sync bootstrap.yml and bootstrap.sh

This commit is contained in:
2026-07-24 16:13:34 -05:00
parent 86b8a2e06d
commit dfc6aa5cb3
2 changed files with 47 additions and 33 deletions
+44 -30
View File
@@ -21,11 +21,16 @@
# Update software repositories here
# Change the following to work with multiple distros
- name: bootstrap
- name: bootstrap.yml
hosts: all
tasks:
- name: Update repositories
ansible.builtin.apt:
become: yes
update_cache: yes
- name: Install bootstrap packages
ansible.builtin.apt:
become: yes
@@ -38,7 +43,7 @@
- python3-venv
- python3-virtualenv
- name: Make sure hpf-sudo group exists
- name: Create system group hpf-sudo for normal sudo users
ansible.builtin.group:
become: yes
name: hpf-sudo
@@ -46,7 +51,7 @@
system: true
gid: 700
- name: Make sure hpf-sudo-np group exists
- name: Create system group hpf-sudo-np for special sudo users that don't require a password
ansible.builtin.group:
become: yes
name: hpf-sudo-np
@@ -54,10 +59,19 @@
system: true
gid: 701
- name: Copy over /etc/sudoers.d/hpf
- name: Make sure /etc/sudoers.d exists
ansible.builtin.file:
become: yes
path: /etc/sudoers.d
state: directory
owner: root
group: root
mode: u=rwx,go=
- name: Get /etc/sudoers.d/hpf
ansible.builtin.copy:
become: yes
src: etc_sudoers_d_hpf
src: etc/sudoers.d/hpf
dest: /etc/sudoers.d/hpf
owner: root
group: root
@@ -65,36 +79,36 @@
backup: true
validate: /usr/sbin/visudo -csf %s
#### .profile.d should be in SKEL directory - look it up
- name: Make sure .profile.d directory exists
- name: Make sure /etc/skel/.profile.d exists
ansible.builtin.file:
become: true
become: yes
path: /etc/skel/.profile.d
state: directory
owner: root
group: root
mode: u=rwx,go=
#### ansible-venv.sh should be in SKEL directory - look it up
- name: Copy over ansible-venv.sh
- name: Get /etc/skel/.profile.d/ansible-venv.sh
ansible.builtin.copy:
become: true
src: profile_d_ansible_venv_sh
dest: /etc/skel/.profile.d/ansible-pull.sh
become: yes
src: etc/skel/.profile.d/ansible-venv.sh
dest: /etc/skel/.profile.d/ansible-venv.sh
owner: root
group: root
mode: u=rwx,go=
mode: u=rw,go=
backup: true
- name: Get /etc/skel/.profile
ansible.builtin.copy:
become: yes
src: etc/skel/.profile
dest: /etc/skel/.profile
owner: root
group: root
mode: u=rw,go=
backup: true
#### .profile
- name: Make sure hpf-ans group exists
- name: Create the hpf-ans group
ansible.builtin.group:
become: yes
name: hpf-ans
@@ -102,7 +116,7 @@
system: true
gid: 800
- name: Make sure hpf-ans user exists
- name: Create the hpf-ans user
ansible.builtin.user:
become: yes
name: hpf-ans
@@ -113,21 +127,21 @@
groups: hpf-sudo-np
append: yes
create_home: true
shell: /bin/bash
shell: /usr/bin/bash
- name: Install latest version of pip in .ansible-venv
- name: Make sure pip is up to date
ansible.builtin.pip:
name: pip
virtualenv: $HOME/.ansible-venv
extra_args: --upgrade
- name: Install latest version of ansible in .ansible-venv
- name: Make sure ansible is up to date
ansible.builtin.pip:
name: ansible
virtualenv: $HOME/.ansible-venv
extra_args: "--upgrade"
extra_args: --upgrade
- name: Make sure bin directory exists
- name: Make sure /home/hpf-ans/bin exists
ansible.builtin.file:
path: $HOME/bin
state: directory
@@ -135,9 +149,9 @@
group: hpf-ans
mode: u=rwx,go=
- name: Copy over bin/ansible-pull.sh
- name: Get /home/hpf-ans/bin/ansible-pull.sh
ansible.builtin.copy:
src: home_hpf_ans_bin_ansible_pull_sh
src: home/hpf_ans/bin/ansible-pull.sh
dest: $HOME/bin/ansible-pull.sh
owner: hpf-ans
group: hpf-ans