diff --git a/README.md b/README.md index c6b12d1..c486fcb 100644 --- a/README.md +++ b/README.md @@ -4,4 +4,11 @@ Terraform Workspace for creating and managing AWS Image Pipelines To SSO Login: -aws sso login --profile 229685449397-csvd-dev-gov.inf-admin-t2 \ No newline at end of file +aws sso login --profile 229685449397-csvd-dev-gov.inf-admin-t2 + +export AWS_PROFILE=229685449397-csvd-dev-gov.inf-admin-t2 + +aws sts get-caller-identity + + +rebecaa linn : She does x86 (get context for ARM) \ No newline at end of file diff --git a/ansible/rhel-arm-baseline.yaml b/ansible/rhel-arm-baseline.yaml index 709c935..48551e5 100644 --- a/ansible/rhel-arm-baseline.yaml +++ b/ansible/rhel-arm-baseline.yaml @@ -1,9 +1,13 @@ --- + name: RHEL ARM Baseline + hosts: all + become: true tasks: + - name: Ensure latest packages are installed yum: name: '*' @@ -15,10 +19,57 @@ tasks: - vim - git - curl + - wget + - net-tools + - unzip + - epel-release + - htop state: present - name: Create example user user: name: exampleuser state: present - groups: wheel \ No newline at end of file + groups: wheel + shell: /bin/bash + password: "{{ 'password' | password_hash('sha512') }}" # Need to change password here + + - name: Configure SSH for exampleuser + authorized_key: + user: exampleuser + state: present + key: "{{ lookup('file', '/path/to/exampleuser_ssh_key.pub') }}" # Replace with the actual path to the public key + + - name: Ensure firewalld is installed and running + yum: + name: firewalld + state: present + + - name: Start and enable firewalld + service: + name: firewalld + state: started + enabled: yes + + - name: Open SSH port in firewall + firewalld: + service: ssh + permanent: true + state: enabled + immediate: yes + + - name: Disable SELinux + selinux: + state: disabled + + - name: Set timezone to UTC + command: timedatectl set-timezone UTC + + - name: Reboot the system to apply changes + reboot: + msg: "Reboot initiated by Ansible for baseline setup" + connect_timeout: 5 + reboot_timeout: 600 + pre_reboot_delay: 0 + post_reboot_delay: 30 + test_command: whoami \ No newline at end of file