Charles N Wyble
afe61cae9d
- Remove all librenms references from initializers and configuration - Keep tailscale as requested (remove netbird plans) - Add ansible-core (already present) and salt-minion packages - Create salt-client initializer for minion configuration - Update roles to replace librenms-agent with salt-client - Simplify oam initializer to only handle up2date script - Update README to reflect new architecture and tools Prepares infrastructure for migration to Salt configuration management while maintaining tailscale for VPN connectivity. 💘 Generated with Crush Assisted-by: GLM-4.6 via Crush <crush@charm.land>
127 lines
2.4 KiB
Bash
Executable File
127 lines
2.4 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# KNEL Package Installation
|
|
# This initializer installs required packages with conditional logic
|
|
|
|
set -euo pipefail
|
|
|
|
echo "Installing required packages..."
|
|
|
|
# Ensure apt is up to date
|
|
apt-get update
|
|
|
|
# Install basic tools first
|
|
apt-get install -y git sudo dmidecode curl
|
|
|
|
# Setup webmin repo (used for RBAC/2FA PAM)
|
|
curl https://raw.githubusercontent.com/webmin/webmin/master/webmin-setup-repo.sh >/tmp/webmin-setup.sh
|
|
sh /tmp/webmin-setup.sh -f && rm -f /tmp/webmin-setup.sh
|
|
|
|
# Setup tailscale
|
|
curl -fsSL https://tailscale.com/install.sh | sh
|
|
|
|
# Remove unwanted packages
|
|
export DEBIAN_FRONTEND="noninteractive"
|
|
apt-get -y --purge remove \
|
|
systemd-timesyncd \
|
|
chrony \
|
|
telnet \
|
|
inetutils-telnet \
|
|
wpasupplicant \
|
|
modemmanager \
|
|
nano \
|
|
multipath-tools \
|
|
|| true
|
|
|
|
apt-get --purge autoremove
|
|
|
|
# Install desired packages
|
|
apt-get -y -o Dpkg::Options::="--force-confold" install \
|
|
virt-what \
|
|
auditd \
|
|
audispd-plugins \
|
|
cloud-guest-utils \
|
|
aide \
|
|
htop \
|
|
snmpd \
|
|
ncdu \
|
|
iftop \
|
|
iotop \
|
|
cockpit \
|
|
cockpit-bridge \
|
|
cockpit-doc \
|
|
cockpit-networkmanager \
|
|
cockpit-packagekit \
|
|
cockpit-pcp \
|
|
cockpit-sosreport \
|
|
cockpit-storaged \
|
|
cockpit-system \
|
|
cockpit-ws \
|
|
nethogs \
|
|
sysstat \
|
|
ngrep \
|
|
acct \
|
|
lsb-release \
|
|
screen \
|
|
tailscale \
|
|
tmux \
|
|
vim \
|
|
command-not-found \
|
|
lldpd \
|
|
ansible-core \
|
|
salt-minion \
|
|
net-tools \
|
|
dos2unix \
|
|
gpg \
|
|
molly-guard \
|
|
lshw \
|
|
fzf \
|
|
ripgrep \
|
|
sudo \
|
|
mailutils \
|
|
clamav \
|
|
sl \
|
|
logwatch \
|
|
git \
|
|
net-tools \
|
|
tshark \
|
|
tcpdump \
|
|
lynis \
|
|
glances \
|
|
zsh \
|
|
zsh-autosuggestions \
|
|
zsh-syntax-highlighting \
|
|
fonts-powerline \
|
|
webmin \
|
|
usermin \
|
|
ntpsec \
|
|
ntpsec-ntpdate \
|
|
tuned \
|
|
iptables \
|
|
netfilter-persistent \
|
|
iptables-persistent \
|
|
pflogsumm \
|
|
postfix
|
|
|
|
# Kali-specific packages
|
|
if [[ $KALI_CHECK -eq 0 ]]; then
|
|
apt-get -y -o Dpkg::Options::="--force-confold" install \
|
|
latencytop \
|
|
cockpit-tests
|
|
fi
|
|
|
|
# KVM guest specific packages
|
|
if [[ $IS_KVM_GUEST -eq 1 ]]; then
|
|
apt-get -y install qemu-guest-agent
|
|
fi
|
|
|
|
# Physical host specific packages
|
|
if [[ $IS_PHYSICAL_HOST -gt 0 ]]; then
|
|
apt-get -y -o Dpkg::Options::="--force-confold" install \
|
|
i7z \
|
|
thermald \
|
|
cpufrequtils \
|
|
linux-cpupower
|
|
fi
|
|
|
|
echo "Package installation complete" |