ilia e897b1a027
Some checks failed
CI / lint-and-test (push) Successful in 1m16s
CI / ansible-validation (push) Successful in 5m49s
CI / secret-scanning (push) Successful in 1m33s
CI / dependency-scan (push) Successful in 2m48s
CI / sast-scan (push) Successful in 5m46s
CI / license-check (push) Successful in 1m11s
CI / vault-check (push) Failing after 5m25s
CI / playbook-test (push) Successful in 5m32s
CI / container-scan (push) Successful in 4m32s
CI / sonar-analysis (push) Successful in 6m53s
CI / workflow-summary (push) Successful in 1m6s
Fix: Resolve linting errors and improve firewall configuration (#2)
- Fix UFW firewall to allow outbound traffic (was blocking all outbound)
- Add HOST parameter support to shell Makefile target
- Fix all ansible-lint errors (trailing spaces, missing newlines, document starts)
- Add changed_when: false to check commands
- Fix variable naming (vault_devGPU -> vault_devgpu)
- Update .ansible-lint config to exclude .gitea/ and allow strategy: free
- Fix NodeSource repository GPG key handling in shell playbook
- Add missing document starts to host_vars files
- Clean up empty lines in datascience role files

Reviewed-on: #2
2025-12-25 16:47:26 -05:00
..
2025-08-27 02:28:58 +00:00

Role: base

Description

Installs core system packages and utilities required by all other roles. This is the foundation role that should be applied to all managed hosts.

Requirements

  • Ansible 2.9+
  • Debian/Ubuntu systems
  • Root or sudo access

Installed Packages

Base Utilities

  • curl, wget - Download tools
  • unzip - Archive extraction
  • xclip - Clipboard utility
  • tree - Directory visualization

Network & Admin Tools

  • net-tools - Network configuration
  • ufw - Uncomplicated Firewall
  • mailutils - Email utilities

Modern CLI Tools

  • jq - JSON processor
  • yq - YAML processor (from apt or GitHub binary)
  • ripgrep - Fast text search
  • fd-find - Fast file finder

Configuration Tasks

  • Sets system timezone (default: UTC)
  • Configures system locale (default: en_US.UTF-8)
  • Creates Ansible temporary directory with proper permissions
  • Creates fd symlink for Ubuntu compatibility

Variables

Variable Default Description
timezone UTC System timezone
locale en_US.UTF-8 System locale

Dependencies

None - this is the foundation role.

Example Playbook

- hosts: all
  roles:
    - role: base
      timezone: America/Toronto
      locale: en_US.UTF-8

Tags

  • base: All base tasks
  • security: Security-related tasks

Notes

  • This role should be applied before all other roles
  • yq is installed from apt if available, otherwise from GitHub binary
  • fd-find is symlinked to fd for compatibility across distributions
  • UFW firewall is installed but not enabled (handled by SSH role)