DerLinkman
30f3e9a4c6
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
38 lines
1.1 KiB
Docker
38 lines
1.1 KiB
Docker
FROM debian:trixie-slim
|
|
ARG DEBIAN_FRONTEND=noninteractive
|
|
ENV TZ=Europe/Berlin
|
|
ENV ANSIBLE_VERSION=2.20.6
|
|
ENV PIP_BREAK_SYSTEM_PACKAGES=1
|
|
|
|
RUN apt update && apt install -y --no-install-recommends \
|
|
nano \
|
|
git \
|
|
wget \
|
|
unzip \
|
|
curl \
|
|
python3-pip \
|
|
tzdata \
|
|
openssh-client \
|
|
iputils-ping \
|
|
vim \
|
|
less \
|
|
&& apt clean \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN mkdir -p /etc/ssh/ssh_config.d \
|
|
&& printf 'Host *\n StrictHostKeyChecking no\n UserKnownHostsFile /dev/null\n' > /etc/ssh/ssh_config.d/99-no-hostkey-check.conf
|
|
|
|
RUN pip3 install --no-cache-dir --upgrade \
|
|
ansible-core~=${ANSIBLE_VERSION}
|
|
|
|
RUN mkdir -p /root/.bashrc.d
|
|
COPY ansible-functs.sh /root/.bashrc.d/ansible-functs.sh
|
|
RUN chmod +x /root/.bashrc.d/ansible-functs.sh \
|
|
&& printf '\n[ -f /root/.bashrc.d/ansible-functs.sh ] && . /root/.bashrc.d/ansible-functs.sh\n' >> /root/.bashrc
|
|
|
|
COPY requirements.yml /ansible/requirements.yml
|
|
RUN ansible-galaxy collection install -r /ansible/requirements.yml
|
|
|
|
WORKDIR /ansible
|
|
|
|
CMD ["ansible-playbook", "--version"] |