Skip to content
This repository was archived by the owner on Oct 7, 2025. It is now read-only.

Conversation

@matej5
Copy link
Contributor

@matej5 matej5 commented Mar 13, 2025

No description provided.

gregharvey and others added 30 commits January 16, 2025 17:39
* Adding installation path handling for Galaxy collections.

* Removing -p option due to unexpected ill effects for role paths.

* Moving X-Content-Type-Options header to project type templates.

* Adding some inline documentation.

* Fixing Postfix template to allow external relays.

* Adding a FQDN postfix transport map.

* Updating CI to 2.x.

* Defending against missing Ansible.

* Making the ce-provision-config branch in CI dynamic.

* We do not want a 'ce-dev provision' because it breaks our controller.

* Reverting 'ce-dev provision' change.

* Trying a different ansible_facts var.

* Testing using the source branch in ce-dev.

* Setting max_childen to an integer to avoid CI issues.

* Trying to change the python interpreter used.

* Adding platform and cgroup values to ce-dev compose template.

* Trying latest ubuntu containers in GitHub Actions.

* Fixing the test.sh script to work with venvs.

* Documentation for PHP in CI.

* Adding GitLab test back in.

* Fixing role namespaces.

* Minor bug fixes to ce-provision installer.

* Testing installing ce-provision in the GitHub Actions container directly.

* Using the submitted install script as well.

* Trying as runner user.

* Trying to use the ce-dev base container.

* Updating key name.

* Suppressing systemd actions in Docker.

* Seems Ansible flags have changed.

* Still trying to get --extra-vars right!

* Catching Ansible Galaxy upgrade timers for docker containers.

* Trying to force --roles-path for Galaxy.

* Trying different quotes.

* Missed a line.

* Trying a different approach to passing vars.

* Adding some debug.

* Running ce-python debug first.

* Trying moving to the ce-provision directory.

* Checking the specific path to galaxy roles in ce-provision.

* Trying as controller user again.

* Trying to make the roles dir.

* Being consistent about paths in bash.

* Removing debug lines for now.

* Allowing script to skip iptables.

* Misnamed flag.

* Adding user_provision role to configure controller user.

* Wrapping cleanup so it doesn't break GitHub Actions.

* Completing variables for user_provisin.

* Missed the sudoers var.

* Quoting vars.

* GitLab installer needs _domain_name.

* Logic error in clean-up script.

* Fixing paths to ce-provision in container.

* Trying to fix CI perms issues.

* Git dubious ownership error.

* Git dubious ownership error.

* Running the web server test as the controller user.

* Missed a controller var.

* Commenting out the CE container to test.

* Adding a separate step for Git actions.

* Need sudo for Ubuntu.

* Using a volume to persist data between steps.

* Adding debug commands to test volumes.

* Tweaking volumes.

* Adding the checkout command back in.

* Trying a different approach.

* ls command looks good, so putting web build back in.

* More Ansible Galaxy debug.

* Trying to make ansible-galaxy detect installed roles.

* Run galaxy command as controller.

* Trying galaxy command and cd wrapped in su.

* Specifically checking the contents of galaxy/roles.

* Trying a double-tap install process.

* Quick refactor and debug of SSH.

* Adding OpenSSH server package.

* Checking for a firewall.

* Checking listening packages.

* Starting SSHD especially.

* Starting SSHD without systemd.

* Pre-empting config a bit more.

* More galaxy path debug.

* Running a find to see if we can find the missing roles.

* More verbosity.

* Checking for missing requirements file.

* Removing eroneous when clause.

* Tidying up redundant debug lines.

* Creating a separate ci.yml play targeting localhost.

* Making sure sshd is running.

* Tidying up GitLab CI file and installing SSHD.

* Installing SSHD as a separate step.

* SSHD already installed, starting it instead.

* Don't create systemd timers in containers.

* Preparing a test GitLab build.

* Making builds nightly and fixing GitLab role bug.

* Ensuring is_local var exists and making lock behaviour optional.

* Fixing location and owner of Blackfire config so it is configurable.

* Documentation update.

* Removing all is defined checks for is_local since it is now always defined.

* Letting GitLab know it's on Docker earlier.

* Trying to run runsvdir-start to avoid container freezing.

* Temporarily skipping reconfigure of GitLab to test the rest.

* Trying to move GitLab reconfigure commands to CI.

* Fixing service namespace for runner and reinstating GitLab tasks.

* Trying to get config script working for GitLab in CI.

* No systemd, do not try to restart gitlab-runner.

* Removing firewall role from CI GitLab test, don't need it and it breaks CI.

* Outputting PostGreSQL logs to see if there are errors.

* Outputting PostGreSQL logs to see if there are errors.

* Trying the config script for GitLab again.

* Suppressing extra GitLab config for CI runs.

* Setting Blackfire CLI defaults to use ce-dev user.

* Improving GitLab vars and adding force stop feature.

* Not installed aws_credentials in meta roles if AWS support disabled.

* Most people will not want pam_ldap or pam_linotp, should not be in meta.

* If you don't create LDAP SSL certs you might not have a /etc/ldap directory.

* Adding a merge of the main branch into the docs branch to CI.

* Adding comment to not use hyphens in boto profile names.

* Supporting different key types to publish to AWS.

* Adding a git fetch before the merge in docs publishing.

* Using the safer _ce_provision_username var in AWS key role.

* Adding the --allow-unrelated-histories flag to git merge in CI.

* Commenting out some of the AWS ACL rulesets to leave them as examples.

* Trying to pull the docs branch to ensure it is up to date.

* Adding keyserver.ubuntu.com to the key servers we publish to by default in gpg_key.

* CI updates and improving SOPS role.

* Swapping hard coded branch names for vars in CI.

* Giving up on merging 2.x - will have to try another approach.
* Moving X-Content-Type-Options header to project type templates.

* Adding some inline documentation.

* Fixing Postfix template to allow external relays.

* Adding a FQDN postfix transport map.

* Updating CI to 2.x.

* Defending against missing Ansible.

* Making the ce-provision-config branch in CI dynamic.

* We do not want a 'ce-dev provision' because it breaks our controller.

* Reverting 'ce-dev provision' change.

* Trying a different ansible_facts var.

* Testing using the source branch in ce-dev.

* Setting max_childen to an integer to avoid CI issues.

* Trying to change the python interpreter used.

* Adding platform and cgroup values to ce-dev compose template.

* Trying latest ubuntu containers in GitHub Actions.

* Fixing the test.sh script to work with venvs.

* Documentation for PHP in CI.

* Adding GitLab test back in.

* Fixing role namespaces.

* Minor bug fixes to ce-provision installer.

* Testing installing ce-provision in the GitHub Actions container directly.

* Using the submitted install script as well.

* Trying as runner user.

* Trying to use the ce-dev base container.

* Updating key name.

* Suppressing systemd actions in Docker.

* Seems Ansible flags have changed.

* Still trying to get --extra-vars right!

* Catching Ansible Galaxy upgrade timers for docker containers.

* Trying to force --roles-path for Galaxy.

* Trying different quotes.

* Missed a line.

* Trying a different approach to passing vars.

* Adding some debug.

* Running ce-python debug first.

* Trying moving to the ce-provision directory.

* Checking the specific path to galaxy roles in ce-provision.

* Trying as controller user again.

* Trying to make the roles dir.

* Being consistent about paths in bash.

* Removing debug lines for now.

* Allowing script to skip iptables.

* Misnamed flag.

* Adding user_provision role to configure controller user.

* Wrapping cleanup so it doesn't break GitHub Actions.

* Completing variables for user_provisin.

* Missed the sudoers var.

* Quoting vars.

* GitLab installer needs _domain_name.

* Logic error in clean-up script.

* Fixing paths to ce-provision in container.

* Trying to fix CI perms issues.

* Git dubious ownership error.

* Git dubious ownership error.

* Running the web server test as the controller user.

* Missed a controller var.

* Commenting out the CE container to test.

* Adding a separate step for Git actions.

* Need sudo for Ubuntu.

* Using a volume to persist data between steps.

* Adding debug commands to test volumes.

* Tweaking volumes.

* Adding the checkout command back in.

* Trying a different approach.

* ls command looks good, so putting web build back in.

* More Ansible Galaxy debug.

* Trying to make ansible-galaxy detect installed roles.

* Run galaxy command as controller.

* Trying galaxy command and cd wrapped in su.

* Specifically checking the contents of galaxy/roles.

* Trying a double-tap install process.

* Quick refactor and debug of SSH.

* Adding OpenSSH server package.

* Checking for a firewall.

* Checking listening packages.

* Starting SSHD especially.

* Starting SSHD without systemd.

* Pre-empting config a bit more.

* More galaxy path debug.

* Running a find to see if we can find the missing roles.

* More verbosity.

* Checking for missing requirements file.

* Removing eroneous when clause.

* Tidying up redundant debug lines.

* Creating a separate ci.yml play targeting localhost.

* Making sure sshd is running.

* Tidying up GitLab CI file and installing SSHD.

* Installing SSHD as a separate step.

* SSHD already installed, starting it instead.

* Don't create systemd timers in containers.

* Preparing a test GitLab build.

* Making builds nightly and fixing GitLab role bug.

* Ensuring is_local var exists and making lock behaviour optional.

* Fixing location and owner of Blackfire config so it is configurable.

* Documentation update.

* Removing all is defined checks for is_local since it is now always defined.

* Letting GitLab know it's on Docker earlier.

* Trying to run runsvdir-start to avoid container freezing.

* Temporarily skipping reconfigure of GitLab to test the rest.

* Trying to move GitLab reconfigure commands to CI.

* Fixing service namespace for runner and reinstating GitLab tasks.

* Trying to get config script working for GitLab in CI.

* No systemd, do not try to restart gitlab-runner.

* Removing firewall role from CI GitLab test, don't need it and it breaks CI.

* Outputting PostGreSQL logs to see if there are errors.

* Outputting PostGreSQL logs to see if there are errors.

* Trying the config script for GitLab again.

* Suppressing extra GitLab config for CI runs.

* Setting Blackfire CLI defaults to use ce-dev user.

* Improving GitLab vars and adding force stop feature.

* Not installed aws_credentials in meta roles if AWS support disabled.

* Most people will not want pam_ldap or pam_linotp, should not be in meta.

* If you don't create LDAP SSL certs you might not have a /etc/ldap directory.

* Adding a merge of the main branch into the docs branch to CI.

* Adding comment to not use hyphens in boto profile names.

* Supporting different key types to publish to AWS.

* Adding a git fetch before the merge in docs publishing.

* Using the safer _ce_provision_username var in AWS key role.

* Adding the --allow-unrelated-histories flag to git merge in CI.

* Commenting out some of the AWS ACL rulesets to leave them as examples.

* Trying to pull the docs branch to ensure it is up to date.

* Adding keyserver.ubuntu.com to the key servers we publish to by default in gpg_key.

* CI updates and improving SOPS role.

* Swapping hard coded branch names for vars in CI.

* Giving up on merging 2.x - will have to try another approach.

* Change of approach to Packer plugin management.

* Renaming task.
* Adding some inline documentation.

* Fixing Postfix template to allow external relays.

* Adding a FQDN postfix transport map.

* Updating CI to 2.x.

* Defending against missing Ansible.

* Making the ce-provision-config branch in CI dynamic.

* We do not want a 'ce-dev provision' because it breaks our controller.

* Reverting 'ce-dev provision' change.

* Trying a different ansible_facts var.

* Testing using the source branch in ce-dev.

* Setting max_childen to an integer to avoid CI issues.

* Trying to change the python interpreter used.

* Adding platform and cgroup values to ce-dev compose template.

* Trying latest ubuntu containers in GitHub Actions.

* Fixing the test.sh script to work with venvs.

* Documentation for PHP in CI.

* Adding GitLab test back in.

* Fixing role namespaces.

* Minor bug fixes to ce-provision installer.

* Testing installing ce-provision in the GitHub Actions container directly.

* Using the submitted install script as well.

* Trying as runner user.

* Trying to use the ce-dev base container.

* Updating key name.

* Suppressing systemd actions in Docker.

* Seems Ansible flags have changed.

* Still trying to get --extra-vars right!

* Catching Ansible Galaxy upgrade timers for docker containers.

* Trying to force --roles-path for Galaxy.

* Trying different quotes.

* Missed a line.

* Trying a different approach to passing vars.

* Adding some debug.

* Running ce-python debug first.

* Trying moving to the ce-provision directory.

* Checking the specific path to galaxy roles in ce-provision.

* Trying as controller user again.

* Trying to make the roles dir.

* Being consistent about paths in bash.

* Removing debug lines for now.

* Allowing script to skip iptables.

* Misnamed flag.

* Adding user_provision role to configure controller user.

* Wrapping cleanup so it doesn't break GitHub Actions.

* Completing variables for user_provisin.

* Missed the sudoers var.

* Quoting vars.

* GitLab installer needs _domain_name.

* Logic error in clean-up script.

* Fixing paths to ce-provision in container.

* Trying to fix CI perms issues.

* Git dubious ownership error.

* Git dubious ownership error.

* Running the web server test as the controller user.

* Missed a controller var.

* Commenting out the CE container to test.

* Adding a separate step for Git actions.

* Need sudo for Ubuntu.

* Using a volume to persist data between steps.

* Adding debug commands to test volumes.

* Tweaking volumes.

* Adding the checkout command back in.

* Trying a different approach.

* ls command looks good, so putting web build back in.

* More Ansible Galaxy debug.

* Trying to make ansible-galaxy detect installed roles.

* Run galaxy command as controller.

* Trying galaxy command and cd wrapped in su.

* Specifically checking the contents of galaxy/roles.

* Trying a double-tap install process.

* Quick refactor and debug of SSH.

* Adding OpenSSH server package.

* Checking for a firewall.

* Checking listening packages.

* Starting SSHD especially.

* Starting SSHD without systemd.

* Pre-empting config a bit more.

* More galaxy path debug.

* Running a find to see if we can find the missing roles.

* More verbosity.

* Checking for missing requirements file.

* Removing eroneous when clause.

* Tidying up redundant debug lines.

* Creating a separate ci.yml play targeting localhost.

* Making sure sshd is running.

* Tidying up GitLab CI file and installing SSHD.

* Installing SSHD as a separate step.

* SSHD already installed, starting it instead.

* Don't create systemd timers in containers.

* Preparing a test GitLab build.

* Making builds nightly and fixing GitLab role bug.

* Ensuring is_local var exists and making lock behaviour optional.

* Fixing location and owner of Blackfire config so it is configurable.

* Documentation update.

* Removing all is defined checks for is_local since it is now always defined.

* Letting GitLab know it's on Docker earlier.

* Trying to run runsvdir-start to avoid container freezing.

* Temporarily skipping reconfigure of GitLab to test the rest.

* Trying to move GitLab reconfigure commands to CI.

* Fixing service namespace for runner and reinstating GitLab tasks.

* Trying to get config script working for GitLab in CI.

* No systemd, do not try to restart gitlab-runner.

* Removing firewall role from CI GitLab test, don't need it and it breaks CI.

* Outputting PostGreSQL logs to see if there are errors.

* Outputting PostGreSQL logs to see if there are errors.

* Trying the config script for GitLab again.

* Suppressing extra GitLab config for CI runs.

* Setting Blackfire CLI defaults to use ce-dev user.

* Improving GitLab vars and adding force stop feature.

* Not installed aws_credentials in meta roles if AWS support disabled.

* Most people will not want pam_ldap or pam_linotp, should not be in meta.

* If you don't create LDAP SSL certs you might not have a /etc/ldap directory.

* Adding a merge of the main branch into the docs branch to CI.

* Adding comment to not use hyphens in boto profile names.

* Supporting different key types to publish to AWS.

* Adding a git fetch before the merge in docs publishing.

* Using the safer _ce_provision_username var in AWS key role.

* Adding the --allow-unrelated-histories flag to git merge in CI.

* Commenting out some of the AWS ACL rulesets to leave them as examples.

* Trying to pull the docs branch to ensure it is up to date.

* Adding keyserver.ubuntu.com to the key servers we publish to by default in gpg_key.

* CI updates and improving SOPS role.

* Swapping hard coded branch names for vars in CI.

* Giving up on merging 2.x - will have to try another approach.

* Change of approach to Packer plugin management.

* Renaming task.

* Reorganising the GitLab Runner role into blocks.
* Updating-nodejs

* Updating-nodejs

* Fixing-linting

* Missing-variables-fix-nodejx

* Working-on-nodejs

* Pushing-nodejs-versioning

* Polishing-nodejs-setup

* Fixing-linting

* Updating-nodejs-install-task
* Fixing-unattended-upgrades

* Fixing-linting
* Adding a FQDN postfix transport map.

* Updating CI to 2.x.

* Defending against missing Ansible.

* Making the ce-provision-config branch in CI dynamic.

* We do not want a 'ce-dev provision' because it breaks our controller.

* Reverting 'ce-dev provision' change.

* Trying a different ansible_facts var.

* Testing using the source branch in ce-dev.

* Setting max_childen to an integer to avoid CI issues.

* Trying to change the python interpreter used.

* Adding platform and cgroup values to ce-dev compose template.

* Trying latest ubuntu containers in GitHub Actions.

* Fixing the test.sh script to work with venvs.

* Documentation for PHP in CI.

* Adding GitLab test back in.

* Fixing role namespaces.

* Minor bug fixes to ce-provision installer.

* Testing installing ce-provision in the GitHub Actions container directly.

* Using the submitted install script as well.

* Trying as runner user.

* Trying to use the ce-dev base container.

* Updating key name.

* Suppressing systemd actions in Docker.

* Seems Ansible flags have changed.

* Still trying to get --extra-vars right!

* Catching Ansible Galaxy upgrade timers for docker containers.

* Trying to force --roles-path for Galaxy.

* Trying different quotes.

* Missed a line.

* Trying a different approach to passing vars.

* Adding some debug.

* Running ce-python debug first.

* Trying moving to the ce-provision directory.

* Checking the specific path to galaxy roles in ce-provision.

* Trying as controller user again.

* Trying to make the roles dir.

* Being consistent about paths in bash.

* Removing debug lines for now.

* Allowing script to skip iptables.

* Misnamed flag.

* Adding user_provision role to configure controller user.

* Wrapping cleanup so it doesn't break GitHub Actions.

* Completing variables for user_provisin.

* Missed the sudoers var.

* Quoting vars.

* GitLab installer needs _domain_name.

* Logic error in clean-up script.

* Fixing paths to ce-provision in container.

* Trying to fix CI perms issues.

* Git dubious ownership error.

* Git dubious ownership error.

* Running the web server test as the controller user.

* Missed a controller var.

* Commenting out the CE container to test.

* Adding a separate step for Git actions.

* Need sudo for Ubuntu.

* Using a volume to persist data between steps.

* Adding debug commands to test volumes.

* Tweaking volumes.

* Adding the checkout command back in.

* Trying a different approach.

* ls command looks good, so putting web build back in.

* More Ansible Galaxy debug.

* Trying to make ansible-galaxy detect installed roles.

* Run galaxy command as controller.

* Trying galaxy command and cd wrapped in su.

* Specifically checking the contents of galaxy/roles.

* Trying a double-tap install process.

* Quick refactor and debug of SSH.

* Adding OpenSSH server package.

* Checking for a firewall.

* Checking listening packages.

* Starting SSHD especially.

* Starting SSHD without systemd.

* Pre-empting config a bit more.

* More galaxy path debug.

* Running a find to see if we can find the missing roles.

* More verbosity.

* Checking for missing requirements file.

* Removing eroneous when clause.

* Tidying up redundant debug lines.

* Creating a separate ci.yml play targeting localhost.

* Making sure sshd is running.

* Tidying up GitLab CI file and installing SSHD.

* Installing SSHD as a separate step.

* SSHD already installed, starting it instead.

* Don't create systemd timers in containers.

* Preparing a test GitLab build.

* Making builds nightly and fixing GitLab role bug.

* Ensuring is_local var exists and making lock behaviour optional.

* Fixing location and owner of Blackfire config so it is configurable.

* Documentation update.

* Removing all is defined checks for is_local since it is now always defined.

* Letting GitLab know it's on Docker earlier.

* Trying to run runsvdir-start to avoid container freezing.

* Temporarily skipping reconfigure of GitLab to test the rest.

* Trying to move GitLab reconfigure commands to CI.

* Fixing service namespace for runner and reinstating GitLab tasks.

* Trying to get config script working for GitLab in CI.

* No systemd, do not try to restart gitlab-runner.

* Removing firewall role from CI GitLab test, don't need it and it breaks CI.

* Outputting PostGreSQL logs to see if there are errors.

* Outputting PostGreSQL logs to see if there are errors.

* Trying the config script for GitLab again.

* Suppressing extra GitLab config for CI runs.

* Setting Blackfire CLI defaults to use ce-dev user.

* Improving GitLab vars and adding force stop feature.

* Not installed aws_credentials in meta roles if AWS support disabled.

* Most people will not want pam_ldap or pam_linotp, should not be in meta.

* If you don't create LDAP SSL certs you might not have a /etc/ldap directory.

* Adding a merge of the main branch into the docs branch to CI.

* Adding comment to not use hyphens in boto profile names.

* Supporting different key types to publish to AWS.

* Adding a git fetch before the merge in docs publishing.

* Using the safer _ce_provision_username var in AWS key role.

* Adding the --allow-unrelated-histories flag to git merge in CI.

* Commenting out some of the AWS ACL rulesets to leave them as examples.

* Trying to pull the docs branch to ensure it is up to date.

* Adding keyserver.ubuntu.com to the key servers we publish to by default in gpg_key.

* CI updates and improving SOPS role.

* Swapping hard coded branch names for vars in CI.

* Giving up on merging 2.x - will have to try another approach.

* Change of approach to Packer plugin management.

* Renaming task.

* Reorganising the GitLab Runner role into blocks.

* Updating amazon.aws collection for Ansible.
#2250)

* Allowing more flexible definition of sudo privileges via user_ansible.

* Fixing ce-deploy example.
* Updating CI to 2.x.

* Defending against missing Ansible.

* Making the ce-provision-config branch in CI dynamic.

* We do not want a 'ce-dev provision' because it breaks our controller.

* Reverting 'ce-dev provision' change.

* Trying a different ansible_facts var.

* Testing using the source branch in ce-dev.

* Setting max_childen to an integer to avoid CI issues.

* Trying to change the python interpreter used.

* Adding platform and cgroup values to ce-dev compose template.

* Trying latest ubuntu containers in GitHub Actions.

* Fixing the test.sh script to work with venvs.

* Documentation for PHP in CI.

* Adding GitLab test back in.

* Fixing role namespaces.

* Minor bug fixes to ce-provision installer.

* Testing installing ce-provision in the GitHub Actions container directly.

* Using the submitted install script as well.

* Trying as runner user.

* Trying to use the ce-dev base container.

* Updating key name.

* Suppressing systemd actions in Docker.

* Seems Ansible flags have changed.

* Still trying to get --extra-vars right!

* Catching Ansible Galaxy upgrade timers for docker containers.

* Trying to force --roles-path for Galaxy.

* Trying different quotes.

* Missed a line.

* Trying a different approach to passing vars.

* Adding some debug.

* Running ce-python debug first.

* Trying moving to the ce-provision directory.

* Checking the specific path to galaxy roles in ce-provision.

* Trying as controller user again.

* Trying to make the roles dir.

* Being consistent about paths in bash.

* Removing debug lines for now.

* Allowing script to skip iptables.

* Misnamed flag.

* Adding user_provision role to configure controller user.

* Wrapping cleanup so it doesn't break GitHub Actions.

* Completing variables for user_provisin.

* Missed the sudoers var.

* Quoting vars.

* GitLab installer needs _domain_name.

* Logic error in clean-up script.

* Fixing paths to ce-provision in container.

* Trying to fix CI perms issues.

* Git dubious ownership error.

* Git dubious ownership error.

* Running the web server test as the controller user.

* Missed a controller var.

* Commenting out the CE container to test.

* Adding a separate step for Git actions.

* Need sudo for Ubuntu.

* Using a volume to persist data between steps.

* Adding debug commands to test volumes.

* Tweaking volumes.

* Adding the checkout command back in.

* Trying a different approach.

* ls command looks good, so putting web build back in.

* More Ansible Galaxy debug.

* Trying to make ansible-galaxy detect installed roles.

* Run galaxy command as controller.

* Trying galaxy command and cd wrapped in su.

* Specifically checking the contents of galaxy/roles.

* Trying a double-tap install process.

* Quick refactor and debug of SSH.

* Adding OpenSSH server package.

* Checking for a firewall.

* Checking listening packages.

* Starting SSHD especially.

* Starting SSHD without systemd.

* Pre-empting config a bit more.

* More galaxy path debug.

* Running a find to see if we can find the missing roles.

* More verbosity.

* Checking for missing requirements file.

* Removing eroneous when clause.

* Tidying up redundant debug lines.

* Creating a separate ci.yml play targeting localhost.

* Making sure sshd is running.

* Tidying up GitLab CI file and installing SSHD.

* Installing SSHD as a separate step.

* SSHD already installed, starting it instead.

* Don't create systemd timers in containers.

* Preparing a test GitLab build.

* Making builds nightly and fixing GitLab role bug.

* Ensuring is_local var exists and making lock behaviour optional.

* Fixing location and owner of Blackfire config so it is configurable.

* Documentation update.

* Removing all is defined checks for is_local since it is now always defined.

* Letting GitLab know it's on Docker earlier.

* Trying to run runsvdir-start to avoid container freezing.

* Temporarily skipping reconfigure of GitLab to test the rest.

* Trying to move GitLab reconfigure commands to CI.

* Fixing service namespace for runner and reinstating GitLab tasks.

* Trying to get config script working for GitLab in CI.

* No systemd, do not try to restart gitlab-runner.

* Removing firewall role from CI GitLab test, don't need it and it breaks CI.

* Outputting PostGreSQL logs to see if there are errors.

* Outputting PostGreSQL logs to see if there are errors.

* Trying the config script for GitLab again.

* Suppressing extra GitLab config for CI runs.

* Setting Blackfire CLI defaults to use ce-dev user.

* Improving GitLab vars and adding force stop feature.

* Not installed aws_credentials in meta roles if AWS support disabled.

* Most people will not want pam_ldap or pam_linotp, should not be in meta.

* If you don't create LDAP SSL certs you might not have a /etc/ldap directory.

* Adding a merge of the main branch into the docs branch to CI.

* Adding comment to not use hyphens in boto profile names.

* Supporting different key types to publish to AWS.

* Adding a git fetch before the merge in docs publishing.

* Using the safer _ce_provision_username var in AWS key role.

* Adding the --allow-unrelated-histories flag to git merge in CI.

* Commenting out some of the AWS ACL rulesets to leave them as examples.

* Trying to pull the docs branch to ensure it is up to date.

* Adding keyserver.ubuntu.com to the key servers we publish to by default in gpg_key.

* CI updates and improving SOPS role.

* Swapping hard coded branch names for vars in CI.

* Giving up on merging 2.x - will have to try another approach.

* Change of approach to Packer plugin management.

* Renaming task.

* Reorganising the GitLab Runner role into blocks.

* Updating amazon.aws collection for Ansible.

* Merging 2.x.

* Adding a generic launcher playbook.

* Updating default branch names to 'main'.

* Adding code to launcher playbook that adds new server to hosts.yml.

* Adding hosts.yml file handling to launcher.
* Making the ce-provision-config branch in CI dynamic.

* We do not want a 'ce-dev provision' because it breaks our controller.

* Reverting 'ce-dev provision' change.

* Trying a different ansible_facts var.

* Testing using the source branch in ce-dev.

* Setting max_childen to an integer to avoid CI issues.

* Trying to change the python interpreter used.

* Adding platform and cgroup values to ce-dev compose template.

* Trying latest ubuntu containers in GitHub Actions.

* Fixing the test.sh script to work with venvs.

* Documentation for PHP in CI.

* Adding GitLab test back in.

* Fixing role namespaces.

* Minor bug fixes to ce-provision installer.

* Testing installing ce-provision in the GitHub Actions container directly.

* Using the submitted install script as well.

* Trying as runner user.

* Trying to use the ce-dev base container.

* Updating key name.

* Suppressing systemd actions in Docker.

* Seems Ansible flags have changed.

* Still trying to get --extra-vars right!

* Catching Ansible Galaxy upgrade timers for docker containers.

* Trying to force --roles-path for Galaxy.

* Trying different quotes.

* Missed a line.

* Trying a different approach to passing vars.

* Adding some debug.

* Running ce-python debug first.

* Trying moving to the ce-provision directory.

* Checking the specific path to galaxy roles in ce-provision.

* Trying as controller user again.

* Trying to make the roles dir.

* Being consistent about paths in bash.

* Removing debug lines for now.

* Allowing script to skip iptables.

* Misnamed flag.

* Adding user_provision role to configure controller user.

* Wrapping cleanup so it doesn't break GitHub Actions.

* Completing variables for user_provisin.

* Missed the sudoers var.

* Quoting vars.

* GitLab installer needs _domain_name.

* Logic error in clean-up script.

* Fixing paths to ce-provision in container.

* Trying to fix CI perms issues.

* Git dubious ownership error.

* Git dubious ownership error.

* Running the web server test as the controller user.

* Missed a controller var.

* Commenting out the CE container to test.

* Adding a separate step for Git actions.

* Need sudo for Ubuntu.

* Using a volume to persist data between steps.

* Adding debug commands to test volumes.

* Tweaking volumes.

* Adding the checkout command back in.

* Trying a different approach.

* ls command looks good, so putting web build back in.

* More Ansible Galaxy debug.

* Trying to make ansible-galaxy detect installed roles.

* Run galaxy command as controller.

* Trying galaxy command and cd wrapped in su.

* Specifically checking the contents of galaxy/roles.

* Trying a double-tap install process.

* Quick refactor and debug of SSH.

* Adding OpenSSH server package.

* Checking for a firewall.

* Checking listening packages.

* Starting SSHD especially.

* Starting SSHD without systemd.

* Pre-empting config a bit more.

* More galaxy path debug.

* Running a find to see if we can find the missing roles.

* More verbosity.

* Checking for missing requirements file.

* Removing eroneous when clause.

* Tidying up redundant debug lines.

* Creating a separate ci.yml play targeting localhost.

* Making sure sshd is running.

* Tidying up GitLab CI file and installing SSHD.

* Installing SSHD as a separate step.

* SSHD already installed, starting it instead.

* Don't create systemd timers in containers.

* Preparing a test GitLab build.

* Making builds nightly and fixing GitLab role bug.

* Ensuring is_local var exists and making lock behaviour optional.

* Fixing location and owner of Blackfire config so it is configurable.

* Documentation update.

* Removing all is defined checks for is_local since it is now always defined.

* Letting GitLab know it's on Docker earlier.

* Trying to run runsvdir-start to avoid container freezing.

* Temporarily skipping reconfigure of GitLab to test the rest.

* Trying to move GitLab reconfigure commands to CI.

* Fixing service namespace for runner and reinstating GitLab tasks.

* Trying to get config script working for GitLab in CI.

* No systemd, do not try to restart gitlab-runner.

* Removing firewall role from CI GitLab test, don't need it and it breaks CI.

* Outputting PostGreSQL logs to see if there are errors.

* Outputting PostGreSQL logs to see if there are errors.

* Trying the config script for GitLab again.

* Suppressing extra GitLab config for CI runs.

* Setting Blackfire CLI defaults to use ce-dev user.

* Improving GitLab vars and adding force stop feature.

* Not installed aws_credentials in meta roles if AWS support disabled.

* Most people will not want pam_ldap or pam_linotp, should not be in meta.

* If you don't create LDAP SSL certs you might not have a /etc/ldap directory.

* Adding a merge of the main branch into the docs branch to CI.

* Adding comment to not use hyphens in boto profile names.

* Supporting different key types to publish to AWS.

* Adding a git fetch before the merge in docs publishing.

* Using the safer _ce_provision_username var in AWS key role.

* Adding the --allow-unrelated-histories flag to git merge in CI.

* Commenting out some of the AWS ACL rulesets to leave them as examples.

* Trying to pull the docs branch to ensure it is up to date.

* Adding keyserver.ubuntu.com to the key servers we publish to by default in gpg_key.

* CI updates and improving SOPS role.

* Swapping hard coded branch names for vars in CI.

* Giving up on merging 2.x - will have to try another approach.

* Change of approach to Packer plugin management.

* Renaming task.

* Reorganising the GitLab Runner role into blocks.

* Updating amazon.aws collection for Ansible.

* Merging 2.x.

* Adding a generic launcher playbook.

* Updating default branch names to 'main'.

* Adding code to launcher playbook that adds new server to hosts.yml.

* Adding hosts.yml file handling to launcher.

* Fixing installer failure.
* Added more generic firewall rules that might be useful.

* Added an update step to the installer.

* Providing some default playbooks people can use in ce-provision.

* Slight docs tweak for showtime!

* Modernising hostname handling to use systemd.

* Switching default key type to ED25519 because it is supported by both Debian and GitLab.

* Switching to ED25519 SSH keys and adding hostname and hosts handling to installer.

* Adding iproute2 package so hosts role works.

* Also need an apt-get update in CI.

* Change of plan, stop hosts running in containers.

* Small inline docs change.

* Providing sane defaults for VPC security groups.

* Making key name dynamic in the installer.

* Error in variable namespace.

* Adding GPG and SOPS to installer.
* ldap ca certificate refactor

* small spacing fix

* fixing system ca path to not depend on defined ssl cert

* fixing ldap ssl cert path to not depend on defined ssl cert

* adding lenght requirement so an emtpy string is not true

* fix for jinja template

* adjusting use ldap system ca variable

* fixing small syntax

---------

Co-authored-by: filip <[email protected]>
* Added more generic firewall rules that might be useful.

* Added an update step to the installer.

* Providing some default playbooks people can use in ce-provision.

* Slight docs tweak for showtime!

* Modernising hostname handling to use systemd.

* Switching default key type to ED25519 because it is supported by both Debian and GitLab.

* Switching to ED25519 SSH keys and adding hostname and hosts handling to installer.

* Adding iproute2 package so hosts role works.

* Also need an apt-get update in CI.

* Change of plan, stop hosts running in containers.

* Small inline docs change.

* Providing sane defaults for VPC security groups.

* Making key name dynamic in the installer.

* Error in variable namespace.

* Adding GPG and SOPS to installer.

* The GPG role should make sure GPG is installed!

* Enforcing correct working directory when installing Galaxy roles and collections.

* Indentation fix.
* Added more generic firewall rules that might be useful.

* Added an update step to the installer.

* Providing some default playbooks people can use in ce-provision.

* Slight docs tweak for showtime!

* Modernising hostname handling to use systemd.

* Switching default key type to ED25519 because it is supported by both Debian and GitLab.

* Switching to ED25519 SSH keys and adding hostname and hosts handling to installer.

* Adding iproute2 package so hosts role works.

* Also need an apt-get update in CI.

* Change of plan, stop hosts running in containers.

* Small inline docs change.

* Providing sane defaults for VPC security groups.

* Making key name dynamic in the installer.

* Error in variable namespace.

* Adding GPG and SOPS to installer.

* The GPG role should make sure GPG is installed!

* Enforcing correct working directory when installing Galaxy roles and collections.

* Indentation fix.

* Ensuring controller user is used when delegating back to localhost.

* Adding missing become parameters.

* Adding the acl Debian package to the installer.

* Removing unnecessary become_user parameters where it breaks CI.

* Providing a README file for the launcher playbook.
* Allowing openvpn role to set up a client config location.

* Refactoring openvpn role into blocks and creating client config directory.

* Removing MIT GPG server from defaults.
* Allowing openvpn role to set up a client config location.

* Refactoring openvpn role into blocks and creating client config directory.

* Removing MIT GPG server from defaults.

* We will need to delete default push routes if client config provides them.
* The mysql_client role assumes the deploy user exists, so it should depend on user_deploy.

* Fixing pre-push git hooks.
* The mysql_client role assumes the deploy user exists, so it should depend on user_deploy.

* Fixing pre-push git hooks.

* Trying to fix ACL linting issue.
* Updating-haymarket-drupal-common

* Fixing-j2-spaces-drupal-common
* The mysql_client role assumes the deploy user exists, so it should depend on user_deploy.

* Fixing pre-push git hooks.

* Trying to fix ACL linting issue.

* Adding default portpathwhitelist variable to rkhunter.

* Accidentally doubled up on when clauses.

* Adding another when to rkhunter tasks for when no port paths or scripts are defined.
* adding support for varnish during generates

* updating letsencrypt varnish vhost modification

* modify vhost letsencrypt template

* add missing semi colon

* moving le vhost custom port to be under nginx var instead of domain specific

---------

Co-authored-by: filip <[email protected]>
* adding swap to common base

* disabling swap in container

---------

Co-authored-by: filip <[email protected]>
* Updating-rsyslog-conf

* Adding-daemon-reload-rsyslog

* Template-update-rsyslog

* Changing-rsyslog-name-restart

* Updating-restart-method-rsyslog

* Debugging-rsyslog-service

* Enabling-rsyslog-service

* Testing-sysvinit

* Reworking-rsyslog-for-containers

* Switching-command-to-shell-container-rsyslog

* Reworking-postfix-start-stop-tasks-for-containers

* Updating-conditions-rsyslog-postfix
@sonarqubecloud
Copy link

@matej5 matej5 closed this Mar 26, 2025
@matej5 matej5 deleted the n10-Creating-new-role-for-administration-PR-devel-2.x branch March 28, 2025 10:25
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants