ansible: begin inventory

ansible/README.md

@@ -19,7 +19,7 @@ git clone -q --depth 1 --branch master https://github.com/arcodange/ssh-agent.gi
 docker run -d --name=ssh-agent docker-ssh-agent:latest
 docker run --rm --volumes-from=ssh-agent -v ~/.ssh:/.ssh -it docker-ssh-agent:latest ssh-add /root/.ssh/id_rsa
 docker run --rm -u root --name test --volumes-from=ssh-agent -v $PWD:/home/arcodange/code arcodange-ansible:0.0.0 \
-ansible-playbook ansible/arcodange/factory/playbooks/setup/setup.yml -i pi1,pi2 -u pi -vv
+ansible-playbook ansible/arcodange/factory/playbooks/setup/setup.yml -i ansible/arcodange/factory/inventory -vv
 ```
 
 ### a tool to reuse a ssh agent (not required)

ansible/arcodange/factory/inventory/hosts.yml

@@ -0,0 +1,37 @@
+raspberries:
+  hosts:
+    pi1:
+      ansible_host: pi1.home # setup http://192.168.1.1/ Réseau/DNS
+    pi2:
+      ansible_host: pi2.home
+    
+    internetPi1:
+      ansible_host: rg-evry.changeip.co
+      ansible_port: 51022
+    internetPi2:
+      ansible_host: rg-evry.changeip.co
+      ansible_port: 52022
+  
+  vars:
+    ansible_user: pi
+
+local:
+  hosts:
+    pi1:
+    pi2:
+
+hard_disk:
+  hosts:
+    pi2 # 4To toshiba external hard drive (/dev/sda)
+
+postgres:
+  children:
+    hard_disk:
+
+gitea:
+  children:
+    hard_disk:
+
+all:
+  children:
+    raspberry:

ansible/arcodange/factory/playbooks/setup/hard_disk.yml

@@ -7,7 +7,7 @@
 # lsblk -fe7 -- uuid des partitions
 ---
 - name: Setup Hard Disk
-  hosts: pi2
+  hosts: hard_disk
   gather_facts: yes
   become: yes
 
@@ -25,6 +25,15 @@
       loop_control:
         loop_var: mount_point
     
+    - name: Set permissions for group docker on /arcodange
+      ansible.builtin.file:
+        path: /arcodange
+        state: directory
+        recurse: yes
+        owner: pi
+        group: docker
+        mode: u=rwX,g=rX,o=rX
+    
     - name: Set ACL for group docker on /arcodange
       ansible.posix.acl:
         path: "/arcodange"

ansible/arcodange/factory/playbooks/setup/setup.yml

@@ -1,6 +1,6 @@
 ---
 - name: setup
-  hosts: all
+  hosts: raspberries:&local
 
   tasks:
   - name: hello world
@@ -9,3 +9,4 @@
 
 - name: setup hard disk
   ansible.builtin.import_playbook: hard_disk.yml
+  tags: never

ansible/nonroot_ssh_proxy_setup.sh

@@ -15,6 +15,8 @@ fi
 
 export SSH_AUTH_SOCK=/home/arcodange/.ssh/socket
 mkdir `dirname $SSH_AUTH_SOCK`
+set -x
 socat UNIX-LISTEN:$SSH_AUTH_SOCK,fork UNIX-CONNECT:$SOCKET_FILE &
+set +x
 chown -R 1000 `dirname $SSH_AUTH_SOCK`
 echo "export SSH_AUTH_SOCK=$SSH_AUTH_SOCK" >> ~/.profile