Dodane / premaknjene datoteke po role-ih iz skupnih v linroom

roles/DF-63530/meta/main.yml

@@ -2,5 +2,5 @@
 # Aleks.Huc@fri.uni-lj.si, Gasper.FeleZorz@fri.uni-lj.si
 # Windows, GNU/Linux, GNS3, VirtualBox
 dependencies:
-  - role: GNS3
+  - role: gns3
   - role: virtualbox

roles/RPOI-90066/meta/main.yml

@@ -4,4 +4,5 @@
 # Računalniška podpora oblikovanju I (ALUO)
 # Matija.Marolt@fri.uni-lj.si
 # SolidWorks
+dependencies:
   - role: solidworks

roles/RZP-63523/meta/main.yml

@@ -4,5 +4,5 @@
 dependencies:
   - role: git
   - role: audacity
-  - role: IDEA
+  - role: idea
 

roles/firefox/templates/mozilla-firefox-apt-preferences

@@ -0,0 +1,3 @@
+Package: *
+Pin: release o=LP-PPA-mozillateam
+Pin-Priority: 1001

roles/firefox/templates/mozilla-firefox-unattended-upgrades

@@ -0,0 +1 @@
+Unattended-Upgrade::Allowed-Origins:: "LP-PPA-mozillateam:${distro_codename}";

roles/fri_base/files/99-wakeonlan.rules

@@ -0,0 +1 @@
+ACTION=="add", SUBSYSTEM=="net", NAME=="e*", RUN+="/usr/sbin/ethtool -s $name wol g"

roles/fri_base/tasks/main.yml

@@ -1,4 +1,4 @@
-- import_tasks: main_win.yml
+# - import_tasks: main_win.yml
-  when: ansible_connection == 'winrm'
+#   when: ansible_connection == 'winrm'
-- import_tasks: main_lin.yml
+# - import_tasks: main_lin.yml
-  when: ansible_connection == 'ssh'
+#   when: ansible_connection == 'ssh'

roles/fri_base/templates/default_keyboard

@@ -0,0 +1,10 @@
+# KEYBOARD CONFIGURATION FILE
+
+# Consult the keyboard(5) manual page.
+
+XKBMODEL="pc105"
+XKBLAYOUT="si"
+XKBVARIANT=""
+XKBOPTIONS=""
+
+BACKSPACE="guess"

roles/fri_base/templates/pamconfig_groups

@@ -0,0 +1,6 @@
+Name: Additional group management through /etc/security/groups.conf
+Default: yes
+Priority: 0
+Auth-Type: Additional
+Auth-Final:
+	optional			pam_group.so

roles/fri_base/templates/security_group.conf

@@ -0,0 +1,108 @@
+#
+# This is the configuration file for the pam_group module.
+#
+
+#
+# *** Please note that giving group membership on a session basis is
+# *** NOT inherently secure. If a user can create an executable that
+# *** is setgid a group that they are infrequently given membership
+# *** of, they can basically obtain group membership any time they
+# *** like. Example: games are allowed between the hours of 6pm and 6am
+# *** user joe logs in at 7pm writes a small C-program toplay.c that
+# *** invokes their favorite shell, compiles it and does
+# *** "chgrp play toplay; chmod g+s toplay". They are basically able
+# *** to play games any time... You have been warned. AGM
+#
+
+*;*;*;Al0000-2400;{{ additional_groups|join(',') }}
+
+#
+# The syntax of the lines is as follows:
+#
+#       services;ttys;users;times;groups
+#
+# white space is ignored and lines maybe extended with '\\n' (escaped
+# newlines). From reading these comments, it is clear that
+# text following a '#' is ignored to the end of the line.
+#
+# the combination of individual users/terminals etc is a logic list
+# namely individual tokens that are optionally prefixed with '!' (logical
+# not) and separated with '&' (logical and) and '|' (logical or).
+#
+# services
+#       is a logic list of PAM service names that the rule applies to.
+#
+# ttys
+#       is a logic list of terminal names that this rule applies to.
+#
+# users
+#       is a logic list of users or a netgroup of users to whom this
+#       rule applies.
+#
+# NB. For these items the simple wildcard '*' may be used only once.
+#     With netgroups no wildcards or logic operators are allowed.
+#
+# times
+#       It is used to indicate "when" these groups are to be given to the
+#       user. The format here is a logic list of day/time-range
+#       entries the days are specified by a sequence of two character
+#       entries, MoTuSa for example is Monday Tuesday and Saturday. Note
+#       that repeated days are unset MoMo = no day, and MoWk = all weekdays
+#       bar Monday. The two character combinations accepted are
+#
+#               Mo Tu We Th Fr Sa Su Wk Wd Al
+#
+#       the last two being week-end days and all 7 days of the week
+#       respectively. As a final example, AlFr means all days except Friday.
+#
+#       Each day/time-range can be prefixed with a '!' to indicate "anything
+#       but"
+#
+#       The time-range part is two 24-hour times HHMM separated by a hyphen
+#       indicating the start and finish time (if the finish time is smaller
+#       than the start time it is deemed to apply on the following day).
+#
+# groups
+#	The (comma or space separated) list of groups that the user
+#	inherits membership of. These groups are added if the previous
+#	fields are satisfied by the user's request
+#
+# For a rule to be active, ALL of service+ttys+users must be satisfied
+# by the applying process.
+#
+
+#
+# Note, to get this to work as it is currently typed you need
+#
+# 1. to run an application as root
+# 2. add the following groups to the /etc/group file:
+#		floppy, play, sound
+#
+
+#
+# Here is a simple example: running 'xsh' on tty* (any ttyXXX device),
+# the user 'us' is given access to the floppy (through membership of
+# the floppy group)
+#
+
+#xsh;tty*&!ttyp*;us;Al0000-2400;floppy
+
+#
+# another example: running 'xsh' on tty* (any ttyXXX device),
+# the user 'sword' is given access to games (through membership of
+# the sound and play group) after work hours.
+#
+
+#xsh; tty* ;sword;!Wk0900-1800;sound, play
+#xsh; tty* ;*;Al0900-1800;floppy
+
+#
+# yet another example: any member of the group 'admin' running
+# 'xsh' on tty*, is granted access (at any time) to the group 'plugdev'
+#
+
+#xsh; tty* ;%admin;Al0000-2400;plugdev
+
+#
+# End of group.conf file
+#

roles/fri_base/templates/sssd.conf

@@ -0,0 +1,30 @@
+[sssd]
+config_file_version = 2
+domains = fri1.uni-lj.si
+enable_files_domain = False
+services = nss, pam
+
+[nss]
+filtered_groups = root
+filtered_users = root
+reconnection_retries = 3
+
+[pam]
+reconnection_retries = 3
+
+[domain/fri1.uni-lj.si]
+ad_domain = fri1.uni-lj.si
+ad_server = dcv1fri1.fri1.uni-lj.si,dcv2fri1.fri1.uni-lj.si
+ad_maximum_machine_account_password_age = 0
+ad_gpo_access_control = permissive
+ad_enabled_domains = fri1.uni-lj.si, student.uni-lj.si, fkkt1.uni-lj.si, ef1.uni-lj.si, fe1.uni-lj.si, ff.uni-lj.si, fmf.uni-lj.si, fu.uni-lj.si, pef.uni-lj.si
+krb5_realm = FRI1.UNI-LJ.SI
+realmd_tags = manages-system joined-with-adcli
+cache_credentials = True
+id_provider = ad
+krb5_store_password_if_offline = True
+default_shell = /bin/bash
+ldap_id_mapping = True
+use_fully_qualified_names = True
+fallback_homedir = /home/%u@%d
+access_provider = ad

roles/fri_base/templates/systemd_group_override.conf

@@ -0,0 +1,2 @@
+[Service] 
+SupplementaryGroups={{ additional_groups|join(' ') }}

roles/linroom_ad/tasks/main.yml

@@ -1,4 +1,40 @@
-- import_tasks: main_win.yml
+- name: Install sssd + samba + keyutil
-  when: ansible_connection == 'winrm'
+  apt:
-- import_tasks: main_lin.yml
+    name: 
-  when: ansible_connection == 'ssh'
+      - sssd
+      - sssd-ad
+      - realmd
+      - samba-common-bin
+      - smbclient
+      - cifs-utils
+      - smbclient
+    state: latest
+- name: Install kerberos utils
+  apt:
+    name: 
+      - keyutils
+      - krb5-user
+- name: Install PAM modules
+  apt:
+    name: libpam-modules
+    state: latest
+- name: Enable create homedir on login
+  command: pam-auth-update --enable mkhomedir
+  become: true
+- name: Check whether we already joined
+  command: /bin/bash -c "/usr/sbin/realm list"
+  register: realm_list_results
+- name: Join using realmd
+  expect:
+    command: realm join --user=ad.join@FRI1.UNI-LJ.SI --computer-ou=OU=Ucilnice FRI1.UNI-LJ.SI
+    responses:
+      (?i)Password: "{{ad_join_password}}"
+  ignore_errors: yes
+  when: realm_list_results.stdout == ""
+
+- name: Copy sssd config
+  template:
+    src: sssd.conf
+    dest: "/etc/sssd/sssd.conf"
+    owner: root
+    mode: 0600

roles/linroom_ad/templates/lightdm-10-hide-users.conf

@@ -0,0 +1,2 @@
+[Seat:*]
+greeter-hide-users=true

roles/macroom/tasks/main.yml

@@ -0,0 +1,16 @@
+- name: Download R
+  get_url:
+    url: https://cran.r-project.org/bin/macosx/base/R-4.2.1.pkg 
+    dest: /tmp/R-4.2.1.pkg
+- name: install R
+  shell: installer -pkg /tmp/R-4.2.1.pkg -target /
+- name: Download RStudio
+  get_url:
+    url: https://download1.rstudio.org/desktop/macos/RStudio-2022.07.2-576.dmg
+    dest: /tmp/RStudio-2022.07.2-576.dmg
+- name: mount RStudio .dmg
+  shell: hdiutil attach /tmp/RStudio-2022.07.2-576.dmg
+- name: install RStudio
+  shell: cp -a /Volumes/RStudio-2022.07.2-576 /Volumes/Applications
+- name: umount RStudio .dmg
+  shell: hdiutil detach /Volumes/RStudio-2022.07.2-576 

roles/maven/tasks/main_win.yml

@@ -0,0 +1,3 @@
+- name: Install maven
+  win_chocolatey:
+    name: maven

roles/nodejs/tasks/main_win.yml

@@ -0,0 +1,3 @@
+- name: Install NodeJS
+  win_chocolatey:
+    name: nodejs

roles/pandas/tasks/main_lin.yml

@@ -0,0 +1,4 @@
+- name: Install pandas
+  apt:
+    name: python3-pandas
+    state: latest

roles/sifive/tasks/main_win.yml

@@ -0,0 +1,4 @@
+# SiFive je bil nekoc prosto dostopen.
+# Sedaj hocejo, da se registriras... da prides do kode
+# Potem pa ti ne dajo izvorne kode.
+# ucilnice_install/2022-23/ORS_VGRS_Bulic

roles/vlc/tasks/main_lin.yml

@@ -0,0 +1,4 @@
+- name: Install VLC
+  apt:
+    name: vlc
+    state: latest

roles/vscode/handlers/main.yml

@@ -0,0 +1,4 @@
+# Mark everything in bin/ directories executable. Some extensions do
+# this on activation, but non-root users don’t have permission for it.
+- name: fix VS code extensions
+  command: find /usr/share/code/resources/app -name bin -exec chmod -R +x '{}' ';'