mirror of
https://github.com/cwchristerw/tjas-infra
synced 2025-09-05 17:43:21 +00:00
Compare commits
3 Commits
93831f85f5
...
177bafaa93
Author | SHA1 | Date | |
---|---|---|---|
![]() |
177bafaa93 | ||
![]() |
89c5cc2437 | ||
![]() |
586ea6bd0e |
@@ -11,7 +11,7 @@
|
|||||||
2. Lisää Network kohtaan tai luo Network kohta – `[network]`
|
2. Lisää Network kohtaan tai luo Network kohta – `[network]`
|
||||||
3. Lisää isännän nimi – `hostname = argo.aito.tjas`
|
3. Lisää isännän nimi – `hostname = argo.aito.tjas`
|
||||||
4. Lisää Hosts tiedoston generointi – `generateHosts = true`
|
4. Lisää Hosts tiedoston generointi – `generateHosts = true`
|
||||||
4. Asenna curl-paketti käyttämällä APT-paketinhallintaa – `sudo apt update && apt install curl`
|
4. Asenna curl-paketti käyttämällä APT-paketinhallintaa – `sudo apt update && sudo apt install curl`
|
||||||
5. Lataa ja suorita Init.sh skripti – `bash <(curl https://raw.githubusercontent.com/cwchristerw/tjas-infra/refs/heads/master/init.sh)`
|
5. Lataa ja suorita Init.sh skripti – `bash <(curl https://raw.githubusercontent.com/cwchristerw/tjas-infra/refs/heads/master/init.sh)`
|
||||||
|
|
||||||
**Palvelimen asennus**
|
**Palvelimen asennus**
|
||||||
|
28
init.sh
28
init.sh
@@ -39,39 +39,39 @@ exit 1
|
|||||||
}
|
}
|
||||||
|
|
||||||
ti-header "Haetaan pakettien tiedot..."
|
ti-header "Haetaan pakettien tiedot..."
|
||||||
apt update
|
sudo apt update
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
ti-header "Asennetaan PVJJK 1.VOS TJAS Infran riippuvuudet APT-paketinhallinnalla..."
|
ti-header "Asennetaan PVJJK 1.VOS TJAS Infran riippuvuudet APT-paketinhallinnalla..."
|
||||||
apt-get install -y python3-pip python3-venv jq git curl lsb-release
|
sudo apt-get install -y python3-pip python3-venv jq git curl lsb-release
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
mkdir -p /root/.ssh/keys/pvjjk-1vos-niinisalo &> /dev/null
|
mkdir -p $HOME/.ssh/keys/pvjjk-1vos-niinisalo &> /dev/null
|
||||||
if [[ ! -f /root/.ssh/keys/pvjjk-1vos-niinisalo/infra ]]
|
if [[ ! -f $HOME/.ssh/keys/pvjjk-1vos-niinisalo/infra ]]
|
||||||
then
|
then
|
||||||
ti-header "Generoidaan SSH-avain Infra-repon käyttöön..."
|
ti-header "Generoidaan SSH-avain Infra-repon käyttöön..."
|
||||||
ssh-keygen -f /root/.ssh/keys/pvjjk-1vos-niinisalo/infra -t ed25519 -N '' -C $(hostname --fqdn)
|
ssh-keygen -f $HOME/.ssh/keys/pvjjk-1vos-niinisalo/infra -t ed25519 -N '' -C $(hostname --fqdn)
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
ti-header "Luodaan Ansiblelle virtuaalinen ympäristö..."
|
ti-header "Luodaan Ansiblelle virtuaalinen ympäristö..."
|
||||||
python3 -m venv /root/.venv/ansible
|
python3 -m venv $HOME/.venv/ansible
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
ti-header "Asennetaan Ansiblen riippuvuudet..."
|
ti-header "Asennetaan Ansiblen riippuvuudet..."
|
||||||
/root/.venv/ansible/bin/pip3 install cryptography dnspython hvac jmespath netaddr pexpect
|
$HOME/.venv/ansible/bin/pip3 install cryptography dnspython hvac jmespath netaddr pexpect
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
ti-header "Asennetaan Ansible..."
|
ti-header "Asennetaan Ansible..."
|
||||||
/root/.venv/ansible/bin/pip3 install ansible
|
$HOME/.venv/ansible/bin/pip3 install ansible
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
ti-header "Asennetaan Ansible kokoelmat..."
|
ti-header "Asennetaan Ansible kokoelmat..."
|
||||||
/root/.venv/ansible/bin/ansible-galaxy collection install ansible.posix containers.podman --upgrade
|
$HOME/.venv/ansible/bin/ansible-galaxy collection install ansible.posix containers.podman --upgrade
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
ti-header "Lisää SSH-avain Infra-repon käyttöön..."
|
ti-header "Lisää SSH-avain Infra-repon käyttöön..."
|
||||||
cat /root/.ssh/keys/pvjjk-1vos-niinisalo/infra.pub
|
cat $HOME/.ssh/keys/pvjjk-1vos-niinisalo/infra.pub
|
||||||
|
|
||||||
echo -n "Onko avain lisätty Github-repoon? [K/E]"
|
echo -n "Onko avain lisätty Github-repoon? [K/E]"
|
||||||
while [[ -z $SSHKEY_QUESTION || ! -z $SSHKEY_QUESTION && $SSHKEY_QUESTION != "K" ]]
|
while [[ -z $SSHKEY_QUESTION || ! -z $SSHKEY_QUESTION && $SSHKEY_QUESTION != "K" ]]
|
||||||
@@ -80,8 +80,8 @@ do
|
|||||||
done
|
done
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
mkdir -p /root/.ansible/vault &> /dev/null
|
mkdir -p $HOME/.ansible/vault &> /dev/null
|
||||||
if [[ ! -f /root/.ansible/vault/pvjjk-1vos-niinisalo ]]
|
if [[ ! -f $HOME/.ansible/vault/pvjjk-1vos-niinisalo ]]
|
||||||
then
|
then
|
||||||
ti-header "Syötä Ansible Vaultin salasana..."
|
ti-header "Syötä Ansible Vaultin salasana..."
|
||||||
echo -n "Salasana: "
|
echo -n "Salasana: "
|
||||||
@@ -91,14 +91,14 @@ then
|
|||||||
|
|
||||||
if [[ ! -z $VAULT_PASSWORD ]]
|
if [[ ! -z $VAULT_PASSWORD ]]
|
||||||
then
|
then
|
||||||
echo "$VAULT_PASSWORD" > /root/.ansible/vault/pvjjk-1vos-niinisalo
|
echo "$VAULT_PASSWORD" > $HOME/.ansible/vault/pvjjk-1vos-niinisalo
|
||||||
fi
|
fi
|
||||||
done
|
done
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
ti-header "Suoritetaan Infran asennus..."
|
ti-header "Suoritetaan Infran asennus..."
|
||||||
/root/.venv/ansible/bin/ansible-pull -U ssh://git@github.com/cwchristerw/tjas-infra -d /root/.ansible/pull/pvjjk-1vos-niinisalo/infra --accept-host-key --private-key /root/.ssh/keys/pvjjk-1vos-niinisalo/infra --vault-password-file /root/.ansible/vault/pvjjk-1vos-niinisalo tasks.yml -t installer
|
$HOME/.venv/ansible/bin/ansible-pull -U ssh://git@github.com/cwchristerw/tjas-infra -d $HOME/.ansible/pull/pvjjk-1vos-niinisalo/infra --accept-host-key --private-key $HOME/.ssh/keys/pvjjk-1vos-niinisalo/infra --vault-password-file $HOME/.ansible/vault/pvjjk-1vos-niinisalo tasks.yml -t installer
|
||||||
echo -e "\n\n"
|
echo -e "\n\n"
|
||||||
|
|
||||||
echo "
|
echo "
|
||||||
|
@@ -10,6 +10,8 @@
|
|||||||
import_tasks: tasks/installer.yml
|
import_tasks: tasks/installer.yml
|
||||||
vars:
|
vars:
|
||||||
ansible_python_interpreter: "{{ ansible_facts.user_dir }}/.venv/ansible/bin/python3"
|
ansible_python_interpreter: "{{ ansible_facts.user_dir }}/.venv/ansible/bin/python3"
|
||||||
|
when:
|
||||||
|
- inventory_hostname == "olympus.juva.tjas"
|
||||||
tags:
|
tags:
|
||||||
- installer
|
- installer
|
||||||
- never
|
- never
|
||||||
@@ -18,6 +20,8 @@
|
|||||||
import_tasks: tasks/maintenance.yml
|
import_tasks: tasks/maintenance.yml
|
||||||
vars:
|
vars:
|
||||||
ansible_python_interpreter: "{{ ansible_facts.user_dir }}/.venv/ansible/bin/python3"
|
ansible_python_interpreter: "{{ ansible_facts.user_dir }}/.venv/ansible/bin/python3"
|
||||||
|
when:
|
||||||
|
- inventory_hostname == "olympus.juva.tjas"
|
||||||
tags:
|
tags:
|
||||||
- maintenance
|
- maintenance
|
||||||
- never
|
- never
|
||||||
@@ -26,6 +30,8 @@
|
|||||||
import_tasks: tasks/deployer.yml
|
import_tasks: tasks/deployer.yml
|
||||||
vars:
|
vars:
|
||||||
ansible_python_interpreter: "{{ ansible_facts.user_dir }}/.venv/ansible/bin/python3"
|
ansible_python_interpreter: "{{ ansible_facts.user_dir }}/.venv/ansible/bin/python3"
|
||||||
|
when:
|
||||||
|
- inventory_hostname == "olympus.juva.tjas"
|
||||||
tags:
|
tags:
|
||||||
- deployer
|
- deployer
|
||||||
- never
|
- never
|
||||||
|
Reference in New Issue
Block a user