bsdnix/TODO.md

Install tarball

clean known_host doesnt work

install from tarball example:

- name: "If jdk not exists then only download and unarchive"
  unarchive:
    src: "https://download.oracle.com/java/17/latest/jdk-17_linux-aarch64_bin.tar.gz"
    dest: /opt/
    remote_src: yes
    creates: /opt/jdk-17
  register: foo
- name: "Rename if download happens "
  command: mv /opt/jdk-17_linux-arch64 /opt/jdk-17
  when: foo.changed == True

configure DNS record for newly created instance

https://github.com/bodsch/ansible-collection-dns/blob/main/roles/knot/README.md

or using e3 using wrapper script around jaildk exec dns knotc ...

Cleanup release snapshot

• remove pkg function from root .bashrc

fix home mount

nullfs into jail

Add users with authorized_keys files

Add quota config and enable/configure rctl

DNS

• kresd.conf => listen on ::
• add ::1 to host resolv.conf
• add default gw to jail resolv.conf

Network

• {{ ansible_default_ipv6.interface }} sometimes resolves to the link local ip, not the inet6 one, which results in a wrong (or none) default route and resolve.conf inside the jail.

• Use https://danwin1210.de/github-ipv6-proxy.php