commit 12e2a4273afc340aac5a10aec678eb4fb86df2a1 Author: Mike Holloway Date: Sat Aug 26 16:16:20 2023 -0400 On branch master Initial commit Changes to be committed: new file: .gitignore Ansible retry files, vim swap files new file: tasks/main.yml Added pam.d/sshd options to enable systemd-user sessions via ssh diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..d12a3ef --- /dev/null +++ b/.gitignore @@ -0,0 +1,3 @@ +.*.sw* +*.retry + diff --git a/tasks/main.yml b/tasks/main.yml new file mode 100644 index 0000000..7554cf4 --- /dev/null +++ b/tasks/main.yml @@ -0,0 +1,28 @@ +- name: Install podman, podman networking plugins, and python support packages + dnf: + name: ['podman', 'containernetworking-plugins', 'podman-plugins', 'python3-pip'] + state: present +- name: Install podman-compose pip Package + pip: + name: podman-compose + state: present +- name: Create Service Users + user: + name: "{{ item }}" + loop: + "{{ service_users }}" +- name: Enable systemd-user session initialization over ssh + lineinfile: + dest: /etc/pam.d/sshd + line: "session optional pam_systemd.so" + +# - name: Copy cni networking driver config into place +# blockinfile: +# name: "/etc/cni/net.d/podman.conflist" +# insertafter: "*\"plugins\": [*" +# block: " { +# \"type\": \"dnsname\", +# \"domainName\": \"dns.podman\", +# \"capabilities\": { +# \"aliases\": true +# }"