diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..1377554 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +*.swp diff --git a/createpasshash.py b/createpasshash.py new file mode 100755 index 0000000..6d532bb --- /dev/null +++ b/createpasshash.py @@ -0,0 +1,5 @@ +#!/usr/bin/env python +from passlib.hash import sha512_crypt +import getpass + +print sha512_crypt.encrypt(getpass.getpass()) diff --git a/firstsetup.yml b/firstsetup.yml new file mode 100644 index 0000000..ac431da --- /dev/null +++ b/firstsetup.yml @@ -0,0 +1,5 @@ +--- + +- hosts: server + roles: + - firstsetup diff --git a/hosts b/hosts index 1d9e3e9..db02137 100644 --- a/hosts +++ b/hosts @@ -1,4 +1,4 @@ [server] -primary ansible_ssh_host=10.0.0.1 ansible_ssh_user=root +pdc ansible_ssh_host=10.0.0.1 [clients] diff --git a/roles/generalize/tasks/add_centos_repos.yml b/roles/base/tasks/add_centos_repos.yml similarity index 93% rename from roles/generalize/tasks/add_centos_repos.yml rename to roles/base/tasks/add_centos_repos.yml index 1408a01..6a31ae0 100644 --- a/roles/generalize/tasks/add_centos_repos.yml +++ b/roles/base/tasks/add_centos_repos.yml @@ -4,39 +4,48 @@ file: name=/etc/yum.repos.d/CentOS-Base.repo state=file ignore_errors: yes register: check_repos + sudo: yes - name: Scarico configurazione per CentOS 6 get_url: url: http://mirror.centos.org/centos/6/os/x86_64/Packages/centos-release-6-6.el6.centos.12.2.x86_64.rpm dest: /tmp/centos-release-6-6.el6.centos.12.2.x86_64.rpm when: check_repos|failed + sudo: yes - name: Scompatto configurazione CentOS 6 shell: mkdir -p /tmp/centos-release && pushd /tmp/centos-release && rpm2cpio ../centos-release-6-6.el6.centos.12.2.x86_64.rpm | cpio -idmv && popd when: check_repos|failed + sudo: yes - name: Copio i repository shell: cp -f /tmp/centos-release/etc/yum.repos.d/* /etc/yum.repos.d/ when: check_repos|failed register: centos_repo_installed + sudo: yes - name: Copio le chiavi di firma GPG shell: cp -f /tmp/centos-release/etc/pki/rpm-gpg/* /etc/pki/rpm-gpg/ when: check_repos|failed + sudo: yes # Senza di questa, non รจ possibile installare EPEL dopo - name: Prima attivazione repo shell: yum clean all && yum repolist when: centos_repo_installed|changed + sudo: yes - name: Attivo EPEL yum: name=epel-release state=present register: epel_installed + sudo: yes - name: Seconda attivazione repo shell: yum clean all && yum repolist when: epel_installed|changed + sudo: yes - name: Pulizia shell: rm -rf /tmp/centos-release && rm -f /tmp/centos-release-6-6.el6.centos.12.2.x86_64.rpm /tmp/epel-release-6-8.noarch.rpm when: check_repos|failed + sudo: yes diff --git a/roles/generalize/tasks/main.yml b/roles/base/tasks/main.yml similarity index 100% rename from roles/generalize/tasks/main.yml rename to roles/base/tasks/main.yml diff --git a/roles/generalize/tasks/packages.yml b/roles/base/tasks/packages.yml similarity index 94% rename from roles/generalize/tasks/packages.yml rename to roles/base/tasks/packages.yml index ad56b04..44ae8e1 100644 --- a/roles/generalize/tasks/packages.yml +++ b/roles/base/tasks/packages.yml @@ -3,6 +3,7 @@ - name: Installo pacchetti di gestione yum: name={{ item }} state=present when: ansible_os_family == 'ClearOS' + sudo: yes with_items: - vim-enhanced - git diff --git a/roles/firstsetup/tasks/main.yml b/roles/firstsetup/tasks/main.yml new file mode 100644 index 0000000..f7e9127 --- /dev/null +++ b/roles/firstsetup/tasks/main.yml @@ -0,0 +1,3 @@ +--- + +- include: mgmtuser.yml diff --git a/roles/firstsetup/tasks/mgmtuser.yml b/roles/firstsetup/tasks/mgmtuser.yml new file mode 100644 index 0000000..349219f --- /dev/null +++ b/roles/firstsetup/tasks/mgmtuser.yml @@ -0,0 +1,9 @@ +--- + +- name: Creazione account di gestione Ansible + user: name=amgmt comment="Ansible Management User" group=wheel state=present password=$6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k. + remote_user: root + +- name: Concessione permessi sudo + lineinfile: dest=/etc/sudoers line="amgmt ALL=(ALL:ALL) NOPASSWD:ALL" validate="visudo -cf %s" state=present + remote_user: root diff --git a/server.yml b/server.yml index fb7d5d7..b39cc3e 100644 --- a/server.yml +++ b/server.yml @@ -2,4 +2,4 @@ - hosts: server roles: - - generalize + - base