ansible-role-wireguard/tasks/setup-debian.yml

---
- name: Setup WireGuard preference
  copy:
    src: debian/etc/apt/preferences.d/limit-unstable
    dest: /etc/apt/preferences.d/limit-unstable
    owner: root
    group: root
    mode: 0644
  tags:
    - wg-install

- name: Install GPG - required to add wireguard key
  apt:
    name: gnupg
    state: present

- name: Add WireGuard key
  apt_key:
    keyserver: "keyserver.ubuntu.com"
    id: "8B48AD6246925553"
    state: present
  tags:
    - wg-install

- name: Add WireGuard repository
  apt_repository:
    repo: "deb http://deb.debian.org/debian/ unstable main"
    state: present
    update_cache: yes
  tags:
    - wg-install

- name: Get architecture
  shell: dpkg --print-architecture
  register: dpkg_arch
  changed_when: False

- name: Install kernel headers to compile wireguard with DKMS
  apt:
    name:
      - "linux-headers-{{ dpkg_arch.stdout }}"
    state: present
Inital implementation (#1) * initial implementation - part 1 * first working version * add handler * separate includes for Debian based and Archlinux OS * refactor * update * add meta tag * added ArchLinux to galaxy meta info * rename file / add more Wiregurad config options * fix typo * update README * update README * fixed typos * update README / variable rename: wireguard_ip -> wireguard_address 2018-08-12 20:21:45 +00:00			`---`
feat(debian) enable module to work on debian (#6) * feat(debian) enable module to work on debian Add support for Debian based on the documentation in debian wiki and discussion in [0]. [0]: https://github.com/githubixx/ansible-role-wireguard/issues/5 * remove run_once for debian * Install kernel headers on debian There is no equivalent package of linux-headers-generic on debian. Package installation needs to specify the architecture (i.e. amd64), which is captured from dpkg output. * Only use include_tasks to differentiate distributions Before Archlinux was split out using ansible_os_family. But since ansible_os_family overlaps for Debian and Ubuntu, two when statements were used to split out these cases: - All arch derivations - Debian - Ubuntu New style is cleaner. Arch derivations can still be used by overiding ansible_distribution in inventory. * incorporate feedback: move pin file, other changed_when syntax 2019-02-06 19:56:06 +00:00			`- name: Setup WireGuard preference`
			`copy:`
			`src: debian/etc/apt/preferences.d/limit-unstable`
			`dest: /etc/apt/preferences.d/limit-unstable`
			`owner: root`
			`group: root`
			`mode: 0644`
make Ansible linter happy / changelog to separate file / new versioning scheme 2019-01-07 21:49:06 +00:00			`tags:`
Inital implementation (#1) * initial implementation - part 1 * first working version * add handler * separate includes for Debian based and Archlinux OS * refactor * update * add meta tag * added ArchLinux to galaxy meta info * rename file / add more Wiregurad config options * fix typo * update README * update README * fixed typos * update README / variable rename: wireguard_ip -> wireguard_address 2018-08-12 20:21:45 +00:00			`- wg-install`

Install GPG to be able to import WireGuard key (#31) 2019-11-11 18:56:10 +00:00			`- name: Install GPG - required to add wireguard key`
			`apt:`
Bugfix: Install gnupg instead of gpg for debian (#43) 2020-03-18 19:12:19 +00:00			`name: gnupg`
Install GPG to be able to import WireGuard key (#31) 2019-11-11 18:56:10 +00:00			`state: present`

feat(debian) enable module to work on debian (#6) * feat(debian) enable module to work on debian Add support for Debian based on the documentation in debian wiki and discussion in [0]. [0]: https://github.com/githubixx/ansible-role-wireguard/issues/5 * remove run_once for debian * Install kernel headers on debian There is no equivalent package of linux-headers-generic on debian. Package installation needs to specify the architecture (i.e. amd64), which is captured from dpkg output. * Only use include_tasks to differentiate distributions Before Archlinux was split out using ansible_os_family. But since ansible_os_family overlaps for Debian and Ubuntu, two when statements were used to split out these cases: - All arch derivations - Debian - Ubuntu New style is cleaner. Arch derivations can still be used by overiding ansible_distribution in inventory. * incorporate feedback: move pin file, other changed_when syntax 2019-02-06 19:56:06 +00:00			`- name: Add WireGuard key`
			`apt_key:`
			`keyserver: "keyserver.ubuntu.com"`
			`id: "8B48AD6246925553"`
Inital implementation (#1) * initial implementation - part 1 * first working version * add handler * separate includes for Debian based and Archlinux OS * refactor * update * add meta tag * added ArchLinux to galaxy meta info * rename file / add more Wiregurad config options * fix typo * update README * update README * fixed typos * update README / variable rename: wireguard_ip -> wireguard_address 2018-08-12 20:21:45 +00:00			`state: present`
make Ansible linter happy / changelog to separate file / new versioning scheme 2019-01-07 21:49:06 +00:00			`tags:`
Inital implementation (#1) * initial implementation - part 1 * first working version * add handler * separate includes for Debian based and Archlinux OS * refactor * update * add meta tag * added ArchLinux to galaxy meta info * rename file / add more Wiregurad config options * fix typo * update README * update README * fixed typos * update README / variable rename: wireguard_ip -> wireguard_address 2018-08-12 20:21:45 +00:00			`- wg-install`

make Ansible linter happy / changelog to separate file / new versioning scheme 2019-01-07 21:49:06 +00:00			`- name: Add WireGuard repository`
Inital implementation (#1) * initial implementation - part 1 * first working version * add handler * separate includes for Debian based and Archlinux OS * refactor * update * add meta tag * added ArchLinux to galaxy meta info * rename file / add more Wiregurad config options * fix typo * update README * update README * fixed typos * update README / variable rename: wireguard_ip -> wireguard_address 2018-08-12 20:21:45 +00:00			`apt_repository:`
feat(debian) enable module to work on debian (#6) * feat(debian) enable module to work on debian Add support for Debian based on the documentation in debian wiki and discussion in [0]. [0]: https://github.com/githubixx/ansible-role-wireguard/issues/5 * remove run_once for debian * Install kernel headers on debian There is no equivalent package of linux-headers-generic on debian. Package installation needs to specify the architecture (i.e. amd64), which is captured from dpkg output. * Only use include_tasks to differentiate distributions Before Archlinux was split out using ansible_os_family. But since ansible_os_family overlaps for Debian and Ubuntu, two when statements were used to split out these cases: - All arch derivations - Debian - Ubuntu New style is cleaner. Arch derivations can still be used by overiding ansible_distribution in inventory. * incorporate feedback: move pin file, other changed_when syntax 2019-02-06 19:56:06 +00:00			`repo: "deb http://deb.debian.org/debian/ unstable main"`
Inital implementation (#1) * initial implementation - part 1 * first working version * add handler * separate includes for Debian based and Archlinux OS * refactor * update * add meta tag * added ArchLinux to galaxy meta info * rename file / add more Wiregurad config options * fix typo * update README * update README * fixed typos * update README / variable rename: wireguard_ip -> wireguard_address 2018-08-12 20:21:45 +00:00			`state: present`
			`update_cache: yes`
make Ansible linter happy / changelog to separate file / new versioning scheme 2019-01-07 21:49:06 +00:00			`tags:`
Inital implementation (#1) * initial implementation - part 1 * first working version * add handler * separate includes for Debian based and Archlinux OS * refactor * update * add meta tag * added ArchLinux to galaxy meta info * rename file / add more Wiregurad config options * fix typo * update README * update README * fixed typos * update README / variable rename: wireguard_ip -> wireguard_address 2018-08-12 20:21:45 +00:00			`- wg-install`
feat(debian) enable module to work on debian (#6) * feat(debian) enable module to work on debian Add support for Debian based on the documentation in debian wiki and discussion in [0]. [0]: https://github.com/githubixx/ansible-role-wireguard/issues/5 * remove run_once for debian * Install kernel headers on debian There is no equivalent package of linux-headers-generic on debian. Package installation needs to specify the architecture (i.e. amd64), which is captured from dpkg output. * Only use include_tasks to differentiate distributions Before Archlinux was split out using ansible_os_family. But since ansible_os_family overlaps for Debian and Ubuntu, two when statements were used to split out these cases: - All arch derivations - Debian - Ubuntu New style is cleaner. Arch derivations can still be used by overiding ansible_distribution in inventory. * incorporate feedback: move pin file, other changed_when syntax 2019-02-06 19:56:06 +00:00
			`- name: Get architecture`
			`shell: dpkg --print-architecture`
			`register: dpkg_arch`
			`changed_when: False`

			`- name: Install kernel headers to compile wireguard with DKMS`
			`apt:`
			`name:`
			`- "linux-headers-{{ dpkg_arch.stdout }}"`
			`state: present`