Changeset 15915 for main/waeup-ansible


Ignore:
Timestamp:
8 Jan 2020, 13:01:29 (5 years ago)
Author:
uli
Message:

Rename group [yet-untouched] -> [yet_untouched]

as ansible does not like dashes in groupnames.

Location:
main/waeup-ansible
Files:
6 edited

Legend:

Unmodified
Added
Removed

  • main/waeup-ansible/README-vhosts.rst

    r15262 r15915  
    7979===========================
    8080
    81 In ``hosts`` add the new box in  the ``[yet-untouched]`` section::
     81In ``hosts`` add the new box in  the ``[yet_untouched]`` section::
    8282
    83   [yet-untouched]
     83  [yet_untouched]
    8484  localhost:3333 ansible_user=ubuntu
    8585
    … …  
    8989
    9090This should secure the new box. From now on, we can connect via the regular
    91 ways. You can quit the open shell now and remove the ``[yet-untouched]`` entry
     91ways. You can quit the open shell now and remove the ``[yet_untouched]`` entry
    9292in ``hosts``.
    9393
    … …  
    9595
    9696  # hosts
    97   [yet-untouched]
     97  [yet_untouched]
    9898
    9999  [bootstrapped]

  • main/waeup-ansible/README.rst

    r14693 r15915  
    4646   as `root` on each targeted system.
    4747
    48 3) For each server to handle, make an entry in the ``[yet-untouched]`` section
     483) For each server to handle, make an entry in the ``[yet_untouched]`` section
    4949   of the ``hosts`` file like this::
    5050
    5151     # hosts
    52      [yet-untouched]
     52     [yet_untouched]
    5353     h23.waeup.org ansible_user=root ansible_ssh_pass=so-secret ansible_sudo_pass="{{ ansible_ssh_pass }}"
    5454     h24.waeup.org ansible_user=root ansible_ssh_pass=123456789 ansible_sudo_pass="{{ ansible_ssh_pass }}"
    … …  
    104104   to actually perform the changes.
    105105
    106 6) In `hosts` move the host we handle from ``[yet-untouched]`` over to
     1066) In `hosts` move the host we handle from ``[yet_untouched]`` over to
    107107   ``[bootstapped]``.
    108108
    … …  
    252252file, normally ``hosts-virtual``, with a line like this:
    253253
    254   [yet-untouched]
     254  [yet_untouched]
    255255  vh5.sample.org ansible_host=192.168.36.10 ansible_user=root
    256256
    257 in the "yet-untouched" section.
     257in the "yet_untouched" section.
    258258
    259259Afterwards try:

  • main/waeup-ansible/bootstrap.yml

    r15389 r15915  
    99# it! Do not run this playbook without having read the README.
    1010#
    11 - hosts: yet-untouched
     11- hosts: yet_untouched
    1212  become: yes
    1313  vars:
    1414    # Enable root access via SSH? Set to false not before user
    1515    # accounts are active.
    16     permit_ssh_root: true
     16    permit_ssh_root: false
    1717    # Allow admin users below to become root w/o entering password?
    1818    permit_become_root_no_password: true
    … …  
    2020    #      $ diceware -d '-' -n 6 --no-caps | tee mypw | mkpasswd -s --method=sha-512 >> mypw
    2121    admin_users:
    22       ulif:
    23         hashed_pw: "$6$iuoXy2wO3elWM6d2$NR/ayKF58q0Bm0BdsR.g.Nt5xYzD0s0t17ZjrYaRpY7nkRekjgHTnqw849pK9FdynmNZAioW6oQBQx3BB5kcd0"
     22        uli:
     23            hashed_pw: "$6$iuoXy2wO3elWM6d2$NR/ayKF58q0Bm0BdsR.g.Nt5xYzD0s0t17ZjrYaRpY7nkRekjgHTnqw849pK9FdynmNZAioW6oQBQx3BB5kcd0"
    2424
    2525  roles:

  • main/waeup-ansible/hosts

    r15914 r15915  
    1 [yet-untouched]
     1[yet_untouched]
    22
    33[vhosts]

  • main/waeup-ansible/hosts-virtual

    r13838 r15915  
    88# vh5.sample.org ansible_host=192.168.36.10 ansible_ssh_private_key_file=.vagrant/machines/vh5/virtualbox/private_key ansible_user=vagrant
    99
    10 [yet-untouched]
     10[yet_untouched]
    1111# servers that are vagrant-wise provisioned, looking like fresh from hetzner
    1212#

  • main/waeup-ansible/vhost-bootstrap.yml

    r14923 r15915  
    99# it! Do not run this playbook without having read the README.
    1010#
    11 - hosts: yet-untouched
     11- hosts: yet_untouched
    1212  become: yes
    1313  vars:
Note: See TracChangeset for help on using the changeset viewer.