Compare commits

..

160 Commits

Author SHA1 Message Date
a78c9ab8e8 fix(partitioning): register swapoff result for changed_when handling 2026-02-11 23:47:36 +01:00
1dd54268be fix(luks): complete migration of partitioning_luks_tpm2_device reference
The refactor in 9e7fc15 removed the partitioning_luks_tpm2_device
default but missed updating the reference in the configuration role,
causing an undefined variable error for all LUKS-enabled hosts.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-11 23:28:05 +01:00
b42125f9b4 refactor(bootstrap): nest network fields under system.network to match main project schema 2026-02-11 23:03:37 +01:00
164f58770b fix(bootstrap): correct changed_when on state-changing commands 2026-02-11 21:06:10 +01:00
9e7fc156ab refactor(luks): use system_cfg.luks directly across roles 2026-02-11 19:26:51 +01:00
7e9abe862f fix: honor libvirt network config, preserve DHCP DNS with search-only NM config, and exact-match Xen VM names 2026-02-11 14:00:20 +01:00
5aa5022983 docu(readme): recompose README from pre/post consolidation versions
Restore the navigable numbered ToC, conceptual overview, and structured
usage section from the original while keeping the current dict-based
variable model, expanded platform support, configuration model docs,
and multi-disk schema from the consolidation rewrite. Also fixes
banner.motd default (false, not true) and adds system.version column
to the distribution table.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-11 08:25:15 +01:00
74ae98db35 fix(banner): align MOTD star border and default motd to disabled 2026-02-11 08:02:27 +01:00
fc23f84cc3 fix(libvirt): restore missing virtualization_mac_address default 2026-02-11 08:02:27 +01:00
3c7d9e16da refactor(safety): remove redundant live environment detection from system_check 2026-02-11 08:02:27 +01:00
e4b9f1c579 refactor(playbook): rename prompt variables with backwards-compatible fallbacks 2026-02-11 08:02:27 +01:00
920969d60e refactor(validation): deduplicate hypervisor combine and collapse schema checks 2026-02-11 08:02:27 +01:00
9d723630cb refactor(system): simplify normalization by removing redundant intermediate merges 2026-02-11 08:02:27 +01:00
0c8242589c fix(bootstrap): repair version-specific package availability across distributions 2026-02-11 08:02:27 +01:00
2885ba9ffa docu(readme): consolidate final documentation state 2026-02-11 05:37:18 +01:00
81d63029a4 fix(config): enable dictionary merge for scoped overrides 2026-02-11 05:37:18 +01:00
2fa0fba4c4 refactor(schema): move filesystem into system dictionary 2026-02-11 05:37:18 +01:00
055b6de68b refactor(configuration): simplify grub commandline variable assembly 2026-02-11 05:37:18 +01:00
4e85740e0a refactor(configuration): reduce LUKS runtime temporary facts 2026-02-11 05:37:18 +01:00
0ee2806c62 refactor(schema): simplify dict normalization and schema checks 2026-02-11 05:37:18 +01:00
1027afc6ea docu(schema): update docs and examples to compact dict keys 2026-02-11 05:37:18 +01:00
74cb09ffee refactor(schema): rename nested dict keys and simplify validation 2026-02-11 05:37:18 +01:00
9f5096d69d docu(schema): align docs and baremetal example with dict model 2026-02-11 05:37:18 +01:00
6da46a03ed fix(validation): reject deprecated top-level schema keys 2026-02-11 05:37:18 +01:00
e7c898d653 refactor(vars): simplify normalization and remove effective intermediates 2026-02-11 05:37:18 +01:00
0388dca0a4 fix(system): default physical installs to archlinux when os is omitted 2026-02-11 05:37:18 +01:00
1d545fbbc8 docu(readme): document dict-based variables and examples 2026-02-11 05:37:18 +01:00
53bb4589b6 fix(runtime): migrate roles to nested system fields 2026-02-11 05:37:18 +01:00
73f0b81b5a feat(disks): add standardized multi-disk mount schema 2026-02-11 05:37:18 +01:00
2d46df8f5a refactor(vars): enforce nested system and hypervisor schema 2026-02-11 05:37:18 +01:00
45d3fef4e2 refactor(vars): remove legacy variable inputs
- Require hypervisor as dict input and use hypervisor_cfg/hypervisor_type internally

- Remove vm_* and hypervisor_* compatibility aliases

- Update roles and docs to use system/hypervisor dictionaries only
2026-02-11 05:37:18 +01:00
a6b051d9e4 refactor(vars): add system/hypervisor dict inputs
- Normalize new system_cfg + hypervisor_cfg and keep legacy vm_* and hypervisor_* aliases

- Support multiple system.disks (creation + optional mount + fstab generation)

- Add system_check safety role (production + existing system detection)

- Update README and example inventories
2026-02-11 05:37:18 +01:00
8056890460 fix(partitioning): add LVM extent headroom 2026-02-06 00:43:02 +01:00
085e16abe9 fix(network): Removes hardcoded MAC-Address from NetworkManager config
This fixes an issue that in some virtual environments the NICs
MAC-Address gets changes and the config no longer applies.
2026-01-05 18:22:18 +01:00
23f08b350b refactor(services): remove unnecessary firewalld services disablement.
It is not needed if the firewalld package is not installed in the first
place
2026-01-05 18:19:14 +01:00
315fdef69f feat(services): implement SSH server toggeling 2026-01-05 18:18:18 +01:00
2d4127a688 Force local stat for third-party prep tasks 2026-01-02 19:15:34 +01:00
1cc1966b97 Force local connection for third-party prep check 2026-01-02 19:14:11 +01:00
4d72a8999f Run third-party prep check locally 2026-01-02 19:02:00 +01:00
e264d1cabc Fix localhost delegate for third-party prep check 2026-01-02 18:58:40 +01:00
aa6e356444 Add third-party preparation task hook 2026-01-02 18:55:45 +01:00
fe0b72c9d8 Make chroot command configurable 2026-01-02 18:53:55 +01:00
ce972e55dd Add swap_enabled toggle for swap setup 2026-01-02 18:51:27 +01:00
2891de8fef Add zstd toggle for btrfs and zram 2026-01-02 18:47:32 +01:00
696df925c6 Update LVM swap sizing policy 2026-01-02 16:29:24 +01:00
65ef8cb1ca Enforce 20GiB minimum vm_size 2026-01-02 16:18:14 +01:00
396d802dc3 Enable full-disk LVM root sizing 2026-01-02 16:11:06 +01:00
90cc9add01 Use systemd module and link timezone 2026-01-02 16:10:50 +01:00
eeaf3b0f0a Document partitioning overrides and inventory host vars 2026-01-02 16:10:50 +01:00
0a76e07b39 Fix post-reboot extra packages task 2026-01-02 15:55:27 +01:00
82a1548b2e Align ESP sizing to full 512 MiB 2026-01-02 15:10:35 +01:00
95b793885a Mount Debian ESP on /boot/efi without LUKS 2026-01-02 15:10:35 +01:00
f7c020de52 Drop vars.yml usage 2026-01-02 15:10:35 +01:00
7e4c2d87e2 Make inventory examples more generic 2026-01-02 15:10:34 +01:00
bc6bd2823f Inline extra package normalization 2026-01-02 15:10:34 +01:00
01e0ea8b4b Move pre-tasks into global defaults 2026-01-02 15:10:34 +01:00
75395cc8d2 Drop custom_iso_enabled and log defaults 2026-01-02 15:10:34 +01:00
be80c4096c Restore global defaults lint exclusion 2026-01-02 15:10:34 +01:00
f8e3ce62d4 Map global defaults in playbook 2026-01-02 15:10:34 +01:00
78316a8946 Fix lint formatting and exceptions 2026-01-02 15:10:34 +01:00
5226206cab Increase EFI system partition size 2026-01-02 15:10:34 +01:00
d9e42c0c84 Add Molecule scaffolding 2026-01-02 11:26:21 +01:00
b9484dadab Add libvirt inventory matrix example 2026-01-02 11:26:06 +01:00
230b14e2ab Move derived vars into role defaults 2026-01-02 11:25:51 +01:00
f9a8791b4d Add firewalld_enabled toggle 2026-01-02 11:25:40 +01:00
f46dea0748 Define optional defaults and require vm_cpus 2026-01-02 11:25:06 +01:00
b1eedd30dc Move partitioning LUKS defaults into role 2026-01-02 11:23:31 +01:00
98d0a4954d Remove defaults for required vars 2025-12-28 17:10:00 +01:00
fd37b4ee96 Move global defaults into role defaults 2025-12-28 16:47:53 +01:00
7fe2a0dcc1 Normalize user-facing defaults 2025-12-28 16:41:11 +01:00
cc77f646d7 Normalize LUKS boot layout and partitioning defaults 2025-12-28 16:00:49 +01:00
2be6117aac Update Fedora to 43 2025-12-28 04:04:27 +01:00
232ab244ca Restore Debian ESP mount layout 2025-12-28 02:24:33 +01:00
ef945d925a Fix Debian initramfs regeneration 2025-12-28 01:54:14 +01:00
366299ea6d Ensure initramfs-tools for Debian/Ubuntu 2025-12-28 01:29:26 +01:00
3da6894ff1 Enable GRUB cryptodisk defaults 2025-12-28 00:46:09 +01:00
e1db2ce434 Fix bootstrap package list rendering 2025-12-28 00:12:37 +01:00
ae4fb6f43c Condition LUKS and guest tools in bootstrap vars 2025-12-27 23:52:06 +01:00
2c23ce6cbb Fix Debian EFI mount layout 2025-12-27 23:49:21 +01:00
0211efbae7 Docs, examples, and tooling 2025-12-27 23:07:47 +01:00
dda1287f23 CIS role split and permission safety 2025-12-27 22:27:26 +01:00
f62dba3ed6 Cleanup refactor and libvirt removal tooling 2025-12-27 21:44:33 +01:00
f08855456a Virtualization TPM2 and cloud-init fixes 2025-12-27 20:19:11 +01:00
4bce08e77b Partitioning idempotency and filesystem tasks 2025-12-26 23:31:54 +01:00
72ec492a33 LUKS enrollment and RHEL cmdline/BLS 2025-12-26 22:09:08 +01:00
efad1b9a67 Configuration role refactor and network template 2025-12-26 20:38:42 +01:00
732784fa2d Split bootstrap by OS 2025-12-25 22:12:19 +01:00
a71d27c29d Playbook flow and environment prep 2025-12-25 20:47:37 +01:00
7953c2c285 Add Debian 13 (Trixie) support 2025-08-11 21:37:25 +02:00
7a1a44220b Update doc to Fedora 42 2025-07-07 15:24:17 +02:00
970af5ff73 Fix rhel10 variable assertion 2025-07-06 04:36:55 +02:00
035189d326 use proper datacenter variable 2025-07-06 04:34:16 +02:00
ede6829a89 Update Fedora to 42 2025-07-06 04:28:59 +02:00
b9156a0cac Use the proper property name 2025-06-24 16:57:18 +02:00
1c5f93e76f Fix VM state after cleanup 2025-06-24 16:54:57 +02:00
fe635b0783 use proper filename for role variables 2025-06-17 06:34:39 +02:00
0b4d2320c0 Update ubuntu to plucky release 2025-06-17 03:57:58 +02:00
11f7af1d9f Add rhel10 support 2025-06-17 03:13:30 +02:00
e3a52b889b Add ncurses-term package to ubuntu for more legacy terminal descriptors 2025-05-30 09:48:55 +02:00
ff2e5fb6b8 Add ncurses-term package for legacy ssh client (terminal descriptors) 2025-05-30 09:14:21 +02:00
db62d360b7 Add vm_dns_search to hostname if set 2025-05-26 14:37:28 +02:00
3d3f1caa14 Improve SSH CIS hardening 2025-05-04 01:41:00 +02:00
200e73e3ef Fix Typo 2025-04-29 20:30:02 +02:00
f5fda74cad Improve Arch packages + Disable swap before unmounting 2025-04-29 20:28:55 +02:00
9e4ae3ae33 Document vmware_ssh variable 2025-03-25 13:13:06 +01:00
052c89aa3e Fix vm creation when no rhel_iso for vmware 2025-02-20 16:00:39 +01:00
21e6edcf63 Increase max home size to 20GB 2025-02-18 21:39:58 +01:00
4961cc4b03 Add guest_id since its necessary 2025-02-17 21:38:56 +01:00
a7497dbb0e Implement VMware annotation 2025-02-17 21:17:18 +01:00
c764c209cb Improve Partition calculation algorithm 2025-02-17 20:43:45 +01:00
9096a8fc18 Add DNS Search option 2025-02-10 15:16:15 +01:00
236df77406 Update README regarding SELinux 2025-02-07 20:50:20 +01:00
ba6938b225 dont fail if selinux is undefined 2025-02-07 20:47:30 +01:00
919c2085d2 Remove motd files for rhel 2025-02-05 17:14:17 +01:00
55e7b5e98c Enable option to disable selinux for all osses 2025-02-05 01:41:10 +01:00
ef81e6b121 Include Standard package group for RHEL systems 2025-02-05 00:02:37 +01:00
2cf2f71b9c Make sure Volumes are safely unmounted before reboot 2025-01-22 12:34:00 +01:00
7b972053ef Fix CIS applienc for RHEL8 2025-01-21 22:34:01 +01:00
1afe5155ce Update package name to match correctly 2025-01-21 22:02:43 +01:00
67065520a2 Make sure the VM truly starts 2025-01-21 21:35:47 +01:00
b3b6376d81 Do not check if VM is back on vmware with cis activated, it will fail
without the key, and key cannot be set otherwise awx refuses connection
2025-01-21 21:30:56 +01:00
9f14556ef6 Add banner 2025-01-21 20:16:05 +01:00
293b608c84 Add ssh key survey 2025-01-21 20:00:18 +01:00
50a7011de7 Add missing variable 2025-01-21 19:58:07 +01:00
8d0c948dff CIS Adjustments 2025-01-21 19:55:36 +01:00
183ec709f6 Fix variable distribution 2025-01-21 17:43:18 +01:00
6dd32b5a63 Make Network Assignment more reliable 2025-01-21 16:59:56 +01:00
9fdf83aad3 Add nms default 2025-01-17 00:50:26 +01:00
15fc6e0dd1 Remove nms from ip since already addition already done internaly 2025-01-17 00:45:42 +01:00
f866502d47 Do not reboot localhost! 2025-01-17 00:38:35 +01:00
4291aa8c4a Don't fail proxmox install if rhel_iso is not defined 2025-01-17 00:07:58 +01:00
6e8ac0283a use 24 netmask as default if not set 2025-01-17 00:03:38 +01:00
c650c2b50c Add extra utils 2025-01-14 21:14:40 +01:00
2cc06e3f7d Set correct IP NetworkMask if defined 2025-01-14 16:08:10 +01:00
8ba12fe4bf Fix typo 2025-01-14 15:03:06 +01:00
c72ccd06aa Dont fail if vmware_ssh is not defined 2025-01-14 14:58:58 +01:00
bfadc82e82 Add dig via bind-utils for rhel 2024-12-03 16:42:47 +01:00
c1b5793cab RHEL add python package 2024-12-03 13:31:31 +01:00
72dabe3107 Do not hardcode macaddress which makes vm cloning harder 2024-12-02 18:08:48 +01:00
0ff03d9d6f Use RHEL nameing for yum repo file 2024-11-12 14:14:09 +01:00
247e3e6c3b Fix DNS issue 2024-11-11 17:44:52 +01:00
d864a492ee Adjust never libvirt loaders 2024-11-11 17:26:37 +01:00
2e7e4d6423 Add some extra packages and vi mode for bash 2024-11-05 03:36:15 +01:00
2d96b12367 Add final check if the VM is up and running after reboot 2024-11-01 23:58:52 +01:00
9f3d638381 Improve the root lv size calculations, still not perfect on bigger disk
and ram sizes
2024-10-31 20:07:40 +01:00
88aebd5276 Preper Shutdown so VMware does not corrupt the installation 2024-10-31 18:27:31 +01:00
29a493bf13 improve logical volume size calculation 2024-10-31 17:32:27 +01:00
99e0fb9e5c remove zram from debian11 since no support 2024-10-31 16:00:44 +01:00
8618f8cf03 remove zram for rhel8 since no support 2024-10-31 15:56:42 +01:00
ccc53081f4 dont use sudo for umount 2024-10-31 15:35:22 +01:00
46b7f56425 Add umount for non RHEL systems 2024-10-31 14:23:55 +01:00
3994d4192d Fix ubuntu install issue 2024-10-31 05:56:20 +01:00
e22cf5cc60 Add SWAP support 2024-10-31 05:46:33 +01:00
08a35b2b6b Add zram-generator config 2024-10-31 02:18:55 +01:00
e357c7881a add zram-generator package 2024-10-31 02:10:21 +01:00
10d6095aad Add swap optimalisations 2024-10-31 02:05:11 +01:00
fcc2ace185 Make root LV size dynamic based on VM disk size 2024-10-31 01:29:48 +01:00
e3d61d5fdc improve VMware cleanup 2024-10-31 01:12:51 +01:00
1af1ea8ffb Fix riski shell pipe 2024-10-31 00:43:49 +01:00
9ebfc500a2 Remove Cloud-init package which can cause issues with NetworkManager on
bootup
2024-10-31 00:41:38 +01:00

Diff Content Not Available