Commit 4c2e9e40 authored by nono's avatar nono 💻
Browse files

Commit originel

parents
---
language: python
python: "2.7"
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
install:
# Install ansible
- pip install ansible
# Check ansible version
- ansible --version
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/
\ No newline at end of file
---
# Based on ansible-lint config
extends: default
rules:
braces:
max-spaces-inside: 1
level: error
brackets:
max-spaces-inside: 1
level: error
colons:
max-spaces-after: -1
level: error
commas:
max-spaces-after: -1
level: error
comments: disable
comments-indentation: disable
document-start: disable
empty-lines:
max: 3
level: error
hyphens:
level: error
indentation: disable
key-duplicates: enable
line-length: disable
new-line-at-end-of-file: disable
new-lines:
type: unix
trailing-spaces: disable
truthy: disable
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).
---
# defaults file for shell-lqdn
\ No newline at end of file
set number
set syntax=on
syntax enable
# Bienvenue !
🥛🐈 <- Un ptit chat avec un verre de lait.
---
# handlers file for shell-lqdn
\ No newline at end of file
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.9
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.
\ No newline at end of file
*******
Delegated driver installation guide
*******
Requirements
============
This driver is delegated to the developer. Up to the developer to implement
requirements.
Install
=======
This driver is delegated to the developer. Up to the developer to implement
requirements.
---
- name: Converge
hosts: all
tasks:
- name: "Include shell-lqdn"
include_role:
name: "shell-lqdn"
---
- name: Create
hosts: localhost
connection: local
gather_facts: false
no_log: "{{ molecule_no_log }}"
tasks:
# TODO: Developer must implement and populate 'server' variable
- when: server.changed | default(false) | bool
block:
- name: Populate instance config dict
set_fact:
instance_conf_dict: {
'instance': "{{ }}",
'address': "{{ }}",
'user': "{{ }}",
'port': "{{ }}",
'identity_file': "{{ }}", }
with_items: "{{ server.results }}"
register: instance_config_dict
- name: Convert instance config dict to a list
set_fact:
instance_conf: "{{ instance_config_dict.results | map(attribute='ansible_facts.instance_conf_dict') | list }}"
- name: Dump instance config
copy:
content: |
# Molecule managed
{{ instance_conf | to_json | from_json | to_yaml }}
dest: "{{ molecule_instance_config }}"
---
- name: Destroy
hosts: localhost
connection: local
gather_facts: false
no_log: "{{ molecule_no_log }}"
tasks:
# Developer must implement.
# Mandatory configuration for Molecule to function.
- name: Populate instance config
set_fact:
instance_conf: {}
- name: Dump instance config
copy:
content: |
# Molecule managed
{{ instance_conf | to_json | from_json | to_yaml }}
dest: "{{ molecule_instance_config }}"
when: server.changed | default(false) | bool
---
dependency:
name: galaxy
driver:
name: delegated
platforms:
- name: instance
provisioner:
name: ansible
verifier:
name: ansible
---
# This is an example playbook to execute Ansible tests.
- name: Verify
hosts: all
gather_facts: false
tasks:
- name: Example assertion
assert:
that: true
---
# tasks file for shell-lqdn
- include: packages.yml
- include: users.yml
# Install our shell role packages for all machines
---
- name: Ajout de la contrib debian
apt_repository:
repo: 'deb http://ftp.de.debian.org/debian stable main contrib'
state: present
update_cache: yes
# Installation des packets utilisé par le shell
- name: Packet shell par défault
apt:
name: "{{ packages }}"
state: present
update_cache: yes
vars:
packages:
# shells
- mosh
- zsh
- fish
# editors
- vim
- emacs
- nano
# utils
- htop
- lynx
- tmux
# random
- neofetch
- cowsay
- sl
---
# Les différents groupes présents sur la machine
# Classement de haut en bas : ceux ayant le moin de privilège,
# puis ceux en ayant de plus en plus, jusqu'a octopuce et sysadmin.
# Ensemble des sympathisans
- group:
name: sympathisans
state: present
# Ensemble des membres lqdn
- group:
name: lqdn
state: present
# Membres ayant un accès SFTP au serveur
- group:
name: sftponly
state: present
# Le groupe des services
- group:
name: services
state: present
# Ensemble des sysadmin
- group:
name: sysadmin
state: present
# Les membres de octopuce
- group:
name: octopuce
state: present
# Groupe des utilisateurices privilégiés
# en toute circonstance.
- group:
name: sudo
state: present
#Les comptes des services
- include: users/service.yml
# Les comptes admins
- include: users/admin.yml
#Normal Users
- include: users/user.yml
---
# Fichier de configuration pour un·e administrateurice par défault
# N'oubliez pas de rajouter la clé **publique** dans le champ "key".
# Complétez là où se trouve les points "..."
- name: Mise en place de l'admin ...
user:
name: ...
groups:
- lqdn
- sysadmin
- sudo
state: present
skeleton: /etc/skel
shell: /bin/bash
system: no
createhome: yes
home: /home/{{ name }}
- authorized_key:
user: {{ name }}
state: present
key: "..."
---
# Complétez là où se trouve les points "..."
- name: Ajout du groupe pour le service ...
group:
name: ... # Le nom du groupe du service
system: yes
state: present
- name: Ajout de l'utilisateur pour le service
user:
name: ... # Le nom du service
system: yes
shell: /bin/false
groups: services ... # Le nom du groupe définit plus haut
create_home: yes
home: /var/services/... # Le nom du service
state: present
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment