Skip to content

Latest commit

 

History

History
65 lines (42 loc) · 2.75 KB

README.md

File metadata and controls

65 lines (42 loc) · 2.75 KB
Raw

dotfiles

🔧 🏠 Always WIP

https://www.shellcheck.net/ Github Action Github Action Github Action

Initial Setup

  • dnf install git keepassxc python3-pip
  • git clone https://github.com/sylvainmetayer/dotfiles.git $HOME/dotfiles
  • ./scripts/install-ansible-deps.sh
  • If you want autocomplete
    • activate-global-python-argcomplete --dest ~/.bashrc.d/
    • chmod +x ~/.bashrc.d/python-argcomplete

Usage

Dell

My personal laptop, running Fedora.

  • pipenv run ansible-playbook playbooks/dell/main.yaml -K --extra-vars="ansible_python_interpreter=$(pipenv --venv)/bin/python"
  • systemctl status --user ssh-agent to get the SSH_AUTH_SOCK value
    • Configure KeepassXC to use this socket

GOP

This playbook is similar with dell playbook but add a role gop which contains specific tasks required for company computer.

You need to encrypt some files as it contains sensitive data.

  • Ensure the selfhosted.kdbx database is available
  • ./scripts/extract-secrets.sh DATABASE_LOCATION to extract the password and interact with the data inside the vault. It will be stored in ~/.ansible_vault_password.txt

Then you can do the following :

  • FILE=$HOME/dotfiles/roles/gop/templates/aws_config.j2

  • FILE=$HOME/dotfiles/roles/gop/templates/ssh_hosts.j2

  • FILE=$HOME/dotfiles/playbooks/gop/locals.yml

  • view file : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault view $FILE

  • edit file : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault edit $FILE

  • encrypt file : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault encrypt $FILE

  • decrypt file: ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault decrypt $FILE

Use the following command : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt pipenv run ansible-playbook playbooks/gop/main.yml -K --extra-vars="ansible_python_interpreter=$(pipenv --venv)/bin/python" to run the playbook and decrypt the files.

TODO

  • Fedora 39 - enable rpmfusion repository
  • Fix errors with psutils when running with pipenv

Ansible Galaxy

Build

  • ansible-galaxy collection build

Publish

  • ansible-galaxy collection publish sylvainmetayer-workstation-1.0.0.tar.gz --token TOKEN