a78c9ab8e8
fix(partitioning): register swapoff result for changed_when handling
2026-02-11 23:47:36 +01:00
1dd54268be
fix(luks): complete migration of partitioning_luks_tpm2_device reference
...
The refactor in 9e7fc15 removed the partitioning_luks_tpm2_device
default but missed updating the reference in the configuration role,
causing an undefined variable error for all LUKS-enabled hosts.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-11 23:28:05 +01:00
b42125f9b4
refactor(bootstrap): nest network fields under system.network to match main project schema
2026-02-11 23:03:37 +01:00
164f58770b
fix(bootstrap): correct changed_when on state-changing commands
2026-02-11 21:06:10 +01:00
9e7fc156ab
refactor(luks): use system_cfg.luks directly across roles
2026-02-11 19:26:51 +01:00
7e9abe862f
fix: honor libvirt network config, preserve DHCP DNS with search-only NM config, and exact-match Xen VM names
2026-02-11 14:00:20 +01:00
5aa5022983
docu(readme): recompose README from pre/post consolidation versions
...
Restore the navigable numbered ToC, conceptual overview, and structured
usage section from the original while keeping the current dict-based
variable model, expanded platform support, configuration model docs,
and multi-disk schema from the consolidation rewrite. Also fixes
banner.motd default (false, not true) and adds system.version column
to the distribution table.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-11 08:25:15 +01:00
74ae98db35
fix(banner): align MOTD star border and default motd to disabled
2026-02-11 08:02:27 +01:00
fc23f84cc3
fix(libvirt): restore missing virtualization_mac_address default
2026-02-11 08:02:27 +01:00
3c7d9e16da
refactor(safety): remove redundant live environment detection from system_check
2026-02-11 08:02:27 +01:00
e4b9f1c579
refactor(playbook): rename prompt variables with backwards-compatible fallbacks
2026-02-11 08:02:27 +01:00
920969d60e
refactor(validation): deduplicate hypervisor combine and collapse schema checks
2026-02-11 08:02:27 +01:00
9d723630cb
refactor(system): simplify normalization by removing redundant intermediate merges
2026-02-11 08:02:27 +01:00
0c8242589c
fix(bootstrap): repair version-specific package availability across distributions
2026-02-11 08:02:27 +01:00
2885ba9ffa
docu(readme): consolidate final documentation state
2026-02-11 05:37:18 +01:00
81d63029a4
fix(config): enable dictionary merge for scoped overrides
2026-02-11 05:37:18 +01:00
2fa0fba4c4
refactor(schema): move filesystem into system dictionary
2026-02-11 05:37:18 +01:00
055b6de68b
refactor(configuration): simplify grub commandline variable assembly
2026-02-11 05:37:18 +01:00
4e85740e0a
refactor(configuration): reduce LUKS runtime temporary facts
2026-02-11 05:37:18 +01:00
0ee2806c62
refactor(schema): simplify dict normalization and schema checks
2026-02-11 05:37:18 +01:00
1027afc6ea
docu(schema): update docs and examples to compact dict keys
2026-02-11 05:37:18 +01:00
74cb09ffee
refactor(schema): rename nested dict keys and simplify validation
2026-02-11 05:37:18 +01:00
9f5096d69d
docu(schema): align docs and baremetal example with dict model
2026-02-11 05:37:18 +01:00
6da46a03ed
fix(validation): reject deprecated top-level schema keys
2026-02-11 05:37:18 +01:00
e7c898d653
refactor(vars): simplify normalization and remove effective intermediates
2026-02-11 05:37:18 +01:00
0388dca0a4
fix(system): default physical installs to archlinux when os is omitted
2026-02-11 05:37:18 +01:00
1d545fbbc8
docu(readme): document dict-based variables and examples
2026-02-11 05:37:18 +01:00
53bb4589b6
fix(runtime): migrate roles to nested system fields
2026-02-11 05:37:18 +01:00
73f0b81b5a
feat(disks): add standardized multi-disk mount schema
2026-02-11 05:37:18 +01:00
2d46df8f5a
refactor(vars): enforce nested system and hypervisor schema
2026-02-11 05:37:18 +01:00
45d3fef4e2
refactor(vars): remove legacy variable inputs
...
- Require hypervisor as dict input and use hypervisor_cfg/hypervisor_type internally
- Remove vm_* and hypervisor_* compatibility aliases
- Update roles and docs to use system/hypervisor dictionaries only
2026-02-11 05:37:18 +01:00
a6b051d9e4
refactor(vars): add system/hypervisor dict inputs
...
- Normalize new system_cfg + hypervisor_cfg and keep legacy vm_* and hypervisor_* aliases
- Support multiple system.disks (creation + optional mount + fstab generation)
- Add system_check safety role (production + existing system detection)
- Update README and example inventories
2026-02-11 05:37:18 +01:00
8056890460
fix(partitioning): add LVM extent headroom
2026-02-06 00:43:02 +01:00
085e16abe9
fix(network): Removes hardcoded MAC-Address from NetworkManager config
...
This fixes an issue that in some virtual environments the NICs
MAC-Address gets changes and the config no longer applies.
2026-01-05 18:22:18 +01:00
23f08b350b
refactor(services): remove unnecessary firewalld services disablement.
...
It is not needed if the firewalld package is not installed in the first
place
2026-01-05 18:19:14 +01:00
315fdef69f
feat(services): implement SSH server toggeling
2026-01-05 18:18:18 +01:00
2d4127a688
Force local stat for third-party prep tasks
2026-01-02 19:15:34 +01:00
1cc1966b97
Force local connection for third-party prep check
2026-01-02 19:14:11 +01:00
4d72a8999f
Run third-party prep check locally
2026-01-02 19:02:00 +01:00
e264d1cabc
Fix localhost delegate for third-party prep check
2026-01-02 18:58:40 +01:00
aa6e356444
Add third-party preparation task hook
2026-01-02 18:55:45 +01:00
fe0b72c9d8
Make chroot command configurable
2026-01-02 18:53:55 +01:00
ce972e55dd
Add swap_enabled toggle for swap setup
2026-01-02 18:51:27 +01:00
2891de8fef
Add zstd toggle for btrfs and zram
2026-01-02 18:47:32 +01:00
696df925c6
Update LVM swap sizing policy
2026-01-02 16:29:24 +01:00
65ef8cb1ca
Enforce 20GiB minimum vm_size
2026-01-02 16:18:14 +01:00
396d802dc3
Enable full-disk LVM root sizing
2026-01-02 16:11:06 +01:00
90cc9add01
Use systemd module and link timezone
2026-01-02 16:10:50 +01:00
eeaf3b0f0a
Document partitioning overrides and inventory host vars
2026-01-02 16:10:50 +01:00
0a76e07b39
Fix post-reboot extra packages task
2026-01-02 15:55:27 +01:00
82a1548b2e
Align ESP sizing to full 512 MiB
2026-01-02 15:10:35 +01:00
95b793885a
Mount Debian ESP on /boot/efi without LUKS
2026-01-02 15:10:35 +01:00
f7c020de52
Drop vars.yml usage
2026-01-02 15:10:35 +01:00
7e4c2d87e2
Make inventory examples more generic
2026-01-02 15:10:34 +01:00
bc6bd2823f
Inline extra package normalization
2026-01-02 15:10:34 +01:00
01e0ea8b4b
Move pre-tasks into global defaults
2026-01-02 15:10:34 +01:00
75395cc8d2
Drop custom_iso_enabled and log defaults
2026-01-02 15:10:34 +01:00
be80c4096c
Restore global defaults lint exclusion
2026-01-02 15:10:34 +01:00
f8e3ce62d4
Map global defaults in playbook
2026-01-02 15:10:34 +01:00
78316a8946
Fix lint formatting and exceptions
2026-01-02 15:10:34 +01:00
5226206cab
Increase EFI system partition size
2026-01-02 15:10:34 +01:00
d9e42c0c84
Add Molecule scaffolding
2026-01-02 11:26:21 +01:00
b9484dadab
Add libvirt inventory matrix example
2026-01-02 11:26:06 +01:00
230b14e2ab
Move derived vars into role defaults
2026-01-02 11:25:51 +01:00
f9a8791b4d
Add firewalld_enabled toggle
2026-01-02 11:25:40 +01:00
f46dea0748
Define optional defaults and require vm_cpus
2026-01-02 11:25:06 +01:00
b1eedd30dc
Move partitioning LUKS defaults into role
2026-01-02 11:23:31 +01:00
98d0a4954d
Remove defaults for required vars
2025-12-28 17:10:00 +01:00
fd37b4ee96
Move global defaults into role defaults
2025-12-28 16:47:53 +01:00
7fe2a0dcc1
Normalize user-facing defaults
2025-12-28 16:41:11 +01:00
cc77f646d7
Normalize LUKS boot layout and partitioning defaults
2025-12-28 16:00:49 +01:00
2be6117aac
Update Fedora to 43
2025-12-28 04:04:27 +01:00
232ab244ca
Restore Debian ESP mount layout
2025-12-28 02:24:33 +01:00
ef945d925a
Fix Debian initramfs regeneration
2025-12-28 01:54:14 +01:00
366299ea6d
Ensure initramfs-tools for Debian/Ubuntu
2025-12-28 01:29:26 +01:00
3da6894ff1
Enable GRUB cryptodisk defaults
2025-12-28 00:46:09 +01:00
e1db2ce434
Fix bootstrap package list rendering
2025-12-28 00:12:37 +01:00
ae4fb6f43c
Condition LUKS and guest tools in bootstrap vars
2025-12-27 23:52:06 +01:00
2c23ce6cbb
Fix Debian EFI mount layout
2025-12-27 23:49:21 +01:00
0211efbae7
Docs, examples, and tooling
2025-12-27 23:07:47 +01:00
dda1287f23
CIS role split and permission safety
2025-12-27 22:27:26 +01:00
f62dba3ed6
Cleanup refactor and libvirt removal tooling
2025-12-27 21:44:33 +01:00
f08855456a
Virtualization TPM2 and cloud-init fixes
2025-12-27 20:19:11 +01:00
4bce08e77b
Partitioning idempotency and filesystem tasks
2025-12-26 23:31:54 +01:00
72ec492a33
LUKS enrollment and RHEL cmdline/BLS
2025-12-26 22:09:08 +01:00
efad1b9a67
Configuration role refactor and network template
2025-12-26 20:38:42 +01:00
732784fa2d
Split bootstrap by OS
2025-12-25 22:12:19 +01:00
a71d27c29d
Playbook flow and environment prep
2025-12-25 20:47:37 +01:00
7953c2c285
Add Debian 13 (Trixie) support
2025-08-11 21:37:25 +02:00
7a1a44220b
Update doc to Fedora 42
2025-07-07 15:24:17 +02:00
970af5ff73
Fix rhel10 variable assertion
2025-07-06 04:36:55 +02:00
035189d326
use proper datacenter variable
2025-07-06 04:34:16 +02:00
ede6829a89
Update Fedora to 42
2025-07-06 04:28:59 +02:00
b9156a0cac
Use the proper property name
2025-06-24 16:57:18 +02:00
1c5f93e76f
Fix VM state after cleanup
2025-06-24 16:54:57 +02:00
fe635b0783
use proper filename for role variables
2025-06-17 06:34:39 +02:00
0b4d2320c0
Update ubuntu to plucky release
2025-06-17 03:57:58 +02:00
11f7af1d9f
Add rhel10 support
2025-06-17 03:13:30 +02:00
e3a52b889b
Add ncurses-term package to ubuntu for more legacy terminal descriptors
2025-05-30 09:48:55 +02:00
ff2e5fb6b8
Add ncurses-term package for legacy ssh client (terminal descriptors)
2025-05-30 09:14:21 +02:00
db62d360b7
Add vm_dns_search to hostname if set
2025-05-26 14:37:28 +02:00
3d3f1caa14
Improve SSH CIS hardening
2025-05-04 01:41:00 +02:00
200e73e3ef
Fix Typo
2025-04-29 20:30:02 +02:00
f5fda74cad
Improve Arch packages + Disable swap before unmounting
2025-04-29 20:28:55 +02:00
9e4ae3ae33
Document vmware_ssh variable
2025-03-25 13:13:06 +01:00
052c89aa3e
Fix vm creation when no rhel_iso for vmware
2025-02-20 16:00:39 +01:00
21e6edcf63
Increase max home size to 20GB
2025-02-18 21:39:58 +01:00
4961cc4b03
Add guest_id since its necessary
2025-02-17 21:38:56 +01:00
a7497dbb0e
Implement VMware annotation
2025-02-17 21:17:18 +01:00
c764c209cb
Improve Partition calculation algorithm
2025-02-17 20:43:45 +01:00
9096a8fc18
Add DNS Search option
2025-02-10 15:16:15 +01:00
236df77406
Update README regarding SELinux
2025-02-07 20:50:20 +01:00
ba6938b225
dont fail if selinux is undefined
2025-02-07 20:47:30 +01:00
919c2085d2
Remove motd files for rhel
2025-02-05 17:14:17 +01:00
55e7b5e98c
Enable option to disable selinux for all osses
2025-02-05 01:41:10 +01:00
ef81e6b121
Include Standard package group for RHEL systems
2025-02-05 00:02:37 +01:00
2cf2f71b9c
Make sure Volumes are safely unmounted before reboot
2025-01-22 12:34:00 +01:00
7b972053ef
Fix CIS applienc for RHEL8
2025-01-21 22:34:01 +01:00
1afe5155ce
Update package name to match correctly
2025-01-21 22:02:43 +01:00
67065520a2
Make sure the VM truly starts
2025-01-21 21:35:47 +01:00
b3b6376d81
Do not check if VM is back on vmware with cis activated, it will fail
...
without the key, and key cannot be set otherwise awx refuses connection
2025-01-21 21:30:56 +01:00
9f14556ef6
Add banner
2025-01-21 20:16:05 +01:00
293b608c84
Add ssh key survey
2025-01-21 20:00:18 +01:00
50a7011de7
Add missing variable
2025-01-21 19:58:07 +01:00
8d0c948dff
CIS Adjustments
2025-01-21 19:55:36 +01:00
183ec709f6
Fix variable distribution
2025-01-21 17:43:18 +01:00
6dd32b5a63
Make Network Assignment more reliable
2025-01-21 16:59:56 +01:00
9fdf83aad3
Add nms default
2025-01-17 00:50:26 +01:00
15fc6e0dd1
Remove nms from ip since already addition already done internaly
2025-01-17 00:45:42 +01:00
f866502d47
Do not reboot localhost!
2025-01-17 00:38:35 +01:00
4291aa8c4a
Don't fail proxmox install if rhel_iso is not defined
2025-01-17 00:07:58 +01:00
6e8ac0283a
use 24 netmask as default if not set
2025-01-17 00:03:38 +01:00
c650c2b50c
Add extra utils
2025-01-14 21:14:40 +01:00
2cc06e3f7d
Set correct IP NetworkMask if defined
2025-01-14 16:08:10 +01:00
8ba12fe4bf
Fix typo
2025-01-14 15:03:06 +01:00
c72ccd06aa
Dont fail if vmware_ssh is not defined
2025-01-14 14:58:58 +01:00
bfadc82e82
Add dig via bind-utils for rhel
2024-12-03 16:42:47 +01:00
c1b5793cab
RHEL add python package
2024-12-03 13:31:31 +01:00
72dabe3107
Do not hardcode macaddress which makes vm cloning harder
2024-12-02 18:08:48 +01:00
0ff03d9d6f
Use RHEL nameing for yum repo file
2024-11-12 14:14:09 +01:00
247e3e6c3b
Fix DNS issue
2024-11-11 17:44:52 +01:00
d864a492ee
Adjust never libvirt loaders
2024-11-11 17:26:37 +01:00
2e7e4d6423
Add some extra packages and vi mode for bash
2024-11-05 03:36:15 +01:00
2d96b12367
Add final check if the VM is up and running after reboot
2024-11-01 23:58:52 +01:00
9f3d638381
Improve the root lv size calculations, still not perfect on bigger disk
...
and ram sizes
2024-10-31 20:07:40 +01:00
88aebd5276
Preper Shutdown so VMware does not corrupt the installation
2024-10-31 18:27:31 +01:00
29a493bf13
improve logical volume size calculation
2024-10-31 17:32:27 +01:00
99e0fb9e5c
remove zram from debian11 since no support
2024-10-31 16:00:44 +01:00
8618f8cf03
remove zram for rhel8 since no support
2024-10-31 15:56:42 +01:00
ccc53081f4
dont use sudo for umount
2024-10-31 15:35:22 +01:00
46b7f56425
Add umount for non RHEL systems
2024-10-31 14:23:55 +01:00
3994d4192d
Fix ubuntu install issue
2024-10-31 05:56:20 +01:00
e22cf5cc60
Add SWAP support
2024-10-31 05:46:33 +01:00
08a35b2b6b
Add zram-generator config
2024-10-31 02:18:55 +01:00
e357c7881a
add zram-generator package
2024-10-31 02:10:21 +01:00
10d6095aad
Add swap optimalisations
2024-10-31 02:05:11 +01:00
fcc2ace185
Make root LV size dynamic based on VM disk size
2024-10-31 01:29:48 +01:00
e3d61d5fdc
improve VMware cleanup
2024-10-31 01:12:51 +01:00
1af1ea8ffb
Fix riski shell pipe
2024-10-31 00:43:49 +01:00
9ebfc500a2
Remove Cloud-init package which can cause issues with NetworkManager on
...
bootup
2024-10-31 00:41:38 +01:00