Add fail2ban role and clean up yaml lint noise

This commit is contained in:
2026-08-08 23:50:32 -05:00
parent 9b837dd780
commit 6c7ecfc724
352 changed files with 4632 additions and 4186 deletions
+3 -8
View File
@@ -1,16 +1,13 @@
---
language: python
python: "2.7"
python: '2.7'
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
packages: [python-pip]
install:
# Install ansible
- pip install ansible
@@ -20,10 +17,8 @@ install:
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/
webhooks: https://galaxy.ansible.com/api/v1/notifications/
+1 -1
View File
@@ -1,2 +1,2 @@
---
# defaults file for ensure_cockpit
...
+5 -7
View File
@@ -1,17 +1,17 @@
---
# handlers file for ensure_cockpit
- name: 'ensure_cockpit.package_facts'
- name: ensure_cockpit.package_facts
ansible.builtin.package_facts:
- name: 'ensure_cockpit.service_facts'
- name: ensure_cockpit.service_facts
ansible.builtin.service_facts:
- name: 'ensure_cockpit.service_reload'
- name: ensure_cockpit.service_reload
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["service_mgr"] == 'systemd'
- ensure_cockpit is defined
ansible.builtin.systemd:
daemon_reload: 'yes'
- name: 'ensure_cockpit.service_restart'
- name: ensure_cockpit.service_restart
when:
- ansible_facts["system"] == 'Linux'
- ensure_cockpit is defined
@@ -21,9 +21,7 @@
ansible.builtin.service:
enabled: '{{ item.enabled }}'
name: '{{ item.name }}'
state: 'restarted'
state: restarted
loop: '{{ ensure_cockpit.service_list }}'
loop_control:
label: '{{ item.name }} will be restarted'
...
+1 -4
View File
@@ -1,3 +1,4 @@
---
galaxy_info:
author: Jason Rothstein
description: Ensures cockpit is installed, running, and functional
@@ -15,7 +16,6 @@ galaxy_info:
# - Apache-2.0
# - CC-BY-4.0
license: LGPL-3.0-or-later
min_ansible_version: 2.9
# If this a Container Enabled role, provide the minimum Ansible Container version.
@@ -38,7 +38,6 @@ galaxy_info:
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
@@ -46,8 +45,6 @@ galaxy_info:
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.
+27 -31
View File
@@ -1,35 +1,37 @@
---
# tasks file for ensure_cockpit
- name: 'include variables'
when:
- ansible_facts["system"] == 'Linux'
- name: include variables
when: ["ansible_facts[\"system\"] == 'Linux'"]
ansible.builtin.include_vars:
file: '{{ lookup("first_found", findme) }}'
name: 'ensure_cockpit'
name: ensure_cockpit
vars:
findme:
files:
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
}}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
}}-default.yml'
- '{{ ansible_facts["distribution"] }}-default.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
}}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
}}-default.yml'
- '{{ ansible_facts["os_family"] }}-default.yml'
- 'default.yml'
paths:
- '../vars/'
errors: 'ignore'
- name: 'package discovery'
- default.yml
paths: [../vars/]
errors: ignore
- name: package discovery
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["packages"] is not defined
ansible.builtin.package_facts:
- name: 'service discovery'
- name: service discovery
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["services"] is not defined
ansible.builtin.service_facts:
- name: 'ensure packages'
- name: ensure packages
when:
- ansible_facts["system"] == 'Linux'
- ensure_cockpit is defined
@@ -41,10 +43,8 @@
loop: '{{ ensure_cockpit.package_list }}'
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_cockpit.package_facts'
- 'ensure_cockpit.service_facts'
- name: 'ensure configurations'
notify: [ensure_cockpit.package_facts, ensure_cockpit.service_facts]
- name: ensure configurations
when:
- ansible_facts["system"] == 'Linux'
- ensure_cockpit is defined
@@ -65,11 +65,11 @@
loop_control:
label: '{{ item.dest }} will be ensured'
notify:
- 'ensure_cockpit.package_facts'
- 'ensure_cockpit.service_facts'
- 'ensure_cockpit.service_reload'
- 'ensure_cockpit.service_restart'
- name: 'ensure services'
- ensure_cockpit.package_facts
- ensure_cockpit.service_facts
- ensure_cockpit.service_reload
- ensure_cockpit.service_restart
- name: ensure services
when:
- ansible_facts["system"] == 'Linux'
- ensure_cockpit is defined
@@ -82,10 +82,6 @@
loop: '{{ ensure_cockpit.service_list }}'
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_cockpit.package_facts'
- 'ensure_cockpit.service_facts'
- name: 'flush handlers'
ansible.builtin.meta: 'flush_handlers'
...
notify: [ensure_cockpit.package_facts, ensure_cockpit.service_facts]
- name: flush handlers
ansible.builtin.meta: flush_handlers
+1 -2
View File
@@ -1,5 +1,4 @@
---
- hosts: localhost
remote_user: root
roles:
- ensure_cockpit
roles: [ensure_cockpit]
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+18 -20
View File
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+18 -20
View File
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+18 -20
View File
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+20 -22
View File
@@ -1,27 +1,25 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+20 -22
View File
@@ -1,27 +1,25 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+24 -26
View File
@@ -1,31 +1,29 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-kdump'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-selinux'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-kdump
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-selinux
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+24 -26
View File
@@ -1,31 +1,29 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-kdump'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-selinux'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-kdump
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-selinux
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+24 -26
View File
@@ -1,31 +1,29 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-kdump'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-selinux'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-kdump
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-selinux
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+18 -20
View File
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+18 -20
View File
@@ -1,25 +1,23 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: 'cockpit-ws-selinux'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
- name: cockpit-ws-selinux
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+20 -22
View File
@@ -1,27 +1,25 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+20 -22
View File
@@ -1,27 +1,25 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+20 -22
View File
@@ -1,27 +1,25 @@
---
# vars file for ensure_cockpit
package_list:
- name: 'cockpit'
state: 'present'
- name: 'cockpit-bridge'
state: 'present'
- name: 'cockpit-doc'
state: 'present'
- name: 'cockpit-networkmanager'
state: 'present'
- name: 'cockpit-packagekit'
state: 'present'
- name: 'cockpit-sosreport'
state: 'present'
- name: 'cockpit-storaged'
state: 'present'
- name: 'cockpit-system'
state: 'present'
- name: 'cockpit-ws'
state: 'present'
- name: cockpit
state: present
- name: cockpit-bridge
state: present
- name: cockpit-doc
state: present
- name: cockpit-networkmanager
state: present
- name: cockpit-packagekit
state: present
- name: cockpit-sosreport
state: present
- name: cockpit-storaged
state: present
- name: cockpit-system
state: present
- name: cockpit-ws
state: present
service_list:
- name: 'cockpit.socket'
state: 'started'
- name: cockpit.socket
state: started
enabled: 'yes'
...
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_cockpit
...
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_cockpit
...