Initial commit

.gitignore

+/*.tar.gz
+
+**/*~
+**/*#
+**/.#*
+**/*.aux
+**/*.toc
+**/*.log
+**/*.out
+**/.idea
+**/*.pyc
+**/__pycache__/
+**/*.retry
+**/.vagrant

.gitlab-ci.yml

+---
+image: quay.io/ansible/toolset:latest
+services:
+  - docker:19.03.0-dind
+
+variables:
+  PY_COLORS: 1
+  GIT_STRATEGY: clone
+  # DOCKER_HOST: tcp://localhost:2375
+  DOCKER_TLS_CERTDIR: ""
+
+stages:
+  - tests
+
+before_script:
+  - docker -v
+  - python -V
+  - ansible --version
+  - molecule --version
+
+# Test timeservice on dedicated gitlab-runner server
+timeservice-chrony-test:
+  stage: tests
+  tags:
+    - docker
+  script:
+    - cd roles/timeservice;
+      molecule test;
+
+timeservice-ntp-test:
+  stage: tests
+  tags:
+    - docker
+  script:
+    - cd roles/timeservice;
+      molecule test -s ntp;
+
+# Test private_subnet_client on Kubernetes
+private_subnet_client-test:
+  stage: tests
+  tags:
+    - k8s-runner
+  variables:
+    DOCKER_HOST: tcp://localhost:2375
+  script:
+    - cd roles/private_subnet_client;
+      molecule test;
+
+# Test private_subnet_client on Kubernetes
+console_configuration-test:
+  stage: tests
+  tags:
+    - k8s-runner
+  variables:
+    DOCKER_HOST: tcp://localhost:2375
+  script:
+    - cd roles/console_configuration;
+      molecule test;

README.md

+# Ansible Collection - ethz.system_configuration
+
+Documentation for the collection.

galaxy.yml

+### REQUIRED
+# The namespace of the collection. This can be a company/brand/organization or product namespace under which all
+# content lives. May only contain alphanumeric lowercase characters and underscores. Namespaces cannot start with
+# underscores or numbers and cannot contain consecutive underscores
+namespace: ethz
+
+# The name of the collection. Has the same character restrictions as 'namespace'
+name: system_configuration
+
+# The version of the collection. Must be compatible with semantic versioning
+version: 1.0.0
+
+# The path to the Markdown (.md) readme file. This path is relative to the root of the collection
+readme: README.md
+
+# A list of the collection's content authors. Can be just the name or in the format 'Full Name <email> (url)
+# @nicks:irc/im.site#channel'
+authors:
+- your name <example@domain.com>
+
+
+### OPTIONAL but strongly recommended
+# A short summary description of the collection
+description: your collection description
+
+# Either a single license or a list of licenses for content inside of a collection. Ansible Galaxy currently only
+# accepts L(SPDX,https://spdx.org/licenses/) licenses. This key is mutually exclusive with 'license_file'
+license:
+- GPL-2.0-or-later
+
+# The path to the license file for the collection. This path is relative to the root of the collection. This key is
+# mutually exclusive with 'license'
+license_file: ''
+
+# A list of tags you want to associate with the collection for indexing/searching. A tag name has the same character
+# requirements as 'namespace' and 'name'
+tags: []
+
+# Collections that this collection requires to be installed for it to be usable. The key of the dict is the
+# collection label 'namespace.name'. The value is a version range
+# L(specifiers,https://python-semanticversion.readthedocs.io/en/latest/#requirement-specification). Multiple version
+# range specifiers can be set and are separated by ','
+dependencies: {}
+
+# The URL of the originating SCM repository
+repository: http://example.com/repository
+
+# The URL to any online docs
+documentation: http://docs.example.com
+
+# The URL to the homepage of the collection/project
+homepage: http://example.com
+
+# The URL to the collection issue tracker
+issues: http://example.com/issue/tracker
+
+# A list of file glob-like patterns used to filter any files or directories that should not be included in the build
+# artifact. A pattern is matched from the relative path of the file or directory of the collection directory. This
+# uses 'fnmatch' to match the files or directories. Some directories and files like 'galaxy.yml', '*.pyc', '*.retry',
+# and '.git' are always filtered
+build_ignore: []
+

plugins/README.md

+# Collections Plugins Directory
+
+This directory can be used to ship various plugins inside an Ansible collection. Each plugin is placed in a folder that
+is named after the type of plugin it is in. It can also include the `module_utils` and `modules` directory that
+would contain module utils and modules respectively.
+
+Here is an example directory of the majority of plugins currently supported by Ansible:
+
+```
+└── plugins
+    ├── action
+    ├── become
+    ├── cache
+    ├── callback
+    ├── cliconf
+    ├── connection
+    ├── filter
+    ├── httpapi
+    ├── inventory
+    ├── lookup
+    ├── module_utils
+    ├── modules
+    ├── netconf
+    ├── shell
+    ├── strategy
+    ├── terminal
+    ├── test
+    └── vars
+```
+
+A full list of plugin types can be found at [Working With Plugins](https://docs.ansible.com/ansible/2.10/plugins/plugins.html).

roles/console_configuration/README.md

+[![pipeline status](https://gitlab.ethz.ch/ansible-community/collections/console_configuration/badges/master/pipeline.svg)](https://gitlab.ethz.ch/ansible-community/collections/console_configuration)
+
+console_configuration
+=========
+
+Set some basic console properties.
+
+
+Role Variables
+--------------
+
+ - `consolelayout`: keyboard layout on console; default: `sg-latin1`
+ - `consolefont`: console font; default: `latarcyrheb-sun16`
+
+
+Installation
+------------
+
+Install the latest version:
+```
+ansible-galaxy install git+https://gitlab.ethz.ch/ansible-community/collections/console_configuration
+```
+
+or choose a specific version with:
+```
+ansible-galaxy install git+https://gitlab.ethz.ch/ansible-community/collections/console_configuration,1.0.0
+```
+
+Ansible >= 2.10 only: for use in a playbook, you may use a 
+[https://galaxy.ansible.com/docs/using/installing.html](requirements file):
+
+```
+---
+collections:
+  - name: git+https://gitlab.ethz.ch/ansible-community/collections/console_configuration
+```
+
+
+License
+-------
+
+MIT

roles/console_configuration/defaults/main.yml

+---
+consolelayout: sg-latin1
+consolefont: latarcyrheb-sun16

roles/console_configuration/handlers/main.yml

+---
+# handlers file for console_configuration

roles/console_configuration/molecule/default/converge.yml

+---
+- name: Converge
+  hosts: all
+  tasks:
+    - name: "Include console_configuration"
+      include_role:
+        name: "console_configuration"

roles/console_configuration/molecule/default/molecule.yml

+---
+dependency:
+  name: galaxy
+driver:
+  name: docker
+lint: |
+    set -e
+    yamllint -c molecule/default/yaml-lint.yml .
+    ansible-lint tasks
+platforms:
+  - name: EL7
+    # systemd enabled container setup
+    image: geerlingguy/docker-centos7-ansible:latest
+    command: ""
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
+  - name: Debian10
+    # systemd enabled container setup
+    image: geerlingguy/docker-debian10-ansible:latest
+    command: ""
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
+  - name: Ubuntu2004
+    # systemd enabled container setup
+    image: geerlingguy/docker-ubuntu2004-ansible:latest
+    command: ""
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
+provisioner:
+  name: ansible
+verifier:
+  name: ansible

roles/console_configuration/molecule/default/verify.yml

+---
+- name: Verify
+  hosts: all
+  tasks:
+  - name: Read contents of /etc/vconsole.conf
+    command: "cat /etc/vconsole.conf"
+    register: vconsole_conf
+
+  - name: Search console configuration for 'sg-latin1' string
+    assert:
+      that: "'sg-latin1' in vconsole_conf.stdout"
+
+  - name: Search console configuration for 'latarcyrheb-sun16' string
+    assert:
+      that: "'latarcyrheb-sun16' in vconsole_conf.stdout"

roles/console_configuration/molecule/default/yaml-lint.yml

+---
+extends: default
+rules:
+  line-length:
+    max: 190
+    level: warning

roles/console_configuration/tasks/main.yml

+---
+- name: Configure console settings
+  template:
+    src: templates/vconsole.conf.j2
+    dest: /etc/vconsole.conf

roles/console_configuration/templates/vconsole.conf.j2

+KEYMAP="{{ consolelayout }}"
+FONT="{{ consolefont }}"

roles/console_configuration/vars/main.yml

+---
+# vars file for console_configuration

roles/private_subnet_client/README.md

+[![pipeline status](https://gitlab.ethz.ch/ansible-community/collections/private_subnet_client/badges/master/pipeline.svg)](https://gitlab.ethz.ch/ansible-community/collections/private_subnet_client)
+
+# Ansible Collection - ethz.private_subnet_client
+
+Proxy Configuration for Private Subnet Clients
+==============================================
+
+Sets environment variables for HTTP and HTTPS variables, and extends the
+systemd service for the Docker service.
+
+Variables and Defaults
+---------
+
+ - `private_subnet_httpproxy`: http://proxy.ethz.ch:3128
+ - `private_subnet_httpsproxy`: http://proxy.ethz.ch:3128
+ - `private_subnet_noproxy`: "$no_proxy, 127.0.0.1, localhost, .ethz.ch"

roles/private_subnet_client/defaults/main.yml

+---
+private_subnet_httpproxy: http://proxy.ethz.ch:3128
+private_subnet_httpsproxy: http://proxy.ethz.ch:3128
+private_subnet_noproxy: "$no_proxy, 127.0.0.1, localhost, .ethz.ch"

roles/private_subnet_client/molecule/default/converge.yml

+---
+- name: Converge
+  hosts: all
+  tasks:
+    - name: "Include private_subnet_client"
+      include_role:
+        name: "private_subnet_client"

roles/private_subnet_client/molecule/default/molecule.yml

+---
+dependency:
+  name: galaxy
+driver:
+  name: docker
+lint: |
+    set -e
+    yamllint -c molecule/default/yaml-lint.yml .
+    ansible-lint tasks
+platforms:
+  - name: EL7
+    # systemd enabled container setup
+    image: geerlingguy/docker-centos7-ansible:latest
+    command: ""
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
+  - name: EL8
+    # systemd enabled container setup
+    image: geerlingguy/docker-centos8-ansible:latest
+    command: ""
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
+  - name: Debian10
+    # systemd enabled container setup
+    image: geerlingguy/docker-debian10-ansible:latest
+    command: ""
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
+  - name: Ubuntu2004
+    # systemd enabled container setup
+    image: geerlingguy/docker-ubuntu2004-ansible:latest
+    command: ""
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
+provisioner:
+  name: ansible
+verifier:
+  name: ansible

roles/private_subnet_client/molecule/default/verify.yml

+---
+- name: Verify
+  hosts: all
+  tasks:
+  - name: Read contents of Docker configuration
+    command: "cat /etc/systemd/system/docker.service.d/http-proxy.conf"
+    register: docker_proxy_conf
+
+  - name: Test docker proxy configuration
+    assert:
+      that: "'http://proxy.ethz.ch:3128' in docker_proxy_conf.stdout"