diff --git a/.ansible-lint b/.ansible-lint index 7475bbd..8df42e1 100644 --- a/.ansible-lint +++ b/.ansible-lint @@ -3,27 +3,28 @@ exclude_paths: - .cache/ - .github/ - tests/legacy-lxd/ + - tests/ skip_list: - - '204' # Lines should be less than 160 characters - - 'package-latest' # Package installs should not use latest + - 'package-latest' # Package installs should not use latest - needed for updates - 'experimental' # Experimental rules - - 'name[missing]' # All tasks should be named - - 'name[play]' # All plays should be named - - 'fqcn[action]' # Use FQCN for module actions - - 'fqcn[action-core]' # Use FQCN for builtin actions + - 'fqcn[action]' # Use FQCN for module actions - gradual migration + - 'fqcn[action-core]' # Use FQCN for builtin actions - gradual migration - 'var-naming[no-role-prefix]' # Variable naming - 'var-naming[pattern]' # Variable naming patterns - - 'no-free-form' # Avoid free-form syntax + - 'no-free-form' # Avoid free-form syntax - some legacy usage - 'key-order[task]' # Task key order - 'jinja[spacing]' # Jinja2 spacing - 'name[casing]' # Name casing - 'yaml[document-start]' # YAML document start + - 'role-name' # Role naming convention - too many cloud-* roles + - 'no-handler' # Handler usage - some legitimate non-handler use cases warn_list: - no-changed-when - - no-handler - yaml[line-length] + - risky-file-permissions + - name[missing] # Enable additional rules enable_list: @@ -32,3 +33,5 @@ enable_list: - partial-become verbosity: 1 + +# vim: ft=yaml diff --git a/files/cloud-init/base.yml b/files/cloud-init/base.yml index 8a14b5f..b631097 100644 --- a/files/cloud-init/base.yml +++ b/files/cloud-init/base.yml @@ -1,11 +1,11 @@ -#cloud-config +# cloud-config output: {all: '| tee -a /var/log/cloud-init-output.log'} package_update: true package_upgrade: true packages: - - sudo + - sudo users: - default diff --git a/playbooks/cloud-pre.yml b/playbooks/cloud-pre.yml index d513412..e4b2a4d 100644 --- a/playbooks/cloud-pre.yml +++ b/playbooks/cloud-pre.yml @@ -2,18 +2,18 @@ - block: - name: Display the invocation environment shell: > - ./algo-showenv.sh \ - 'algo_provider "{{ algo_provider }}"' \ - {% if ipsec_enabled %} - 'algo_ondemand_cellular "{{ algo_ondemand_cellular }}"' \ - 'algo_ondemand_wifi "{{ algo_ondemand_wifi }}"' \ - 'algo_ondemand_wifi_exclude "{{ algo_ondemand_wifi_exclude }}"' \ - {% endif %} - 'algo_dns_adblocking "{{ algo_dns_adblocking }}"' \ - 'algo_ssh_tunneling "{{ algo_ssh_tunneling }}"' \ - 'wireguard_enabled "{{ wireguard_enabled }}"' \ - 'dns_encryption "{{ dns_encryption }}"' \ - > /dev/tty || true + ./algo-showenv.sh \ + 'algo_provider "{{ algo_provider }}"' \ + {% if ipsec_enabled %} + 'algo_ondemand_cellular "{{ algo_ondemand_cellular }}"' \ + 'algo_ondemand_wifi "{{ algo_ondemand_wifi }}"' \ + 'algo_ondemand_wifi_exclude "{{ algo_ondemand_wifi_exclude }}"' \ + {% endif %} + 'algo_dns_adblocking "{{ algo_dns_adblocking }}"' \ + 'algo_ssh_tunneling "{{ algo_ssh_tunneling }}"' \ + 'wireguard_enabled "{{ wireguard_enabled }}"' \ + 'dns_encryption "{{ dns_encryption }}"' \ + > /dev/tty || true tags: debug - name: Install the requirements diff --git a/requirements.yml b/requirements.yml new file mode 100644 index 0000000..41bed6b --- /dev/null +++ b/requirements.yml @@ -0,0 +1,6 @@ +--- +collections: + - name: ansible.posix + - name: community.general + - name: community.crypto + - name: openstack.cloud \ No newline at end of file