71 lines
		
	
	
	
		
			1.4 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			71 lines
		
	
	
	
		
			1.4 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
- name: Update package cache
 | 
						|
  package:
 | 
						|
    update_cache: yes
 | 
						|
 | 
						|
- name: Install packages
 | 
						|
  package:
 | 
						|
    name: bash,bonding,iproute2
 | 
						|
    state: latest
 | 
						|
 | 
						|
- name: Tell ifupdown to also rename network interfaces
 | 
						|
  copy:
 | 
						|
    dest: /etc/network/if-pre-up.d/nameif
 | 
						|
    content: |
 | 
						|
      #!/bin/sh
 | 
						|
      nameif -s
 | 
						|
    mode: 0755
 | 
						|
 | 
						|
- name: Configure interface names
 | 
						|
  template:
 | 
						|
    dest: /etc/mactab
 | 
						|
    src: mactab.j2
 | 
						|
    mode: 0644
 | 
						|
 | 
						|
- name: Create /etc/network/interfaces.d
 | 
						|
  file:
 | 
						|
    path: /etc/network/interfaces.d
 | 
						|
    state: directory
 | 
						|
    mode: 0755
 | 
						|
 | 
						|
- name: Set up interfaces
 | 
						|
  template:
 | 
						|
    dest: /etc/network/interfaces
 | 
						|
    src: interfaces.j2
 | 
						|
    mode: 0644
 | 
						|
  notify: enable interfaces
 | 
						|
 | 
						|
- name: Set up management interfaces
 | 
						|
  import_tasks: mgmt.yml
 | 
						|
 | 
						|
- name: Set up data interfaces
 | 
						|
  template:
 | 
						|
    dest: /etc/network/interfaces.d/fabric.intf
 | 
						|
    src: fabric.intf.j2
 | 
						|
    mode: 0644
 | 
						|
  notify: enable interfaces
 | 
						|
 | 
						|
- name: Set up resolv.conf
 | 
						|
  template:
 | 
						|
    dest: /etc/resolv.conf
 | 
						|
    src: resolv.conf.j2
 | 
						|
    mode: 0644
 | 
						|
 | 
						|
- name: Set up sysctls
 | 
						|
  template:
 | 
						|
    dest: /etc/sysctl.d/firewall.conf
 | 
						|
    src: sysctl.conf.j2
 | 
						|
 | 
						|
- name: Set up FRR
 | 
						|
  import_tasks: frr.yml
 | 
						|
 | 
						|
- name: Set up wireguard
 | 
						|
  import_tasks: wireguard.yml
 | 
						|
 | 
						|
- name: Set up nftables
 | 
						|
  import_tasks: nftables.yml
 | 
						|
 | 
						|
- name: Set up conntrackd
 | 
						|
  import_tasks: conntrackd.yml
 | 
						|
 | 
						|
- name: Set up configuration channel
 | 
						|
  import_tasks: config.yml
 |