2016-11-07 14:00:57 +01:00
|
|
|
---
|
|
|
|
|
2017-11-21 10:17:46 +01:00
|
|
|
- name: "Compatibility check"
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.assert:
|
2023-03-17 20:05:42 +01:00
|
|
|
that:
|
2023-03-17 22:32:11 +01:00
|
|
|
- ansible_distribution == "Debian"
|
2023-03-17 20:05:42 +01:00
|
|
|
- ansible_distribution_major_version is version('8', '>=')
|
|
|
|
msg: Only compatible with Debian >= 8
|
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
|
|
|
|
- name: "apt-transport-https is installed for https repositories (before Buster)"
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.apt:
|
2023-03-17 20:05:42 +01:00
|
|
|
name:
|
|
|
|
- apt-transport-https
|
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
when: ansible_distribution_major_version is version('10', '<')
|
|
|
|
|
2023-03-17 22:32:11 +01:00
|
|
|
- name: "certificates are installed for https repositories"
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.apt:
|
2023-03-17 20:05:42 +01:00
|
|
|
name:
|
|
|
|
- ca-certificates
|
2017-06-05 11:43:25 +02:00
|
|
|
tags:
|
2019-06-21 10:18:54 +02:00
|
|
|
- apt
|
2017-03-24 12:05:32 +01:00
|
|
|
|
2017-10-10 16:34:53 +02:00
|
|
|
- name: Custom configuration
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: config.yml
|
2021-05-09 23:06:42 +02:00
|
|
|
when: apt_config | bool
|
2017-10-10 16:34:53 +02:00
|
|
|
tags:
|
2019-06-21 10:18:54 +02:00
|
|
|
- apt
|
2017-10-10 16:34:53 +02:00
|
|
|
|
2023-03-17 20:05:42 +01:00
|
|
|
- name: Install basics repositories (Debian <12)
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: basics.oneline.yml
|
2023-03-17 20:05:42 +01:00
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
when:
|
|
|
|
- apt_install_basics | bool
|
|
|
|
- ansible_distribution_major_version is version('12', '<')
|
|
|
|
|
|
|
|
- name: Install basics repositories (Debian >=12)
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: basics.deb822.yml
|
2023-03-17 20:05:42 +01:00
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
when:
|
|
|
|
- apt_install_basics | bool
|
|
|
|
- ansible_distribution_major_version is version('12', '>=')
|
|
|
|
|
|
|
|
- name: Install backports repositories (Debian <12)
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: backports.oneline.yml
|
2017-06-05 11:43:25 +02:00
|
|
|
tags:
|
2019-06-21 10:18:54 +02:00
|
|
|
- apt
|
2023-03-17 20:05:42 +01:00
|
|
|
when:
|
|
|
|
- apt_install_backports | bool
|
|
|
|
- ansible_distribution_major_version is version('12', '<')
|
2017-03-24 12:05:32 +01:00
|
|
|
|
2023-03-18 15:38:05 +01:00
|
|
|
# With Debian 12+ and the deb822 format of source files
|
|
|
|
# backports are always installed but enabled according to `apt_install_backports`
|
2023-03-17 20:05:42 +01:00
|
|
|
- name: Install backports repositories (Debian >=12)
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: backports.deb822.yml
|
2017-06-05 11:43:25 +02:00
|
|
|
tags:
|
2019-06-21 10:18:54 +02:00
|
|
|
- apt
|
2023-03-17 20:05:42 +01:00
|
|
|
when:
|
|
|
|
- ansible_distribution_major_version is version('12', '>=')
|
|
|
|
|
2017-03-24 12:05:32 +01:00
|
|
|
|
2023-03-17 20:05:42 +01:00
|
|
|
- name: Install Evolix Public repositories (Debian <12)
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: evolix_public.oneline.yml
|
2017-06-05 11:43:25 +02:00
|
|
|
tags:
|
2019-06-21 10:18:54 +02:00
|
|
|
- apt
|
2023-03-17 20:05:42 +01:00
|
|
|
when:
|
|
|
|
- apt_install_evolix_public | bool
|
|
|
|
- ansible_distribution_major_version is version('12', '<')
|
|
|
|
|
|
|
|
- name: Install Evolix Public repositories (Debian >=12)
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: evolix_public.deb822.yml
|
2023-03-17 20:05:42 +01:00
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
when:
|
|
|
|
- apt_install_evolix_public | bool
|
|
|
|
- ansible_distribution_major_version is version('12', '>=')
|
|
|
|
|
|
|
|
- name: Clean GANDI sources
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.file:
|
2023-03-17 20:05:42 +01:00
|
|
|
path: '{{ item }}'
|
|
|
|
state: absent
|
|
|
|
loop:
|
|
|
|
- /etc/apt/sources.list.d/debian-security.list
|
|
|
|
- /etc/apt/sources.list.d/debian-jessie.list
|
|
|
|
- /etc/apt/sources.list.d/debian-stretch.list
|
|
|
|
- /etc/apt/sources.list.d/debian-buster.list
|
|
|
|
- /etc/apt/sources.list.d/debian-bullseye.list
|
|
|
|
- /etc/apt/sources.list.d/debian-update.list
|
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
when: apt_clean_gandi_sourceslist | bool
|
|
|
|
|
2019-05-13 17:48:55 +02:00
|
|
|
|
2023-08-18 12:00:03 +02:00
|
|
|
- name: "Disable NonFreeFirmware warning for VM on Debian 12+"
|
|
|
|
ansible.builtin.lineinfile:
|
|
|
|
path: /etc/apt/apt.conf.d/no-bookworm-firmware.conf
|
|
|
|
create: yes
|
|
|
|
line: "APT::Get::Update::SourceListWarnings::NonFreeFirmware \"false\";"
|
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
when:
|
|
|
|
- ansible_distribution_major_version is version('12', '>=')
|
|
|
|
- ansible_virtualization_role == "guest"
|
|
|
|
|
|
|
|
|
2019-05-13 17:48:55 +02:00
|
|
|
- name: Install check for packages marked hold
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.import_tasks: hold_packages.yml
|
2021-05-09 23:06:42 +02:00
|
|
|
when: apt_install_hold_packages | bool
|
2019-05-13 17:48:55 +02:00
|
|
|
tags:
|
2019-06-21 10:18:54 +02:00
|
|
|
- apt
|
2022-01-25 18:25:47 +01:00
|
|
|
|
|
|
|
- name: Updating APT cache
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.apt:
|
2022-01-25 18:25:47 +01:00
|
|
|
update_cache: yes
|
|
|
|
changed_when: False
|
|
|
|
tags:
|
|
|
|
- apt
|
|
|
|
|
|
|
|
- name: Upgrading system
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.apt:
|
2022-01-25 18:25:47 +01:00
|
|
|
upgrade: dist
|
|
|
|
when: apt_upgrade | bool
|
|
|
|
tags:
|
|
|
|
- apt
|