panxiao81
88a02ababa
Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
62 lines
1.9 KiB
YAML
62 lines
1.9 KiB
YAML
---
|
|
# Baseline every lab VM needs to be manageable. Cloud-init installs these on a
|
|
# FRESH VM; this role covers VMs that already exist (cloud-init's package module
|
|
# runs once per instance) and repairs any that failed a WAN blip on first boot.
|
|
|
|
# The WAN drops mid-transaction often enough that dpkg gets left interrupted
|
|
# ("dpkg was interrupted, you must manually run 'sudo dpkg --configure -a'"),
|
|
# after which EVERY later apt run fails. Repair it rather than fail the play.
|
|
- name: Detect an interrupted dpkg
|
|
ansible.builtin.command:
|
|
cmd: dpkg --audit
|
|
register: _dpkg_audit
|
|
changed_when: false
|
|
failed_when: false
|
|
check_mode: false
|
|
|
|
- name: Repair interrupted dpkg
|
|
ansible.builtin.command:
|
|
cmd: dpkg --configure -a
|
|
when: (_dpkg_audit.stdout | default('') | trim) | length > 0
|
|
changed_when: true
|
|
|
|
|
|
# Repair dpkg if a previous apt run was cut short. NOTE the usual cause is an
|
|
# operator stopping/rebooting the VM while cloud-init or apt is still running --
|
|
# not a network fault. Check `cloud-init status` before power-cycling a fresh VM.
|
|
- name: Detect an interrupted dpkg
|
|
ansible.builtin.command:
|
|
cmd: dpkg --audit
|
|
register: _dpkg_audit
|
|
changed_when: false
|
|
failed_when: false
|
|
check_mode: false
|
|
|
|
- name: Repair interrupted dpkg
|
|
ansible.builtin.command:
|
|
cmd: dpkg --configure -a
|
|
when: (_dpkg_audit.stdout | default('') | trim) | length > 0
|
|
changed_when: true
|
|
|
|
- name: Install guest baseline packages
|
|
ansible.builtin.apt:
|
|
name:
|
|
# Gives PVE the guest's IPs, clean shutdown, and fsfreeze for snapshots.
|
|
# Without it `qm agent <id> ping` fails and PVE is blind inside the guest.
|
|
- qemu-guest-agent
|
|
- openssh-server
|
|
state: present
|
|
update_cache: true
|
|
cache_valid_time: 3600
|
|
register: _gb
|
|
retries: 3
|
|
delay: 15
|
|
until: _gb is succeeded
|
|
|
|
- name: Enable the guest agent and sshd
|
|
ansible.builtin.systemd_service:
|
|
name: "{{ item }}"
|
|
enabled: true
|
|
state: started
|
|
loop: [qemu-guest-agent, ssh]
|