bsdnix/TODO.md
Thomas von Dein 480111eed7 fixes:
- finally fixed pf.conf
- got Bastillefile working (sshd_config missing yet)
- re-activated network role to set net variables
- fixed make [all]
- use hetzner volume for jail home
- use ramdisk for /tmp inside jail
2024-11-21 19:38:55 +01:00

873 B

Install tarball

clean known_host doesnt work

install from tarball example:

- name: "If jdk not exists then only download and unarchive"
  unarchive:
    src: "https://download.oracle.com/java/17/latest/jdk-17_linux-aarch64_bin.tar.gz"
    dest: /opt/
    remote_src: yes
    creates: /opt/jdk-17
  register: foo
- name: "Rename if download happens "
  command: mv /opt/jdk-17_linux-arch64 /opt/jdk-17
  when: foo.changed == True

configure DNS record for newly created instance

https://github.com/bodsch/ansible-collection-dns/blob/main/roles/knot/README.md

or using e3 using wrapper script around jaildk exec dns knotc ...

Cleanup release snapshot

  • remove pkg function from root .bashrc

Add users with authorized_keys files

Add quota config and enable/configure rctl

Setup sshd_config for jail

Using Bastillefile CP?