151 lines
4.2 KiB
YAML
151 lines
4.2 KiB
YAML
---
|
|
# tasks file for bareos_repository
|
|
|
|
- name: Import assert.yml
|
|
ansible.builtin.import_tasks:
|
|
file: assert.yml
|
|
run_once: true
|
|
delegate_to: localhost
|
|
|
|
- name: Add repository (rpm)
|
|
ansible.builtin.yum_repository:
|
|
name: "{{ item.name }}"
|
|
description: "{{ item.description }}"
|
|
baseurl: "{{ item.baseurl }}"
|
|
gpgcheck: yes
|
|
gpgkey: "{{ item.gpgkey }}"
|
|
username: "{{ item.username | default(omit) }}"
|
|
password: "{{ item.password | default(omit) }}"
|
|
no_log: true
|
|
loop: "{{ bareos_repository_list }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when:
|
|
- ansible_pkg_mgr in [ "dnf", "yum" ]
|
|
|
|
- name: Run tasks on apt based distributions
|
|
when:
|
|
- ansible_pkg_mgr in [ "apt" ]
|
|
block:
|
|
- name: Install CA certificates (apt)
|
|
ansible.builtin.package:
|
|
name: ca-certificates
|
|
|
|
- name: Download gpg key (apt)
|
|
ansible.builtin.get_url:
|
|
url: "{{ bareos_repository_gpg_key }}"
|
|
dest: /etc/apt/bareos.gpg
|
|
username: "{{ bareos_repository_username }}"
|
|
password: "{{ bareos_repository_password }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
no_log: true
|
|
|
|
- name: Place credentials file (apt)
|
|
ansible.builtin.copy:
|
|
content: |
|
|
machine download.bareos.com
|
|
login {{ bareos_repository_username }}
|
|
password {{ bareos_repository_password }}
|
|
dest: /etc/apt/auth.conf.d/download_bareos_com.conf
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|
|
no_log: true
|
|
when:
|
|
- bareos_repository_type == "subscription"
|
|
|
|
- name: Add repository (apt)
|
|
ansible.builtin.apt_repository:
|
|
repo: "{{ item.deb_repo }}"
|
|
state: present
|
|
filename: "{{ item.name }}"
|
|
update_cache: yes
|
|
no_log: true
|
|
loop: "{{ bareos_repository_list }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
|
|
- name: Run tasks on zypper based distributions
|
|
when:
|
|
- ansible_pkg_mgr in [ "zypper" ]
|
|
block:
|
|
- name: Download gpg key (zypper)
|
|
ansible.builtin.get_url:
|
|
url: "{{ bareos_repository_gpg_key }}"
|
|
dest: /etc/gnupg/bareos.gpg
|
|
username: "{{ bareos_repository_username }}"
|
|
password: "{{ bareos_repository_password }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
no_log: true
|
|
|
|
- name: Import gpg key (zypper)
|
|
ansible.builtin.rpm_key:
|
|
key: /etc/gnupg/bareos.gpg
|
|
|
|
- name: Place credentials file (zypper)
|
|
ansible.builtin.copy:
|
|
content: |
|
|
username={{ bareos_repository_username }}
|
|
password={{ bareos_repository_password }}
|
|
dest: /etc/zypp/credentials.d/bareos
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|
|
no_log: true
|
|
when:
|
|
- bareos_repository_type == "subscription"
|
|
|
|
- name: Add repository (zypper)
|
|
community.general.zypper_repository:
|
|
name: "{{ item.name }}"
|
|
repo: "{{ item.repo }}"
|
|
state: present
|
|
loop: "{{ bareos_repository_list }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
|
|
- name: Enable tracebacks
|
|
when:
|
|
- bareos_repository_enable_tracebacks
|
|
block:
|
|
- name: Add debuginfo repository (rpm)
|
|
ansible.builtin.yum_repository:
|
|
name: "{{ item.name }}"
|
|
description: "{{ item.description }}"
|
|
baseurl: "{{ item.baseurl }}"
|
|
gpgcheck: yes
|
|
gpgkey: "{{ item.gpgkey }}"
|
|
username: "{{ item.username | default(omit) }}"
|
|
password: "{{ item.password | default(omit) }}"
|
|
no_log: true
|
|
loop: "{{ bareos_repository_debug_list }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when:
|
|
- ansible_pkg_mgr in [ "dnf", "yum" ]
|
|
|
|
- name: Add repository (zypper)
|
|
community.general.zypper_repository:
|
|
name: "{{ item.name }}"
|
|
repo: "{{ item.repo }}"
|
|
state: present
|
|
loop: "{{ bareos_repository_debug_list }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when:
|
|
- ansible_pkg_mgr in [ "zypper" ]
|
|
|
|
- name: Install required packages
|
|
ansible.builtin.package:
|
|
name: "{{ bareos_repository_debug_required_packages }}"
|
|
|
|
- name: Disable ptrace_scope
|
|
ansible.posix.sysctl:
|
|
name: kernel.yama.ptrace_scope
|
|
value: "0"
|
|
sysctl_set: yes
|