33 lines
1.2 KiB
Bash
33 lines
1.2 KiB
Bash
# The control node: ansible-core, sshpass (for -k) and greg's project, with
|
|
# his key.
|
|
for p in ansible-core sshpass; do pkg_installed $p || echo $p >>"$LAB_STATE/missing"; done
|
|
pkg_installed ansible-core || pkg_install ansible-core
|
|
pkg_installed sshpass || pkg_install sshpass
|
|
user_add greg
|
|
install -d -m 700 -o greg -g greg /home/greg/.ssh
|
|
runuser -u greg -- ssh-keygen -q -t ed25519 -N '' -f /home/greg/.ssh/id_ed25519
|
|
install -d -m 755 -o greg -g greg /home/greg/ansible
|
|
cat >/home/greg/ansible/ansible.cfg <<'C'
|
|
[defaults]
|
|
inventory = inventory
|
|
remote_user = devops
|
|
host_key_checking = false
|
|
|
|
[privilege_escalation]
|
|
become = true
|
|
C
|
|
printf '[nodes]\nnode1\nnode2\n' >/home/greg/ansible/inventory
|
|
chown greg: /home/greg/ansible/ansible.cfg /home/greg/ansible/inventory
|
|
|
|
# The managed nodes, with devops (password and greg's key, but no sudo).
|
|
nodes_up 2
|
|
for n in $(nodes_names); do
|
|
in_node -i "$n" 'id devops >/dev/null 2>&1 || useradd -m devops
|
|
echo devops:Lab-Pass-1 | chpasswd
|
|
rm -f /etc/sudoers.d/devops
|
|
install -d -m 700 -o devops -g devops /home/devops/.ssh
|
|
cat >/home/devops/.ssh/authorized_keys
|
|
chown devops: /home/devops/.ssh/authorized_keys
|
|
chmod 600 /home/devops/.ssh/authorized_keys' </home/greg/.ssh/id_ed25519.pub
|
|
done
|