parent
912a93ea55
commit
1cb9bd08ba
@ -0,0 +1,2 @@ |
||||
#!/bin/sh |
||||
sudo apt-get update && sudo apt-get install python python-apt aptitude |
@ -0,0 +1,13 @@ |
||||
--- |
||||
- hosts: new-office |
||||
become: yes |
||||
become_method: sudo |
||||
roles: |
||||
- common |
||||
- core |
||||
- hardware |
||||
- devel |
||||
- generate-hosts |
||||
- auth |
||||
- nfs |
||||
- csc-packages |
@ -0,0 +1,66 @@ |
||||
[libdefaults] |
||||
default_realm = CSCLUB.UWATERLOO.CA |
||||
forwardable = true |
||||
proxiable = true |
||||
dns_lookup_kdc = false |
||||
dns_lookup_realm = false |
||||
|
||||
[realms] |
||||
CSCLUB.UWATERLOO.CA = { |
||||
kdc = kdc1.csclub.uwaterloo.ca |
||||
kdc = kdc2.csclub.uwaterloo.ca |
||||
admin_server = kadmin.csclub.uwaterloo.ca |
||||
} |
||||
|
||||
STUDENT.CS.UWATERLOO.CA = { |
||||
kdc = eponina.student.cs.uwaterloo.ca:88 |
||||
kdc = canadenis.student.cs.uwaterloo.ca:88 |
||||
admin_server = canadenis.student.cs.uwaterloo.ca:464 |
||||
} |
||||
|
||||
CS.UWATERLOO.CA = { |
||||
kdc = intacta.cs.uwaterloo.ca:88 |
||||
kdc = serverus.cs.uwaterloo.ca:88 |
||||
admin_server = intacta.cs.uwaterloo.ca:464 |
||||
} |
||||
|
||||
ADS.UWATERLOO.CA = { |
||||
kdc = ads.uwaterloo.ca:88 |
||||
admin_server = ads.uwaterloo.ca:464 |
||||
default_domain = ads.uwaterloo.ca |
||||
} |
||||
|
||||
NEXUS.UWATERLOO.CA = { |
||||
kdc = nexus.uwaterloo.ca:88 |
||||
kdc = nexus.uwaterloo.ca |
||||
admin_server = nexus.uwaterloo.ca:464 |
||||
} |
||||
|
||||
[domain_realm] |
||||
.uwaterloo.ca = ADS.UWATERLOO.CA |
||||
uwaterloo.ca = ADS.UWATERLOO.CA |
||||
.csclub.uwaterloo.ca = CSCLUB.UWATERLOO.CA |
||||
csclub.uwaterloo.ca = CSCLUB.UWATERLOO.CA |
||||
.nexus.uwaterloo.ca = NEXUS.UWATERLOO.CA |
||||
nexus.uwaterloo.ca = NEXUS.UWATERLOO.CA |
||||
.cs.uwaterloo.ca = CS.UWATERLOO.CA |
||||
cs.uwaterloo.ca = CS.UWATERLOO.CA |
||||
.student.cs.uwaterloo.ca = STUDENT.CS.UWATERLOO.CA |
||||
student.cs.uwaterloo.ca = STUDENT.CS.UWATERLOO.CA |
||||
|
||||
[logging] |
||||
kdc = FILE:/var/log/krb5kdc.log |
||||
admin_server = FILE:/var/log/kadmin.log |
||||
default = FILE:/var/log/krb5.log |
||||
|
||||
|
||||
#[dbmodules] |
||||
# openldap_ldapconf = { |
||||
# db_library = kldap |
||||
# ldap_kerberos_container_dn = "cn=kerberos,dc=csclub,dc=uwaterloo,dc=ca" |
||||
# ldap_kdc_dn = "cn=kerberos-kdc,dc=csclub,dc=uwaterloo,dc=ca" |
||||
# ldap_kadmind_dn = "cn=kerberos-admin,dc=csclub,dc=uwaterloo,dc=ca" |
||||
# ldap_service_password_file = /etc/krb5kdc/service.keyfile |
||||
# ldap_servers = ldapi:/// |
||||
# } |
||||
|
@ -0,0 +1,16 @@ |
||||
# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04 19:57:01 kurt Exp $ |
||||
# |
||||
# LDAP Defaults |
||||
# |
||||
|
||||
# See ldap.conf(5) for details |
||||
# This file should be world readable but not world writable. |
||||
|
||||
BASE dc=csclub, dc=uwaterloo, dc=ca |
||||
URI ldap://ldap1.csclub.uwaterloo.ca ldap://ldap2.csclub.uwaterloo.ca |
||||
|
||||
SIZELIMIT 0 |
||||
|
||||
TLS_CACERT /etc/ssl/certs/GlobalSign_Intermediate_Root_SHA256_G2.pem |
||||
TLS_CACERTFILE /etc/ssl/certs/GlobalSign_Intermediate_Root_SHA256_G2.pem |
||||
|
@ -0,0 +1,25 @@ |
||||
# This is the ssh client system-wide configuration file. See |
||||
# ssh_config(5) for more information. This file provides defaults for |
||||
# users, and the values can be changed in per-user configuration files |
||||
# or on the command line. |
||||
|
||||
# Configuration data is parsed as follows: |
||||
# 1. command line options |
||||
# 2. user-specific file |
||||
# 3. system-wide file |
||||
# Any configuration value is only changed the first time it is set. |
||||
# Thus, host-specific definitions should be at the beginning of the |
||||
# configuration file, and defaults at the end. |
||||
|
||||
# Site-wide defaults for some commonly used options. For a comprehensive |
||||
# list of available options, their meanings and defaults, please see the |
||||
# ssh_config(5) man page. |
||||
|
||||
Host * |
||||
SendEnv LANG LC_* |
||||
GSSAPITrustDns yes |
||||
GSSAPIKeyExchange yes |
||||
|
||||
GSSAPIAuthentication yes |
||||
GSSAPIDelegateCredentials yes |
||||
UseRoaming no |
@ -0,0 +1,64 @@ |
||||
# Package generated configuration file |
||||
# See the sshd(8) manpage for details |
||||
|
||||
# What ports, IPs and protocols we listen for |
||||
Port 22 |
||||
|
||||
# Use only protocol version 2 |
||||
Protocol 2 |
||||
|
||||
# HostKeys for protocol version 2 |
||||
HostKey /etc/ssh/ssh_host_ed25519_key |
||||
HostKey /etc/ssh/ssh_host_rsa_key |
||||
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256 |
||||
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr |
||||
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,umac-128@openssh.com |
||||
|
||||
# Privilege Separation is turned on for security |
||||
UsePrivilegeSeparation yes |
||||
|
||||
# Logging |
||||
SyslogFacility AUTH |
||||
LogLevel INFO |
||||
|
||||
# Authentication |
||||
UsePAM yes |
||||
StrictModes yes |
||||
PermitRootLogin yes |
||||
LoginGraceTime 120 |
||||
MaxStartups 25:30:100 |
||||
|
||||
# password authentication via PAM (single sign-on initial case) |
||||
PasswordAuthentication yes |
||||
PermitEmptyPasswords no |
||||
|
||||
# keyboard-interactive authentication (like password, works with +needchange) |
||||
ChallengeResponseAuthentication yes |
||||
|
||||
# kerberos (single sign-on already authenticated case) |
||||
GSSAPIAuthentication yes |
||||
GSSAPIKeyExchange yes |
||||
GSSAPICleanupCredentials yes |
||||
|
||||
# public key authentication with authorized_keys |
||||
PubkeyAuthentication yes |
||||
|
||||
# no single sign-on via hosts.equiv; we use kerberos |
||||
HostbasedAuthentication no |
||||
IgnoreRhosts yes |
||||
|
||||
# no builtin kerberos auth with password, we do the same via pam_krb5 |
||||
KerberosAuthentication no |
||||
|
||||
# allow X forwarding |
||||
X11Forwarding yes |
||||
X11DisplayOffset 10 |
||||
|
||||
# PAM prints these already |
||||
PrintMotd no |
||||
PrintLastLog no |
||||
|
||||
# Allow client to pass locale environment variables |
||||
AcceptEnv LANG LC_* |
||||
|
||||
Subsystem sftp /usr/lib/openssh/sftp-server |
@ -0,0 +1,28 @@ |
||||
[sssd] |
||||
config_file_version = 2 |
||||
services = nss, pam, sudo |
||||
domains = csclub.uwaterloo.ca |
||||
|
||||
[domain/csclub.uwaterloo.ca] |
||||
cache_credentials = true |
||||
enumerate = true |
||||
|
||||
id_provider = ldap |
||||
auth_provider = krb5 |
||||
sudo_provider = ldap |
||||
entry_cache_timeout = 600 |
||||
|
||||
ldap_uri = ldaps://ldap1.csclub.uwaterloo.ca,ldaps://ldap2.csclub.uwaterloo.ca |
||||
ldap_tls_cacert = /etc/ssl/certs/GlobalSign_Intermediate_Root_SHA256_G2.pem |
||||
ldap_tls_reqcert = demand |
||||
ldap_search_base = dc=csclub,dc=uwaterloo,dc=ca |
||||
ldap_schema = rfc2307bis |
||||
ldap_group_member = uniqueMember |
||||
|
||||
ldap_user_search_base = ou=People,dc=csclub,dc=uwaterloo,dc=ca |
||||
ldap_group_search_base = ou=Group,dc=csclub,dc=uwaterloo,dc=ca |
||||
ldap_sudo_search_base = ou=SUDOers,dc=csclub,dc=uwaterloo,dc=ca |
||||
|
||||
krb5_realm = CSCLUB.UWATERLOO.CA |
||||
krb5_server = kdc1.csclub.uwaterloo.ca,kdc2.csclub.uwaterloo.ca |
||||
krb5_kpasswd = kadmin.csclub.uwaterloo.ca |
@ -0,0 +1,54 @@ |
||||
--- |
||||
|
||||
- name: install libpam-csc |
||||
apt: name=libpam-csc state=latest |
||||
|
||||
- name: install required aptitude packages |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- krb5-user |
||||
- ldap-utils |
||||
- sssd |
||||
- sssd-tools |
||||
|
||||
- name: install ubuntu sss pam and nss |
||||
apt: name={{ item }} state=latest |
||||
when: ansible_distribution == 'Ubuntu' |
||||
with_items: |
||||
- libnss-sss |
||||
- libpam-sss |
||||
|
||||
- name: copy over configs |
||||
template: src={{ item.src }} dest={{ item.dest }} |
||||
with_items: |
||||
- { src: 'krb5.conf', dest: '/etc/krb5.conf' } |
||||
- { src: 'ldap.conf', dest: '/etc/ldap/ldap.conf' } |
||||
- { src: 'sssd.conf', dest: '/etc/sssd/sssd.conf' } |
||||
- { src: 'sshd_config', dest: '/etc/ssh/sshd_config' } |
||||
- { src: 'ssh_config', dest: '/etc/ssh/ssh_config' } |
||||
|
||||
- name: configure PAM for syscom machine |
||||
when: syscom |
||||
blockinfile: |
||||
dest: /etc/pam.d/common-account |
||||
block: | |
||||
# make sure user is up to date, except system accounts and syscom |
||||
account [success=2 default=ignore] pam_succeed_if.so quiet uid < 10000 |
||||
account [success=1 default=ignore] pam_succeed_if.so quiet user ingroup syscom |
||||
account required pam_deny.so |
||||
|
||||
- name: configure PAM for regular machine |
||||
when: not syscom |
||||
blockinfile: |
||||
dest: /etc/pam.d/common-account |
||||
block: | |
||||
# make sure user is up to date, except system accounts and syscom |
||||
account [success=2 default=ignore] pam_succeed_if.so quiet uid < 10000 |
||||
account [success=1 default=ignore] pam_succeed_if.so quiet user ingroup syscom |
||||
account required pam_csc.so |
||||
|
||||
- name: restart services |
||||
service: name={{ item }} state=restarted |
||||
with_items: |
||||
- sssd |
||||
- ssh |
@ -0,0 +1,29 @@ |
||||
--- |
||||
|
||||
- name: Install git |
||||
apt: name=git state=latest |
||||
|
||||
- name: install etckeeper |
||||
apt: name=etckeeper state=present |
||||
register: etckeeper |
||||
|
||||
- name: update etckeeper VCS |
||||
lineinfile: dest=/etc/etckeeper/etckeeper.conf |
||||
state=present |
||||
backrefs=yes |
||||
regexp={{ item.regex }} |
||||
line={{ item.line }} |
||||
with_items: |
||||
- { regex: '^(VCS=.*)$', line: '#\1' } |
||||
- { regex: '^#(VCS=\"git\")$', line: '\1' } |
||||
when: etckeeper.changed == true |
||||
|
||||
- name: re-initialize etckeeper with git |
||||
command: "{{ item }}" |
||||
with_items: |
||||
- 'etckeeper uninit -f' |
||||
- 'etckeeper init' |
||||
- 'etckeeper commit "Initial commit"' |
||||
args: |
||||
chdir: /etc |
||||
when: etckeeper.changed == true |
@ -0,0 +1,27 @@ |
||||
--- |
||||
|
||||
- name: Add debian.csclub.uwaterloo.ca GPG key |
||||
apt_key: url=http://debian.csclub.uwaterloo.ca/csclub.asc state=present |
||||
|
||||
- name: Add debian.csclub.uwaterloo.ca repository |
||||
apt_repository: repo="{{ item }}" state=present |
||||
with_items: |
||||
- "deb http://debian.csclub.uwaterloo.ca/ {{ ansible_distribution_release }} main" |
||||
- "deb-src http://debian.csclub.uwaterloo.ca/ {{ ansible_distribution_release }} main" |
||||
|
||||
- name: Update apt and packages (if just installed unlikely) |
||||
package: update_cache=yes upgrade=safe |
||||
|
||||
- name: ensure directories exist |
||||
file: path={{ item }} state=directory |
||||
with_items: |
||||
- /etc/opt/chrome/policies/managed/ |
||||
- /etc/firefox |
||||
|
||||
- name: copy chrome managed policy |
||||
copy: src={{ item.src }} dest={{ item.dest }} backup=no |
||||
with_items: |
||||
- { src: 'files/web-kerberos/chrome.json', dest: '/etc/opt/chrome/policies/managed/csc-kerberos.json' } |
||||
- { src: 'files/web-kerberos/firefox.js', dest: '/etc/firefox/syspref.js' } |
||||
|
||||
- include: etckeeper.yml |
@ -0,0 +1,120 @@ |
||||
--- |
||||
|
||||
- name: Install Shells |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- bash |
||||
- zsh |
||||
- zsh-doc |
||||
- dash |
||||
- ksh |
||||
- tcsh |
||||
- csh |
||||
- rc |
||||
- bash-doc |
||||
- bash-completion |
||||
- bashdb |
||||
|
||||
- name: Install Editors |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- vim-nox |
||||
- ed |
||||
- nano |
||||
|
||||
- name: Install words |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- wamerican-insane |
||||
|
||||
- name: Install utils |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- acl |
||||
- tmux |
||||
- screen |
||||
- less |
||||
- lsof |
||||
- bc |
||||
- dc |
||||
- psmisc |
||||
- procps |
||||
- htop |
||||
- schedtool |
||||
- pciutils |
||||
- rsync |
||||
|
||||
- name: Install compression |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- bzip2 |
||||
- gzip |
||||
- pax |
||||
- lzma |
||||
- xz-utils |
||||
- cpio |
||||
|
||||
- name: Install ncurses |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- ncurses-bin |
||||
- ncurses-term |
||||
|
||||
- name: Install network |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- iputils-ping |
||||
- iputils-arping |
||||
- traceroute |
||||
- telnet |
||||
- iproute2 |
||||
- ethtool |
||||
- dnsutils |
||||
- whois |
||||
- wget |
||||
- curl |
||||
- netcat-traditional |
||||
- netcat-openbsd |
||||
- vlan |
||||
- bridge-utils |
||||
- tcpdump |
||||
- tshark |
||||
- ftp |
||||
- tftp |
||||
|
||||
- name: Install ntp |
||||
apt: name=ntp state=latest |
||||
|
||||
- name: Install debian package management |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- aptitude |
||||
- dselect |
||||
|
||||
- name: Install gpg |
||||
apt: name=gnupg state=latest |
||||
|
||||
- name: Install fail2ban |
||||
apt: name=fail2ban state=latest |
||||
|
||||
- name: Install man pages |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- manpages |
||||
- info |
||||
|
||||
- name: Install rsyslog |
||||
apt: name=rsyslog state=latest |
||||
|
||||
- name: Install molly-guard |
||||
apt: name=molly-guard state=latest |
||||
|
||||
- name: Install ssmtp |
||||
apt: name=ssmtp state=latest |
||||
|
||||
- name: Configure ssmtp |
||||
lineinfile: dest=/etc/ssmtp/ssmtp.conf |
||||
state=present |
||||
backrefs=yes |
||||
regexp='^#(FromLineOverride=YES)$' |
||||
line='\\1' |
@ -0,0 +1,7 @@ |
||||
--- |
||||
|
||||
- name: Install CSC packages |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- ceo-python |
||||
- library |
@ -0,0 +1,378 @@ |
||||
--- |
||||
|
||||
- name: Install build essentials |
||||
apt: name=build-essential state=latest |
||||
|
||||
- name: Install debian dev stuff |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- dpkg-dev |
||||
- devscripts |
||||
- debootstrap |
||||
- dupload |
||||
- fakeroot |
||||
- debhelper |
||||
- dh-make |
||||
- dh-make-perl |
||||
- dh-buildinfo |
||||
- cdbs |
||||
- dpatch |
||||
- kernel-package |
||||
- lintian |
||||
- alien |
||||
- po-debconf |
||||
- pbuilder |
||||
- dpkg-repack |
||||
|
||||
- name: Install build helpers |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- make |
||||
- make-doc |
||||
- autoconf |
||||
- autoconf-doc |
||||
- automake |
||||
- cmake |
||||
- ccache |
||||
- ant |
||||
- ant-optional |
||||
- scons |
||||
- qt5-qmake |
||||
- qt4-qmake |
||||
- autogen |
||||
- autotools-dev |
||||
- autoproject |
||||
- kbuild |
||||
|
||||
- name: Install OpenJDK |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- openjdk-8-jdk |
||||
|
||||
- name: Install Debuggers |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- strace |
||||
- gdb |
||||
- elfutils |
||||
- valgrind |
||||
- libc6-dbg |
||||
|
||||
- name: Install interpreters |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- python3 |
||||
- python |
||||
- perl |
||||
- ruby |
||||
|
||||
- name: Install dev docs |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- manpages-dev |
||||
- gcc-doc |
||||
- cpp-doc |
||||
- binutils-doc |
||||
- manpages-posix-dev |
||||
- glibc-doc |
||||
- glibc-doc-reference |
||||
- gdb-doc |
||||
- stl-manual |
||||
- perl-doc |
||||
|
||||
- name: Install x86 assembly tools |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- bin86 |
||||
- nasm |
||||
- yasm |
||||
|
||||
- name: Install scanning and parsing utils |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- flex |
||||
- flex-doc |
||||
- bison |
||||
- bison-doc |
||||
- ragel |
||||
- byacc |
||||
- re2c |
||||
|
||||
- name: Install VCS |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- git |
||||
- git-email |
||||
- git-cvs |
||||
- git-svn |
||||
- git-arch |
||||
- git-doc |
||||
- git-buildpackage |
||||
- mercurial |
||||
- subversion |
||||
- subversion-tools |
||||
- darcs |
||||
- bzr |
||||
- bzrtools |
||||
- cvs |
||||
- cvsps |
||||
- wdiff |
||||
- colordiff |
||||
- patch |
||||
- patchutils |
||||
- quilt |
||||
- gitk |
||||
- git-gui |
||||
- diffutils |
||||
- tkdiff |
||||
|
||||
- name: Install mono |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- mono-complete |
||||
- mono-devel |
||||
- mono-profiler |
||||
- mono-tools-devel |
||||
- mono-tools-gui |
||||
- mono-vbnc |
||||
|
||||
- name: Install haskell |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- ghc |
||||
- ghc-doc |
||||
- haskell-platform |
||||
|
||||
- name: Install ocaml |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- ocaml |
||||
- camlp4 |
||||
|
||||
- name: Install python and libs |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- python3-virtualenv |
||||
- python3-pip |
||||
- python3-all-dev |
||||
- python-pip |
||||
- python-virtualenv |
||||
- drpython |
||||
- ipython |
||||
- pylint |
||||
- pychecker |
||||
- pyflakes |
||||
- python-all-dev |
||||
- python-m2crypto |
||||
- python-mysqldb |
||||
- python-imaging |
||||
- python-libxml2 |
||||
- python-libxslt1 |
||||
- python-numpy |
||||
- python-numpy-doc |
||||
- python-twisted |
||||
- python-openssl |
||||
- python-pexpect |
||||
- python-pyasn1 |
||||
- python-pysnmp4 |
||||
- python-sqlobject |
||||
- python-subversion |
||||
- python-urwid |
||||
- python-xmpp |
||||
- python-beautifulsoup |
||||
- python-chardet |
||||
- python-kerberos |
||||
- python-mako |
||||
- python-pyme |
||||
- python-rpm |
||||
- python-selinux |
||||
- python-setuptools |
||||
- python-simplejson |
||||
- python-sqlite |
||||
- python-sqlitecachec |
||||
- python-urlgrabber |
||||
- python-cups |
||||
- python-notify |
||||
- python-tk |
||||
- jython |
||||
- jython-doc |
||||
|
||||
- name: Install ruby |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- ruby-dev |
||||
- rake |
||||
|
||||
- name: Install llvm |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- clang |
||||
- llvm |
||||
- llvm-dev |
||||
|
||||
- name: Install scheme/racket |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- racket |
||||
- racket-doc |
||||
- scheme2c |
||||
- guile-1.8 |
||||
- guile-1.8-dev |
||||
- tinyscheme |
||||
- chicken-bin |
||||
- mit-scheme-doc |
||||
- scheme9 |
||||
- stalin |
||||
|
||||
- name: Install tcl/tk |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- tcl |
||||
- tcl-dev |
||||
- tcl8.5 |
||||
- tk |
||||
- tk-dev |
||||
|
||||
- name: Install lua |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- lua5.3 |
||||
- liblua5.3-dev |
||||
|
||||
- name: Install misc scripting |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- swig |
||||
- gawk |
||||
- mawk |
||||
- m4 |
||||
|
||||
- name: Install misc languages |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- gfortran |
||||
- erlang |
||||
- erlang-dev |
||||
- beef |
||||
- intercal |
||||
- php-cli |
||||
- rhino |
||||
- sbcl |
||||
|
||||
- name: Install AVR tools |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- gcc-avr |
||||
- binutils-avr |
||||
- gdb-avr |
||||
- avrdude |
||||
- avrdude-doc |
||||
- simulavr |
||||
- avarice |
||||
- avr-libc |
||||
- avra |
||||
- avrp |
||||
- uisp |
||||
- usbprog |
||||
|
||||
- name: Install misc libs |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- libpam2-dev |
||||
- libpam0g-dev |
||||
- comerr-dev |
||||
- e2fslibs-dev |
||||
- libcap-dev |
||||
- libattr1-dev |
||||
- libacl1-dev |
||||
- libselinux1-dev |
||||
- libpcre3-dev |
||||
- libapt-pkg-dev |
||||
- linux-libc-dev |
||||
- libkrb5-dev |
||||
- libgnutls-dev |
||||
- libreadline-dev |
||||
- libncurses5-dev |
||||
- libncursesw5-dev |
||||
- libghc-mtl-dev |
||||
- libghc-mtl-prof |
||||
- libghc-mtl-doc |
||||
- libghc-network-dev |
||||
- libghc-parsec3-dev |
||||
- libboost-dev |
||||
- zlib1g-dev |
||||
- libbz2-dev |
||||
- libcurl4-gnutls-dev |
||||
- libexpat1-dev |
||||
- libglib2.0-dev |
||||
- libgmp3-dev |
||||
- libsasl2-dev |
||||
- libsctp-dev |
||||
- libsqlite3-dev |
||||
- libssl-dev |
||||
- libxml2-dev |
||||
- libxslt1-dev |
||||
- ss-dev |
||||
- mesa-common-dev |
||||
- uuid-dev |
||||
- libprotobuf-c-dev |
||||
- libprotobuf-dev |
||||
- libffi-dev |
||||
- libidl-dev |
||||
- libelf-dev |
||||
- libdw-dev |
||||
- libaudit-dev |
||||
- libgmp-dev |
||||
- libmpfr-dev |
||||
- libmpc-dev |
||||
- libfplll-dev |
||||
|
||||
- name: Install x11 libs |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- xorg-dev |
||||
- libgtk2.0-dev |
||||
- libqt4-dev |
||||
- libsdl1.2-dev |
||||
- freeglut3-dev |
||||
- libgl1-mesa-dev |
||||
- libglu1-mesa-dev |
||||
- libghc-x11-dev |
||||
- libghc-x11-doc |
||||
- libghc-x11-prof |
||||
- libgtkmm-2.4-dev |
||||
- glade |
||||
- xutils-dev |
||||
|
||||
- name: Install IDEs |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- eclipse |
||||
- monodevelop |
||||
|
||||
- name: Install cross toolchains |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- gcc-5-arm-linux-gnueabi |
||||
- gcc-5-mips-linux-gnu |
||||
- gcc-5-mipsel-linux-gnu |
||||
- gcc-5-powerpc-linux-gnu |
||||
- gcc-5-sparc64-linux-gnu |
||||
- gcc-5-s390x-linux-gnu |
||||
|
||||
- name: Install misc dev tools |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- gperf |
||||
- gettext |
||||
- check |
||||
- dejagnu |
||||
- doxygen |
||||
- exuberant-ctags |
||||
- indent |
||||
- cutils |
||||
- chrpath |
||||
- openmpi-bin |
||||
- openmpi-doc |
||||
- protobuf-compiler |
||||
- protobuf-c-compiler |
@ -0,0 +1,13 @@ |
||||
--- |
||||
- name: update hosts |
||||
connection: local |
||||
become: no |
||||
git: repo=~git/public/hosts.git dest=generate-hosts |
||||
|
||||
- name: generate hosts file |
||||
connection: local |
||||
become: no |
||||
shell: generate-hosts/generate-hosts.py < generate-hosts/hosts.in > generate-hosts/hosts |
||||
|
||||
- name: copy hosts file |
||||
copy: src=generate-hosts/hosts dest=/etc/hosts backup=yes |
@ -0,0 +1,18 @@ |
||||
--- |
||||
|
||||
- name: Install hardware probing tools |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- lm-sensors |
||||
- smartmontools |
||||
- hwinfo |
||||
- lshw |
||||
- acpi |
||||
|
||||
- name: Install framebuffer stuff |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- vbetool |
||||
- fbset |
||||
- read-edid |
||||
|
@ -0,0 +1,30 @@ |
||||
--- |
||||
|
||||
- name: Install nfs-common |
||||
apt: name=nfs-common state=latest |
||||
|
||||
- name: change NEED_GSSD to NEED_GSSD=1 |
||||
lineinfile: dest=/etc/default/nfs-common |
||||
state=present |
||||
backrefs=yes |
||||
regexp='^NEED_GSSD=$' |
||||
line='NEED_GSSD=1' |
||||
|
||||
- name: restart and enable rpc-gssd |
||||
service: name=rpc-gssd state=started enabled=yes |
||||
|
||||
- name: ensure mountpoints exist |
||||
file: path={{ item }} state=directory |
||||
with_items: |
||||
- /users |
||||
- /music |
||||
- /scratch |
||||
|
||||
- name: Add fstab entry for users |
||||
mount: src="aspartame:/users" name=/users fstype=nfs opts="bg,vers=3,sec=krb5,nosuid,nodev" dump=0 passno=0 state=mounted |
||||
|
||||
- name: Add fstab entry for music |
||||
mount: src="aspartame:/music" name=/music fstype=nfs opts="bg,vers=3,sec=sys,nolock,noatime,nosuid,nodev" dump=0 passno=0 state=mounted |
||||
|
||||
- name: Add fstab entry for scratch |
||||
mount: src="corn-syrup:/scratch" name=/scratch fstype=nfs opts="bg,vers=3,sec=sys,noatime,nosuid,nodev" dump=0 passno=0 state=mounted |
@ -0,0 +1,13 @@ |
||||
--- |
||||
|
||||
- name: Install Ubuntu desktop metapackages |
||||
apt: name={{ item }} state=latest |
||||
with_items: |
||||
- ubuntu-desktop |
||||
- kubuntu-desktop |
||||
- edubuntu-desktop |
||||
- lubuntu-desktop |
||||
- mate-desktop-environment |
||||
- cinnamon-desktop-environment |
||||
- ubuntustudio-desktop |
||||
- xubuntu-desktop |
Loading…
Reference in new issue