README.md

Webarchitects systemd Ansible role

An Ansible role for configuring systemd services on Debian, this role has been designed to be as generic as possible in order to enable to it be used to configure any Systemd service.

Role variables

See the defaults/main.yml file for the default variables.

systemd

Set the systemd variable to false to prevent any tasks in this role being run, it defaults to true.

systemd_timesyncd_reboot

Set the systemd_timesyncd_reboot variable to true for servers which have incorrect clocks to be rebooted by this role in order to correct their clocks, this variable defaults to false.

systemd_units

A list of System units to configure, by default there is curently only one service defined, systemd-timesyncd:

systemd_units:
  - name: systemd-timesyncd
    files:
      - path: /etc/systemd/timesyncd.conf
        comment: |
          Entries in this file show the compile time defaults.
          You can change settings by editing this file.
          Defaults can be restored by simply deleting this file.
          See timesyncd.conf(5) for details.
        conf:
          Time:
            NTP: 0.pool.ntp.org 1.pool.ntp.org 3.pool.ntp.org 2.pool.ntp.org
        state: present
    pkgs:
      - systemd-timesyncd
    state: present
    unit_state: started

The only required variables is name, see the meta/argument_specs.yml for the variable types.

For each service required .deb packages can be specified, the state of the service can be specified and the files to be created / amended and their content in YAML, which will be converted into ini format using the templates/unit.j2 template.

Files are read using the JC ini parser and only updated if the conf is to be changed.

When files are updated or deleted backups are created based on the existing file name but prefixed with a leading . and suffixed with a timestamp in ISO8601 format and the file extension .bak.

Read existing Systemd files using JC

You can read existing systemd files as YAML on the command line using JC, for example:

cat /etc/systemd/timesyncd.conf | jc --ini -py
---
Time:
  NTP: 0.pool.ntp.org 1.pool.ntp.org 3.pool.ntp.org 2.pool.ntp.org

Dependencies

This role requires Ansible 2.11 or newer, JC and JMESPath to be installed using pip3.

Repo

The primary URL of this repo is https://git.coop/webarch/systemd however it is also mirrored to GitHub and available via Ansible Galaxy.

If you use this role please use a tagged release, see the release notes.

License

This role is released under the same terms as Ansible itself, the GNU GENERAL PUBLIC LICENSE, Version 3.

Author

Chris Croome.