Changeset 3667 in MondoRescue for branches/3.3/ansible/roles/system/tasks/main.yml

Timestamp:

Jun 7, 2017, 3:03:17 AM (7 years ago)

Author:

Bruno Cornec

Message:

Many updates to MR setup

File:

• branches/3.3/ansible/roles/system/tasks/main.yml (modified) (3 diffs)

branches/3.3/ansible/roles/system/tasks/main.yml

@@ -2 +2 @@
 
 - name: Check that IP address is setup
-  copy: src=templates/ifcfg-enp2s0f0 dest=/etc/sysconfig/network-scripts/ifcfg-enp2s0f0 owner=root group=root mode=0600 backup=yes
+  template: src=templates/ifcfg-enp2s0f0 dest=/etc/sysconfig/network-scripts/ifcfg-enp2s0f0 owner=root group=root mode=0600 backup=yes
   tags: system
 
 - name: Check that GW is setup
-  copy: src=templates/network dest=/etc/sysconfig/network owner=root group=root mode=0600 backup=yes
+  template: src=templates/network dest=/etc/sysconfig/network owner=root group=root mode=0600 backup=yes
   tags: system
 
@@ -28 +28 @@
   tags: system
 
-- name: Ensure the fwadmin group exists
-  group: name=fwadmin state=present 
+- name: Ensure the groups exists
+  group: name={{ item }} state=present 
   tags: system
+  with_items: 
+    - fwadmin
+    - bruno
 
-- name: Ensure the fwadmin account exists
-  user: name=fwadmin state=present group=fwadmin home=/home/fwadmin move_home=yes
+- name: Ensure the accounts exists
+  user: name={{ item }} state=present group={{ item }} home=/home/{{ item }} move_home=yes
   tags: system
+  with_items: 
+    - fwadmin
+    - bruno
 
-- name: Copy public for fwadmin access
-  lineinfile: destfile=/home/{{ item }}/.ssh/authorized_keys state=present line='{{ sshkey }}' owner={{item }} group={{item }} mode=0600 backup=yes
+- name: Copy special keys for remote access (git...)
+  copy: src=/users/bruno/prj/musique-ancienne.org/mondorescue.org/{{ item.f }} dest=/home/bruno/{{ item.f }} mode={{ item.m }} backup=yes owner=bruno group=bruno
+  with_items: 
+    - { f: .ssh, m: 700 }
+    - { f: .ssh/id_rsa, m: 600 }
+    - { f: .ssh/id_rsa.pub, m: 644 }
+
+- name: Copy public keys for access
+  lineinfile: destfile=/home/{{ item }}/.ssh/authorized_keys state=present line='{{ sshkey }}' mode=0600 backup=yes owner={{ item }} group={{ item }}
   with_items: 
     - fwadmin
@@ -52 +65 @@
 
 - name: Check that sshutout is configured
-  copy: src=templates/sshutout.conf dest=/etc/sshtout.conf owner=root group=root mode=0600 backup=yes
+  template: src=templates/sshutout.conf dest=/etc/sshutout.conf owner=root group=root mode=0600 backup=yes
   notify:
     - restart sshutout