initial commit
This commit is contained in:
@@ -0,0 +1,80 @@
|
||||
sudo apt update
|
||||
sudo apt upgrade -y
|
||||
sudo shutdown -r now
|
||||
exit
|
||||
ssh-keygen -t rsa
|
||||
.ssh/authorized_keys
|
||||
nano .ssh/authorized_keys
|
||||
exit
|
||||
sudo apt install software-properties-common
|
||||
sudo add-apt-repository --yes --update ppa:ansible/ansible
|
||||
sudo apt install ansible
|
||||
nano /etc/ansible/hosts .
|
||||
nano /etc/ansible/hosts
|
||||
sudo nano /etc/ansible/hosts
|
||||
ansible -i hosts all -m ping
|
||||
sudo ansible -i hosts all -m ping
|
||||
cp /etc/ansible/hosts .
|
||||
ansible -i hosts all -m ping
|
||||
cat .ssh/id_rsa.pub
|
||||
ssh 10.0.1.205
|
||||
ssh 10.0.1.209
|
||||
sudo nano /etc/ansible/hosts
|
||||
ssh 10.0.1.5
|
||||
sudo nano /etc/ansible/hosts
|
||||
ssh 10.0.1.240
|
||||
ssh 10.0.1.
|
||||
ssh 10.0.1.139
|
||||
sudo nano /etc/ansible/hosts
|
||||
ssh 10.0.1.206
|
||||
ansible -i hosts all -m ping
|
||||
sudo nano /etc/ansible/hosts
|
||||
ansible -i hosts all -m ping
|
||||
sudo nano /etc/ansible/hosts
|
||||
ansible -i hosts all -m ping
|
||||
sudo nano /etc/ansible/hosts
|
||||
ansible -i hosts all -m ping
|
||||
sudo nano /etc/ansible/hosts
|
||||
ansible -i hosts all -m ping
|
||||
sudo nano /etc/ansible/hosts
|
||||
ansible -i hosts all -m ping
|
||||
sudo nano /etc/ansible/hosts
|
||||
ansible -i hosts all -m ping
|
||||
sudo nano /etc/ansible/hosts
|
||||
cp /etc/ansible/hosts .
|
||||
ansible -i hosts all -m ping
|
||||
nano hosts
|
||||
ansible -i hosts all -m ping
|
||||
nano hosts
|
||||
ansible -i hosts all -m ping
|
||||
ansible -i hosts all -m ping | less
|
||||
nano hosts
|
||||
ansible -i hosts all -m ping | less
|
||||
nano hosts
|
||||
ansible -i hosts all -m ping | less
|
||||
nano hosts
|
||||
ansible -i hosts all -m ping | less
|
||||
-m sudo apt update
|
||||
clear
|
||||
ls
|
||||
mkdir playbooks
|
||||
cd playbooks/
|
||||
nano apt-updates.yaml
|
||||
ansible-playbook apt-updates.yaml
|
||||
ansible-playbook apt-updates.yaml -K
|
||||
nano apt-updates.yaml
|
||||
cd
|
||||
nano hosts
|
||||
ansible-playbook apt-updates.yaml -K --limit media
|
||||
ansible-playbook ~/playbooks/apt-updates.yaml -K --limit media
|
||||
nano hosts
|
||||
sudo nano /etc/ansible/hosts
|
||||
sudo cp hosts /etc/ansible/
|
||||
ansible-playbook ~/playbooks/apt-updates.yaml -K --limit media
|
||||
ansible-playbook ~/playbooks/apt-updates.yaml -K --limit hermes
|
||||
cd playbooks/
|
||||
scp 10.0.1.209:/home/telot/hermes-update.yml .
|
||||
cd ..
|
||||
cd playbooks/
|
||||
ansible-playbook hermes-update.yml
|
||||
exit
|
||||
@@ -0,0 +1,7 @@
|
||||
# ~/.bash_logout: executed by bash(1) when login shell exits.
|
||||
|
||||
# when leaving the console clear the screen to increase privacy
|
||||
|
||||
if [ "$SHLVL" = 1 ]; then
|
||||
[ -x /usr/bin/clear_console ] && /usr/bin/clear_console -q
|
||||
fi
|
||||
@@ -0,0 +1,117 @@
|
||||
# ~/.bashrc: executed by bash(1) for non-login shells.
|
||||
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
|
||||
# for examples
|
||||
|
||||
# If not running interactively, don't do anything
|
||||
case $- in
|
||||
*i*) ;;
|
||||
*) return;;
|
||||
esac
|
||||
|
||||
# don't put duplicate lines or lines starting with space in the history.
|
||||
# See bash(1) for more options
|
||||
HISTCONTROL=ignoreboth
|
||||
|
||||
# append to the history file, don't overwrite it
|
||||
shopt -s histappend
|
||||
|
||||
# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
|
||||
HISTSIZE=1000
|
||||
HISTFILESIZE=2000
|
||||
|
||||
# check the window size after each command and, if necessary,
|
||||
# update the values of LINES and COLUMNS.
|
||||
shopt -s checkwinsize
|
||||
|
||||
# If set, the pattern "**" used in a pathname expansion context will
|
||||
# match all files and zero or more directories and subdirectories.
|
||||
#shopt -s globstar
|
||||
|
||||
# make less more friendly for non-text input files, see lesspipe(1)
|
||||
[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
|
||||
|
||||
# set variable identifying the chroot you work in (used in the prompt below)
|
||||
if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
|
||||
debian_chroot=$(cat /etc/debian_chroot)
|
||||
fi
|
||||
|
||||
# set a fancy prompt (non-color, unless we know we "want" color)
|
||||
case "$TERM" in
|
||||
xterm-color|*-256color) color_prompt=yes;;
|
||||
esac
|
||||
|
||||
# uncomment for a colored prompt, if the terminal has the capability; turned
|
||||
# off by default to not distract the user: the focus in a terminal window
|
||||
# should be on the output of commands, not on the prompt
|
||||
#force_color_prompt=yes
|
||||
|
||||
if [ -n "$force_color_prompt" ]; then
|
||||
if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
|
||||
# We have color support; assume it's compliant with Ecma-48
|
||||
# (ISO/IEC-6429). (Lack of such support is extremely rare, and such
|
||||
# a case would tend to support setf rather than setaf.)
|
||||
color_prompt=yes
|
||||
else
|
||||
color_prompt=
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ "$color_prompt" = yes ]; then
|
||||
PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
|
||||
else
|
||||
PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
|
||||
fi
|
||||
unset color_prompt force_color_prompt
|
||||
|
||||
# If this is an xterm set the title to user@host:dir
|
||||
case "$TERM" in
|
||||
xterm*|rxvt*)
|
||||
PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
|
||||
;;
|
||||
*)
|
||||
;;
|
||||
esac
|
||||
|
||||
# enable color support of ls and also add handy aliases
|
||||
if [ -x /usr/bin/dircolors ]; then
|
||||
test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
|
||||
alias ls='ls --color=auto'
|
||||
#alias dir='dir --color=auto'
|
||||
#alias vdir='vdir --color=auto'
|
||||
|
||||
alias grep='grep --color=auto'
|
||||
alias fgrep='fgrep --color=auto'
|
||||
alias egrep='egrep --color=auto'
|
||||
fi
|
||||
|
||||
# colored GCC warnings and errors
|
||||
#export GCC_COLORS='error=01;31:warning=01;35:note=01;36:caret=01;32:locus=01:quote=01'
|
||||
|
||||
# some more ls aliases
|
||||
alias ll='ls -alF'
|
||||
alias la='ls -A'
|
||||
alias l='ls -CF'
|
||||
|
||||
# Add an "alert" alias for long running commands. Use like so:
|
||||
# sleep 10; alert
|
||||
alias alert='notify-send --urgency=low -i "$([ $? = 0 ] && echo terminal || echo error)" "$(history|tail -n1|sed -e '\''s/^\s*[0-9]\+\s*//;s/[;&|]\s*alert$//'\'')"'
|
||||
|
||||
# Alias definitions.
|
||||
# You may want to put all your additions into a separate file like
|
||||
# ~/.bash_aliases, instead of adding them here directly.
|
||||
# See /usr/share/doc/bash-doc/examples in the bash-doc package.
|
||||
|
||||
if [ -f ~/.bash_aliases ]; then
|
||||
. ~/.bash_aliases
|
||||
fi
|
||||
|
||||
# enable programmable completion features (you don't need to enable
|
||||
# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
|
||||
# sources /etc/bash.bashrc).
|
||||
if ! shopt -oq posix; then
|
||||
if [ -f /usr/share/bash-completion/bash_completion ]; then
|
||||
. /usr/share/bash-completion/bash_completion
|
||||
elif [ -f /etc/bash_completion ]; then
|
||||
. /etc/bash_completion
|
||||
fi
|
||||
fi
|
||||
@@ -0,0 +1,3 @@
|
||||
[user]
|
||||
email = jonpaulstory@gmail.com
|
||||
name = telot
|
||||
@@ -0,0 +1,27 @@
|
||||
# ~/.profile: executed by the command interpreter for login shells.
|
||||
# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
|
||||
# exists.
|
||||
# see /usr/share/doc/bash/examples/startup-files for examples.
|
||||
# the files are located in the bash-doc package.
|
||||
|
||||
# the default umask is set in /etc/profile; for setting the umask
|
||||
# for ssh logins, install and configure the libpam-umask package.
|
||||
#umask 022
|
||||
|
||||
# if running bash
|
||||
if [ -n "$BASH_VERSION" ]; then
|
||||
# include .bashrc if it exists
|
||||
if [ -f "$HOME/.bashrc" ]; then
|
||||
. "$HOME/.bashrc"
|
||||
fi
|
||||
fi
|
||||
|
||||
# set PATH so it includes user's private bin if it exists
|
||||
if [ -d "$HOME/bin" ] ; then
|
||||
PATH="$HOME/bin:$PATH"
|
||||
fi
|
||||
|
||||
# set PATH so it includes user's private bin if it exists
|
||||
if [ -d "$HOME/.local/bin" ] ; then
|
||||
PATH="$HOME/.local/bin:$PATH"
|
||||
fi
|
||||
@@ -0,0 +1,72 @@
|
||||
|
||||
# This is the default ansible 'hosts' file.
|
||||
#
|
||||
# It should live in /etc/ansible/hosts
|
||||
#
|
||||
# - Comments begin with the '#' character
|
||||
# - Blank lines are ignored
|
||||
# - Groups of hosts are delimited by [header] elements
|
||||
# - You can enter hostnames or ip addresses
|
||||
# - A hostname/ip can be a member of multiple groups
|
||||
|
||||
# Ex 1: Ungrouped hosts, specify before any group headers:
|
||||
|
||||
## green.example.com
|
||||
## blue.example.com
|
||||
## 192.168.100.1
|
||||
## 192.168.100.10
|
||||
|
||||
# Ex 2: A collection of hosts belonging to the 'webservers' group:
|
||||
|
||||
## [webservers]
|
||||
## alpha.example.org
|
||||
## beta.example.org
|
||||
## 192.168.1.100
|
||||
## 192.168.1.110
|
||||
[setsail]
|
||||
10.0.1.5
|
||||
|
||||
[media]
|
||||
#audiobookshelf
|
||||
10.0.1.240
|
||||
#komga-comics
|
||||
10.0.1.139
|
||||
#craft
|
||||
10.0.1.206
|
||||
|
||||
|
||||
[hermes]
|
||||
#personal
|
||||
10.0.1.209
|
||||
#work
|
||||
10.0.1.205
|
||||
# If you have multiple hosts following a pattern, you can specify
|
||||
# them like this:
|
||||
|
||||
## www[001:006].example.com
|
||||
|
||||
# You can also use ranges for multiple hosts:
|
||||
|
||||
## db-[99:101]-node.example.com
|
||||
|
||||
# Ex 3: A collection of database servers in the 'dbservers' group:
|
||||
|
||||
## [dbservers]
|
||||
##
|
||||
## db01.intranet.mydomain.net
|
||||
## db02.intranet.mydomain.net
|
||||
## 10.25.1.56
|
||||
## 10.25.1.57
|
||||
|
||||
|
||||
# Ex4: Multiple hosts arranged into groups such as 'Debian' and 'openSUSE':
|
||||
|
||||
## [Debian]
|
||||
## alpha.example.org
|
||||
## beta.example.org
|
||||
|
||||
## [openSUSE]
|
||||
## green.example.com
|
||||
## blue.example.com
|
||||
|
||||
|
||||
@@ -0,0 +1,14 @@
|
||||
---
|
||||
- name: Update and upgrade Linux servers
|
||||
hosts: all
|
||||
become: true
|
||||
|
||||
tasks:
|
||||
- name: Update apt package cache
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
cache_valid_time: 3600
|
||||
|
||||
- name: Upgrade installed packages
|
||||
ansible.builtin.apt:
|
||||
upgrade: yes
|
||||
@@ -0,0 +1,71 @@
|
||||
---
|
||||
# Update Hermes Agent on every host in the Ansible `hermes` group.
|
||||
# Run with: ansible-playbook -i inventory.yml hermes-update.yml
|
||||
|
||||
- name: Update Hermes Agent
|
||||
hosts: hermes
|
||||
gather_facts: true
|
||||
serial: 1 # update one Hermes instance at a time so both are not down together
|
||||
|
||||
vars:
|
||||
# Override per-host/group if Hermes is installed somewhere else.
|
||||
hermes_bin: "{{ ansible_env.HOME }}/.local/bin/hermes"
|
||||
hermes_branch: main
|
||||
# Use true for a full HERMES_HOME backup before updating; false keeps Hermes' default quick snapshot.
|
||||
hermes_full_backup: true
|
||||
|
||||
tasks:
|
||||
- name: Check Hermes launcher exists
|
||||
ansible.builtin.stat:
|
||||
path: "{{ hermes_bin }}"
|
||||
register: hermes_launcher
|
||||
|
||||
- name: Fail if Hermes launcher is missing
|
||||
ansible.builtin.fail:
|
||||
msg: "Hermes launcher not found at {{ hermes_bin }}. Set hermes_bin for this host/group."
|
||||
when: not hermes_launcher.stat.exists
|
||||
|
||||
- name: Show current Hermes version and install info
|
||||
ansible.builtin.command: "{{ hermes_bin }} --version"
|
||||
register: hermes_version_before
|
||||
changed_when: false
|
||||
|
||||
- name: Show Hermes update plan
|
||||
ansible.builtin.command: "{{ hermes_bin }} update --plan --branch {{ hermes_branch }}"
|
||||
register: hermes_update_plan
|
||||
changed_when: false
|
||||
|
||||
- name: Check whether Hermes update is available
|
||||
ansible.builtin.command: "{{ hermes_bin }} update --check --branch {{ hermes_branch }}"
|
||||
register: hermes_update_check
|
||||
changed_when: false
|
||||
|
||||
- name: Update Hermes when needed
|
||||
ansible.builtin.command: >-
|
||||
{{ hermes_bin }} update --yes --branch {{ hermes_branch }}
|
||||
{{ '--backup' if hermes_full_backup else '' }}
|
||||
register: hermes_update_result
|
||||
when: "'Update available' in hermes_update_check.stdout"
|
||||
changed_when: true
|
||||
|
||||
- name: Verify Hermes is now current
|
||||
ansible.builtin.command: "{{ hermes_bin }} update --check --branch {{ hermes_branch }}"
|
||||
register: hermes_update_verify
|
||||
changed_when: false
|
||||
failed_when: >-
|
||||
hermes_update_verify.rc != 0 or
|
||||
('Update available' in hermes_update_verify.stdout)
|
||||
|
||||
- name: Show final Hermes version and install info
|
||||
ansible.builtin.command: "{{ hermes_bin }} --version"
|
||||
register: hermes_version_after
|
||||
changed_when: false
|
||||
|
||||
- name: Print Hermes update summary
|
||||
ansible.builtin.debug:
|
||||
msg:
|
||||
host: "{{ inventory_hostname }}"
|
||||
before: "{{ hermes_version_before.stdout_lines }}"
|
||||
updated: "{{ 'Update available' in hermes_update_check.stdout }}"
|
||||
after: "{{ hermes_version_after.stdout_lines }}"
|
||||
verify: "{{ hermes_update_verify.stdout_lines }}"
|
||||
Reference in New Issue
Block a user