Ansible Role for Ubuntu

This is a simple Ansible role to update and set up an Ubuntu server.

Important

Make sure to test this role in a non-production environment before using it.

Important

A SLSA artifact is available under the slsa action workflow for verification.

Tasks Overview

• Install local facts
• Set up local facts and install Python packages
• Configure package manager
• Set up systemd timesyncd
• Handle package installation and removal using needrestart
• Configure apport
• Set up motdnews
• Configure sudo permissions
• Add issue message

Default Role Variables

Packages Configuration

system_upgrade: true
packages_blocklist:
  - apport*
  - beep
  - pastebinit
  - popularity-contest
  - prelink
  - rpcbind
  - rsh*
  - talk*
  - telnet*
  - tftp*
  - whoopsie
  - xinetd
  - yp-tools
  - ypbind
packages_installation:
  - debsums
  - gnupg2
  - haveged
  - libpam-tmpdir
  - lsb-release
  - needrestart
  - unattended-upgrades

system_upgrade: true enables apt upgrade.

packages_installation lists packages to be installed, while packages_blocklist lists packages to be removed.

Time Synchronization Configuration

---
manage_timesyncd: true

fallback_ntp:
  - ntp.netnod.se
  - ntp.ubuntu.com
ntp:
  - 2.pool.ntp.org
  - time.nist.gov

If enable_timesyncd: true, this configures systemd timesyncd.

Contributing

Want to help out? Awesome! We welcome contributions of any size. If you notice anything unusual, feel free to report an issue, improve the code by submitting a pull request, or help support this project by sponsoring it.

License

Apache License Version 2.0

Author Information

https://github.com/konstruktoid