4 Commits

Author SHA1 Message Date
54442c73d3 solution setup 2023-02-21 11:53:50 +01:00
0f04017437 atelier a partir du playbook setup 2023-02-21 11:52:29 +01:00
7c7e0658fc back to apache 2021-11-30 10:46:03 +01:00
a41ee487a4 rename readme 2021-11-16 09:35:03 +01:00
13 changed files with 151 additions and 71 deletions

View File

@@ -1,23 +0,0 @@
## Dépendances entre rôles
**Tâche**: Écrire un rôle dépendant d'un autre
**Condition**: pour améliorer l'organisation et la maintenance de nos playbooks
**Norme**: ansible-galaxy, vim, meta
### Préparation
Créez un rôle "vim" qui s'assure:
- de la présence du paquet vim-enhanced
- de l'absence du paquet nano
- de la présence du fichier https://cours.opendoor.fr/Fichiers/vimrc dans /etc/vimrc
### Pratique
Faire en sorte que ce rôle "vim" dépende du rôle "setup" précédemment mis en place, c'est à dire que utiliser le rôle "vim" entraîne automatiquement l'utilisation du rôle "setup"
### Validation
Les 2 rôles sont exécutés

View File

@@ -8,9 +8,7 @@
## Pratique:
Convertir en un rôle nommé "setup" le 1er playbook mis au point lors de l'atelier "adhoc to playbook".
Pour rappel, ce playbook se trouve dans le fichier setup.yml
Convertir en un rôle nommé "setup" le playbook setup.yml joint.
## Performance

View File

@@ -1,45 +1,6 @@
---
- name: setup target to be managed by ansible
hosts: cibles
tasks:
- name: warn people
lineinfile:
path: /etc/motd
create: yes
line: "Host is managed by ansible, manual interaction not recommended"
state: present
- name: history
lineinfile:
path: /etc/history
line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }}"
state: present
create: true
- name: generate ssh keys
openssh_keypair:
path: "~/.ssh/id_rsa"
size: 2048
delegate_to: localhost
become: false
- name: create account
user:
name: ansible
password: "{{ '123Soleil2021%' | password_hash('sha512',65534|random(seed=inventory_hostname) | string) }}"
create_home: yes
home: /home/ansible
- name: configure sudo
copy:
src: sudo
dest: /etc/sudoers.d/ansible
validate: "/usr/sbin/visudo -cf %s"
- name: deploy ssh key
authorized_key:
user: ansible
key: "{{ item }}"
loop:
- "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
- "https://infra.opendoor.fr/id_rsa.pub"
roles:
- tco.setup

3
sudo
View File

@@ -1,3 +0,0 @@
#Configuration sudo
# en nopassword pour ansible
ansible ALL=(ALL) NOPASSWD: ALL

38
tco.setup/README.md Normal file
View File

@@ -0,0 +1,38 @@
Role Name
=========
Configure host for ansible management
Requirements
------------
None
Role Variables
--------------
playbook_version: 1.0
Dependencies
------------
None
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { tco.setup }
License
-------
BSD
Author Information
------------------
Thomas C

View File

@@ -0,0 +1,2 @@
---
# defaults file for tco.setup

1
tco.setup/files/sudoers Normal file
View File

@@ -0,0 +1 @@
ansible ALL=NOPASSWD: ALL

View File

@@ -0,0 +1,2 @@
---
# handlers file for tco.setup

52
tco.setup/meta/main.yml Normal file
View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

42
tco.setup/tasks/main.yml Normal file
View File

@@ -0,0 +1,42 @@
---
# tasks file for tco.setup
- name: warn people
ansible.builtin.lineinfile:
path: /etc/motd
create: yes
line: "Host is managed by ansible, manual interaction not recommended"
state: present
- name: history
ansible.builtin.lineinfile:
path: /etc/history
line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }} - {{ playbook_version }}"
state: present
create: true
- name: generate ssh keys
openssh_keypair:
path: "~/.ssh/id_rsa"
size: 2048
delegate_to: localhost
become: false
- name: create account
ansible.builtin.user:
name: ansible
password: "{{ '123Soleil%' | password_hash('sha512',65534|random(seed=inventory_hostname) | string) }}"
create_home: yes
home: /home/ansible
- name: configure sudo
ansible.builtin.copy:
src: sudoers
dest: /etc/sudoers.d/ansible
- name: deploy ssh key
ansible.posix.authorized_key:
user: ansible
key: "{{ item }}"
loop:
- "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
- "https://infra.opendoor.fr/id_rsa.pub"

View File

@@ -0,0 +1,2 @@
localhost

5
tco.setup/tests/test.yml Normal file
View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- tco.setup

3
tco.setup/vars/main.yml Normal file
View File

@@ -0,0 +1,3 @@
---
# vars file for tco.setup
playbook_version: 1.0