brucellino / ansible-role-consul Goto Github PK

For testing purposes, I want a startup script that will simulate the behaviour in a container so that I can run compliance tests.

After some research, I came across https://ahmet.im/blog/minimal-init-process-for-containers/
(HT @ahmetb) - very nice and hopefully still relevant overview of the options.

All things considered, I'm going with dumb-init because I won't be using these containers in prod.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

See https://github.com/brucellino/ansible-role-consul/runs/7336770348?check_suite_focus=true#step:7:44

The ansible provisioner makes a first connection, but never returns.

Ref: mkaczanowski/packer-builder-arm#169

Seems to be related to the SSH communicator.

mkaczanowski/packer-builder-arm#121 seems to contain a fix

Add description of:

• final state
• usage
• testing

Consul needs to write logs and rotate them. This is typically done with the syslog group permissions in /var/log

https://github.com/brucellino/ansible-role-consul/actions/runs/4350746400/jobs/7601771486#step:7:89

Configure the default user, and wifi configuration so that we can boot straight into the network.
Requide variables:

• hostname
• default user with sudo
• ssh public key
• template for /etc/wpa_supplicant/wpa_supplicant.conf
• unblock wifi
• set timezone

Images pushed in a PR should be tagged with the PR name and should be deleted when the PR is closed

It would be nice to have a link to the container version tagged in the release.
Need a custom releasenotes template.

based on the hostname, we can call the PKI secrets engine to issue the certificate to the host when it starts.

• Add a provisioner to run trivy on the container
• Enable container security scanning in the repo

use a ConditionFileNotEmpty for the CA cert.