diff options
Diffstat (limited to 'playbook.yaml')
| -rw-r--r-- | playbook.yaml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/playbook.yaml b/playbook.yaml index 91573fe..ebeefd5 100644 --- a/playbook.yaml +++ b/playbook.yaml @@ -216,6 +216,39 @@ tags: - dns + # This is needed by ansible.builtin.deb822_repository to interact with the + # sources lists. In ansible-core 2.20 and above, there is a builtin + # install_python_debian parameter that handles that without this extra step, + # but we are currently running 2.19. + # TODO(debian-forky) use deb822_repository's install_python_debian parameter + - name: Ensure python3-debian is installed + ansible.builtin.apt: + name: + - python3-debian + state: present + update_cache: true + become: true + + - name: Ensure debian apt repositories are configured + ansible.builtin.deb822_repository: + name: debian + uris: "{{ debian_uri }}" + suites: + - "{{ debian_version }}" + - "{{ debian_version }}-updates" + components: main + signed_by: /usr/share/keyrings/debian-archive-keyring.gpg + become: true + + - name: Ensure debian-security apt repositories are configured + ansible.builtin.deb822_repository: + name: debian-security + uris: "{{ debian_security_uri }}" + suites: "{{ debian_version }}-security" + components: main + signed_by: /usr/share/keyrings/debian-archive-keyring.gpg + become: true + # We specifically use apt instead of the more general package module here, # because we want to ensure the cache is updated before we try and install # anything. This is needed because, on a freh Debian install on AWS |