450 lines
11 KiB
YAML
450 lines
11 KiB
YAML
- name: configure sudoers
|
|
lineinfile:
|
|
path: /etc/sudoers
|
|
line: "{{ user.name }} ALL=(ALL) NOPASSWD:ALL"
|
|
regexp: "^{{ user.name }}\\s+"
|
|
become: true
|
|
become_user: root
|
|
|
|
- name: set shell
|
|
user:
|
|
name: "{{ user.name }}"
|
|
shell: /usr/bin/zsh
|
|
become: true
|
|
become_user: root
|
|
|
|
- set_fact:
|
|
user_groups:
|
|
- adm
|
|
- cdrom
|
|
- sudo
|
|
- dip
|
|
- plugdev
|
|
- lpadmin
|
|
- sambashare
|
|
- docker
|
|
- libvirt
|
|
when: distro == 'ubuntu'
|
|
tags: [always]
|
|
|
|
- set_fact:
|
|
user_groups:
|
|
- libvirt
|
|
- wheel
|
|
- vboxusers
|
|
- wireshark
|
|
- docker
|
|
when: distro == 'fedora'
|
|
tags: [always]
|
|
|
|
- set_fact:
|
|
user_groups:
|
|
- libvirt
|
|
- wheel
|
|
- vboxusers
|
|
- wireshark
|
|
- docker
|
|
- sudonopw
|
|
- games
|
|
when: distro == 'archlinux'
|
|
tags: [always]
|
|
|
|
- set_fact:
|
|
user_group_name: "{{ user.group|default(user.name) }}"
|
|
tags: [always]
|
|
|
|
- name: create user group
|
|
group:
|
|
name: "{{ user_group_name }}"
|
|
state: present
|
|
become: true
|
|
become_user: root
|
|
|
|
- name: set groups
|
|
user:
|
|
name: "{{ user.name }}"
|
|
groups: "{{ [user_group_name, 'dotfiles'] + user_groups }}"
|
|
become: true
|
|
become_user: root
|
|
|
|
- name: disable and mask systemd user units
|
|
systemd:
|
|
name: "{{ item }}"
|
|
enabled: false
|
|
masked: true
|
|
scope: user
|
|
with_items:
|
|
- gpg-agent.service
|
|
- gpg-agent.socket
|
|
- gpg-agent-browser.socket
|
|
- gpg-agent-ssh.socket
|
|
tags: [test]
|
|
|
|
- name: create directory for getty autologin
|
|
file:
|
|
state: directory
|
|
path: /etc/systemd/system/getty@tty{{ user.vt }}.service.d
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
become: true
|
|
become_user: root
|
|
|
|
- name: enable getty autologin
|
|
copy:
|
|
dest: /etc/systemd/system/getty@tty{{ user.vt }}.service.d/override.conf
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
content: |
|
|
[Service]
|
|
ExecStart=
|
|
ExecStart=-/sbin/agetty --autologin {{ user.name }} --noclear %I $TERM
|
|
become: true
|
|
become_user: root
|
|
|
|
- block:
|
|
- name: load dotfile list
|
|
include_vars:
|
|
file: dotfiles.yml
|
|
|
|
- name: get state of empty directories
|
|
stat:
|
|
path: ~/{{ item.name }}
|
|
register: empty_dir_stat
|
|
with_items: "{{ empty_directories }}"
|
|
check_mode: false
|
|
|
|
- name: remove sysmlinks
|
|
file:
|
|
path: "{{ item.stat.path }}"
|
|
state: absent
|
|
when: item.stat.exists and item.stat.islnk
|
|
with_items: "{{ empty_dir_stat.results }}"
|
|
|
|
- name: create empty directories for dotfiles
|
|
file:
|
|
state: directory
|
|
path: ~/{{ item.name }}
|
|
mode: "{{ item.mode | default('0755') }}"
|
|
with_items: "{{ empty_directories }}"
|
|
|
|
- name: link this folder to ~/.dotfiles
|
|
file:
|
|
state: link
|
|
force: true
|
|
follow: false
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
path: "/home/{{ user.name }}/.dotfiles"
|
|
src: "{{ playbook_dir }}"
|
|
become: true
|
|
become_user: root
|
|
|
|
- name: get state of copy targets
|
|
stat:
|
|
path: ~/{{ item.to }}
|
|
register: copy_stat
|
|
when: not item.template|default(false)
|
|
with_items: "{{ dotfiles }}"
|
|
check_mode: false
|
|
|
|
- name: remove invalid copy target (directories)
|
|
file:
|
|
path: "{{ item.stat.path }}"
|
|
state: absent
|
|
when:
|
|
- not item.skipped is defined or not item.skipped
|
|
- item.stat.exists
|
|
- item.stat.isdir
|
|
with_items: "{{ copy_stat.results }}"
|
|
|
|
- name: make sure target directories exist
|
|
file:
|
|
state: directory
|
|
path: "{{ (['/home', user.name, item.to]|join('/')) | dirname }}"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
with_items: "{{ dotfiles }}"
|
|
become: true
|
|
become_user: root
|
|
|
|
- name: link dotfiles
|
|
file:
|
|
state: link
|
|
force: true
|
|
follow: false
|
|
path: "/home/{{ user.name }}/{{ item.to }}"
|
|
src: /var/lib/dotfiles/{{ item.from }}
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
when: not item.template|default(false)
|
|
with_items: "{{ dotfiles }}"
|
|
become: true
|
|
become_user: root
|
|
|
|
- name: get state of template targets
|
|
stat:
|
|
path: ~/{{ item.to }}
|
|
register: template_stat
|
|
when: item.template|default(false)
|
|
with_items: "{{ dotfiles }}"
|
|
check_mode: false
|
|
|
|
- name: remove invalid template target (directory or symlink)
|
|
file:
|
|
path: "{{ item.stat.path }}"
|
|
state: absent
|
|
when:
|
|
- not item.skipped is defined or not item.skipped
|
|
- item.stat.exists
|
|
- not item.stat.isreg
|
|
with_items: "{{ template_stat.results }}"
|
|
|
|
- name: deploy dotfiles templates
|
|
template:
|
|
src: /home/{{ user.name }}/.dotfiles/{{ item.from }}.j2
|
|
dest: "/home/{{ user.name }}/{{ item.to }}"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
force: true
|
|
become: true
|
|
become_user: root
|
|
when: item.template|default(false)
|
|
with_items: "{{ dotfiles }}"
|
|
|
|
- name: create directories
|
|
file:
|
|
state: directory
|
|
path: "{{ item }}"
|
|
with_items:
|
|
- ~/.var/lib
|
|
- ~/.var/log
|
|
- ~/.var/run
|
|
- ~/.usr/lib
|
|
|
|
- name: stat ~/bin
|
|
stat:
|
|
path: "/home/{{ user.name }}/bin"
|
|
register: bin_stat
|
|
check_mode: false
|
|
|
|
- name: remove ~/bin if not a link
|
|
file:
|
|
state: absent
|
|
path: "/home/{{ user.name }}/bin"
|
|
when:
|
|
- bin_stat.stat.exists
|
|
- not bin_stat.stat.islnk
|
|
|
|
- name: create ~/.opt and ~/.optbin
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
with_items:
|
|
- ~/.opt/
|
|
- ~/.optbin/
|
|
|
|
- name: symlink opt programs
|
|
file:
|
|
state: link
|
|
force: true
|
|
follow: false
|
|
path: "/home/{{ user.name }}/.optbin/{{ item.name }}"
|
|
src: "/home/{{ user.name }}/.opt/{{ item.optpath }}"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
with_items:
|
|
- name: terraform
|
|
optpath: terraform
|
|
- name: hugo
|
|
optpath: hugo
|
|
- name: drone
|
|
optpath: drone
|
|
|
|
- name: link bin directory
|
|
file:
|
|
state: link
|
|
force: true
|
|
follow: false
|
|
path: "/home/{{ user.name }}/bin"
|
|
src: /var/lib/dotfiles/bin
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
tags:
|
|
- dotfiles
|
|
|
|
- name: create intermediate directories for vim-plug
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
with_items:
|
|
- ~/.local/
|
|
- ~/.local/share/
|
|
- ~/.local/share/nvim/
|
|
- ~/.local/share/nvim/site/
|
|
- ~/.local/share/nvim/site/autoload/
|
|
- ~/.vim/
|
|
- ~/.vim/autoload
|
|
|
|
- block:
|
|
- name: install vim-plug
|
|
copy:
|
|
src: contrib/vim-plug/plug.vim
|
|
dest: ~/.vim/autoload/plug.vim
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
mode: "0644"
|
|
|
|
- name: symlink vim-plug for neovim
|
|
file:
|
|
state: link
|
|
path: ~/.local/share/nvim/site/autoload/plug.vim
|
|
src: ~/.vim/autoload/plug.vim
|
|
force: true
|
|
|
|
- name: install vim plugins
|
|
command: /usr/bin/nvim -f -E -s -c "source ~/.vimrc" +PlugInstall +qall
|
|
register: vim_plugins_stdout
|
|
check_mode: false
|
|
changed_when: vim_plugins_stdout.stdout_lines|length != 0
|
|
|
|
- name: compile youcompleteme
|
|
shell: |
|
|
cd ~/.local/share/nvim/plugged/YouCompleteMe/
|
|
python3 ./install.py # --go-completer
|
|
args:
|
|
creates: ~/.local/share/nvim/plugged/YouCompleteMe/third_party/ycmd/ycm_core.so
|
|
when: vim_plugins_stdout.stdout_lines|length != 0 or true
|
|
|
|
- block:
|
|
- name: firefox - create chrome directory
|
|
file:
|
|
path: ~/.mozilla/firefox/{{ item.name }}/chrome/
|
|
state: directory
|
|
mode: '0755'
|
|
with_items: "{{ user.firefox_profiles }}"
|
|
when: user.firefox_profiles is defined
|
|
tags:
|
|
- firefox
|
|
|
|
- name: firefox - configure firefox custom css
|
|
copy:
|
|
dest: ~/.mozilla/firefox/{{ item.name }}/chrome/userChrome.css
|
|
content: |
|
|
#TabsToolbar {
|
|
visibility: collapse !important;
|
|
}
|
|
#titlebar {
|
|
visibility: collapse !important;
|
|
}
|
|
#sidebar-header {
|
|
visibility: collapse !important;
|
|
}
|
|
#sidebar {
|
|
width: 400px !important;
|
|
}
|
|
when: item.manage_css
|
|
with_items: "{{ user.firefox_profiles | default([]) }}"
|
|
tags:
|
|
- firefox
|
|
|
|
- block:
|
|
- name: set portfolio performance version
|
|
set_fact:
|
|
portfolio_performace_version: "0.47.0"
|
|
|
|
- name: look of current installation
|
|
stat:
|
|
path: /home/{{ user.name }}/.opt/portfolio-performance-{{ portfolio_performace_version }}
|
|
register: stat_portfolio_performance_installation
|
|
|
|
- name: create temporary directory
|
|
tempfile:
|
|
state: directory
|
|
register: tempdir
|
|
|
|
- block:
|
|
- name: download portfolio performance
|
|
get_url:
|
|
url: https://github.com/buchen/portfolio/releases/download/{{ portfolio_performace_version }}/PortfolioPerformance-{{ portfolio_performace_version }}-linux.gtk.x86_64.tar.gz
|
|
dest: "{{ tempdir.path }}/PortfolioPerformance.{{ portfolio_performace_version }}.tar.gz"
|
|
|
|
- name: create destination directory
|
|
file:
|
|
state: directory
|
|
path: "{{ tempdir.path }}/PortfolioPerformance"
|
|
when: not stat_portfolio_performance_installation.stat.exists
|
|
|
|
- name: unpack portfolio performance
|
|
unarchive:
|
|
src: "{{ tempdir.path }}/PortfolioPerformance.{{ portfolio_performace_version }}.tar.gz"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
mode: '0755'
|
|
dest: "{{ tempdir.path }}/PortfolioPerformance"
|
|
remote_src: true
|
|
|
|
- name: install portfolio performance
|
|
synchronize:
|
|
src: "{{ tempdir.path }}/PortfolioPerformance"
|
|
dest: /home/{{ user.name }}/.opt/portfolio-performance-{{ portfolio_performace_version }}
|
|
recursive: true
|
|
checksum: true
|
|
delete: true
|
|
|
|
when: not stat_portfolio_performance_installation.stat.exists
|
|
|
|
- name: link portfolio performance
|
|
file:
|
|
src: /home/{{ user.name }}/.opt/portfolio-performance-{{ portfolio_performace_version }}/PortfolioPerformance/portfolio/PortfolioPerformance
|
|
dest: /home/{{ user.name }}/.optbin/portfolio-performance
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
state: link
|
|
force: true
|
|
|
|
tags:
|
|
- portfolio-performance
|
|
|
|
- block:
|
|
- name: set kubectl version
|
|
set_fact:
|
|
kubectl_version: v1.20.0
|
|
|
|
- name: get current stable version
|
|
uri:
|
|
url: https://storage.googleapis.com/kubernetes-release/release/stable.txt
|
|
return_content: true
|
|
register: kubectl_stable_version_api
|
|
check_mode: false
|
|
|
|
- set_fact:
|
|
kubectl_stable_version: "{{ kubectl_stable_version_api.content|trim }}"
|
|
|
|
- set_fact:
|
|
kubectl_outdated: "{{ kubectl_version != kubectl_stable_version }}"
|
|
|
|
- name: warn if not on stable version
|
|
debug:
|
|
msg: "installing kubectl {{ kubectl_version }}, stable version would be {{ kubectl_stable_version }}"
|
|
changed_when: kubectl_outdated is sameas true
|
|
when: kubectl_outdated is sameas true
|
|
|
|
- name: get kubectl
|
|
get_url:
|
|
url: https://storage.googleapis.com/kubernetes-release/release/{{ kubectl_version }}/bin/linux/amd64/kubectl
|
|
dest: /home/{{ user.name }}/.opt/kubectl-{{ kubectl_version }}
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user_group_name }}"
|
|
mode: '0755'
|
|
|
|
- name: link kubectl
|
|
file:
|
|
src: /home/{{ user.name }}/.opt/kubectl-{{ kubectl_version }}
|
|
dest: /home/{{ user.name }}/.optbin/kubectl
|
|
state: link
|
|
|
|
tags:
|
|
- kubectl
|