47 lines
1.3 KiB
YAML
47 lines
1.3 KiB
YAML
---
|
|
- name: Set timezone to UTC
|
|
community.general.timezone:
|
|
name: UTC
|
|
|
|
- name: Let root authenticate via ssh pubkey, Ubuntu
|
|
ansible.builtin.replace:
|
|
path: /root/.ssh/authorized_keys
|
|
regexp: '^no.*(ssh.*)$'
|
|
replace: '\1'
|
|
|
|
- name: Ensure apt automatic upgrades are configured correctly
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/apt/apt.conf.d/20auto-upgrades
|
|
regexp: 'APT::Periodic::Unattended-Upgrade "(.*)";'
|
|
line: 'APT::Periodic::Unattended-Upgrade "{{ "1" if debian_auto_updates | bool else "0" }}";'
|
|
create: yes
|
|
|
|
- name: Ensure unnecessary packages from Ubuntu are removed.
|
|
ansible.builtin.apt:
|
|
state: absent
|
|
name:
|
|
- snapd
|
|
- lxd-agent-loader
|
|
- modemmanager # Curious: mmcli --list-modems
|
|
register: apt_status
|
|
until: apt_status is success
|
|
delay: 6
|
|
retries: 10
|
|
|
|
- name: Upgrade all packages
|
|
ansible.builtin.apt:
|
|
update_cache: yes
|
|
cache_valid_time: 3600
|
|
upgrade: yes
|
|
|
|
- name: Update sources.list to select a fast mirror on Ubuntu
|
|
ansible.builtin.replace:
|
|
path: /etc/apt/sources.list
|
|
regexp: 'http://.*archive.ubuntu.com/ubuntu'
|
|
replace: 'mirror://mirrors.ubuntu.com/mirrors.txt'
|
|
when: ansible_distribution == 'Ubuntu'
|
|
|
|
- name: Remove dependencies that are no longer required
|
|
ansible.builtin.apt:
|
|
autoremove: yes
|