folliehiyuki/sysconfig
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
This repository has been archived on 2024-02-16. You can view files and clone it, but cannot push or open issues or pull requests.
sysconfig/group_vars/all.yml

45 lines
1.4 KiB
YAML
Raw Normal View History

Getting started
2022-01-14 19:46:59 +01:00
---
Big chunk of changes - essential: - make polkit optional - move /etc/hosts file to unbound role - libvirt: - make libvirt daemons configurable - delete the firewall patch. Hardcode the rules by default (for now) so that the playbook is compatible with `ansible-core` - user: add pam_limits file (moved from dotfiles repository) - sysctl: role deleted. The task was moved to essential role - fstab: new role for /run, /tmp, /proc mounts - add seatd as a 'seat_manager' option - cron: use find command to restraint deleted files in /var/tmp
2022-02-11 18:39:35 +01:00
# Custom variables ────────────────────────────────────────────────────────────
Getting started
2022-01-14 19:46:59 +01:00
rootfs: btrfs
Big chunk of changes - essential: - make polkit optional - move /etc/hosts file to unbound role - libvirt: - make libvirt daemons configurable - delete the firewall patch. Hardcode the rules by default (for now) so that the playbook is compatible with `ansible-core` - user: add pam_limits file (moved from dotfiles repository) - sysctl: role deleted. The task was moved to essential role - fstab: new role for /run, /tmp, /proc mounts - add seatd as a 'seat_manager' option - cron: use find command to restraint deleted files in /var/tmp
2022-02-11 18:39:35 +01:00
Getting started
2022-01-14 19:46:59 +01:00
username: follie
Big chunk of changes - essential: - make polkit optional - move /etc/hosts file to unbound role - libvirt: - make libvirt daemons configurable - delete the firewall patch. Hardcode the rules by default (for now) so that the playbook is compatible with `ansible-core` - user: add pam_limits file (moved from dotfiles repository) - sysctl: role deleted. The task was moved to essential role - fstab: new role for /run, /tmp, /proc mounts - add seatd as a 'seat_manager' option - cron: use find command to restraint deleted files in /var/tmp
2022-02-11 18:39:35 +01:00
repository: https://mirror.math.princeton.edu/pub/alpinelinux
# seatd or elogind
seat_manager: seatd
# Have no effect when seat_manager == 'elogind'
# See use_polkit variable below
polkit: False
essential: make console font configurable
2022-02-17 17:33:22 +01:00
# Should be a file name in /usr/share/consolefonts/
console_font: ter-h22b.psf.gz
unbound: make upstream dns servers configurable
2022-01-28 17:43:31 +01:00
unbound_upstream_nameservers:
- 9.9.9.9@853#dns.quad9.net
- 149.112.112.112@853#dns.quad9.net
- 2620:fe::fe@853#dns.quad9.net
- 2620:fe::9@853#dns.quad9.net
Getting started
2022-01-14 19:46:59 +01:00
Big chunk of changes - essential: - make polkit optional - move /etc/hosts file to unbound role - libvirt: - make libvirt daemons configurable - delete the firewall patch. Hardcode the rules by default (for now) so that the playbook is compatible with `ansible-core` - user: add pam_limits file (moved from dotfiles repository) - sysctl: role deleted. The task was moved to essential role - fstab: new role for /run, /tmp, /proc mounts - add seatd as a 'seat_manager' option - cron: use find command to restraint deleted files in /var/tmp
2022-02-11 18:39:35 +01:00
# 'virtlockd' and 'virtlogd' will always be started. Don't list them here
libvirt_daemons:
- virtinterfaced
- virtnetworkd
- virtnodedevd
- virtqemud
- virtstoraged
roles: add 'container' role with podman/nerdctl option Also enable cgroup v2 explicitly for openrc
2022-03-28 20:15:28 +02:00
# 'podman' or 'nerdctl'
rootless_container_cli: podman
Fix some regressions + tasks revision DETAILS: - consolefont: moved to essential role - unbound: copy the config only after everything is set up correctly (or else the validation will complain trusted-key.key and the root hints are not in the chroot) - essential: start dbus service before handling seat management (elogind and seatd services depend on dbus) - use full-path for commands (avoid potential polluted PATH attack) - apk: use '>-' for the package list. See NOTES NOTES: - '|' (literal) interprets new lines with a line break - '>' (folded) produces a single line with a '\n' at the end - '>-' (folded_strip) creates a single line without a line break in the end - '>' (folded scalars) joins all the lines with a space (doesn't preserve numeric, boolean and other non-string types) Check https://adminswerk.de/multi-line-string-yaml-ansible-II/ for some problems on using multiple lines variables
2022-02-14 06:55:43 +01:00
# Secrets encrypted with ansible-vault ────────────────────────────────────────
Big chunk of changes - essential: - make polkit optional - move /etc/hosts file to unbound role - libvirt: - make libvirt daemons configurable - delete the firewall patch. Hardcode the rules by default (for now) so that the playbook is compatible with `ansible-core` - user: add pam_limits file (moved from dotfiles repository) - sysctl: role deleted. The task was moved to essential role - fstab: new role for /run, /tmp, /proc mounts - add seatd as a 'seat_manager' option - cron: use find command to restraint deleted files in /var/tmp
2022-02-11 18:39:35 +01:00
password: '{{ vault_password }}'
# Do NOT change these variables ───────────────────────────────────────────────
# elogind needs polkit to function
use_polkit: '{{ (seat_manager == "elogind") | ternary("True", polkit) }}'
Reference in a new issue Copy permalink