dotfiles

🔧 🏠 Always WIP

Initial Setup

• dnf install git keepassxc python3-pip
• git clone https://github.com/sylvainmetayer/dotfiles.git $HOME/dotfiles
• ./scripts/install-ansible-deps.sh
• If you want autocomplete
  • activate-global-python-argcomplete --dest ~/.bashrc.d/
  • chmod +x ~/.bashrc.d/python-argcomplete

Usage

Dell

My personal laptop, running Fedora.

• pipenv run ansible-playbook playbooks/dell/main.yaml -K --extra-vars="ansible_python_interpreter=$(pipenv --venv)/bin/python"
• systemctl status --user ssh-agent to get the SSH_AUTH_SOCK value
  • Configure KeepassXC to use this socket

GOP

This playbook is similar with dell playbook but add a role gop which contains specific tasks required for company computer.

You need to encrypt some files as it contains sensitive data.

• Ensure the selfhosted.kdbx database is available
  • If needed, you can download it from https://r.sylvain.dev/dotfiles-database
• ./scripts/extract-secrets.sh DATABASE_LOCATION to extract the password and interact with the data inside the vault. It will be stored in ~/.ansible_vault_password.txt

Then you can do the following :

• FILE=$HOME/dotfiles/roles/gop/templates/aws_config.j2

• FILE=$HOME/dotfiles/roles/gop/templates/ssh_hosts.j2

• FILE=$HOME/dotfiles/playbooks/gop/locals.yml

• view file : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault view $FILE

• edit file : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault edit $FILE

• encrypt file : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault encrypt $FILE

• decrypt file: ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt ansible-vault decrypt $FILE

Use the following command : ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible_vault.txt pipenv run ansible-playbook playbooks/gop/main.yml -K --extra-vars="ansible_python_interpreter=$(pipenv --venv)/bin/python" to run the playbook and decrypt the files.

TODO

• [ ] Fedora 39 - enable rpmfusion repository
• [ ] Fix errors with psutils when running with pipenv

Ansible Galaxy

Build

• ansible-galaxy collection build

Publish

• ansible-galaxy collection publish sylvainmetayer-workstation-1.0.0.tar.gz --token TOKEN