Benoît Hubert hace 1 año
padre
commit
860df6bdca

+ 3 - 3
ansible-initial-debian-setup/inventory.ini

@@ -1,5 +1,5 @@
 ; ansible inventory file
 [hosts]
-192.168.1.18
-192.168.1.85
-192.168.1.109
+192.168.1.18 ansible_user=debian
+192.168.1.85 ansible_user=debian
+192.168.1.109 ansible_user=debian

+ 31 - 0
ansible-initial-debian-setup/playbook-create-sudoers.yml

@@ -0,0 +1,31 @@
+---
+- name: Create ansible user with sudo privileges and copy ssh key
+  hosts: new_pool
+  become: true
+  vars:
+    sudoers_file: /etc/sudoers.d/ansible
+    ssh_key_file: /home/ansible/.ssh/authorized_keys
+  tasks:
+    - name: Vérifie existence fichier sudoers
+      stat:
+        path: "{{ sudoers_file }}"
+        mode: '0440'
+      register: stat_sudoers
+      
+    - name: Créer fichier sudoers
+      copy:
+        content: "{{ lookup('template', 'sudoers.j2') }}"
+        dest: "{{ sudoers_file }}"
+        mode: '0440'
+      when: not stat_sudoers.stat.exists
+
+    - name: Create ansible user
+      user:
+        name: ansible
+        createhome: yes
+
+    - name: Copy ssh key to authorized_keys file
+      ansible.posix.authorized_key:
+        user: ansible
+        state: present
+        key: "{{ lookup('file', '~/.ssh/id_ed25519.pub') }}"

+ 21 - 0
ansible-initial-debian-setup/playbook-install-vim.yml

@@ -0,0 +1,21 @@
+---
+- hosts: all
+  gather_facts: no
+  become: true
+  # obligé d'ajouter ce bloc --- DEBUT
+  become_method: su
+  become_user: root
+  vars_files:
+    - root-creds.yml
+  # obligé d'ajouter ce bloc --- FIN
+  vars:
+    package_1: vim
+    package_2: git
+    package_3: etckeeper
+  tasks:
+    - name: "Install Package {{ package_1 }}"
+      apt: name={{ package_1 }} state=latest
+    - name: "Install Package {{ package_2 }}"
+      apt: name={{ package_2 }} state=latest
+    - name: "Install Package {{ package_3 }}"
+      apt: name={{ package_3 }} state=latest

+ 7 - 0
ansible-initial-debian-setup/playbook-whoami.yml

@@ -0,0 +1,7 @@
+- hosts: all
+  become: yes
+  tasks:
+    - name: Who am I?
+      command: whoami
+      register: whoami
+    - debug: var=whoami.stdout