Use static ip for lan network for now to get NFS access to home directories. Still require kerberos for role directories.
61 lines
1.2 KiB
YAML
61 lines
1.2 KiB
YAML
---
|
|
- import_playbook: "include/deploy-kvm-guest.yml myhosts=shell"
|
|
|
|
- name: configure instance
|
|
hosts: shell
|
|
user: root
|
|
gather_facts: true
|
|
|
|
vars_files:
|
|
- "{{ ansible_private }}/vars.yml"
|
|
|
|
roles:
|
|
- base
|
|
- role: kerberos/keytab
|
|
principals:
|
|
- "host/{{ inventory_hostname }}@{{ kerberos_realm }}"
|
|
- "nfs/{{ inventory_hostname }}@{{ kerberos_realm }}"
|
|
- nfs-client
|
|
- sssd
|
|
- autofs
|
|
- thinlinc-server
|
|
|
|
tasks:
|
|
- name: install extra package groups
|
|
dnf:
|
|
name:
|
|
- "@development"
|
|
- "@fonts"
|
|
- "@gnome-desktop"
|
|
- "@workstation-product"
|
|
state: installed
|
|
exclude:
|
|
- fprintd-pam
|
|
- gnome-initial-setup
|
|
|
|
- name: install extra packages
|
|
package:
|
|
name: "{{ package }}"
|
|
state: installed
|
|
with_items:
|
|
- emacs
|
|
- kernel-doc
|
|
- php-cli
|
|
- rpmlint
|
|
- tcsh
|
|
- thunderbird
|
|
- tmux
|
|
- whois
|
|
- wireshark
|
|
- zsh
|
|
loop_control:
|
|
loop_var: package
|
|
|
|
- name: add software packaged in roles
|
|
include_role:
|
|
name: "{{ role }}"
|
|
with_items:
|
|
- google-chrome
|
|
- mutt
|
|
loop_control:
|
|
loop_var: role
|