Compare commits
10 Commits
master
...
liceo.svbg
Author | SHA1 | Date | |
---|---|---|---|
1878f4a2b5 | |||
fccd06f299 | |||
e9a308725c | |||
627d6b656c | |||
9c1eda2a78 | |||
445ef1bbe3 | |||
5913f7e12e | |||
7a29e4f2fe | |||
0fb2904aa5 | |||
e007ae02ab |
45
domain.yml
45
domain.yml
@ -1,31 +1,34 @@
|
||||
---
|
||||
# Configurazione dominio
|
||||
ntpserver: pdc.topolin.ia
|
||||
ntpserver: pdc.liceo.svbg
|
||||
server: pdc
|
||||
serverip: 172.16.254.1
|
||||
serverip: 192.168.3.1
|
||||
servernetmask: 255.255.255.0
|
||||
servernet: 172.16.254.0
|
||||
servergw: 172.16.254.1
|
||||
serverfqdn: pdc.topolin.ia
|
||||
domainshort: TOPOLIN
|
||||
domainfull: topolin.ia
|
||||
dhcprange_start: 172.16.254.10
|
||||
dhcprange_end: 172.16.254.50
|
||||
servernet: 192.168.3.0
|
||||
servergw: 192.168.3.1
|
||||
serverfqdn: pdc.liceo.svbg
|
||||
domainshort: LICEO
|
||||
domainfull: liceo.svbg
|
||||
dhcprange_start: 192.168.3.10
|
||||
dhcprange_end: 192.168.3.100
|
||||
extdnsserver1: 208.67.222.222
|
||||
extdnsserver2: 208.67.220.220
|
||||
org_email: info@bglug.it
|
||||
org_company: Accademia di SuperPippo
|
||||
org_countrycode: IA
|
||||
org_department: "Laboratorio 1"
|
||||
org_city: Topolinia
|
||||
org_phone: "313 113 176-167"
|
||||
org_street: "Piazza la bomba e scappa"
|
||||
edu_package: secondary
|
||||
mirror_mode: remote
|
||||
#mirror_nfs_share: 192.168.255.1:/var/spool/apt-mirror/mirror
|
||||
mirror_host: it.archive.ubuntu.com
|
||||
org_company: Liceo - Seminario Vescovile Giovanni XXIII
|
||||
org_countrycode: IT
|
||||
org_department: "Laboratorio Informatica"
|
||||
org_city: Bergamo
|
||||
org_phone: "+39 035 28 61 11"
|
||||
org_street: "Via Arena, 11"
|
||||
edu_package: tertiary
|
||||
mirror_mode: nfs
|
||||
mirror_nfs_share: 192.168.3.250:/repo
|
||||
mirror_host: archive.ubuntu.com
|
||||
#mirror_path: /ubuntu
|
||||
#mirror_security_host: security.ubuntu.com
|
||||
#mirror_security_path: /ubuntu
|
||||
client_gitbranch: master
|
||||
#client_gitrepo: "https://github.com/bglug-it/client-pull-installation.git"
|
||||
client_gitbranch: liceo.svbg
|
||||
client_gitrepo: "https://git.libreschool.org/LibreSchool/client-pull-installation.git"
|
||||
apply_fixes:
|
||||
- samba-downgrade_20161124.sh.gpg
|
||||
- pulseaudio-forced-fix_20170921.sh.gpg
|
||||
|
2
hosts
2
hosts
@ -2,4 +2,4 @@
|
||||
host_key_checking=false
|
||||
|
||||
[server]
|
||||
172.16.254.1 ansible_ssh_user=amgmt
|
||||
172.16.99.14 ansible_ssh_user=amgmt
|
||||
|
@ -5,7 +5,7 @@
|
||||
comment: "Ansible Management User"
|
||||
group: wheel
|
||||
state: present
|
||||
password: $6$mVKMBMbAxeql$eqSe8tu2qKjtwmpiFy07b6nv2g4F80N.U9EzOmQTrNZwKZ61n6NLrSEQHQo1FOlQghOiB8as6Z35oTUUKN8y2.
|
||||
password: $6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
|
||||
|
||||
- name: Concessione diritti all'utente di gestione Ansible
|
||||
template:
|
||||
|
@ -66,7 +66,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
|
||||
# User creation
|
||||
d-i passwd/user-fullname string BgLUG User
|
||||
d-i passwd/username string bglug
|
||||
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
|
||||
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
|
||||
|
||||
# Partitioning
|
||||
d-i partman-auto/init_automatically_partition select biggest_free
|
||||
|
@ -66,7 +66,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
|
||||
# User creation
|
||||
d-i passwd/user-fullname string BgLUG User
|
||||
d-i passwd/username string bglug
|
||||
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
|
||||
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
|
||||
|
||||
# Partitioning
|
||||
d-i partman-auto/init_automatically_partition select biggest_free
|
||||
|
@ -62,7 +62,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
|
||||
# User creation
|
||||
d-i passwd/user-fullname string BgLUG User
|
||||
d-i passwd/username string bglug
|
||||
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
|
||||
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
|
||||
|
||||
# Partitioning
|
||||
d-i partman-auto/init_automatically_partition select biggest_free
|
||||
|
@ -62,7 +62,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
|
||||
# User creation
|
||||
d-i passwd/user-fullname string BgLUG User
|
||||
d-i passwd/username string bglug
|
||||
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
|
||||
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
|
||||
|
||||
# Partitioning
|
||||
d-i partman-auto/init_automatically_partition select biggest_free
|
||||
|
@ -66,7 +66,7 @@ d-i clock-setup/ntp-server string {{ ansible_local.domain.ntpserver }}
|
||||
# User creation
|
||||
d-i passwd/user-fullname string BgLUG User
|
||||
d-i passwd/username string bglug
|
||||
d-i passwd/user-password-crypted password $6$S8u22loyR$RJZUtmnqmadvas13BxjPkBjdcF1o6P0xGtweZ9MkUCKIbyzmzQFxvwPTwoX1AaPgRyNmvdevyUgs/AMRGH8O./
|
||||
d-i passwd/user-password-crypted string $1$33bB/LIt$MEHmvzVIgYRJs/5L4z34L/
|
||||
|
||||
# Partitioning
|
||||
d-i partman-auto/init_automatically_partition select biggest_free
|
||||
|
@ -28,9 +28,9 @@
|
||||
- name: Adding mountpoint to fstab
|
||||
lineinfile:
|
||||
dest: /etc/fstab
|
||||
line: "{{ ansible_local.domain.mirror_nfs_share }} /var/spool/apt-mirror/mirror nfs4 defaults 0 0"
|
||||
line: "{{ ansible_local.domain.mirror_nfs_share }} /var/spool/apt-mirror nfs defaults 0 0"
|
||||
when: chk_mount_nfs|changed
|
||||
|
||||
- name: Mounting share
|
||||
shell: mount /var/spool/apt-mirror/mirror
|
||||
shell: mount /var/spool/apt-mirror
|
||||
when: chk_mount_nfs|changed
|
||||
|
26
signed_fixes/pulseaudio-forced-fix_20170921.sh
Normal file
26
signed_fixes/pulseaudio-forced-fix_20170921.sh
Normal file
@ -0,0 +1,26 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Define a fix name. This will be used to check if the fix was already
|
||||
# applied.
|
||||
name=pulseaudio-force-fix_20170921.sh
|
||||
|
||||
# If already applied, skip
|
||||
if [[ -f "/var/lib/liceo.svbg/fixes/${name}.done" ]]; then
|
||||
echo "Already fixed with ${name}. Skipping."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
# Make the required modifications.
|
||||
|
||||
# Executing the pulseaudio fix for the first time.
|
||||
curl -sSL http://pdc.liceo.svbg/ks/preseed/pulseaudio-perms.sh | bash
|
||||
|
||||
# Creating entry in crontab to be executed each time
|
||||
echo '@reboot root curl -sSL http://pdc.liceo.svbg/ks/preseed/pulseaudio-perms.sh | bash > /dev/null 2>&1' > /etc/cron.d/pulseaudio-perms
|
||||
chown root:root /etc/cron.d/pulseaudio-perms
|
||||
chmod 644 /etc/cron.d/pulseaudio-perms
|
||||
|
||||
# Once modified the system, ensure to create a check file to skip and not run
|
||||
# it again if not needed.
|
||||
mkdir -p /var/lib/liceo.svbg/fixes
|
||||
echo "$(date --iso | tr -d '-')" > /var/lib/liceo.svbg/fixes/${name}.done
|
BIN
signed_fixes/pulseaudio-forced-fix_20170921.sh.gpg
Normal file
BIN
signed_fixes/pulseaudio-forced-fix_20170921.sh.gpg
Normal file
Binary file not shown.
42
signed_fixes/samba-downgrade_20161124.sh
Normal file
42
signed_fixes/samba-downgrade_20161124.sh
Normal file
@ -0,0 +1,42 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Define a fix name. This will be used to check if the fix was already
|
||||
# applied.
|
||||
name=samba-downgrade_20161124.sh
|
||||
|
||||
# If already applied, skip
|
||||
if [[ -f "/var/lib/topolin.ia/fixes/${name}.done" ]]; then
|
||||
echo "Already fixed with ${name}. Skipping."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
# Make the required modifications.
|
||||
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
apt-get install -q -y --force-yes \
|
||||
-o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" \
|
||||
libsmbclient=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
python-samba=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
samba=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
samba-common=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
samba-common-bin=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
samba-dsdb-modules=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
samba-libs=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
samba-vfs-modules=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
smbclient=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
libnss-winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
libpam-winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
libwbclient0=2:4.3.11+dfsg-0ubuntu0.14.04.1 \
|
||||
winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1
|
||||
|
||||
pkglist="libsmbclient python-samba samba-common samba-common-bin samba-dsdb-modules samba-libs samba-vfs-modules smbclient libnss-winbind libpam-winbind libwbclient0"
|
||||
|
||||
for pkg in ${pkglist}; do
|
||||
apt-mark auto ${pkg}
|
||||
apt-mark hold ${pkg}
|
||||
done
|
||||
|
||||
# Once modified the system, ensure to create a check file to skip and not run
|
||||
# it again if not needed.
|
||||
mkdir -p /var/lib/topolin.ia/fixes
|
||||
echo "$(date --iso | tr -d '-')" > /var/lib/topolin.ia/fixes/${name}.done
|
BIN
signed_fixes/samba-downgrade_20161124.sh.gpg
Normal file
BIN
signed_fixes/samba-downgrade_20161124.sh.gpg
Normal file
Binary file not shown.
Loading…
Reference in New Issue
Block a user