evolix/EvoBSD
21
0
Fork 0
Code Issues 2 Pull requests Releases 3 Wiki Activity
EvoBSD is a set of Ansible playbooks and roles providing a customisation of the OpenBSD operating system used by Evolix.
227 commits 2 branches 3 tags 660 KiB
Shell 52.8%
Perl 34.1%
Jinja 12.7%
Smarty 0.3%
Go to file
Jérémy Dubois fe3d2035f5 Add full ipsecctl check script 
Different ipsecctl checks are currently used one the servers with no convention,
so I created one template with all that has to be checked.
2021-10-15 11:55:46 +02:00
roles Add full ipsecctl check script 2021-10-15 11:55:46 +02:00
tasks Fix commit_etc_git.yml task author 2020-08-26 09:50:05 +02:00
vars Configure the ntpd.conf file and bump version 2021-07-19 15:27:57 +02:00
.drone.yml fix forgotten quote in .drone.yml 2020-06-04 13:02:47 -04:00
CHANGELOG Configure the ntpd.conf file and bump version 2021-07-19 15:27:57 +02:00
CONTRIBUTING.md Apply fix in last commit to other markdown files 2020-06-04 13:23:06 -04:00
evolixisation.yml Add a pf tag that we skip for subsequent use 2020-10-14 09:40:59 +02:00
hosts Update ansible_python_interpreter var and add ansible_host var in inventory 2021-06-01 09:48:48 +02:00
LICENSE Update copyright to 2020 2020-09-10 11:55:43 +02:00
prerequisite.yml Change default Python version to 3.x 2020-10-23 11:38:56 +02:00
README.md Configure the ntpd.conf file and bump version 2021-07-19 15:27:57 +02:00

README.md

EvoBSD 6.9.1

EvoBSD is an ansible project used for customising OpenBSD hosts used by Evolix.

How to install an OpenBSD machine

Note : The system must be installed with a root account only. Put your public key in the remote root's autorized_keys (/root/.ssh/authorized_keys)

  1. Install ansible's prerequisites
ansible-playbook prerequisite.yml -CDi hosts -l HOSTNAME
  1. Run it

First use (become_method: su) :

ansible-playbook evolixisation.yml --ask-vault-pass -CDki hosts -u root -l HOSTNAME

Subsequent use (become_method: sudo) :

ansible-playbook evolixisation.yml --ask-vault-pass -CDKi hosts --skip-tags pf -l HOSTNAME

Testing

Changes can be tested by using Packer and vmm(4) :

  • This process depends on the Go programming language.

Packages

Needing a Golang eco system and some basics

pkg_add go-- packer-- git--

git clone https://github.com/double-p/packer-builder-openbsd-vmm.git

builds

Set GOPATH (default: ~/go), if the 1.4GB dependencies wont fit.

make
make install
  • You need your unprivileged user to be able to run vmctl(8) through doas(1)
echo "permit nopass myunprivilegeduser as root cmd /usr/sbin/vmctl" >> /etc/doas.conf

See packer-builder-openbsd-vmm/examples/README.examples for further instructions

  • Enable NAT on your host machine
pass out on em0 inet from tap0:network to any nat-to (em0)

assuming em0 is your egress interface

Contributions

See the contribution guidelines

License

MIT License