From 0e4508f9ff3e55a5181a345fbb4e618f965b60b9 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Wed, 15 Apr 2015 17:47:07 +0200 Subject: [PATCH] Inserita gestione chiave pubblica per amgmt. Cambiato ruolo di base per installazione con amgmt. --- roles/base/tasks/add_centos_repos.yml | 27 ++++++++++++++++++--------- roles/base/tasks/packages.yml | 3 ++- roles/firstsetup/defaults/main.yml | 3 +++ roles/firstsetup/tasks/mgmtuser.yml | 4 ++++ 4 files changed, 27 insertions(+), 10 deletions(-) create mode 100644 roles/firstsetup/defaults/main.yml diff --git a/roles/base/tasks/add_centos_repos.yml b/roles/base/tasks/add_centos_repos.yml index 6a31ae0..6fd463c 100644 --- a/roles/base/tasks/add_centos_repos.yml +++ b/roles/base/tasks/add_centos_repos.yml @@ -2,50 +2,59 @@ - name: Verifica configurazione CentOS 6 file: name=/etc/yum.repos.d/CentOS-Base.repo state=file + sudo: yes + remote_user: amgmt ignore_errors: yes register: check_repos - sudo: yes - name: Scarico configurazione per CentOS 6 get_url: url: http://mirror.centos.org/centos/6/os/x86_64/Packages/centos-release-6-6.el6.centos.12.2.x86_64.rpm dest: /tmp/centos-release-6-6.el6.centos.12.2.x86_64.rpm - when: check_repos|failed sudo: yes + remote_user: amgmt + when: check_repos|failed - name: Scompatto configurazione CentOS 6 shell: mkdir -p /tmp/centos-release && pushd /tmp/centos-release && rpm2cpio ../centos-release-6-6.el6.centos.12.2.x86_64.rpm | cpio -idmv && popd - when: check_repos|failed sudo: yes + remote_user: amgmt + when: check_repos|failed - name: Copio i repository shell: cp -f /tmp/centos-release/etc/yum.repos.d/* /etc/yum.repos.d/ + sudo: yes + remote_user: amgmt when: check_repos|failed register: centos_repo_installed - sudo: yes - name: Copio le chiavi di firma GPG shell: cp -f /tmp/centos-release/etc/pki/rpm-gpg/* /etc/pki/rpm-gpg/ - when: check_repos|failed sudo: yes + remote_user: amgmt + when: check_repos|failed # Senza di questa, non รจ possibile installare EPEL dopo - name: Prima attivazione repo shell: yum clean all && yum repolist - when: centos_repo_installed|changed sudo: yes + remote_user: amgmt + when: centos_repo_installed|changed - name: Attivo EPEL yum: name=epel-release state=present - register: epel_installed sudo: yes + remote_user: amgmt + register: epel_installed - name: Seconda attivazione repo shell: yum clean all && yum repolist - when: epel_installed|changed sudo: yes + remote_user: amgmt + when: epel_installed|changed - name: Pulizia shell: rm -rf /tmp/centos-release && rm -f /tmp/centos-release-6-6.el6.centos.12.2.x86_64.rpm /tmp/epel-release-6-8.noarch.rpm - when: check_repos|failed sudo: yes + remote_user: amgmt + when: check_repos|failed diff --git a/roles/base/tasks/packages.yml b/roles/base/tasks/packages.yml index 44ae8e1..179d00b 100644 --- a/roles/base/tasks/packages.yml +++ b/roles/base/tasks/packages.yml @@ -2,8 +2,9 @@ - name: Installo pacchetti di gestione yum: name={{ item }} state=present - when: ansible_os_family == 'ClearOS' sudo: yes + remote_user: amgmt + when: ansible_os_family == 'ClearOS' with_items: - vim-enhanced - git diff --git a/roles/firstsetup/defaults/main.yml b/roles/firstsetup/defaults/main.yml new file mode 100644 index 0000000..fed0f63 --- /dev/null +++ b/roles/firstsetup/defaults/main.yml @@ -0,0 +1,3 @@ +--- + +admin_sshkey: /Users/syntaxerrormmm/.ssh/id_rsa.pub diff --git a/roles/firstsetup/tasks/mgmtuser.yml b/roles/firstsetup/tasks/mgmtuser.yml index 349219f..3a0af3f 100644 --- a/roles/firstsetup/tasks/mgmtuser.yml +++ b/roles/firstsetup/tasks/mgmtuser.yml @@ -7,3 +7,7 @@ - name: Concessione permessi sudo lineinfile: dest=/etc/sudoers line="amgmt ALL=(ALL:ALL) NOPASSWD:ALL" validate="visudo -cf %s" state=present remote_user: root + +- name: Installazione chiave privata PC locale + authorized_key: user=amgmt key="{{ lookup('file', admin_sshkey) }}" state=present + remote_user: root