62 lines
2.0 KiB
YAML
62 lines
2.0 KiB
YAML
---
|
|
# Centralized normalization — all input dicts (system, hypervisor, disks)
|
|
# are normalized here into system_cfg, hypervisor_cfg, etc.
|
|
# Downstream roles consume these computed facts directly and do NOT need
|
|
# per-role _normalize.yml (except CIS, which has its own input dict).
|
|
- name: Global defaults loaded
|
|
ansible.builtin.debug:
|
|
msg: Global defaults loaded.
|
|
|
|
- name: Normalize hypervisor inputs
|
|
ansible.builtin.include_tasks: hypervisor.yml
|
|
|
|
- name: Normalize system inputs
|
|
ansible.builtin.include_tasks: system.yml
|
|
|
|
- name: Validate variables
|
|
ansible.builtin.include_tasks: validation.yml
|
|
|
|
- name: Set OS family flags
|
|
ansible.builtin.set_fact:
|
|
is_rhel: "{{ os in os_family_rhel }}"
|
|
is_debian: "{{ os in os_family_debian }}"
|
|
|
|
- name: Normalize OS version for keying
|
|
when:
|
|
- os_version is defined
|
|
- (os_version | string | length) > 0
|
|
ansible.builtin.set_fact:
|
|
os_version_major: "{{ (os_version | string).split('.')[0] }}"
|
|
|
|
- name: Set chroot command wrapper
|
|
ansible.builtin.set_fact:
|
|
chroot_command: >-
|
|
{{
|
|
'systemd-nspawn -D /mnt'
|
|
if (system_cfg.features.chroot.tool | default('arch-chroot')) == 'systemd-nspawn'
|
|
else (system_cfg.features.chroot.tool | default('arch-chroot')) ~ ' /mnt'
|
|
}}
|
|
|
|
- name: Set Python interpreter for RHEL-based installers
|
|
when:
|
|
- ansible_python_interpreter is not defined
|
|
- is_rhel | bool
|
|
ansible.builtin.set_fact:
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
|
|
- name: Set SSH access
|
|
when:
|
|
- system_cfg.type == "virtual"
|
|
- hypervisor_type != "vmware"
|
|
ansible.builtin.set_fact:
|
|
ansible_user: "{{ system_cfg.users[0].name }}"
|
|
ansible_password: "{{ system_cfg.users[0].password }}"
|
|
ansible_become_password: "{{ system_cfg.users[0].password }}"
|
|
ansible_ssh_extra_args: "-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no"
|
|
no_log: true
|
|
|
|
- name: Set connection for VMware
|
|
when: hypervisor_type == "vmware"
|
|
ansible.builtin.set_fact:
|
|
ansible_connection: vmware_tools
|