Dont use weareinteractive.apt
This commit is contained in:
Tim Dittler
parent
26a6c4a5fc
commit
db12ae9703
38
playbook.yml
38
playbook.yml
@ -34,7 +34,7 @@
|
|||||||
- x11vnc
|
- x11vnc
|
||||||
- xz-utils
|
- xz-utils
|
||||||
apt_repositories:
|
apt_repositories:
|
||||||
- repo: ppa:nextcloud-devs/client
|
- ppa:nextcloud-devs/client
|
||||||
packages_absent:
|
packages_absent:
|
||||||
- apport
|
- apport
|
||||||
- gnome-initial-setup
|
- gnome-initial-setup
|
||||||
@ -85,8 +85,6 @@
|
|||||||
- type: 'opentype'
|
- type: 'opentype'
|
||||||
src: FrutigerLTStd-UltraBlack.otf
|
src: FrutigerLTStd-UltraBlack.otf
|
||||||
dest: frutiger/FrutigerLTStd-UltraBlack.otf
|
dest: frutiger/FrutigerLTStd-UltraBlack.otf
|
||||||
apt_install_recommends: true
|
|
||||||
apt_remove_recommends: true
|
|
||||||
admin_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5IhVprsvVOcFPbZzD9xR0nCjZ/9qVG6RhLJ7QBSts81nRvLwnmvcMBHSf5Rfaigey7Ff5dLHfJnxRE0KDATn6n2yd/5mXpn2GAA8hDVfhdsmsb5U7bROjZNr8MmIUrP7c3msUGx1FtvzhwxtyvIWOFQpWx+W5biBa6hFjIxT1pkUJqe6fclp7xbGYKZiqZRBS4qKG5CpKnisuOYDsqYPND+OkU+PShoxGVzp1JywIVze7qeKv6GyYbRA9SP9Np+5Mit6B21Io4zOI81c2Rz6sPX7mwEAQEs7iCm2hzG8qJws45Lb4ERqDkVEVhGNUyHjHgGebS1sZx1mLExdurXlPm1l/EamkncDFDCutHXtLP7lsFFiym7fKUjSEgiiLmyu5Xm+mwZvesKa1FYNaeiFWfYZpCJrNzIk+ffs+mgg3kmL4Sd4Ooy7jXPX+WJe5Xyh1KLU/+Wj2TVrhN+LbmupYAti/Wgd3DA1v601svmG82aLmyJRtKC0rGMePH3kDbtqU72kYpzI8mXERe1TIQ00Z77kQBR/7BF/9y5/0YmYDcXt1wNCoSie+mzz3xYcEdLAc7T+DhYpd4M6VgWnuz/exzRzhQwoSdEKkEED8CpEoBrEWEiMdrlElGmlkVomLU7P9i9j1rshX/pAq0asnqeSoPdC3vNbU3keiJQnhIHECvw== christoph"
|
admin_key: "ssh-rsa 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 christoph"
|
||||||
physicals_packages_dropbear:
|
physicals_packages_dropbear:
|
||||||
- dropbear-initramfs
|
- dropbear-initramfs
|
||||||
@ -121,24 +119,36 @@
|
|||||||
regexp: '^ENABLED='
|
regexp: '^ENABLED='
|
||||||
line: 'ENABLED=0'
|
line: 'ENABLED=0'
|
||||||
|
|
||||||
- name: Delete unnecessary packages
|
|
||||||
apt:
|
|
||||||
pkg: "{{ packages_absent }}"
|
|
||||||
state: absent
|
|
||||||
tags: apt
|
|
||||||
|
|
||||||
roles:
|
roles:
|
||||||
- role: weareinteractive.apt
|
|
||||||
tags:
|
|
||||||
- apt
|
|
||||||
- lightdm
|
|
||||||
- nextcloud
|
|
||||||
- role: ontic.fonts
|
- role: ontic.fonts
|
||||||
tags: fonts
|
tags: fonts
|
||||||
- role: freedomofpress.signal-desktop
|
- role: freedomofpress.signal-desktop
|
||||||
tags: signal
|
tags: signal
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
|
|
||||||
|
- name: Install repositories
|
||||||
|
apt_repository:
|
||||||
|
repo: "{{ item }}"
|
||||||
|
with_items: "{{ apt_repositories }}"
|
||||||
|
tags:
|
||||||
|
- apt
|
||||||
|
- nextcloud
|
||||||
|
|
||||||
|
- name: Install packages
|
||||||
|
apt:
|
||||||
|
pkg: "{{ apt_packages }}"
|
||||||
|
tags:
|
||||||
|
- apt
|
||||||
|
- lightdm
|
||||||
|
- nextcloud
|
||||||
|
|
||||||
|
- name: Delete unnecessary packages
|
||||||
|
apt:
|
||||||
|
pkg: "{{ packages_absent }}"
|
||||||
|
state: absent
|
||||||
|
tags: apt
|
||||||
|
|
||||||
- name: copy debs
|
- name: copy debs
|
||||||
copy:
|
copy:
|
||||||
src: "{{ item }}"
|
src: "{{ item }}"
|
||||||
|
|||||||
@ -1,2 +0,0 @@
|
|||||||
exclude_paths:
|
|
||||||
- ./meta/readme.yml
|
|
||||||
@ -1,4 +0,0 @@
|
|||||||
[clog]
|
|
||||||
changelog = "CHANGELOG.md"
|
|
||||||
repository = "https://github.com/weareinteractive/ansible-apt"
|
|
||||||
from-latest-tag = true
|
|
||||||
@ -1,19 +0,0 @@
|
|||||||
# EditorConfig helps developers define and maintain consistent
|
|
||||||
# coding styles between different editors and IDEs
|
|
||||||
# editorconfig.org
|
|
||||||
|
|
||||||
root = true
|
|
||||||
|
|
||||||
[*]
|
|
||||||
# Change these settings to your own preference
|
|
||||||
indent_size = 2
|
|
||||||
indent_style = space
|
|
||||||
|
|
||||||
# We recommend you to keep these unchanged
|
|
||||||
charset = utf-8
|
|
||||||
end_of_line = lf
|
|
||||||
insert_final_newline = true
|
|
||||||
trim_trailing_whitespace = true
|
|
||||||
|
|
||||||
[Makefile]
|
|
||||||
indent_style = tab
|
|
||||||
8
roles/weareinteractive.apt/.gitignore
vendored
8
roles/weareinteractive.apt/.gitignore
vendored
@ -1,8 +0,0 @@
|
|||||||
*.log
|
|
||||||
*.retry
|
|
||||||
.DS_Store
|
|
||||||
.vagrant
|
|
||||||
.vscode/*
|
|
||||||
!.vscode/settings.json
|
|
||||||
!.vscode/extensions.json
|
|
||||||
.idea
|
|
||||||
@ -1,60 +0,0 @@
|
|||||||
---
|
|
||||||
sudo: required
|
|
||||||
language: python
|
|
||||||
services:
|
|
||||||
- docker
|
|
||||||
env:
|
|
||||||
global:
|
|
||||||
- role: weareinteractive.apt
|
|
||||||
matrix:
|
|
||||||
- distribution: Ubuntu
|
|
||||||
distribution_version: "18.04"
|
|
||||||
init: /lib/systemd/systemd
|
|
||||||
run_opts: "--privileged --volume=/sys/fs/cgroup:/sys/fs/cgroup:ro"
|
|
||||||
- distribution: Ubuntu
|
|
||||||
distribution_version: "16.04"
|
|
||||||
init: /lib/systemd/systemd
|
|
||||||
run_opts: "--privileged --volume=/sys/fs/cgroup:/sys/fs/cgroup:ro"
|
|
||||||
- distribution: Ubuntu
|
|
||||||
distribution_version: "14.04"
|
|
||||||
init: /sbin/init
|
|
||||||
run_opts: ""
|
|
||||||
- distribution: Debian
|
|
||||||
distribution_version: "9"
|
|
||||||
init: /lib/systemd/systemd
|
|
||||||
run_opts: "--privileged --volume=/sys/fs/cgroup:/sys/fs/cgroup:ro"
|
|
||||||
- distribution: Debian
|
|
||||||
distribution_version: "8"
|
|
||||||
init: /lib/systemd/systemd
|
|
||||||
run_opts: "--privileged --volume=/sys/fs/cgroup:/sys/fs/cgroup:ro"
|
|
||||||
|
|
||||||
before_install:
|
|
||||||
- sudo apt-get update
|
|
||||||
- sudo apt-get -y -o Dpkg::Options::="--force-confnew" install docker-ce
|
|
||||||
- docker pull ansiblecheck/ansiblecheck:"${distribution,,}"-"${distribution_version}"
|
|
||||||
|
|
||||||
script:
|
|
||||||
- container_id=$(mktemp)
|
|
||||||
# Start The Built Container In The Background
|
|
||||||
- docker run -d -v "${PWD}":/etc/ansible/roles/${role}:ro ${run_opts} ansiblecheck/ansiblecheck:"${distribution,,}"-"${distribution_version}" "${init}" > "${container_id}"
|
|
||||||
|
|
||||||
# Print ansible version
|
|
||||||
- docker exec -t "$(cat ${container_id})" env TERM=xterm ansible --version
|
|
||||||
|
|
||||||
# Ansible syntax check.
|
|
||||||
- 'docker exec -t "$(cat ${container_id})" env TERM=xterm ansible-playbook /etc/ansible/roles/${role}/tests/main.yml --syntax-check'
|
|
||||||
|
|
||||||
# Test role.
|
|
||||||
- 'docker exec "$(cat ${container_id})" env ANSIBLE_FORCE_COLOR=1 ansible-playbook /etc/ansible/roles/${role}/tests/main.yml'
|
|
||||||
|
|
||||||
# Test Idempotence
|
|
||||||
- idempotence=$(mktemp)
|
|
||||||
- docker exec "$(cat ${container_id})" ansible-playbook /etc/ansible/roles/${role}/tests/main.yml | tee -a ${idempotence}
|
|
||||||
- >
|
|
||||||
tail ${idempotence}
|
|
||||||
| grep -q 'failed=0'
|
|
||||||
&& (echo 'Idempotence test: pass' && exit 0)
|
|
||||||
|| (echo 'Idempotence test: fail' && exit 1)
|
|
||||||
|
|
||||||
notifications:
|
|
||||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
{
|
|
||||||
"recommendations": [
|
|
||||||
"vscoss.vscode-ansible"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
{
|
|
||||||
"files.associations": {
|
|
||||||
"*.yml": "ansible"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -1,230 +0,0 @@
|
|||||||
<a name="2.9.1"></a>
|
|
||||||
### 2.9.1 (2019-12-08)
|
|
||||||
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* fix lint error ([65f889bd](https://github.com/weareinteractive/ansible-apt/commit/65f889bd07e3a7fd33e7df42023e7543b8af7c4a))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.9.0"></a>
|
|
||||||
## 2.9.0 (2019-12-08)
|
|
||||||
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* fix logic with apt_remove_recommends variable ([eaea78e1](https://github.com/weareinteractive/ansible-apt/commit/eaea78e1fb43f86b2a27db23ba121e805de8d835))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.8.0"></a>
|
|
||||||
## 2.8.0 (2019-10-18)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* remove depricated apt_remount_filesystem ([7ca12fb4](https://github.com/weareinteractive/ansible-apt/commit/7ca12fb483e0cd8272589e5b1393e4c74611fb2a))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.7.0"></a>
|
|
||||||
## 2.7.0 (2019-09-16)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* extend unattended update config Merge branch 'pbessonies-feature/update_unattended_template' ([7b2c0e4f](https://github.com/weareinteractive/ansible-apt/commit/7b2c0e4fadf07feb8ef3a97425a282b38315a44b))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.6.1"></a>
|
|
||||||
### 2.6.1 (2019-09-16)
|
|
||||||
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* ensure unattended-upgrades package installation ([03740eea](https://github.com/weareinteractive/ansible-apt/commit/03740eea70fdf744256e708798ea048be22a2a9e))
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* add bool check ([1f9f71d3](https://github.com/weareinteractive/ansible-apt/commit/1f9f71d32df59563ebb2fb40b82ddc2e916e9de8))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.5.1"></a>
|
|
||||||
### 2.5.1 (2019-06-17)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* update syntax to ansible 2.8 ([fa5f8740](https://github.com/weareinteractive/ansible-apt/commit/fa5f87400d1d1db233bffcf8ced0b82c6460fd4d))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.5.0"></a>
|
|
||||||
## 2.5.0 (2018-12-12)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* add apt pinning ([349d5b09](https://github.com/weareinteractive/ansible-apt/commit/349d5b09a9b90513da4b66829eca1172da692e96))
|
|
||||||
* added apt pinning ([d66994de](https://github.com/weareinteractive/ansible-apt/commit/d66994de87a291cb5a2ebfe2ed4867e290ad68fb))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.4.2"></a>
|
|
||||||
### 2.4.2 (2018-11-01)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* add options to apt_keys and apt_repositories ([f2ce4e0e](https://github.com/weareinteractive/ansible-apt/commit/f2ce4e0e6d41f539610adb34e0ac1093e482677c))
|
|
||||||
* added options ([bb80fe88](https://github.com/weareinteractive/ansible-apt/commit/bb80fe8804ee2bac18065b89a8abcadc14f0ed9b))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.4.1"></a>
|
|
||||||
### 2.4.1 (2018-11-01)
|
|
||||||
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* fix deprication warning for ansible 2.7 and apt package loops ([556b6445](https://github.com/weareinteractive/ansible-apt/commit/556b6445e748004846c6e16248d9d92b69afd0c3))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.5.0"></a>
|
|
||||||
## 2.5.0 (2018-10-08)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.3.1"></a>
|
|
||||||
### 2.3.1 (2017-12-18)
|
|
||||||
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* rename missing include to include_tasks ([da051d29](https://github.com/weareinteractive/ansible-apt/commit/da051d29e279e48061e7e6b41f504a00f1508b16))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.3.0"></a>
|
|
||||||
## 2.3.0 (2017-12-18)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* upgrade tasks for ansible 2.4 ([6e5a1ca4](https://github.com/weareinteractive/ansible-apt/commit/6e5a1ca49a855e7c183446cb4a2d817d58bab59f))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.2.0"></a>
|
|
||||||
## 2.2.0 (2017-08-24)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* add option to alter solution cost ([cfaf694c](https://github.com/weareinteractive/ansible-apt/commit/cfaf694c6ea921e6d6209db0e851c84dd35c8fe2))
|
|
||||||
* allow multiple file systems to be remounted ([5cb5a96c](https://github.com/weareinteractive/ansible-apt/commit/5cb5a96cfbdce66f7b5f4d2f7716e1e30279ac98))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.1.0"></a>
|
|
||||||
## 2.1.0 (2017-01-27)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* use builtin autoremove option ([87a34935](https://github.com/weareinteractive/ansible-apt/commit/87a34935874f78d4752f2557c9094496eb51a391))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.0.3"></a>
|
|
||||||
### 2.0.3 (2016-08-18)
|
|
||||||
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* fix proxy config conditions ([27787e80](https://github.com/weareinteractive/ansible-apt/commit/27787e80dc805a828af35b7206aae835e9d8b0aa))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.0.2"></a>
|
|
||||||
### 2.0.2 (2016-04-25)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* always get latest unattended-upgrades instead of just present ([a927d6af](https://github.com/weareinteractive/ansible-apt/commit/a927d6afbc0b35481c5eea3623cd5eebf7a3d415))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.0.1"></a>
|
|
||||||
### 2.0.1 (2016-03-22)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* escape bare variables ([96525b39](https://github.com/weareinteractive/ansible-apt/commit/96525b393671352973d81abfcb942272f70dc6bd))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="2.0.0"></a>
|
|
||||||
## 2.0.0 (2016-03-15)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* update to ansible 2.0 ([052bc675](https://github.com/weareinteractive/ansible-apt/commit/052bc675f01ded71c7bd9bd7e8154ecb2f600c4a))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="1.8.0"></a>
|
|
||||||
## 1.8.0 (2016-01-11)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* add support for proxy servers ([91ae92f5](https://github.com/weareinteractive/ansible-apt/commit/91ae92f56e7f3fa2f9851adc03235d3985dd7b7e))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="1.7.1"></a>
|
|
||||||
### 1.7.1 (2015-12-03)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* adds variables to configure apt ([3ec652be](https://github.com/weareinteractive/ansible-apt/commit/3ec652be9513b0d8b9b1bb7f317aa6a4c30256ff))
|
|
||||||
* only adds 50unattended-upgrades config if enabled ([14742e5e](https://github.com/weareinteractive/ansible-apt/commit/14742e5ee87bf135edf8756ce9cd197ca65b346d))
|
|
||||||
* updates travis tests ([2d1873da](https://github.com/weareinteractive/ansible-apt/commit/2d1873daec0e1b76e4bcafbb898ac63c4b12e91f))
|
|
||||||
* using ansible-role to generate README ([3abe7246](https://github.com/weareinteractive/ansible-apt/commit/3abe72463af5d4d101570e233d497a96e910e4ea))
|
|
||||||
* adds CHANGELOG ([5f4c6673](https://github.com/weareinteractive/ansible-apt/commit/5f4c66734445e239fb96faec557a6c5e708cd5b3))
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* fixes quotation marks on 'APT::Periodic::Enable' value ([bf19c900](https://github.com/weareinteractive/ansible-apt/commit/bf19c90034badb1173ad9b204d815d17cd33ba9d))
|
|
||||||
* fixes the usage of unattended upgrades ([04f25734](https://github.com/weareinteractive/ansible-apt/commit/04f25734fa29aba48ec3f9461c9488785bfe8ae3))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<a name="1.7.0"></a>
|
|
||||||
## 1.7.0 (2015-11-30)
|
|
||||||
|
|
||||||
|
|
||||||
#### Features
|
|
||||||
|
|
||||||
* adds variables to configure apt ([3ec652be](https://github.com/weareinteractive/ansible-apt/commit/3ec652be9513b0d8b9b1bb7f317aa6a4c30256ff))
|
|
||||||
* only adds 50unattended-upgrades config if enabled ([14742e5e](https://github.com/weareinteractive/ansible-apt/commit/14742e5ee87bf135edf8756ce9cd197ca65b346d))
|
|
||||||
* updates travis tests ([2d1873da](https://github.com/weareinteractive/ansible-apt/commit/2d1873daec0e1b76e4bcafbb898ac63c4b12e91f))
|
|
||||||
* using ansible-role to generate README ([3abe7246](https://github.com/weareinteractive/ansible-apt/commit/3abe72463af5d4d101570e233d497a96e910e4ea))
|
|
||||||
* adds CHANGELOG ([5f4c6673](https://github.com/weareinteractive/ansible-apt/commit/5f4c66734445e239fb96faec557a6c5e708cd5b3))
|
|
||||||
|
|
||||||
#### Bug Fixes
|
|
||||||
|
|
||||||
* fixes the usage of unattended upgrades ([04f25734](https://github.com/weareinteractive/ansible-apt/commit/04f25734fa29aba48ec3f9461c9488785bfe8ae3))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@ -1,22 +0,0 @@
|
|||||||
Copyright (c) We Are Interactive
|
|
||||||
|
|
||||||
Permission is hereby granted, free of charge, to any person
|
|
||||||
obtaining a copy of this software and associated documentation
|
|
||||||
files (the "Software"), to deal in the Software without
|
|
||||||
restriction, including without limitation the rights to use,
|
|
||||||
copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
||||||
copies of the Software, and to permit persons to whom the
|
|
||||||
Software is furnished to do so, subject to the following
|
|
||||||
conditions:
|
|
||||||
|
|
||||||
The above copyright notice and this permission notice shall be
|
|
||||||
included in all copies or substantial portions of the Software.
|
|
||||||
|
|
||||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
|
|
||||||
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
|
|
||||||
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
|
|
||||||
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
||||||
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
|
|
||||||
OTHER DEALINGS IN THE SOFTWARE.
|
|
||||||
@ -1,41 +0,0 @@
|
|||||||
PWD=$(shell pwd)
|
|
||||||
ROLE_NAME=weareinteractive.apt
|
|
||||||
ROLE_PATH=/etc/ansible/roles/$(ROLE_NAME)
|
|
||||||
TEST_VERSION=ansible --version
|
|
||||||
TEST_SYNTAX=ansible-playbook -v -i 'localhost,' -c local $(ROLE_PATH)/tests/main.yml --syntax-check
|
|
||||||
TEST_PLAYBOOK=ansible-playbook -v -i 'localhost,' -c local $(ROLE_PATH)/tests/main.yml
|
|
||||||
TEST_IDEMPOTENT=$(TEST_PLAYBOOK) | grep -q 'changed=0.*failed=0' && (echo 'Idempotence test: pass' && exit 0) || (echo 'Idempotence test: fail' && exit 1)
|
|
||||||
TEST_CMD=$(TEST_VERSION); $(TEST_SYNTAX); $(TEST_DEPS); $(TEST_PLAYBOOK); $(TEST_IDEMPOTENT)
|
|
||||||
|
|
||||||
docs:
|
|
||||||
ansible-role docgen
|
|
||||||
|
|
||||||
lint:
|
|
||||||
ansible-lint .
|
|
||||||
|
|
||||||
ubuntu%: TEST_DEPS=apt-get update && \
|
|
||||||
apt-get install -y python
|
|
||||||
|
|
||||||
ubuntu18.04: dist=ubuntu-18.04
|
|
||||||
ubuntu18.04: .run
|
|
||||||
|
|
||||||
ubuntu16.04: dist=ubuntu-16.04
|
|
||||||
ubuntu16.04: .run
|
|
||||||
|
|
||||||
ubuntu14.04: dist=ubuntu-14.04
|
|
||||||
ubuntu14.04: .run
|
|
||||||
|
|
||||||
debian%: TEST_DEPS=apt-get update && \
|
|
||||||
apt-get install -y python
|
|
||||||
|
|
||||||
debian9: dist=debian-9
|
|
||||||
debian9: .run
|
|
||||||
|
|
||||||
debian8: dist=debian-8
|
|
||||||
debian8: .run
|
|
||||||
|
|
||||||
.run:
|
|
||||||
@echo "RUN:"
|
|
||||||
@echo " docker run -it --rm -v $(PWD):$(ROLE_PATH) ansiblecheck/ansiblecheck:$(dist) /bin/bash"
|
|
||||||
@echo " $(TEST_CMD)"
|
|
||||||
@docker run -it --rm -v $(PWD):$(ROLE_PATH) ansiblecheck/ansiblecheck:$(dist) /bin/bash -c "$(TEST_CMD)"
|
|
||||||
@ -1,268 +0,0 @@
|
|||||||
# Ansible weareinteractive.apt role
|
|
||||||
|
|
||||||
[](https://travis-ci.org/weareinteractive/ansible-apt)
|
|
||||||
[](https://galaxy.ansible.com/weareinteractive/apt)
|
|
||||||
[](https://github.com/weareinteractive/ansible-apt)
|
|
||||||
[](https://github.com/weareinteractive/ansible-apt)
|
|
||||||
|
|
||||||
> `weareinteractive.apt` is an [Ansible](http://www.ansible.com) role which:
|
|
||||||
>
|
|
||||||
> * updates apt
|
|
||||||
> * cleans up apt
|
|
||||||
> * configures apt
|
|
||||||
> * installs packages
|
|
||||||
> * add repositories
|
|
||||||
> * add keys
|
|
||||||
> * apt pinning
|
|
||||||
> * manages unattended upgrades
|
|
||||||
> * optionally alters solution cost
|
|
||||||
> * optionally allows filesystems to be remounted
|
|
||||||
|
|
||||||
**Note:**
|
|
||||||
|
|
||||||
> Since Ansible Galaxy supports [organization](https://www.ansible.com/blog/ansible-galaxy-2-release) now, this role has moved from `franklinkim.apt` to `weareinteractive.apt`!
|
|
||||||
|
|
||||||
## Installation
|
|
||||||
|
|
||||||
Using `ansible-galaxy`:
|
|
||||||
|
|
||||||
```shell
|
|
||||||
$ ansible-galaxy install weareinteractive.apt
|
|
||||||
```
|
|
||||||
|
|
||||||
Using `requirements.yml`:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
- src: weareinteractive.apt
|
|
||||||
```
|
|
||||||
|
|
||||||
Using `git`:
|
|
||||||
|
|
||||||
```shell
|
|
||||||
$ git clone https://github.com/weareinteractive/ansible-apt.git weareinteractive.apt
|
|
||||||
```
|
|
||||||
|
|
||||||
## Dependencies
|
|
||||||
|
|
||||||
* Ansible >= 2.4
|
|
||||||
|
|
||||||
## Variables
|
|
||||||
|
|
||||||
Here is a list of all the default variables for this role, which are also available in `defaults/main.yml`.
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
---
|
|
||||||
# apt_unattended_upgrades_blacklist:
|
|
||||||
# - vim
|
|
||||||
# - libc6
|
|
||||||
# apt_mails:
|
|
||||||
# - root
|
|
||||||
# - foo@dev.null
|
|
||||||
# apt_keys:
|
|
||||||
# - id: 473041FA
|
|
||||||
# file: /tmp/apt.gpg
|
|
||||||
# data: "{{ lookup('file', 'apt.asc') }}"
|
|
||||||
# keyring: /etc/apt/trusted.gpg.d/debian.gpg
|
|
||||||
# keyserver: keyserver.ubuntu.com
|
|
||||||
# url: https://ftp-master.debian.org/keys/archive-key-6.0.asc
|
|
||||||
# validate_certs: yes
|
|
||||||
# state: present
|
|
||||||
# apt_repositories:
|
|
||||||
# - codename: trusty
|
|
||||||
# filename: google-chrome
|
|
||||||
# mode: 0644
|
|
||||||
# repo: 'ppa:nginx/stable'
|
|
||||||
# state: present
|
|
||||||
# update_cache: yes
|
|
||||||
|
|
||||||
|
|
||||||
# sets the amount of time the cache is valid
|
|
||||||
apt_cache_valid_time: 3600
|
|
||||||
# upgrade system: safe | full | dist
|
|
||||||
apt_upgrade: no
|
|
||||||
# packages to install
|
|
||||||
apt_packages: []
|
|
||||||
# remove packages that are no longer needed for dependencies
|
|
||||||
apt_autoremove: yes
|
|
||||||
# remove .deb files for packages no longer on your system
|
|
||||||
apt_autoclean: yes
|
|
||||||
# .deb packages to install.
|
|
||||||
apt_deb_packages: []
|
|
||||||
|
|
||||||
# whether or not suggested packages should be installed.
|
|
||||||
apt_install_suggests: no
|
|
||||||
# do not install Recommended packages by default
|
|
||||||
apt_install_recommends: no
|
|
||||||
# allow 'apt-get autoremove' to remove recommended packages
|
|
||||||
apt_remove_recommends: no
|
|
||||||
# Enable the update/upgrade script
|
|
||||||
apt_periodic: yes
|
|
||||||
# Do “apt-get update” automatically every n-days (0=disable)
|
|
||||||
apt_update_package_lists: 1
|
|
||||||
# Do “apt-get upgrade –download-only” every n-days (0=disable)
|
|
||||||
apt_download_upgradeable_packages: 0
|
|
||||||
# Do “apt-get autoclean” every n-days (0=disable)
|
|
||||||
apt_auto_clean_interval: 0
|
|
||||||
|
|
||||||
# enable unattended-upgrades
|
|
||||||
apt_unattended_upgrades: yes
|
|
||||||
# list of origins patterns to control which packages are upgraded
|
|
||||||
# replaces allowed-origins, kept for compatibility
|
|
||||||
apt_unattended_upgrades_origins: []
|
|
||||||
# List of allowed-origins, default value kept for compatibility
|
|
||||||
# set to null to use origins-pattern
|
|
||||||
apt_unattended_upgrades_allowed:
|
|
||||||
- ${distro_id}:${distro_codename}-security
|
|
||||||
# list of packages to not update (regexp are supported)
|
|
||||||
apt_unattended_upgrades_blacklist: []
|
|
||||||
# Split the upgrade into the smallest possible chunks so that
|
|
||||||
# they can be interrupted with SIGUSR1. This makes the upgrade
|
|
||||||
# a bit slower but it has the benefit that shutdown while a upgrade
|
|
||||||
# is running is possible (with a small delay)
|
|
||||||
apt_unattended_upgrades_minimal_steps: no
|
|
||||||
# Send email to this address for problems or packages upgrades
|
|
||||||
# If empty or unset then no email is sent, make sure that you
|
|
||||||
# have a working mail setup on your system. A package that provides
|
|
||||||
# 'mailx' must be installed. E.g. "user@example.com"
|
|
||||||
apt_mails: []
|
|
||||||
# Set this value to "true" to get emails only on errors. Default
|
|
||||||
# is to always send a mail if Unattended-Upgrade::Mail is set
|
|
||||||
apt_unattended_upgrades_notify_error_only: yes
|
|
||||||
# Do automatic removal of new unused dependencies after the upgrade
|
|
||||||
# (equivalent to apt-get autoremove)
|
|
||||||
apt_unattended_upgrades_autoremove: yes
|
|
||||||
# Automatically reboot *WITHOUT CONFIRMATION*
|
|
||||||
# if the file /var/run/reboot-required is found after the upgrade
|
|
||||||
apt_unattended_upgrades_automatic_reboot: no
|
|
||||||
# Automatically reboot even if there are users currently logged in.
|
|
||||||
apt_unattended_upgrades_automatic_reboot_with_users: no
|
|
||||||
# If automatic reboot is enabled and needed, reboot at the specific
|
|
||||||
# time instead of immediately
|
|
||||||
# Values: now | 02:00 | ...
|
|
||||||
apt_unattended_upgrades_automatic_reboot_time: now
|
|
||||||
# Enable logging to syslog.
|
|
||||||
apt_unattended_upgrades_syslog_enable: no
|
|
||||||
# Specify syslog facility.
|
|
||||||
apt_unattended_upgrades_syslog_facility: daemon
|
|
||||||
|
|
||||||
# Override download timer ? Default no
|
|
||||||
apt_unattended_upgrades_download_timer_override: null
|
|
||||||
# In case of override :
|
|
||||||
# apt_unattended_upgrades_download_timer_override:
|
|
||||||
# on_calendar_replace: (true|false) If true, delete default system schedule. If not, default and new schedules will be merged
|
|
||||||
# on_calendar: new schedule, see man systemd.time.7, example : 'Mon..Fri *-*-* 6:00'
|
|
||||||
# randomized_delay_sec: random delay in sec
|
|
||||||
# persistent: (true|false)
|
|
||||||
# See systemd.time.5 for random delay and persistent
|
|
||||||
|
|
||||||
# Override upgrade timer the same way
|
|
||||||
apt_unattended_upgrades_upgrade_timer_override: null
|
|
||||||
# apt_unattended_upgrades_upgrade_timer_override:
|
|
||||||
# on_calendar_replace:
|
|
||||||
# on_calendar:
|
|
||||||
# randomized_delay_sec:
|
|
||||||
# persistent:
|
|
||||||
|
|
||||||
# remount file system: currently supported options are rootfs and tmpfs
|
|
||||||
# tmpfs: remount tmp before running if mounted noexec
|
|
||||||
# rootfs: remount root filesystem r/w before running if mounted r/o
|
|
||||||
apt_remount_filesystems: []
|
|
||||||
|
|
||||||
# repositories to register
|
|
||||||
apt_repositories: []
|
|
||||||
# gpg keys for external repositories
|
|
||||||
apt_keys: []
|
|
||||||
# HTTP proxy server (optional)
|
|
||||||
# apt_http_proxy_address:
|
|
||||||
# HTTP pipeline depth (optional)
|
|
||||||
# apt_http_pipeline_depth: 5
|
|
||||||
|
|
||||||
# Change Aptitudes solution costs, default is not to change anything
|
|
||||||
# Mirror https://lists.debian.org/543FF3BD.1020609@zen.co.uk
|
|
||||||
# apt_aptitude_solution_cost:
|
|
||||||
# - priority
|
|
||||||
# - removals
|
|
||||||
# - canceled-actions
|
|
||||||
apt_aptitude_solution_cost: []
|
|
||||||
|
|
||||||
# List of preferences options.
|
|
||||||
# apt_preferences:
|
|
||||||
# - file: perl
|
|
||||||
# package: perl
|
|
||||||
# pin: "version 5.20*"
|
|
||||||
# priority: 1001
|
|
||||||
apt_preferences: []
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
## Handlers
|
|
||||||
|
|
||||||
These are the handlers that are defined in `handlers/main.yml`.
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
---
|
|
||||||
|
|
||||||
- name: reload systemd
|
|
||||||
systemd:
|
|
||||||
daemon_reload: true
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
## Usage
|
|
||||||
|
|
||||||
This is an example playbook:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
---
|
|
||||||
|
|
||||||
- hosts: all
|
|
||||||
become: yes
|
|
||||||
roles:
|
|
||||||
- weareinteractive.apt
|
|
||||||
vars:
|
|
||||||
apt_cache_valid_time: 7200
|
|
||||||
apt_packages:
|
|
||||||
- vim
|
|
||||||
- tree
|
|
||||||
- ca-certificates
|
|
||||||
apt_deb_packages:
|
|
||||||
- "https://releases.hashicorp.com/vagrant/2.1.5/vagrant_2.1.5_x86_64.deb"
|
|
||||||
apt_mails:
|
|
||||||
- root
|
|
||||||
apt_preferences:
|
|
||||||
- file: perl
|
|
||||||
package: perl
|
|
||||||
pin: "version 5.20*"
|
|
||||||
priority: 1001
|
|
||||||
apt_unattended_upgrades_notify_error_only: no
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
## Testing
|
|
||||||
|
|
||||||
```shell
|
|
||||||
$ git clone https://github.com/weareinteractive/ansible-apt.git
|
|
||||||
$ cd ansible-apt
|
|
||||||
$ make test
|
|
||||||
```
|
|
||||||
|
|
||||||
## Contributing
|
|
||||||
In lieu of a formal style guide, take care to maintain the existing coding style. Add unit tests and examples for any new or changed functionality.
|
|
||||||
|
|
||||||
1. Fork it
|
|
||||||
2. Create your feature branch (`git checkout -b my-new-feature`)
|
|
||||||
3. Commit your changes (`git commit -am 'Add some feature'`)
|
|
||||||
4. Push to the branch (`git push origin my-new-feature`)
|
|
||||||
5. Create new Pull Request
|
|
||||||
|
|
||||||
*Note: To update the `README.md` file please install and run `ansible-role`:*
|
|
||||||
|
|
||||||
```shell
|
|
||||||
$ gem install ansible-role
|
|
||||||
$ ansible-role docgen
|
|
||||||
```
|
|
||||||
|
|
||||||
## License
|
|
||||||
Copyright (c) We Are Interactive under the MIT license.
|
|
||||||
@ -1,141 +0,0 @@
|
|||||||
---
|
|
||||||
# apt_unattended_upgrades_blacklist:
|
|
||||||
# - vim
|
|
||||||
# - libc6
|
|
||||||
# apt_mails:
|
|
||||||
# - root
|
|
||||||
# - foo@dev.null
|
|
||||||
# apt_keys:
|
|
||||||
# - id: 473041FA
|
|
||||||
# file: /tmp/apt.gpg
|
|
||||||
# data: "{{ lookup('file', 'apt.asc') }}"
|
|
||||||
# keyring: /etc/apt/trusted.gpg.d/debian.gpg
|
|
||||||
# keyserver: keyserver.ubuntu.com
|
|
||||||
# url: https://ftp-master.debian.org/keys/archive-key-6.0.asc
|
|
||||||
# validate_certs: yes
|
|
||||||
# state: present
|
|
||||||
# apt_repositories:
|
|
||||||
# - codename: trusty
|
|
||||||
# filename: google-chrome
|
|
||||||
# mode: 0644
|
|
||||||
# repo: 'ppa:nginx/stable'
|
|
||||||
# state: present
|
|
||||||
# update_cache: yes
|
|
||||||
|
|
||||||
|
|
||||||
# sets the amount of time the cache is valid
|
|
||||||
apt_cache_valid_time: 3600
|
|
||||||
# upgrade system: safe | full | dist
|
|
||||||
apt_upgrade: no
|
|
||||||
# packages to install
|
|
||||||
apt_packages: []
|
|
||||||
# remove packages that are no longer needed for dependencies
|
|
||||||
apt_autoremove: yes
|
|
||||||
# remove .deb files for packages no longer on your system
|
|
||||||
apt_autoclean: yes
|
|
||||||
# .deb packages to install.
|
|
||||||
apt_deb_packages: []
|
|
||||||
|
|
||||||
# whether or not suggested packages should be installed.
|
|
||||||
apt_install_suggests: no
|
|
||||||
# do not install Recommended packages by default
|
|
||||||
apt_install_recommends: no
|
|
||||||
# allow 'apt-get autoremove' to remove recommended packages
|
|
||||||
apt_remove_recommends: no
|
|
||||||
# Enable the update/upgrade script
|
|
||||||
apt_periodic: yes
|
|
||||||
# Do “apt-get update” automatically every n-days (0=disable)
|
|
||||||
apt_update_package_lists: 1
|
|
||||||
# Do “apt-get upgrade –download-only” every n-days (0=disable)
|
|
||||||
apt_download_upgradeable_packages: 0
|
|
||||||
# Do “apt-get autoclean” every n-days (0=disable)
|
|
||||||
apt_auto_clean_interval: 0
|
|
||||||
|
|
||||||
# enable unattended-upgrades
|
|
||||||
apt_unattended_upgrades: yes
|
|
||||||
# list of origins patterns to control which packages are upgraded
|
|
||||||
# replaces allowed-origins, kept for compatibility
|
|
||||||
apt_unattended_upgrades_origins: []
|
|
||||||
# List of allowed-origins, default value kept for compatibility
|
|
||||||
# set to null to use origins-pattern
|
|
||||||
apt_unattended_upgrades_allowed:
|
|
||||||
- ${distro_id}:${distro_codename}-security
|
|
||||||
# list of packages to not update (regexp are supported)
|
|
||||||
apt_unattended_upgrades_blacklist: []
|
|
||||||
# Split the upgrade into the smallest possible chunks so that
|
|
||||||
# they can be interrupted with SIGUSR1. This makes the upgrade
|
|
||||||
# a bit slower but it has the benefit that shutdown while a upgrade
|
|
||||||
# is running is possible (with a small delay)
|
|
||||||
apt_unattended_upgrades_minimal_steps: no
|
|
||||||
# Send email to this address for problems or packages upgrades
|
|
||||||
# If empty or unset then no email is sent, make sure that you
|
|
||||||
# have a working mail setup on your system. A package that provides
|
|
||||||
# 'mailx' must be installed. E.g. "user@example.com"
|
|
||||||
apt_mails: []
|
|
||||||
# Set this value to "true" to get emails only on errors. Default
|
|
||||||
# is to always send a mail if Unattended-Upgrade::Mail is set
|
|
||||||
apt_unattended_upgrades_notify_error_only: yes
|
|
||||||
# Do automatic removal of new unused dependencies after the upgrade
|
|
||||||
# (equivalent to apt-get autoremove)
|
|
||||||
apt_unattended_upgrades_autoremove: yes
|
|
||||||
# Automatically reboot *WITHOUT CONFIRMATION*
|
|
||||||
# if the file /var/run/reboot-required is found after the upgrade
|
|
||||||
apt_unattended_upgrades_automatic_reboot: no
|
|
||||||
# Automatically reboot even if there are users currently logged in.
|
|
||||||
apt_unattended_upgrades_automatic_reboot_with_users: no
|
|
||||||
# If automatic reboot is enabled and needed, reboot at the specific
|
|
||||||
# time instead of immediately
|
|
||||||
# Values: now | 02:00 | ...
|
|
||||||
apt_unattended_upgrades_automatic_reboot_time: now
|
|
||||||
# Enable logging to syslog.
|
|
||||||
apt_unattended_upgrades_syslog_enable: no
|
|
||||||
# Specify syslog facility.
|
|
||||||
apt_unattended_upgrades_syslog_facility: daemon
|
|
||||||
|
|
||||||
# Override download timer ? Default no
|
|
||||||
apt_unattended_upgrades_download_timer_override: null
|
|
||||||
# In case of override :
|
|
||||||
# apt_unattended_upgrades_download_timer_override:
|
|
||||||
# on_calendar_replace: (true|false) If true, delete default system schedule. If not, default and new schedules will be merged
|
|
||||||
# on_calendar: new schedule, see man systemd.time.7, example : 'Mon..Fri *-*-* 6:00'
|
|
||||||
# randomized_delay_sec: random delay in sec
|
|
||||||
# persistent: (true|false)
|
|
||||||
# See systemd.time.5 for random delay and persistent
|
|
||||||
|
|
||||||
# Override upgrade timer the same way
|
|
||||||
apt_unattended_upgrades_upgrade_timer_override: null
|
|
||||||
# apt_unattended_upgrades_upgrade_timer_override:
|
|
||||||
# on_calendar_replace:
|
|
||||||
# on_calendar:
|
|
||||||
# randomized_delay_sec:
|
|
||||||
# persistent:
|
|
||||||
|
|
||||||
# remount file system: currently supported options are rootfs and tmpfs
|
|
||||||
# tmpfs: remount tmp before running if mounted noexec
|
|
||||||
# rootfs: remount root filesystem r/w before running if mounted r/o
|
|
||||||
apt_remount_filesystems: []
|
|
||||||
|
|
||||||
# repositories to register
|
|
||||||
apt_repositories: []
|
|
||||||
# gpg keys for external repositories
|
|
||||||
apt_keys: []
|
|
||||||
# HTTP proxy server (optional)
|
|
||||||
# apt_http_proxy_address:
|
|
||||||
# HTTP pipeline depth (optional)
|
|
||||||
# apt_http_pipeline_depth: 5
|
|
||||||
|
|
||||||
# Change Aptitudes solution costs, default is not to change anything
|
|
||||||
# Mirror https://lists.debian.org/543FF3BD.1020609@zen.co.uk
|
|
||||||
# apt_aptitude_solution_cost:
|
|
||||||
# - priority
|
|
||||||
# - removals
|
|
||||||
# - canceled-actions
|
|
||||||
apt_aptitude_solution_cost: []
|
|
||||||
|
|
||||||
# List of preferences options.
|
|
||||||
# apt_preferences:
|
|
||||||
# - file: perl
|
|
||||||
# package: perl
|
|
||||||
# pin: "version 5.20*"
|
|
||||||
# priority: 1001
|
|
||||||
apt_preferences: []
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: reload systemd
|
|
||||||
systemd:
|
|
||||||
daemon_reload: true
|
|
||||||
@ -1,2 +0,0 @@
|
|||||||
install_date: Sat Jan 11 17:32:26 2020
|
|
||||||
version: 2.9.1
|
|
||||||
@ -1,142 +0,0 @@
|
|||||||
---
|
|
||||||
galaxy_info:
|
|
||||||
author: franklin
|
|
||||||
company: We Are Interactive
|
|
||||||
description: Configures apt and installs/updates packages
|
|
||||||
min_ansible_version: 2.4
|
|
||||||
license: MIT
|
|
||||||
# Optionally specify the branch Galaxy will use when accessing the GitHub
|
|
||||||
# repo for this role. During role install, if no tags are available,
|
|
||||||
# Galaxy will use this branch. During import Galaxy will access files on
|
|
||||||
# this branch. If travis integration is cofigured, only notification for this
|
|
||||||
# branch will be accepted. Otherwise, in all cases, the repo's default branch
|
|
||||||
# (usually master) will be used.
|
|
||||||
github_branch: master
|
|
||||||
#
|
|
||||||
# Below are all platforms currently available. Just uncomment
|
|
||||||
# the ones that apply to your role. If you don't see your
|
|
||||||
# platform on this list, let us know and we'll get it added!
|
|
||||||
#
|
|
||||||
platforms:
|
|
||||||
#- name: EL
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 5
|
|
||||||
# - 6
|
|
||||||
# - 7
|
|
||||||
#- name: GenericUNIX
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - any
|
|
||||||
#- name: Solaris
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 10
|
|
||||||
# - 11.0
|
|
||||||
# - 11.1
|
|
||||||
# - 11.2
|
|
||||||
# - 11.3
|
|
||||||
#- name: Fedora
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 16
|
|
||||||
# - 17
|
|
||||||
# - 18
|
|
||||||
# - 19
|
|
||||||
# - 20
|
|
||||||
# - 21
|
|
||||||
# - 22
|
|
||||||
# - 23
|
|
||||||
#- name: Windows
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 2012R2
|
|
||||||
#- name: SmartOS
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - any
|
|
||||||
#- name: opensuse
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 12.1
|
|
||||||
# - 12.2
|
|
||||||
# - 12.3
|
|
||||||
# - 13.1
|
|
||||||
# - 13.2
|
|
||||||
#- name: Amazon
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 2013.03
|
|
||||||
# - 2013.09
|
|
||||||
#- name: GenericBSD
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - any
|
|
||||||
#- name: FreeBSD
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 10.0
|
|
||||||
# - 10.1
|
|
||||||
# - 10.2
|
|
||||||
# - 8.0
|
|
||||||
# - 8.1
|
|
||||||
# - 8.2
|
|
||||||
# - 8.3
|
|
||||||
# - 8.4
|
|
||||||
# - 9.0
|
|
||||||
# - 9.1
|
|
||||||
# - 9.1
|
|
||||||
# - 9.2
|
|
||||||
# - 9.3
|
|
||||||
- name: Ubuntu
|
|
||||||
versions:
|
|
||||||
- all
|
|
||||||
# - lucid
|
|
||||||
# - maverick
|
|
||||||
# - natty
|
|
||||||
# - oneiric
|
|
||||||
# - precise
|
|
||||||
# - quantal
|
|
||||||
# - raring
|
|
||||||
# - saucy
|
|
||||||
# - trusty
|
|
||||||
# - utopic
|
|
||||||
# - vivid
|
|
||||||
# - wily
|
|
||||||
#- name: SLES
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 10SP3
|
|
||||||
# - 10SP4
|
|
||||||
# - 11
|
|
||||||
# - 11SP1
|
|
||||||
# - 11SP2
|
|
||||||
# - 11SP3
|
|
||||||
#- name: GenericLinux
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - any
|
|
||||||
- name: Debian
|
|
||||||
versions:
|
|
||||||
- all
|
|
||||||
# - etch
|
|
||||||
# - jessie
|
|
||||||
# - lenny
|
|
||||||
# - squeeze
|
|
||||||
# - wheezy
|
|
||||||
#
|
|
||||||
# List tags for your role here, one per line. A tag is
|
|
||||||
# a keyword that describes and categorizes the role.
|
|
||||||
# Users find roles by searching for tags. Be sure to
|
|
||||||
# remove the '[]' above if you add tags to this list.
|
|
||||||
#
|
|
||||||
# NOTE: A tag is limited to a single word comprised of
|
|
||||||
# alphanumeric characters. Maximum 20 tags per role.
|
|
||||||
galaxy_tags:
|
|
||||||
- system
|
|
||||||
- apt
|
|
||||||
# List your role dependencies here, one per line. Only
|
|
||||||
# dependencies available via galaxy should be listed here.
|
|
||||||
# Be sure to remove the '[]' above if you add dependencies
|
|
||||||
# to this list.
|
|
||||||
dependencies: []
|
|
||||||
@ -1,25 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
galaxy_name: weareinteractive.apt
|
|
||||||
github_user: weareinteractive
|
|
||||||
github_name: ansible-apt
|
|
||||||
badges: |
|
|
||||||
[](https://travis-ci.org/weareinteractive/ansible-apt)
|
|
||||||
[](https://galaxy.ansible.com/weareinteractive/apt)
|
|
||||||
[](https://github.com/weareinteractive/ansible-apt)
|
|
||||||
[](https://github.com/weareinteractive/ansible-apt)
|
|
||||||
description: |
|
|
||||||
> * updates apt
|
|
||||||
> * cleans up apt
|
|
||||||
> * configures apt
|
|
||||||
> * installs packages
|
|
||||||
> * add repositories
|
|
||||||
> * add keys
|
|
||||||
> * apt pinning
|
|
||||||
> * manages unattended upgrades
|
|
||||||
> * optionally alters solution cost
|
|
||||||
> * optionally allows filesystems to be remounted
|
|
||||||
|
|
||||||
**Note:**
|
|
||||||
|
|
||||||
> Since Ansible Galaxy supports [organization](https://www.ansible.com/blog/ansible-galaxy-2-release) now, this role has moved from `franklinkim.apt` to `weareinteractive.apt`!
|
|
||||||
@ -1,65 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Configuring APT
|
|
||||||
template:
|
|
||||||
src: "{{ item }}.j2"
|
|
||||||
dest: "/{{ item }}"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
mode: "0644"
|
|
||||||
with_items:
|
|
||||||
- "etc/apt/apt.conf.d/10general"
|
|
||||||
- "etc/apt/apt.conf.d/10periodic"
|
|
||||||
|
|
||||||
- name: Configuring APT
|
|
||||||
template:
|
|
||||||
src: "{{ item }}.j2"
|
|
||||||
dest: "/{{ item }}"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
mode: "0644"
|
|
||||||
when: apt_unattended_upgrades | bool
|
|
||||||
with_items:
|
|
||||||
- "etc/apt/apt.conf.d/50unattended-upgrades"
|
|
||||||
|
|
||||||
- name: Configuring APT Download timer
|
|
||||||
include_tasks: unattended_upgrades_download_timer.yml
|
|
||||||
when: apt_unattended_upgrades_download_timer_override is not none
|
|
||||||
|
|
||||||
- name: Configuring APT Upgrade timer
|
|
||||||
include_tasks: unattended_upgrades_upgrade_timer.yml
|
|
||||||
when: apt_unattended_upgrades_upgrade_timer_override is not none
|
|
||||||
|
|
||||||
- name: Configuring remount filesystems
|
|
||||||
template:
|
|
||||||
src: "etc/apt/apt.conf.d/10remount_{{ item }}.j2"
|
|
||||||
dest: "/etc/apt/apt.conf.d/10remount_{{ item }}"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
mode: "0644"
|
|
||||||
when: apt_remount_filesystems | bool
|
|
||||||
with_items:
|
|
||||||
- "{{ apt_remount_filesystems }}"
|
|
||||||
|
|
||||||
- name: Configuring APT proxy behavior
|
|
||||||
template:
|
|
||||||
src: "{{ item }}.j2"
|
|
||||||
dest: "/{{ item }}"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
mode: "0644"
|
|
||||||
when: apt_http_proxy_address is defined or apt_https_proxy_address is defined
|
|
||||||
with_items:
|
|
||||||
- "etc/apt/apt.conf.d/00proxy"
|
|
||||||
|
|
||||||
- name: Alter Aptitude solution costs
|
|
||||||
template:
|
|
||||||
src: "{{ item }}.j2"
|
|
||||||
dest: "/{{ item }}"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
mode: "0644"
|
|
||||||
when: apt_aptitude_solution_cost | bool
|
|
||||||
with_items:
|
|
||||||
- "etc/apt/apt.conf.d/20alter-aptitude-solution-cost"
|
|
||||||
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Installing .deb packages
|
|
||||||
apt:
|
|
||||||
deb: "{{ item }}"
|
|
||||||
autoremove: "{{ apt_autoremove }}"
|
|
||||||
with_items: "{{ apt_deb_packages }}"
|
|
||||||
@ -1,11 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Installing required packages
|
|
||||||
apt:
|
|
||||||
name: "{{ packages }}"
|
|
||||||
state: present
|
|
||||||
vars:
|
|
||||||
packages:
|
|
||||||
- aptitude
|
|
||||||
- python-apt
|
|
||||||
- python-pycurl
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- include_tasks: update.yml
|
|
||||||
- include_tasks: upgrade.yml
|
|
||||||
- include_tasks: dependencies.yml
|
|
||||||
- include_tasks: unattended_upgrades.yml
|
|
||||||
@ -1,13 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Adding apt signing key
|
|
||||||
apt_key:
|
|
||||||
id: "{{ item.id | default(omit) }}"
|
|
||||||
file: "{{ item.file | default(omit) }}"
|
|
||||||
data: "{{ item.data | default(omit) }}"
|
|
||||||
keyring: "{{ item.keyring | default(omit) }}"
|
|
||||||
keyserver: "{{ item.keyserver | default(omit) }}"
|
|
||||||
url: "{{ item.url | default(omit) }}"
|
|
||||||
validate_certs: "{{ item.validate_certs | default(omit) }}"
|
|
||||||
state: "{{ item.state | default('present') }}"
|
|
||||||
with_items: "{{ apt_keys }}"
|
|
||||||
@ -1,22 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- import_tasks: config.yml
|
|
||||||
tags:
|
|
||||||
- system
|
|
||||||
- apt
|
|
||||||
- config
|
|
||||||
- apt-config
|
|
||||||
|
|
||||||
- import_tasks: install.yml
|
|
||||||
tags:
|
|
||||||
- system
|
|
||||||
- apt
|
|
||||||
- install
|
|
||||||
- apt-install
|
|
||||||
|
|
||||||
- import_tasks: manage.yml
|
|
||||||
tags:
|
|
||||||
- system
|
|
||||||
- apt
|
|
||||||
- manage
|
|
||||||
- apt-manage
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- include_tasks: keys.yml
|
|
||||||
- include_tasks: repositories.yml
|
|
||||||
- include_tasks: preferences.yml
|
|
||||||
- include_tasks: packages.yml
|
|
||||||
- include_tasks: debs.yml
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Installing packages
|
|
||||||
apt:
|
|
||||||
name: "{{ apt_packages }}"
|
|
||||||
state: present
|
|
||||||
autoremove: "{{ apt_autoremove }}"
|
|
||||||
@ -1,10 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Configuring APT preferences
|
|
||||||
template:
|
|
||||||
src: etc/apt/preferences.d/preferences.j2
|
|
||||||
dest: "/etc/apt/preferences.d/{{ item.file }}"
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: 0644
|
|
||||||
with_items: "{{ apt_preferences }}"
|
|
||||||
@ -1,11 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Adding apt repository
|
|
||||||
apt_repository:
|
|
||||||
codename: "{{ item.codename | default(omit) }}"
|
|
||||||
filename: "{{ item.filename | default(omit) }}"
|
|
||||||
mode: "{{ item.mode | default(omit) }}"
|
|
||||||
repo: "{{ item.repo | default(omit) }}"
|
|
||||||
state: "{{ item.state | default(omit) }}"
|
|
||||||
update_cache: "{{ item.update_cache | default('yes') }}"
|
|
||||||
with_items: "{{ apt_repositories }}"
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Installing packages
|
|
||||||
apt:
|
|
||||||
pkg: "unattended-upgrades"
|
|
||||||
state: "{{ 'latest' if apt_unattended_upgrades else 'absent' }}"
|
|
||||||
when: apt_unattended_upgrades | bool
|
|
||||||
@ -1,20 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Creating Download timer directory
|
|
||||||
file:
|
|
||||||
path: "/etc/systemd/system/apt-daily.timer.d"
|
|
||||||
state: directory
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: "0755"
|
|
||||||
|
|
||||||
- name: Configuring Download timer
|
|
||||||
template:
|
|
||||||
src: "{{ item }}.j2"
|
|
||||||
dest: "/{{ item }}"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
mode: "0644"
|
|
||||||
with_items:
|
|
||||||
- "etc/systemd/system/apt-daily.timer.d/override.conf"
|
|
||||||
notify: reload systemd
|
|
||||||
@ -1,20 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Creating Upgrade timer directory
|
|
||||||
file:
|
|
||||||
path: "/etc/systemd/system/apt-daily-upgrade.timer.d"
|
|
||||||
state: directory
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: "0755"
|
|
||||||
|
|
||||||
- name: Configuring Upgrade timer
|
|
||||||
template:
|
|
||||||
src: "{{ item }}.j2"
|
|
||||||
dest: "/{{ item }}"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
mode: "0644"
|
|
||||||
with_items:
|
|
||||||
- "etc/systemd/system/apt-daily-upgrade.timer.d/override.conf"
|
|
||||||
notify: reload systemd
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Updating cache
|
|
||||||
apt:
|
|
||||||
update_cache: yes
|
|
||||||
cache_valid_time: "{{ apt_cache_valid_time }}"
|
|
||||||
@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Upgrading system
|
|
||||||
apt:
|
|
||||||
upgrade: "{{ apt_upgrade }}"
|
|
||||||
update_cache: yes
|
|
||||||
autoremove: "{{ apt_autoremove }}"
|
|
||||||
when: (apt_upgrade == "safe") or (apt_upgrade == "full") or (apt_upgrade == "dist")
|
|
||||||
@ -1,11 +0,0 @@
|
|||||||
// {{ ansible_managed }}
|
|
||||||
|
|
||||||
{% if apt_http_proxy_address is defined and apt_http_proxy_address %}
|
|
||||||
Acquire::http::Proxy "{{ apt_http_proxy_address }}";
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_https_proxy_address is defined and apt_https_proxy_address %}
|
|
||||||
Acquire::https::Proxy "{{ apt_https_proxy_address }}";
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_http_pipeline_depth is defined and apt_http_pipeline_depth %}
|
|
||||||
Acquire::http::Pipeline-Depth "{{ apt_http_pipeline_depth }}";
|
|
||||||
{% endif %}
|
|
||||||
@ -1,12 +0,0 @@
|
|||||||
// {{ ansible_managed }}
|
|
||||||
|
|
||||||
// Install Recommended packages by default
|
|
||||||
APT::Install-Recommends "{{ apt_install_recommends | to_nice_json }}";
|
|
||||||
|
|
||||||
// Allow 'apt-get autoremove' to remove recommended packages
|
|
||||||
APT::AutoRemove::RecommendsImportant "{{ "false" if apt_remove_recommends else "true" }}";
|
|
||||||
|
|
||||||
// Install Suggested packages by default
|
|
||||||
APT::Install-Suggests "{{ apt_install_suggests | to_nice_json }}";
|
|
||||||
|
|
||||||
APT::Get::Show-Upgraded "true";
|
|
||||||
@ -1,18 +0,0 @@
|
|||||||
// {{ ansible_managed }}
|
|
||||||
|
|
||||||
// Enable the update/upgrade script (0=disable)
|
|
||||||
APT::Periodic::Enable "{{ apt_periodic | int}}";
|
|
||||||
|
|
||||||
// Do “apt-get update” automatically every n-days (0=disable)
|
|
||||||
APT::Periodic::Update-Package-Lists "{{ apt_update_package_lists }}";
|
|
||||||
|
|
||||||
// Do “apt-get upgrade –download-only” every n-days (0=disable)
|
|
||||||
APT::Periodic::Download-Upgradeable-Packages "{{ apt_download_upgradeable_packages }}";
|
|
||||||
|
|
||||||
// Do “apt-get autoclean” every n-days (0=disable)
|
|
||||||
APT::Periodic::AutocleanInterval "{{ apt_auto_clean_interval }}";
|
|
||||||
|
|
||||||
// Run the “unattended-upgrade” security upgrade script every n-days (0=disabled)
|
|
||||||
// Requires the package “unattended-upgrades” and will write
|
|
||||||
// a log in /var/log/unattended-upgrades
|
|
||||||
APT::Periodic::Unattended-Upgrade "{{ apt_unattended_upgrades | int }}";
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
// {{ ansible_managed }}
|
|
||||||
|
|
||||||
DPkg {
|
|
||||||
// Auto re-mounting of a readonly /
|
|
||||||
Pre-Invoke { "mount -o remount,rw LABEL=ROOTFS /"; };
|
|
||||||
Post-Invoke { "test ${NO_APT_REMOUNT:-no} = yes || mount -o remount,ro LABEL=ROOTFS / || true"; };
|
|
||||||
};
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
// {{ ansible_managed }}
|
|
||||||
|
|
||||||
DPkg {
|
|
||||||
// Auto re-mounting of a noexec /tmp since some packages desire exec
|
|
||||||
Pre-Invoke { "mount -o remount,exec /tmp"; };
|
|
||||||
Post-Invoke { "test ${NO_APT_REMOUNT:-no} = yes || mount -o remount,noexec /tmp || true"; };
|
|
||||||
};
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
# {{ ansible_managed }}
|
|
||||||
Aptitude::ProblemResolver {
|
|
||||||
SolutionCost "{{ apt_aptitude_solution_cost | join(", ") }}";
|
|
||||||
}
|
|
||||||
|
|
||||||
@ -1,76 +0,0 @@
|
|||||||
// {{ ansible_managed }}
|
|
||||||
|
|
||||||
// Unattended-Upgrade::Origins-Pattern controls which packages are
|
|
||||||
// upgraded. Replace Allowed-Origins
|
|
||||||
Unattended-Upgrade::Origins-Pattern {
|
|
||||||
{% for origin in apt_unattended_upgrades_origins %}
|
|
||||||
"{{ origin }}";
|
|
||||||
{% endfor %}
|
|
||||||
};
|
|
||||||
|
|
||||||
// Automatically upgrade packages from these (origin:archive) pairs
|
|
||||||
Unattended-Upgrade::Allowed-Origins {
|
|
||||||
{% for allowed in apt_unattended_upgrades_allowed %}
|
|
||||||
"{{ allowed }}";
|
|
||||||
{% endfor %}
|
|
||||||
};
|
|
||||||
|
|
||||||
// List of packages to not update (regexp are supported)
|
|
||||||
Unattended-Upgrade::Package-Blacklist {
|
|
||||||
{% for package in apt_unattended_upgrades_blacklist %}
|
|
||||||
"{{ package }}";
|
|
||||||
{% endfor %}
|
|
||||||
};
|
|
||||||
|
|
||||||
// This option allows you to control if on a unclean dpkg exit
|
|
||||||
// unattended-upgrades will automatically run
|
|
||||||
// dpkg --force-confold --configure -a
|
|
||||||
// The default is true, to ensure updates keep getting installed
|
|
||||||
//Unattended-Upgrade::AutoFixInterruptedDpkg "false";
|
|
||||||
|
|
||||||
// Split the upgrade into the smallest possible chunks so that
|
|
||||||
// they can be interrupted with SIGUSR1. This makes the upgrade
|
|
||||||
// a bit slower but it has the benefit that shutdown while a upgrade
|
|
||||||
// is running is possible (with a small delay)
|
|
||||||
Unattended-Upgrade::MinimalSteps "{{ apt_unattended_upgrades_minimal_steps | to_nice_json }}";
|
|
||||||
|
|
||||||
// Install all unattended-upgrades when the machine is shuting down
|
|
||||||
// instead of doing it in the background while the machine is running
|
|
||||||
// This will (obviously) make shutdown slower
|
|
||||||
//Unattended-Upgrade::InstallOnShutdown "true";
|
|
||||||
|
|
||||||
// Send email to this address for problems or packages upgrades
|
|
||||||
// If empty or unset then no email is sent, make sure that you
|
|
||||||
// have a working mail setup on your system. A package that provides
|
|
||||||
// 'mailx' must be installed. E.g. "user@example.com"
|
|
||||||
Unattended-Upgrade::Mail "{{ apt_mails | join(',') }}";
|
|
||||||
|
|
||||||
// Set this value to "true" to get emails only on errors. Default
|
|
||||||
// is to always send a mail if Unattended-Upgrade::Mail is set
|
|
||||||
Unattended-Upgrade::MailOnlyOnError "{{ apt_unattended_upgrades_notify_error_only | to_nice_json }}";
|
|
||||||
|
|
||||||
// Do automatic removal of new unused dependencies after the upgrade
|
|
||||||
// (equivalent to apt-get autoremove)
|
|
||||||
Unattended-Upgrade::Remove-Unused-Dependencies "{{ apt_unattended_upgrades_autoremove | to_nice_json }}";
|
|
||||||
|
|
||||||
// Automatically reboot *WITHOUT CONFIRMATION*
|
|
||||||
// if the file /var/run/reboot-required is found after the upgrade
|
|
||||||
Unattended-Upgrade::Automatic-Reboot "{{ apt_unattended_upgrades_automatic_reboot | to_nice_json }}";
|
|
||||||
|
|
||||||
// Automatically reboot even if there are users currently logged in.
|
|
||||||
Unattended-Upgrade::Automatic-Reboot-WithUsers "{{ apt_unattended_upgrades_automatic_reboot_with_users | to_nice_json }}";
|
|
||||||
|
|
||||||
// If automatic reboot is enabled and needed, reboot at the specific
|
|
||||||
// time instead of immediately
|
|
||||||
// Default: "now"
|
|
||||||
Unattended-Upgrade::Automatic-Reboot-Time "{{ apt_unattended_upgrades_automatic_reboot_time }}";
|
|
||||||
|
|
||||||
// Use apt bandwidth limit feature, this example limits the download
|
|
||||||
// speed to 70kb/sec
|
|
||||||
//Acquire::http::Dl-Limit "70";
|
|
||||||
|
|
||||||
// Enable logging to syslog. Default is False
|
|
||||||
Unattended-Upgrade::SyslogEnable "{{ apt_unattended_upgrades_syslog_enable | to_nice_json }}";
|
|
||||||
|
|
||||||
// Specify syslog facility. Default is daemon
|
|
||||||
Unattended-Upgrade::SyslogFacility "{{ apt_unattended_upgrades_syslog_facility }}";
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
# {{ ansible_managed }}
|
|
||||||
|
|
||||||
Package: {{ item.package | default('*') }}
|
|
||||||
Pin: {{ item.pin }}
|
|
||||||
Pin-Priority: {{ item.priority }}
|
|
||||||
@ -1,13 +0,0 @@
|
|||||||
[Timer]
|
|
||||||
{% if apt_unattended_upgrades_upgrade_timer_override.on_calendar_replace is defined and apt_unattended_upgrades_upgrade_timer_override.on_calendar_replace|bool %}
|
|
||||||
OnCalendar=
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_unattended_upgrades_upgrade_timer_override.on_calendar is defined %}
|
|
||||||
OnCalendar={{ apt_unattended_upgrades_upgrade_timer_override.on_calendar }}
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_unattended_upgrades_upgrade_timer_override.randomized_delay_sec is defined %}
|
|
||||||
RandomizedDelaySec={{ apt_unattended_upgrades_upgrade_timer_override.randomized_delay_sec }}
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_unattended_upgrades_upgrade_timer_override.persistent is defined %}
|
|
||||||
Persistent={{ apt_unattended_upgrades_upgrade_timer_override.persistent }}
|
|
||||||
{% endif %}
|
|
||||||
@ -1,13 +0,0 @@
|
|||||||
[Timer]
|
|
||||||
{% if apt_unattended_upgrades_download_timer_override.on_calendar_replace is defined and apt_unattended_upgrades_download_timer_override.on_calendar_replace|bool %}
|
|
||||||
OnCalendar=
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_unattended_upgrades_download_timer_override.on_calendar is defined %}
|
|
||||||
OnCalendar={{ apt_unattended_upgrades_download_timer_override.on_calendar }}
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_unattended_upgrades_download_timer_override.randomized_delay_sec is defined %}
|
|
||||||
RandomizedDelaySec={{ apt_unattended_upgrades_download_timer_override.randomized_delay_sec }}
|
|
||||||
{% endif %}
|
|
||||||
{% if apt_unattended_upgrades_download_timer_override.persistent is defined %}
|
|
||||||
Persistent={{ apt_unattended_upgrades_download_timer_override.persistent }}
|
|
||||||
{% endif %}
|
|
||||||
@ -1,22 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- hosts: all
|
|
||||||
become: yes
|
|
||||||
roles:
|
|
||||||
- weareinteractive.apt
|
|
||||||
vars:
|
|
||||||
apt_cache_valid_time: 7200
|
|
||||||
apt_packages:
|
|
||||||
- vim
|
|
||||||
- tree
|
|
||||||
- ca-certificates
|
|
||||||
apt_deb_packages:
|
|
||||||
- "https://releases.hashicorp.com/vagrant/2.1.5/vagrant_2.1.5_x86_64.deb"
|
|
||||||
apt_mails:
|
|
||||||
- root
|
|
||||||
apt_preferences:
|
|
||||||
- file: perl
|
|
||||||
package: perl
|
|
||||||
pin: "version 5.20*"
|
|
||||||
priority: 1001
|
|
||||||
apt_unattended_upgrades_notify_error_only: no
|
|
||||||
Loading…
Reference in New Issue
Block a user