452 lines
13 KiB
YAML
452 lines
13 KiB
YAML
---
|
|
|
|
# ---
|
|
# Check if local template directories exists
|
|
# ---
|
|
|
|
# system_user
|
|
- name: (system-user-systemfiles.yml) Check if local template directory exists for default users
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ item.name }}"
|
|
delegate_to: localhost
|
|
become: false
|
|
with_items: "{{ system_users }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
register: common_local_template_dir_system_users
|
|
|
|
# root
|
|
- name: (system-user-systemfiles.yml) Check if local template directory exists for root
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root"
|
|
delegate_to: localhost
|
|
become: false
|
|
register: common_local_template_dir_root
|
|
|
|
|
|
# --
|
|
# Copy .profile
|
|
# ---
|
|
|
|
- name: (user-systemfiles.yml) Check if users file '.profile.ORIG' exists
|
|
ansible.builtin.stat:
|
|
path: "~{{ item.name }}/.profile.ORIG"
|
|
register: common_profile_user_orig_exists
|
|
loop: "{{ system_users }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
tags:
|
|
- profile
|
|
|
|
- name: (user-systemfiles.yml) Backup existing users .profile file
|
|
ansible.builtin.copy:
|
|
src: "~{{ item.item.name }}/.profile"
|
|
dest: "~{{ item.item.name }}/.profile.ORIG"
|
|
remote_src: true
|
|
owner: "{{ item.item.name }}"
|
|
group: "{{ item.item.name }}"
|
|
mode: "0644"
|
|
force: false
|
|
loop: "{{ common_profile_user_orig_exists.results }}"
|
|
loop_control:
|
|
label: '{{ item.item.name }}'
|
|
when:
|
|
- not item.stat.exists
|
|
tags:
|
|
- profile
|
|
|
|
# 1) Für jeden User prüfen, ob eine lokale _profile existiert
|
|
- name: (system-user-systemfiles.yml) stat user _profile
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ item.name }}/_profile"
|
|
delegate_to: localhost
|
|
become: false
|
|
loop: "{{ default_user }}"
|
|
register: common_profile_stats
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
|
|
# 2) Prüfe ob eine lokale default _baschrc existiert
|
|
- name: Stat DEFAULT _profile
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/DEFAULT/_profile"
|
|
delegate_to: localhost
|
|
become: false
|
|
register: common_default_profile_stat
|
|
|
|
# 2) Falls User _profile vorhanden, kopieren
|
|
- name: (system-user-systemfiles.yml) copy .profile if it exists
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ user.name }}/_profile"
|
|
dest: "~{{ user.name }}/.profile"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user.name }}"
|
|
mode: "0644"
|
|
become: true
|
|
loop: "{{ default_user | zip(common_profile_stats.results) | list }}"
|
|
loop_control:
|
|
label: "{{ user.name }}"
|
|
when:
|
|
- stat_result.stat.exists | bool
|
|
vars:
|
|
user: "{{ item.0 }}"
|
|
stat_result: "{{ item.1 }}"
|
|
tags: [bash]
|
|
|
|
# 3) Falls nicht vorhanden, DEFAULT nutzen
|
|
- name: (system-user-systemfiles.yml) copy default .profile
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/DEFAULT/_profile"
|
|
dest: "~{{ user.name }}/.profile"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user.name }}"
|
|
mode: "0644"
|
|
become: true
|
|
loop: "{{ default_user | zip(common_profile_stats.results) | list }}"
|
|
loop_control:
|
|
label: "{{ user.name }}"
|
|
when:
|
|
- not stat_result.stat.exists
|
|
- common_default_profile_stat.stat.exists | bool
|
|
vars:
|
|
user: "{{ item.0 }}"
|
|
stat_result: "{{ item.1 }}"
|
|
tags: [bash]
|
|
|
|
# ---
|
|
# -- root user
|
|
# ---
|
|
|
|
- name: (system-user-systemfiles.yml) Check if file '/root/.profile.ORIG' exists
|
|
ansible.builtin.stat:
|
|
path: /root/.profile.ORIG
|
|
register: common_profile_root_orig_exists
|
|
tags:
|
|
- bash
|
|
|
|
- name: (system-user-systemfiles.yml) Backup /root/.profile file
|
|
ansible.builtin.copy:
|
|
src: /root/.profile
|
|
dest: /root/.profile.ORIG
|
|
remote_src: true
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
force: false
|
|
when: not common_profile_root_orig_exists.stat.exists
|
|
tags:
|
|
- bash
|
|
|
|
# 1) Prüfen ob die _profile für root auf dem Control-Node existiert
|
|
- name: (system-user-systemfiles.yml) stat root _profile on control node
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/_profile"
|
|
delegate_to: localhost
|
|
become: false
|
|
register: common_profile_root_stat
|
|
|
|
# 2) Wenn vorhanden, kopieren wir sie nach /root/.profile auf dem Zielhost
|
|
- name: Copy root .profile if it exists
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/_profile"
|
|
dest: /root/.profile
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
become: true
|
|
when: common_profile_root_stat.stat.exists
|
|
tags:
|
|
- bash
|
|
|
|
|
|
# --
|
|
# Copy .bashrc
|
|
# ---
|
|
|
|
- name: (system-user-systemfiles.yml) Check if users file '.bashrc.ORIG' exists
|
|
ansible.builtin.stat:
|
|
path: "~{{ item.name }}/.bashrc.ORIG"
|
|
register: common_bashrc_user_orig_exists
|
|
loop: "{{ system_users }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
tags:
|
|
- bashrc
|
|
|
|
- name: (system-user-systemfiles.yml) Backup existing users .bashrc file
|
|
ansible.builtin.copy:
|
|
src: "~{{ item.item.name }}/.bashrc"
|
|
dest: "~{{ item.item.name }}/.bashrc.ORIG"
|
|
remote_src: true
|
|
owner: "{{ item.item.name }}"
|
|
group: "{{ item.item.name }}"
|
|
mode: "0644"
|
|
force: false
|
|
loop: "{{ common_bashrc_user_orig_exists.results }}"
|
|
loop_control:
|
|
label: '{{ item.item.name }}'
|
|
when: not item.stat.exists
|
|
tags:
|
|
- bashrc
|
|
|
|
# 1) Für jeden User prüfen, ob eine lokale _bashrc existiert
|
|
- name: (system-user-systemfiles.yml) stat user _bashrc
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ item.name }}/_bashrc"
|
|
delegate_to: localhost
|
|
become: false
|
|
loop: "{{ default_user }}"
|
|
register: common_bashrc_stats
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
|
|
# 2) Prüfe ob eine lokale default _baschrc existiert
|
|
- name: Stat DEFAULT _bashrc
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/DEFAULT/_bashrc"
|
|
delegate_to: localhost
|
|
become: false
|
|
register: common_default_bashrc_stat
|
|
|
|
# 2) Falls User _bashrc vorhanden, kopieren
|
|
- name: (system-user-systemfiles.yml) copy .bashrc if it exists
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ user.name }}/_bashrc"
|
|
dest: "~{{ user.name }}/.bashrc"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user.name }}"
|
|
mode: "0644"
|
|
become: true
|
|
loop: "{{ default_user | zip(common_bashrc_stats.results) | list }}"
|
|
loop_control:
|
|
label: "{{ user.name }}"
|
|
when:
|
|
- stat_result.stat.exists | bool
|
|
vars:
|
|
user: "{{ item.0 }}"
|
|
stat_result: "{{ item.1 }}"
|
|
tags: [bash]
|
|
|
|
# 3) Falls nicht vorhanden, DEFAULT nutzen
|
|
- name: (system-user-systemfiles.yml) copy default .bashrc
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/DEFAULT/_bashrc"
|
|
dest: "~{{ user.name }}/.bashrc"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user.name }}"
|
|
mode: "0644"
|
|
become: true
|
|
loop: "{{ default_user | zip(common_bashrc_stats.results) | list }}"
|
|
loop_control:
|
|
label: "{{ user.name }}"
|
|
when:
|
|
- not stat_result.stat.exists
|
|
- common_default_bashrc_stat.stat.exists | bool
|
|
vars:
|
|
user: "{{ item.0 }}"
|
|
stat_result: "{{ item.1 }}"
|
|
tags: [bash]
|
|
|
|
# ---
|
|
# -- root user
|
|
# ---
|
|
|
|
- name: (system-user-systemfiles.yml) Check if file '/root/.bashrc.ORIG' exists
|
|
ansible.builtin.stat:
|
|
path: /root/.bashrc.ORIG
|
|
register: common_bashrc_root_orig_exists
|
|
tags:
|
|
- bash
|
|
|
|
- name: (system-user-systemfiles.yml) Backup /root/.bashrc file
|
|
ansible.builtin.copy:
|
|
src: /root/.bashrc
|
|
dest: /root/.bashrc.ORIG
|
|
remote_src: true
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
force: false
|
|
when: not common_bashrc_root_orig_exists.stat.exists
|
|
tags:
|
|
- bash
|
|
|
|
# 1) Prüfen ob die _bashrc für root auf dem Control-Node existiert
|
|
- name: Stat root _bashrc on control node
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/_bashrc"
|
|
delegate_to: localhost
|
|
become: false
|
|
register: common_bashrc_root_stat
|
|
|
|
# 2) Wenn vorhanden, kopieren wir sie nach /root/.bashrc auf dem Zielhost
|
|
- name: Copy root .bashrc if it exists
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/_bashrc"
|
|
dest: /root/.bashrc
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
become: true
|
|
when: common_bashrc_root_stat.stat.exists
|
|
tags:
|
|
- bash
|
|
|
|
# --
|
|
# Copy .vimrc
|
|
# ---
|
|
|
|
# 1. Prüfen, ob für jeden User ein lokales _vimrc existiert
|
|
- name: (system-user-systemfiles.yml) stat user _vimrc
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ item.name }}/_vimrc"
|
|
delegate_to: localhost
|
|
become: false
|
|
loop: "{{ default_user }}"
|
|
register: common_vimrc_stats
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
|
|
# 2. Falls vorhanden, Datei kopieren
|
|
- name: (system-user-systemfiles.yml) Copy .vimrc if it exists
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ user.name }}/_vimrc"
|
|
dest: "~{{ user.name }}/.vimrc"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user.name }}"
|
|
mode: '0644'
|
|
loop: "{{ default_user | zip(common_vimrc_stats.results) | list }}"
|
|
loop_control:
|
|
label: "{{ user.name }}"
|
|
when:
|
|
- stat_result.stat.exists
|
|
vars:
|
|
user: "{{ item.0 }}"
|
|
stat_result: "{{ item.1 }}"
|
|
tags:
|
|
- bash
|
|
|
|
|
|
# 1) Lokal prüfen, ob ~/.vim existiert
|
|
- name: (system-user-systemfiles.yml) stat local .vim for each user
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ item.name }}/.vim"
|
|
delegate_to: localhost
|
|
become: false
|
|
loop: "{{ default_user }}"
|
|
register: common_dotvim_stats
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
|
|
# 2) Wenn vorhanden, .vim-Verzeichnis ins Home des Users kopieren
|
|
- name: (system-user-systemfiles.yml) copy .vim directory if it exists
|
|
ansible.builtin.copy:
|
|
# Wichtig: KEINE verschachtelten {{ ... }} im String
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ user.name }}/.vim"
|
|
dest: "~{{ user.name }}/"
|
|
mode: preserve # oder weglassen; 0644 wäre für Verzeichnisse falsch
|
|
become: true
|
|
loop: "{{ default_user | zip(common_dotvim_stats.results) | list }}"
|
|
loop_control:
|
|
label: "{{ user.name }}"
|
|
when:
|
|
- stat_result.stat.exists | bool
|
|
vars:
|
|
user: "{{ item.0 }}"
|
|
stat_result: "{{ item.1 }}"
|
|
tags: [vim]
|
|
|
|
|
|
# 3) Ownership/Gruppe rekursiv korrigieren (falls gewünscht/erforderlich)
|
|
- name: (system-user-systemfiles.yml) ensure ownership on ~/.vim recursively
|
|
ansible.builtin.file:
|
|
path: "~{{ user.name }}/.vim"
|
|
owner: "{{ user.name }}"
|
|
group: "{{ user.name }}"
|
|
recurse: true
|
|
state: directory
|
|
become: true
|
|
loop: "{{ default_user | zip(common_dotvim_stats.results) | list }}"
|
|
loop_control:
|
|
label: "{{ user.name }}"
|
|
when:
|
|
- stat_result.stat.exists | bool
|
|
vars:
|
|
user: "{{ item.0 }}"
|
|
stat_result: "{{ item.1 }}"
|
|
tags: [vim]
|
|
|
|
|
|
# --
|
|
# -- root user
|
|
# --
|
|
|
|
# 1) Prüfen ob die _vimrc für root auf dem Control-Node existiert
|
|
- name: (system-user-systemfiles.yml) stat root _vimrc on control node
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/_vimrc"
|
|
delegate_to: localhost
|
|
become: false
|
|
register: common_vimrc_root_stat
|
|
|
|
# 2) Wenn vorhanden, kopieren wir sie nach /root/.vimrc auf dem Zielhost
|
|
- name: (system-user-systemfiles.yml) Copy root .vimrc if it exists
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/_vimrc"
|
|
dest: /root/.vimrc
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
become: true
|
|
when:
|
|
- common_vimrc_root_stat.stat.exists
|
|
tags:
|
|
- bash
|
|
|
|
# 1) Lokal prüfen, ob ./files/{{ nis_domain }}/homedirs/root/.vim existiert
|
|
- name: (system-user-systemfiles.yml) stat local .vim for root
|
|
ansible.builtin.stat:
|
|
path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/.vim"
|
|
delegate_to: localhost
|
|
become: false
|
|
register: common_root_dotvim_stat
|
|
tags: [vim]
|
|
|
|
|
|
# 2) Wenn vorhanden, nach /root/ kopieren
|
|
- name: (system-user-systemfiles.yml) copy root .vim directory if it exists
|
|
ansible.builtin.copy:
|
|
src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/.vim"
|
|
dest: "/root/"
|
|
mode: preserve # oder weglassen; nicht 0644 bei Verzeichnissen
|
|
become: true
|
|
when:
|
|
- common_root_dotvim_stat.stat.exists | bool
|
|
tags: [vim]
|
|
|
|
# 2) Wenn vorhanden, nach /root/ kopieren
|
|
# - name: (system-user-systemfiles.yml) rsync root .vim if it exists
|
|
# ansible.posix.synchronize:
|
|
# src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/root/.vim/"
|
|
# dest: "/root/.vim/"
|
|
# archive: true
|
|
# delete: false
|
|
# rsync_path: "sudo -n rsync" # -n = kein Passwort-Prompt; erfordert NOPASSWD
|
|
# delegate_to: localhost
|
|
# when:
|
|
# - common_root_dotvim_stat.stat.exists | bool
|
|
# tags: [vim]
|
|
|
|
# 3) Ownership sicherstellen (rekursiv)
|
|
- name: (system-user-systemfiles.yml) ensure ownership on /root/.vim recursively
|
|
ansible.builtin.file:
|
|
path: "/root/.vim"
|
|
owner: "root"
|
|
group: "root"
|
|
recurse: true
|
|
state: directory
|
|
become: true
|
|
when:
|
|
- common_root_dotvim_stat.stat.exists | bool
|
|
tags: [vim]
|