sandwich/Ansible-Bootstrap
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

refactor(global_defaults): drop orphan luks.urandom/verify and aur feature, bump fedora to 45

Browse Source
This commit is contained in:
Sandwich
2026-05-02 19:51:18 +02:00
parent 3eaf918a53
commit 5d0630a386
3 changed files with 1 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/global_defaults/defaults/main.yml
View File

@@ -106,8 +106,6 @@ system_defaults:
iter: 4000 iter: 4000
bits: 512 bits: 512
pbkdf: "argon2id" pbkdf: "argon2id"
urandom: true
verify: true
features: features:
cis: cis:
enabled: false enabled: false
@@ -129,10 +127,6 @@ system_defaults:
rhel_repo: rhel_repo:
source: "iso" # iso|satellite|none — how RHEL systems get packages post-install source: "iso" # iso|satellite|none — how RHEL systems get packages post-install
url: "" # Satellite/custom repo URL when source=satellite url: "" # Satellite/custom repo URL when source=satellite
aur:
enabled: false
helper: "yay" # yay|paru
user: "_aur_builder"
chroot: chroot:
tool: "arch-chroot" # arch-chroot|chroot|systemd-nspawn tool: "arch-chroot" # arch-chroot|chroot|systemd-nspawn
initramfs: initramfs:

2
roles/global_defaults/tasks/_normalize_system.yml
View File

@@ -118,8 +118,6 @@
iter: "{{ system_raw.luks.iter | int }}" iter: "{{ system_raw.luks.iter | int }}"
bits: "{{ system_raw.luks.bits | int }}" bits: "{{ system_raw.luks.bits | int }}"
pbkdf: "{{ system_raw.luks.pbkdf | string }}" pbkdf: "{{ system_raw.luks.pbkdf | string }}"
urandom: "{{ system_raw.luks.urandom | bool }}"
verify: "{{ system_raw.luks.verify | bool }}"
# --- Feature flags --- # --- Feature flags ---
features: features:
cis: cis:

2
roles/global_defaults/tasks/validation.yml
View File

@@ -123,7 +123,7 @@
or ( or (
os == "debian" and (os_version | string) in ["10", "11", "12", "13", "unstable"] os == "debian" and (os_version | string) in ["10", "11", "12", "13", "unstable"]
) or ( ) or (
os == "fedora" and (os_version | int) >= 38 and (os_version | int) <= 43 os == "fedora" and (os_version | int) >= 38 and (os_version | int) <= 45
) or ( ) or (
os in ["rocky", "almalinux"] os in ["rocky", "almalinux"]
and (os_version | string) is match("^(8|9|10)(\\.\\d+)?$") and (os_version | string) is match("^(8|9|10)(\\.\\d+)?$")