boh, ha smesso di andare... non ci capisco un cazzo
This commit is contained in:
parent
2d82ebe140
commit
4906a4b734
8 changed files with 79 additions and 22 deletions
|
@ -8,16 +8,14 @@
|
|||
tasks:
|
||||
- name: Wait until SSH is fully ready (Ansible login confirms availability)
|
||||
ansible.builtin.wait_for_connection:
|
||||
timeout: 300 # fino a 5 minuti (essere generosi per bootstrap lento)
|
||||
delay: 5 # aspetta 5s prima di cominciare i tentativi
|
||||
|
||||
timeout: 600 # fino a 10 minuti (essere generosi per bootstrap lento)
|
||||
delay: 5 # aspetta 5s prima di cominciare i tentativi
|
||||
|
||||
- name: Ensure apt cache is updated (idempotent)
|
||||
ansible.builtin.apt:
|
||||
update_cache: yes
|
||||
# non vogliamo che il primo apt rallenti la connessione dopo wait_for_connection,
|
||||
# ma questo garantisce che i task successivi usino pacchetti aggiornati.
|
||||
|
||||
|
||||
- name: Ensure SSH is installed
|
||||
ansible.builtin.apt:
|
||||
|
@ -25,36 +23,38 @@
|
|||
state: present
|
||||
update_cache: yes
|
||||
|
||||
|
||||
- name: Ensure SSH is running
|
||||
ansible.builtin.systemd:
|
||||
name: ssh
|
||||
state: started
|
||||
enabled: yes
|
||||
|
||||
|
||||
- name: Configure SSH to allow root login
|
||||
ansible.builtin.lineinfile:
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^#?PermitRootLogin'
|
||||
line: 'PermitRootLogin yes'
|
||||
regexp: "^#?PermitRootLogin"
|
||||
line: "PermitRootLogin yes"
|
||||
notify: Restart SSH
|
||||
|
||||
|
||||
- name: Ensure .ssh directory exists
|
||||
ansible.builtin.file:
|
||||
path: /root/.ssh
|
||||
state: directory
|
||||
mode: '0700'
|
||||
mode: "0700"
|
||||
owner: root
|
||||
group: root
|
||||
|
||||
|
||||
- name: Install authorized_keys for root
|
||||
ansible.builtin.copy:
|
||||
dest: /root/.ssh/authorized_keys
|
||||
content: "{{ ssh_public_key }}"
|
||||
mode: '0600'
|
||||
mode: "0600"
|
||||
owner: root
|
||||
group: root
|
||||
|
||||
#add restart handler
|
||||
handlers:
|
||||
- name: Restart SSH
|
||||
ansible.builtin.systemd:
|
||||
name: ssh
|
||||
state: restarted
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue