2024-10-26 16:23:45 +02:00
|
|
|
---
|
|
|
|
|
# file: common/tasks/main.yml
|
2025-08-30 18:28:06 +02:00
|
|
|
- name: Ensure there is a default locale set
|
|
|
|
|
ansible.builtin.import_tasks: set-locale.yml
|
|
|
|
|
|
2024-10-26 16:23:45 +02:00
|
|
|
- name: Ensure required packages are present on systems
|
|
|
|
|
ansible.builtin.import_tasks: prereq-packages.yml
|
|
|
|
|
|
|
|
|
|
- name: Make /tmp non-executable
|
|
|
|
|
ansible.builtin.import_tasks: tmp-nonexec.yml
|
|
|
|
|
|
|
|
|
|
- name: Import tasks to ensure creation of unprivileged user
|
|
|
|
|
ansible.builtin.import_tasks: unpriv-user.yml
|
|
|
|
|
|
|
|
|
|
- name: Import custom fact setting
|
|
|
|
|
ansible.builtin.import_tasks: custom-fact.yml
|
|
|
|
|
|
2025-09-02 14:37:33 +02:00
|
|
|
- name: Display custom facts from /etc/ansible/facts.d
|
|
|
|
|
ansible.builtin.debug:
|
|
|
|
|
var: ansible_local['cpu_info']
|
|
|
|
|
|
2025-09-02 13:04:30 +02:00
|
|
|
- name: Firmware block for x86_64 systems
|
|
|
|
|
when: "'Dell' in ansible_board_vendor or 'LENOVO' in ansible_board_vendor"
|
|
|
|
|
block:
|
|
|
|
|
- name: Import firmware tasks
|
2025-09-02 13:07:06 +02:00
|
|
|
ansible.builtin.import_tasks: additional-firmware.yml
|
2025-09-02 13:04:30 +02:00
|
|
|
|
2024-10-26 16:23:45 +02:00
|
|
|
- name: Import color-shell tasks for the common-role
|
|
|
|
|
ansible.builtin.import_tasks: color-shell.yml
|
|
|
|
|
|
|
|
|
|
- name: Import journald tasks for the common-role
|
|
|
|
|
ansible.builtin.import_tasks: edit-journald.yml
|
|
|
|
|
|
|
|
|
|
- name: Import hostname tasks for the common-role
|
|
|
|
|
ansible.builtin.import_tasks: set-hostname.yml
|
|
|
|
|
|
|
|
|
|
- name: Import sudoers tasks for the common-role
|
|
|
|
|
ansible.builtin.import_tasks: sudoers.yml
|
|
|
|
|
|
|
|
|
|
- name: Set the custom message of the day (motd)
|
|
|
|
|
ansible.builtin.import_tasks: motd.yml
|
|
|
|
|
|
|
|
|
|
- name: Perform SSH daemon hardening
|
|
|
|
|
ansible.builtin.import_tasks: ssh-config.yml
|