Compare commits

...

10 Commits

13 changed files with 101 additions and 30 deletions

View File

@ -1,31 +1,34 @@
---
# Configurazione dominio
ntpserver: pdc.topolin.ia
ntpserver: pdc.liceo.svbg
server: pdc
serverip: 172.16.254.1
serverip: 192.168.3.1
servernetmask: 255.255.255.0
servernet: 172.16.254.0
servergw: 172.16.254.1
serverfqdn: pdc.topolin.ia
domainshort: TOPOLIN
domainfull: topolin.ia
dhcprange_start: 172.16.254.10
dhcprange_end: 172.16.254.50
servernet: 192.168.3.0
servergw: 192.168.3.1
serverfqdn: pdc.liceo.svbg
domainshort: LICEO
domainfull: liceo.svbg
dhcprange_start: 192.168.3.10
dhcprange_end: 192.168.3.100
extdnsserver1: 208.67.222.222
extdnsserver2: 208.67.220.220
org_email: info@bglug.it
org_company: Accademia di SuperPippo
org_countrycode: IA
org_department: "Laboratorio 1"
org_city: Topolinia
org_phone: "313 113 176-167"
org_street: "Piazza la bomba e scappa"
edu_package: secondary
mirror_mode: remote
#mirror_nfs_share: 192.168.255.1:/var/spool/apt-mirror/mirror
mirror_host: it.archive.ubuntu.com
org_company: Liceo - Seminario Vescovile Giovanni XXIII
org_countrycode: IT
org_department: "Laboratorio Informatica"
org_city: Bergamo
org_phone: "+39 035 28 61 11"
org_street: "Via Arena, 11"
edu_package: tertiary
mirror_mode: nfs
mirror_nfs_share: 192.168.3.250:/repo
mirror_host: archive.ubuntu.com
#mirror_path: /ubuntu
#mirror_security_host: security.ubuntu.com
#mirror_security_path: /ubuntu
client_gitbranch: master
#client_gitrepo: "https://github.com/bglug-it/client-pull-installation.git"
client_gitbranch: liceo.svbg
client_gitrepo: "https://git.libreschool.org/LibreSchool/client-pull-installation.git"
apply_fixes:
- samba-downgrade_20161124.sh.gpg
- pulseaudio-forced-fix_20170921.sh.gpg

2
hosts
View File

@ -2,4 +2,4 @@
host_key_checking=false
[server]
172.16.254.1 ansible_ssh_user=amgmt
172.16.99.14 ansible_ssh_user=amgmt

View File

@ -5,7 +5,7 @@
comment: "Ansible Management User"
group: wheel
state: present
password: $6$mVKMBMbAxeql$eqSe8tu2qKjtwmpiFy07b6nv2g4F80N.U9EzOmQTrNZwKZ61n6NLrSEQHQo1FOlQghOiB8as6Z35oTUUKN8y2.
password: $6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
- name: Concessione diritti all'utente di gestione Ansible
template:

View File

@ -66,7 +66,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
# User creation
d-i passwd/user-fullname string BgLUG User
d-i passwd/username string bglug
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
# Partitioning
d-i partman-auto/init_automatically_partition select biggest_free

View File

@ -66,7 +66,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
# User creation
d-i passwd/user-fullname string BgLUG User
d-i passwd/username string bglug
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
# Partitioning
d-i partman-auto/init_automatically_partition select biggest_free

View File

@ -62,7 +62,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
# User creation
d-i passwd/user-fullname string BgLUG User
d-i passwd/username string bglug
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
# Partitioning
d-i partman-auto/init_automatically_partition select biggest_free

View File

@ -62,7 +62,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
# User creation
d-i passwd/user-fullname string BgLUG User
d-i passwd/username string bglug
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
# Partitioning
d-i partman-auto/init_automatically_partition select biggest_free

View File

@ -66,7 +66,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
# User creation
d-i passwd/user-fullname string BgLUG User
d-i passwd/username string bglug
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
# Partitioning
d-i partman-auto/init_automatically_partition select biggest_free

View File

@ -28,9 +28,9 @@
- name: Adding mountpoint to fstab
lineinfile:
dest: /etc/fstab
line: "{{ ansible_local.domain.mirror_nfs_share }} /var/spool/apt-mirror/mirror nfs4 defaults 0 0"
line: "{{ ansible_local.domain.mirror_nfs_share }} /var/spool/apt-mirror nfs defaults 0 0"
when: chk_mount_nfs|changed
- name: Mounting share
shell: mount /var/spool/apt-mirror/mirror
shell: mount /var/spool/apt-mirror
when: chk_mount_nfs|changed

View File

@ -0,0 +1,26 @@
#!/bin/bash
# Define a fix name. This will be used to check if the fix was already
# applied.
name=pulseaudio-force-fix_20170921.sh
# If already applied, skip
if [[ -f "/var/lib/liceo.svbg/fixes/${name}.done" ]]; then
echo "Already fixed with ${name}. Skipping."
exit 0
fi
# Make the required modifications.
# Executing the pulseaudio fix for the first time.
curl -sSL http://pdc.liceo.svbg/ks/preseed/pulseaudio-perms.sh | bash
# Creating entry in crontab to be executed each time
echo '@reboot root curl -sSL http://pdc.liceo.svbg/ks/preseed/pulseaudio-perms.sh | bash > /dev/null 2>&1' > /etc/cron.d/pulseaudio-perms
chown root:root /etc/cron.d/pulseaudio-perms
chmod 644 /etc/cron.d/pulseaudio-perms
# Once modified the system, ensure to create a check file to skip and not run
# it again if not needed.
mkdir -p /var/lib/liceo.svbg/fixes
echo "$(date --iso | tr -d '-')" > /var/lib/liceo.svbg/fixes/${name}.done

Binary file not shown.

View File

@ -0,0 +1,42 @@
#!/bin/bash
# Define a fix name. This will be used to check if the fix was already
# applied.
name=samba-downgrade_20161124.sh
# If already applied, skip
if [[ -f "/var/lib/topolin.ia/fixes/${name}.done" ]]; then
echo "Already fixed with ${name}. Skipping."
exit 0
fi
# Make the required modifications.
export DEBIAN_FRONTEND=noninteractive
apt-get install -q -y --force-yes \
-o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" \
libsmbclient=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
python-samba=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
samba=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
samba-common=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
samba-common-bin=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
samba-dsdb-modules=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
samba-libs=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
samba-vfs-modules=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
smbclient=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
libnss-winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
libpam-winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
libwbclient0=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1
pkglist="libsmbclient python-samba samba-common samba-common-bin samba-dsdb-modules samba-libs samba-vfs-modules smbclient libnss-winbind libpam-winbind libwbclient0"
for pkg in ${pkglist}; do
apt-mark auto ${pkg}
apt-mark hold ${pkg}
done
# Once modified the system, ensure to create a check file to skip and not run
# it again if not needed.
mkdir -p /var/lib/topolin.ia/fixes
echo "$(date --iso | tr -d '-')" > /var/lib/topolin.ia/fixes/${name}.done

Binary file not shown.