update_password: always
password: "{{ ansibleuser|password_hash('sha512') }}"
- name: hide system-account
- ansible.builtin.copy:
- dest: /var/lib/AccountsService/users/ansible
+ ansible.builtin.lineinfile:
+ path: /var/lib/AccountsService/users/ansible
+ regex: 'SystemAccount=*'
+ line: 'SystemAccount=true'
+- name: remove apt-config-file derived from preseeding
+ ansible.builtin.file:
+ path: /etc/apt/apt.conf
+ state: absent
+- name: copy new apt-proxy config file to apt.conf.d-dir
+ ansible.builtin.copy:
+ dest: /etc/apt/apt.conf.d/01proxy
content: |
- [User]
- Session=
- XSession=
- Icon=/home/ansible/.face
- SystemAccount=true
-
- [InputSource0]
- xkb=de
- #- name: stop automatic remote printer installation
- #ansible.builtin.systemd:
- #name: cups-browsed
- #state: stopped
- #- name: disable automatic remote printer installation
- #ansible.builtin.systemd:
- #name: cups-browsed
- #enabled: no
- - name: remove apt-config-file derived from preseeding
- ansible.builtin.file:
- path: /etc/apt/apt.conf
- state: absent
- - name: copy new apt-proxy config file to apt.conf.d-dir
- ansible.builtin.template:
- src: files/apt-proxy_01proxy.j2
- dest: /etc/apt/apt.conf.d/01proxy
- - name: Update and upgrade apt packages
- apt:
- update_cache: yes
- upgrade: yes
- - name: install core-packages
- apt:
- pkg:
- - htop
- - glances
- - inxi
- - bmon
+ Acquire::http { Proxy "http://{{ aptproxy }}:3142"; };
+ Acquire::https { Proxy "https://"; };
+- name: prepare ubuntu-DNS for working in local network
+ file:
+ src: /run/systemd/resolve/resolv.conf
+ dest: /etc/resolv.conf
+ state: link
+ force: yes
+ when: ansible_facts['distribution'] == 'Ubuntu'
+- name: Update and upgrade apt packages
+ apt:
+ update_cache: true
+ upgrade: true
+ autoremove: true
+- name: install core-packages
+ apt:
+ pkg:
+ - htop
+ - glances
+ - inxi
+ - bmon
+ - vim
+#- name: stop automatic remote printer installation
+# ansible.builtin.systemd:
+# name: cups-browsed
+# state: stopped
+#- name: disable automatic remote printer installation
+# ansible.builtin.systemd:
+# name: cups-browsed
+# enabled: no
...