From 6bac71dd4e6ac4b7b326c2b1b34cbc449360c64f Mon Sep 17 00:00:00 2001 From: David Rotermund <54365609+davrot@users.noreply.github.com> Date: Mon, 8 Apr 2024 10:55:22 +0200 Subject: [PATCH] Create README.md --- README.md | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..359816b --- /dev/null +++ b/README.md @@ -0,0 +1,36 @@ +I bassed the installation on Fedora 39 Server Edition. + +* Ansible will not work as long as SE Linux is active. Use the cockpit localhost:9090 to disable it for duration you need it to be tured off. +* Don't forget to configure the firewalls correctly. Again, use cockpit. +* Portainer is exported to port 9443. You should use it for coordinating the docker chaos. + +# How make a computer ready for ansible + +``` +dnf -y install ansible mc net-tools openssh-server openssh-clients passwdqc cracklib-dicts shadow-utils + +systemctl enable sshd +systemctl start sshd + +useradd -b /specialusers ansibleuser +passwd_value="PUT_A_PASSWORD_HERE" +echo ansibleuser:$passwd_value | chpasswd +echo "ansibleuser ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/ansible +``` + +# How to make the server ready + +Once: +``` +dnf -y install ansible mc net-tools openssh-server openssh-clients passwdqc cracklib-dicts shadow-utils sshpass + +ssh-keygen +``` + +And then for every computer: + +``` +passwd_value="PUT_A_PASSWORD_HERE" +sshpass -p "$passwd_value" ssh-copy-id -o "StrictHostKeyChecking accept-new" ansibleuser@COMPUTERNAME +``` +