initial pfannkuchen

roles/pve_postinstall/tasks/main.yml

@@ -0,0 +1,122 @@
+---
+- name: Legacy .list Dateien finden
+  find:
+    paths: /etc/apt/sources.list.d
+    patterns: "*.list"
+  register: legacy_lists
+
+- name: Legacy .list Dateien umbenennen
+  command: mv "{{ item.path }}" "{{ item.path }}.bak"
+  loop: "{{ legacy_lists.files }}"
+  when: legacy_lists.files | length > 0
+  args:
+    creates: "{{ item.path }}.bak"
+
+- name: Legacy sources.list leeren
+  copy:
+    dest: /etc/apt/sources.list
+    content: ""
+    mode: "0644"
+
+- name: Debian Trixie Quellen (deb822)
+  copy:
+    dest: /etc/apt/sources.list.d/debian.sources
+    content: |
+      Types: deb
+      URIs: http://deb.debian.org/debian/
+      Suites: trixie trixie-updates
+      Components: main contrib non-free non-free-firmware
+      Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+      Types: deb
+      URIs: http://security.debian.org/debian-security/
+      Suites: trixie-security
+      Components: main contrib non-free non-free-firmware
+      Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+    mode: "0644"
+
+- name: Enterprise Repo deaktivieren (auskommentiert)
+  copy:
+    dest: /etc/apt/sources.list.d/pve-enterprise.sources
+    content: |
+      # Types: deb
+      # URIs: https://enterprise.proxmox.com/debian/pve
+      # Suites: trixie
+      # Components: pve-enterprise
+      # Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+    mode: "0644"
+
+- name: Ceph Enterprise Repo deaktivieren (auskommentiert)
+  copy:
+    dest: /etc/apt/sources.list.d/ceph.sources
+    content: |
+      # Types: deb
+      # URIs: https://enterprise.proxmox.com/debian/ceph-squid
+      # Suites: trixie
+      # Components: enterprise
+      # Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+    mode: "0644"
+
+- name: PVE No-Subscription Repo (deb822)
+  copy:
+    dest: /etc/apt/sources.list.d/proxmox.sources
+    content: |
+      Types: deb
+      URIs: http://download.proxmox.com/debian/pve
+      Suites: trixie
+      Components: pve-no-subscription
+      Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+    mode: "0644"
+
+- name: PVE Test Repo (disabled)
+  copy:
+    dest: /etc/apt/sources.list.d/pve-test.sources
+    content: |
+      Types: deb
+      URIs: http://download.proxmox.com/debian/pve
+      Suites: trixie
+      Components: pve-test
+      Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+      Enabled: false
+    mode: "0644"
+
+- name: Subscription Nag Patch Script deployen
+  copy:
+    dest: /usr/local/bin/pve-remove-nag.sh
+    mode: "0755"
+    content: |
+      #!/bin/sh
+      WEB_JS=/usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js
+      if [ -s "$WEB_JS" ] && ! grep -q NoMoreNagging "$WEB_JS"; then
+        sed -i -e "/data\.status/ s/!//" -e "/data\.status/ s/active/NoMoreNagging/" "$WEB_JS"
+      fi
+
+- name: Nag Patch als DPkg Post-Invoke registrieren
+  copy:
+    dest: /etc/apt/apt.conf.d/no-nag-script
+    content: 'DPkg::Post-Invoke { "/usr/local/bin/pve-remove-nag.sh"; };'
+    mode: "0644"
+
+- name: Nag Patch einmalig ausfuehren
+  command: /usr/local/bin/pve-remove-nag.sh
+  changed_when: false
+
+- name: HA Services deaktivieren
+  systemd:
+    name: "{{ item }}"
+    enabled: false
+    state: stopped
+  loop:
+    - pve-ha-lrm
+    - pve-ha-crm
+    - corosync
+  failed_when: false
+
+- name: Apt Cache aktualisieren
+  apt:
+    update_cache: yes
+
+- name: Dist-Upgrade ausfuehren
+  apt:
+    upgrade: dist
+    autoremove: yes