sandwich
45d3fef4e2
refactor(vars): remove legacy variable inputs
...
- Require hypervisor as dict input and use hypervisor_cfg/hypervisor_type internally
- Remove vm_* and hypervisor_* compatibility aliases
- Update roles and docs to use system/hypervisor dictionaries only
2026-02-11 05:37:18 +01:00
sandwich
a6b051d9e4
refactor(vars): add system/hypervisor dict inputs
...
- Normalize new system_cfg + hypervisor_cfg and keep legacy vm_* and hypervisor_* aliases
- Support multiple system.disks (creation + optional mount + fstab generation)
- Add system_check safety role (production + existing system detection)
- Update README and example inventories
2026-02-11 05:37:18 +01:00
sandwich
8056890460
fix(partitioning): add LVM extent headroom
2026-02-06 00:43:02 +01:00
sandwich
085e16abe9
fix(network): Removes hardcoded MAC-Address from NetworkManager config
...
This fixes an issue that in some virtual environments the NICs
MAC-Address gets changes and the config no longer applies.
2026-01-05 18:22:18 +01:00
sandwich
23f08b350b
refactor(services): remove unnecessary firewalld services disablement.
...
It is not needed if the firewalld package is not installed in the first
place
2026-01-05 18:19:14 +01:00
sandwich
315fdef69f
feat(services): implement SSH server toggeling
2026-01-05 18:18:18 +01:00
sandwich
2d4127a688
Force local stat for third-party prep tasks
2026-01-02 19:15:34 +01:00
sandwich
1cc1966b97
Force local connection for third-party prep check
2026-01-02 19:14:11 +01:00
sandwich
4d72a8999f
Run third-party prep check locally
2026-01-02 19:02:00 +01:00
sandwich
e264d1cabc
Fix localhost delegate for third-party prep check
2026-01-02 18:58:40 +01:00
sandwich
aa6e356444
Add third-party preparation task hook
2026-01-02 18:55:45 +01:00
sandwich
fe0b72c9d8
Make chroot command configurable
2026-01-02 18:53:55 +01:00
sandwich
ce972e55dd
Add swap_enabled toggle for swap setup
2026-01-02 18:51:27 +01:00
sandwich
2891de8fef
Add zstd toggle for btrfs and zram
2026-01-02 18:47:32 +01:00
sandwich
696df925c6
Update LVM swap sizing policy
2026-01-02 16:29:24 +01:00
sandwich
65ef8cb1ca
Enforce 20GiB minimum vm_size
2026-01-02 16:18:14 +01:00
sandwich
396d802dc3
Enable full-disk LVM root sizing
2026-01-02 16:11:06 +01:00
sandwich
90cc9add01
Use systemd module and link timezone
2026-01-02 16:10:50 +01:00
sandwich
eeaf3b0f0a
Document partitioning overrides and inventory host vars
2026-01-02 16:10:50 +01:00
sandwich
0a76e07b39
Fix post-reboot extra packages task
2026-01-02 15:55:27 +01:00
sandwich
82a1548b2e
Align ESP sizing to full 512 MiB
2026-01-02 15:10:35 +01:00
sandwich
95b793885a
Mount Debian ESP on /boot/efi without LUKS
2026-01-02 15:10:35 +01:00
sandwich
f7c020de52
Drop vars.yml usage
2026-01-02 15:10:35 +01:00
sandwich
7e4c2d87e2
Make inventory examples more generic
2026-01-02 15:10:34 +01:00
sandwich
bc6bd2823f
Inline extra package normalization
2026-01-02 15:10:34 +01:00
sandwich
01e0ea8b4b
Move pre-tasks into global defaults
2026-01-02 15:10:34 +01:00
sandwich
75395cc8d2
Drop custom_iso_enabled and log defaults
2026-01-02 15:10:34 +01:00
sandwich
be80c4096c
Restore global defaults lint exclusion
2026-01-02 15:10:34 +01:00
sandwich
f8e3ce62d4
Map global defaults in playbook
2026-01-02 15:10:34 +01:00
sandwich
78316a8946
Fix lint formatting and exceptions
2026-01-02 15:10:34 +01:00
sandwich
5226206cab
Increase EFI system partition size
2026-01-02 15:10:34 +01:00
sandwich
d9e42c0c84
Add Molecule scaffolding
2026-01-02 11:26:21 +01:00
sandwich
b9484dadab
Add libvirt inventory matrix example
2026-01-02 11:26:06 +01:00
sandwich
230b14e2ab
Move derived vars into role defaults
2026-01-02 11:25:51 +01:00
sandwich
f9a8791b4d
Add firewalld_enabled toggle
2026-01-02 11:25:40 +01:00
sandwich
f46dea0748
Define optional defaults and require vm_cpus
2026-01-02 11:25:06 +01:00
sandwich
b1eedd30dc
Move partitioning LUKS defaults into role
2026-01-02 11:23:31 +01:00
sandwich
98d0a4954d
Remove defaults for required vars
2025-12-28 17:10:00 +01:00
sandwich
fd37b4ee96
Move global defaults into role defaults
2025-12-28 16:47:53 +01:00
sandwich
7fe2a0dcc1
Normalize user-facing defaults
2025-12-28 16:41:11 +01:00
sandwich
cc77f646d7
Normalize LUKS boot layout and partitioning defaults
2025-12-28 16:00:49 +01:00
sandwich
2be6117aac
Update Fedora to 43
2025-12-28 04:04:27 +01:00
sandwich
232ab244ca
Restore Debian ESP mount layout
2025-12-28 02:24:33 +01:00
sandwich
ef945d925a
Fix Debian initramfs regeneration
2025-12-28 01:54:14 +01:00
sandwich
366299ea6d
Ensure initramfs-tools for Debian/Ubuntu
2025-12-28 01:29:26 +01:00
sandwich
3da6894ff1
Enable GRUB cryptodisk defaults
2025-12-28 00:46:09 +01:00
sandwich
e1db2ce434
Fix bootstrap package list rendering
2025-12-28 00:12:37 +01:00
sandwich
ae4fb6f43c
Condition LUKS and guest tools in bootstrap vars
2025-12-27 23:52:06 +01:00
sandwich
2c23ce6cbb
Fix Debian EFI mount layout
2025-12-27 23:49:21 +01:00
sandwich
0211efbae7
Docs, examples, and tooling
2025-12-27 23:07:47 +01:00
sandwich
dda1287f23
CIS role split and permission safety
2025-12-27 22:27:26 +01:00
sandwich
f62dba3ed6
Cleanup refactor and libvirt removal tooling
2025-12-27 21:44:33 +01:00
sandwich
f08855456a
Virtualization TPM2 and cloud-init fixes
2025-12-27 20:19:11 +01:00
sandwich
4bce08e77b
Partitioning idempotency and filesystem tasks
2025-12-26 23:31:54 +01:00
sandwich
72ec492a33
LUKS enrollment and RHEL cmdline/BLS
2025-12-26 22:09:08 +01:00
sandwich
efad1b9a67
Configuration role refactor and network template
2025-12-26 20:38:42 +01:00
sandwich
732784fa2d
Split bootstrap by OS
2025-12-25 22:12:19 +01:00
sandwich
a71d27c29d
Playbook flow and environment prep
2025-12-25 20:47:37 +01:00
sandwich
7953c2c285
Add Debian 13 (Trixie) support
2025-08-11 21:37:25 +02:00
sandwich
7a1a44220b
Update doc to Fedora 42
2025-07-07 15:24:17 +02:00
sandwich
970af5ff73
Fix rhel10 variable assertion
2025-07-06 04:36:55 +02:00
sandwich
035189d326
use proper datacenter variable
2025-07-06 04:34:16 +02:00
sandwich
ede6829a89
Update Fedora to 42
2025-07-06 04:28:59 +02:00
sandwich
b9156a0cac
Use the proper property name
2025-06-24 16:57:18 +02:00
sandwich
1c5f93e76f
Fix VM state after cleanup
2025-06-24 16:54:57 +02:00
sandwich
fe635b0783
use proper filename for role variables
2025-06-17 06:34:39 +02:00
sandwich
0b4d2320c0
Update ubuntu to plucky release
2025-06-17 03:57:58 +02:00
sandwich
11f7af1d9f
Add rhel10 support
2025-06-17 03:13:30 +02:00
sandwich
e3a52b889b
Add ncurses-term package to ubuntu for more legacy terminal descriptors
2025-05-30 09:48:55 +02:00
sandwich
ff2e5fb6b8
Add ncurses-term package for legacy ssh client (terminal descriptors)
2025-05-30 09:14:21 +02:00
sandwich
db62d360b7
Add vm_dns_search to hostname if set
2025-05-26 14:37:28 +02:00
sandwich
3d3f1caa14
Improve SSH CIS hardening
2025-05-04 01:41:00 +02:00
sandwich
200e73e3ef
Fix Typo
2025-04-29 20:30:02 +02:00
sandwich
f5fda74cad
Improve Arch packages + Disable swap before unmounting
2025-04-29 20:28:55 +02:00
sandwich
9e4ae3ae33
Document vmware_ssh variable
2025-03-25 13:13:06 +01:00
sandwich
052c89aa3e
Fix vm creation when no rhel_iso for vmware
2025-02-20 16:00:39 +01:00
sandwich
21e6edcf63
Increase max home size to 20GB
2025-02-18 21:39:58 +01:00
sandwich
4961cc4b03
Add guest_id since its necessary
2025-02-17 21:38:56 +01:00
sandwich
a7497dbb0e
Implement VMware annotation
2025-02-17 21:17:18 +01:00
sandwich
c764c209cb
Improve Partition calculation algorithm
2025-02-17 20:43:45 +01:00
sandwich
9096a8fc18
Add DNS Search option
2025-02-10 15:16:15 +01:00
sandwich
236df77406
Update README regarding SELinux
2025-02-07 20:50:20 +01:00
sandwich
ba6938b225
dont fail if selinux is undefined
2025-02-07 20:47:30 +01:00
sandwich
919c2085d2
Remove motd files for rhel
2025-02-05 17:14:17 +01:00
sandwich
55e7b5e98c
Enable option to disable selinux for all osses
2025-02-05 01:41:10 +01:00
sandwich
ef81e6b121
Include Standard package group for RHEL systems
2025-02-05 00:02:37 +01:00
sandwich
2cf2f71b9c
Make sure Volumes are safely unmounted before reboot
2025-01-22 12:34:00 +01:00
sandwich
7b972053ef
Fix CIS applienc for RHEL8
2025-01-21 22:34:01 +01:00
sandwich
1afe5155ce
Update package name to match correctly
2025-01-21 22:02:43 +01:00
sandwich
67065520a2
Make sure the VM truly starts
2025-01-21 21:35:47 +01:00
sandwich
b3b6376d81
Do not check if VM is back on vmware with cis activated, it will fail
...
without the key, and key cannot be set otherwise awx refuses connection
2025-01-21 21:30:56 +01:00
sandwich
9f14556ef6
Add banner
2025-01-21 20:16:05 +01:00
sandwich
293b608c84
Add ssh key survey
2025-01-21 20:00:18 +01:00
sandwich
50a7011de7
Add missing variable
2025-01-21 19:58:07 +01:00
sandwich
8d0c948dff
CIS Adjustments
2025-01-21 19:55:36 +01:00
sandwich
183ec709f6
Fix variable distribution
2025-01-21 17:43:18 +01:00
sandwich
6dd32b5a63
Make Network Assignment more reliable
2025-01-21 16:59:56 +01:00
sandwich
9fdf83aad3
Add nms default
2025-01-17 00:50:26 +01:00
sandwich
15fc6e0dd1
Remove nms from ip since already addition already done internaly
2025-01-17 00:45:42 +01:00
sandwich
f866502d47
Do not reboot localhost!
2025-01-17 00:38:35 +01:00
sandwich