/
main.yml
88 lines (74 loc) · 2.99 KB
/
main.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
---
- name: Add time servers
ansible.builtin.lineinfile:
path: /etc/systemd/timesyncd.conf
regexp: "{{ item.regexp }}"
line: "{{ item.line }}"
insertafter: "{{ item.insertafter }}"
loop:
- { regexp: '^NTP=', insertafter: '^#\s*NTP=', line: NTP=0.arch.pool.ntp.org 1.arch.pool.ntp.org 2.arch.pool.ntp.org 3.arch.pool.ntp.org }
- { regexp: '^FallbackNTP=', insertafter: '^#\s*FallbackNTP=', line: FallbackNTP=0.pool.ntp.org 1.pool.ntp.org 0.fr.pool.ntp.org }
become: true
- name: systemctl enable --now systemd-timesyncd.service
ansible.builtin.systemd: name=systemd-timesyncd state=started enabled=true
become: true
- name: Enable pacman parallel downloads
ansible.builtin.lineinfile:
path: /etc/pacman.conf
regexp: '^ParallelDownloads ='
line: ParallelDownloads = 5
insertafter: '^#\s*ParallelDownloads = 5'
become: true
- name: pacman -S reflector
community.general.pacman: name=reflector state=present
become: true
when: ansible_architecture == 'x86_64'
- name: Configure reflector
ansible.builtin.lineinfile:
path: /etc/xdg/reflector/reflector.conf
regexp: '^--country'
line: "--country {{ reflector_country }}"
insertafter: '^#\s*--country'
become: true
when: ansible_architecture == 'x86_64'
- name: systemctl enable reflector.service
ansible.builtin.systemd: name=reflector enabled=true
become: true
when: ansible_architecture == 'x86_64'
- name: systemctl enable --now reflector.timer
ansible.builtin.systemd: name=reflector.timer enabled=true state=started
become: true
when: ansible_architecture == 'x86_64'
- name: pacman -S pacman-contrib for paccache
community.general.pacman: name=pacman-contrib state=present
become: true
- name: systemctl enable --now paccache.timer
ansible.builtin.systemd: name=paccache.timer enabled=true state=started
become: true
- name: systemctl enable --now fstrim.timer
ansible.builtin.systemd: name=fstrim.timer enabled=true state=started
become: true
- name: systemctl enable --now restorecond.service (SELinux)
ansible.builtin.systemd: name=restorecond.service enabled=true state=started
become: true
when: ansible_selinux.status == "enabled"
- name: Optimize AUR building CFLAGS
ansible.builtin.lineinfile:
path: /etc/makepkg.conf
regexp: "{{ item.regexp }}"
line: "{{ item.line }}"
backrefs: "{{ item.backrefs }}"
insertafter: "{{ item.insertafter }}"
loop:
- { regexp: '^(CFLAGS=.*-march=).*( -pipe.*)', line: '\1native -O3\2', backrefs: true, insertafter: '' }
- { regexp: '^RUSTFLAGS=', line: 'RUSTFLAGS="-C opt-level=3 -C target-cpu=native"', backrefs: false, insertafter: '^#RUSTFLAGS=' }
- { regexp: '^MAKEFLAGS=', line: 'MAKEFLAGS="-j$(nproc)"', backrefs: false, insertafter: '^#MAKEFLAGS=' }
become: true
- name: Get file system type of /
ansible.builtin.command: stat --file-system --format=%T /
become: true
register: root_fstype
changed_when: false
check_mode: false
- include_tasks: snapper.yml
when: root_fstype.stdout == 'btrfs'