freifunk/Ansible-Configuration Changeset - f290fa2b2c3c · Chaos Computer Club Lëtzebuerg Projects

Changeset - f290fa2b2c3c

Parent rev.

Child rev.

[Not reviewed]

0 1 0

x - 1 day ago 2025-08-23 23:09:51
xbr@c3l.lu

fix: overwriting error because of default immutable attribute

1 file changed with 8 insertions and 0 deletions:

gateway/initial_gw_setup.yml

0 comments (0 inline, 0 general)

gateway/initial_gw_setup.yml

➞

Show inline comments

@@ @@ -30,56 +30,64 @@ @@
           - libnl-genl-3-dev
           - linux-headers-amd64
           - systemd-resolved # We current use it later, but we don't really need it
           - dkms
           - lsb-release
           - ethtool
           - python3
           - wget # for fastd-blacklist
       tags: update
     # fix systemd-resolved's default config
     - name: Stop systemd-resolved
       ansible.builtin.service:
         name: "systemd-resolved"
         state: "stopped"
       tags: config
     - name: Copy resolved.conf
       ansible.builtin.copy:
         src: "{{ server_config_dir }}/systemd-resolved/resolved.conf"
         dest: /etc/systemd/resolved.conf
         owner: root
         group: root
         mode: "0644"
       tags: config
     - name: Remove immutable attribute on resolv.conf
       ansible.builtin.file:
         dest: /etc/resolv.conf
         attributes: '-i'
       become: true
       tags: config
     - name: Create a symbolic link for resolv.conf, replacing the initial resolv.conf
       ansible.builtin.file:
         src: /run/systemd/resolve/resolv.conf
         dest: /etc/resolv.conf
         owner: root
         group: root
         state: link
         attributes: '-i'
         force: true
       become: true
       tags: config
     - name: Start systemd-resolved
       ansible.builtin.service:
         name: "systemd-resolved"
         state: "started"
         enabled: "true"
       tags: config
     - name: Add the routing table for freifunk
       ansible.builtin.blockinfile:
         path: /etc/iproute2/rt_tables
         backup: true
         block: |
           # freifunk
 lux
 icvpn
 vpn
       tags: config
     # Modules
     - name: Load `br_netfilter` kernel module
       community.general.modprobe:
         name: "br_netfilter"
         persistent: "present"

0 comments (0 inline, 0 general)