diff --git a/install_base_system.yaml b/install_base_system.yaml deleted file mode 100644 index 4dcd011..0000000 --- a/install_base_system.yaml +++ /dev/null @@ -1,265 +0,0 @@ ---- -- name: install our repos - hosts: all - become: true - - tasks: - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: update system (base) - dnf: - name: "*" - state: latest - update_cache: true - skip_broken: true - nobest: false - allowerasing: true - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: Load group list - include_vars: - file: yaml_sub/groups_39.yaml - - name: Install groups - dnf: - name: "{{ groupnames }}" - disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything - update_cache: true - state: present - skip_broken: true - nobest: false - allowerasing: true - exclude: ghdl,sddm-x11 - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: Load package 1 list - include_vars: - file: yaml_sub/packages_1.yaml - - name: Install package 1 - dnf: - name: "{{ package1names }}" - disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything - update_cache: true - state: present - skip_broken: true - nobest: false - allowerasing: true - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: Load package 2 list - include_vars: - file: yaml_sub/packages_2.yaml - - name: Install package 2 - dnf: - name: "{{ package2names }}" - disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything - update_cache: true - state: present - skip_broken: true - nobest: false - allowerasing: true - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: Load package 3 list - include_vars: - file: yaml_sub/packages_3.yaml - - name: Install package 3 - dnf: - name: "{{ package3names }}" - disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything - update_cache: true - state: present - skip_broken: true - nobest: false - allowerasing: true - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: Install cuda - dnf: - name: cuda - enablerepo: "*" - update_cache: true - state: present - skip_broken: true - nobest: false - allowerasing: true - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: Make sure firewall service unit is diabled - systemd_service: - state: stopped - enabled: false - masked: true - name: firewalld - ignore_errors: true - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: install nfs tools - dnf: - name: nfs-utils,nfs-utils-coreos,nfsv4-client-utils,rpcbind - state: present - update_cache: true - skip_broken: true - nobest: false - allowerasing: true - - - name: Make sure rpcbind service unit is started - systemd_service: - enabled: true - state: started - name: rpcbind - - - name: mount_info - include_tasks: yaml_sub/mount_info.yaml - - - - name: remove other files - include_tasks: yaml_sub/myrepo_clean.yaml - - name: update file myrepo.repo - import_tasks: yaml_sub/myrepo_data.yaml - - - name: ssh and sss - dnf: - name: "openssh,openssh-clients,openssh-server,sssd" - state: present - update_cache: true - skip_broken: true - nobest: false - allowerasing: true - - - name: Set SELinux to disabled - lineinfile: - path: /etc/selinux/config - regexp: '^SELINUX=' - line: SELINUX=disabled - create: true - - - name: Set SSHd Config (TCPKeepAlive) - lineinfile: - path: /etc/ssh/sshd_config - state: present - line: "TCPKeepAlive yes" - create: true - - name: Set SSHd Config (ClientAliveInterval) - lineinfile: - path: /etc/ssh/sshd_config - state: present - line: "ClientAliveInterval 30" - - name: Set SSHd Config (ClientAliveCountMax) - lineinfile: - path: /etc/ssh/sshd_config - state: present - line: "ClientAliveCountMax 500" - - - name: Set Services (sge_qmaster) - lineinfile: - path: /etc/services - state: present - line: "sge_qmaster 6444/tcp" - create: true - - - name: Set Services (sge_execd) - lineinfile: - path: /etc/services - state: present - line: "sge_execd 6445/tcp" - - - name: Set Services (nrpe) - lineinfile: - path: /etc/services - state: present - line: "nrpe 5666/tcp # NRPE" - - - name: Set Cups - lineinfile: - path: /etc/cups/client.conf - state: present - line: "ServerName 10.10.10.16" - create: true - - name: Set LDAP (URI) - lineinfile: - path: /etc/openldap/ldap.conf - state: present - line: "URI ldap://10.10.1.31" - - name: Set LDAP (BASE) - lineinfile: - path: /etc/openldap/ldap.conf - state: present - line: "BASE dc=nas1,dc=neuro,dc=itp" - - - name: sssd - include_tasks: yaml_sub/sssd.yaml - - - name: set time zone - timezone: - name: Europe/Berlin - - - name: enable ping - shell: "setcap cap_net_raw+p /bin/ping" - - - name: procmail - dnf: - name: "procmail" - state: present - update_cache: true - skip_broken: true - nobest: false - allowerasing: true - - - name: esmtprc - blockinfile: - path: /etc/esmtprc - state: present - create: true - block: | - hostname = 134.102.55.235:25 - mda "/usr/bin/procmail -d %T" - - - name: Link for chrome - file: - src: /opt/google/chrome/chrome - dest: /bin/chrome - state: link - - - name: set /etc/profile - blockinfile: - path: /etc/profile - state: present - create: true - owner: "root" - group: "root" - mode: "0666" - block: | - . /sge-root/neuro/common/settings.sh - MANPATH=$MANPATH/sge-root/man:/usr/share/man: - export MANPATH