Some checks failed
CI / lint-and-test (pull_request) Successful in 1m16s
CI / ansible-validation (pull_request) Successful in 5m54s
CI / secret-scanning (pull_request) Successful in 1m33s
CI / dependency-scan (pull_request) Successful in 2m49s
CI / sast-scan (pull_request) Successful in 8m53s
CI / license-check (pull_request) Successful in 1m16s
CI / vault-check (pull_request) Failing after 9m5s
CI / playbook-test (pull_request) Successful in 6m10s
CI / container-scan (pull_request) Successful in 4m35s
CI / sonar-analysis (pull_request) Successful in 5m55s
CI / workflow-summary (pull_request) Successful in 1m6s
- Update `dev` target in Makefile to support optional SUDO and SSH_PASS parameters for better flexibility. - Correct the IP address for `dev02` in the inventory file. - Add host variables for `KrakenMint`, including user configuration and vault file for sensitive data. - Modify `dev02` host variables to skip data science stack installation. - Implement tasks to remove NodeSource repository across multiple roles to prevent GPG errors during apt operations. - Update development playbook to handle Node.js installation more robustly, including checks for existing installations and repository configurations. - Ensure apt cache updates ignore NodeSource errors to improve reliability.
Role: base
Description
Installs core system packages and utilities required by all other roles. This is the foundation role that should be applied to all managed hosts.
Requirements
- Ansible 2.9+
- Debian/Ubuntu systems
- Root or sudo access
Installed Packages
Base Utilities
- curl, wget - Download tools
- unzip - Archive extraction
- xclip - Clipboard utility
- tree - Directory visualization
Network & Admin Tools
- net-tools - Network configuration
- ufw - Uncomplicated Firewall
- mailutils - Email utilities
Modern CLI Tools
- jq - JSON processor
- yq - YAML processor (from apt or GitHub binary)
- ripgrep - Fast text search
- fd-find - Fast file finder
Configuration Tasks
- Sets system timezone (default: UTC)
- Configures system locale (default: en_US.UTF-8)
- Creates Ansible temporary directory with proper permissions
- Creates fd symlink for Ubuntu compatibility
Variables
| Variable | Default | Description |
|---|---|---|
timezone |
UTC |
System timezone |
locale |
en_US.UTF-8 |
System locale |
Dependencies
None - this is the foundation role.
Example Playbook
- hosts: all
roles:
- role: base
timezone: America/Toronto
locale: en_US.UTF-8
Tags
base: All base taskssecurity: Security-related tasks
Notes
- This role should be applied before all other roles
- yq is installed from apt if available, otherwise from GitHub binary
- fd-find is symlinked to fd for compatibility across distributions
- UFW firewall is installed but not enabled (handled by SSH role)