Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

merge upstream? #1

Open
wants to merge 55 commits into
base: master
Choose a base branch
from
Open

Conversation

antonanders
Copy link

No description provided.

tjend and others added 30 commits June 6, 2021 22:06
* handlers/main.yml: better formatting

* update README/CHANGELOG
* Fixed tag "wg-install" inheritance to included tasks
Fixes #109

* Added no_log to tasks handling private keys - can be explicitly deactivated for debugging by running with verbosity 3 or higher
Fixes #81
* add Debian 11 aka Bullseye

* add Debian 11 aka Bullseye to Molecule test

* update README

* added Fedora 34 + removed Fedora 32 support from meta/main.yml

* Debian 11 do not need kernel headers anymore

* remove Fedora 32 from Molecule test / add Fedora 34 + Debian 11 to Molecule test

* add rolename/namespace + make ansible-lint happy in meta/main.yml

* make ansible-lint happy

* (Archlinux) As linux-lts is using kernel 5.10 now there is no need to install wireguard-lts tools any longer (and this package is gone anyway)

* (Debian) fix ansible-lint issues

* update CHANGELOG
* Add Rocky Linux/AlmaLinux support + Molecule tests

* update CHANGELOG
* feat: Update CentOS 7 to use signed kernel-plus module

* Apply suggestions from code review

Co-authored-by: Robert Wimmer <[email protected]>

* Update CentOS 7 for optional signed kernel-plus module

Co-authored-by: Robert Wimmer <[email protected]>
* Distinguish between proxmox host and guest setup

* Update CHANGELOG.md
* Rearrange hooks to match lifecycle order

* Fully qualify module names

BREAKING CHANGE: To use FQCNs at least Ansible 2.9 is required [2].

From the commonly presented note in the Ansible documentation, e. g.
of Ansible's builtin debug module [1]:

  [...] we recommend you use the FQCN for easy linking to the module
  documentation and to avoid conflicting with other collections that
  may have the same module name.

[1]: https://docs.ansible.com/ansible/latest/collections/ansible/builtin/debug_module.html
[2]: https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#where-did-all-the-modules-go

* Update changelog
* move wireguard_private_key up in variable order in defaults/main.yml

* add opensuse 15.3 to Galaxy metadata

* remove trailing space

* remove blank line

* fix indentation in setup-debian.yml

* rename test-wg-opensuse-leap to test-wg-opensuse-leap-15-2 in molecule.yml

* add OpenSUSE 15.3 to Molecule test

* remove OpenSUSE Leap 15.2 support (EOL)

* remove Fedora 33 support (EOL)

* remove Fedora 33 + openSUSE Leap 15.2 variables from Molecule test

* add Fedora 35 support

* remove CentOS 8 support (EOL) - use AlmaLinux or Rocky Linux instead

* remove tasks/setup-centos-8.yml (CentOS 8 reached EOL)

* fix formatting issues and typos in README + CHANGELOG

* update CHANGELOG

* truthy value should false in tasks/setup-debian-pve-guest-variant.yml

* name task in tasks/main.yml

* name tasks in tasks/setup-debian.yml

* refactor Molecule setup

* remove Proxmox from Molecule test

* update CHANGELOG

* update CHANGELOG

* re-order IP address in Molecule test

* use different wireguard_port values for a few hosts in Molecule test for better testing
* add Molecule scenario for single server

* change verifier to Ansible
* honor wireguard_save_config value

* update CHANGELOG
* Add non-standard kernel installation for RockyLinux 8

* Add test VM in molecule tests for Rocky8 non-standard installation method

* Rename non-standard to dkms as an install method

* Automate installation process : kmod if possible, dkms as fallback

* BUGFIX : dmks installation needs EPEL repo for wireguard-tools

* Molecule : install ELRepo mainline kernel for rocky8 dkms installation

* Revert "Automate installation process : kmod if possible, dkms as fallback"

This reverts commit 822fbcb.

* Molecule : add wireguard_rockylinux8_installation_method variable to test-wg-rocky8-dkms
* update CHANGELOG

* fix typo

* fix host groups: el8-dkms -> el8dkms

* remove empty line

* update CHANGELOG
* Call Raspbian role only when Release is older than 11 (Bullseye)

* Rename raspbian-role to mark that it is intended for Buster and lower

Wireguard is directly supported by Raspbian 11 (Bullseye) and higher.

* Add a note regarding the scope of the Raspbian playbook
* move register if config/private key handling out of wg subcommands block

* allow user to specify WireGuard interface restart behavior

* update README

* numeric values in meta/main.yml should be strings

* update Copyright

* fix indentation in tasks/setup-debian.yml

* update Copyright

* update Copyright

* truthy values should be lowercase

* add namespace key again to meta/main.yml

* add molecule/kvm/verify.yml with a very basic unit test
* update CHANGELOG

* fix typo
* add Ubuntu 22.04 (Jammy Jellyfish) support

* update README
* remove support for Fedora 35 / add support for Fedora 36

* remove Fedora 34 + add Fedora 36 to Molecule test

* fix Jinja2 spacing

* fix Jinja2 spacing

* improve the task key order to: name, when, tags, block

* handlers/main.yml: names should start with an uppercase letter

* tasks/main.yml: names should start with an uppercase letter

* add .yamllint

* add Github release action to push new release to Ansible Galaxy

* add Molecule setup for openSUSE 15.4

* molecule/kvm-single-server: add verify.yml / enable verifier

* update CHANGELOG
* add EL9 to meta/main.yml

* require Ansible >= 2.11 as Rocky Linux is only supported with this version or above

* ansible-lint: use community.general.pacman module instead of ansible.builtin.pacman for Archlinux setup

* add support for Rocky Linux 9 and AlmaLinux 9

* add openSUSE Leap 15.4 to README.md

* update CHANGELOG.md
* add support for elementary OS

* update README

* add skip_ansible_lint for two tasks

* ignore two ansible-lint warnings for Raspbian Buster tasks

* update CHANGELOG

* update comment in defaults/main.yml and README
* Fix Molecule prepare for Archlinux

* remove Debian 10 (Buster) support (readed EOL)

* remove openSUSE 15.3 support (reached EOL)

* add openSUSE 15.4 to meta/main.yml

* fix ansible-lint issue in tasks/setup-debian-raspbian-buster.yml

* remove Fedora 35 support (reached EOL)

* update CHANGELOG
* Basic IPv6 support

Hosts can now have one IPv6, by specifying 'wireguard_address_v6' variable. This IP is added to peer's AllowedIPs.

Future plans :
- Support IPv6 only hosts (No 'wireguard_address')
- Allow the endpoint to be an IPv6 address

* Added 'wireguard_addresses' to use multiple IPs

Added the 'wireguard_addresses' variable to specify an array of IPv4 and IPv6. The old 'wireguard_address' variable can be deprecated even she still work to specify one IPv4.

The 'wireguard_address_v6' from last commit was deleted.

* Updating the README to use `wireguard_addresses`

* 13.0.0 changelog
previously disable the cache update was only possible on ubuntu
using the generic name wireguard_update_cache it can be enabled for all
operating systems
mofelee and others added 25 commits March 25, 2023 17:54
* fix typos in CHANGELOG

* update CentOS7 reboot handling
* add support for Oracle Linux 9

* add Oracle Linux 9 to README.md
otherwise it would fail with "'wireguard__restart_interface' is undefined"
* Prefix host name comment with 'Name =' for wg-info

* Ditto for unmanaged peers
* update Ansible Galaxy URL of this role

* remove Ubuntu 18.04 support (reached EOL)

* Molecule: rename 'kvm' scenario to 'default'

* Molecule: rename 'kvm' scenario to 'default'

* Molecule: rename 'kvm-single-server' scenario to 'single-server'

* update CHANGELOG

* remove Fedora 36 support (reached EOL) / add support for Fedora 37 + 38

* Molecule: increase memory for all VMs

* Molecule: fix Ubuntu 22.04 box

* update year in all files

* add support for openSUSE 15.5

* add support for Debian 12

* handlers/main.yml: 'Syncconf wireguard' task should not change things if nothing needs doing

* Fix ansible-lint issues

* update CHANGELOG

* update CHANGELOG

* update README

* update README

* Molecule: Upgrade OS and reboot in prepare before converge for Almalinux

* update CHANGELOG

* update README
* add variable wireguard_conf_backup

* CHANGELOG: variable wireguard_conf_backup

---------

Co-authored-by: shk3bq4d <[email protected]>
* CHANGELOG: linter fixes

* Molecule: change IP addresses

* Molecule: use alvistack Vagrant boxes instead of generic

* Molecule: move memory and cpus paramter to boxes / fix hostname

* Molecule: use generic/debian12

* Molecule: use alvistack Vagrant boxes for Ubuntu

* Molecule: remove Fedora 37/38 (reached EOL) / add Fedora 39

* Molecule: use official AlmaLinux Vagrant boxes

* Molecule: use official Ubuntu Vagrant boxes

* Molecule: use official Rocky Linux images

* Molecule: use different IP addresses / use generic Vagrant boxes for Rocky Linux / use alvistack Vagrant boxes for Ubuntu

* Molecule: add wireguard_conf_backup parameter to two hosts

* update CHANGELOG and README
* update meta/main.yml

* update .github/workflows/release.yml

* update README and CHANGELOG
Fedora CoreOS has full support for WireGuard out of the box and does not have yum.

This change makes it possible to setup wg on FedoraOS.
* remove support for openSUSE v15.4 (reached EOL)

* add support for Ubuntu 24.04

* update README

* molecule/default/prepare.yml: remove Proxmox code

* replace Vagrant box rockylinux/9 with bento/rockylinux-9

* use ansible.builtin.package for AlmaLinux

* move CentOS 7 from supported to best effort OSes

* Molecule: remove CentOS 7 / update Python interpreter / update prepare.yml

* Molecule: Remove AlmaLinux 8, Rocky Linux 8 and CentOS 7

* add support for openSUSE 15.6

* update README

* update CHANGELOG
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.