diff options
| -rw-r--r-- | playbooks/workstation.yml | 18 | ||||
| -rw-r--r-- | roles/_workstation/env/tasks/main.yml | 6 | ||||
| -rw-r--r-- | roles/_workstation/packages/defaults/main.yml | 43 | ||||
| -rw-r--r-- | roles/workstation/defaults/main.yml | 35 | ||||
| -rw-r--r-- | roles/workstation/tasks/_archlinux.yml | 10 | ||||
| -rw-r--r-- | roles/workstation/tasks/main.yml | 13 | ||||
| -rw-r--r-- | roles/workstation/tasks/pkgs.yml | 7 | ||||
| -rw-r--r-- | roles/workstation/tasks/sysconf.yml | 43 |
8 files changed, 122 insertions, 53 deletions
diff --git a/playbooks/workstation.yml b/playbooks/workstation.yml index 1b1acc3..7dd6b94 100644 --- a/playbooks/workstation.yml +++ b/playbooks/workstation.yml @@ -1,19 +1,3 @@ - -# workstation ~~ playbooks/workstation.yml -# wokrstation initialization - ---- - - hosts: localhost roles: - - role: _workstation/env - tags: env, always - - - role: _workstation/sshdns - tags: sshdns - - - role: _workstation/packages - tags: packages - - - role: _workstation/sysconf - tags: sysconf + - role: workstation diff --git a/roles/_workstation/env/tasks/main.yml b/roles/_workstation/env/tasks/main.yml index ff9acd2..7575922 100644 --- a/roles/_workstation/env/tasks/main.yml +++ b/roles/_workstation/env/tasks/main.yml @@ -1,9 +1,3 @@ - -# _workstation/env ~~ roles/_workstation/env/tasks/main.yml -# useful env. variables for workstation - ---- - - name: retrieve BECOME method stat: path=/usr/bin/doas register: _workstation_env_become diff --git a/roles/_workstation/packages/defaults/main.yml b/roles/_workstation/packages/defaults/main.yml index e855d74..8a55d1b 100644 --- a/roles/_workstation/packages/defaults/main.yml +++ b/roles/_workstation/packages/defaults/main.yml @@ -6,35 +6,38 @@ pkgs: common: - # desktop (backup over dwm) + # desktop - bemenu - i3status - dmenu + # editor - neovim + # files - curl - git - - lowdown - syncthing - tar - unzip - wget - zip + # lang - ansible - go - rust + # multimedia - cmus - feh - - firefox - mpv - syncthing - - qutebrowser + - qutebrowser - rtorrent - vlc - weechat + # tools - gnupg - gopass @@ -57,8 +60,7 @@ pkgs: archlinux: # desktop - i3-wm - # editor - # sys + # python - python-jedi - python-neovim @@ -68,48 +70,29 @@ pkgs: openbsd: # desktop - i3 + # devel - automake--%1.16 - clang-tools-extra - cmake - gmake - free - # editor - - emacs--no_x11%emacs + # net - tor-browser - torsocks - wireguard-tools + # multimedia - weechat-lua - weechat-python + # python - py3-jedi - py3-neovim - py3-pip - py3-requests + # security - pcsc-lite - pcsc-tools - - void: - - alsa-plugins-pulseaudio - - base-devel - - gnupg2 - - gnupg2-scdaemon - - seatd - - pcsclite - - pcsc-ccid - - python3-jedi - - python3-neovim - - python3-pip - - python3-requests - - terminus-font - # x11 - - xorg-server-devel - - libX11-devel - - libXft-devel - - libXinerama-devel - # wayland - - wlroots-devel - - libinput-devel diff --git a/roles/workstation/defaults/main.yml b/roles/workstation/defaults/main.yml new file mode 100644 index 0000000..7973c1d --- /dev/null +++ b/roles/workstation/defaults/main.yml @@ -0,0 +1,35 @@ +ws_user: qwd +ws_pip: + - +ws_pkgs: + common: + - feh + - git + - gnupg + - htop + - ipmitool + - mpv + - neovim + - rtorrent + - syncthing + - tar + - tor + - unzip + - wget + - zip + - zsh + - dmenu + + archlinux: + - acpi + - docker + - docker-compose + - opendoas + - pcsc-tools + - wireguard-tools + - pipewire + - pipewire-pulse + + openbsd: + - pcsc-lite + - pcsc-tools diff --git a/roles/workstation/tasks/_archlinux.yml b/roles/workstation/tasks/_archlinux.yml new file mode 100644 index 0000000..329372c --- /dev/null +++ b/roles/workstation/tasks/_archlinux.yml @@ -0,0 +1,10 @@ +- name: append current user to system groups + user: + name: "{{ ws_user }}" + groups: "{{ item }}" + append: true + loop: + - docker + - wheel + - video + - audio diff --git a/roles/workstation/tasks/main.yml b/roles/workstation/tasks/main.yml new file mode 100644 index 0000000..e7c08b9 --- /dev/null +++ b/roles/workstation/tasks/main.yml @@ -0,0 +1,13 @@ +- name: verify running as root + fail: + msg: playbook must be run as root + when: ansible_user_id != "root" + + +- name: include packages + include_tasks: pkgs.yml + tags: pkgs + +- name: include sysconf + include_tasks: sysconf.yml + tags: sysconf diff --git a/roles/workstation/tasks/pkgs.yml b/roles/workstation/tasks/pkgs.yml new file mode 100644 index 0000000..8c2354e --- /dev/null +++ b/roles/workstation/tasks/pkgs.yml @@ -0,0 +1,7 @@ +- name: install distribution packages + package: + name: "{{ item }}" + state: present + loop: + - "{{ ws_pkgs['common'] }}" + - "{{ ws_pkgs[ansible_distribution | lower] }}" diff --git a/roles/workstation/tasks/sysconf.yml b/roles/workstation/tasks/sysconf.yml new file mode 100644 index 0000000..c8c5ffd --- /dev/null +++ b/roles/workstation/tasks/sysconf.yml @@ -0,0 +1,43 @@ +- name: include operating system sensible task + include_tasks: "_{{ ansible_distribution | lower }}.yml" + tags: sysconf + +- name: generate doas configuration + lineinfile: + path: /etc/doas.conf + regexp: "^permit persist keepenv {{ ws_user }} as root" + line: "permit persist keepenv {{ ws_user }} as root" + create: true + mode: "0644" + owner: 0 + group: 0 + +- name: allow reboot/shutdown/hibernate with doas + lineinfile: + path: /etc/doas.conf + regexp: "^permit nopass {{ ws_user }} as root cmd {{ item }}" + line: "permit nopass {{ ws_user }} as root cmd {{ item }}" + loop: + - zzz + - ZZZ + - reboot + - shutdown + +- name: start and enable pcscd service + service: + name: pcscd + state: started + enabled: true + +- name: check sudo binary path + shell: which sudo + register: result + failed_when: false + +- name: uninstall sudo binary + package: + name: sudo + state: absent + when: result.rc == 0 + register: sudo + ignore_errors: true |