Initial commit

Author: rwaffen

.ansible-lint

@@ -0,0 +1,8 @@
+---
+skip_list:
+  - yaml[comments-indentation]
+
+extra_vars:
+  hostvars:
+    localhost:
+      example_host_var: dummy_host

.editorconfig

@@ -0,0 +1,8 @@
+[*.{yml,yaml}]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+trim_trailing_whitespace = true
+trim_final_newlines = true
+insert_final_newline = true
+max_line_length = 160

.github/workflows/ci.yaml

@@ -0,0 +1,41 @@
+---
+on:  # yamllint disable-line rule:truthy
+  push:
+    branches:
+      - main
+  pull_request:
+
+name: ⚒️ CI
+
+jobs:
+  yamllint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: yamllint
+        uses: ibiqlik/action-yamllint@v3
+        with:
+          file_or_dir: .
+          config_file: .yamllint
+
+  ansible-lint:
+    runs-on: ubuntu-latest
+    container: pipelinecomponents/ansible-lint:latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          git --version
+          ansible-lint --version
+          ansible-lint -v
+
+  ansible-syntax:
+    runs-on: ubuntu-latest
+    container: cytopia/ansible:latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          apk add git
+          git --version
+          ansible-galaxy --version
+          ansible-playbook --version
+          ansible-playbook --syntax-check --list-tasks playbooks/*.yml

.gitignore

@@ -0,0 +1 @@
+.vscode/

.gitlab-ci.yml

@@ -0,0 +1,37 @@
+---
+stages:
+  - lint
+
+yamllint:
+  stage: lint
+  image:
+    name: cytopia/yamllint:latest
+    entrypoint: ["/bin/ash", "-c"]
+  script:
+    - yamllint --version
+    - yamllint .
+
+ansible-lint:
+  stage: lint
+  image: pipelinecomponents/ansible-lint:latest
+  script:
+    - git --version
+    - ansible-lint --version
+    - ansible-lint
+    - ansible-lint roles/
+
+ansible-syntax:
+  stage: lint
+  image:
+    name: cytopia/ansible:latest
+    entrypoint: ["/bin/sh", "-c"]
+  variables:
+    ANSIBLE_ROLES_PATH: roles
+  script:
+    - apk add git
+    - git --version
+    - ansible-galaxy --version
+    - ansible-playbook --version
+    - ansible-galaxy role install -r roles/requirements.yml
+    - ansible-galaxy collection install -r collections/requirements.yml
+    - ansible-playbook --syntax-check --list-tasks playbooks/*.yml

.yamllint

@@ -0,0 +1,16 @@
+---
+extends: default
+
+rules:
+  line-length:
+    max: 160
+  empty-lines:
+    max: 1
+    max-start: 0
+    max-end: 1
+  hyphens:
+    max-spaces-after: 1
+  indentation:
+    spaces: 2
+    indent-sequences: whatever
+    check-multi-line-strings: false

README.md

@@ -0,0 +1,9 @@
+[defaults]
+collections_paths = /etc/ansible/collections:/opt/ansible/collections:collections
+roles_path = /etc/ansible/roles:/opt/ansible/roles:roles
+
+# You’ll also need to make sure that requiretty is disabled
+# in /etc/sudoers on the remote host, or become won’t work
+# with pipelining enabled.
+[ssh_connection]
+pipelining = True

ansible.cfg

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+# these commands are run as root
+# if ansible user is somehow broken or missing, execute this script to repair it
+
+useradd -m ansible -s /bin/bash
+mkdir /home/ansible/.ssh
+chmod 700 /home/ansible/.ssh
+chown ansible:ansible /home/ansible/.ssh
+echo "ansible ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/ansible
+chmod 0440 /etc/sudoers.d/ansible
+echo "< place key here >" >> /home/ansible/.ssh/authorized_keys
+chmod 600 /home/ansible/.ssh/authorized_keys
+chown ansible:ansible /home/ansible/.ssh/authorized_keys