ansible/roles/pve_postinstall/tasks/main.yml
2026-03-30 15:19:20 +02:00

122 lines
3.3 KiB
YAML

---
- name: Legacy .list Dateien finden
find:
paths: /etc/apt/sources.list.d
patterns: "*.list"
register: legacy_lists
- name: Legacy .list Dateien umbenennen
command: mv "{{ item.path }}" "{{ item.path }}.bak"
loop: "{{ legacy_lists.files }}"
when: legacy_lists.files | length > 0
args:
creates: "{{ item.path }}.bak"
- name: Legacy sources.list leeren
copy:
dest: /etc/apt/sources.list
content: ""
mode: "0644"
- name: Debian Trixie Quellen (deb822)
copy:
dest: /etc/apt/sources.list.d/debian.sources
content: |
Types: deb
URIs: http://deb.debian.org/debian/
Suites: trixie trixie-updates
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
Types: deb
URIs: http://security.debian.org/debian-security/
Suites: trixie-security
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
mode: "0644"
- name: Enterprise Repo deaktivieren (auskommentiert)
copy:
dest: /etc/apt/sources.list.d/pve-enterprise.sources
content: |
# Types: deb
# URIs: https://enterprise.proxmox.com/debian/pve
# Suites: trixie
# Components: pve-enterprise
# Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
mode: "0644"
- name: Ceph Enterprise Repo deaktivieren (auskommentiert)
copy:
dest: /etc/apt/sources.list.d/ceph.sources
content: |
# Types: deb
# URIs: https://enterprise.proxmox.com/debian/ceph-squid
# Suites: trixie
# Components: enterprise
# Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
mode: "0644"
- name: PVE No-Subscription Repo (deb822)
copy:
dest: /etc/apt/sources.list.d/proxmox.sources
content: |
Types: deb
URIs: http://download.proxmox.com/debian/pve
Suites: trixie
Components: pve-no-subscription
Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
mode: "0644"
- name: PVE Test Repo (disabled)
copy:
dest: /etc/apt/sources.list.d/pve-test.sources
content: |
Types: deb
URIs: http://download.proxmox.com/debian/pve
Suites: trixie
Components: pve-test
Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
Enabled: false
mode: "0644"
- name: Subscription Nag Patch Script deployen
copy:
dest: /usr/local/bin/pve-remove-nag.sh
mode: "0755"
content: |
#!/bin/sh
WEB_JS=/usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js
if [ -s "$WEB_JS" ] && ! grep -q NoMoreNagging "$WEB_JS"; then
sed -i -e "/data\.status/ s/!//" -e "/data\.status/ s/active/NoMoreNagging/" "$WEB_JS"
fi
- name: Nag Patch als DPkg Post-Invoke registrieren
copy:
dest: /etc/apt/apt.conf.d/no-nag-script
content: 'DPkg::Post-Invoke { "/usr/local/bin/pve-remove-nag.sh"; };'
mode: "0644"
- name: Nag Patch einmalig ausfuehren
command: /usr/local/bin/pve-remove-nag.sh
changed_when: false
- name: HA Services deaktivieren
systemd:
name: "{{ item }}"
enabled: false
state: stopped
loop:
- pve-ha-lrm
- pve-ha-crm
- corosync
failed_when: false
- name: Apt Cache aktualisieren
apt:
update_cache: yes
- name: Dist-Upgrade ausfuehren
apt:
upgrade: dist
autoremove: yes