Ansible Debian/Devuan bootstrap
This role bootstraps Debian/Devuan server:
- Configure APT (sources.list)
- Install minimal packages (vim, htop...)
- Install Intel/AMD microcode if needed
- Install and configure NTP daemon (OpenNTPd or NTP)
- Add groups, users with SSH key, sudoers
- Deploy bashrc, vimrc for root
- Update few alternatives
- Configure system: hostname, timezone and locale
- Purge, delete and avoid systemd if wanted
- Sysctl tuning
Supported Version
OS | Working | Stable (active support) |
---|---|---|
Debian Wheezy (7) | Yes | Yes |
Debian Jessie (8) | Yes | Yes |
Debian Stretch (9) | Yes | Yes |
Devuan Jessie (1) | Yes | No |
Requirements
None.
Role Variables
APT configuration
Theses variables define hostname to configure APT (normal repo and backports):
dbs_apt_default_host
: repository host. It can replace the last one (installed with this role) with a new onedbs_apt_use_src
: install "deb-src" repositories (default: false)dbs_apt_components
: components uses in sources.list (default: "main contrib non-free")
Role setup
dbs_set_hostname
: if true, change hostnamedbs_clean_hosts
: if true, manages/etc/hosts
filedbs_set_locale
: if true, configure localesdbs_set_timezone
: if true, set timezonedbs_set_ntp
: if true, install and configure OpenNTPddbs_set_apt
: if true, configure APT repository
System configuration
dbs_hostname
: system hostnamedbs_default_locale
: default system localedbs_locales
: list of installed localesdbs_timezone
: system timezone. If you need a "standard" timezone like UTC, you must use prefix "Etc/" (ex: "Etc/UTC")dbs_sysctl_config
: hash of kernel parameters, see: default/main.ymldbs_use_systemd
: delete systemd if set to false (persistent)dbs_use_dotfiles
: overwrite root dotfiles (bashrc, screenrc, vimrc)dbs_uninstall_packages
: packages list to uninstall
Alternatives
dbs_alternative_editor
dbs_alternative_awk
NTPd
dbs_ntp_hosts
: hostnames NTP server listdbs_ntp_pkg
: package used to provide NTP: "openntpd" or "ntp"
Group
dbs_groups
: list of group
Each row have few keys:
name
: (M) username on systemsystem
: (O) yes/no (default: no)state
: (O) present/absent (default: present)
(M) Mandatory (O) Optionnal
User
dbs_users
: list of user
Each row have few keys:
name
: (M) username on systempassword
: (O) passwordshell
: (O) default is /bin/bashcomment
: (O) default is an empty stringsudo
: (O) boolean (true = can sudo)group
: (O) main group (default isname
without password)groups
: (O) comma separated list of groupscreatehome
: (O) yes/nosystem
: (O) yes/no (default: no)ssh_keys
: (O) ssh public keys liststate
: (O) present/absent (default: present)
(M) Mandatory (O) Optionnal
Readonly vars
dbs_packages
: list of packages to installdbs_microcode_apt_distribution
: location of package to install microcodedbs_distro_packages
: list specific package to install (related to OS version)dbs_is_docker
: boolean. Is true if current is a docker container
Dependencies
None.
Example Playbook
- hosts: servers
roles:
- { role: HanXHX.debian_bootstrap }
About Docker
Due to Docker limitations, theses features are disabled:
- Removing systemd
- Setting hostname
- Configure sysctl
License
GPLv2
Donation
If this code helped you, or if you’ve used them for your projects, feel free to buy me some 🍻
- Bitcoin:
1BQwhBeszzWbUTyK4aUyq3SRg7rBSHcEQn
- Ethereum:
63abe6b2648fd892816d87a31e3d9d4365a737b5
- Litecoin:
LeNDw34zQLX84VvhCGADNvHMEgb5QyFXyD
- Monero:
45wbf7VdQAZS5EWUrPhen7Wo4hy7Pa7c7ZBdaWQSRowtd3CZ5vpVw5nTPphTuqVQrnYZC72FXDYyfP31uJmfSQ6qRXFy3bQ
No crypto-currency? :star: the project is also a way of saying thank you! :sunglasses:
Author Information
- Twitter: @hanxhx_