mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-01 05:51:56 +08:00
07837f83a7
This had a bunch of old rhel7 stuff in it, we are on 9 now and using gnupg2. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
54 lines
1.2 KiB
YAML
54 lines
1.2 KiB
YAML
---
|
|
- name: Install sigul server
|
|
ansible.builtin.package: state=present name={{ item }}
|
|
with_items:
|
|
- sigul-server
|
|
- rpm-sign
|
|
- bzip2
|
|
- p11-kit
|
|
- openssl-pkcs11
|
|
- gnutls-utils
|
|
- ykpers
|
|
# - yubico-piv-tool
|
|
- pcsc-lite
|
|
- opensc
|
|
- tar
|
|
tags:
|
|
- packages
|
|
|
|
- name: Enable pcscd
|
|
service: name=pcscd state=started enabled=yes
|
|
|
|
- name: Install gnupg packages
|
|
ansible.builtin.package: state=present name={{ item }}
|
|
with_items:
|
|
- gnupg
|
|
tags:
|
|
- packages
|
|
|
|
- name: Setup sigul server.conf
|
|
ansible.builtin.template: src=server.conf.j2 dest=/etc/sigul/server.conf
|
|
owner=sigul group=sigul mode=0640
|
|
tags:
|
|
- config
|
|
|
|
- name: Add polkit rules to allow sigul user to access the smartcard/yubikey
|
|
ansible.builtin.copy: src=00-sigul.rules dest=/etc/polkit-1/rules.d/00-sigul.rules
|
|
tags:
|
|
- config
|
|
|
|
- name: Deploy public yubikey certs
|
|
ansible.builtin.copy: src="{{private}}/files/sigul/{{item}}" dest=/etc/sigul/{{item}} mode=0644 owner=root group=root
|
|
with_items:
|
|
- yubikey_sv03.pem
|
|
- yubikey_sv04.pem
|
|
- yubikey_sv05.pem
|
|
- yubikey_sv06.pem
|
|
tags:
|
|
- config
|
|
|
|
- name: Mask tmpfs tmp
|
|
systemd: masked=yes name=tmp.mount
|
|
tags:
|
|
- config
|