2021-07-31 22:19:47 +00:00
|
|
|
# Preparations (low-level e.g. remote support, DNS prep, HW/OS, basic security)
|
2017-10-27 03:46:57 +00:00
|
|
|
|
2017-10-30 20:29:49 +00:00
|
|
|
- name: ...IS BEGINNING ============================================
|
2021-07-30 08:01:12 +00:00
|
|
|
meta: noop
|
2017-10-27 03:46:57 +00:00
|
|
|
|
2021-07-26 19:51:36 +00:00
|
|
|
- name: SSHD -- required by OpenVPN below -- also run by roles/4-server-options/tasks/main.yml
|
2018-09-20 00:42:37 +00:00
|
|
|
include_role:
|
|
|
|
|
name: sshd
|
2020-10-16 20:46:19 +00:00
|
|
|
when: sshd_install
|
2018-09-20 00:42:37 +00:00
|
|
|
|
2018-09-19 21:32:07 +00:00
|
|
|
- name: OPENVPN
|
|
|
|
|
include_role:
|
|
|
|
|
name: openvpn
|
2020-10-16 20:46:19 +00:00
|
|
|
when: openvpn_install
|
2018-09-19 21:32:07 +00:00
|
|
|
|
2021-10-28 00:51:42 +00:00
|
|
|
- name: REMOTE.IT
|
|
|
|
|
include_role:
|
|
|
|
|
name: remoteit
|
|
|
|
|
when: remoteit_install
|
|
|
|
|
|
2021-07-31 20:43:29 +00:00
|
|
|
- name: IIAB-ADMIN -- includes roles/iiab-admin/tasks/access.yml
|
|
|
|
|
include_role:
|
|
|
|
|
name: iiab-admin
|
|
|
|
|
#when: iiab_admin_install # Flag might be created in future?
|
|
|
|
|
|
2021-07-31 22:45:28 +00:00
|
|
|
- name: Install dnsmasq -- configure LATER in 'network', after Stage 9
|
2021-07-31 20:43:29 +00:00
|
|
|
include_tasks: roles/network/tasks/dnsmasq.yml
|
|
|
|
|
#when: dnsmasq_install # Flag might be used in future?
|
|
|
|
|
|
|
|
|
|
- include_tasks: uuid.yml
|
|
|
|
|
- include_tasks: ubermix.yml
|
2022-03-16 02:35:50 +00:00
|
|
|
|
|
|
|
|
# Runs install-expand-rootfs.yml, internal-wifi.yml & if nec: raspberry_pi.yml
|
|
|
|
|
- include_tasks: hardware.yml
|
2021-07-31 20:43:29 +00:00
|
|
|
|
2020-11-28 20:18:19 +00:00
|
|
|
|
2019-03-29 19:44:23 +00:00
|
|
|
# Debian 10 "Buster" is apparently enabling AppArmor in 2019:
|
|
|
|
|
# https://wiki.debian.org/AppArmor/Progress
|
|
|
|
|
# https://wiki.debian.org/AppArmor/HowToUse
|
|
|
|
|
# https://packages.debian.org/buster/apparmor
|
|
|
|
|
# Curiously this has NOT stopped IIAB 7.0/master from working on Debian 10
|
2019-05-12 05:06:53 +00:00
|
|
|
# pre-releases, during @floydianslips' March 2019 testing anyway! SEE #1387
|
2020-11-28 14:58:16 +00:00
|
|
|
|
2020-11-29 03:38:41 +00:00
|
|
|
# PR #2654 - AppArmor works w/ IIAB on Debian 10/11, so also now on Ubuntu?
|
2020-11-28 14:58:16 +00:00
|
|
|
#- name: Disable AppArmor -- override OS default (ubuntu)
|
|
|
|
|
# systemd:
|
|
|
|
|
# name: apparmor
|
|
|
|
|
# enabled: False
|
|
|
|
|
# state: stopped
|
|
|
|
|
# when: is_ubuntu
|
|
|
|
|
# ignore_errors: True
|
2017-06-26 22:24:26 +00:00
|
|
|
|
2020-11-29 04:18:35 +00:00
|
|
|
# PR #2648 - Can be restored in future if truly nec, w ansible.posix collection
|
2020-11-27 13:10:42 +00:00
|
|
|
#- name: Disable SELinux on next boot (OS's other than debuntu)
|
|
|
|
|
# selinux:
|
|
|
|
|
# state: disabled
|
|
|
|
|
# register: selinux_disabled
|
|
|
|
|
# when: not is_debuntu
|
|
|
|
|
|
|
|
|
|
#- name: Disable SELinux for this session (OS's other than debuntu, if needed)
|
|
|
|
|
# command: setenforce Permissive
|
|
|
|
|
# when: not is_debuntu and selinux_disabled is defined and selinux_disabled.changed
|
2017-05-27 18:09:50 +00:00
|
|
|
|
2020-11-28 20:18:19 +00:00
|
|
|
|
2017-10-30 20:29:49 +00:00
|
|
|
- name: Recording STAGE 1 HAS COMPLETED ============================
|
2017-12-08 06:16:51 +00:00
|
|
|
template:
|
|
|
|
|
src: roles/1-prep/templates/iiab.env.j2
|
2021-07-29 22:52:14 +00:00
|
|
|
dest: "{{ iiab_env_file }}" # Can also be run as a script if absolutely nec, e.g. 'source /etc/iiab/iiab.env && echo $WWWROOT'
|
