fix foobazdmx role

poetry is available via apt now so we install it that way
remove distribution checks
2025-11-06 21:19:20 +01:00 · 2025-11-06 21:16:42 +01:00 · 2025-11-06 18:25:29 +01:00 · 2025-11-05 23:08:28 +01:00
5 changed files with 10 additions and 22 deletions
--- a/inventories/z9/hosts.yaml
+++ b/inventories/z9/hosts.yaml
@ -4,7 +4,7 @@ all:
      ansible_host: authoritative-dns.z9.ccchh.net
      ansible_user: chaos
    dooris:
-      ansible_host: 10.31.208.201
+      ansible_host: dooris.z9.ccchh.net
      ansible_user: chaos
    light:
      ansible_host: light.z9.ccchh.net
--- a/roles/deploy_ssh_server_config/templates/sshd_config.j2
+++ b/roles/deploy_ssh_server_config/templates/sshd_config.j2
@ -17,7 +17,15 @@ HostKey /etc/ssh/ssh_host_ed25519_key
 HostKey /etc/ssh/ssh_host_rsa_key
 HostKey /etc/ssh/ssh_host_ecdsa_key

+
+{% if ansible_facts["distribution"] == "Debian" and ansible_facts["distribution_major_version"] == "13" %}
+KexAlgorithms mlkem768x25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
+{% elif ansible_facts["distribution"] == "Debian" and ansible_facts["distribution_major_version"] == "12" %}
+KexAlgorithms sntrup761x25519-sha512,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
+{% else %}
 KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
+{% endif %}
+

 Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

--- a/roles/foobazdmx/meta/main.yaml
+++ b/roles/foobazdmx/meta/main.yaml
@ -1,8 +0,0 @@
---
-dependencies:
-  - role: distribution_check
-    vars:
-      distribution_check__distribution_support_spec:
-        - name: Debian
-          major_versions:
-            - "11"
--- a/roles/foobazdmx/tasks/main.yaml
+++ b/roles/foobazdmx/tasks/main.yaml
@ -7,11 +7,7 @@
      - python3
      - python3-pip
      - python3-setuptools
-
- name: Ensure python peotry is installed
-  become: true
-  ansible.builtin.pip:
-    name: poetry
+      - python3-poetry

 - name: Ensure foobazdmx user exists
  become: true
--- a/roles/ola/meta/main.yaml
+++ b/roles/ola/meta/main.yaml
@ -1,8 +0,0 @@
---
-dependencies:
-  - role: distribution_check
-    vars:
-      distribution_check__distribution_support_spec:
-        - name: Debian
-          major_versions:
-            - "11"
Author	SHA1	Message	Date
lilly	63917722ff	fix foobazdmx role Some checks failed / Ansible Lint (push) Failing after 1m58s Details poetry is available via apt now so we install it that way	2025-11-06 21:19:20 +01:00
lilly	aeec08fce8	remove distribution checks Some checks failed / Ansible Lint (push) Failing after 2m2s Details Signed-Off-By: june	2025-11-06 21:16:42 +01:00
June	cffe5c2b16	dooris: use hostname instead of IP Some checks failed / Ansible Lint (push) Failing after 2m9s Details	2025-11-06 18:25:29 +01:00
c6ristian	d690f81e3d	deploy_ssh_server_config: setup ssh pq cryptography Some checks failed / Ansible Lint (push) Failing after 2m14s Details	2025-11-05 23:08:28 +01:00