Commit graph

186 commits

Author SHA1 Message Date
Andreas B. Mundt
06973c015b Fix sambox-client. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
ec66744db4 Fix sambox. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
a5e143b900 Fix bind configuration. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
b0e34434b1 Split 'normal' and 'setup' tasks. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
bfee555f1e Add 'ldap' alias in ldap role. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
bc383ec232 Add gdm3 configuration. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
4a6c5ea10d Add 'edubox' to installbox examples. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
49d81c705d Fix kerberox. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
f3d2d5ca9b Add 'cloudbox' to installbox examples. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
f550f530c6 Fix cloudbox. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
8eb7c93502 More ansible-lint cleanup. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
1db0b6ec31 Rename some roles to make ansible-lint happy. 2023-02-07 19:18:57 +01:00
Andreas B. Mundt
2cf34e8e55 Fix some ansible-lint complaints. 2023-02-07 19:17:53 +01:00
Andreas B. Mundt
c7030c9245 Implement container 'restart' tag. 2023-02-07 19:15:50 +01:00
Jukka Nousiainen
bf265a8309 Tweaks 2023-02-07 19:15:50 +01:00
Jukka Nousiainen
1a0b2614bc Create /etc/ansible if it doesn't exist 2023-02-07 19:15:50 +01:00
Jukka Nousiainen
1a9b3ba2e6 Parameterize most of the LAN config
So that it adapts to e.g. 192.168.50/24 instead of 192.168.0/24
2023-02-07 19:15:50 +01:00
Jukka Nousiainen
b285427482 Parameterize become_user
To allow some flexibility in mixed environments.
2023-02-07 19:15:50 +01:00
Andreas B. Mundt
37c767ff0c Rework systemd-networkd role. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
f9e8560f7b Use systemd-resolved in the containers.
If the host uses systemd-networkd and systemd-resolved too, the
containers can be resolved from the host.
2023-02-07 19:15:50 +01:00
Andreas B. Mundt
3d3f0093ff Run 'setup' only on setup. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
9e2a6a70e3 Fix warning about missing pseudo file systems. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
aa34a0a910 During preseeded install, apt-cacher is not yet available. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
6e350463e7 Fix preseeded ansible-pull run. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
5b24073291 Fix apt problems. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
d3e732bc89 Fix tasks that falsely report 'changes'. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
2c0a1c5392 Implement 'setup'-tag to re-setup the containers. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
0ed4230794 Split container package list. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
327f2eefac Username variable. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
0c48d933e7 Add more packages to the container. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
245c08c125 Improve container management tasks. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
ae0c26b117 Fix too many open files error with more containers. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
90d340a1d5 Make sure stuff exists when needed. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
85836e311e Move container restart task to handlers. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
baba55e05a Optional non-empty passwords for the container user. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
1b5f7ea0b5 Minor fixes and improvements. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
e058def667 Run in reverse order to remove the initial container last. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
cb5ade4c84 Provide 'sources.list' from the host and upgrade initial container. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
7bbfd817f8 Switch to persistent overlays.
With tmpfs the containers' disk space is too limited.  Better keep
changes on the disk.
2023-02-07 19:15:50 +01:00
Andreas B. Mundt
fed5f71357 Instead of cloning the image, link to the rootfs. Provide more individual files. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
b920bdf52b Provide playbook and role to deploy containers.
The containers are deployed for educational purposes with
user 'ansible' in the sudo group and an empty password.
SSH login is available via ports 10000 upwards on the host.
Port 80 is forwarded as well (ssh port + 100).
The container's rootfs is read only with an overlay:  After
restart of the container, modifications are lost.
2023-02-07 19:15:50 +01:00
Andreas B. Mundt
ede02d4761 Run DB tasks only on nextcloud upgrade. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
1e44ff34c3 Move nextcloud upgrade to separate role. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
89ff43e126 Fix some '.well-known/' redirects. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
708f6df86c Updates/fixes for bullseye and nextcloud 21. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
08cc1889fc Fixes and shellcheck-cleanup. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
89545ab4a7 Make sure gnome-keyring-daemon is not started, it fails with sshfs. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
13993ef45e Minor fixes for the DHCP and DNS setup. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
013c250e50 Fix/improve git-repo service. 2023-02-07 19:15:50 +01:00
Andreas B. Mundt
657185cd46 Deploy server's ssh pubkey to clients. 2023-02-07 19:15:50 +01:00