neuro_ansible/install_base_system.yaml

---
- name: install our repos
  hosts: all
  become: true

  tasks:
    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: update system (base)
      dnf:
        name: "*"
        state: latest
        update_cache: true
        skip_broken: true
        nobest: false
        allowerasing: true

    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: Load group list
      include_vars:
        file: yaml_sub/groups_39.yaml
    - name: Install groups
      dnf:
        name: "{{ groupnames }}"
        disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
        update_cache: true
        state: present
        skip_broken: true
        nobest: false
        allowerasing: true
        exclude: ghdl,sddm-x11

    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: Load package 1 list
      include_vars:
        file: yaml_sub/packages_1.yaml
    - name: Install package 1
      dnf:
        name: "{{ package1names }}"
        disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
        update_cache: true
        state: present
        skip_broken: true
        nobest: false
        allowerasing: true

    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: Load package 2 list
      include_vars:
        file: yaml_sub/packages_2.yaml
    - name: Install package 2
      dnf:
        name: "{{ package2names }}"
        disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
        update_cache: true
        state: present
        skip_broken: true
        nobest: false
        allowerasing: true

    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: Load package 3 list
      include_vars:
        file: yaml_sub/packages_3.yaml
    - name: Install package 3
      dnf:
        name: "{{ package3names }}"
        disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
        update_cache: true
        state: present
        skip_broken: true
        nobest: false
        allowerasing: true

    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: Install cuda
      dnf:
        name: cuda
        enablerepo: "*"
        update_cache: true
        state: present
        skip_broken: true
        nobest: false
        allowerasing: true

    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: Make sure firewall service unit is diabled
      systemd_service:
        state: stopped
        enabled: false
        masked: true
        name: firewalld
      ignore_errors: true

    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: install nfs tools
      dnf:
        name: nfs-utils,nfs-utils-coreos,nfsv4-client-utils,rpcbind
        state: present
        update_cache: true
        skip_broken: true
        nobest: false
        allowerasing: true

    - name: Make sure rpcbind service unit is started
      systemd_service:
        enabled: true
        state: started
        name: rpcbind

    - name: mount_info
      include_tasks: yaml_sub/mount_info.yaml


    - name: remove other files
      include_tasks: yaml_sub/myrepo_clean.yaml
    - name: update file myrepo.repo
      import_tasks: yaml_sub/myrepo_data.yaml

    - name: ssh and sss
      dnf:
        name: "openssh,openssh-clients,openssh-server,sssd"
        state: present
        update_cache: true
        skip_broken: true
        nobest: false
        allowerasing: true
       
    - name: Set SELinux to disabled
      lineinfile:
        path: /etc/selinux/config
        regexp: '^SELINUX='
        line: SELINUX=disabled
        create: true

    - name: Set SSHd Config (TCPKeepAlive)
      lineinfile:
        path: /etc/ssh/sshd_config
        state: present
        line: "TCPKeepAlive yes"
        create: true
    - name: Set SSHd Config (ClientAliveInterval)
      lineinfile:
        path: /etc/ssh/sshd_config
        state: present
        line: "ClientAliveInterval 30"
    - name: Set SSHd Config (ClientAliveCountMax)
      lineinfile:
        path: /etc/ssh/sshd_config
        state: present
        line: "ClientAliveCountMax 500"

    - name: Set Services (sge_qmaster)
      lineinfile:
        path: /etc/services
        state: present
        line: "sge_qmaster 6444/tcp"
        create: true

    - name: Set Services (sge_execd)
      lineinfile:
        path: /etc/services
        state: present
        line: "sge_execd 6445/tcp"

    - name: Set Services (nrpe)
      lineinfile:
        path: /etc/services
        state: present
        line: "nrpe 5666/tcp # NRPE"

    - name: Set Cups
      lineinfile:
        path: /etc/cups/client.conf
        state: present
        line: "ServerName 10.10.10.16"
        create: true
    - name: Set LDAP (URI)
      lineinfile:
        path: /etc/openldap/ldap.conf
        state: present
        line: "URI ldap://10.10.1.31"
    - name: Set LDAP (BASE)
      lineinfile:
        path: /etc/openldap/ldap.conf
        state: present
        line: "BASE dc=nas1,dc=neuro,dc=itp"

    - name: sssd
      include_tasks: yaml_sub/sssd.yaml

    - name: set time zone
      timezone:
        name: Europe/Berlin

    - name: enable ping
      shell: "setcap cap_net_raw+p /bin/ping"

    - name: procmail
      dnf:
        name: "procmail"
        state: present
        update_cache: true
        skip_broken: true
        nobest: false
        allowerasing: true

    - name: esmtprc
      blockinfile:
        path: /etc/esmtprc
        state: present
        create: true
        block: |
          hostname = 134.102.55.235:25
          mda "/usr/bin/procmail -d %T"