diff --git a/.woodpecker/update-all.yml b/.woodpecker/update-all.yml deleted file mode 100644 index f86250fb..00000000 --- a/.woodpecker/update-all.yml +++ /dev/null @@ -1,32 +0,0 @@ -when: - - event: cron - evaluate: 'PIPELINE == "update-all"' - - event: manual - evaluate: 'PIPELINE == "update-all"' - -timeout: 120 - -steps: - - name: update-all - image: gitea.renner.uno/gitea_admin/ci-ansible:2026-04-29 - environment: - ANSIBLE_FORCE_COLOR: "true" - ANSIBLE_HOST_KEY_CHECKING: "false" - ANSIBLE_ROLES_PATH: "../roles:./roles" - SSH_PRIVATE_KEY: - from_secret: ssh_private_key - VAULT_PASS: - from_secret: vault_pass - PROXMOX_TOKEN_ID: - from_secret: proxmox_token_id - PROXMOX_TOKEN_SECRET: - from_secret: proxmox_token_secret - commands: - - mkdir -p ~/.ssh - - echo "$SSH_PRIVATE_KEY" | base64 -d > ~/.ssh/id_ed25519 - - chmod 600 ~/.ssh/id_ed25519 - - printf "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile /dev/null\n" > ~/.ssh/config - - cd ansible - - echo "$VAULT_PASS" > .vault_pass && chmod 600 .vault_pass - - export ANSIBLE_VAULT_PASSWORD_FILE=.vault_pass - - ansible-playbook -i inventory/ plays/update.yml -v diff --git a/ansible/plays/common.yml b/ansible/plays/common.yml index b564df82..3388a7a0 100644 --- a/ansible/plays/common.yml +++ b/ansible/plays/common.yml @@ -6,7 +6,7 @@ - certificates - name: Base System Hardening & Common Configuration - hosts: all:!pbs + hosts: all become: true ignore_unreachable: true gather_facts: true diff --git a/ansible/roles/qemu-guest-agent/tasks/main.yml b/ansible/roles/qemu-guest-agent/tasks/main.yml index 5392b99a..de909190 100644 --- a/ansible/roles/qemu-guest-agent/tasks/main.yml +++ b/ansible/roles/qemu-guest-agent/tasks/main.yml @@ -8,9 +8,6 @@ state: present when: - ansible_os_family is defined and ansible_os_family == 'Debian' - - "'proxmox_all_lxc' not in group_names" - - "'proxmox_nodes' not in group_names" - - "'pve_cluster' not in group_names" - name: Install QEMU Guest Agent (RHEL/Rocky VMs) dnf: @@ -18,13 +15,9 @@ state: present when: - ansible_os_family is defined and ansible_os_family == 'RedHat' - - "'proxmox_all_lxc' not in group_names" - - "'proxmox_nodes' not in group_names" - - "'pve_cluster' not in group_names" - name: Ensure qemu-guest-agent is started and enabled service: name: qemu-guest-agent state: started enabled: yes - when: "'proxmox_all_lxc' not in group_names"