Unknown user at 04:47, 19 August 2020

2020-08-19T04:47:18Z

← Older revision		Revision as of 04:47, 19 August 2020
Line 1:		Line 1:
			Up: [[Ubuntu/Bespin]]

			Previous: [[Ubuntu/Bespin/Gnome Setup]]

			Next: [[Ubuntu/Bespin/PIA]]



	Note that it is easiest and safest to perform these steps on a local network (e.g., a wifi router network) that has internet connectivity but that won't expose the Ubuntu server to the public internet.		Note that it is easiest and safest to perform these steps on a local network (e.g., a wifi router network) that has internet connectivity but that won't expose the Ubuntu server to the public internet.

Unknown user at 02:57, 18 August 2020

2020-08-18T02:57:30Z

← Older revision		Revision as of 02:57, 18 August 2020
Line 67:		Line 67:
	[[Category:Ansible]]		[[Category:Ansible]]
	[[Category:Bespin]]		[[Category:Bespin]]
	[[Category:~~Machines~~]]		[[Category:Machine]]

Unknown user: Created page with "Note that it is easiest and safest to perform these steps on a local network (e.g., a wifi router network) that has internet connectivity but that won't expose the Ubuntu serv..."

2020-08-18T02:57:19Z

Created page with "Note that it is easiest and safest to perform these steps on a local network (e.g., a wifi router network) that has internet connectivity but that won't expose the Ubuntu serv..."

New page

Note that it is easiest and safest to perform these steps on a local network (e.g., a wifi router network) that has internet connectivity but that won't expose the Ubuntu server to the public internet.

Now use https://github.com/charlesreid1-com/charlesreid1-ansible to run the provision and base plays against the server. Note that this requires root access via ssh, so you have to edit your ssh config file to include this line:

<code>/etc/ssh/sshd_config</code>

<pre>
PermitRootLogin yes
</pre>

Now restart the ssh service:

<pre>
sudo service ssh restart
</pre>

and test that you can log in as root without a password:

<pre>
ssh root@<ip-for-bespin>
</pre>

ONLY ENABLE THIS WHILE YOU RUN ANSIBLE! DISABLE IT WHEN YOU ARE DONE!

Now run ansible from a different machine:

<pre>
# run this from a different machine!
git clone git@github.com:charlesreid1-com/charlesreid1-ansible.git ansible
cd ansible

# provision (python3 install)
ANSIBLE_CONFIG="local.cfg" ansible-playbook --extra-vars "machine_name=bespin" provision.yml

# set up with all the things
ANSIBLE_CONFIG="local.cfg" ansible-playbook --extra-vars "machine_name=bespin" --vault-password-file=.vault_secret base.yml
</pre>

Last, edit your ssh config to disable root login:

<code>/etc/ssh/sshd_config</code>

Remove this line!

<pre>
PermitRootLogin yes # REMOVE ME
</pre>

and replace with this one:

<pre>
PermitRootLogin no
</pre>

Now restart the ssh service:

<pre>
sudo service ssh restart
</pre>

[[Category:Ubuntu]]
[[Category:Linux]]
[[Category:Unix]]
[[Category:Ansible]]
[[Category:Bespin]]
[[Category:Machines]]

Ubuntu/Bespin/Ansible - Revision history

Unknown user at 04:47, 19 August 2020

Unknown user at 02:57, 18 August 2020

Unknown user: Created page with "Note that it is easiest and safest to perform these steps on a local network (e.g., a wifi router network) that has internet connectivity but that won't expose the Ubuntu serv..."