Ansible_PUBLIC/README.md

Table of contents

• Prerequisites
• Setup
• Run defaults
• Run optionals
• Versions
• Git push

NOTA BENE

I've tested the playbooks on:

• Debian 9
• Debian 10
• Debian 11 (everything)
• Debian 12
• Ubuntu 20.04
• Ubuntu 22.04 (common,docker_host)
• Centos 7 (almost everything)

I've started converting the roles to distinguish between OSes but it's incomplete.

I'ts being tested also on LXC containers and I've added a skip of sysctl tasks when in a container. You can check the case by using: systemd-detect-virt none: baremetal kvm: vm (on Proxmox) lxc: container (on Proxmox)

Prerequisites

install ansible:

apt-get install -y ansible

add hosts lines to ansible:

echo "[thismachine]" >> /etc/ansible/hosts
echo "127.0.0.1" >> /etc/ansible/hosts

Setup

you have to change at least 2 variables:

• users
• hostname

which by default are set to "CHANGEME" anche the playbook is set to fail if these are set to CHANGEME

insert your user in:

variables.yml

in the list:

    users:
      goofy

and their ssh keys in the folder

keys

in form of filename:

goofy.key.pub

and format:

ssh-rsa [/CUT] user@host

insert your hostname in

variables.yml

in the variable:

hostname:

Run defaults

ansible-playbook common.yml

or if you are running as non-root:

sudo ansible-playbook common.yml

this playbok will:

• check if the variables are set
• change the hostname to the one that has been set in the variables
• set the timezone to the one in the variables (default: Europe/Rome)
• update repositories
• install base packages
• retrieve the main network interface (the one that is associated with the default gateway)
• iptables:
  • create the users defined in the variables with the keys
  • create basic ipv4 rules
  • create blocking ipv6 rules
  • apply said rules in iptables-persistent
• fix bashrc how I like it
• harden ssh

Run optionals

• docker.yml
  • installs docker-ce and docker-compose (variable in variables.yml for latest of docker-compose)
• lldp.yml
  • installs and enables LLDP
• telegraf.yml
• tincvpn.yml
• transmission.yml
• singularity.yml
  • installs go and builds and installs singularity
• tor.yml
  • installs tor base from tor repo

Versions

• docker-compose:
  • variable: compose_ver
  • look here: https://github.com/docker/compose/releases/latest
• go:
  • variable: singularity_go_ver
  • look here: https://golang.org/dl/ , the package is like go1.14.linux-amd64.tar.gz and you take the "1.14"
• singularity:
  • varaible: singularity_ver
  • look here: https://github.com/sylabs/singularity/releases/latest

Git push

git add --all
git commit -m "added things to readme"
git push -u origin master

or:

git add --all && git commit -m "message" && git push -u origin master

TODO

• fix the installation that is only for deb systems in common.yml
• test on centos