ipad-wall-displays-ansible/initial-setup.yml

31 lines
1.3 KiB
YAML

- name: ipad setup
hosts: ipads
gather_facts: no
tasks:
- name: Get ssh password from password-store
set_fact:
ansible_ssh_pass: "{{ lookup('passwordstore', 'servers/cms/mobile@ipads') | d(omit) }}"
- name: Get ssh pub key
set_fact:
authorized_keys: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"
- name: Write .ssh/authorized_keys
raw: mkdir -p ~/.ssh && echo "{{ authorized_keys }}" > ~/.ssh/authorized_keys
- name: Allow Pubkey Authentication for OpenSSH
become: true
raw: >-
sed -i /etc/ssh/sshd_config
-e 's|^#\?PubkeyAuthentication\W.*|PubkeyAuthentication yes|'
-e 's|^#\?AuthorizedKeysFile\W.*|AuthorizedKeysFile %h/.ssh/authorized_keys|'
-e 's|^#\?PermitRootLogin\W.*|PermitRootLogin no|'
- name: Fix /var/mobile permissions
raw: chmod 750 /var/mobile
- name: restart sshd
become: true
raw: launchctl stop system/com.openssh.sshd; launchctl start system/com.openssh.sshd
ignore_errors: yes
- name: copy python 2.7 deb
local_action: command scp -r ./python_2.7.6-3_iphoneos-arm.deb "{{ inventory_hostname }}:"
- name: install python 2.7
become: true
raw: dpkg -i python_2.7.6-3_iphoneos-arm.deb && rm python_2.7.6-3_iphoneos-arm.deb; apt-get install -f -y