update

config.yml

@@ -6,14 +6,41 @@
     worker_limit: 1024  # Global variable used in the template
 
   tasks:
-    - name: Deploy sssd.conf
+    - name: Root password
-      template:
+      ansible.builtin.import_tasks: tasks/rootpass.yml
-        src: templates/sssd.conf
+
-        dest: /etc/sssd/conf.d/sssd.conf
+    - name: Create Directories
+      file:
+        path: '{{ item.directory }}'
+        state: directory
+        mode: "{{ item.mode | default('0755') }}"
         owner: root
         group: root
-        mode: '0600'
+      loop:
-      notify: Restart sssd  # This triggers the handler only if the file changes
+        - { directory: "/var/backups" }
+        - { directory: "/opt/atclab/bin" }
+        - { directory: "/var/user", mode: "1777" }
+
+    - name: Copy etc configs
+      copy:
+        src: '{{ item.src }}'
+        dest: '{{ item.dest }}'
+        owner: root
+        group: root
+        mode: "{{ item.mode | default('0644') }}"
+      loop:
+        - { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
+        - { src: templates/auto.users, dest: /etc/auto.users }
+        - { src: templates/sssd.conf, dest: /etc/sssd/conf.d/sssd.conf, mode: '0600' }
+
+#     - name: Deploy sssd.conf
+#       template:
+#         src: templates/sssd.conf
+#         dest: /etc/sssd/conf.d/sssd.conf
+#         owner: root
+#         group: root
+#         mode: '0600'
+#       notify: Restart sssd  # This triggers the handler only if the file changes
 
     - name: Deploy ldap.conf
       template:
@@ -55,26 +82,7 @@
         group: root
         mode: '0644'
 
-    - name: Root password
+    - name: Copy profile configs
-      ansible.builtin.import_tasks: tasks/rootpass.yml
-
-    # - name: Disable SELinux
-    #   ansible.builtin.selinux:
-    #    state: disabled
-
-    - name: Create Directories
-      file:
-        path: '{{ item.directory }}'
-        state: directory
-        mode: "{{ item.mode | default('0755') }}"
-        owner: root
-        group: root
-      loop:
-        - { directory: "/var/backups" }
-        - { directory: "/opt/atclab/bin" }
-        - { directory: "/var/user", mode: "1777" }
-
-    - name: Copy etc configs
       copy:
         src: etc/profile.d/
         dest: /etc/profile.d/
@@ -82,6 +90,17 @@
         group: root
         mode: '0644'
 
+    - name: Copy etc configs
+      copy:
+        src: '{{ item.src }}'
+        dest: '{{ item.dest }}'
+        owner: root
+        group: root
+        mode: '0644'
+      loop:
+        - { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
+        - { src: templates/auto.users, dest: /etc/auto.users }
+
     - name: Copy bin scripts
       copy:
         src: bin/

group_vars/all.yml

@@ -35,3 +35,4 @@ root_password_hash: "$6$OJEdzUbqfQR72WjX$SFMnDZ0MXM7JfYKPvvN0nJIPetzrWQw/0q360xg
 proxmox_packages:
   - unattended-upgrades
   - borgmatic
+  - net-tools

inventory.ini

@@ -14,6 +14,7 @@ atc-gpu-dev.dell-atc.lan
 atc-gpu-mo1.dell-atc.lan
 atc-gpu-prod.dell-atc.lan
 atc-nas.dell-atc.lan
+mgt01.dell-fde.lan
 dns1.dell-fde.lan
 dns2.dell-fde.lan
 db01.dell-fde.lan
@@ -27,18 +28,19 @@ proxmox01.dell-fde.lan
 proxmox02.dell-fde.lan
 
 [docker]
-atc-mgt01.dell-atc.lan
+atc-db02.dell-atc.lan
+atc-dns1.dell-atc.lan
 atc-docker01.dell-atc.lan
 atc-docker02.dell-atc.lan
 atc-gpu-bart.dell-atc.lan
+atc-gpu-dev.dell-atc.lan
 atc-gpu-mo2.dell-atc.lan
 atc-gpu-prod.dell-atc.lan
-atc-db02.dell-atc.lan
+atc-mgt01.dell-atc.lan
-atc-dns1.dell-atc.lan
+atc-portal01.dell-atc.lan
-atc-dns1.lan
 dns1.dell-fde.lan
 dns2.dell-fde.lan
-atc-portal01.dell-atc.lan
+mgt01.dell-fde.lan
 
 [rhel]
 atc-docker01.dell-atc.lan
@@ -55,6 +57,7 @@ dns1.dell-fde.lan
 haproxy.dell-fde.lan
 dns2.dell-fde.lan
 db01.dell-fde.lan
+mgt01.dell-fde.lan
 
 [borg_servers]
 atc-backup.dell-atc.lan
@@ -76,6 +79,7 @@ haproxy.dell-fde.lan
 pve2.dell-atc.lan
 proxmox01.dell-fde.lan
 proxmox02.dell-fde.lan
+mgt01.dell-fde.lan
 
 [postgres]
 atc-db01.dell-atc.lan

templates/50unattended-upgrades

@@ -26,7 +26,7 @@ Unattended-Upgrade::Origins-Pattern {
         // archives (e.g. from testing to stable and later oldstable).
         // Software will be the latest available for the named release,
         // but the Debian release itself will not be automatically upgraded.
-//      "origin=Debian,codename=${distro_codename}-updates";
+        "origin=Debian,codename=${distro_codename}-updates";
 //      "origin=Debian,codename=${distro_codename}-proposed-updates";
         "origin=Debian,codename=${distro_codename},label=Debian";
         "origin=Debian,codename=${distro_codename},label=Debian-Security";

templates/auto.users

@@ -0,0 +1 @@
+*	nfs.dell-fde.lan:/export/users/&

templates/users.autofs

@@ -0,0 +1 @@
+/users	/etc/auto.users