing packages commonly not required
|
||||||
apt: pkg={{ item }} state=absent purge=yes
|
apt:
|
||||||
|
pkg: '{{ item }}'
|
||||||
|
state: absent
|
||||||
|
purge: yes
|
||||||
with_items: "{{ base_common_delpkg }}"
|
with_items: "{{ base_common_delpkg }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Removing packages from client machines
|
- name: Removing packages from client machines
|
||||||
apt: pkg={{ item }} state=absent purge=yes
|
apt:
|
||||||
|
pkg: '{{ item }}'
|
||||||
|
state: absent
|
||||||
|
purge: yes
|
||||||
with_items: "{{ base_client_delpkg }}"
|
with_items: "{{ base_client_delpkg }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
when: role == 'client' and base_client_delpkg|length > 0
|
when: role == 'client' and base_client_delpkg|length > 0
|
||||||
|
|
||||||
- name: Removing packages from docenti machines
|
- name: Removing packages from docenti machines
|
||||||
apt: pkg={{ item }} state=absent purge=yes
|
apt:
|
||||||
|
pkg: '{{ item }}'
|
||||||
|
state: absent
|
||||||
|
purge: yes
|
||||||
with_items: "{{ base_docenti_delpkg }}"
|
with_items: "{{ base_docenti_delpkg }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
when: role == 'docenti' and base_docenti_delpkg|length > 0
|
when: role == 'docenti' and base_docenti_delpkg|length > 0
|
||||||
|
|
||||||
- name: Cleanup of unneeded packages
|
- name: Cleanup of unneeded packages
|
||||||
shell: apt-get -y autoremove
|
shell: apt-get -y autoremove
|
||||||
register: autoremove
|
register: autoremove
|
||||||
changed_when: "'Rimozione' in autoremove.stdout"
|
changed_when: "'Rimozione' in autoremove.stdout"
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Installing additional common packages
|
- name: Installing additional common packages
|
||||||
apt: pkg={{ item }} state=installed
|
apt:
|
||||||
|
pkg: '{{ item }}'
|
||||||
|
state: installed
|
||||||
with_items: "{{ base_common_addpkg }}"
|
with_items: "{{ base_common_addpkg }}"
|
||||||
tags: edu-install
|
tags: edu-install
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Installing additional packages for client role
|
- name: Installing additional packages for client role
|
||||||
apt: pkg={{ item }} state=present
|
apt:
|
||||||
|
pkg: '{{ item }}'
|
||||||
|
state: present
|
||||||
with_items: "{{ base_client_addpkg }}"
|
with_items: "{{ base_client_addpkg }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
when: role == 'client' and base_client_addpkg|length > 0
|
when: role == 'client' and base_client_addpkg|length > 0
|
||||||
|
|
||||||
- name: Installing additional packages for docenti role
|
- name: Installing additional packages for docenti role
|
||||||
apt: pkg={{ item }} state=present
|
apt:
|
||||||
|
pkg: '{{ item }}'
|
||||||
|
state: present
|
||||||
with_items: "{{ base_docenti_addpkg }}"
|
with_items: "{{ base_docenti_addpkg }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
when: role == 'docenti' and base_docenti_addpkg|length > 0
|
when: role == 'docenti' and base_docenti_addpkg|length > 0
|
||||||
|
|
||||||
- name: Correggo NetworkManager per gestire la rete
|
- name: Correggo NetworkManager per gestire la rete
|
||||||
|
@ -2,9 +2,12 @@
|
|||||||
# Manage system upgrade
|
# Manage system upgrade
|
||||||
|
|
||||||
- name: Updating available packages
|
- name: Updating available packages
|
||||||
apt: update_cache=yes cache_valid_time=180
|
apt:
|
||||||
sudo: yes
|
update_cache: yes
|
||||||
|
cache_valid_time: 180
|
||||||
|
become: yes
|
||||||
|
|
||||||
- name: Upgrading system
|
- name: Upgrading system
|
||||||
apt: upgrade=full
|
apt:
|
||||||
sudo: yes
|
upgrade: full
|
||||||
|
become: yes
|
||||||
|
@ -2,6 +2,8 @@
|
|||||||
# Manage Virtualbox additions
|
# Manage Virtualbox additions
|
||||||
|
|
||||||
- name: Adding Virtualbox Guest Additions if required
|
- name: Adding Virtualbox Guest Additions if required
|
||||||
apt: pkg=virtualbox-guest-dkms state=present
|
apt:
|
||||||
|
pkg: virtualbox-guest-dkms
|
||||||
|
stat: present
|
||||||
when: ansible_product_name == "VirtualBox"
|
when: ansible_product_name == "VirtualBox"
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -2,6 +2,6 @@
|
|||||||
|
|
||||||
- name: reboot
|
- name: reboot
|
||||||
shell: shutdown -r now "Reboot by Ansible."
|
shell: shutdown -r now "Reboot by Ansible."
|
||||||
sudo: yes
|
become: yes
|
||||||
async: 0
|
async: 0
|
||||||
poll: 0
|
poll: 0
|
||||||
|
@ -35,7 +35,7 @@
|
|||||||
|
|
||||||
- name: Getting the epoptes server certificate
|
- name: Getting the epoptes server certificate
|
||||||
shell: /usr/sbin/epoptes-client -c
|
shell: /usr/sbin/epoptes-client -c
|
||||||
sudo: yes
|
become: yes
|
||||||
when: crt_epo_exists|failed
|
when: crt_epo_exists|failed
|
||||||
# I don't notify anymore, hoping that this would be done on first run after
|
# I don't notify anymore, hoping that this would be done on first run after
|
||||||
# preseed and it should restart because of domain join.
|
# preseed and it should restart because of domain join.
|
||||||
|
@ -5,11 +5,11 @@
|
|||||||
name: plymouth-theme-edubuntu-bglug
|
name: plymouth-theme-edubuntu-bglug
|
||||||
state: present
|
state: present
|
||||||
force: yes
|
force: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Installing lightdm wallpaper
|
- name: Installing lightdm wallpaper
|
||||||
apt:
|
apt:
|
||||||
name: bglug-artwork
|
name: bglug-artwork
|
||||||
state: present
|
state: present
|
||||||
force: yes
|
force: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -4,7 +4,7 @@
|
|||||||
apt:
|
apt:
|
||||||
name: "{{ item }}"
|
name: "{{ item }}"
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
with_items:
|
with_items:
|
||||||
- unattended-upgrades
|
- unattended-upgrades
|
||||||
- update-notifier-common
|
- update-notifier-common
|
||||||
|
@ -9,7 +9,7 @@
|
|||||||
|
|
||||||
- name: Disabling sysv start
|
- name: Disabling sysv start
|
||||||
shell: update-rc.d -f epoptes remove
|
shell: update-rc.d -f epoptes remove
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Installing upstart service
|
- name: Installing upstart service
|
||||||
copy:
|
copy:
|
||||||
@ -23,4 +23,4 @@
|
|||||||
service:
|
service:
|
||||||
name: epoptes
|
name: epoptes
|
||||||
state: started
|
state: started
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -2,6 +2,6 @@
|
|||||||
|
|
||||||
- name: reboot
|
- name: reboot
|
||||||
shell: shutdown -r now "Reboot by Ansible."
|
shell: shutdown -r now "Reboot by Ansible."
|
||||||
sudo: yes
|
become: yes
|
||||||
async: 0
|
async: 0
|
||||||
poll: 0
|
poll: 0
|
||||||
|
@ -11,7 +11,7 @@
|
|||||||
service:
|
service:
|
||||||
name: pulseaudio
|
name: pulseaudio
|
||||||
state: started
|
state: started
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: "Configuring client options"
|
- name: "Configuring client options"
|
||||||
lineinfile:
|
lineinfile:
|
||||||
@ -24,7 +24,7 @@
|
|||||||
|
|
||||||
- name: Disabling pulseaudio startup on lightdm
|
- name: Disabling pulseaudio startup on lightdm
|
||||||
shell: chmod -x /usr/bin/start-pulseaudio-x11
|
shell: chmod -x /usr/bin/start-pulseaudio-x11
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Adding pulseaudio fixing script at reboot.
|
- name: Adding pulseaudio fixing script at reboot.
|
||||||
lineinfile:
|
lineinfile:
|
||||||
|
@ -3,14 +3,14 @@
|
|||||||
|
|
||||||
- name: Checking domain join
|
- name: Checking domain join
|
||||||
shell: wbinfo -t
|
shell: wbinfo -t
|
||||||
sudo: yes
|
become: yes
|
||||||
register: check_domain
|
register: check_domain
|
||||||
changed_when: check_domain.rc != 0
|
changed_when: check_domain.rc != 0
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
|
|
||||||
- name: Joining domain
|
- name: Joining domain
|
||||||
shell: net rpc join -U admin%{{ domainadminpasswd }}
|
shell: 'net rpc join -U admin%{{ domainadminpasswd }}'
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_domain|changed
|
when: check_domain|changed
|
||||||
register: domainjoin
|
register: domainjoin
|
||||||
notify:
|
notify:
|
||||||
|
@ -24,5 +24,5 @@
|
|||||||
|
|
||||||
- name: Recompiling glib2 schemas
|
- name: Recompiling glib2 schemas
|
||||||
shell: glib-compile-schemas --strict /usr/share/glib-2.0/schemas/
|
shell: glib-compile-schemas --strict /usr/share/glib-2.0/schemas/
|
||||||
sudo: yes
|
become: yes
|
||||||
when: cfg_glib_users|changed or cfg_glib_mounted|changed or cfg_keyb_layout|changed
|
when: cfg_glib_users|changed or cfg_glib_mounted|changed or cfg_keyb_layout|changed
|
||||||
|
@ -54,4 +54,4 @@
|
|||||||
|
|
||||||
- name: Updating local version for repo
|
- name: Updating local version for repo
|
||||||
shell: 'rm -f {{ ansible_local.checksum.repover_file }} && echo "{{ ansible_local.checksum.repover }}" > {{ ansible_local.checksum.repover_file }}'
|
shell: 'rm -f {{ ansible_local.checksum.repover_file }} && echo "{{ ansible_local.checksum.repover }}" > {{ ansible_local.checksum.repover_file }}'
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -5,7 +5,7 @@
|
|||||||
apt:
|
apt:
|
||||||
name: ntp
|
name: ntp
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configuring NTP
|
- name: Configuring NTP
|
||||||
template:
|
template:
|
||||||
@ -27,5 +27,5 @@
|
|||||||
|
|
||||||
- name: Restarting NTP service
|
- name: Restarting NTP service
|
||||||
shell: service ntp restart
|
shell: service ntp restart
|
||||||
sudo: yes
|
become: yes
|
||||||
when: cfg_ntp|changed
|
when: cfg_ntp|changed
|
||||||
|
@ -5,7 +5,7 @@
|
|||||||
apt:
|
apt:
|
||||||
name: libpam-winbind
|
name: libpam-winbind
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
# Leaving them here commented, as they may be needed in the future
|
# Leaving them here commented, as they may be needed in the future
|
||||||
# for improvements on login times.
|
# for improvements on login times.
|
||||||
@ -17,14 +17,14 @@
|
|||||||
# dest: /etc/pam.d/common-auth
|
# dest: /etc/pam.d/common-auth
|
||||||
# regexp: '^.*pam_unix\.so.*nullok_secure$'
|
# regexp: '^.*pam_unix\.so.*nullok_secure$'
|
||||||
# replace: 'auth [success=1 default=ignore] pam_unix.so nullok_secure try_first_pass'
|
# replace: 'auth [success=1 default=ignore] pam_unix.so nullok_secure try_first_pass'
|
||||||
# sudo: yes
|
# become: yes
|
||||||
#
|
#
|
||||||
#- name: 'common-auth: rimuovo config auto pam_winbind'
|
#- name: 'common-auth: rimuovo config auto pam_winbind'
|
||||||
# lineinfile:
|
# lineinfile:
|
||||||
# dest: /etc/pam.d/common-auth
|
# dest: /etc/pam.d/common-auth
|
||||||
# regexp: 'pam_winbind\.so krb5'
|
# regexp: 'pam_winbind\.so krb5'
|
||||||
# state: absent
|
# state: absent
|
||||||
# sudo: yes
|
# become: yes
|
||||||
#
|
#
|
||||||
#- name: 'common-auth: aggiunta pam_winbind'
|
#- name: 'common-auth: aggiunta pam_winbind'
|
||||||
# lineinfile:
|
# lineinfile:
|
||||||
@ -33,7 +33,7 @@
|
|||||||
# insertbefore: '^auth.*pam_unix\.so'
|
# insertbefore: '^auth.*pam_unix\.so'
|
||||||
# line: 'auth [success=2 default=ignore] pam_winbind.so'
|
# line: 'auth [success=2 default=ignore] pam_winbind.so'
|
||||||
# state: present
|
# state: present
|
||||||
# sudo: yes
|
# become: yes
|
||||||
|
|
||||||
## common-password
|
## common-password
|
||||||
#
|
#
|
||||||
@ -43,7 +43,7 @@
|
|||||||
# regexp: '^(password.*pam_unix\.so.*sha512)$'
|
# regexp: '^(password.*pam_unix\.so.*sha512)$'
|
||||||
# replace: '\1 min=4 max=20'
|
# replace: '\1 min=4 max=20'
|
||||||
# backup: yes
|
# backup: yes
|
||||||
# sudo: yes
|
# become: yes
|
||||||
#
|
#
|
||||||
## common-session
|
## common-session
|
||||||
#
|
#
|
||||||
@ -55,4 +55,4 @@
|
|||||||
# line: 'session required pam_mkhomedir.so umask=0022 skel=/etc/skel silent'
|
# line: 'session required pam_mkhomedir.so umask=0022 skel=/etc/skel silent'
|
||||||
# state: present
|
# state: present
|
||||||
# backup: yes
|
# backup: yes
|
||||||
# sudo: yes
|
# become: yes
|
||||||
|
@ -5,7 +5,7 @@
|
|||||||
apt:
|
apt:
|
||||||
name: libpam-mount
|
name: libpam-mount
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configuring pam_mount
|
- name: Configuring pam_mount
|
||||||
template:
|
template:
|
||||||
|
@ -5,7 +5,7 @@
|
|||||||
apt:
|
apt:
|
||||||
pkg: '{{ item }}'
|
pkg: '{{ item }}'
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
with_items:
|
with_items:
|
||||||
- winbind
|
- winbind
|
||||||
- samba
|
- samba
|
||||||
|
@ -8,4 +8,4 @@
|
|||||||
group: root
|
group: root
|
||||||
mode: 0644
|
mode: 0644
|
||||||
backup: yes
|
backup: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -17,12 +17,12 @@
|
|||||||
|
|
||||||
- name: SAMBA restart
|
- name: SAMBA restart
|
||||||
shell: restart smbd
|
shell: restart smbd
|
||||||
sudo: yes
|
become: yes
|
||||||
when: cfg_samba|changed
|
when: cfg_samba|changed
|
||||||
|
|
||||||
- name: Winbind restart
|
- name: Winbind restart
|
||||||
shell: restart winbind
|
shell: restart winbind
|
||||||
sudo: yes
|
become: yes
|
||||||
when: cfg_samba|changed
|
when: cfg_samba|changed
|
||||||
|
|
||||||
- name: Creating home base
|
- name: Creating home base
|
||||||
|
@ -19,7 +19,7 @@
|
|||||||
- name: Adding certificate sto the ones used by the system
|
- name: Adding certificate sto the ones used by the system
|
||||||
shell: update-ca-certificates
|
shell: update-ca-certificates
|
||||||
when: proxycrt_dwnl|changed
|
when: proxycrt_dwnl|changed
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Firefox settings to include certificate
|
- name: Firefox settings to include certificate
|
||||||
get_url:
|
get_url:
|
||||||
|
@ -9,7 +9,7 @@
|
|||||||
apt:
|
apt:
|
||||||
name: '{{ item }}'
|
name: '{{ item }}'
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
with_items: "{{ addpkg }}"
|
with_items: "{{ addpkg }}"
|
||||||
when: addpkg|join(' ')|trim != ''
|
when: addpkg|join(' ')|trim != ''
|
||||||
|
|
||||||
@ -23,4 +23,4 @@
|
|||||||
|
|
||||||
- name: Updating local hash for packages
|
- name: Updating local hash for packages
|
||||||
shell: 'rm -f {{ ansible_local.checksum.pkgver_file }} && echo "{{ ansible_local.checksum.pkgver }}" > {{ ansible_local.checksum.pkgver_file }}'
|
shell: 'rm -f {{ ansible_local.checksum.pkgver_file }} && echo "{{ ansible_local.checksum.pkgver }}" > {{ ansible_local.checksum.pkgver_file }}'
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -9,7 +9,7 @@
|
|||||||
shell: /bin/bash
|
shell: /bin/bash
|
||||||
state: present
|
state: present
|
||||||
generate_ssh_key: yes
|
generate_ssh_key: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Concessione diritti sudo all'utente vagrant
|
- name: Concessione diritti sudo all'utente vagrant
|
||||||
lineinfile:
|
lineinfile:
|
||||||
@ -22,19 +22,19 @@
|
|||||||
create: yes
|
create: yes
|
||||||
state: present
|
state: present
|
||||||
validate: '/usr/sbin/visudo -cf %s'
|
validate: '/usr/sbin/visudo -cf %s'
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Autorizzo chiave pubblica insicura per vagrant
|
- name: Autorizzo chiave pubblica insicura per vagrant
|
||||||
authorized_key:
|
authorized_key:
|
||||||
user: vagrant
|
user: vagrant
|
||||||
key: "http://sys42.eu/downloads/vagrant.pub"
|
key: "http://sys42.eu/downloads/vagrant.pub"
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Autorizzo chiave pubblica di amgmt del server
|
- name: Autorizzo chiave pubblica di amgmt del server
|
||||||
authorized_key:
|
authorized_key:
|
||||||
user: vagrant
|
user: vagrant
|
||||||
key: "{{ 'http://' + ansible_local.domain.serverfqdn + ':3000/mgmtkey' }}"
|
key: "{{ 'http://' + ansible_local.domain.serverfqdn + ':3000/mgmtkey' }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Utilizzo il task di cleanup della box, prima di spegnere
|
- name: Utilizzo il task di cleanup della box, prima di spegnere
|
||||||
shell: curl -s http://sys42.eu/downloads/box-cleanup.sh | sudo bash
|
shell: curl -s http://sys42.eu/downloads/box-cleanup.sh | sudo bash
|
||||||
|
Loading…
x
Reference in New Issue
Block a user