From a23e08ce20887efb4e158a02ffee1f775a0db89f Mon Sep 17 00:00:00 2001
From: Quentin <quentin@deuxfleurs.fr>
Date: Sat, 12 Sep 2020 20:17:07 +0200
Subject: Refactor 2

---
 os/config/roles/common/tasks/main.yml | 51 +++++++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 os/config/roles/common/tasks/main.yml

(limited to 'os/config/roles/common')

diff --git a/os/config/roles/common/tasks/main.yml b/os/config/roles/common/tasks/main.yml
new file mode 100644
index 0000000..b4d00bb
--- /dev/null
+++ b/os/config/roles/common/tasks/main.yml
@@ -0,0 +1,51 @@
+- name: "Check that host runs Debian buster/sid on armv7l or x86_64"
+  assert:
+    that:
+      - "ansible_architecture == 'aarch64' or ansible_architecture == 'armv7l' or ansible_architecture == 'x86_64'"
+      - "ansible_os_family == 'Debian'"
+
+- name: "Upgrade system"
+  apt:
+    upgrade: dist # Should we do a full uprade instead of a dist one?
+    update_cache: yes
+    cache_valid_time: 3600
+    autoclean: yes
+    autoremove: yes
+
+- name: "Install base tools"
+  apt:
+    name:
+      - vim
+      - htop
+      - screen
+      - iptables
+      - iptables-persistent
+      - nftables
+      - iproute2
+      - curl
+      - iputils-ping
+      - dnsutils
+      - bmon
+      - iftop
+      - iotop
+      - docker.io
+      - unzip
+      - tar
+      - tcpdump
+      - less
+      - parted
+      - btrfs-tools
+      - libnss-resolve
+      - net-tools
+      - strace
+      - sudo
+    state: present
+
+- name: "Passwordless sudo"
+  lineinfile:
+    path: /etc/sudoers
+    state: present
+    regexp: '^%sudo'
+    line: '%sudo ALL=(ALL) NOPASSWD: ALL'
+    validate: 'visudo -cf %s'
+
-- 
cgit v1.2.3