1 files changed, 51 insertions, 0 deletions
diff --git a/os/config/roles/common/tasks/main.yml b/os/config/roles/common/tasks/main.yml
new file mode 100644
index 0000000..b4d00bb
--- /dev/null
+++ b/os/config/roles/common/tasks/main.yml
@@ -0,0 +1,51 @@
+- name: "Check that host runs Debian buster/sid on armv7l or x86_64"
+  assert:
+    that:
+      - "ansible_architecture == 'aarch64' or ansible_architecture == 'armv7l' or ansible_architecture == 'x86_64'"
+      - "ansible_os_family == 'Debian'"
+
+- name: "Upgrade system"
+  apt:
+    upgrade: dist # Should we do a full uprade instead of a dist one?
+    update_cache: yes
+    cache_valid_time: 3600
+    autoclean: yes
+    autoremove: yes
+
+- name: "Install base tools"
+  apt:
+    name:
+      - vim
+      - htop
+      - screen
+      - iptables
+      - iptables-persistent
+      - nftables
+      - iproute2
+      - curl
+      - iputils-ping
+      - dnsutils
+      - bmon
+      - iftop
+      - iotop
+      - docker.io
+      - unzip
+      - tar
+      - tcpdump
+      - less
+      - parted
+      - btrfs-tools
+      - libnss-resolve
+      - net-tools
+      - strace
+      - sudo
+    state: present
+
+- name: "Passwordless sudo"
+  lineinfile:
+    path: /etc/sudoers
+    state: present
+    regexp: '^%sudo'
+    line: '%sudo ALL=(ALL) NOPASSWD: ALL'
+    validate: 'visudo -cf %s'
+