Differences

This shows you the differences between two versions of the page.

--- ansible:ansible_sandbox [2025/02/21 16:26]
manu [Test 2 with roles]
+++ ansible:ansible_sandbox [2025/05/28 10:28] (current)
manu [Test 4 insertafter using bash]
@@ Line 138: / Line 138: @@
 </code>
-cat roles/ssh/main.yml
+cat group_vars/all.yml
+<code>
+---
+# general settings
+default_username: debian
+dot_forward_email: <YOUR_EMAIL_GOES_HERE>
+private_key: .ssh/id_rsa
+public_key: .ssh/id_rsa.pub
+ntpserver: pool.ntp.org
+timezone: Europe/Rome
+# default sshd port
+sshd_port: 22
+# generate random passwords for default user and root user
+default_password: "{{lookup('password', '/dev/null length=15 chars=ascii_letters,digits,punctuation')}}"
+root_password: "{{lookup('password', '/dev/null length=15 chars=ascii_letters,digits,punctuation')}}"
+# unattended packages install configuration
+unattended_mail: "{{dot_forward_email}}"
+unattended_remove_unused_dependencies: true
+unattended_automatic_reboot_time: "03:00"
+unattended_update_days: "Sat"
+unattended_clean_interval: 7
+# fail2ban
+fail2ban_loglevel: INFO
+fail2ban_services:
+  - name: ssh
+    port: ssh
+    filter: sshd
+    logpath: /var/log/auth.log
+</code>
+cat roles/ssh/tasks/main.yml
 <code>
     - name: secure ssh configuration
@@ Line 215: / Line 249: @@
       notify: restart ssh service
 </code>
+cat roles/ssh/handlers/main.yml
+<code>
+    - name: restart ssh service
+      become: yes
+      service:
+        name: ssh
+        state: restarted
+</code>
+cat roles/others/tasks/main.yml
+<code>
+- name: include Debian.yml
+  include_tasks: Debian.yml
+  when: ansible_os_family == 'Debian'
+- name: include RedHat.yml
+  include_tasks: RedHat.yml
+  when: ansible_os_family == 'RedHat'
+</code>
+cat roles/others/tasks/Debian.yml
+<code>
+- name: install others
+  apt:
+    name: ['bash-completion', 'htop', 'rsync', 'tmux', 'nmap', 'netcat-openbsd', 'gawk']
+    state: present
+  when: ansible_os_family == 'Debian'
+</code>
+cat roles/others/tasks/Redhat.yml
+<code>
+- name: install others
+  yum: name={{ item }} state=present
+  when: ansible_os_family == 'Redhat'
+  with_items:
+    - bash-completion
+    - tig
+    - wget
+    - htop
+    - rsync
+    - tmux
+    - nmap
+    - nmap-ncat
+</code>
+===== Test 3 backup file =====
+File is backuped with format **2025-02-23T14:30:00Z**
+<cli prompt='#'>
+---
+- name: Backup file if it exists
+  hosts: localhost
+  tasks:
+    - name: Check if the file exists
+      stat:
+        path: /path/to/your/file
+      register: file_stat
+    - name: Create a backup if the file exists
+      copy:
+        src: /path/to/your/file
+        dest: "/path/to/backup/file_{{ ansible_date_time.iso8601 }}.bak"
+        remote_src: yes
+      when: file_stat.stat.exists
+</cli>
+Backup only if modified
+<cli prompt='#'>
+---
+- name: Backup file if it is different
+  hosts: localhost
+  tasks:
+    - name: Get the checksum of the current file
+      stat:
+        path: /path/to/your/file
+      register: file_stat
+    - name: Get the checksum of the last backup (if exists)
+      stat:
+        path: "/path/to/backup/file_last.bak"
+      register: backup_stat
+      ignore_errors: yes
+    - name: Compare the current file checksum with the backup checksum
+      command: "sha256sum /path/to/your/file | awk '{ print $1 }'"
+      register: current_checksum
+      when: file_stat.stat.exists
+    - name: Compare the backup checksum (if backup exists)
+      command: "sha256sum /path/to/backup/file_last.bak | awk '{ print $1 }'"
+      register: backup_checksum
+      when: backup_stat.stat.exists
+    - name: Backup the file if checksums are different
+      copy:
+        src: /path/to/your/file
+        dest: "/path/to/backup/file_{{ ansible_date_time.iso8601 }}.bak"
+        remote_src: yes
+      when:
+        - file_stat.stat.exists
+        - (backup_stat.stat.exists == false or current_checksum.stdout != backup_checksum.stdout)
+</cli>
+===== Test 4 insertafter using bash =====
+<cli>
+---
+- name: Insert line after pattern using bash
+  hosts: all
+  become: true
+  tasks:
+    - name: Insert line after pattern using sed
+      shell: |
+        if ! grep -q '^new_config_line=value$' /etc/example.conf; then
+          sed -i '/# INSERT HERE/a new_config_line=value' /etc/example.conf
+        fi
+      args:
+        executable: /bin/bash
+</cli>
+https://stackoverflow.com/questions/70162334/in-ansible-how-do-i-add-a-line-without-delete-comment
+https://www.theunixschool.com/2012/06/insert-line-before-or-after-pattern.html

wiki

User Tools

Site Tools

Differences

Page Tools