CORPUS OPS BOOTSTRAP PACKAGE

INTRO

This packages helps to bring out a working ansible environment to bootstrap a whole modern infrastructure

Documentation topics

• Docs

Galaxy

corpusops team normally add entries to this galaxy user.

Installing

note for OSX users: we won't install dependencies for you: you need virtualenv and a valid python installation.

mkdir corpusops
git clone https://github.com/corpusops/corpusops.bootstrap.git corpusops/corpusops.bootstrap
corpusops/corpusops.bootstrap/bin/install.sh -l
corpusops/corpusops.bootstrap/bin/install.sh

It will in ./corpusops/corpusops.bootstrap:

• download prerequisites packages for your distribution
• Install a virtualenv with ansible
• Download corpusops roles & playbooks

Note about branches and Versions

corpusops.bootstrap	roles branch	supported python version	bundled ansible branch	ansible requirements	docker tags
3.0	2.0	>=python-3.9	2.14	>= 2.10	corpusops/ubuntu:latest, corpusops/ubuntu:22.04-2.14, corpusops/ubuntu:20.04-2.14,
2.0	2.0	python-3	2.10	2.9,2.10	corpusops/ubuntu:22.04-2.10, corpusops/ubuntu:20.04-2.10, corpusops/ubuntu:18.04-2.10, corpusops/ubuntu:22.04-2.9, corpusops/ubuntu:20.04-2.9, corpusops/ubuntu:18.04-2.9
master	master	python-2.8	2.7	2.5, 2.7	corpusops/ubuntu:20.04-2.7, corpusops/ubuntu:18.04-2.7

Upgrading from master branch

We provide a semi-automatic way to proceed to 2.0 upgrade not to break old installs, it's as simple as copying this in a terminal

cd $corpusops_bootstrap && \
    git pull && \
    ./bin/install.sh -C -b 2.0 && \
    bin/install.sh -C && \
    rm -f .corpusops/corpusops_branch

Ansible notes

• It's better to use the installer (this repo, corpusops.bootstrap) that uses under the hood our ansible fork which have small fixes & divergences to pristine ansible.

badges

Branch	CIBuild	Branch	CIBuild
2.0		master

Roles

• corpusops.roles

Ansible preconfigured playbooks helpers

• playbooks

Ansible plugins roles

• ansible_plugins: collections of lookup, plugins, and filters
  • debug
  • lsb_release
  • humanlog
  • actionhelper
  • jinjarender
  • include_jinja_vars
  • saltcall

Low level configuration roles

Role	Role
vars
localsettings_apparmor	localsettings_apparmor_vars
localsettings_autoupgrades	localsettings_autoupgrades_vars
localsettings_basepkgs	localsettings_basepkgs_vars
localsettings_dns	localsettings_dns_vars
localsettings_editor	localsettings_editor_vars
localsettings_etckeeper	localsettings_etckeeper_vars
localsettings_git	localsettings_git_vars
localsettings_golang	localsettings_golang_vars
localsettings_jdk	localsettings_jdk_vars
localsettings_locales	localsettings_locales_vars
localsettings_nscd	localsettings_nscd_vars
localsettings_pkgmgr	localsettings_pkgmgr_vars
localsettings_profile	localsettings_profile_vars
localsettings_screen	localsettings_screen_vars
localsettings_ssh	localsettings_ssh_vars
localsettings_sudo	localsettings_sudo_vars
localsettings_sysctls	localsettings_sysctls_vars
localsettings_timezone	localsettings_timezone_vars
localsettings_vim	localsettings_vim_vars
localsettings_packer	localsettings_packer_vars
localsettings_nodejs	localsettings_nodejs_vars

Services configuration roles

Role	Role
services_base_cron	services_base_cron_vars
services_base_ntp	services_base_ntp_vars
services_base_sshd	services_base_sshd_vars
services_magicbridge	services_magicbridge_vars
services_misc_robotframework	services_misc_robotframework_vars
services_misc_xvfb	services_misc_xvfb_vars
services_virt_docker	services_virt_docker_vars
services_virt_lxc	services_virt_lxc_vars
services_virt_lxc

Helpers

Role	role
corpusops.lxc_create	corpusops.lxc_sshauth
corpusops.lxc_drop
corpusops.lxc_register	corpusops.lxc_sync
corpusops.lxc_snapshot	corpusops.lxc_vars
corpusops.nginx_vhost
switch_to_systemd_resolved	supervisor
ssl_selfsigned_cert	sshkeys
sslcerts	set_alternatives
ssl_ca_signed_cert	get_secret_variable
ssh_synckeys	docker_compose_service

DB related roles

Role	role
mysql_db	postgresql_db
mysql_harden_user	postgresql_extensions
mysql_role	postgresql_install_postgis
postgresql_dropreset_db_encoding	postgresql_privs
postgresql_role

burp (backup) related roles

Role	role
burp_client_configuration	burp_fw
burp_client_configuration_vars	burp_plugins
burp_client_server	burp_server_configuration
burp_client_server_vars	burp_sign