diff --git a/domain.yml b/domain.yml index 94f1518..48951b3 100644 --- a/domain.yml +++ b/domain.yml @@ -18,3 +18,4 @@ org_department: "Laboratorio 1" org_city: Caravaggio org_phone: "+39 0363 50598" org_street: "Via Zenale e Butinone, 20" +mirrorpath: pdc.mastri.local/ks/mirror/ diff --git a/roles/pxe/files/apt-mirror.list b/roles/pxe/files/apt-mirror.list new file mode 100644 index 0000000..2f78e66 --- /dev/null +++ b/roles/pxe/files/apt-mirror.list @@ -0,0 +1,57 @@ +############# config ################## +# +# set base_path /var/spool/apt-mirror +# +# set mirror_path $base_path/mirror +# set skel_path $base_path/skel +# set var_path $base_path/var +# set cleanscript $var_path/clean.sh +# set defaultarch +# set postmirror_script $var_path/postmirror.sh +# set run_postmirror 0 +set nthreads 20 +set _tilde 0 +#set limit_rate 200k +# +############# end config ############## + +# +# 14.04 LTS - Trusty Tahr +# + +deb-i386 http://it.archive.ubuntu.com/ubuntu trusty main restricted universe multiverse +deb-i386 http://it.archive.ubuntu.com/ubuntu trusty-security main restricted universe multiverse +deb-i386 http://it.archive.ubuntu.com/ubuntu trusty-updates main restricted universe multiverse +deb-i386 http://it.archive.ubuntu.com/ubuntu trusty-proposed main restricted universe multiverse +deb-i386 http://it.archive.ubuntu.com/ubuntu trusty-backports main restricted universe multiverse + +deb-amd64 http://it.archive.ubuntu.com/ubuntu trusty main restricted universe multiverse +deb-amd64 http://it.archive.ubuntu.com/ubuntu trusty-security main restricted universe multiverse +deb-amd64 http://it.archive.ubuntu.com/ubuntu trusty-updates main restricted universe multiverse +deb-amd64 http://it.archive.ubuntu.com/ubuntu trusty-proposed main restricted universe multiverse +deb-amd64 http://it.archive.ubuntu.com/ubuntu trusty-backports main restricted universe multiverse + +deb-src http://it.archive.ubuntu.com/ubuntu trusty main restricted universe multiverse +deb-src http://it.archive.ubuntu.com/ubuntu trusty-security main restricted universe multiverse +deb-src http://it.archive.ubuntu.com/ubuntu trusty-updates main restricted universe multiverse +deb-src http://it.archive.ubuntu.com/ubuntu trusty-proposed main restricted universe multiverse +deb-src http://it.archive.ubuntu.com/ubuntu trusty-backports main restricted universe multiverse + +deb-i386 http://extras.ubuntu.com/ubuntu trusty main +deb-amd64 http://extras.ubuntu.com/ubuntu trusty main +deb-src http://extras.ubuntu.com/ubuntu trusty main + +deb-i386 http://archive.canonical.com/ trusty partner +deb-i386 http://archive.canonical.com/ trusty-proposed partner + +deb-amd64 http://archive.canonical.com/ trusty partner +deb-amd64 http://archive.canonical.com/ trusty-proposed partner + +deb-i386 http://security.ubuntu.com/ubuntu trusty-security main restricted universe multiverse +deb-amd64 http://security.ubuntu.com/ubuntu trusty-security main restricted universe multiverse +deb-src http://security.ubuntu.com/ubuntu trusty-security main restricted universe multiverse + +clean http://it.archive.ubuntu.com/ubuntu +clean http://extras.ubuntu.com/ubuntu +clean http://archive.canonical.com +clean http://security.ubuntu.com/ubuntu diff --git a/roles/pxe/tasks/apt-mirror.yml b/roles/pxe/tasks/apt-mirror.yml new file mode 100644 index 0000000..6862b75 --- /dev/null +++ b/roles/pxe/tasks/apt-mirror.yml @@ -0,0 +1,10 @@ +--- +# Configurazione del server come repo + +- name: Installazione apt-mirror + yum: pkg=apt-mirror state=present + sudo: yes + +- name: Installazione configurazione apt-mirror + copy: src=apt-mirror.list dest=/etc/apt-mirror.list + sudo: yes diff --git a/roles/pxe/tasks/main.yml b/roles/pxe/tasks/main.yml index cd8a6a4..fbc2bbd 100644 --- a/roles/pxe/tasks/main.yml +++ b/roles/pxe/tasks/main.yml @@ -1,141 +1,4 @@ --- -# Configurazione dell'ambiente di boot via rete per i client - -- name: Verifica configurazione tftp - shell: /sbin/e-smith/db configuration getprop dnsmasq dhcp-boot - register: chk_tftp_enabled - ignore_errors: yes - sudo: yes - -- name: Configuro tftp - shell: /sbin/e-smith/db configuration setprop dnsmasq tftp-status enabled dhcp-boot pxelinux.0 - when: chk_tftp_enabled|failed - sudo: yes - -- name: Attivo tftp - shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save - when: chk_tftp_enabled|failed - sudo: yes - -- name: Verifica configurazione ibay kickstart - shell: /sbin/e-smith/db accounts get ks - register: chk_ks_created - ignore_errors: yes - sudo: yes - -- name: Configurazione web kickstart - shell: /sbin/e-smith/db accounts set ks ibay Description "Kickstart share" GroupAccess rw HttpAccess private HttpAliasType default HttpAllowOverrideStatus disabled HttpForceSslStatus disabled HttpPasswordStatus disabled HttpStatus enabled HttpVirtualHost __ANY__ OtherAccess r OwningGroup locals SmbAuditStatus disabled SmbStatus disabled - when: chk_ks_created|failed - sudo: yes - -- name: Attivazione web kickstart - shell: /sbin/e-smith/signal-event ibay-create ks - when: chk_ks_created|failed - sudo: yes - -- name: Verifica configurazione ibay ubuntu - shell: /sbin/e-smith/db accounts get ubuntu - register: chk_ubuntu_created - ignore_errors: yes - sudo: yes - -- name: Configurazione web ubuntu - shell: /sbin/e-smith/db accounts set ubuntu ibay Description "Ubuntu Installation media" GroupAccess rw HttpAccess private HttpAliasType default HttpAllowOverrideStatus disabled HttpForceSslStatus disabled HttpPasswordStatus disabled HttpStatus enabled HttpVirtualHost __ANY__ OtherAccess r OwningGroup locals SmbAuditStatus disabled SmbStatus disabled - when: chk_ubuntu_created|failed - sudo: yes - -- name: Attivazione web ubuntu - shell: /sbin/e-smith/signal-event ibay-create ubuntu - when: chk_ubuntu_created|failed - sudo: yes - -- name: Creo directory necessarie - file: path={{ item }} state=directory - with_items: - - /var/lib/tftpboot/pxelinux.cfg - - /var/lib/tftpboot/ubuntu/14.04/i386 - - /var/lib/tftpboot/ubuntu/14.04/amd64 - - /var/lib/tftpboot/utils/memtest86 - sudo: yes - -- name: pxelinux.0 - get_url: - url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/pxelinux.0 - dest: /var/lib/tftpboot/pxelinux.0 - sudo: yes - -- name: pxelinux.cfg/default - template: src=pxelinux.cfg/default dest=/var/lib/tftpboot/pxelinux.cfg/default - sudo: yes - -- name: bglug.png - copy: src=bglug.png dest=/var/lib/tftpboot/utils/bglug.png - sudo: yes - -- name: vesamenu.c32 - get_url: - url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/ubuntu-installer/i386/boot-screens/vesamenu.c32 - dest: /var/lib/tftpboot/utils/vesamenu.c32 - sudo: yes - -- name: linux i386 - get_url: - url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/ubuntu-installer/i386/linux - dest: /var/lib/tftpboot/ubuntu/14.04/i386/linux - sudo: yes - -- name: initrd.gz i386 - get_url: - url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/ubuntu-installer/i386/initrd.gz - dest: /var/lib/tftpboot/ubuntu/14.04/i386/initrd.gz - sudo: yes - -- name: linux amd64 - get_url: - url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/linux - dest: /var/lib/tftpboot/ubuntu/14.04/amd64/linux - sudo: yes - -- name: initrd.gz amd64 - get_url: - url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/initrd.gz - dest: /var/lib/tftpboot/ubuntu/14.04/amd64/initrd.gz - sudo: yes - -- name: memdisk - get_url: - url: http://syntaxerrormmm.zapto.org/pxe-bootimg/memdisk - dest: /var/lib/tftpboot/utils/memdisk - sudo: yes - -- name: aida - get_url: - url: http://syntaxerrormmm.zapto.org/pxe-bootimg/aida.img - dest: /var/lib/tftpboot/utils/aida.img - sudo: yes - -- name: memtest86 - get_url: - url: http://syntaxerrormmm.zapto.org/pxe-bootimg/memtest86/vmlinuz - dest: /var/lib/tftpboot/utils/memtest86/vmlinuz - sudo: yes - -- name: hdt - get_url: - url: http://syntaxerrormmm.zapto.org/pxe-bootimg/hdt.img - dest: /var/lib/tftpboot/utils/hdt.img - sudo: yes - -- name: ranish - get_url: - url: http://syntaxerrormmm.zapto.org/pxe-bootimg/ranish.img - dest: /var/lib/tftpboot/utils/ranish.img - sudo: yes - -- name: Copia configurazione kickstart - Edubuntu - template: src=ks/edubuntu-trusty.cfg dest=/var/lib/nethserver/ibay/ks/edubuntu-trusty.cfg - sudo: yes - -- name: Copia configurazione kickstart - Ubuntu - template: src=ks/ubuntu-trusty.cfg dest=/var/lib/nethserver/ibay/ks/ubuntu-trusty.cfg - sudo: yes +# Configurazione PXE server con repo locale +- include: apt-mirror.yml +- include: tftp-ks.yml diff --git a/roles/pxe/tasks/tftp-ks.yml b/roles/pxe/tasks/tftp-ks.yml new file mode 100644 index 0000000..32d7025 --- /dev/null +++ b/roles/pxe/tasks/tftp-ks.yml @@ -0,0 +1,136 @@ +--- +# Configurazione dell'ambiente di boot via rete per i client + +- name: Verifica configurazione tftp + shell: /sbin/e-smith/db configuration getprop dnsmasq dhcp-boot + register: chk_tftp_enabled + ignore_errors: yes + sudo: yes + +- name: Configuro tftp + shell: /sbin/e-smith/db configuration setprop dnsmasq tftp-status enabled dhcp-boot pxelinux.0 + when: chk_tftp_enabled|failed + sudo: yes + +- name: Attivo tftp + shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save + when: chk_tftp_enabled|failed + sudo: yes + +- name: Verifica configurazione ibay kickstart + shell: /sbin/e-smith/db accounts get ks + register: chk_ks_created + ignore_errors: yes + sudo: yes + +- name: Configurazione web kickstart + shell: /sbin/e-smith/db accounts set ks ibay Description "Kickstart share" GroupAccess rw HttpAccess private HttpAliasType default HttpAllowOverrideStatus disabled HttpForceSslStatus disabled HttpPasswordStatus disabled HttpStatus enabled HttpVirtualHost __ANY__ OtherAccess r OwningGroup locals SmbAuditStatus disabled SmbStatus disabled + when: chk_ks_created|failed + sudo: yes + +- name: Attivazione web kickstart + shell: /sbin/e-smith/signal-event ibay-create ks + when: chk_ks_created|failed + sudo: yes + +- name: Verifica presenza directory mirror + file: path=/var/spool/apt-mirror/mirror state=directory + register: chk_mirror_dir + ignore_errors: yes + sudo: yes + +- name: Collegamento directory mirror + file: path=/var/lib/nethserver/ibay/ks/mirror src=/var/spool/apt-mirror/mirror state=link + sudo: yes + when: chk_mirror_dir|success + +- name: Creo directory necessarie + file: path={{ item }} state=directory + with_items: + - /var/lib/tftpboot/pxelinux.cfg + - /var/lib/tftpboot/ubuntu/14.04/i386 + - /var/lib/tftpboot/ubuntu/14.04/amd64 + - /var/lib/tftpboot/utils/memtest86 + sudo: yes + +- name: pxelinux.0 + get_url: + url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/pxelinux.0 + dest: /var/lib/tftpboot/pxelinux.0 + sudo: yes + +- name: pxelinux.cfg/default + template: src=pxelinux.cfg/default dest=/var/lib/tftpboot/pxelinux.cfg/default + sudo: yes + +- name: bglug.png + copy: src=bglug.png dest=/var/lib/tftpboot/utils/bglug.png + sudo: yes + +- name: vesamenu.c32 + get_url: + url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/ubuntu-installer/i386/boot-screens/vesamenu.c32 + dest: /var/lib/tftpboot/utils/vesamenu.c32 + sudo: yes + +- name: linux i386 + get_url: + url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/ubuntu-installer/i386/linux + dest: /var/lib/tftpboot/ubuntu/14.04/i386/linux + sudo: yes + +- name: initrd.gz i386 + get_url: + url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-i386/current/images/netboot/ubuntu-installer/i386/initrd.gz + dest: /var/lib/tftpboot/ubuntu/14.04/i386/initrd.gz + sudo: yes + +- name: linux amd64 + get_url: + url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/linux + dest: /var/lib/tftpboot/ubuntu/14.04/amd64/linux + sudo: yes + +- name: initrd.gz amd64 + get_url: + url: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/initrd.gz + dest: /var/lib/tftpboot/ubuntu/14.04/amd64/initrd.gz + sudo: yes + +- name: memdisk + get_url: + url: http://syntaxerrormmm.zapto.org/pxe-bootimg/memdisk + dest: /var/lib/tftpboot/utils/memdisk + sudo: yes + +- name: aida + get_url: + url: http://syntaxerrormmm.zapto.org/pxe-bootimg/aida.img + dest: /var/lib/tftpboot/utils/aida.img + sudo: yes + +- name: memtest86 + get_url: + url: http://syntaxerrormmm.zapto.org/pxe-bootimg/memtest86/vmlinuz + dest: /var/lib/tftpboot/utils/memtest86/vmlinuz + sudo: yes + +- name: hdt + get_url: + url: http://syntaxerrormmm.zapto.org/pxe-bootimg/hdt.img + dest: /var/lib/tftpboot/utils/hdt.img + sudo: yes + +- name: ranish + get_url: + url: http://syntaxerrormmm.zapto.org/pxe-bootimg/ranish.img + dest: /var/lib/tftpboot/utils/ranish.img + sudo: yes + +- name: Copia configurazione kickstart - Edubuntu + template: src=ks/edubuntu-trusty.cfg dest=/var/lib/nethserver/ibay/ks/edubuntu-trusty.cfg + sudo: yes + +- name: Copia configurazione kickstart - Ubuntu + template: src=ks/ubuntu-trusty.cfg dest=/var/lib/nethserver/ibay/ks/ubuntu-trusty.cfg + sudo: yes diff --git a/roles/pxe/templates/ks/edubuntu-trusty.cfg b/roles/pxe/templates/ks/edubuntu-trusty.cfg index 3e5378b..af0f746 100644 --- a/roles/pxe/templates/ks/edubuntu-trusty.cfg +++ b/roles/pxe/templates/ks/edubuntu-trusty.cfg @@ -11,7 +11,7 @@ timezone Europe/Rome #Root password rootpw --disabled #Initial user -user amministratore --fullname "Amministratore" --iscrypted --password $1$R6LPO2tV$0fExeosTwCdod5RgnOtiR1 +user bglug --fullname "BgLUG User" --iscrypted --password $1$9zGKOCDN$//dSCH70wDHZITGDDxdiv1 #Reboot after installation reboot #Use text mode install @@ -20,7 +20,7 @@ text install #Use Web installation #url --url http://archive.ubuntu.com/ubuntu -url --url http://{{ serverfqdn }}/ubuntu +url --url http://{{ mirrorpath }}archive.ubuntu.com/ubuntu #System bootloader configuration bootloader --location=mbr #Clear the Master Boot Record diff --git a/roles/pxe/templates/ks/ubuntu-trusty.cfg b/roles/pxe/templates/ks/ubuntu-trusty.cfg index 280b708..fd24aab 100644 --- a/roles/pxe/templates/ks/ubuntu-trusty.cfg +++ b/roles/pxe/templates/ks/ubuntu-trusty.cfg @@ -11,7 +11,7 @@ timezone Europe/Rome #Root password rootpw --disabled #Initial user -user amministratore --fullname "Amministratore" --iscrypted --password $1$R6LPO2tV$0fExeosTwCdod5RgnOtiR1 +user bglug --fullname "BgLUG User" --iscrypted --password $1$9zGKOCDN$//dSCH70wDHZITGDDxdiv1 #Reboot after installation reboot #Use text mode install @@ -20,7 +20,7 @@ text install #Use Web installation #url --url http://archive.ubuntu.com/ubuntu -url --url http://{{ serverfqdn }}/ubuntu +url --url http://{{ mirrorpath }}archive.ubuntu.com/ubuntu #System bootloader configuration bootloader --location=mbr #Clear the Master Boot Record