diff --git a/ansible/.DS_Store b/ansible/.DS_Store new file mode 100644 index 0000000..bf9d32d Binary files /dev/null and b/ansible/.DS_Store differ diff --git a/ansible/.ansible-lint b/ansible/.ansible-lint new file mode 100644 index 0000000..c1648fc --- /dev/null +++ b/ansible/.ansible-lint @@ -0,0 +1,2 @@ +skip_list: + - '403' diff --git a/ansible/.gitignore b/ansible/.gitignore new file mode 100644 index 0000000..90a44e0 --- /dev/null +++ b/ansible/.gitignore @@ -0,0 +1,3 @@ +site.retry +fact_cache + diff --git a/ansible/.vscode/settings.json b/ansible/.vscode/settings.json new file mode 100644 index 0000000..4110d79 --- /dev/null +++ b/ansible/.vscode/settings.json @@ -0,0 +1,3 @@ +{ + "ansible.python.interpreterPath": "/opt/homebrew/bin/python3" +} diff --git a/ansible/LICENSE.md b/ansible/LICENSE.md new file mode 100755 index 0000000..2b437ec --- /dev/null +++ b/ansible/LICENSE.md @@ -0,0 +1,4 @@ +Copyright (C) 2013 AnsibleWorks, Inc. + +This work is licensed under the Creative Commons Attribution 3.0 Unported License. +To view a copy of this license, visit http://creativecommons.org/licenses/by/3.0/deed.en_US. diff --git a/ansible/Makefile b/ansible/Makefile new file mode 100644 index 0000000..758f84c --- /dev/null +++ b/ansible/Makefile @@ -0,0 +1,63 @@ +ANSIBLE_CMD = ansible-playbook + +build-local: + docker build -t docker.nsnw.ca/ansible:local . + +build-latest: + docker build -t docker.nsnw.ca/ansible:latest . + +run-local: + docker run --rm -it -e ANSIBLE_SETUP_OPTIONS -e SSH_PRIVATE_KEY -e ANSIBLE_OPTIONS -e SKIP_SETUP -e SKIP_PLAYBOOK -v ${PWD}/run/fact_cache:/app/fact_cache docker.nsnw.ca/ansible:local + +run-local-shell: + docker run --rm -it -e ANSIBLE_SETUP_OPTIONS -e SSH_PRIVATE_KEY -e ANSIBLE_OPTIONS -e SKIP_SETUP -e SKIP_PLAYBOOK docker.nsnw.ca/ansible:local /bin/bash + +run-latest: + docker run --rm -it -e ANSIBLE_SETUP_OPTIONS -e SSH_PRIVATE_KEY -e ANSIBLE_OPTIONS -e SKIP_SETUP -e SKIP_PLAYBOOK docker.nsnw.ca/ansible:latest + +push-latest: + docker push docker.nsnw.ca/ansible:latest + +clean: + rm -rfv tmp + +dirs: + mkdir -pv tmp/fact_cache + chmod a+rxw tmp/fact_cache + +base-latest: build-base-latest push-base-latest + +base-local: build-base-local + +latest: build-latest push-latest + +local: dirs build-local run-local + +facts: + ansible -m setup all + +bootstrap-network: + $(ANSIBLE_CMD) -l $(HOSTNAME) -e ansible_host=$(ANSIBLE_HOST) -t network --skip-tags network_restart general.yml + +bootstrap-reboot: + ssh -i ~/.ssh/ansible ansible@$(ANSIBLE_HOST) -t "sudo reboot" || true + +bootstrap-init: + $(ANSIBLE_CMD) -l $(HOSTNAME) -e ansible_user=graham -e ansible_host=$(ANSIBLE_HOST) -k -K bootstrap.yml + +bootstrap: bootstrap-init bootstrap-network bootstrap-reboot + +run-all: + $(ANSIBLE_CMD) -l $(HOSTNAME) -e ansible_host=$(ANSIBLE_HOST) general.yml + +install-ssh-key: + ssh-copy-id $(ANSIBLE_HOST) + +setup-user: install-ssh-key + ./setup-user.sh install $(ANSIBLE_HOST) + +reboot: + ssh -i ~/.ssh/ansible ansible@$(ANSIBLE_HOST) -t "sudo reboot" + +qc-web: + $(ANSIBLE_CMD) -l qc_web -t caddy general.yml diff --git a/ansible/README.md b/ansible/README.md new file mode 100755 index 0000000..662f36c --- /dev/null +++ b/ansible/README.md @@ -0,0 +1 @@ +Ansible things diff --git a/ansible/ansible-playbook.log b/ansible/ansible-playbook.log new file mode 100644 index 0000000..b0b5386 --- /dev/null +++ b/ansible/ansible-playbook.log @@ -0,0 +1,127 @@ + +PLAY [Apply common configuration to all nodes] ********************************* + +TASK [Gathering Facts] ********************************************************* +ok: [g.w5isp.com] +ok: [netbox.vntx.net] +ok: [ns2.vntx.net] +ok: [lab02.w5isp.com] +ok: [vpn.vntx.net] +ok: [radius.vntx.net] +ok: [librenms.vntx.net] +ok: [lab01.w5isp.com] +ok: [lab03.w5isp.com] +ok: [dallas.aprs2.net] +ok: [monitor.vntx.net] +ok: [ns1.vntx.net] +ok: [skippy.w5isp.com] +ok: [apps.w5isp.com] + +TASK [common : Enable passwordless sudo] *************************************** +ok: [g.w5isp.com] +ok: [ns1.vntx.net] +ok: [dallas.aprs2.net] +ok: [radius.vntx.net] +ok: [lab02.w5isp.com] +ok: [ns2.vntx.net] +ok: [lab03.w5isp.com] +ok: [lab01.w5isp.com] +ok: [apps.w5isp.com] +ok: [netbox.vntx.net] +ok: [monitor.vntx.net] +ok: [skippy.w5isp.com] +ok: [vpn.vntx.net] +ok: [librenms.vntx.net] + +TASK [almalinux : Enable passwordless sudo on AlmaLinux] *********************** +skipping: [monitor.vntx.net] +skipping: [vpn.vntx.net] +skipping: [dallas.aprs2.net] +skipping: [skippy.w5isp.com] +skipping: [g.w5isp.com] +skipping: [lab01.w5isp.com] +skipping: [lab02.w5isp.com] +skipping: [lab03.w5isp.com] +ok: [ns1.vntx.net] +ok: [radius.vntx.net] +ok: [ns2.vntx.net] +ok: [netbox.vntx.net] +ok: [librenms.vntx.net] +ok: [apps.w5isp.com] + +TASK [almalinux : Install EPEL repo] ******************************************* +skipping: [monitor.vntx.net] +skipping: [vpn.vntx.net] +skipping: [dallas.aprs2.net] +skipping: [skippy.w5isp.com] +skipping: [g.w5isp.com] +skipping: [lab01.w5isp.com] +skipping: [lab02.w5isp.com] +skipping: [lab03.w5isp.com] +ok: [ns1.vntx.net] +ok: [ns2.vntx.net] +ok: [radius.vntx.net] +ok: [apps.w5isp.com] +ok: [librenms.vntx.net] +ok: [netbox.vntx.net] + +TASK [almalinux : Upgrade all packages] **************************************** +skipping: [monitor.vntx.net] +skipping: [vpn.vntx.net] +skipping: [dallas.aprs2.net] +skipping: [skippy.w5isp.com] +skipping: [g.w5isp.com] +skipping: [lab01.w5isp.com] +skipping: [lab02.w5isp.com] +skipping: [lab03.w5isp.com] +ok: [ns2.vntx.net] +ok: [radius.vntx.net] +changed: [librenms.vntx.net] +changed: [netbox.vntx.net] +changed: [ns1.vntx.net] +changed: [apps.w5isp.com] + +TASK [almalinux : Install required software] *********************************** +skipping: [monitor.vntx.net] +skipping: [vpn.vntx.net] +skipping: [dallas.aprs2.net] +skipping: [skippy.w5isp.com] +skipping: [g.w5isp.com] +skipping: [lab01.w5isp.com] +skipping: [lab02.w5isp.com] +skipping: [lab03.w5isp.com] +ok: [ns1.vntx.net] +ok: [apps.w5isp.com] +ok: [radius.vntx.net] +ok: [ns2.vntx.net] +ok: [netbox.vntx.net] +ok: [librenms.vntx.net] + +TASK [almalinux : Create a user for andys] ************************************* +skipping: [monitor.vntx.net] +skipping: [vpn.vntx.net] +skipping: [dallas.aprs2.net] +skipping: [skippy.w5isp.com] +skipping: [g.w5isp.com] +skipping: [lab01.w5isp.com] +skipping: [lab02.w5isp.com] +skipping: [lab03.w5isp.com] +ok: [ns1.vntx.net] +ok: [radius.vntx.net] +ok: [apps.w5isp.com] +ok: [netbox.vntx.net] +ok: [ns2.vntx.net] +ok: [librenms.vntx.net] + +TASK [debian : Install updates] ************************************************ +skipping: [radius.vntx.net] +skipping: [librenms.vntx.net] +skipping: [netbox.vntx.net] +skipping: [ns1.vntx.net] +skipping: [ns2.vntx.net] +skipping: [apps.w5isp.com] +ok: [vpn.vntx.net] +changed: [skippy.w5isp.com] +fatal: [lab01.w5isp.com]: FAILED! => {"changed": false, "msg": "'/usr/bin/apt-get upgrade --with-new-pkgs --auto-remove' failed: E: Sub-process /usr/bin/dpkg returned an error code (1)\n", "rc": 100, "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nCalculating upgrade...\nThe following packages will be upgraded:\n base-files bash busybox ceph ceph-base ceph-common ceph-fuse ceph-mds\n ceph-mgr ceph-mgr-dashboard ceph-mgr-modules-core ceph-mon ceph-osd\n ceph-volume cpp-12 debian-archive-keyring distro-info-data\n fonts-glyphicons-halflings g++-12 gcc-12 gcc-12-base initramfs-tools\n initramfs-tools-core krb5-locales libabsl20220623 libasan8 libatomic1\n libcap2 libcap2-bin libcc1-0 libcephfs2 libgcc-12-dev libgcc-s1 libglib2.0-0\n libgomp1 libgssapi-krb5-2 libitm1 libjs-bootstrap libk5crypto3 libkrb5-3\n libkrb5support0 liblsan0 libpython3.11 libpython3.11-minimal\n libpython3.11-stdlib libqt5core5a libqt5dbus5 libqt5network5 libquadmath0\n librados2 libradosstriper1 librbd1 librgw2 libsqlite3-mod-ceph libssl3\n libstdc++-12-dev libstdc++6 libsubid4 libtsan2 libubsan1 linux-libc-dev\n login openssh-client openssh-server openssh-sftp-server openssl passwd\n pve-esxi-import-tools python3-ceph-argparse python3-ceph-common\n python3-cephfs python3-rados python3-rbd python3-rgw python3.11\n python3.11-minimal ssh uidmap\n78 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 165 MB of archives.\nAfter this operation, 3213 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 base-files amd64 12.4+deb12u11 [70.9 kB]\nGet:2 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-volume all 18.2.7-pve1 [123 kB]\nGet:3 http://deb.debian.org/debian bookworm/main amd64 bash amd64 5.2.15-2+b8 [1491 kB]\nGet:4 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-osd amd64 18.2.7-pve1 [24.3 MB]\nGet:5 http://deb.debian.org/debian bookworm/main amd64 login amd64 1:4.13+dfsg1-1+deb12u1 [616 kB]\nGet:6 http://deb.debian.org/debian bookworm/main amd64 passwd amd64 1:4.13+dfsg1-1+deb12u1 [972 kB]\nGet:7 http://deb.debian.org/debian bookworm/main amd64 libgssapi-krb5-2 amd64 1.20.1-2+deb12u3 [135 kB]\nGet:8 http://deb.debian.org/debian bookworm/main amd64 libkrb5-3 amd64 1.20.1-2+deb12u3 [332 kB]\nGet:9 http://deb.debian.org/debian bookworm/main amd64 libkrb5support0 amd64 1.20.1-2+deb12u3 [32.8 kB]\nGet:10 http://deb.debian.org/debian bookworm/main amd64 libk5crypto3 amd64 1.20.1-2+deb12u3 [78.9 kB]\nGet:11 http://deb.debian.org/debian bookworm/main amd64 libssl3 amd64 3.0.16-1~deb12u1 [2026 kB]\nGet:12 http://deb.debian.org/debian bookworm/main amd64 openssh-sftp-server amd64 1:9.2p1-2+deb12u6 [65.8 kB]\nGet:13 http://deb.debian.org/debian bookworm/main amd64 openssh-server amd64 1:9.2p1-2+deb12u6 [457 kB]\nGet:14 http://deb.debian.org/debian bookworm/main amd64 openssh-client amd64 1:9.2p1-2+deb12u6 [992 kB]\nGet:15 http://deb.debian.org/debian bookworm/main amd64 libpython3.11 amd64 3.11.2-6+deb12u6 [1987 kB]\nGet:16 http://deb.debian.org/debian bookworm/main amd64 python3.11 amd64 3.11.2-6+deb12u6 [573 kB]\nGet:17 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-stdlib amd64 3.11.2-6+deb12u6 [1798 kB]\nGet:18 http://deb.debian.org/debian bookworm/main amd64 python3.11-minimal amd64 3.11.2-6+deb12u6 [2064 kB]\nGet:19 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-minimal amd64 3.11.2-6+deb12u6 [817 kB]\nGet:20 http://deb.debian.org/debian bookworm/main amd64 debian-archive-keyring all 2023.3+deb12u2 [179 kB]\nGet:21 http://deb.debian.org/debian bookworm/main amd64 libcc1-0 amd64 12.2.0-14+deb12u1 [41.7 kB]\nGet:22 http://deb.debian.org/debian bookworm/main amd64 libgomp1 amd64 12.2.0-14+deb12u1 [116 kB]\nGet:23 http://deb.debian.org/debian bookworm/main amd64 libitm1 amd64 12.2.0-14+deb12u1 [26.1 kB]\nGet:24 http://deb.debian.org/debian bookworm/main amd64 libatomic1 amd64 12.2.0-14+deb12u1 [9376 B]\nGet:25 http://deb.debian.org/debian bookworm/main amd64 libasan8 amd64 12.2.0-14+deb12u1 [2193 kB]\nGet:26 http://deb.debian.org/debian bookworm/main amd64 liblsan0 amd64 12.2.0-14+deb12u1 [969 kB]\nGet:27 http://deb.debian.org/debian bookworm/main amd64 libtsan2 amd64 12.2.0-14+deb12u1 [2197 kB]\nGet:28 http://deb.debian.org/debian bookworm/main amd64 libubsan1 amd64 12.2.0-14+deb12u1 [883 kB]\nGet:29 http://deb.debian.org/debian bookworm/main amd64 libquadmath0 amd64 12.2.0-14+deb12u1 [145 kB]\nGet:30 http://deb.debian.org/debian bookworm/main amd64 gcc-12-base amd64 12.2.0-14+deb12u1 [37.6 kB]\nGet:31 http://deb.debian.org/debian bookworm/main amd64 libstdc++6 amd64 12.2.0-14+deb12u1 [613 kB]\nGet:32 http://deb.debian.org/debian bookworm/main amd64 g++-12 amd64 12.2.0-14+deb12u1 [10.7 MB]\nGet:33 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mon amd64 18.2.7-pve1 [6680 kB]\nGet:34 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mds amd64 18.2.7-pve1 [2288 kB]\nGet:35 http://deb.debian.org/debian bookworm/main amd64 libstdc++-12-dev amd64 12.2.0-14+deb12u1 [2047 kB]\nGet:36 http://deb.debian.org/debian bookworm/main amd64 libgcc-12-dev amd64 12.2.0-14+deb12u1 [2437 kB]\nGet:37 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-base amd64 18.2.7-pve1 [5263 kB]\nGet:38 http://deb.debian.org/debian bookworm/main amd64 gcc-12 amd64 12.2.0-14+deb12u1 [19.3 MB]\nGet:39 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-common amd64 18.2.7-pve1 [23.8 MB]\nGet:40 http://deb.debian.org/debian bookworm/main amd64 cpp-12 amd64 12.2.0-14+deb12u1 [9768 kB]\nGet:41 http://deb.debian.org/debian bookworm/main amd64 libgcc-s1 amd64 12.2.0-14+deb12u1 [49.9 kB]\nGet:42 http://deb.debian.org/debian bookworm/main amd64 libcap2 amd64 1:2.66-4+deb12u1 [27.2 kB]\nGet:43 http://deb.debian.org/debian bookworm/main amd64 krb5-locales all 1.20.1-2+deb12u3 [63.1 kB]\nGet:44 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools-core all 0.142+deb12u3 [48.3 kB]\nGet:45 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools all 0.142+deb12u3 [16.0 kB]\nGet:46 http://deb.debian.org/debian bookworm/main amd64 busybox amd64 1:1.35.0-4+b4 [452 kB]\nGet:47 http://deb.debian.org/debian bookworm/main amd64 distro-info-data all 0.58+deb12u4 [6360 B]\nGet:48 http://deb.debian.org/debian bookworm/main amd64 fonts-glyphicons-halflings all 1.009~3.4.1+dfsg-3+deb12u1 [163 kB]\nGet:49 http://deb.debian.org/debian bookworm/main amd64 libabsl20220623 amd64 20220623.1-1+deb12u2 [391 kB]\nGet:50 http://deb.debian.org/debian bookworm/main amd64 libcap2-bin amd64 1:2.66-4+deb12u1 [34.8 kB]\nGet:51 http://deb.debian.org/debian bookworm/main amd64 libglib2.0-0 amd64 2.74.6-2+deb12u6 [1400 kB]\nGet:52 http://deb.debian.org/debian bookworm/main amd64 libjs-bootstrap all 3.4.1+dfsg-3+deb12u1 [172 kB]\nGet:53 http://deb.debian.org/debian bookworm/main amd64 libqt5core5a amd64 5.15.8+dfsg-11+deb12u3 [1810 kB]\nGet:54 http://deb.debian.org/debian bookworm/main amd64 libqt5dbus5 amd64 5.15.8+dfsg-11+deb12u3 [212 kB]\nGet:55 http://deb.debian.org/debian bookworm/main amd64 libqt5network5 amd64 5.15.8+dfsg-11+deb12u3 [675 kB]\nGet:56 http://deb.debian.org/debian bookworm/main amd64 libsubid4 amd64 1:4.13+dfsg1-1+deb12u1 [211 kB]\nGet:57 http://deb.debian.org/debian bookworm/main amd64 linux-libc-dev amd64 6.1.137-1 [2139 kB]\nGet:58 http://deb.debian.org/debian bookworm/main amd64 openssl amd64 3.0.16-1~deb12u1 [1427 kB]\nGet:59 http://deb.debian.org/debian bookworm/main amd64 ssh all 1:9.2p1-2+deb12u6 [174 kB]\nGet:60 http://deb.debian.org/debian bookworm/main amd64 uidmap amd64 1:4.13+dfsg1-1+deb12u1 [189 kB]\nGet:61 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph amd64 18.2.7-pve1 [15.9 kB]\nGet:62 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-dashboard all 18.2.7-pve1 [7093 kB]\nGet:63 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr amd64 18.2.7-pve1 [1567 kB]\nGet:64 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-modules-core all 18.2.7-pve1 [240 kB]\nGet:65 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-cephfs amd64 18.2.7-pve1 [159 kB]\nGet:66 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libcephfs2 amd64 18.2.7-pve1 [736 kB]\nGet:67 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librgw2 amd64 18.2.7-pve1 [6728 kB]\nGet:68 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rgw amd64 18.2.7-pve1 [102 kB]\nGet:69 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rados amd64 18.2.7-pve1 [306 kB]\nGet:70 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-argparse all 18.2.7-pve1 [34.0 kB]\nGet:71 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libsqlite3-mod-ceph amd64 18.2.7-pve1 [141 kB]\nGet:72 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librbd1 amd64 18.2.7-pve1 [3241 kB]\nGet:73 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libradosstriper1 amd64 18.2.7-pve1 [466 kB]\nGet:74 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librados2 amd64 18.2.7-pve1 [3704 kB]\nGet:75 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rbd amd64 18.2.7-pve1 [297 kB]\nGet:76 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-common all 18.2.7-pve1 [65.1 kB]\nGet:77 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-fuse amd64 18.2.7-pve1 [843 kB]\nGet:78 http://download.proxmox.com/debian/pve bookworm/pve-no-subscription amd64 pve-esxi-import-tools amd64 0.7.4 [1357 kB]\napt-listchanges: Reading changelogs...\nPreconfiguring packages ...\nFetched 165 MB in 9s (18.4 MB/s)\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134535 files and directories currently installed.)\r\nPreparing to unpack .../base-files_12.4+deb12u11_amd64.deb ...\r\nUnpacking base-files (12.4+deb12u11) over (12.4+deb12u10) ...\r\nSetting up base-files (12.4+deb12u11) ...\r\nInstalling new version of config file /etc/debian_version ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134535 files and directories currently installed.)\r\nPreparing to unpack .../bash_5.2.15-2+b8_amd64.deb ...\r\nUnpacking bash (5.2.15-2+b8) over (5.2.15-2+b7) ...\r\nSetting up bash (5.2.15-2+b8) ...\r\nupdate-alternatives: using /usr/share/man/man7/bash-builtins.7.gz to provide /usr/share/man/man7/builtins.7.gz (builtins.7.gz) in auto mode\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134535 files and directories currently installed.)\r\nPreparing to unpack .../login_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking login (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nSetting up login (1:4.13+dfsg1-1+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134534 files and directories currently installed.)\r\nPreparing to unpack .../passwd_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking passwd (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nSetting up passwd (1:4.13+dfsg1-1+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../00-libgssapi-krb5-2_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../01-libkrb5-3_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libkrb5-3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../02-libkrb5support0_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libkrb5support0:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../03-libk5crypto3_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libk5crypto3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../04-libssl3_3.0.16-1~deb12u1_amd64.deb ...\r\nUnpacking libssl3:amd64 (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...\r\nPreparing to unpack .../05-openssh-sftp-server_1%3a9.2p1-2+deb12u6_amd64.deb ...\r\nUnpacking openssh-sftp-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../06-openssh-server_1%3a9.2p1-2+deb12u6_amd64.deb ...\r\nUnpacking openssh-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../07-openssh-client_1%3a9.2p1-2+deb12u6_amd64.deb ...\r\nUnpacking openssh-client (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../08-libpython3.11_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking libpython3.11:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../09-python3.11_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking python3.11 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../10-libpython3.11-stdlib_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../11-python3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking python3.11-minimal (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../12-libpython3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../13-debian-archive-keyring_2023.3+deb12u2_all.deb ...\r\nUnpacking debian-archive-keyring (2023.3+deb12u2) over (2023.3+deb12u1) ...\r\nSetting up debian-archive-keyring (2023.3+deb12u2) ...\r\nRemoving obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-stable.asc ...\r\nRemoving obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.asc ...\r\nRemoving obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.asc ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../0-libcc1-0_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libcc1-0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../1-libgomp1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libgomp1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../2-libitm1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libitm1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../3-libatomic1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libatomic1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../4-libasan8_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libasan8:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../5-liblsan0_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking liblsan0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../6-libtsan2_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libtsan2:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../7-libubsan1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libubsan1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../8-libquadmath0_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libquadmath0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../9-gcc-12-base_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking gcc-12-base:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nSetting up gcc-12-base:amd64 (12.2.0-14+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../libstdc++6_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libstdc++6:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nSetting up libstdc++6:amd64 (12.2.0-14+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../0-g++-12_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking g++-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../1-libstdc++-12-dev_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../2-libgcc-12-dev_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libgcc-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../3-gcc-12_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking gcc-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../4-cpp-12_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking cpp-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../5-libgcc-s1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libgcc-s1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nSetting up libgcc-s1:amd64 (12.2.0-14+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../libcap2_1%3a2.66-4+deb12u1_amd64.deb ...\r\nUnpacking libcap2:amd64 (1:2.66-4+deb12u1) over (1:2.66-4) ...\r\nSetting up libcap2:amd64 (1:2.66-4+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../00-krb5-locales_1.20.1-2+deb12u3_all.deb ...\r\nUnpacking krb5-locales (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../01-initramfs-tools-core_0.142+deb12u3_all.deb ...\r\nUnpacking initramfs-tools-core (0.142+deb12u3) over (0.142+deb12u1) ...\r\nPreparing to unpack .../02-initramfs-tools_0.142+deb12u3_all.deb ...\r\nUnpacking initramfs-tools (0.142+deb12u3) over (0.142+deb12u1) ...\r\nPreparing to unpack .../03-busybox_1%3a1.35.0-4+b4_amd64.deb ...\r\nUnpacking busybox (1:1.35.0-4+b4) over (1:1.35.0-4+b3) ...\r\nPreparing to unpack .../04-ceph-volume_18.2.7-pve1_all.deb ...\r\nUnpacking ceph-volume (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../05-ceph-osd_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-osd (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../06-ceph-mon_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-mon (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../07-ceph-mds_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-mds (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../08-ceph-base_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-base (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../09-ceph-common_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../10-ceph_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../11-ceph-mgr-dashboard_18.2.7-pve1_all.deb ...\r\nUnpacking ceph-mgr-dashboard (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../12-ceph-mgr_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-mgr (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../13-ceph-mgr-modules-core_18.2.7-pve1_all.deb ...\r\nUnpacking ceph-mgr-modules-core (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../14-python3-cephfs_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-cephfs (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../15-libcephfs2_18.2.7-pve1_amd64.deb ...\r\nUnpacking libcephfs2 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../16-librgw2_18.2.7-pve1_amd64.deb ...\r\nUnpacking librgw2 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../17-python3-rgw_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-rgw (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../18-python3-rados_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-rados (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../19-python3-ceph-argparse_18.2.7-pve1_all.deb ...\r\nUnpacking python3-ceph-argparse (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../20-libsqlite3-mod-ceph_18.2.7-pve1_amd64.deb ...\r\nUnpacking libsqlite3-mod-ceph (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../21-librbd1_18.2.7-pve1_amd64.deb ...\r\nUnpacking librbd1 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../22-libradosstriper1_18.2.7-pve1_amd64.deb ...\r\nUnpacking libradosstriper1 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../23-librados2_18.2.7-pve1_amd64.deb ...\r\nUnpacking librados2 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../24-python3-rbd_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-rbd (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../25-python3-ceph-common_18.2.7-pve1_all.deb ...\r\nUnpacking python3-ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../26-ceph-fuse_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-fuse (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../27-distro-info-data_0.58+deb12u4_all.deb ...\r\nUnpacking distro-info-data (0.58+deb12u4) over (0.58+deb12u3) ...\r\nPreparing to unpack .../28-fonts-glyphicons-halflings_1.009~3.4.1+dfsg-3+deb12u1_all.deb ...\r\nUnpacking fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) over (1.009~3.4.1+dfsg-3) ...\r\nPreparing to unpack .../29-libabsl20220623_20220623.1-1+deb12u2_amd64.deb ...\r\nUnpacking libabsl20220623:amd64 (20220623.1-1+deb12u2) over (20220623.1-1) ...\r\nPreparing to unpack .../30-libcap2-bin_1%3a2.66-4+deb12u1_amd64.deb ...\r\nUnpacking libcap2-bin (1:2.66-4+deb12u1) over (1:2.66-4) ...\r\nPreparing to unpack .../31-libglib2.0-0_2.74.6-2+deb12u6_amd64.deb ...\r\nUnpacking libglib2.0-0:amd64 (2.74.6-2+deb12u6) over (2.74.6-2+deb12u5) ...\r\nPreparing to unpack .../32-libjs-bootstrap_3.4.1+dfsg-3+deb12u1_all.deb ...\r\nUnpacking libjs-bootstrap (3.4.1+dfsg-3+deb12u1) over (3.4.1+dfsg-3) ...\r\nPreparing to unpack .../33-libqt5core5a_5.15.8+dfsg-11+deb12u3_amd64.deb ...\r\nUnpacking libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...\r\nPreparing to unpack .../34-libqt5dbus5_5.15.8+dfsg-11+deb12u3_amd64.deb ...\r\nUnpacking libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...\r\nPreparing to unpack .../35-libqt5network5_5.15.8+dfsg-11+deb12u3_amd64.deb ...\r\nUnpacking libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...\r\nPreparing to unpack .../36-libsubid4_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nPreparing to unpack .../37-linux-libc-dev_6.1.137-1_amd64.deb ...\r\nUnpacking linux-libc-dev:amd64 (6.1.137-1) over (6.1.133-1) ...\r\nPreparing to unpack .../38-openssl_3.0.16-1~deb12u1_amd64.deb ...\r\nUnpacking openssl (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...\r\nPreparing to unpack .../39-pve-esxi-import-tools_0.7.4_amd64.deb ...\r\nUnpacking pve-esxi-import-tools (0.7.4) over (0.7.3) ...\r\nPreparing to unpack .../40-ssh_1%3a9.2p1-2+deb12u6_all.deb ...\r\nUnpacking ssh (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../41-uidmap_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking uidmap (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nSetting up libabsl20220623:amd64 (20220623.1-1+deb12u2) ...\r\nSetting up cpp-12 (12.2.0-14+deb12u1) ...\r\nSetting up libglib2.0-0:amd64 (2.74.6-2+deb12u6) ...\r\nNo schema files found: doing nothing.\r\nSetting up distro-info-data (0.58+deb12u4) ...\r\nSetting up fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) ...\r\nSetting up libssl3:amd64 (3.0.16-1~deb12u1) ...\r\nSetting up python3-ceph-argparse (18.2.7-pve1) ...\r\nSetting up linux-libc-dev:amd64 (6.1.137-1) ...\r\nSetting up krb5-locales (1.20.1-2+deb12u3) ...\r\nSetting up libgomp1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libkrb5support0:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up libcap2-bin (1:2.66-4+deb12u1) ...\r\nSetting up libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) ...\r\nSetting up busybox (1:1.35.0-4+b4) ...\r\nSetting up libquadmath0:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up python3-ceph-common (18.2.7-pve1) ...\r\nSetting up libatomic1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libk5crypto3:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) ...\r\nSetting up libubsan1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) ...\r\nSetting up libasan8:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libkrb5-3:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) ...\r\nSetting up ceph-mgr-modules-core (18.2.7-pve1) ...\r\nSetting up libtsan2:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up initramfs-tools-core (0.142+deb12u3) ...\r\nSetting up pve-esxi-import-tools (0.7.4) ...\r\nSetting up openssl (3.0.16-1~deb12u1) ...\r\nSetting up libcc1-0:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up liblsan0:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libjs-bootstrap (3.4.1+dfsg-3+deb12u1) ...\r\nSetting up libitm1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up python3.11-minimal (3.11.2-6+deb12u6) ...\r\nSetting up librados2 (18.2.7-pve1) ...\r\nSetting up librgw2 (18.2.7-pve1) ...\r\nSetting up initramfs-tools (0.142+deb12u3) ...\r\nupdate-initramfs: deferring update (trigger activated)\r\nSetting up libsqlite3-mod-ceph (18.2.7-pve1) ...\r\nSetting up uidmap (1:4.13+dfsg1-1+deb12u1) ...\r\nSetting up libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) ...\r\nSetting up libcephfs2 (18.2.7-pve1) ...\r\nSetting up libradosstriper1 (18.2.7-pve1) ...\r\nSetting up libgcc-12-dev:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up librbd1 (18.2.7-pve1) ...\r\nSetting up ceph-fuse (18.2.7-pve1) ...\r\nSetting up python3.11 (3.11.2-6+deb12u6) ...\r\nSetting up python3-rados (18.2.7-pve1) ...\r\nSetting up libpython3.11:amd64 (3.11.2-6+deb12u6) ...\r\nSetting up libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up openssh-client (1:9.2p1-2+deb12u6) ...\r\nSetting up python3-rbd (18.2.7-pve1) ...\r\nSetting up libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) ...\r\nSetting up gcc-12 (12.2.0-14+deb12u1) ...\r\nSetting up python3-rgw (18.2.7-pve1) ...\r\nSetting up python3-cephfs (18.2.7-pve1) ...\r\nSetting up g++-12 (12.2.0-14+deb12u1) ...\r\nSetting up openssh-sftp-server (1:9.2p1-2+deb12u6) ...\r\nSetting up openssh-server (1:9.2p1-2+deb12u6) ...\r\nrescue-ssh.target is a disabled or a static unit not running, not starting it.\r\nssh.socket is a disabled or a static unit not running, not starting it.\r\nSetting up ceph-common (18.2.7-pve1) ...\r\nSetting system user ceph properties..usermod: no changes\r\nusermod: unlocking the user's password would result in a passwordless account.\r\nYou should set a password with usermod -p to unlock this user's password.\r\n..done\r\nFixing /var/run/ceph ownership....done\r\nSetting up ssh (1:9.2p1-2+deb12u6) ...\r\nSetting up ceph-base (18.2.7-pve1) ...\r\nSetting up ceph-mds (18.2.7-pve1) ...\r\nSetting up ceph-mgr (18.2.7-pve1) ...\r\nSetting up ceph-osd (18.2.7-pve1) ...\r\nSetting up ceph-mon (18.2.7-pve1) ...\r\nSetting up ceph (18.2.7-pve1) ...\r\nSetting up ceph-mgr-dashboard (18.2.7-pve1) ...\r\nSetting up ceph-volume (18.2.7-pve1) ...\r\nProcessing triggers for mailcap (3.70+nmu1) ...\r\nProcessing triggers for fontconfig (2.14.1-4) ...\r\nProcessing triggers for libc-bin (2.36-9+deb12u10) ...\r\nProcessing triggers for ufw (0.36.2-1) ...\r\nProcessing triggers for systemd (252.36-1~deb12u1) ...\r\nProcessing triggers for man-db (2.11.2-2) ...\r\nProcessing triggers for debianutils (5.7-0.5~deb12u1) ...\r\nProcessing triggers for initramfs-tools (0.142+deb12u3) ...\r\nupdate-initramfs: Generating /boot/initrd.img-6.8.12-10-pve\r\nsync: error syncing '/boot/initrd.img-6.8.12-10-pve': Input/output error\r\ndpkg: error processing package initramfs-tools (--configure):\r\n installed initramfs-tools package post-installation script subprocess returned error exit status 1\r\nErrors were encountered while processing:\r\n initramfs-tools\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "Calculating upgrade...", "The following packages will be upgraded:", " base-files bash busybox ceph ceph-base ceph-common ceph-fuse ceph-mds", " ceph-mgr ceph-mgr-dashboard ceph-mgr-modules-core ceph-mon ceph-osd", " ceph-volume cpp-12 debian-archive-keyring distro-info-data", " fonts-glyphicons-halflings g++-12 gcc-12 gcc-12-base initramfs-tools", " initramfs-tools-core krb5-locales libabsl20220623 libasan8 libatomic1", " libcap2 libcap2-bin libcc1-0 libcephfs2 libgcc-12-dev libgcc-s1 libglib2.0-0", " libgomp1 libgssapi-krb5-2 libitm1 libjs-bootstrap libk5crypto3 libkrb5-3", " libkrb5support0 liblsan0 libpython3.11 libpython3.11-minimal", " libpython3.11-stdlib libqt5core5a libqt5dbus5 libqt5network5 libquadmath0", " librados2 libradosstriper1 librbd1 librgw2 libsqlite3-mod-ceph libssl3", " libstdc++-12-dev libstdc++6 libsubid4 libtsan2 libubsan1 linux-libc-dev", " login openssh-client openssh-server openssh-sftp-server openssl passwd", " pve-esxi-import-tools python3-ceph-argparse python3-ceph-common", " python3-cephfs python3-rados python3-rbd python3-rgw python3.11", " python3.11-minimal ssh uidmap", "78 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.", "Need to get 165 MB of archives.", "After this operation, 3213 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 base-files amd64 12.4+deb12u11 [70.9 kB]", "Get:2 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-volume all 18.2.7-pve1 [123 kB]", "Get:3 http://deb.debian.org/debian bookworm/main amd64 bash amd64 5.2.15-2+b8 [1491 kB]", "Get:4 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-osd amd64 18.2.7-pve1 [24.3 MB]", "Get:5 http://deb.debian.org/debian bookworm/main amd64 login amd64 1:4.13+dfsg1-1+deb12u1 [616 kB]", "Get:6 http://deb.debian.org/debian bookworm/main amd64 passwd amd64 1:4.13+dfsg1-1+deb12u1 [972 kB]", "Get:7 http://deb.debian.org/debian bookworm/main amd64 libgssapi-krb5-2 amd64 1.20.1-2+deb12u3 [135 kB]", "Get:8 http://deb.debian.org/debian bookworm/main amd64 libkrb5-3 amd64 1.20.1-2+deb12u3 [332 kB]", "Get:9 http://deb.debian.org/debian bookworm/main amd64 libkrb5support0 amd64 1.20.1-2+deb12u3 [32.8 kB]", "Get:10 http://deb.debian.org/debian bookworm/main amd64 libk5crypto3 amd64 1.20.1-2+deb12u3 [78.9 kB]", "Get:11 http://deb.debian.org/debian bookworm/main amd64 libssl3 amd64 3.0.16-1~deb12u1 [2026 kB]", "Get:12 http://deb.debian.org/debian bookworm/main amd64 openssh-sftp-server amd64 1:9.2p1-2+deb12u6 [65.8 kB]", "Get:13 http://deb.debian.org/debian bookworm/main amd64 openssh-server amd64 1:9.2p1-2+deb12u6 [457 kB]", "Get:14 http://deb.debian.org/debian bookworm/main amd64 openssh-client amd64 1:9.2p1-2+deb12u6 [992 kB]", "Get:15 http://deb.debian.org/debian bookworm/main amd64 libpython3.11 amd64 3.11.2-6+deb12u6 [1987 kB]", "Get:16 http://deb.debian.org/debian bookworm/main amd64 python3.11 amd64 3.11.2-6+deb12u6 [573 kB]", "Get:17 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-stdlib amd64 3.11.2-6+deb12u6 [1798 kB]", "Get:18 http://deb.debian.org/debian bookworm/main amd64 python3.11-minimal amd64 3.11.2-6+deb12u6 [2064 kB]", "Get:19 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-minimal amd64 3.11.2-6+deb12u6 [817 kB]", "Get:20 http://deb.debian.org/debian bookworm/main amd64 debian-archive-keyring all 2023.3+deb12u2 [179 kB]", "Get:21 http://deb.debian.org/debian bookworm/main amd64 libcc1-0 amd64 12.2.0-14+deb12u1 [41.7 kB]", "Get:22 http://deb.debian.org/debian bookworm/main amd64 libgomp1 amd64 12.2.0-14+deb12u1 [116 kB]", "Get:23 http://deb.debian.org/debian bookworm/main amd64 libitm1 amd64 12.2.0-14+deb12u1 [26.1 kB]", "Get:24 http://deb.debian.org/debian bookworm/main amd64 libatomic1 amd64 12.2.0-14+deb12u1 [9376 B]", "Get:25 http://deb.debian.org/debian bookworm/main amd64 libasan8 amd64 12.2.0-14+deb12u1 [2193 kB]", "Get:26 http://deb.debian.org/debian bookworm/main amd64 liblsan0 amd64 12.2.0-14+deb12u1 [969 kB]", "Get:27 http://deb.debian.org/debian bookworm/main amd64 libtsan2 amd64 12.2.0-14+deb12u1 [2197 kB]", "Get:28 http://deb.debian.org/debian bookworm/main amd64 libubsan1 amd64 12.2.0-14+deb12u1 [883 kB]", "Get:29 http://deb.debian.org/debian bookworm/main amd64 libquadmath0 amd64 12.2.0-14+deb12u1 [145 kB]", "Get:30 http://deb.debian.org/debian bookworm/main amd64 gcc-12-base amd64 12.2.0-14+deb12u1 [37.6 kB]", "Get:31 http://deb.debian.org/debian bookworm/main amd64 libstdc++6 amd64 12.2.0-14+deb12u1 [613 kB]", "Get:32 http://deb.debian.org/debian bookworm/main amd64 g++-12 amd64 12.2.0-14+deb12u1 [10.7 MB]", "Get:33 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mon amd64 18.2.7-pve1 [6680 kB]", "Get:34 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mds amd64 18.2.7-pve1 [2288 kB]", "Get:35 http://deb.debian.org/debian bookworm/main amd64 libstdc++-12-dev amd64 12.2.0-14+deb12u1 [2047 kB]", "Get:36 http://deb.debian.org/debian bookworm/main amd64 libgcc-12-dev amd64 12.2.0-14+deb12u1 [2437 kB]", "Get:37 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-base amd64 18.2.7-pve1 [5263 kB]", "Get:38 http://deb.debian.org/debian bookworm/main amd64 gcc-12 amd64 12.2.0-14+deb12u1 [19.3 MB]", "Get:39 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-common amd64 18.2.7-pve1 [23.8 MB]", "Get:40 http://deb.debian.org/debian bookworm/main amd64 cpp-12 amd64 12.2.0-14+deb12u1 [9768 kB]", "Get:41 http://deb.debian.org/debian bookworm/main amd64 libgcc-s1 amd64 12.2.0-14+deb12u1 [49.9 kB]", "Get:42 http://deb.debian.org/debian bookworm/main amd64 libcap2 amd64 1:2.66-4+deb12u1 [27.2 kB]", "Get:43 http://deb.debian.org/debian bookworm/main amd64 krb5-locales all 1.20.1-2+deb12u3 [63.1 kB]", "Get:44 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools-core all 0.142+deb12u3 [48.3 kB]", "Get:45 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools all 0.142+deb12u3 [16.0 kB]", "Get:46 http://deb.debian.org/debian bookworm/main amd64 busybox amd64 1:1.35.0-4+b4 [452 kB]", "Get:47 http://deb.debian.org/debian bookworm/main amd64 distro-info-data all 0.58+deb12u4 [6360 B]", "Get:48 http://deb.debian.org/debian bookworm/main amd64 fonts-glyphicons-halflings all 1.009~3.4.1+dfsg-3+deb12u1 [163 kB]", "Get:49 http://deb.debian.org/debian bookworm/main amd64 libabsl20220623 amd64 20220623.1-1+deb12u2 [391 kB]", "Get:50 http://deb.debian.org/debian bookworm/main amd64 libcap2-bin amd64 1:2.66-4+deb12u1 [34.8 kB]", "Get:51 http://deb.debian.org/debian bookworm/main amd64 libglib2.0-0 amd64 2.74.6-2+deb12u6 [1400 kB]", "Get:52 http://deb.debian.org/debian bookworm/main amd64 libjs-bootstrap all 3.4.1+dfsg-3+deb12u1 [172 kB]", "Get:53 http://deb.debian.org/debian bookworm/main amd64 libqt5core5a amd64 5.15.8+dfsg-11+deb12u3 [1810 kB]", "Get:54 http://deb.debian.org/debian bookworm/main amd64 libqt5dbus5 amd64 5.15.8+dfsg-11+deb12u3 [212 kB]", "Get:55 http://deb.debian.org/debian bookworm/main amd64 libqt5network5 amd64 5.15.8+dfsg-11+deb12u3 [675 kB]", "Get:56 http://deb.debian.org/debian bookworm/main amd64 libsubid4 amd64 1:4.13+dfsg1-1+deb12u1 [211 kB]", "Get:57 http://deb.debian.org/debian bookworm/main amd64 linux-libc-dev amd64 6.1.137-1 [2139 kB]", "Get:58 http://deb.debian.org/debian bookworm/main amd64 openssl amd64 3.0.16-1~deb12u1 [1427 kB]", "Get:59 http://deb.debian.org/debian bookworm/main amd64 ssh all 1:9.2p1-2+deb12u6 [174 kB]", "Get:60 http://deb.debian.org/debian bookworm/main amd64 uidmap amd64 1:4.13+dfsg1-1+deb12u1 [189 kB]", "Get:61 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph amd64 18.2.7-pve1 [15.9 kB]", "Get:62 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-dashboard all 18.2.7-pve1 [7093 kB]", "Get:63 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr amd64 18.2.7-pve1 [1567 kB]", "Get:64 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-modules-core all 18.2.7-pve1 [240 kB]", "Get:65 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-cephfs amd64 18.2.7-pve1 [159 kB]", "Get:66 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libcephfs2 amd64 18.2.7-pve1 [736 kB]", "Get:67 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librgw2 amd64 18.2.7-pve1 [6728 kB]", "Get:68 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rgw amd64 18.2.7-pve1 [102 kB]", "Get:69 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rados amd64 18.2.7-pve1 [306 kB]", "Get:70 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-argparse all 18.2.7-pve1 [34.0 kB]", "Get:71 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libsqlite3-mod-ceph amd64 18.2.7-pve1 [141 kB]", "Get:72 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librbd1 amd64 18.2.7-pve1 [3241 kB]", "Get:73 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libradosstriper1 amd64 18.2.7-pve1 [466 kB]", "Get:74 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librados2 amd64 18.2.7-pve1 [3704 kB]", "Get:75 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rbd amd64 18.2.7-pve1 [297 kB]", "Get:76 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-common all 18.2.7-pve1 [65.1 kB]", "Get:77 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-fuse amd64 18.2.7-pve1 [843 kB]", "Get:78 http://download.proxmox.com/debian/pve bookworm/pve-no-subscription amd64 pve-esxi-import-tools amd64 0.7.4 [1357 kB]", "apt-listchanges: Reading changelogs...", "Preconfiguring packages ...", "Fetched 165 MB in 9s (18.4 MB/s)", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134535 files and directories currently installed.)", "Preparing to unpack .../base-files_12.4+deb12u11_amd64.deb ...", "Unpacking base-files (12.4+deb12u11) over (12.4+deb12u10) ...", "Setting up base-files (12.4+deb12u11) ...", "Installing new version of config file /etc/debian_version ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134535 files and directories currently installed.)", "Preparing to unpack .../bash_5.2.15-2+b8_amd64.deb ...", "Unpacking bash (5.2.15-2+b8) over (5.2.15-2+b7) ...", "Setting up bash (5.2.15-2+b8) ...", "update-alternatives: using /usr/share/man/man7/bash-builtins.7.gz to provide /usr/share/man/man7/builtins.7.gz (builtins.7.gz) in auto mode", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134535 files and directories currently installed.)", "Preparing to unpack .../login_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking login (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Setting up login (1:4.13+dfsg1-1+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134534 files and directories currently installed.)", "Preparing to unpack .../passwd_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking passwd (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Setting up passwd (1:4.13+dfsg1-1+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../00-libgssapi-krb5-2_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../01-libkrb5-3_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libkrb5-3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../02-libkrb5support0_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libkrb5support0:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../03-libk5crypto3_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libk5crypto3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../04-libssl3_3.0.16-1~deb12u1_amd64.deb ...", "Unpacking libssl3:amd64 (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...", "Preparing to unpack .../05-openssh-sftp-server_1%3a9.2p1-2+deb12u6_amd64.deb ...", "Unpacking openssh-sftp-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../06-openssh-server_1%3a9.2p1-2+deb12u6_amd64.deb ...", "Unpacking openssh-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../07-openssh-client_1%3a9.2p1-2+deb12u6_amd64.deb ...", "Unpacking openssh-client (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../08-libpython3.11_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking libpython3.11:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../09-python3.11_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking python3.11 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../10-libpython3.11-stdlib_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../11-python3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking python3.11-minimal (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../12-libpython3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../13-debian-archive-keyring_2023.3+deb12u2_all.deb ...", "Unpacking debian-archive-keyring (2023.3+deb12u2) over (2023.3+deb12u1) ...", "Setting up debian-archive-keyring (2023.3+deb12u2) ...", "Removing obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-stable.asc ...", "Removing obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.asc ...", "Removing obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.asc ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../0-libcc1-0_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libcc1-0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../1-libgomp1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libgomp1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../2-libitm1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libitm1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../3-libatomic1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libatomic1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../4-libasan8_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libasan8:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../5-liblsan0_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking liblsan0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../6-libtsan2_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libtsan2:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../7-libubsan1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libubsan1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../8-libquadmath0_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libquadmath0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../9-gcc-12-base_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking gcc-12-base:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Setting up gcc-12-base:amd64 (12.2.0-14+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../libstdc++6_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libstdc++6:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Setting up libstdc++6:amd64 (12.2.0-14+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../0-g++-12_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking g++-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../1-libstdc++-12-dev_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../2-libgcc-12-dev_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libgcc-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../3-gcc-12_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking gcc-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../4-cpp-12_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking cpp-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../5-libgcc-s1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libgcc-s1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Setting up libgcc-s1:amd64 (12.2.0-14+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../libcap2_1%3a2.66-4+deb12u1_amd64.deb ...", "Unpacking libcap2:amd64 (1:2.66-4+deb12u1) over (1:2.66-4) ...", "Setting up libcap2:amd64 (1:2.66-4+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../00-krb5-locales_1.20.1-2+deb12u3_all.deb ...", "Unpacking krb5-locales (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../01-initramfs-tools-core_0.142+deb12u3_all.deb ...", "Unpacking initramfs-tools-core (0.142+deb12u3) over (0.142+deb12u1) ...", "Preparing to unpack .../02-initramfs-tools_0.142+deb12u3_all.deb ...", "Unpacking initramfs-tools (0.142+deb12u3) over (0.142+deb12u1) ...", "Preparing to unpack .../03-busybox_1%3a1.35.0-4+b4_amd64.deb ...", "Unpacking busybox (1:1.35.0-4+b4) over (1:1.35.0-4+b3) ...", "Preparing to unpack .../04-ceph-volume_18.2.7-pve1_all.deb ...", "Unpacking ceph-volume (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../05-ceph-osd_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-osd (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../06-ceph-mon_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-mon (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../07-ceph-mds_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-mds (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../08-ceph-base_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-base (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../09-ceph-common_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../10-ceph_18.2.7-pve1_amd64.deb ...", "Unpacking ceph (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../11-ceph-mgr-dashboard_18.2.7-pve1_all.deb ...", "Unpacking ceph-mgr-dashboard (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../12-ceph-mgr_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-mgr (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../13-ceph-mgr-modules-core_18.2.7-pve1_all.deb ...", "Unpacking ceph-mgr-modules-core (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../14-python3-cephfs_18.2.7-pve1_amd64.deb ...", "Unpacking python3-cephfs (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../15-libcephfs2_18.2.7-pve1_amd64.deb ...", "Unpacking libcephfs2 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../16-librgw2_18.2.7-pve1_amd64.deb ...", "Unpacking librgw2 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../17-python3-rgw_18.2.7-pve1_amd64.deb ...", "Unpacking python3-rgw (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../18-python3-rados_18.2.7-pve1_amd64.deb ...", "Unpacking python3-rados (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../19-python3-ceph-argparse_18.2.7-pve1_all.deb ...", "Unpacking python3-ceph-argparse (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../20-libsqlite3-mod-ceph_18.2.7-pve1_amd64.deb ...", "Unpacking libsqlite3-mod-ceph (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../21-librbd1_18.2.7-pve1_amd64.deb ...", "Unpacking librbd1 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../22-libradosstriper1_18.2.7-pve1_amd64.deb ...", "Unpacking libradosstriper1 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../23-librados2_18.2.7-pve1_amd64.deb ...", "Unpacking librados2 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../24-python3-rbd_18.2.7-pve1_amd64.deb ...", "Unpacking python3-rbd (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../25-python3-ceph-common_18.2.7-pve1_all.deb ...", "Unpacking python3-ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../26-ceph-fuse_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-fuse (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../27-distro-info-data_0.58+deb12u4_all.deb ...", "Unpacking distro-info-data (0.58+deb12u4) over (0.58+deb12u3) ...", "Preparing to unpack .../28-fonts-glyphicons-halflings_1.009~3.4.1+dfsg-3+deb12u1_all.deb ...", "Unpacking fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) over (1.009~3.4.1+dfsg-3) ...", "Preparing to unpack .../29-libabsl20220623_20220623.1-1+deb12u2_amd64.deb ...", "Unpacking libabsl20220623:amd64 (20220623.1-1+deb12u2) over (20220623.1-1) ...", "Preparing to unpack .../30-libcap2-bin_1%3a2.66-4+deb12u1_amd64.deb ...", "Unpacking libcap2-bin (1:2.66-4+deb12u1) over (1:2.66-4) ...", "Preparing to unpack .../31-libglib2.0-0_2.74.6-2+deb12u6_amd64.deb ...", "Unpacking libglib2.0-0:amd64 (2.74.6-2+deb12u6) over (2.74.6-2+deb12u5) ...", "Preparing to unpack .../32-libjs-bootstrap_3.4.1+dfsg-3+deb12u1_all.deb ...", "Unpacking libjs-bootstrap (3.4.1+dfsg-3+deb12u1) over (3.4.1+dfsg-3) ...", "Preparing to unpack .../33-libqt5core5a_5.15.8+dfsg-11+deb12u3_amd64.deb ...", "Unpacking libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...", "Preparing to unpack .../34-libqt5dbus5_5.15.8+dfsg-11+deb12u3_amd64.deb ...", "Unpacking libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...", "Preparing to unpack .../35-libqt5network5_5.15.8+dfsg-11+deb12u3_amd64.deb ...", "Unpacking libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...", "Preparing to unpack .../36-libsubid4_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Preparing to unpack .../37-linux-libc-dev_6.1.137-1_amd64.deb ...", "Unpacking linux-libc-dev:amd64 (6.1.137-1) over (6.1.133-1) ...", "Preparing to unpack .../38-openssl_3.0.16-1~deb12u1_amd64.deb ...", "Unpacking openssl (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...", "Preparing to unpack .../39-pve-esxi-import-tools_0.7.4_amd64.deb ...", "Unpacking pve-esxi-import-tools (0.7.4) over (0.7.3) ...", "Preparing to unpack .../40-ssh_1%3a9.2p1-2+deb12u6_all.deb ...", "Unpacking ssh (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../41-uidmap_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking uidmap (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Setting up libabsl20220623:amd64 (20220623.1-1+deb12u2) ...", "Setting up cpp-12 (12.2.0-14+deb12u1) ...", "Setting up libglib2.0-0:amd64 (2.74.6-2+deb12u6) ...", "No schema files found: doing nothing.", "Setting up distro-info-data (0.58+deb12u4) ...", "Setting up fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) ...", "Setting up libssl3:amd64 (3.0.16-1~deb12u1) ...", "Setting up python3-ceph-argparse (18.2.7-pve1) ...", "Setting up linux-libc-dev:amd64 (6.1.137-1) ...", "Setting up krb5-locales (1.20.1-2+deb12u3) ...", "Setting up libgomp1:amd64 (12.2.0-14+deb12u1) ...", "Setting up libkrb5support0:amd64 (1.20.1-2+deb12u3) ...", "Setting up libcap2-bin (1:2.66-4+deb12u1) ...", "Setting up libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) ...", "Setting up busybox (1:1.35.0-4+b4) ...", "Setting up libquadmath0:amd64 (12.2.0-14+deb12u1) ...", "Setting up python3-ceph-common (18.2.7-pve1) ...", "Setting up libatomic1:amd64 (12.2.0-14+deb12u1) ...", "Setting up libk5crypto3:amd64 (1.20.1-2+deb12u3) ...", "Setting up libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) ...", "Setting up libubsan1:amd64 (12.2.0-14+deb12u1) ...", "Setting up libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) ...", "Setting up libasan8:amd64 (12.2.0-14+deb12u1) ...", "Setting up libkrb5-3:amd64 (1.20.1-2+deb12u3) ...", "Setting up libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) ...", "Setting up ceph-mgr-modules-core (18.2.7-pve1) ...", "Setting up libtsan2:amd64 (12.2.0-14+deb12u1) ...", "Setting up initramfs-tools-core (0.142+deb12u3) ...", "Setting up pve-esxi-import-tools (0.7.4) ...", "Setting up openssl (3.0.16-1~deb12u1) ...", "Setting up libcc1-0:amd64 (12.2.0-14+deb12u1) ...", "Setting up liblsan0:amd64 (12.2.0-14+deb12u1) ...", "Setting up libjs-bootstrap (3.4.1+dfsg-3+deb12u1) ...", "Setting up libitm1:amd64 (12.2.0-14+deb12u1) ...", "Setting up python3.11-minimal (3.11.2-6+deb12u6) ...", "Setting up librados2 (18.2.7-pve1) ...", "Setting up librgw2 (18.2.7-pve1) ...", "Setting up initramfs-tools (0.142+deb12u3) ...", "update-initramfs: deferring update (trigger activated)", "Setting up libsqlite3-mod-ceph (18.2.7-pve1) ...", "Setting up uidmap (1:4.13+dfsg1-1+deb12u1) ...", "Setting up libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) ...", "Setting up libcephfs2 (18.2.7-pve1) ...", "Setting up libradosstriper1 (18.2.7-pve1) ...", "Setting up libgcc-12-dev:amd64 (12.2.0-14+deb12u1) ...", "Setting up libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) ...", "Setting up librbd1 (18.2.7-pve1) ...", "Setting up ceph-fuse (18.2.7-pve1) ...", "Setting up python3.11 (3.11.2-6+deb12u6) ...", "Setting up python3-rados (18.2.7-pve1) ...", "Setting up libpython3.11:amd64 (3.11.2-6+deb12u6) ...", "Setting up libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) ...", "Setting up openssh-client (1:9.2p1-2+deb12u6) ...", "Setting up python3-rbd (18.2.7-pve1) ...", "Setting up libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) ...", "Setting up gcc-12 (12.2.0-14+deb12u1) ...", "Setting up python3-rgw (18.2.7-pve1) ...", "Setting up python3-cephfs (18.2.7-pve1) ...", "Setting up g++-12 (12.2.0-14+deb12u1) ...", "Setting up openssh-sftp-server (1:9.2p1-2+deb12u6) ...", "Setting up openssh-server (1:9.2p1-2+deb12u6) ...", "rescue-ssh.target is a disabled or a static unit not running, not starting it.", "ssh.socket is a disabled or a static unit not running, not starting it.", "Setting up ceph-common (18.2.7-pve1) ...", "Setting system user ceph properties..usermod: no changes", "usermod: unlocking the user's password would result in a passwordless account.", "You should set a password with usermod -p to unlock this user's password.", "..done", "Fixing /var/run/ceph ownership....done", "Setting up ssh (1:9.2p1-2+deb12u6) ...", "Setting up ceph-base (18.2.7-pve1) ...", "Setting up ceph-mds (18.2.7-pve1) ...", "Setting up ceph-mgr (18.2.7-pve1) ...", "Setting up ceph-osd (18.2.7-pve1) ...", "Setting up ceph-mon (18.2.7-pve1) ...", "Setting up ceph (18.2.7-pve1) ...", "Setting up ceph-mgr-dashboard (18.2.7-pve1) ...", "Setting up ceph-volume (18.2.7-pve1) ...", "Processing triggers for mailcap (3.70+nmu1) ...", "Processing triggers for fontconfig (2.14.1-4) ...", "Processing triggers for libc-bin (2.36-9+deb12u10) ...", "Processing triggers for ufw (0.36.2-1) ...", "Processing triggers for systemd (252.36-1~deb12u1) ...", "Processing triggers for man-db (2.11.2-2) ...", "Processing triggers for debianutils (5.7-0.5~deb12u1) ...", "Processing triggers for initramfs-tools (0.142+deb12u3) ...", "update-initramfs: Generating /boot/initrd.img-6.8.12-10-pve", "sync: error syncing '/boot/initrd.img-6.8.12-10-pve': Input/output error", "dpkg: error processing package initramfs-tools (--configure):", " installed initramfs-tools package post-installation script subprocess returned error exit status 1", "Errors were encountered while processing:", " initramfs-tools"]} +changed: [g.w5isp.com] +fatal: [lab02.w5isp.com]: FAILED! => {"changed": false, "msg": "'/usr/bin/apt-get upgrade --with-new-pkgs --auto-remove' failed: E: Sub-process /usr/bin/dpkg returned an error code (1)\n", "rc": 100, "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nCalculating upgrade...\nThe following packages will be upgraded:\n base-files bash busybox ceph ceph-base ceph-common ceph-fuse ceph-mds\n ceph-mgr ceph-mgr-dashboard ceph-mgr-modules-core ceph-mon ceph-osd\n ceph-volume cpp-12 debian-archive-keyring distro-info-data\n fonts-glyphicons-halflings g++-12 gcc-12 gcc-12-base initramfs-tools\n initramfs-tools-core krb5-locales libabsl20220623 libasan8 libatomic1\n libcap2 libcap2-bin libcc1-0 libcephfs2 libgcc-12-dev libgcc-s1 libglib2.0-0\n libgomp1 libgssapi-krb5-2 libitm1 libjs-bootstrap libk5crypto3 libkrb5-3\n libkrb5support0 liblsan0 libpython3.11 libpython3.11-minimal\n libpython3.11-stdlib libqt5core5a libqt5dbus5 libqt5network5 libquadmath0\n librados2 libradosstriper1 librbd1 librgw2 libsqlite3-mod-ceph libssl3\n libstdc++-12-dev libstdc++6 libsubid4 libtsan2 libubsan1 linux-libc-dev\n login openssh-client openssh-server openssh-sftp-server openssl passwd\n pve-esxi-import-tools python3-ceph-argparse python3-ceph-common\n python3-cephfs python3-rados python3-rbd python3-rgw python3.11\n python3.11-minimal ssh uidmap\n78 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 165 MB of archives.\nAfter this operation, 3213 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 base-files amd64 12.4+deb12u11 [70.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 bash amd64 5.2.15-2+b8 [1491 kB]\nGet:3 http://deb.debian.org/debian bookworm/main amd64 login amd64 1:4.13+dfsg1-1+deb12u1 [616 kB]\nGet:4 http://deb.debian.org/debian bookworm/main amd64 passwd amd64 1:4.13+dfsg1-1+deb12u1 [972 kB]\nGet:5 http://deb.debian.org/debian bookworm/main amd64 libgssapi-krb5-2 amd64 1.20.1-2+deb12u3 [135 kB]\nGet:6 http://deb.debian.org/debian bookworm/main amd64 libkrb5-3 amd64 1.20.1-2+deb12u3 [332 kB]\nGet:7 http://deb.debian.org/debian bookworm/main amd64 libkrb5support0 amd64 1.20.1-2+deb12u3 [32.8 kB]\nGet:8 http://deb.debian.org/debian bookworm/main amd64 libk5crypto3 amd64 1.20.1-2+deb12u3 [78.9 kB]\nGet:9 http://deb.debian.org/debian bookworm/main amd64 libssl3 amd64 3.0.16-1~deb12u1 [2026 kB]\nGet:10 http://deb.debian.org/debian bookworm/main amd64 openssh-sftp-server amd64 1:9.2p1-2+deb12u6 [65.8 kB]\nGet:11 http://deb.debian.org/debian bookworm/main amd64 openssh-server amd64 1:9.2p1-2+deb12u6 [457 kB]\nGet:12 http://deb.debian.org/debian bookworm/main amd64 openssh-client amd64 1:9.2p1-2+deb12u6 [992 kB]\nGet:13 http://deb.debian.org/debian bookworm/main amd64 libpython3.11 amd64 3.11.2-6+deb12u6 [1987 kB]\nGet:14 http://deb.debian.org/debian bookworm/main amd64 python3.11 amd64 3.11.2-6+deb12u6 [573 kB]\nGet:15 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-stdlib amd64 3.11.2-6+deb12u6 [1798 kB]\nGet:16 http://deb.debian.org/debian bookworm/main amd64 python3.11-minimal amd64 3.11.2-6+deb12u6 [2064 kB]\nGet:17 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-minimal amd64 3.11.2-6+deb12u6 [817 kB]\nGet:18 http://deb.debian.org/debian bookworm/main amd64 debian-archive-keyring all 2023.3+deb12u2 [179 kB]\nGet:19 http://deb.debian.org/debian bookworm/main amd64 libcc1-0 amd64 12.2.0-14+deb12u1 [41.7 kB]\nGet:20 http://deb.debian.org/debian bookworm/main amd64 libgomp1 amd64 12.2.0-14+deb12u1 [116 kB]\nGet:21 http://deb.debian.org/debian bookworm/main amd64 libitm1 amd64 12.2.0-14+deb12u1 [26.1 kB]\nGet:22 http://deb.debian.org/debian bookworm/main amd64 libatomic1 amd64 12.2.0-14+deb12u1 [9376 B]\nGet:23 http://deb.debian.org/debian bookworm/main amd64 libasan8 amd64 12.2.0-14+deb12u1 [2193 kB]\nGet:24 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-volume all 18.2.7-pve1 [123 kB]\nGet:25 http://deb.debian.org/debian bookworm/main amd64 liblsan0 amd64 12.2.0-14+deb12u1 [969 kB]\nGet:26 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-osd amd64 18.2.7-pve1 [24.3 MB]\nGet:27 http://deb.debian.org/debian bookworm/main amd64 libtsan2 amd64 12.2.0-14+deb12u1 [2197 kB]\nGet:28 http://deb.debian.org/debian bookworm/main amd64 libubsan1 amd64 12.2.0-14+deb12u1 [883 kB]\nGet:29 http://deb.debian.org/debian bookworm/main amd64 libquadmath0 amd64 12.2.0-14+deb12u1 [145 kB]\nGet:30 http://deb.debian.org/debian bookworm/main amd64 gcc-12-base amd64 12.2.0-14+deb12u1 [37.6 kB]\nGet:31 http://deb.debian.org/debian bookworm/main amd64 libstdc++6 amd64 12.2.0-14+deb12u1 [613 kB]\nGet:32 http://deb.debian.org/debian bookworm/main amd64 g++-12 amd64 12.2.0-14+deb12u1 [10.7 MB]\nGet:33 http://deb.debian.org/debian bookworm/main amd64 libstdc++-12-dev amd64 12.2.0-14+deb12u1 [2047 kB]\nGet:34 http://deb.debian.org/debian bookworm/main amd64 libgcc-12-dev amd64 12.2.0-14+deb12u1 [2437 kB]\nGet:35 http://deb.debian.org/debian bookworm/main amd64 gcc-12 amd64 12.2.0-14+deb12u1 [19.3 MB]\nGet:36 http://deb.debian.org/debian bookworm/main amd64 cpp-12 amd64 12.2.0-14+deb12u1 [9768 kB]\nGet:37 http://deb.debian.org/debian bookworm/main amd64 libgcc-s1 amd64 12.2.0-14+deb12u1 [49.9 kB]\nGet:38 http://deb.debian.org/debian bookworm/main amd64 libcap2 amd64 1:2.66-4+deb12u1 [27.2 kB]\nGet:39 http://deb.debian.org/debian bookworm/main amd64 krb5-locales all 1.20.1-2+deb12u3 [63.1 kB]\nGet:40 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools-core all 0.142+deb12u3 [48.3 kB]\nGet:41 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools all 0.142+deb12u3 [16.0 kB]\nGet:42 http://deb.debian.org/debian bookworm/main amd64 busybox amd64 1:1.35.0-4+b4 [452 kB]\nGet:43 http://deb.debian.org/debian bookworm/main amd64 distro-info-data all 0.58+deb12u4 [6360 B]\nGet:44 http://deb.debian.org/debian bookworm/main amd64 fonts-glyphicons-halflings all 1.009~3.4.1+dfsg-3+deb12u1 [163 kB]\nGet:45 http://deb.debian.org/debian bookworm/main amd64 libabsl20220623 amd64 20220623.1-1+deb12u2 [391 kB]\nGet:46 http://deb.debian.org/debian bookworm/main amd64 libcap2-bin amd64 1:2.66-4+deb12u1 [34.8 kB]\nGet:47 http://deb.debian.org/debian bookworm/main amd64 libglib2.0-0 amd64 2.74.6-2+deb12u6 [1400 kB]\nGet:48 http://deb.debian.org/debian bookworm/main amd64 libjs-bootstrap all 3.4.1+dfsg-3+deb12u1 [172 kB]\nGet:49 http://deb.debian.org/debian bookworm/main amd64 libqt5core5a amd64 5.15.8+dfsg-11+deb12u3 [1810 kB]\nGet:50 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mon amd64 18.2.7-pve1 [6680 kB]\nGet:51 http://deb.debian.org/debian bookworm/main amd64 libqt5dbus5 amd64 5.15.8+dfsg-11+deb12u3 [212 kB]\nGet:52 http://deb.debian.org/debian bookworm/main amd64 libqt5network5 amd64 5.15.8+dfsg-11+deb12u3 [675 kB]\nGet:53 http://deb.debian.org/debian bookworm/main amd64 libsubid4 amd64 1:4.13+dfsg1-1+deb12u1 [211 kB]\nGet:54 http://deb.debian.org/debian bookworm/main amd64 linux-libc-dev amd64 6.1.137-1 [2139 kB]\nGet:55 http://deb.debian.org/debian bookworm/main amd64 openssl amd64 3.0.16-1~deb12u1 [1427 kB]\nGet:56 http://deb.debian.org/debian bookworm/main amd64 ssh all 1:9.2p1-2+deb12u6 [174 kB]\nGet:57 http://deb.debian.org/debian bookworm/main amd64 uidmap amd64 1:4.13+dfsg1-1+deb12u1 [189 kB]\nGet:58 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mds amd64 18.2.7-pve1 [2288 kB]\nGet:59 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-base amd64 18.2.7-pve1 [5263 kB]\nGet:60 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-common amd64 18.2.7-pve1 [23.8 MB]\nGet:61 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph amd64 18.2.7-pve1 [15.9 kB]\nGet:62 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-dashboard all 18.2.7-pve1 [7093 kB]\nGet:63 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr amd64 18.2.7-pve1 [1567 kB]\nGet:64 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-modules-core all 18.2.7-pve1 [240 kB]\nGet:65 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-cephfs amd64 18.2.7-pve1 [159 kB]\nGet:66 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libcephfs2 amd64 18.2.7-pve1 [736 kB]\nGet:67 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librgw2 amd64 18.2.7-pve1 [6728 kB]\nGet:68 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rgw amd64 18.2.7-pve1 [102 kB]\nGet:69 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rados amd64 18.2.7-pve1 [306 kB]\nGet:70 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-argparse all 18.2.7-pve1 [34.0 kB]\nGet:71 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libsqlite3-mod-ceph amd64 18.2.7-pve1 [141 kB]\nGet:72 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librbd1 amd64 18.2.7-pve1 [3241 kB]\nGet:73 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libradosstriper1 amd64 18.2.7-pve1 [466 kB]\nGet:74 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librados2 amd64 18.2.7-pve1 [3704 kB]\nGet:75 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rbd amd64 18.2.7-pve1 [297 kB]\nGet:76 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-common all 18.2.7-pve1 [65.1 kB]\nGet:77 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-fuse amd64 18.2.7-pve1 [843 kB]\nGet:78 http://download.proxmox.com/debian/pve bookworm/pve-no-subscription amd64 pve-esxi-import-tools amd64 0.7.4 [1357 kB]\napt-listchanges: Reading changelogs...\nPreconfiguring packages ...\nFetched 165 MB in 13s (12.6 MB/s)\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134535 files and directories currently installed.)\r\nPreparing to unpack .../base-files_12.4+deb12u11_amd64.deb ...\r\nUnpacking base-files (12.4+deb12u11) over (12.4+deb12u10) ...\r\nSetting up base-files (12.4+deb12u11) ...\r\nInstalling new version of config file /etc/debian_version ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134535 files and directories currently installed.)\r\nPreparing to unpack .../bash_5.2.15-2+b8_amd64.deb ...\r\nUnpacking bash (5.2.15-2+b8) over (5.2.15-2+b7) ...\r\nSetting up bash (5.2.15-2+b8) ...\r\nupdate-alternatives: using /usr/share/man/man7/bash-builtins.7.gz to provide /usr/share/man/man7/builtins.7.gz (builtins.7.gz) in auto mode\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134535 files and directories currently installed.)\r\nPreparing to unpack .../login_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking login (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nSetting up login (1:4.13+dfsg1-1+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134534 files and directories currently installed.)\r\nPreparing to unpack .../passwd_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking passwd (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nSetting up passwd (1:4.13+dfsg1-1+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../00-libgssapi-krb5-2_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../01-libkrb5-3_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libkrb5-3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../02-libkrb5support0_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libkrb5support0:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../03-libk5crypto3_1.20.1-2+deb12u3_amd64.deb ...\r\nUnpacking libk5crypto3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../04-libssl3_3.0.16-1~deb12u1_amd64.deb ...\r\nUnpacking libssl3:amd64 (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...\r\nPreparing to unpack .../05-openssh-sftp-server_1%3a9.2p1-2+deb12u6_amd64.deb ...\r\nUnpacking openssh-sftp-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../06-openssh-server_1%3a9.2p1-2+deb12u6_amd64.deb ...\r\nUnpacking openssh-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../07-openssh-client_1%3a9.2p1-2+deb12u6_amd64.deb ...\r\nUnpacking openssh-client (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../08-libpython3.11_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking libpython3.11:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../09-python3.11_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking python3.11 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../10-libpython3.11-stdlib_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../11-python3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking python3.11-minimal (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../12-libpython3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...\r\nUnpacking libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...\r\nPreparing to unpack .../13-debian-archive-keyring_2023.3+deb12u2_all.deb ...\r\nUnpacking debian-archive-keyring (2023.3+deb12u2) over (2023.3+deb12u1) ...\r\nSetting up debian-archive-keyring (2023.3+deb12u2) ...\r\nRemoving obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-stable.asc ...\r\nRemoving obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.asc ...\r\nRemoving obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.asc ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../0-libcc1-0_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libcc1-0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../1-libgomp1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libgomp1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../2-libitm1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libitm1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../3-libatomic1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libatomic1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../4-libasan8_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libasan8:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../5-liblsan0_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking liblsan0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../6-libtsan2_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libtsan2:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../7-libubsan1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libubsan1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../8-libquadmath0_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libquadmath0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../9-gcc-12-base_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking gcc-12-base:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nSetting up gcc-12-base:amd64 (12.2.0-14+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../libstdc++6_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libstdc++6:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nSetting up libstdc++6:amd64 (12.2.0-14+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../0-g++-12_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking g++-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../1-libstdc++-12-dev_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../2-libgcc-12-dev_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libgcc-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../3-gcc-12_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking gcc-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../4-cpp-12_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking cpp-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nPreparing to unpack .../5-libgcc-s1_12.2.0-14+deb12u1_amd64.deb ...\r\nUnpacking libgcc-s1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...\r\nSetting up libgcc-s1:amd64 (12.2.0-14+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../libcap2_1%3a2.66-4+deb12u1_amd64.deb ...\r\nUnpacking libcap2:amd64 (1:2.66-4+deb12u1) over (1:2.66-4) ...\r\nSetting up libcap2:amd64 (1:2.66-4+deb12u1) ...\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 134533 files and directories currently installed.)\r\nPreparing to unpack .../00-krb5-locales_1.20.1-2+deb12u3_all.deb ...\r\nUnpacking krb5-locales (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...\r\nPreparing to unpack .../01-initramfs-tools-core_0.142+deb12u3_all.deb ...\r\nUnpacking initramfs-tools-core (0.142+deb12u3) over (0.142+deb12u1) ...\r\nPreparing to unpack .../02-initramfs-tools_0.142+deb12u3_all.deb ...\r\nUnpacking initramfs-tools (0.142+deb12u3) over (0.142+deb12u1) ...\r\nPreparing to unpack .../03-busybox_1%3a1.35.0-4+b4_amd64.deb ...\r\nUnpacking busybox (1:1.35.0-4+b4) over (1:1.35.0-4+b3) ...\r\nPreparing to unpack .../04-ceph-volume_18.2.7-pve1_all.deb ...\r\nUnpacking ceph-volume (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../05-ceph-osd_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-osd (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../06-ceph-mon_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-mon (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../07-ceph-mds_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-mds (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../08-ceph-base_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-base (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../09-ceph-common_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../10-ceph_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../11-ceph-mgr-dashboard_18.2.7-pve1_all.deb ...\r\nUnpacking ceph-mgr-dashboard (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../12-ceph-mgr_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-mgr (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../13-ceph-mgr-modules-core_18.2.7-pve1_all.deb ...\r\nUnpacking ceph-mgr-modules-core (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../14-python3-cephfs_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-cephfs (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../15-libcephfs2_18.2.7-pve1_amd64.deb ...\r\nUnpacking libcephfs2 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../16-librgw2_18.2.7-pve1_amd64.deb ...\r\nUnpacking librgw2 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../17-python3-rgw_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-rgw (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../18-python3-rados_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-rados (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../19-python3-ceph-argparse_18.2.7-pve1_all.deb ...\r\nUnpacking python3-ceph-argparse (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../20-libsqlite3-mod-ceph_18.2.7-pve1_amd64.deb ...\r\nUnpacking libsqlite3-mod-ceph (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../21-librbd1_18.2.7-pve1_amd64.deb ...\r\nUnpacking librbd1 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../22-libradosstriper1_18.2.7-pve1_amd64.deb ...\r\nUnpacking libradosstriper1 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../23-librados2_18.2.7-pve1_amd64.deb ...\r\nUnpacking librados2 (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../24-python3-rbd_18.2.7-pve1_amd64.deb ...\r\nUnpacking python3-rbd (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../25-python3-ceph-common_18.2.7-pve1_all.deb ...\r\nUnpacking python3-ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../26-ceph-fuse_18.2.7-pve1_amd64.deb ...\r\nUnpacking ceph-fuse (18.2.7-pve1) over (18.2.4-pve3) ...\r\nPreparing to unpack .../27-distro-info-data_0.58+deb12u4_all.deb ...\r\nUnpacking distro-info-data (0.58+deb12u4) over (0.58+deb12u3) ...\r\nPreparing to unpack .../28-fonts-glyphicons-halflings_1.009~3.4.1+dfsg-3+deb12u1_all.deb ...\r\nUnpacking fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) over (1.009~3.4.1+dfsg-3) ...\r\nPreparing to unpack .../29-libabsl20220623_20220623.1-1+deb12u2_amd64.deb ...\r\nUnpacking libabsl20220623:amd64 (20220623.1-1+deb12u2) over (20220623.1-1) ...\r\nPreparing to unpack .../30-libcap2-bin_1%3a2.66-4+deb12u1_amd64.deb ...\r\nUnpacking libcap2-bin (1:2.66-4+deb12u1) over (1:2.66-4) ...\r\nPreparing to unpack .../31-libglib2.0-0_2.74.6-2+deb12u6_amd64.deb ...\r\nUnpacking libglib2.0-0:amd64 (2.74.6-2+deb12u6) over (2.74.6-2+deb12u5) ...\r\nPreparing to unpack .../32-libjs-bootstrap_3.4.1+dfsg-3+deb12u1_all.deb ...\r\nUnpacking libjs-bootstrap (3.4.1+dfsg-3+deb12u1) over (3.4.1+dfsg-3) ...\r\nPreparing to unpack .../33-libqt5core5a_5.15.8+dfsg-11+deb12u3_amd64.deb ...\r\nUnpacking libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...\r\nPreparing to unpack .../34-libqt5dbus5_5.15.8+dfsg-11+deb12u3_amd64.deb ...\r\nUnpacking libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...\r\nPreparing to unpack .../35-libqt5network5_5.15.8+dfsg-11+deb12u3_amd64.deb ...\r\nUnpacking libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...\r\nPreparing to unpack .../36-libsubid4_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nPreparing to unpack .../37-linux-libc-dev_6.1.137-1_amd64.deb ...\r\nUnpacking linux-libc-dev:amd64 (6.1.137-1) over (6.1.133-1) ...\r\nPreparing to unpack .../38-openssl_3.0.16-1~deb12u1_amd64.deb ...\r\nUnpacking openssl (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...\r\nPreparing to unpack .../39-pve-esxi-import-tools_0.7.4_amd64.deb ...\r\nUnpacking pve-esxi-import-tools (0.7.4) over (0.7.3) ...\r\nPreparing to unpack .../40-ssh_1%3a9.2p1-2+deb12u6_all.deb ...\r\nUnpacking ssh (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...\r\nPreparing to unpack .../41-uidmap_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...\r\nUnpacking uidmap (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...\r\nSetting up libabsl20220623:amd64 (20220623.1-1+deb12u2) ...\r\nSetting up cpp-12 (12.2.0-14+deb12u1) ...\r\nSetting up libglib2.0-0:amd64 (2.74.6-2+deb12u6) ...\r\nNo schema files found: doing nothing.\r\nSetting up distro-info-data (0.58+deb12u4) ...\r\nSetting up fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) ...\r\nSetting up libssl3:amd64 (3.0.16-1~deb12u1) ...\r\nSetting up python3-ceph-argparse (18.2.7-pve1) ...\r\nSetting up linux-libc-dev:amd64 (6.1.137-1) ...\r\nSetting up krb5-locales (1.20.1-2+deb12u3) ...\r\nSetting up libgomp1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libkrb5support0:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up libcap2-bin (1:2.66-4+deb12u1) ...\r\nSetting up libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) ...\r\nSetting up busybox (1:1.35.0-4+b4) ...\r\nSetting up libquadmath0:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up python3-ceph-common (18.2.7-pve1) ...\r\nSetting up libatomic1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libk5crypto3:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) ...\r\nSetting up libubsan1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) ...\r\nSetting up libasan8:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libkrb5-3:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) ...\r\nSetting up ceph-mgr-modules-core (18.2.7-pve1) ...\r\nSetting up libtsan2:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up initramfs-tools-core (0.142+deb12u3) ...\r\nSetting up pve-esxi-import-tools (0.7.4) ...\r\nSetting up openssl (3.0.16-1~deb12u1) ...\r\nSetting up libcc1-0:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up liblsan0:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libjs-bootstrap (3.4.1+dfsg-3+deb12u1) ...\r\nSetting up libitm1:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up python3.11-minimal (3.11.2-6+deb12u6) ...\r\nSetting up librados2 (18.2.7-pve1) ...\r\nSetting up librgw2 (18.2.7-pve1) ...\r\nSetting up initramfs-tools (0.142+deb12u3) ...\r\nupdate-initramfs: deferring update (trigger activated)\r\nSetting up libsqlite3-mod-ceph (18.2.7-pve1) ...\r\nSetting up uidmap (1:4.13+dfsg1-1+deb12u1) ...\r\nSetting up libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) ...\r\nSetting up libcephfs2 (18.2.7-pve1) ...\r\nSetting up libradosstriper1 (18.2.7-pve1) ...\r\nSetting up libgcc-12-dev:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) ...\r\nSetting up librbd1 (18.2.7-pve1) ...\r\nSetting up ceph-fuse (18.2.7-pve1) ...\r\nSetting up python3.11 (3.11.2-6+deb12u6) ...\r\nSetting up python3-rados (18.2.7-pve1) ...\r\nSetting up libpython3.11:amd64 (3.11.2-6+deb12u6) ...\r\nSetting up libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) ...\r\nSetting up openssh-client (1:9.2p1-2+deb12u6) ...\r\nSetting up python3-rbd (18.2.7-pve1) ...\r\nSetting up libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) ...\r\nSetting up gcc-12 (12.2.0-14+deb12u1) ...\r\nSetting up python3-rgw (18.2.7-pve1) ...\r\nSetting up python3-cephfs (18.2.7-pve1) ...\r\nSetting up g++-12 (12.2.0-14+deb12u1) ...\r\nSetting up openssh-sftp-server (1:9.2p1-2+deb12u6) ...\r\nSetting up openssh-server (1:9.2p1-2+deb12u6) ...\r\nrescue-ssh.target is a disabled or a static unit not running, not starting it.\r\nssh.socket is a disabled or a static unit not running, not starting it.\r\nSetting up ceph-common (18.2.7-pve1) ...\r\nSetting system user ceph properties..usermod: no changes\r\nusermod: unlocking the user's password would result in a passwordless account.\r\nYou should set a password with usermod -p to unlock this user's password.\r\n..done\r\nFixing /var/run/ceph ownership....done\r\nSetting up ssh (1:9.2p1-2+deb12u6) ...\r\nSetting up ceph-base (18.2.7-pve1) ...\r\nSetting up ceph-mds (18.2.7-pve1) ...\r\nSetting up ceph-mgr (18.2.7-pve1) ...\r\nSetting up ceph-osd (18.2.7-pve1) ...\r\nSetting up ceph-mon (18.2.7-pve1) ...\r\nSetting up ceph (18.2.7-pve1) ...\r\nSetting up ceph-mgr-dashboard (18.2.7-pve1) ...\r\nSetting up ceph-volume (18.2.7-pve1) ...\r\nProcessing triggers for mailcap (3.70+nmu1) ...\r\nProcessing triggers for fontconfig (2.14.1-4) ...\r\nProcessing triggers for libc-bin (2.36-9+deb12u10) ...\r\nProcessing triggers for ufw (0.36.2-1) ...\r\nProcessing triggers for systemd (252.36-1~deb12u1) ...\r\nProcessing triggers for man-db (2.11.2-2) ...\r\nProcessing triggers for debianutils (5.7-0.5~deb12u1) ...\r\nProcessing triggers for initramfs-tools (0.142+deb12u3) ...\r\nupdate-initramfs: Generating /boot/initrd.img-6.8.12-10-pve\r\nsync: error syncing '/boot/initrd.img-6.8.12-10-pve': Input/output error\r\ndpkg: error processing package initramfs-tools (--configure):\r\n installed initramfs-tools package post-installation script subprocess returned error exit status 1\r\nErrors were encountered while processing:\r\n initramfs-tools\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "Calculating upgrade...", "The following packages will be upgraded:", " base-files bash busybox ceph ceph-base ceph-common ceph-fuse ceph-mds", " ceph-mgr ceph-mgr-dashboard ceph-mgr-modules-core ceph-mon ceph-osd", " ceph-volume cpp-12 debian-archive-keyring distro-info-data", " fonts-glyphicons-halflings g++-12 gcc-12 gcc-12-base initramfs-tools", " initramfs-tools-core krb5-locales libabsl20220623 libasan8 libatomic1", " libcap2 libcap2-bin libcc1-0 libcephfs2 libgcc-12-dev libgcc-s1 libglib2.0-0", " libgomp1 libgssapi-krb5-2 libitm1 libjs-bootstrap libk5crypto3 libkrb5-3", " libkrb5support0 liblsan0 libpython3.11 libpython3.11-minimal", " libpython3.11-stdlib libqt5core5a libqt5dbus5 libqt5network5 libquadmath0", " librados2 libradosstriper1 librbd1 librgw2 libsqlite3-mod-ceph libssl3", " libstdc++-12-dev libstdc++6 libsubid4 libtsan2 libubsan1 linux-libc-dev", " login openssh-client openssh-server openssh-sftp-server openssl passwd", " pve-esxi-import-tools python3-ceph-argparse python3-ceph-common", " python3-cephfs python3-rados python3-rbd python3-rgw python3.11", " python3.11-minimal ssh uidmap", "78 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.", "Need to get 165 MB of archives.", "After this operation, 3213 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 base-files amd64 12.4+deb12u11 [70.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 bash amd64 5.2.15-2+b8 [1491 kB]", "Get:3 http://deb.debian.org/debian bookworm/main amd64 login amd64 1:4.13+dfsg1-1+deb12u1 [616 kB]", "Get:4 http://deb.debian.org/debian bookworm/main amd64 passwd amd64 1:4.13+dfsg1-1+deb12u1 [972 kB]", "Get:5 http://deb.debian.org/debian bookworm/main amd64 libgssapi-krb5-2 amd64 1.20.1-2+deb12u3 [135 kB]", "Get:6 http://deb.debian.org/debian bookworm/main amd64 libkrb5-3 amd64 1.20.1-2+deb12u3 [332 kB]", "Get:7 http://deb.debian.org/debian bookworm/main amd64 libkrb5support0 amd64 1.20.1-2+deb12u3 [32.8 kB]", "Get:8 http://deb.debian.org/debian bookworm/main amd64 libk5crypto3 amd64 1.20.1-2+deb12u3 [78.9 kB]", "Get:9 http://deb.debian.org/debian bookworm/main amd64 libssl3 amd64 3.0.16-1~deb12u1 [2026 kB]", "Get:10 http://deb.debian.org/debian bookworm/main amd64 openssh-sftp-server amd64 1:9.2p1-2+deb12u6 [65.8 kB]", "Get:11 http://deb.debian.org/debian bookworm/main amd64 openssh-server amd64 1:9.2p1-2+deb12u6 [457 kB]", "Get:12 http://deb.debian.org/debian bookworm/main amd64 openssh-client amd64 1:9.2p1-2+deb12u6 [992 kB]", "Get:13 http://deb.debian.org/debian bookworm/main amd64 libpython3.11 amd64 3.11.2-6+deb12u6 [1987 kB]", "Get:14 http://deb.debian.org/debian bookworm/main amd64 python3.11 amd64 3.11.2-6+deb12u6 [573 kB]", "Get:15 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-stdlib amd64 3.11.2-6+deb12u6 [1798 kB]", "Get:16 http://deb.debian.org/debian bookworm/main amd64 python3.11-minimal amd64 3.11.2-6+deb12u6 [2064 kB]", "Get:17 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-minimal amd64 3.11.2-6+deb12u6 [817 kB]", "Get:18 http://deb.debian.org/debian bookworm/main amd64 debian-archive-keyring all 2023.3+deb12u2 [179 kB]", "Get:19 http://deb.debian.org/debian bookworm/main amd64 libcc1-0 amd64 12.2.0-14+deb12u1 [41.7 kB]", "Get:20 http://deb.debian.org/debian bookworm/main amd64 libgomp1 amd64 12.2.0-14+deb12u1 [116 kB]", "Get:21 http://deb.debian.org/debian bookworm/main amd64 libitm1 amd64 12.2.0-14+deb12u1 [26.1 kB]", "Get:22 http://deb.debian.org/debian bookworm/main amd64 libatomic1 amd64 12.2.0-14+deb12u1 [9376 B]", "Get:23 http://deb.debian.org/debian bookworm/main amd64 libasan8 amd64 12.2.0-14+deb12u1 [2193 kB]", "Get:24 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-volume all 18.2.7-pve1 [123 kB]", "Get:25 http://deb.debian.org/debian bookworm/main amd64 liblsan0 amd64 12.2.0-14+deb12u1 [969 kB]", "Get:26 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-osd amd64 18.2.7-pve1 [24.3 MB]", "Get:27 http://deb.debian.org/debian bookworm/main amd64 libtsan2 amd64 12.2.0-14+deb12u1 [2197 kB]", "Get:28 http://deb.debian.org/debian bookworm/main amd64 libubsan1 amd64 12.2.0-14+deb12u1 [883 kB]", "Get:29 http://deb.debian.org/debian bookworm/main amd64 libquadmath0 amd64 12.2.0-14+deb12u1 [145 kB]", "Get:30 http://deb.debian.org/debian bookworm/main amd64 gcc-12-base amd64 12.2.0-14+deb12u1 [37.6 kB]", "Get:31 http://deb.debian.org/debian bookworm/main amd64 libstdc++6 amd64 12.2.0-14+deb12u1 [613 kB]", "Get:32 http://deb.debian.org/debian bookworm/main amd64 g++-12 amd64 12.2.0-14+deb12u1 [10.7 MB]", "Get:33 http://deb.debian.org/debian bookworm/main amd64 libstdc++-12-dev amd64 12.2.0-14+deb12u1 [2047 kB]", "Get:34 http://deb.debian.org/debian bookworm/main amd64 libgcc-12-dev amd64 12.2.0-14+deb12u1 [2437 kB]", "Get:35 http://deb.debian.org/debian bookworm/main amd64 gcc-12 amd64 12.2.0-14+deb12u1 [19.3 MB]", "Get:36 http://deb.debian.org/debian bookworm/main amd64 cpp-12 amd64 12.2.0-14+deb12u1 [9768 kB]", "Get:37 http://deb.debian.org/debian bookworm/main amd64 libgcc-s1 amd64 12.2.0-14+deb12u1 [49.9 kB]", "Get:38 http://deb.debian.org/debian bookworm/main amd64 libcap2 amd64 1:2.66-4+deb12u1 [27.2 kB]", "Get:39 http://deb.debian.org/debian bookworm/main amd64 krb5-locales all 1.20.1-2+deb12u3 [63.1 kB]", "Get:40 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools-core all 0.142+deb12u3 [48.3 kB]", "Get:41 http://deb.debian.org/debian bookworm/main amd64 initramfs-tools all 0.142+deb12u3 [16.0 kB]", "Get:42 http://deb.debian.org/debian bookworm/main amd64 busybox amd64 1:1.35.0-4+b4 [452 kB]", "Get:43 http://deb.debian.org/debian bookworm/main amd64 distro-info-data all 0.58+deb12u4 [6360 B]", "Get:44 http://deb.debian.org/debian bookworm/main amd64 fonts-glyphicons-halflings all 1.009~3.4.1+dfsg-3+deb12u1 [163 kB]", "Get:45 http://deb.debian.org/debian bookworm/main amd64 libabsl20220623 amd64 20220623.1-1+deb12u2 [391 kB]", "Get:46 http://deb.debian.org/debian bookworm/main amd64 libcap2-bin amd64 1:2.66-4+deb12u1 [34.8 kB]", "Get:47 http://deb.debian.org/debian bookworm/main amd64 libglib2.0-0 amd64 2.74.6-2+deb12u6 [1400 kB]", "Get:48 http://deb.debian.org/debian bookworm/main amd64 libjs-bootstrap all 3.4.1+dfsg-3+deb12u1 [172 kB]", "Get:49 http://deb.debian.org/debian bookworm/main amd64 libqt5core5a amd64 5.15.8+dfsg-11+deb12u3 [1810 kB]", "Get:50 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mon amd64 18.2.7-pve1 [6680 kB]", "Get:51 http://deb.debian.org/debian bookworm/main amd64 libqt5dbus5 amd64 5.15.8+dfsg-11+deb12u3 [212 kB]", "Get:52 http://deb.debian.org/debian bookworm/main amd64 libqt5network5 amd64 5.15.8+dfsg-11+deb12u3 [675 kB]", "Get:53 http://deb.debian.org/debian bookworm/main amd64 libsubid4 amd64 1:4.13+dfsg1-1+deb12u1 [211 kB]", "Get:54 http://deb.debian.org/debian bookworm/main amd64 linux-libc-dev amd64 6.1.137-1 [2139 kB]", "Get:55 http://deb.debian.org/debian bookworm/main amd64 openssl amd64 3.0.16-1~deb12u1 [1427 kB]", "Get:56 http://deb.debian.org/debian bookworm/main amd64 ssh all 1:9.2p1-2+deb12u6 [174 kB]", "Get:57 http://deb.debian.org/debian bookworm/main amd64 uidmap amd64 1:4.13+dfsg1-1+deb12u1 [189 kB]", "Get:58 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mds amd64 18.2.7-pve1 [2288 kB]", "Get:59 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-base amd64 18.2.7-pve1 [5263 kB]", "Get:60 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-common amd64 18.2.7-pve1 [23.8 MB]", "Get:61 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph amd64 18.2.7-pve1 [15.9 kB]", "Get:62 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-dashboard all 18.2.7-pve1 [7093 kB]", "Get:63 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr amd64 18.2.7-pve1 [1567 kB]", "Get:64 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-mgr-modules-core all 18.2.7-pve1 [240 kB]", "Get:65 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-cephfs amd64 18.2.7-pve1 [159 kB]", "Get:66 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libcephfs2 amd64 18.2.7-pve1 [736 kB]", "Get:67 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librgw2 amd64 18.2.7-pve1 [6728 kB]", "Get:68 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rgw amd64 18.2.7-pve1 [102 kB]", "Get:69 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rados amd64 18.2.7-pve1 [306 kB]", "Get:70 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-argparse all 18.2.7-pve1 [34.0 kB]", "Get:71 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libsqlite3-mod-ceph amd64 18.2.7-pve1 [141 kB]", "Get:72 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librbd1 amd64 18.2.7-pve1 [3241 kB]", "Get:73 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 libradosstriper1 amd64 18.2.7-pve1 [466 kB]", "Get:74 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 librados2 amd64 18.2.7-pve1 [3704 kB]", "Get:75 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-rbd amd64 18.2.7-pve1 [297 kB]", "Get:76 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 python3-ceph-common all 18.2.7-pve1 [65.1 kB]", "Get:77 http://download.proxmox.com/debian/ceph-reef bookworm/no-subscription amd64 ceph-fuse amd64 18.2.7-pve1 [843 kB]", "Get:78 http://download.proxmox.com/debian/pve bookworm/pve-no-subscription amd64 pve-esxi-import-tools amd64 0.7.4 [1357 kB]", "apt-listchanges: Reading changelogs...", "Preconfiguring packages ...", "Fetched 165 MB in 13s (12.6 MB/s)", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134535 files and directories currently installed.)", "Preparing to unpack .../base-files_12.4+deb12u11_amd64.deb ...", "Unpacking base-files (12.4+deb12u11) over (12.4+deb12u10) ...", "Setting up base-files (12.4+deb12u11) ...", "Installing new version of config file /etc/debian_version ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134535 files and directories currently installed.)", "Preparing to unpack .../bash_5.2.15-2+b8_amd64.deb ...", "Unpacking bash (5.2.15-2+b8) over (5.2.15-2+b7) ...", "Setting up bash (5.2.15-2+b8) ...", "update-alternatives: using /usr/share/man/man7/bash-builtins.7.gz to provide /usr/share/man/man7/builtins.7.gz (builtins.7.gz) in auto mode", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134535 files and directories currently installed.)", "Preparing to unpack .../login_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking login (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Setting up login (1:4.13+dfsg1-1+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134534 files and directories currently installed.)", "Preparing to unpack .../passwd_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking passwd (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Setting up passwd (1:4.13+dfsg1-1+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../00-libgssapi-krb5-2_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../01-libkrb5-3_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libkrb5-3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../02-libkrb5support0_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libkrb5support0:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../03-libk5crypto3_1.20.1-2+deb12u3_amd64.deb ...", "Unpacking libk5crypto3:amd64 (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../04-libssl3_3.0.16-1~deb12u1_amd64.deb ...", "Unpacking libssl3:amd64 (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...", "Preparing to unpack .../05-openssh-sftp-server_1%3a9.2p1-2+deb12u6_amd64.deb ...", "Unpacking openssh-sftp-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../06-openssh-server_1%3a9.2p1-2+deb12u6_amd64.deb ...", "Unpacking openssh-server (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../07-openssh-client_1%3a9.2p1-2+deb12u6_amd64.deb ...", "Unpacking openssh-client (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../08-libpython3.11_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking libpython3.11:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../09-python3.11_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking python3.11 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../10-libpython3.11-stdlib_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../11-python3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking python3.11-minimal (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../12-libpython3.11-minimal_3.11.2-6+deb12u6_amd64.deb ...", "Unpacking libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) over (3.11.2-6+deb12u5) ...", "Preparing to unpack .../13-debian-archive-keyring_2023.3+deb12u2_all.deb ...", "Unpacking debian-archive-keyring (2023.3+deb12u2) over (2023.3+deb12u1) ...", "Setting up debian-archive-keyring (2023.3+deb12u2) ...", "Removing obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-stable.asc ...", "Removing obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.asc ...", "Removing obsolete conffile /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.asc ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../0-libcc1-0_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libcc1-0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../1-libgomp1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libgomp1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../2-libitm1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libitm1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../3-libatomic1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libatomic1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../4-libasan8_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libasan8:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../5-liblsan0_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking liblsan0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../6-libtsan2_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libtsan2:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../7-libubsan1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libubsan1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../8-libquadmath0_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libquadmath0:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../9-gcc-12-base_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking gcc-12-base:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Setting up gcc-12-base:amd64 (12.2.0-14+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../libstdc++6_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libstdc++6:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Setting up libstdc++6:amd64 (12.2.0-14+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../0-g++-12_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking g++-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../1-libstdc++-12-dev_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../2-libgcc-12-dev_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libgcc-12-dev:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../3-gcc-12_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking gcc-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../4-cpp-12_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking cpp-12 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Preparing to unpack .../5-libgcc-s1_12.2.0-14+deb12u1_amd64.deb ...", "Unpacking libgcc-s1:amd64 (12.2.0-14+deb12u1) over (12.2.0-14) ...", "Setting up libgcc-s1:amd64 (12.2.0-14+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../libcap2_1%3a2.66-4+deb12u1_amd64.deb ...", "Unpacking libcap2:amd64 (1:2.66-4+deb12u1) over (1:2.66-4) ...", "Setting up libcap2:amd64 (1:2.66-4+deb12u1) ...", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 134533 files and directories currently installed.)", "Preparing to unpack .../00-krb5-locales_1.20.1-2+deb12u3_all.deb ...", "Unpacking krb5-locales (1.20.1-2+deb12u3) over (1.20.1-2+deb12u2) ...", "Preparing to unpack .../01-initramfs-tools-core_0.142+deb12u3_all.deb ...", "Unpacking initramfs-tools-core (0.142+deb12u3) over (0.142+deb12u1) ...", "Preparing to unpack .../02-initramfs-tools_0.142+deb12u3_all.deb ...", "Unpacking initramfs-tools (0.142+deb12u3) over (0.142+deb12u1) ...", "Preparing to unpack .../03-busybox_1%3a1.35.0-4+b4_amd64.deb ...", "Unpacking busybox (1:1.35.0-4+b4) over (1:1.35.0-4+b3) ...", "Preparing to unpack .../04-ceph-volume_18.2.7-pve1_all.deb ...", "Unpacking ceph-volume (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../05-ceph-osd_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-osd (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../06-ceph-mon_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-mon (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../07-ceph-mds_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-mds (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../08-ceph-base_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-base (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../09-ceph-common_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../10-ceph_18.2.7-pve1_amd64.deb ...", "Unpacking ceph (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../11-ceph-mgr-dashboard_18.2.7-pve1_all.deb ...", "Unpacking ceph-mgr-dashboard (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../12-ceph-mgr_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-mgr (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../13-ceph-mgr-modules-core_18.2.7-pve1_all.deb ...", "Unpacking ceph-mgr-modules-core (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../14-python3-cephfs_18.2.7-pve1_amd64.deb ...", "Unpacking python3-cephfs (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../15-libcephfs2_18.2.7-pve1_amd64.deb ...", "Unpacking libcephfs2 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../16-librgw2_18.2.7-pve1_amd64.deb ...", "Unpacking librgw2 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../17-python3-rgw_18.2.7-pve1_amd64.deb ...", "Unpacking python3-rgw (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../18-python3-rados_18.2.7-pve1_amd64.deb ...", "Unpacking python3-rados (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../19-python3-ceph-argparse_18.2.7-pve1_all.deb ...", "Unpacking python3-ceph-argparse (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../20-libsqlite3-mod-ceph_18.2.7-pve1_amd64.deb ...", "Unpacking libsqlite3-mod-ceph (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../21-librbd1_18.2.7-pve1_amd64.deb ...", "Unpacking librbd1 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../22-libradosstriper1_18.2.7-pve1_amd64.deb ...", "Unpacking libradosstriper1 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../23-librados2_18.2.7-pve1_amd64.deb ...", "Unpacking librados2 (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../24-python3-rbd_18.2.7-pve1_amd64.deb ...", "Unpacking python3-rbd (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../25-python3-ceph-common_18.2.7-pve1_all.deb ...", "Unpacking python3-ceph-common (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../26-ceph-fuse_18.2.7-pve1_amd64.deb ...", "Unpacking ceph-fuse (18.2.7-pve1) over (18.2.4-pve3) ...", "Preparing to unpack .../27-distro-info-data_0.58+deb12u4_all.deb ...", "Unpacking distro-info-data (0.58+deb12u4) over (0.58+deb12u3) ...", "Preparing to unpack .../28-fonts-glyphicons-halflings_1.009~3.4.1+dfsg-3+deb12u1_all.deb ...", "Unpacking fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) over (1.009~3.4.1+dfsg-3) ...", "Preparing to unpack .../29-libabsl20220623_20220623.1-1+deb12u2_amd64.deb ...", "Unpacking libabsl20220623:amd64 (20220623.1-1+deb12u2) over (20220623.1-1) ...", "Preparing to unpack .../30-libcap2-bin_1%3a2.66-4+deb12u1_amd64.deb ...", "Unpacking libcap2-bin (1:2.66-4+deb12u1) over (1:2.66-4) ...", "Preparing to unpack .../31-libglib2.0-0_2.74.6-2+deb12u6_amd64.deb ...", "Unpacking libglib2.0-0:amd64 (2.74.6-2+deb12u6) over (2.74.6-2+deb12u5) ...", "Preparing to unpack .../32-libjs-bootstrap_3.4.1+dfsg-3+deb12u1_all.deb ...", "Unpacking libjs-bootstrap (3.4.1+dfsg-3+deb12u1) over (3.4.1+dfsg-3) ...", "Preparing to unpack .../33-libqt5core5a_5.15.8+dfsg-11+deb12u3_amd64.deb ...", "Unpacking libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...", "Preparing to unpack .../34-libqt5dbus5_5.15.8+dfsg-11+deb12u3_amd64.deb ...", "Unpacking libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...", "Preparing to unpack .../35-libqt5network5_5.15.8+dfsg-11+deb12u3_amd64.deb ...", "Unpacking libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) over (5.15.8+dfsg-11+deb12u2) ...", "Preparing to unpack .../36-libsubid4_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Preparing to unpack .../37-linux-libc-dev_6.1.137-1_amd64.deb ...", "Unpacking linux-libc-dev:amd64 (6.1.137-1) over (6.1.133-1) ...", "Preparing to unpack .../38-openssl_3.0.16-1~deb12u1_amd64.deb ...", "Unpacking openssl (3.0.16-1~deb12u1) over (3.0.15-1~deb12u1) ...", "Preparing to unpack .../39-pve-esxi-import-tools_0.7.4_amd64.deb ...", "Unpacking pve-esxi-import-tools (0.7.4) over (0.7.3) ...", "Preparing to unpack .../40-ssh_1%3a9.2p1-2+deb12u6_all.deb ...", "Unpacking ssh (1:9.2p1-2+deb12u6) over (1:9.2p1-2+deb12u5) ...", "Preparing to unpack .../41-uidmap_1%3a4.13+dfsg1-1+deb12u1_amd64.deb ...", "Unpacking uidmap (1:4.13+dfsg1-1+deb12u1) over (1:4.13+dfsg1-1+b1) ...", "Setting up libabsl20220623:amd64 (20220623.1-1+deb12u2) ...", "Setting up cpp-12 (12.2.0-14+deb12u1) ...", "Setting up libglib2.0-0:amd64 (2.74.6-2+deb12u6) ...", "No schema files found: doing nothing.", "Setting up distro-info-data (0.58+deb12u4) ...", "Setting up fonts-glyphicons-halflings (1.009~3.4.1+dfsg-3+deb12u1) ...", "Setting up libssl3:amd64 (3.0.16-1~deb12u1) ...", "Setting up python3-ceph-argparse (18.2.7-pve1) ...", "Setting up linux-libc-dev:amd64 (6.1.137-1) ...", "Setting up krb5-locales (1.20.1-2+deb12u3) ...", "Setting up libgomp1:amd64 (12.2.0-14+deb12u1) ...", "Setting up libkrb5support0:amd64 (1.20.1-2+deb12u3) ...", "Setting up libcap2-bin (1:2.66-4+deb12u1) ...", "Setting up libsubid4:amd64 (1:4.13+dfsg1-1+deb12u1) ...", "Setting up busybox (1:1.35.0-4+b4) ...", "Setting up libquadmath0:amd64 (12.2.0-14+deb12u1) ...", "Setting up python3-ceph-common (18.2.7-pve1) ...", "Setting up libatomic1:amd64 (12.2.0-14+deb12u1) ...", "Setting up libk5crypto3:amd64 (1.20.1-2+deb12u3) ...", "Setting up libqt5core5a:amd64 (5.15.8+dfsg-11+deb12u3) ...", "Setting up libubsan1:amd64 (12.2.0-14+deb12u1) ...", "Setting up libqt5dbus5:amd64 (5.15.8+dfsg-11+deb12u3) ...", "Setting up libasan8:amd64 (12.2.0-14+deb12u1) ...", "Setting up libkrb5-3:amd64 (1.20.1-2+deb12u3) ...", "Setting up libpython3.11-minimal:amd64 (3.11.2-6+deb12u6) ...", "Setting up ceph-mgr-modules-core (18.2.7-pve1) ...", "Setting up libtsan2:amd64 (12.2.0-14+deb12u1) ...", "Setting up initramfs-tools-core (0.142+deb12u3) ...", "Setting up pve-esxi-import-tools (0.7.4) ...", "Setting up openssl (3.0.16-1~deb12u1) ...", "Setting up libcc1-0:amd64 (12.2.0-14+deb12u1) ...", "Setting up liblsan0:amd64 (12.2.0-14+deb12u1) ...", "Setting up libjs-bootstrap (3.4.1+dfsg-3+deb12u1) ...", "Setting up libitm1:amd64 (12.2.0-14+deb12u1) ...", "Setting up python3.11-minimal (3.11.2-6+deb12u6) ...", "Setting up librados2 (18.2.7-pve1) ...", "Setting up librgw2 (18.2.7-pve1) ...", "Setting up initramfs-tools (0.142+deb12u3) ...", "update-initramfs: deferring update (trigger activated)", "Setting up libsqlite3-mod-ceph (18.2.7-pve1) ...", "Setting up uidmap (1:4.13+dfsg1-1+deb12u1) ...", "Setting up libpython3.11-stdlib:amd64 (3.11.2-6+deb12u6) ...", "Setting up libcephfs2 (18.2.7-pve1) ...", "Setting up libradosstriper1 (18.2.7-pve1) ...", "Setting up libgcc-12-dev:amd64 (12.2.0-14+deb12u1) ...", "Setting up libgssapi-krb5-2:amd64 (1.20.1-2+deb12u3) ...", "Setting up librbd1 (18.2.7-pve1) ...", "Setting up ceph-fuse (18.2.7-pve1) ...", "Setting up python3.11 (3.11.2-6+deb12u6) ...", "Setting up python3-rados (18.2.7-pve1) ...", "Setting up libpython3.11:amd64 (3.11.2-6+deb12u6) ...", "Setting up libstdc++-12-dev:amd64 (12.2.0-14+deb12u1) ...", "Setting up openssh-client (1:9.2p1-2+deb12u6) ...", "Setting up python3-rbd (18.2.7-pve1) ...", "Setting up libqt5network5:amd64 (5.15.8+dfsg-11+deb12u3) ...", "Setting up gcc-12 (12.2.0-14+deb12u1) ...", "Setting up python3-rgw (18.2.7-pve1) ...", "Setting up python3-cephfs (18.2.7-pve1) ...", "Setting up g++-12 (12.2.0-14+deb12u1) ...", "Setting up openssh-sftp-server (1:9.2p1-2+deb12u6) ...", "Setting up openssh-server (1:9.2p1-2+deb12u6) ...", "rescue-ssh.target is a disabled or a static unit not running, not starting it.", "ssh.socket is a disabled or a static unit not running, not starting it.", "Setting up ceph-common (18.2.7-pve1) ...", "Setting system user ceph properties..usermod: no changes", "usermod: unlocking the user's password would result in a passwordless account.", "You should set a password with usermod -p to unlock this user's password.", "..done", "Fixing /var/run/ceph ownership....done", "Setting up ssh (1:9.2p1-2+deb12u6) ...", "Setting up ceph-base (18.2.7-pve1) ...", "Setting up ceph-mds (18.2.7-pve1) ...", "Setting up ceph-mgr (18.2.7-pve1) ...", "Setting up ceph-osd (18.2.7-pve1) ...", "Setting up ceph-mon (18.2.7-pve1) ...", "Setting up ceph (18.2.7-pve1) ...", "Setting up ceph-mgr-dashboard (18.2.7-pve1) ...", "Setting up ceph-volume (18.2.7-pve1) ...", "Processing triggers for mailcap (3.70+nmu1) ...", "Processing triggers for fontconfig (2.14.1-4) ...", "Processing triggers for libc-bin (2.36-9+deb12u10) ...", "Processing triggers for ufw (0.36.2-1) ...", "Processing triggers for systemd (252.36-1~deb12u1) ...", "Processing triggers for man-db (2.11.2-2) ...", "Processing triggers for debianutils (5.7-0.5~deb12u1) ...", "Processing triggers for initramfs-tools (0.142+deb12u3) ...", "update-initramfs: Generating /boot/initrd.img-6.8.12-10-pve", "sync: error syncing '/boot/initrd.img-6.8.12-10-pve': Input/output error", "dpkg: error processing package initramfs-tools (--configure):", " installed initramfs-tools package post-installation script subprocess returned error exit status 1", "Errors were encountered while processing:", " initramfs-tools"]} diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg new file mode 100644 index 0000000..69f5fac --- /dev/null +++ b/ansible/ansible.cfg @@ -0,0 +1,31 @@ +[defaults] +forks = 20 + +# display_skipped_hosts=False +# deprecation_warnings=False +retry_files_enabled = False +#callback_whitelist = profile_tasks +#stdout_callback = yaml +#bin_ansible_callbacks = True +nocows = True +host_key_checking = False + +inventory = hosts +fact_caching=jsonfile +fact_caching_connection=fact_cache +fact_caching_timeout=0 + +no_log = false + + +[inventory] +cache_plugin=jsonfile + +[ssh_connection] + +# ssh arguments to use +# Leaving off ControlPersist will result in poor performance, so use +# paramiko on older platforms rather than removing it, -C controls compression use +ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s -i ~/.ssh/ansible +pipelining = true +ansible_user = ansible diff --git a/ansible/baseline/proxmox/machines.yml b/ansible/baseline/proxmox/machines.yml new file mode 100644 index 0000000..edacdc0 --- /dev/null +++ b/ansible/baseline/proxmox/machines.yml @@ -0,0 +1,23 @@ +--- +- name: Clone cloud-init template + community.general.proxmox_kvm: + node: opti-hst-01 # Changed from value: proxmox + vmid: 9000 # This happened to be the same value as my cloudinit VM + clone: gemini # Left this as is, later discovering the value doesn't matter since a vmid is specified above.. + name: cloud-1 + api_user: root@pam # Changed from value: ansible@pam + api_token_id: "{{ proxmox_token_id }}" # Changed from value: ansible_pve_token + api_token_secret: "{{ proxmox_token_secret }}" # Changed from value: 1daf3b05-5f94-4f10-b924-888ba30b038b + api_host: 192.168.0.100 # Changed from value: your.proxmox.host + storage: ceph-pool-01 # Changed from value: ZFS01 + timeout: 90 + +- name: Start VM + community.general.proxmox_kvm: + node: opti-hst-01 # Changed from value: proxmox + name: cloud-1 + api_user: root@pam # Changed from value: ansible@pam + api_token_id: "{{ proxmox_token_id}}" # Changed from value: ansible_pve_token + api_token_secret: "{{ proxmox_token_secret }}" # Changed from value: 1daf3b05-5f94-4f10-b924-888ba30b038b + api_host: 192.168.0.100 # Changed from value: your.proxmox.host + state: started diff --git a/ansible/baseline/proxmox/main.yml b/ansible/baseline/proxmox/main.yml new file mode 100644 index 0000000..2a44b9d --- /dev/null +++ b/ansible/baseline/proxmox/main.yml @@ -0,0 +1,27 @@ +--- +- name: Initial setup for proxmox servers + hosts: proxmox + user: root + become: true + + tasks: + - name: Update apt and install required system packages + apt: + pkg: + - aptitude + - curl + - nano + - vim + - git + - ufw + - lsof + - python3-proxmoxer + - python3-requests + state: latest + update_cache: true + + # - name: Basic security hardening + # import_tasks: security.yml + + # - name: Deploy VMs + # import_tasks: machines.yml diff --git a/ansible/baseline/proxmox/security.yml b/ansible/baseline/proxmox/security.yml new file mode 100644 index 0000000..e69de29 diff --git a/ansible/bootstrap-hosts b/ansible/bootstrap-hosts new file mode 100644 index 0000000..424b3a1 --- /dev/null +++ b/ansible/bootstrap-hosts @@ -0,0 +1,6 @@ +[all:vars] +ansible_user=ansible +ansible_python_interpreter=/usr/bin/python3 + +[bootstrap] +lab01.w5isp.com ansible_host=10.0.16.231 diff --git a/ansible/bootstrap.sh b/ansible/bootstrap.sh new file mode 100755 index 0000000..f193839 --- /dev/null +++ b/ansible/bootstrap.sh @@ -0,0 +1 @@ +ansible-playbook -v -i bootstrap-hosts bootstrap.yml diff --git a/ansible/bootstrap.yml b/ansible/bootstrap.yml new file mode 100644 index 0000000..1077a38 --- /dev/null +++ b/ansible/bootstrap.yml @@ -0,0 +1,10 @@ +--- +- name: Bootstrap new host + hosts: all + tags: bootstrap + roles: + - bootstrap + become: yes + # become_method: "{{ 'su' if (ansible_distribution | default('')) == 'Debian' else 'sudo' }}" + # become_method: "sudo" + become_method: "su" diff --git a/ansible/collections/requirements.yml b/ansible/collections/requirements.yml new file mode 100644 index 0000000..2988a4e --- /dev/null +++ b/ansible/collections/requirements.yml @@ -0,0 +1,5 @@ +--- +collections: + - ansible.posix + - netbox.netbox + # - devsec.hardening diff --git a/ansible/env.sh b/ansible/env.sh new file mode 100755 index 0000000..65538d3 --- /dev/null +++ b/ansible/env.sh @@ -0,0 +1,14 @@ +#!/bin/bash + +if [[ -z ${SSH_PRIVATE_KEY} ]]; then + echo "! No SSH private key found." + exit 1 +fi + +echo "> Writing out SSH private key..." +echo ${SSH_PRIVATE_KEY} | base64 -d >id_ed25519 +chmod 400 id_ed25519 + +echo "> Running: $*" + +$* diff --git a/ansible/general.yml b/ansible/general.yml new file mode 100644 index 0000000..14638b1 --- /dev/null +++ b/ansible/general.yml @@ -0,0 +1,60 @@ +--- +- name: Base setup + hosts: all + become: yes + become_method: sudo + roles: + - general + vars_files: + - vars/base.yml + tags: + - base + +- name: SNMP clients + hosts: snmp_clients + become: yes + become_method: sudo + roles: + - snmp_clients + tags: + - snmp + +- name: k3s + hosts: k3s_servers + become: yes + become_method: sudo + tags: k3s + roles: + - k3s_servers + +- name: Docker servers + hosts: docker + become: yes + become_method: sudo + tags: docker + roles: + - docker + vars: + gpg_fingerprint: "9DC858229FC7DD38854AE2D88D81803C0EBFCD88" + +- name: Netboot servers + hosts: netboot + become: yes + become_method: sudo + vars_files: + - vars/base.yml + - vars/netboot.yml + - vars/network.yml + vars: + netboot_arch_dist: "{{ netboot.dist | product(netboot.arch) }}" + tags: + - netboot + roles: + - netboot_servers + +- hosts: syslog + become: yes + become_method: sudo + tags: syslog + roles: + - syslog_servers diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml new file mode 100644 index 0000000..e69de29 diff --git a/ansible/handlers/main.yml b/ansible/handlers/main.yml new file mode 100644 index 0000000..36761fa --- /dev/null +++ b/ansible/handlers/main.yml @@ -0,0 +1,23 @@ +- name: Restart ntp + ansible.builtin.service: + name: ntp + state: restarted + become: true + +- name: Restart ssh + ansible.builtin.service: + name: ssh + state: restarted + become: true + +- name: Restart unbound + ansible.builtin.service: + name: unbound + state: restarted + become: true + +- name: Restart firewalld + ansible.builtin.service: + name: firewalld + state: restarted + become: true diff --git a/ansible/hosts b/ansible/hosts new file mode 100755 index 0000000..6d85efc --- /dev/null +++ b/ansible/hosts @@ -0,0 +1,34 @@ +[vntx] +#logs.vntx.net +#unimus.vntx.net +monitor.vntx.net +radius.vntx.net +vpn.vntx.net +librenms.vntx.net +netbox.vntx.net +ns1.vntx.net +ns2.vntx.net +#ntp.vntx.net + +[common] +#aprs.me +dallas.aprs2.net ansible_host=204.110.191.232 +apps.w5isp.com + +[home] +skippy.w5isp.com +g.w5isp.com ansible_user=ansible + +#[proxmox] +#lab01 ansible_host=10.0.16.231 #ansible_user=root +#lab02 ansible_host=10.0.16.232 #ansible_user=root +#lab03 ansible_host=10.0.16.233 #ansible_user=root + +[tailscale_home] +lab01.w5isp.com ansible_host=10.0.16.231 #ansible_user=root +lab02.w5isp.com ansible_host=10.0.16.232 #ansible_user=root +lab03.w5isp.com ansible_host=10.0.16.233 #ansible_user=root +g.w5isp.com + +[caddy] +g.w5isp.com ansible_user=ansible diff --git a/ansible/notes.txt b/ansible/notes.txt new file mode 100644 index 0000000..a20f10e --- /dev/null +++ b/ansible/notes.txt @@ -0,0 +1,4 @@ +bootstrap + +ansible-playbook -l ns1.vntx.net -e ansible_user=graham -e ansible_host=ns1.vntx.net -k -K bootstrap.yml + diff --git a/ansible/playbook.yml b/ansible/playbook.yml new file mode 100755 index 0000000..22b39ef --- /dev/null +++ b/ansible/playbook.yml @@ -0,0 +1,126 @@ +--- +- name: Apply common configuration to all nodes + hosts: all + become: true + # become_method: sudo + gather_facts: true + remote_user: ansible + roles: + - common + vars_files: + - vars/common.yml + tags: + - common + + tasks: + - name: Set timezone + community.general.timezone: + name: America/Chicago + + - name: Install Graham SSH keys + ansible.posix.authorized_key: + user: graham + state: present + key: https://github.com/gmcintire.keys + + - name: Install Andys SSH keys + ansible.posix.authorized_key: + user: andy + state: present + key: https://github.com/nsnw.keys + +- name: Apply resolver config + hosts: resolvers + gather_facts: true + roles: + - { role: resolvers, become: true } + +- name: Apply ns config + hosts: ns + gather_facts: true + become: true + roles: + - role: ns + +- name: Apply netbox config + hosts: netbox + gather_facts: true + become: true + roles: + - role: caddy_ansible.caddy_ansible + caddy_systemd_network_dependency: true + caddy_setcap: true + caddy_systemd_capabilities_enabled: true + caddy_systemd_capabilities: "CAP_NET_BIND_SERVICE" + caddy_config: | + netbox.vntx.net { + bind tcp4/0.0.0.0 + log { + level error + } + route /static* { + uri strip_prefix /static + root * /opt/netbox/netbox/static + file_server + } + @notStatic not path /static* + encode gzip zstd + reverse_proxy @notStatic http://localhost:8001 { + header_up Host {http.request.host} + header_up X-Real-IP {http.request.remote.host} + header_up X-Forwarded-For {http.request.remote.host} + header_up X-Forwarded-Port {http.request.port} + header_up X-Forwarded-Proto {http.request.scheme} + } + } + +- name: Apply firewall rules to netbox + hosts: netbox + become: true + # remote_user: graham + + tasks: + - name: Permit traffic in default zone for http service + ansible.posix.firewalld: + zone: public + service: http + permanent: true + state: enabled + + - name: Permit traffic in default zone for https service + ansible.posix.firewalld: + zone: public + service: https + permanent: true + state: enabled + notify: + - Restart firewalld + +- name: Tailscale + hosts: tailscale_home + roles: + - role: artis3n.tailscale + vars: + # Pull Tailscale auth key from environment variable + tailscale_authkey: "{{ lookup('ansible.builtin.env', 'TAILSCALE_KEY') }}" + tailscale_args: "--ssh --advertise-exit-node" + pre_tasks: + - name: Debug - Check Tailscale key (will be partially redacted) + debug: + msg: "Key exists and starts with: {{ lookup('ansible.builtin.env', 'TAILSCALE_KEY')[0:10] }}..." + +- name: Install and configure Caddy + hosts: caddy + become: true + roles: + - caddy + +# - import_playbook: baseline/proxmox/main.yml +# - name: Tailscale Home +# hosts: tailscale_home +# roles: +# - role: artis3n.tailscale +# vars: +# # Example pulling the API key from the env vars on the host running Ansible +# tailscale_authkey: "{{ lookup('env', 'TAILSCALE_KEY') }}" +# tailscale_args: "--ssh --advertise-exit-node --advertise-routes=10.0.16.0/22" diff --git a/ansible/roles/.DS_Store b/ansible/roles/.DS_Store new file mode 100644 index 0000000..b03ace0 Binary files /dev/null and b/ansible/roles/.DS_Store differ diff --git a/ansible/roles/almalinux/handlers/main.yml b/ansible/roles/almalinux/handlers/main.yml new file mode 100755 index 0000000..2735c99 --- /dev/null +++ b/ansible/roles/almalinux/handlers/main.yml @@ -0,0 +1,12 @@ +--- +- name: Restart unbound + ansible.builtin.service: + name: unbound + state: restarted + become: true + +- name: Restart firewalld + ansible.builtin.service: + name: firewalld + state: restarted + become: true diff --git a/ansible/roles/almalinux/tasks/main.yml b/ansible/roles/almalinux/tasks/main.yml new file mode 100755 index 0000000..0c3d4a9 --- /dev/null +++ b/ansible/roles/almalinux/tasks/main.yml @@ -0,0 +1,54 @@ +--- +- name: "Enable passwordless sudo on AlmaLinux" + ansible.builtin.lineinfile: + path: /etc/sudoers + state: present + regexp: "^%wheel" + line: "%wheel ALL=(ALL) NOPASSWD: ALL" + validate: "visudo -cf %s" + +- name: Install EPEL repo + ansible.builtin.yum: + name: epel-release + state: present + +- name: Upgrade all packages + ansible.builtin.dnf: + name: "*" + state: latest + +- name: Install required software + ansible.builtin.dnf: + state: present + name: + - bind-utils + - lsof + - htop + - btop + - mosh + - rsync + - tmux + - nano + - the_silver_searcher + - net-tools + - mlocate + - fail2ban + - munin-node + - nethogs + - pv + - selinux-policy + - tar + - unzip + - qemu-guest-agent + - python3-libselinux + +- name: Create a user for andys + ansible.builtin.user: + name: andy + groups: + - wheel + state: present +# - name: Put SELinux in permissive mode, logging actions that would be blocked. +# ansible.posix.selinux: +# policy: targeted +# state: permissive diff --git a/ansible/roles/bootstrap/files/ansible.pub b/ansible/roles/bootstrap/files/ansible.pub new file mode 100644 index 0000000..2e00ba3 --- /dev/null +++ b/ansible/roles/bootstrap/files/ansible.pub @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFghGMnDdkfNC6JPEhMxrKhYDmNcXjHXp/y/mf3uLtzb Ansible SSH Key diff --git a/ansible/roles/bootstrap/tasks/ansible.yml b/ansible/roles/bootstrap/tasks/ansible.yml new file mode 100644 index 0000000..0ca4df2 --- /dev/null +++ b/ansible/roles/bootstrap/tasks/ansible.yml @@ -0,0 +1,44 @@ +- name: Install sudo + apt: + name: sudo + when: ansible_distribution == "Debian" + +- name: Ensure the 'ansible' group exists + group: + name: ansible + gid: 10001 + state: present + +- name: Ensure the 'ansible' user exists + user: + name: ansible + comment: Ansible User + uid: 10001 + group: ansible + +- name: Ensure the 'graham' user exists + user: + name: graham + comment: Graham + +- name: Ensure the 'andy' user exists + user: + name: andy + comment: Andy + +- name: Ensure that 'authorized_keys' is set correctly for the 'ansible' user + authorized_key: + user: ansible + state: present + key: "{{ lookup('file', 'files/ansible.pub') }}" + +- name: Ensure sudo is configured for the 'ansible' user + template: + src: templates/etc/sudoers.d/ansible + dest: /etc/sudoers.d/ansible + owner: root + group: root + mode: '0440' + tags: + - sudoers + diff --git a/ansible/roles/bootstrap/tasks/main.yml b/ansible/roles/bootstrap/tasks/main.yml new file mode 100644 index 0000000..8003b85 --- /dev/null +++ b/ansible/roles/bootstrap/tasks/main.yml @@ -0,0 +1,11 @@ +- name: Dump host information + debug: + msg: + - "Host : {{ inventory_hostname }}" + # - "Distro : {{ ansible_lsb.id }}" + # - "Release: {{ ansible_lsb.codename }}" + - "IPv4 : {{ ansible_all_ipv4_addresses }}" + - "IPv6 : {{ ansible_all_ipv6_addresses }}" + +- name: Ansible setup + import_tasks: ansible.yml diff --git a/ansible/roles/bootstrap/templates/etc/hostname.j2 b/ansible/roles/bootstrap/templates/etc/hostname.j2 new file mode 100644 index 0000000..1fad51f --- /dev/null +++ b/ansible/roles/bootstrap/templates/etc/hostname.j2 @@ -0,0 +1 @@ +{{ inventory_hostname }} diff --git a/ansible/roles/bootstrap/templates/etc/hosts.j2 b/ansible/roles/bootstrap/templates/etc/hosts.j2 new file mode 100644 index 0000000..8aec53e --- /dev/null +++ b/ansible/roles/bootstrap/templates/etc/hosts.j2 @@ -0,0 +1,6 @@ +127.0.0.1 localhost +::1 localhost ip6-localhost ip6-loopback +ff02::1 ip6-allnodes +ff02::2 ip6-allrouters + +127.0.1.1 {{ inventory_hostname }} {{ inventory_hostname | split('.') | first }} diff --git a/ansible/roles/bootstrap/templates/etc/sudoers.d/ansible b/ansible/roles/bootstrap/templates/etc/sudoers.d/ansible new file mode 100644 index 0000000..e342a63 --- /dev/null +++ b/ansible/roles/bootstrap/templates/etc/sudoers.d/ansible @@ -0,0 +1 @@ +ansible ALL=NOPASSWD: ALL diff --git a/ansible/roles/caddy/defaults/main.yml b/ansible/roles/caddy/defaults/main.yml new file mode 100644 index 0000000..eb61f09 --- /dev/null +++ b/ansible/roles/caddy/defaults/main.yml @@ -0,0 +1,8 @@ +--- +# Default Caddy configuration +caddy_config_dir: /etc/caddy +caddy_data_dir: /var/lib/caddy +caddy_user: caddy +caddy_group: caddy +caddy_default_site_port: 80 +caddy_default_site_root: /var/www/html diff --git a/ansible/roles/caddy/handlers/main.yml b/ansible/roles/caddy/handlers/main.yml new file mode 100644 index 0000000..e8fe724 --- /dev/null +++ b/ansible/roles/caddy/handlers/main.yml @@ -0,0 +1,6 @@ +--- +- name: restart caddy + service: + name: caddy + state: restarted + \ No newline at end of file diff --git a/ansible/roles/caddy/tasks/main.yml b/ansible/roles/caddy/tasks/main.yml new file mode 100644 index 0000000..5d71548 --- /dev/null +++ b/ansible/roles/caddy/tasks/main.yml @@ -0,0 +1,43 @@ +--- +- name: Install required packages + apt: + name: + - debian-keyring + - debian-archive-keyring + - apt-transport-https + - curl + - gnupg2 + state: present + update_cache: yes + +- name: Add Caddy GPG key + apt_key: + url: "https://dl.cloudsmith.io/public/caddy/stable/gpg.key" + state: present + +- name: Add Caddy repository + apt_repository: + repo: "deb https://dl.cloudsmith.io/public/caddy/stable/deb/debian any-version main" + state: present + filename: caddy-stable + +- name: Install Caddy + apt: + name: caddy + state: present + update_cache: yes + +- name: Ensure Caddy service is enabled and started + service: + name: caddy + state: started + enabled: yes + +- name: Configure Caddy + template: + src: Caddyfile.j2 + dest: /etc/caddy/Caddyfile + owner: root + group: root + mode: '0644' + notify: restart caddy diff --git a/ansible/roles/caddy/templates/Caddyfile.j2 b/ansible/roles/caddy/templates/Caddyfile.j2 new file mode 100644 index 0000000..4872b0e --- /dev/null +++ b/ansible/roles/caddy/templates/Caddyfile.j2 @@ -0,0 +1,21 @@ +{ + # Global options + admin off + persist_config off +} + +:{{ caddy_default_site_port }} { + root * {{ caddy_default_site_root }} + file_server + encode gzip + + # Basic logging + log { + output file /var/log/caddy/access.log + format json + } +} + +truck.w5isp.com { + reverse_proxy http://100.105.74.2 +} diff --git a/ansible/roles/common/files/ansible.pub b/ansible/roles/common/files/ansible.pub new file mode 100644 index 0000000..2e00ba3 --- /dev/null +++ b/ansible/roles/common/files/ansible.pub @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFghGMnDdkfNC6JPEhMxrKhYDmNcXjHXp/y/mf3uLtzb Ansible SSH Key diff --git a/ansible/roles/common/handlers/main.yml b/ansible/roles/common/handlers/main.yml new file mode 100755 index 0000000..df6ea53 --- /dev/null +++ b/ansible/roles/common/handlers/main.yml @@ -0,0 +1,14 @@ +--- +# Handler to handle common notifications. Handlers are called by other plays. +# See http://docs.ansible.com/playbooks_intro.html for more information about handlers. + +- name: Restart ntp + ansible.builtin.service: + name: ntp + state: restarted + become: true +# - name: Restart ssh +# ansible.builtin.service: +# name: ssh +# state: restarted +# become: true diff --git a/ansible/roles/common/tasks/main.yml b/ansible/roles/common/tasks/main.yml new file mode 100644 index 0000000..69a11d5 --- /dev/null +++ b/ansible/roles/common/tasks/main.yml @@ -0,0 +1,39 @@ +--- +- name: "Enable passwordless sudo" + ansible.builtin.lineinfile: + path: /etc/sudoers + state: present + regexp: "^%sudo" + line: "%sudo ALL=(ALL) NOPASSWD: ALL" + validate: "visudo -cf %s" + +- name: "Apply AlmaLinux specific config" + when: ansible_distribution == 'AlmaLinux' + ansible.builtin.import_role: + name: almalinux + +- name: "Apply Debian specific config" + when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu' + ansible.builtin.import_role: + name: debian + +- name: Install sshd banner + ansible.builtin.template: + src: issue.net.j2 + dest: /etc/issue.net + mode: "644" + +- name: Setup sshd banner + ansible.builtin.lineinfile: + dest: /etc/ssh/sshd_config + line: "Banner /etc/issue.net" + state: present + notify: Restart ssh + +- name: Disallow root SSH access + ansible.builtin.lineinfile: + dest: /etc/ssh/sshd_config + regexp: "^PermitRootLogin" + line: "PermitRootLogin no" + state: present + # notify: Restart ssh diff --git a/ansible/roles/common/templates/issue.net.j2 b/ansible/roles/common/templates/issue.net.j2 new file mode 100755 index 0000000..8b13789 --- /dev/null +++ b/ansible/roles/common/templates/issue.net.j2 @@ -0,0 +1 @@ + diff --git a/ansible/roles/common/templates/issue.net.old.j2 b/ansible/roles/common/templates/issue.net.old.j2 new file mode 100755 index 0000000..c6823c7 --- /dev/null +++ b/ansible/roles/common/templates/issue.net.old.j2 @@ -0,0 +1,25 @@ +8b d8 +`8b d8' + `8b d8' + `8b d8' ,adPPYba, 8b,dPPYba, ,adPPYba, 8b,dPPYba, ,adPPYYba, + `8b d8' a8P_____88 88P' "Y8 a8" "8a 88P' `"8a "" `Y8 + `8b d8' 8PP""""""" 88 8b d8 88 88 ,adPPPPP88 + `888' "8b, ,aa 88 "8a, ,a8" 88 88 88, ,88 + `8' `"Ybbd8"' 88 `"YbbdP"' 88 88 `"8bbdP"Y8 + +888b 88 88 +8888b 88 ,d 88 +88 `8b 88 88 88 +88 `8b 88 ,adPPYba, MM88MMM 8b db d8 ,adPPYba, 8b,dPPYba, 88 ,d8 ,adPPYba, +88 `8b 88 a8P_____88 88 `8b d88b d8' a8" "8a 88P' "Y8 88 ,a8" I8[ "" +88 `8b 88 8PP""""""" 88 `8b d8'`8b d8' 8b d8 88 8888[ `"Y8ba, +88 `8888 "8b, ,aa 88, `8bd8' `8bd8' "8a, ,a8" 88 88`"Yba, aa ]8I +88 `888 `"Ybbd8"' "Y888 YP YP `"YbbdP"' 88 88 `Y8a `"YbbdP"' + +############################################################### +# Welcome to Verona Networks # +# All connections are monitored and recorded # +# Disconnect IMMEDIATELY if you are not an authorized user! # +############################################################### + + diff --git a/ansible/roles/common/templates/ntp.conf.j2 b/ansible/roles/common/templates/ntp.conf.j2 new file mode 100755 index 0000000..600c697 --- /dev/null +++ b/ansible/roles/common/templates/ntp.conf.j2 @@ -0,0 +1,49 @@ +{% if ansible_fqdn in groups['ntp'] %} +driftfile /var/lib/ntp/ntp.drift + +statistics loopstats peerstats clockstats +filegen loopstats file loopstats type day enable +filegen peerstats file peerstats type day enable +filegen clockstats file clockstats type day enable + +# GPS Serial data reference +#server 127.127.28.0 minpoll 4 maxpoll 4 +#fudge 127.127.28.0 time1 0.0 refid GPS + +# GPS PPS reference +server 127.127.28.1 minpoll 4 maxpoll 4 prefer +fudge 127.127.28.1 refid PPS + +pool us.pool.ntp.org iburst + +restrict -4 default kod notrap nomodify nopeer noquery limited +restrict -6 default kod notrap nomodify nopeer noquery limited + +# Local users may interrogate the ntp server more closely. +restrict 127.0.0.1 +restrict ::1 + +# Needed for adding pool entries +restrict source notrap nomodify noquery + +{% else %} +driftfile /var/lib/ntp/ntp.drift + +statistics loopstats peerstats clockstats +filegen loopstats file loopstats type day enable +filegen peerstats file peerstats type day enable +filegen clockstats file clockstats type day enable + +# By default, exchange time with everybody, but don't allow configuration. +restrict -4 default kod notrap nomodify nopeer noquery limited +restrict -6 default kod notrap nomodify nopeer noquery limited + +# Local users may interrogate the ntp server more closely. +restrict 127.0.0.1 +restrict ::1 + +server {{ ntpserver }} + +# Needed for adding pool entries +restrict source notrap nomodify noquery +{% endif %} diff --git a/ansible/roles/debian/tasks/main.yml b/ansible/roles/debian/tasks/main.yml new file mode 100644 index 0000000..ca01e81 --- /dev/null +++ b/ansible/roles/debian/tasks/main.yml @@ -0,0 +1,15 @@ +- name: "Install updates" + ansible.builtin.apt: + name: "*" + state: latest + update_cache: true + cache_valid_time: 3600 + force_apt_get: true + autoremove: true + autoclean: true + +- name: "Secure shared memory" + ansible.builtin.lineinfile: + path: /etc/fstab + state: present + line: "tmpfs /run/shm tmpfs defaults,noexec,nosuid 0 0" diff --git a/ansible/roles/debug/tasks/main.yml b/ansible/roles/debug/tasks/main.yml new file mode 100644 index 0000000..b2162b3 --- /dev/null +++ b/ansible/roles/debug/tasks/main.yml @@ -0,0 +1,12 @@ +- name: create /tmp/ansible-debug + file: + path: /tmp/ansible-debug + state: directory + +- name: collect vars + template: + src: templates/data.j2 + dest: "/tmp/ansible-debug/{{ item.key }}.json" + vars: + data: "{{ item.value }}" + loop: "{{ {'hostvars': hostvars, 'groups': groups, 'vars': vars} | dict2items }}" diff --git a/ansible/roles/debug/templates/data.j2 b/ansible/roles/debug/templates/data.j2 new file mode 100644 index 0000000..47aa87d --- /dev/null +++ b/ansible/roles/debug/templates/data.j2 @@ -0,0 +1 @@ +{{ data | to_nice_json }} diff --git a/ansible/roles/general/.DS_Store b/ansible/roles/general/.DS_Store new file mode 100644 index 0000000..bcb5e3b Binary files /dev/null and b/ansible/roles/general/.DS_Store differ diff --git a/ansible/roles/general/files/.DS_Store b/ansible/roles/general/files/.DS_Store new file mode 100644 index 0000000..e412cbf Binary files /dev/null and b/ansible/roles/general/files/.DS_Store differ diff --git a/ansible/roles/general/files/etc/rsyslog.conf.debian b/ansible/roles/general/files/etc/rsyslog.conf.debian new file mode 100644 index 0000000..f30d8f1 --- /dev/null +++ b/ansible/roles/general/files/etc/rsyslog.conf.debian @@ -0,0 +1,94 @@ +# /etc/rsyslog.conf configuration file for rsyslog +# +# For more information install rsyslog-doc and see +# /usr/share/doc/rsyslog-doc/html/configuration/index.html + + +################# +#### MODULES #### +################# + +module(load="imuxsock") # provides support for local system logging +module(load="imklog") # provides kernel logging support +#module(load="immark") # provides --MARK-- message capability + +# provides UDP syslog reception +#module(load="imudp") +#input(type="imudp" port="514") + +# provides TCP syslog reception +#module(load="imtcp") +#input(type="imtcp" port="514") + + +########################### +#### GLOBAL DIRECTIVES #### +########################### + +# +# Use traditional timestamp format. +# To enable high precision timestamps, comment out the following line. +# +$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat + +# +# Set the default permissions for all log files. +# +$FileOwner root +$FileGroup adm +$FileCreateMode 0640 +$DirCreateMode 0755 +$Umask 0022 + +# +# Where to place spool and state files +# +$WorkDirectory /var/spool/rsyslog + +# +# Include all config files in /etc/rsyslog.d/ +# +$IncludeConfig /etc/rsyslog.d/*.conf + + +############### +#### RULES #### +############### + +# +# First some standard log files. Log by facility. +# +auth,authpriv.* /var/log/auth.log +*.*;auth,authpriv.none -/var/log/syslog +#cron.* /var/log/cron.log +daemon.* -/var/log/daemon.log +kern.* -/var/log/kern.log +lpr.* -/var/log/lpr.log +mail.* -/var/log/mail.log +user.* -/var/log/user.log + +# +# Logging for the mail system. Split it up so that +# it is easy to write scripts to parse these files. +# +mail.info -/var/log/mail.info +mail.warn -/var/log/mail.warn +mail.err /var/log/mail.err + +# +# Some "catch-all" log files. +# +*.=debug;\ + auth,authpriv.none;\ + news.none;mail.none -/var/log/debug +*.=info;*.=notice;*.=warn;\ + auth,authpriv.none;\ + cron,daemon.none;\ + mail,news.none -/var/log/messages + +# +# Emergencies are sent to everybody logged in. +# +*.emerg :omusrmsg:* + +*.* @@syslog.vm.qc.nsnw.ca diff --git a/ansible/roles/general/files/etc/rsyslog.conf.ubuntu b/ansible/roles/general/files/etc/rsyslog.conf.ubuntu new file mode 100644 index 0000000..19efb92 --- /dev/null +++ b/ansible/roles/general/files/etc/rsyslog.conf.ubuntu @@ -0,0 +1,61 @@ +# /etc/rsyslog.conf configuration file for rsyslog +# +# For more information install rsyslog-doc and see +# /usr/share/doc/rsyslog-doc/html/configuration/index.html +# +# Default logging rules can be found in /etc/rsyslog.d/50-default.conf + + +################# +#### MODULES #### +################# + +module(load="imuxsock") # provides support for local system logging +#module(load="immark") # provides --MARK-- message capability + +# provides UDP syslog reception +#module(load="imudp") +#input(type="imudp" port="514") + +# provides TCP syslog reception +#module(load="imtcp") +#input(type="imtcp" port="514") + +# provides kernel logging support and enable non-kernel klog messages +module(load="imklog" permitnonkernelfacility="on") + +########################### +#### GLOBAL DIRECTIVES #### +########################### + +# +# Use traditional timestamp format. +# To enable high precision timestamps, comment out the following line. +# +$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat + +# Filter duplicated messages +$RepeatedMsgReduction on + +# +# Set the default permissions for all log files. +# +$FileOwner syslog +$FileGroup adm +$FileCreateMode 0640 +$DirCreateMode 0755 +$Umask 0022 +$PrivDropToUser syslog +$PrivDropToGroup syslog + +# +# Where to place spool and state files +# +$WorkDirectory /var/spool/rsyslog + +# +# Include all config files in /etc/rsyslog.d/ +# +$IncludeConfig /etc/rsyslog.d/*.conf + +*.* @@syslog.vm.qc.nsnw.ca diff --git a/ansible/roles/general/files/etc/rsyslog.d/20-ufw.conf.ubuntu b/ansible/roles/general/files/etc/rsyslog.d/20-ufw.conf.ubuntu new file mode 100644 index 0000000..4b8e8bf --- /dev/null +++ b/ansible/roles/general/files/etc/rsyslog.d/20-ufw.conf.ubuntu @@ -0,0 +1,7 @@ +# Log kernel generated UFW log messages to file +:msg,contains,"[UFW " /var/log/ufw.log + +# Uncomment the following to stop logging anything that matches the last rule. +# Doing this will stop logging kernel generated UFW log messages to the file +# normally containing kern.* messages (eg, /var/log/kern.log) +#& stop diff --git a/ansible/roles/general/files/etc/rsyslog.d/50-default.conf.ubuntu b/ansible/roles/general/files/etc/rsyslog.d/50-default.conf.ubuntu new file mode 100644 index 0000000..56217be --- /dev/null +++ b/ansible/roles/general/files/etc/rsyslog.d/50-default.conf.ubuntu @@ -0,0 +1,48 @@ +# Default rules for rsyslog. +# +# For more information see rsyslog.conf(5) and /etc/rsyslog.conf + +# +# First some standard log files. Log by facility. +# +auth,authpriv.* /var/log/auth.log +*.*;auth,authpriv.none -/var/log/syslog +#cron.* /var/log/cron.log +#daemon.* -/var/log/daemon.log +kern.* -/var/log/kern.log +#lpr.* -/var/log/lpr.log +mail.* -/var/log/mail.log +#user.* -/var/log/user.log + +# +# Logging for the mail system. Split it up so that +# it is easy to write scripts to parse these files. +# +#mail.info -/var/log/mail.info +#mail.warn -/var/log/mail.warn +mail.err /var/log/mail.err + +# +# Some "catch-all" log files. +# +#*.=debug;\ +# auth,authpriv.none;\ +# news.none;mail.none -/var/log/debug +#*.=info;*.=notice;*.=warn;\ +# auth,authpriv.none;\ +# cron,daemon.none;\ +# mail,news.none -/var/log/messages + +# +# Emergencies are sent to everybody logged in. +# +*.emerg :omusrmsg:* + +# +# I like to have messages displayed on the console, but only on a virtual +# console I usually leave idle. +# +#daemon,mail.*;\ +# news.=crit;news.=err;news.=notice;\ +# *.=debug;*.=info;\ +# *.=notice;*.=warn /dev/tty8 diff --git a/ansible/roles/general/files/etc/sudoers.d/ad-linux-admins b/ansible/roles/general/files/etc/sudoers.d/ad-linux-admins new file mode 100644 index 0000000..d613bd0 --- /dev/null +++ b/ansible/roles/general/files/etc/sudoers.d/ad-linux-admins @@ -0,0 +1 @@ +%linux-admins ALL=NOPASSWD: ALL diff --git a/ansible/roles/general/files/etc/update-motd.d/20-banner b/ansible/roles/general/files/etc/update-motd.d/20-banner new file mode 100755 index 0000000..28bf1ea --- /dev/null +++ b/ansible/roles/general/files/etc/update-motd.d/20-banner @@ -0,0 +1,235 @@ +#!/bin/bash + +set -e + +# Define some colours +BOLD="" +FBLK="" +FRED="" +FGRN="" +FYLW="" +FBLU="" +FPPL="" +FCYN="" +FWHT="" +F_ORANGE="" +F_ORANGE2="" +F_PURPLE="" +F_TEAL="" +F_SEA="" +F_YELLOW="" +F_GREEN="" +F_GREEN2="" +F_RED="" +F_CYAN="" +F_DARKBLUE="" +F_DARKPURPLE="" +F_PURPLE="" +F_DARKGREY="" +F_MIDGREY="" +F_MIDGREY2="" +F_BLUE="" +F_LIGHTBLUE="" +F_GOLD="" +F_LIGHTCYAN="" +F_LIGHTYELLOW="" +B_DARKBLUE="" +F_BRIGHTYELLOW="" +F_DARKGREY="" +F_BRIGHTGREEN="" +F_BRIGHTORANGE="" +F_MIDGREEN="" +F_PINK="" +F_BRIGHTPINK="" +F_VIOLET="" +F_DARKRED="" +F_STEEL="" +CLR="" +BRED="" +BGRN="" + +#ARROW="â–º" +ARROW=">" +PRIMARY_COLOUR="${F_BRIGHTYELLOW}" +COLON="${F_DARKGREY}:${CLR}" +NA="${F_DARKGREY}N/A${CLR}" + +section() { + TITLE="$1" + TEXT="$2" + + #ARROW_COLOUR="${F_LIGHTYELLOW}" + ARROW_COLOUR="" + TITLE_COLOUR="${F_LIGHTCYAN}" + + echo " ${ARROW_COLOUR}${ARROW}${CLR} ${TITLE_COLOUR}${TITLE}${CLR}|${TEXT}" +} + +subsection() { + TEXT="$1" + + echo " ${F_DARKGREY}>${CLR}|${TEXT}" +} + +format() { + COLOUR="$1" + TEXT="$2" + + echo "${COLOUR}${TEXT}${CLR}" +} + +in_brackets() { + TEXT="$1" + + echo "${F_DARKGREY}(${CLR}${TEXT}${F_DARKGREY})${CLR}" +} + +prefix() { + COLOUR="$1" + PREFIX="$2" + TEXT="$3" + + echo "${COLOUR}${PREFIX}${COLON} ${TEXT}" +} + +show_hostname() { + HOSTNAME="$(format ${F_BRIGHTYELLOW} $(hostname -f))" + section "Host" "${HOSTNAME}" +} + +show_os() { + OS_DESCRIPTION=$(lsb_release -s -d) + + COLOUR_1=${F_BRIGHTORANGE} + COLOUR_2=${F_ORANGE2} + COLOUR_3=${F_ORANGE} + + DESCRIPTION=$(format ${COLOUR_1} "${OS_DESCRIPTION}") + RELEASE=$(format ${COLOUR_2} "$(lsb_release -s -r)") + CODENAME=$(format ${COLOUR_2} "$(lsb_release -s -c)") + KERNEL=$(format ${COLOUR_2} "$(uname -r)") + ARCH=$(format ${COLOUR_2} "$(uname -m)") + + OS_RELEASE=$(prefix ${COLOUR_3} Release "${RELEASE}") + OS_CODENAME=$(in_brackets ${CODENAME}) + OS_KERNEL=$(prefix ${COLOUR_3} "Kernel " "${KERNEL}") + OS_ARCH=$(in_brackets ${ARCH}) + + section "OS" "${DESCRIPTION}" + subsection "${OS_RELEASE} ${OS_CODENAME}" + subsection "${OS_KERNEL} ${OS_ARCH}" +} + +show_net() { + INET_DEFAULT=$(ip ro show default | grep -Po "dev \w+" | head -n1 | awk '{ print $2 }') + INET6_DEFAULT=$(ip -6 ro show default | grep -Po "dev \w+" | head -n1 | awk '{ print $2 }') + + MAC_ADDR=$(ip addr show dev ${INET_DEFAULT} | grep "link/ether" | awk '{ print $2 }') + INET_ADDR=$(ip addr show dev ${INET_DEFAULT} | grep "inet " | grep "scope global" | awk '{ print $2 }' | head -n1) + INET6_ADDR=$(ip addr show dev ${INET6_DEFAULT} | grep "inet6 " | grep "scope global" | awk '{ print $2 }' | head -n1) + + if [[ -z ${INET6_ADDR} ]]; then + INET6_ADDR=${NA} + fi + + PRIMARY_IFACE="$(format ${F_LIGHTBLUE} ${INET_DEFAULT})" + PRIMARY_IP4="$(format ${F_LIGHTBLUE} ${INET_ADDR})" + PRIMARY_IP6="$(format ${F_LIGHTBLUE} ${INET6_ADDR})" + PRIMARY_MAC="$(format ${F_LIGHTBLUE} ${MAC_ADDR})" + + PRIMARY="$(prefix ${F_STEEL} NIC ${PRIMARY_IFACE})" + MAC="$(in_brackets ${PRIMARY_MAC})" + + section "Net" "${PRIMARY} ${MAC}" + subsection "$(prefix ${F_STEEL} IP4 ${PRIMARY_IP4})" + subsection "$(prefix ${F_STEEL} IP6 ${PRIMARY_IP6})" +} + +show_hardware() { + if [[ "$(lsb_release -i)" =~ "Raspbian" ]]; then + SYSINFO="$(pinout | egrep -o '(Pi Model [0-9][A-Z]\+?\s? V[0-9]\.[0-9])')" + + SYSTEM=$(format ${F_VIOLET} "${SYSINFO}") + else + MANUFACTURER=$(dmidecode -s system-manufacturer) + PRODUCT_NAME=$(dmidecode -s system-product-name) + + SYSINFO=$(format ${F_VIOLET} "${MANUFACTURER}") + + if [[ -z ${MANUFACTURER} ]]; then + SYSTEM=${NA} + else + if [[ ! -z ${PRODUCT_NAME} ]]; then + PRODUCT=$(format ${F_VIOLET} "${PRODUCT_NAME}") + PRODUCT_DISPLAY=$(in_brackets "${PRODUCT}") + SYSINFO="${SYSINFO} ${PRODUCT_DISPLAY}" + fi + + SYSTEM=$(format ${F_VIOLET} "${SYSINFO}") + fi + fi + + MEM_B=$(cat /proc/meminfo | grep MemTotal | awk '{ print $2 }') + let MEM_MB="${MEM_B}/1024" + MEMORY=$(format ${F_VIOLET} "${MEM_MB}M") + + PROCESSOR=$(format ${F_VIOLET} "$(cat /proc/cpuinfo | grep 'model name' | head -n1 | awk -F': ' '{ print $2 }')") + CPUS=$(in_brackets $(format ${F_VIOLET} x$(cat /proc/cpuinfo | grep processor | wc -l))) + + DISKS=$(lsblk | grep disk | awk '{ print $1"|"$4 }') + + STORAGE="" + + for DISK in ${DISKS}; do + DEVICE=$(format ${F_VIOLET} $(echo ${DISK} | cut -f1 -d"|")) + SIZE=$(in_brackets $(format ${F_VIOLET} $(echo ${DISK} | cut -f2 -d"|"))) + + STORAGE="${STORAGE}${DEVICE} ${SIZE} " + done + + if [[ -z ${STORAGE} ]]; then + STORAGE=${NA} + fi + + SYS=$(prefix ${F_BRIGHTPINK} Sys "${SYSTEM}") + CPU=$(prefix ${F_BRIGHTPINK} CPU "${PROCESSOR} ${CPUS}") + MEM=$(prefix ${F_BRIGHTPINK} Mem "${MEMORY}") + DSK=$(prefix ${F_BRIGHTPINK} Disk "${STORAGE}") + + section "H/w" "${SYS}" + subsection "${CPU}" + subsection "${MEM} ${DSK}" +} + +show_uptime() { + COLOUR_1=${F_BRIGHTGREEN} + COLOUR_2=${F_GREEN2} + COLOUR_3=${F_GREEN} + + AGO=$(format ${COLOUR_1} "$(uptime -p | cut -c4-)") + BOOT=$(format ${COLOUR_2} "$(uptime -s)") + BUILT=$(format ${COLOUR_2} "$(stat / | grep "Birth" | sed 's/Birth: //g' | cut -b 2-20)") + BOOT_DATE=$(prefix ${COLOUR_3} Booted "${BOOT}") + BUILT_DATE=$(prefix ${COLOUR_3} "Built " "${BUILT}") + + section "Up" "${AGO}" + subsection "${BOOT_DATE}" + subsection "${BUILT_DATE}" +} + +sections() { + show_hostname + show_os + show_uptime + show_net + show_hardware +} + +cat < Last Ansible run: {{ template_run_date.strftime("%Y-%m-%d %H:%M:%S") }} + diff --git a/ansible/roles/general/templates/etc/ntp.conf.j2 b/ansible/roles/general/templates/etc/ntp.conf.j2 new file mode 100644 index 0000000..a948515 --- /dev/null +++ b/ansible/roles/general/templates/etc/ntp.conf.j2 @@ -0,0 +1,16 @@ +driftfile /var/lib/ntp/ntp.drift +leapfile /usr/share/zoneinfo/leap-seconds.list + +statistics loopstats peerstats clockstats + +filegen loopstats file loopstats type day enable +filegen peerstats file peerstats type day enable +filegen clockstats file clockstats type day enable + +server {{ base.ntp.server }} + +restrict -4 default kod notrap nomodify nopeer noquery limited +restrict -6 default kod notrap nomodify nopeer noquery limited +restrict 127.0.0.1 +restrict ::1 +restrict source notrap nomodify noquery diff --git a/ansible/roles/general/templates/etc/ssh/sshd_config.j2 b/ansible/roles/general/templates/etc/ssh/sshd_config.j2 new file mode 100644 index 0000000..72c43dc --- /dev/null +++ b/ansible/roles/general/templates/etc/ssh/sshd_config.j2 @@ -0,0 +1,89 @@ +# Host: {{ inventory_hostname }} +# Built from templates/etc/ssh/sshd_config.j2 +# ------------------------------------------------------------------------------ + +Include /etc/ssh/sshd_config.d/*.conf + +#Port 22 +#AddressFamily any +#ListenAddress 0.0.0.0 +#ListenAddress :: + +#HostKey /etc/ssh/ssh_host_rsa_key +#HostKey /etc/ssh/ssh_host_ecdsa_key +#HostKey /etc/ssh/ssh_host_ed25519_key + +# Ciphers and keying +#RekeyLimit default none + +# Logging +#SyslogFacility AUTH +#LogLevel INFO + +# Authentication: +#LoginGraceTime 2m +PermitRootLogin {{ sshd.permit_root_login }} +#StrictModes yes +#MaxAuthTries 6 +#MaxSessions 10 + +#PubkeyAuthentication yes + +#AuthorizedPrincipalsFile none + +#AuthorizedKeysCommand none +#AuthorizedKeysCommandUser nobody + +#HostbasedAuthentication no +#IgnoreUserKnownHosts no +#IgnoreRhosts yes + +# To disable tunneled clear text passwords, change to no here! +#PasswordAuthentication yes +#PermitEmptyPasswords no + +KbdInteractiveAuthentication no + +# Kerberos options +#KerberosAuthentication no +#KerberosOrLocalPasswd yes +#KerberosTicketCleanup yes +#KerberosGetAFSToken no + +# GSSAPI options +#GSSAPIAuthentication no +#GSSAPICleanupCredentials yes +#GSSAPIStrictAcceptorCheck yes +#GSSAPIKeyExchange no + +UsePAM yes + +AllowAgentForwarding {{ sshd.forwarding.agent }} +AllowTcpForwarding {{ sshd.forwarding.tcp }} +GatewayPorts {{ sshd.forwarding.gateway }} +X11Forwarding {{ sshd.forwarding.x11 }} +#X11DisplayOffset 10 +#X11UseLocalhost yes +#PermitTTY yes +PrintMotd no +#PrintLastLog yes +#TCPKeepAlive yes +#PermitUserEnvironment no +#Compression delayed +#ClientAliveInterval 0 +#ClientAliveCountMax 3 +#UseDNS no +#PidFile /run/sshd.pid +#MaxStartups 10:30:100 +#PermitTunnel no +#ChrootDirectory none +#VersionAddendum none + +# no default banner path +#Banner none + +# Allow client to pass locale environment variables +AcceptEnv LANG LC_* + +# SFTP +Subsystem sftp /usr/lib/openssh/sftp-server diff --git a/ansible/roles/general/templates/etc/sudoers.d/ansible.j2 b/ansible/roles/general/templates/etc/sudoers.d/ansible.j2 new file mode 100644 index 0000000..e342a63 --- /dev/null +++ b/ansible/roles/general/templates/etc/sudoers.d/ansible.j2 @@ -0,0 +1 @@ +ansible ALL=NOPASSWD: ALL diff --git a/ansible/roles/ns/handlers/main.yml b/ansible/roles/ns/handlers/main.yml new file mode 100755 index 0000000..aca70b5 --- /dev/null +++ b/ansible/roles/ns/handlers/main.yml @@ -0,0 +1,15 @@ +--- +# Handler for the webtier: handlers are called by other plays. +# See http://docs.ansible.com/playbooks_intro.html for more information about handlers. + +- name: Restart bind + ansible.builtin.service: + name: bind + state: restarted + become: true + +- name: Restart firewalld + ansible.builtin.service: + name: firewalld + state: restarted + become: true diff --git a/ansible/roles/ns/tasks/main.yml b/ansible/roles/ns/tasks/main.yml new file mode 100755 index 0000000..69ee2d4 --- /dev/null +++ b/ansible/roles/ns/tasks/main.yml @@ -0,0 +1,2093 @@ +--- +- name: Apply ns config + ansible.builtin.import_role: + name: bertvv.bind + vars: + bind_allow_query: ["any"] + bind_listen_ipv4: ["any"] + bind_recursion: false + bind_zones: + - name: w5isp.com + create_reverse_zones: false + type: primary + primaries: + - 204.110.191.28 + name_servers: + - ns1.vntx.net. + - ns2.vntx.net. + - ns-global.kjsl.com. + hosts: + - name: w5isp.com. + ip: 204.110.191.8 + - name: vntx.net + create_reverse_zones: true + type: primary + primaries: + - 204.110.191.28 + name_servers: + - ns1.vntx.net. + - ns2.vntx.net. + - ns-global.kjsl.com. + networks: + - "204.110.188" + - "204.110.189" + - "204.110.190" + - "204.110.191" + hosts: + - name: ns1 + ip: 204.110.191.237 + - name: ns2 + ip: 204.110.191.28 + - name: 0.188.client + ip: 204.110.188.0 + - name: 1.188.client + ip: 204.110.188.1 + - name: 2.188.client + ip: 204.110.188.2 + - name: 3.188.client + ip: 204.110.188.3 + - name: 4.188.client + ip: 204.110.188.4 + - name: 5.188.client + ip: 204.110.188.5 + - name: 6.188.client + ip: 204.110.188.6 + - name: 7.188.client + ip: 204.110.188.7 + - name: 8.188.client + ip: 204.110.188.8 + - name: 9.188.client + ip: 204.110.188.9 + - name: 10.188.client + ip: 204.110.188.10 + - name: 11.188.client + ip: 204.110.188.11 + - name: 12.188.client + ip: 204.110.188.12 + - name: 13.188.client + ip: 204.110.188.13 + - name: 14.188.client + ip: 204.110.188.14 + - name: 15.188.client + ip: 204.110.188.15 + - name: 16.188.client + ip: 204.110.188.16 + - name: 17.188.client + ip: 204.110.188.17 + - name: 18.188.client + ip: 204.110.188.18 + - name: 19.188.client + ip: 204.110.188.19 + - name: 20.188.client + ip: 204.110.188.20 + - name: 21.188.client + ip: 204.110.188.21 + - name: 22.188.client + ip: 204.110.188.22 + - name: 23.188.client + ip: 204.110.188.23 + - name: 24.188.client + ip: 204.110.188.24 + - name: 25.188.client + ip: 204.110.188.25 + - name: 26.188.client + ip: 204.110.188.26 + - name: 27.188.client + ip: 204.110.188.27 + - name: 28.188.client + ip: 204.110.188.28 + - name: 29.188.client + ip: 204.110.188.29 + - name: 30.188.client + ip: 204.110.188.30 + - name: 31.188.client + ip: 204.110.188.31 + - name: 32.188.client + ip: 204.110.188.32 + - name: 33.188.client + ip: 204.110.188.33 + - name: 34.188.client + ip: 204.110.188.34 + - name: 35.188.client + ip: 204.110.188.35 + - name: 36.188.client + ip: 204.110.188.36 + - name: 37.188.client + ip: 204.110.188.37 + - name: 38.188.client + ip: 204.110.188.38 + - name: 39.188.client + ip: 204.110.188.39 + - name: 40.188.client + ip: 204.110.188.40 + - name: 41.188.client + ip: 204.110.188.41 + - name: 42.188.client + ip: 204.110.188.42 + - name: 43.188.client + ip: 204.110.188.43 + - name: 44.188.client + ip: 204.110.188.44 + - name: 45.188.client + ip: 204.110.188.45 + - name: 46.188.client + ip: 204.110.188.46 + - name: 47.188.client + ip: 204.110.188.47 + - name: 48.188.client + ip: 204.110.188.48 + - name: 49.188.client + ip: 204.110.188.49 + - name: 50.188.client + ip: 204.110.188.50 + - name: 51.188.client + ip: 204.110.188.51 + - name: 52.188.client + ip: 204.110.188.52 + - name: 53.188.client + ip: 204.110.188.53 + - name: 54.188.client + ip: 204.110.188.54 + - name: 55.188.client + ip: 204.110.188.55 + - name: 56.188.client + ip: 204.110.188.56 + - name: 57.188.client + ip: 204.110.188.57 + - name: 58.188.client + ip: 204.110.188.58 + - name: 59.188.client + ip: 204.110.188.59 + - name: 60.188.client + ip: 204.110.188.60 + - name: 61.188.client + ip: 204.110.188.61 + - name: 62.188.client + ip: 204.110.188.62 + - name: 63.188.client + ip: 204.110.188.63 + - name: 64.188.client + ip: 204.110.188.64 + - name: 65.188.client + ip: 204.110.188.65 + - name: 66.188.client + ip: 204.110.188.66 + - name: 67.188.client + ip: 204.110.188.67 + - name: 68.188.client + ip: 204.110.188.68 + - name: 69.188.client + ip: 204.110.188.69 + - name: 70.188.client + ip: 204.110.188.70 + - name: 71.188.client + ip: 204.110.188.71 + - name: 72.188.client + ip: 204.110.188.72 + - name: 73.188.client + ip: 204.110.188.73 + - name: 74.188.client + ip: 204.110.188.74 + - name: 75.188.client + ip: 204.110.188.75 + - name: 76.188.client + ip: 204.110.188.76 + - name: 77.188.client + ip: 204.110.188.77 + - name: 78.188.client + ip: 204.110.188.78 + - name: 79.188.client + ip: 204.110.188.79 + - name: 80.188.client + ip: 204.110.188.80 + - name: 81.188.client + ip: 204.110.188.81 + - name: 82.188.client + ip: 204.110.188.82 + - name: 83.188.client + ip: 204.110.188.83 + - name: 84.188.client + ip: 204.110.188.84 + - name: 85.188.client + ip: 204.110.188.85 + - name: 86.188.client + ip: 204.110.188.86 + - name: 87.188.client + ip: 204.110.188.87 + - name: 88.188.client + ip: 204.110.188.88 + - name: 89.188.client + ip: 204.110.188.89 + - name: 90.188.client + ip: 204.110.188.90 + - name: 91.188.client + ip: 204.110.188.91 + - name: 92.188.client + ip: 204.110.188.92 + - name: 93.188.client + ip: 204.110.188.93 + - name: 94.188.client + ip: 204.110.188.94 + - name: 95.188.client + ip: 204.110.188.95 + - name: 96.188.client + ip: 204.110.188.96 + - name: 97.188.client + ip: 204.110.188.97 + - name: 98.188.client + ip: 204.110.188.98 + - name: 99.188.client + ip: 204.110.188.99 + - name: 100.188.client + ip: 204.110.188.100 + - name: 101.188.client + ip: 204.110.188.101 + - name: 102.188.client + ip: 204.110.188.102 + - name: 103.188.client + ip: 204.110.188.103 + - name: 104.188.client + ip: 204.110.188.104 + - name: 105.188.client + ip: 204.110.188.105 + - name: 106.188.client + ip: 204.110.188.106 + - name: 107.188.client + ip: 204.110.188.107 + - name: 108.188.client + ip: 204.110.188.108 + - name: 109.188.client + ip: 204.110.188.109 + - name: 110.188.client + ip: 204.110.188.110 + - name: 111.188.client + ip: 204.110.188.111 + - name: 112.188.client + ip: 204.110.188.112 + - name: 113.188.client + ip: 204.110.188.113 + - name: 114.188.client + ip: 204.110.188.114 + - name: 115.188.client + ip: 204.110.188.115 + - name: 116.188.client + ip: 204.110.188.116 + - name: 117.188.client + ip: 204.110.188.117 + - name: 118.188.client + ip: 204.110.188.118 + - name: 119.188.client + ip: 204.110.188.119 + - name: 120.188.client + ip: 204.110.188.120 + - name: 121.188.client + ip: 204.110.188.121 + - name: 122.188.client + ip: 204.110.188.122 + - name: 123.188.client + ip: 204.110.188.123 + - name: 124.188.client + ip: 204.110.188.124 + - name: 125.188.client + ip: 204.110.188.125 + - name: 126.188.client + ip: 204.110.188.126 + - name: 127.188.client + ip: 204.110.188.127 + - name: 128.188.client + ip: 204.110.188.128 + - name: 129.188.client + ip: 204.110.188.129 + - name: 130.188.client + ip: 204.110.188.130 + - name: 131.188.client + ip: 204.110.188.131 + - name: 132.188.client + ip: 204.110.188.132 + - name: 133.188.client + ip: 204.110.188.133 + - name: 134.188.client + ip: 204.110.188.134 + - name: 135.188.client + ip: 204.110.188.135 + - name: 136.188.client + ip: 204.110.188.136 + - name: 137.188.client + ip: 204.110.188.137 + - name: 138.188.client + ip: 204.110.188.138 + - name: 139.188.client + ip: 204.110.188.139 + - name: 140.188.client + ip: 204.110.188.140 + - name: 141.188.client + ip: 204.110.188.141 + - name: 142.188.client + ip: 204.110.188.142 + - name: 143.188.client + ip: 204.110.188.143 + - name: 144.188.client + ip: 204.110.188.144 + - name: 145.188.client + ip: 204.110.188.145 + - name: 146.188.client + ip: 204.110.188.146 + - name: 147.188.client + ip: 204.110.188.147 + - name: 148.188.client + ip: 204.110.188.148 + - name: 149.188.client + ip: 204.110.188.149 + - name: 150.188.client + ip: 204.110.188.150 + - name: 151.188.client + ip: 204.110.188.151 + - name: 152.188.client + ip: 204.110.188.152 + - name: 153.188.client + ip: 204.110.188.153 + - name: 154.188.client + ip: 204.110.188.154 + - name: 155.188.client + ip: 204.110.188.155 + - name: 156.188.client + ip: 204.110.188.156 + - name: 157.188.client + ip: 204.110.188.157 + - name: 158.188.client + ip: 204.110.188.158 + - name: 159.188.client + ip: 204.110.188.159 + - name: 160.188.client + ip: 204.110.188.160 + - name: 161.188.client + ip: 204.110.188.161 + - name: 162.188.client + ip: 204.110.188.162 + - name: 163.188.client + ip: 204.110.188.163 + - name: 164.188.client + ip: 204.110.188.164 + - name: 165.188.client + ip: 204.110.188.165 + - name: 166.188.client + ip: 204.110.188.166 + - name: 167.188.client + ip: 204.110.188.167 + - name: 168.188.client + ip: 204.110.188.168 + - name: 169.188.client + ip: 204.110.188.169 + - name: 170.188.client + ip: 204.110.188.170 + - name: 171.188.client + ip: 204.110.188.171 + - name: 172.188.client + ip: 204.110.188.172 + - name: 173.188.client + ip: 204.110.188.173 + - name: 174.188.client + ip: 204.110.188.174 + - name: 175.188.client + ip: 204.110.188.175 + - name: 176.188.client + ip: 204.110.188.176 + - name: 177.188.client + ip: 204.110.188.177 + - name: 178.188.client + ip: 204.110.188.178 + - name: 179.188.client + ip: 204.110.188.179 + - name: 180.188.client + ip: 204.110.188.180 + - name: 181.188.client + ip: 204.110.188.181 + - name: 182.188.client + ip: 204.110.188.182 + - name: 183.188.client + ip: 204.110.188.183 + - name: 184.188.client + ip: 204.110.188.184 + - name: 185.188.client + ip: 204.110.188.185 + - name: 186.188.client + ip: 204.110.188.186 + - name: 187.188.client + ip: 204.110.188.187 + - name: 188.188.client + ip: 204.110.188.188 + - name: 189.188.client + ip: 204.110.188.189 + - name: 190.188.client + ip: 204.110.188.190 + - name: 191.188.client + ip: 204.110.188.191 + - name: 192.188.client + ip: 204.110.188.192 + - name: 193.188.client + ip: 204.110.188.193 + - name: 194.188.client + ip: 204.110.188.194 + - name: 195.188.client + ip: 204.110.188.195 + - name: 196.188.client + ip: 204.110.188.196 + - name: 197.188.client + ip: 204.110.188.197 + - name: 198.188.client + ip: 204.110.188.198 + - name: 199.188.client + ip: 204.110.188.199 + - name: 200.188.client + ip: 204.110.188.200 + - name: 201.188.client + ip: 204.110.188.201 + - name: 202.188.client + ip: 204.110.188.202 + - name: 203.188.client + ip: 204.110.188.203 + - name: 204.188.client + ip: 204.110.188.204 + - name: 205.188.client + ip: 204.110.188.205 + - name: 206.188.client + ip: 204.110.188.206 + - name: 207.188.client + ip: 204.110.188.207 + - name: 208.188.client + ip: 204.110.188.208 + - name: 209.188.client + ip: 204.110.188.209 + - name: 210.188.client + ip: 204.110.188.210 + - name: 211.188.client + ip: 204.110.188.211 + - name: 212.188.client + ip: 204.110.188.212 + - name: 213.188.client + ip: 204.110.188.213 + - name: 214.188.client + ip: 204.110.188.214 + - name: 215.188.client + ip: 204.110.188.215 + - name: 216.188.client + ip: 204.110.188.216 + - name: 217.188.client + ip: 204.110.188.217 + - name: 218.188.client + ip: 204.110.188.218 + - name: 219.188.client + ip: 204.110.188.219 + - name: 220.188.client + ip: 204.110.188.220 + - name: 221.188.client + ip: 204.110.188.221 + - name: 222.188.client + ip: 204.110.188.222 + - name: 223.188.client + ip: 204.110.188.223 + - name: 224.188.client + ip: 204.110.188.224 + - name: 225.188.client + ip: 204.110.188.225 + - name: 226.188.client + ip: 204.110.188.226 + - name: 227.188.client + ip: 204.110.188.227 + - name: 228.188.client + ip: 204.110.188.228 + - name: 229.188.client + ip: 204.110.188.229 + - name: 230.188.client + ip: 204.110.188.230 + - name: 231.188.client + ip: 204.110.188.231 + - name: 232.188.client + ip: 204.110.188.232 + - name: 233.188.client + ip: 204.110.188.233 + - name: 234.188.client + ip: 204.110.188.234 + - name: 235.188.client + ip: 204.110.188.235 + - name: 236.188.client + ip: 204.110.188.236 + - name: 237.188.client + ip: 204.110.188.237 + - name: 238.188.client + ip: 204.110.188.238 + - name: 239.188.client + ip: 204.110.188.239 + - name: 240.188.client + ip: 204.110.188.240 + - name: 241.188.client + ip: 204.110.188.241 + - name: 242.188.client + ip: 204.110.188.242 + - name: 243.188.client + ip: 204.110.188.243 + - name: 244.188.client + ip: 204.110.188.244 + - name: 245.188.client + ip: 204.110.188.245 + - name: 246.188.client + ip: 204.110.188.246 + - name: 247.188.client + ip: 204.110.188.247 + - name: 248.188.client + ip: 204.110.188.248 + - name: 249.188.client + ip: 204.110.188.249 + - name: 250.188.client + ip: 204.110.188.250 + - name: 251.188.client + ip: 204.110.188.251 + - name: 252.188.client + ip: 204.110.188.252 + - name: 253.188.client + ip: 204.110.188.253 + - name: 254.188.client + ip: 204.110.188.254 + - name: 255.188.client + ip: 204.110.188.255 + - name: 0.189.client + ip: 204.110.189.0 + - name: 1.189.client + ip: 204.110.189.1 + - name: 2.189.client + ip: 204.110.189.2 + - name: 3.189.client + ip: 204.110.189.3 + - name: 4.189.client + ip: 204.110.189.4 + - name: 5.189.client + ip: 204.110.189.5 + - name: 6.189.client + ip: 204.110.189.6 + - name: 7.189.client + ip: 204.110.189.7 + - name: 8.189.client + ip: 204.110.189.8 + - name: 9.189.client + ip: 204.110.189.9 + - name: 10.189.client + ip: 204.110.189.10 + - name: 11.189.client + ip: 204.110.189.11 + - name: 12.189.client + ip: 204.110.189.12 + - name: 13.189.client + ip: 204.110.189.13 + - name: 14.189.client + ip: 204.110.189.14 + - name: 15.189.client + ip: 204.110.189.15 + - name: 16.189.client + ip: 204.110.189.16 + - name: 17.189.client + ip: 204.110.189.17 + - name: 18.189.client + ip: 204.110.189.18 + - name: 19.189.client + ip: 204.110.189.19 + - name: 20.189.client + ip: 204.110.189.20 + - name: 21.189.client + ip: 204.110.189.21 + - name: 22.189.client + ip: 204.110.189.22 + - name: 23.189.client + ip: 204.110.189.23 + - name: 24.189.client + ip: 204.110.189.24 + - name: 25.189.client + ip: 204.110.189.25 + - name: 26.189.client + ip: 204.110.189.26 + - name: 27.189.client + ip: 204.110.189.27 + - name: 28.189.client + ip: 204.110.189.28 + - name: 29.189.client + ip: 204.110.189.29 + - name: 30.189.client + ip: 204.110.189.30 + - name: 31.189.client + ip: 204.110.189.31 + - name: 32.189.client + ip: 204.110.189.32 + - name: 33.189.client + ip: 204.110.189.33 + - name: 34.189.client + ip: 204.110.189.34 + - name: 35.189.client + ip: 204.110.189.35 + - name: 36.189.client + ip: 204.110.189.36 + - name: 37.189.client + ip: 204.110.189.37 + - name: 38.189.client + ip: 204.110.189.38 + - name: 39.189.client + ip: 204.110.189.39 + - name: 40.189.client + ip: 204.110.189.40 + - name: 41.189.client + ip: 204.110.189.41 + - name: 42.189.client + ip: 204.110.189.42 + - name: 43.189.client + ip: 204.110.189.43 + - name: 44.189.client + ip: 204.110.189.44 + - name: 45.189.client + ip: 204.110.189.45 + - name: 46.189.client + ip: 204.110.189.46 + - name: 47.189.client + ip: 204.110.189.47 + - name: 48.189.client + ip: 204.110.189.48 + - name: 49.189.client + ip: 204.110.189.49 + - name: 50.189.client + ip: 204.110.189.50 + - name: 51.189.client + ip: 204.110.189.51 + - name: 52.189.client + ip: 204.110.189.52 + - name: 53.189.client + ip: 204.110.189.53 + - name: 54.189.client + ip: 204.110.189.54 + - name: 55.189.client + ip: 204.110.189.55 + - name: 56.189.client + ip: 204.110.189.56 + - name: 57.189.client + ip: 204.110.189.57 + - name: 58.189.client + ip: 204.110.189.58 + - name: 59.189.client + ip: 204.110.189.59 + - name: 60.189.client + ip: 204.110.189.60 + - name: 61.189.client + ip: 204.110.189.61 + - name: 62.189.client + ip: 204.110.189.62 + - name: 63.189.client + ip: 204.110.189.63 + - name: 64.189.client + ip: 204.110.189.64 + - name: 65.189.client + ip: 204.110.189.65 + - name: 66.189.client + ip: 204.110.189.66 + - name: 67.189.client + ip: 204.110.189.67 + - name: 68.189.client + ip: 204.110.189.68 + - name: 69.189.client + ip: 204.110.189.69 + - name: 70.189.client + ip: 204.110.189.70 + - name: 71.189.client + ip: 204.110.189.71 + - name: 72.189.client + ip: 204.110.189.72 + - name: 73.189.client + ip: 204.110.189.73 + - name: 74.189.client + ip: 204.110.189.74 + - name: 75.189.client + ip: 204.110.189.75 + - name: 76.189.client + ip: 204.110.189.76 + - name: 77.189.client + ip: 204.110.189.77 + - name: 78.189.client + ip: 204.110.189.78 + - name: 79.189.client + ip: 204.110.189.79 + - name: 80.189.client + ip: 204.110.189.80 + - name: 81.189.client + ip: 204.110.189.81 + - name: 82.189.client + ip: 204.110.189.82 + - name: 83.189.client + ip: 204.110.189.83 + - name: 84.189.client + ip: 204.110.189.84 + - name: 85.189.client + ip: 204.110.189.85 + - name: 86.189.client + ip: 204.110.189.86 + - name: 87.189.client + ip: 204.110.189.87 + - name: 88.189.client + ip: 204.110.189.88 + - name: 89.189.client + ip: 204.110.189.89 + - name: 90.189.client + ip: 204.110.189.90 + - name: 91.189.client + ip: 204.110.189.91 + - name: 92.189.client + ip: 204.110.189.92 + - name: 93.189.client + ip: 204.110.189.93 + - name: 94.189.client + ip: 204.110.189.94 + - name: 95.189.client + ip: 204.110.189.95 + - name: 96.189.client + ip: 204.110.189.96 + - name: 97.189.client + ip: 204.110.189.97 + - name: 98.189.client + ip: 204.110.189.98 + - name: 99.189.client + ip: 204.110.189.99 + - name: 100.189.client + ip: 204.110.189.100 + - name: 101.189.client + ip: 204.110.189.101 + - name: 102.189.client + ip: 204.110.189.102 + - name: 103.189.client + ip: 204.110.189.103 + - name: 104.189.client + ip: 204.110.189.104 + - name: 105.189.client + ip: 204.110.189.105 + - name: 106.189.client + ip: 204.110.189.106 + - name: 107.189.client + ip: 204.110.189.107 + - name: 108.189.client + ip: 204.110.189.108 + - name: 109.189.client + ip: 204.110.189.109 + - name: 110.189.client + ip: 204.110.189.110 + - name: 111.189.client + ip: 204.110.189.111 + - name: 112.189.client + ip: 204.110.189.112 + - name: 113.189.client + ip: 204.110.189.113 + - name: 114.189.client + ip: 204.110.189.114 + - name: 115.189.client + ip: 204.110.189.115 + - name: 116.189.client + ip: 204.110.189.116 + - name: 117.189.client + ip: 204.110.189.117 + - name: 118.189.client + ip: 204.110.189.118 + - name: 119.189.client + ip: 204.110.189.119 + - name: 120.189.client + ip: 204.110.189.120 + - name: 121.189.client + ip: 204.110.189.121 + - name: 122.189.client + ip: 204.110.189.122 + - name: 123.189.client + ip: 204.110.189.123 + - name: 124.189.client + ip: 204.110.189.124 + - name: 125.189.client + ip: 204.110.189.125 + - name: 126.189.client + ip: 204.110.189.126 + - name: 127.189.client + ip: 204.110.189.127 + - name: 128.189.client + ip: 204.110.189.128 + - name: 129.189.client + ip: 204.110.189.129 + - name: 130.189.client + ip: 204.110.189.130 + - name: 131.189.client + ip: 204.110.189.131 + - name: 132.189.client + ip: 204.110.189.132 + - name: 133.189.client + ip: 204.110.189.133 + - name: 134.189.client + ip: 204.110.189.134 + - name: 135.189.client + ip: 204.110.189.135 + - name: 136.189.client + ip: 204.110.189.136 + - name: 137.189.client + ip: 204.110.189.137 + - name: 138.189.client + ip: 204.110.189.138 + - name: 139.189.client + ip: 204.110.189.139 + - name: 140.189.client + ip: 204.110.189.140 + - name: 141.189.client + ip: 204.110.189.141 + - name: 142.189.client + ip: 204.110.189.142 + - name: 143.189.client + ip: 204.110.189.143 + - name: 144.189.client + ip: 204.110.189.144 + - name: 145.189.client + ip: 204.110.189.145 + - name: 146.189.client + ip: 204.110.189.146 + - name: 147.189.client + ip: 204.110.189.147 + - name: 148.189.client + ip: 204.110.189.148 + - name: 149.189.client + ip: 204.110.189.149 + - name: 150.189.client + ip: 204.110.189.150 + - name: 151.189.client + ip: 204.110.189.151 + - name: 152.189.client + ip: 204.110.189.152 + - name: 153.189.client + ip: 204.110.189.153 + - name: 154.189.client + ip: 204.110.189.154 + - name: 155.189.client + ip: 204.110.189.155 + - name: 156.189.client + ip: 204.110.189.156 + - name: 157.189.client + ip: 204.110.189.157 + - name: 158.189.client + ip: 204.110.189.158 + - name: 159.189.client + ip: 204.110.189.159 + - name: 160.189.client + ip: 204.110.189.160 + - name: 161.189.client + ip: 204.110.189.161 + - name: 162.189.client + ip: 204.110.189.162 + - name: 163.189.client + ip: 204.110.189.163 + - name: 164.189.client + ip: 204.110.189.164 + - name: 165.189.client + ip: 204.110.189.165 + - name: 166.189.client + ip: 204.110.189.166 + - name: 167.189.client + ip: 204.110.189.167 + - name: 168.189.client + ip: 204.110.189.168 + - name: 169.189.client + ip: 204.110.189.169 + - name: 170.189.client + ip: 204.110.189.170 + - name: 171.189.client + ip: 204.110.189.171 + - name: 172.189.client + ip: 204.110.189.172 + - name: 173.189.client + ip: 204.110.189.173 + - name: 174.189.client + ip: 204.110.189.174 + - name: 175.189.client + ip: 204.110.189.175 + - name: 176.189.client + ip: 204.110.189.176 + - name: 177.189.client + ip: 204.110.189.177 + - name: 178.189.client + ip: 204.110.189.178 + - name: 179.189.client + ip: 204.110.189.179 + - name: 180.189.client + ip: 204.110.189.180 + - name: 181.189.client + ip: 204.110.189.181 + - name: 182.189.client + ip: 204.110.189.182 + - name: 183.189.client + ip: 204.110.189.183 + - name: 184.189.client + ip: 204.110.189.184 + - name: 185.189.client + ip: 204.110.189.185 + - name: 186.189.client + ip: 204.110.189.186 + - name: 187.189.client + ip: 204.110.189.187 + - name: 188.189.client + ip: 204.110.189.188 + - name: 189.189.client + ip: 204.110.189.189 + - name: 190.189.client + ip: 204.110.189.190 + - name: 191.189.client + ip: 204.110.189.191 + - name: 192.189.client + ip: 204.110.189.192 + - name: 193.189.client + ip: 204.110.189.193 + - name: 194.189.client + ip: 204.110.189.194 + - name: 195.189.client + ip: 204.110.189.195 + - name: 196.189.client + ip: 204.110.189.196 + - name: 197.189.client + ip: 204.110.189.197 + - name: 198.189.client + ip: 204.110.189.198 + - name: 199.189.client + ip: 204.110.189.199 + - name: 199.189.client + ip: 204.110.189.199 + - name: 200.189.client + ip: 204.110.189.200 + - name: 201.189.client + ip: 204.110.189.201 + - name: 202.189.client + ip: 204.110.189.202 + - name: 203.189.client + ip: 204.110.189.203 + - name: 204.189.client + ip: 204.110.189.204 + - name: 205.189.client + ip: 204.110.189.205 + - name: 206.189.client + ip: 204.110.189.206 + - name: 207.189.client + ip: 204.110.189.207 + - name: 208.189.client + ip: 204.110.189.208 + - name: 209.189.client + ip: 204.110.189.209 + - name: 210.189.client + ip: 204.110.189.210 + - name: 211.189.client + ip: 204.110.189.211 + - name: 212.189.client + ip: 204.110.189.212 + - name: 213.189.client + ip: 204.110.189.213 + - name: 214.189.client + ip: 204.110.189.214 + - name: 215.189.client + ip: 204.110.189.215 + - name: 216.189.client + ip: 204.110.189.216 + - name: 217.189.client + ip: 204.110.189.217 + - name: 218.189.client + ip: 204.110.189.218 + - name: 219.189.client + ip: 204.110.189.219 + - name: 220.189.client + ip: 204.110.189.220 + - name: 221.189.client + ip: 204.110.189.221 + - name: 222.189.client + ip: 204.110.189.222 + - name: 223.189.client + ip: 204.110.189.223 + - name: 224.189.client + ip: 204.110.189.224 + - name: 225.189.client + ip: 204.110.189.225 + - name: 226.189.client + ip: 204.110.189.226 + - name: 227.189.client + ip: 204.110.189.227 + - name: 228.189.client + ip: 204.110.189.228 + - name: 229.189.client + ip: 204.110.189.229 + - name: 230.189.client + ip: 204.110.189.230 + - name: 231.189.client + ip: 204.110.189.231 + - name: 232.189.client + ip: 204.110.189.232 + - name: 233.189.client + ip: 204.110.189.233 + - name: 234.189.client + ip: 204.110.189.234 + - name: 235.189.client + ip: 204.110.189.235 + - name: 236.189.client + ip: 204.110.189.236 + - name: 237.189.client + ip: 204.110.189.237 + - name: 238.189.client + ip: 204.110.189.238 + - name: 239.189.client + ip: 204.110.189.239 + - name: 240.189.client + ip: 204.110.189.240 + - name: 241.189.client + ip: 204.110.189.241 + - name: 242.189.client + ip: 204.110.189.242 + - name: 243.189.client + ip: 204.110.189.243 + - name: 244.189.client + ip: 204.110.189.244 + - name: 245.189.client + ip: 204.110.189.245 + - name: 246.189.client + ip: 204.110.189.246 + - name: 247.189.client + ip: 204.110.189.247 + - name: 248.189.client + ip: 204.110.189.248 + - name: 249.189.client + ip: 204.110.189.249 + - name: 250.189.client + ip: 204.110.189.250 + - name: 251.189.client + ip: 204.110.189.251 + - name: 252.189.client + ip: 204.110.189.252 + - name: 253.189.client + ip: 204.110.189.253 + - name: 254.189.client + ip: 204.110.189.254 + - name: 0.190.client + ip: 204.110.190.0 + - name: 1.190.client + ip: 204.110.190.1 + - name: 2.190.client + ip: 204.110.190.2 + - name: 3.190.client + ip: 204.110.190.3 + - name: 4.190.client + ip: 204.110.190.4 + - name: 5.190.client + ip: 204.110.190.5 + - name: 6.190.client + ip: 204.110.190.6 + - name: 7.190.client + ip: 204.110.190.7 + - name: 8.190.client + ip: 204.110.190.8 + - name: 9.190.client + ip: 204.110.190.9 + - name: 10.190.client + ip: 204.110.190.10 + - name: 11.190.client + ip: 204.110.190.11 + - name: 12.190.client + ip: 204.110.190.12 + - name: 13.190.client + ip: 204.110.190.13 + - name: 14.190.client + ip: 204.110.190.14 + - name: 15.190.client + ip: 204.110.190.15 + - name: 16.190.client + ip: 204.110.190.16 + - name: 17.190.client + ip: 204.110.190.17 + - name: 18.190.client + ip: 204.110.190.18 + - name: 19.190.client + ip: 204.110.190.19 + - name: 20.190.client + ip: 204.110.190.20 + - name: 21.190.client + ip: 204.110.190.21 + - name: 22.190.client + ip: 204.110.190.22 + - name: 23.190.client + ip: 204.110.190.23 + - name: 24.190.client + ip: 204.110.190.24 + - name: 25.190.client + ip: 204.110.190.25 + - name: 26.190.client + ip: 204.110.190.26 + - name: 27.190.client + ip: 204.110.190.27 + - name: 28.190.client + ip: 204.110.190.28 + - name: 29.190.client + ip: 204.110.190.29 + - name: 30.190.client + ip: 204.110.190.30 + - name: 31.190.client + ip: 204.110.190.31 + - name: 32.190.client + ip: 204.110.190.32 + - name: 33.190.client + ip: 204.110.190.33 + - name: 34.190.client + ip: 204.110.190.34 + - name: 35.190.client + ip: 204.110.190.35 + - name: 36.190.client + ip: 204.110.190.36 + - name: 37.190.client + ip: 204.110.190.37 + - name: 38.190.client + ip: 204.110.190.38 + - name: 39.190.client + ip: 204.110.190.39 + - name: 40.190.client + ip: 204.110.190.40 + - name: 41.190.client + ip: 204.110.190.41 + - name: 42.190.client + ip: 204.110.190.42 + - name: 43.190.client + ip: 204.110.190.43 + - name: 44.190.client + ip: 204.110.190.44 + - name: 45.190.client + ip: 204.110.190.45 + - name: 46.190.client + ip: 204.110.190.46 + - name: 47.190.client + ip: 204.110.190.47 + - name: 48.190.client + ip: 204.110.190.48 + - name: 49.190.client + ip: 204.110.190.49 + - name: 50.190.client + ip: 204.110.190.50 + - name: 51.190.client + ip: 204.110.190.51 + - name: 52.190.client + ip: 204.110.190.52 + - name: 53.190.client + ip: 204.110.190.53 + - name: 54.190.client + ip: 204.110.190.54 + - name: 55.190.client + ip: 204.110.190.55 + - name: 56.190.client + ip: 204.110.190.56 + - name: 57.190.client + ip: 204.110.190.57 + - name: 58.190.client + ip: 204.110.190.58 + - name: 59.190.client + ip: 204.110.190.59 + - name: 60.190.client + ip: 204.110.190.60 + - name: 61.190.client + ip: 204.110.190.61 + - name: 62.190.client + ip: 204.110.190.62 + - name: 63.190.client + ip: 204.110.190.63 + - name: 64.190.client + ip: 204.110.190.64 + - name: 65.190.client + ip: 204.110.190.65 + - name: 66.190.client + ip: 204.110.190.66 + - name: 67.190.client + ip: 204.110.190.67 + - name: 68.190.client + ip: 204.110.190.68 + - name: 69.190.client + ip: 204.110.190.69 + - name: 70.190.client + ip: 204.110.190.70 + - name: 71.190.client + ip: 204.110.190.71 + - name: 72.190.client + ip: 204.110.190.72 + - name: 73.190.client + ip: 204.110.190.73 + - name: 74.190.client + ip: 204.110.190.74 + - name: 75.190.client + ip: 204.110.190.75 + - name: 76.190.client + ip: 204.110.190.76 + - name: 77.190.client + ip: 204.110.190.77 + - name: 78.190.client + ip: 204.110.190.78 + - name: 79.190.client + ip: 204.110.190.79 + - name: 80.190.client + ip: 204.110.190.80 + - name: 81.190.client + ip: 204.110.190.81 + - name: 82.190.client + ip: 204.110.190.82 + - name: 83.190.client + ip: 204.110.190.83 + - name: 84.190.client + ip: 204.110.190.84 + - name: 85.190.client + ip: 204.110.190.85 + - name: 86.190.client + ip: 204.110.190.86 + - name: 87.190.client + ip: 204.110.190.87 + - name: 88.190.client + ip: 204.110.190.88 + - name: 89.190.client + ip: 204.110.190.89 + - name: 90.190.client + ip: 204.110.190.90 + - name: 91.190.client + ip: 204.110.190.91 + - name: 92.190.client + ip: 204.110.190.92 + - name: 93.190.client + ip: 204.110.190.93 + - name: 94.190.client + ip: 204.110.190.94 + - name: 95.190.client + ip: 204.110.190.95 + - name: 96.190.client + ip: 204.110.190.96 + - name: 97.190.client + ip: 204.110.190.97 + - name: 98.190.client + ip: 204.110.190.98 + - name: 99.190.client + ip: 204.110.190.99 + - name: 100.190.client + ip: 204.110.190.100 + - name: 101.190.client + ip: 204.110.190.101 + - name: 102.190.client + ip: 204.110.190.102 + - name: 103.190.client + ip: 204.110.190.103 + - name: 104.190.client + ip: 204.110.190.104 + - name: 105.190.client + ip: 204.110.190.105 + - name: 106.190.client + ip: 204.110.190.106 + - name: 107.190.client + ip: 204.110.190.107 + - name: 108.190.client + ip: 204.110.190.108 + - name: 109.190.client + ip: 204.110.190.109 + - name: 110.190.client + ip: 204.110.190.110 + - name: 111.190.client + ip: 204.110.190.111 + - name: 112.190.client + ip: 204.110.190.112 + - name: 113.190.client + ip: 204.110.190.113 + - name: 114.190.client + ip: 204.110.190.114 + - name: 115.190.client + ip: 204.110.190.115 + - name: 116.190.client + ip: 204.110.190.116 + - name: 117.190.client + ip: 204.110.190.117 + - name: 118.190.client + ip: 204.110.190.118 + - name: 119.190.client + ip: 204.110.190.119 + - name: 120.190.client + ip: 204.110.190.120 + - name: 121.190.client + ip: 204.110.190.121 + - name: 122.190.client + ip: 204.110.190.122 + - name: 123.190.client + ip: 204.110.190.123 + - name: 124.190.client + ip: 204.110.190.124 + - name: 125.190.client + ip: 204.110.190.125 + - name: 126.190.client + ip: 204.110.190.126 + - name: 127.190.client + ip: 204.110.190.127 + - name: 128.190.client + ip: 204.110.190.128 + - name: 129.190.client + ip: 204.110.190.129 + - name: 130.190.client + ip: 204.110.190.130 + - name: 131.190.client + ip: 204.110.190.131 + - name: 132.190.client + ip: 204.110.190.132 + - name: 133.190.client + ip: 204.110.190.133 + - name: 134.190.client + ip: 204.110.190.134 + - name: 135.190.client + ip: 204.110.190.135 + - name: 136.190.client + ip: 204.110.190.136 + - name: 137.190.client + ip: 204.110.190.137 + - name: 138.190.client + ip: 204.110.190.138 + - name: 139.190.client + ip: 204.110.190.139 + - name: 140.190.client + ip: 204.110.190.140 + - name: 141.190.client + ip: 204.110.190.141 + - name: 142.190.client + ip: 204.110.190.142 + - name: 143.190.client + ip: 204.110.190.143 + - name: 144.190.client + ip: 204.110.190.144 + - name: 145.190.client + ip: 204.110.190.145 + - name: 146.190.client + ip: 204.110.190.146 + - name: 147.190.client + ip: 204.110.190.147 + - name: 148.190.client + ip: 204.110.190.148 + - name: 149.190.client + ip: 204.110.190.149 + - name: 150.190.client + ip: 204.110.190.150 + - name: 151.190.client + ip: 204.110.190.151 + - name: 152.190.client + ip: 204.110.190.152 + - name: 153.190.client + ip: 204.110.190.153 + - name: 154.190.client + ip: 204.110.190.154 + - name: 155.190.client + ip: 204.110.190.155 + - name: 156.190.client + ip: 204.110.190.156 + - name: 157.190.client + ip: 204.110.190.157 + - name: 158.190.client + ip: 204.110.190.158 + - name: 159.190.client + ip: 204.110.190.159 + - name: 160.190.client + ip: 204.110.190.160 + - name: 161.190.client + ip: 204.110.190.161 + - name: 162.190.client + ip: 204.110.190.162 + - name: 163.190.client + ip: 204.110.190.163 + - name: 164.190.client + ip: 204.110.190.164 + - name: 165.190.client + ip: 204.110.190.165 + - name: 166.190.client + ip: 204.110.190.166 + - name: 167.190.client + ip: 204.110.190.167 + - name: 168.190.client + ip: 204.110.190.168 + - name: 169.190.client + ip: 204.110.190.169 + - name: 170.190.client + ip: 204.110.190.170 + - name: 171.190.client + ip: 204.110.190.171 + - name: 172.190.client + ip: 204.110.190.172 + - name: 173.190.client + ip: 204.110.190.173 + - name: 174.190.client + ip: 204.110.190.174 + - name: 175.190.client + ip: 204.110.190.175 + - name: 176.190.client + ip: 204.110.190.176 + - name: 177.190.client + ip: 204.110.190.177 + - name: 178.190.client + ip: 204.110.190.178 + - name: 179.190.client + ip: 204.110.190.179 + - name: 180.190.client + ip: 204.110.190.180 + - name: 181.190.client + ip: 204.110.190.181 + - name: 182.190.client + ip: 204.110.190.182 + - name: 183.190.client + ip: 204.110.190.183 + - name: 184.190.client + ip: 204.110.190.184 + - name: 185.190.client + ip: 204.110.190.185 + - name: 186.190.client + ip: 204.110.190.186 + - name: 187.190.client + ip: 204.110.190.187 + - name: 188.190.client + ip: 204.110.190.188 + - name: 189.190.client + ip: 204.110.190.189 + - name: 190.190.client + ip: 204.110.190.190 + - name: 191.190.client + ip: 204.110.190.191 + - name: 192.190.client + ip: 204.110.190.192 + - name: 193.190.client + ip: 204.110.190.193 + - name: 194.190.client + ip: 204.110.190.194 + - name: 195.190.client + ip: 204.110.190.195 + - name: 196.190.client + ip: 204.110.190.196 + - name: 197.190.client + ip: 204.110.190.197 + - name: 198.190.client + ip: 204.110.190.198 + - name: 199.190.client + ip: 204.110.190.199 + - name: 200.190.client + ip: 204.110.190.200 + - name: 201.190.client + ip: 204.110.190.201 + - name: 202.190.client + ip: 204.110.190.202 + - name: 203.190.client + ip: 204.110.190.203 + - name: 204.190.client + ip: 204.110.190.204 + - name: 205.190.client + ip: 204.110.190.205 + - name: 206.190.client + ip: 204.110.190.206 + - name: 207.190.client + ip: 204.110.190.207 + - name: 208.190.client + ip: 204.110.190.208 + - name: 209.190.client + ip: 204.110.190.209 + - name: 210.190.client + ip: 204.110.190.210 + - name: 211.190.client + ip: 204.110.190.211 + - name: 212.190.client + ip: 204.110.190.212 + - name: 213.190.client + ip: 204.110.190.213 + - name: 214.190.client + ip: 204.110.190.214 + - name: 215.190.client + ip: 204.110.190.215 + - name: 216.190.client + ip: 204.110.190.216 + - name: 217.190.client + ip: 204.110.190.217 + - name: 218.190.client + ip: 204.110.190.218 + - name: 219.190.client + ip: 204.110.190.219 + - name: 220.190.client + ip: 204.110.190.220 + - name: 221.190.client + ip: 204.110.190.221 + - name: 222.190.client + ip: 204.110.190.222 + - name: 223.190.client + ip: 204.110.190.223 + - name: 224.190.client + ip: 204.110.190.224 + - name: 225.190.client + ip: 204.110.190.225 + - name: 226.190.client + ip: 204.110.190.226 + - name: 227.190.client + ip: 204.110.190.227 + - name: 228.190.client + ip: 204.110.190.228 + - name: 229.190.client + ip: 204.110.190.229 + - name: 230.190.client + ip: 204.110.190.230 + - name: 231.190.client + ip: 204.110.190.231 + - name: 232.190.client + ip: 204.110.190.232 + - name: 233.190.client + ip: 204.110.190.233 + - name: 234.190.client + ip: 204.110.190.234 + - name: 235.190.client + ip: 204.110.190.235 + - name: 236.190.client + ip: 204.110.190.236 + - name: 237.190.client + ip: 204.110.190.237 + - name: 238.190.client + ip: 204.110.190.238 + - name: 239.190.client + ip: 204.110.190.239 + - name: 240.190.client + ip: 204.110.190.240 + - name: 241.190.client + ip: 204.110.190.241 + - name: 242.190.client + ip: 204.110.190.242 + - name: 243.190.client + ip: 204.110.190.243 + - name: 244.190.client + ip: 204.110.190.244 + - name: 245.190.client + ip: 204.110.190.245 + - name: 246.190.client + ip: 204.110.190.246 + - name: 247.190.client + ip: 204.110.190.247 + - name: 248.190.client + ip: 204.110.190.248 + - name: 249.190.client + ip: 204.110.190.249 + - name: 250.190.client + ip: 204.110.190.250 + - name: 251.190.client + ip: 204.110.190.251 + - name: 252.190.client + ip: 204.110.190.252 + - name: 253.190.client + ip: 204.110.190.253 + - name: 254.190.client + ip: 204.110.190.254 + - name: 0.191.client + ip: 204.110.191.0 + - name: 1.191.client + ip: 204.110.191.1 + - name: 2.191.client + ip: 204.110.191.2 + - name: 3.191.client + ip: 204.110.191.3 + - name: 4.191.client + ip: 204.110.191.4 + - name: 5.191.client + ip: 204.110.191.5 + - name: 6.191.client + ip: 204.110.191.6 + - name: 7.191.client + ip: 204.110.191.7 + - name: 8.191.client + ip: 204.110.191.8 + - name: 9.191.client + ip: 204.110.191.9 + - name: 10.191.client + ip: 204.110.191.10 + - name: 11.191.client + ip: 204.110.191.11 + - name: 12.191.client + ip: 204.110.191.12 + - name: 13.191.client + ip: 204.110.191.13 + - name: 14.191.client + ip: 204.110.191.14 + - name: 15.191.client + ip: 204.110.191.15 + - name: 16.191.client + ip: 204.110.191.16 + - name: 17.191.client + ip: 204.110.191.17 + - name: 18.191.client + ip: 204.110.191.18 + - name: 19.191.client + ip: 204.110.191.19 + - name: 20.191.client + ip: 204.110.191.20 + - name: 21.191.client + ip: 204.110.191.21 + - name: 22.191.client + ip: 204.110.191.22 + - name: 23.191.client + ip: 204.110.191.23 + - name: 24.191.client + ip: 204.110.191.24 + - name: 25.191.client + ip: 204.110.191.25 + - name: 26.191.client + ip: 204.110.191.26 + - name: 27.191.client + ip: 204.110.191.27 + - name: 28.191.client + ip: 204.110.191.28 + - name: 29.191.client + ip: 204.110.191.29 + - name: 30.191.client + ip: 204.110.191.30 + - name: 31.191.client + ip: 204.110.191.31 + - name: 32.191.client + ip: 204.110.191.32 + - name: 33.191.client + ip: 204.110.191.33 + - name: 34.191.client + ip: 204.110.191.34 + - name: 35.191.client + ip: 204.110.191.35 + - name: 36.191.client + ip: 204.110.191.36 + - name: 37.191.client + ip: 204.110.191.37 + - name: 38.191.client + ip: 204.110.191.38 + - name: 39.191.client + ip: 204.110.191.39 + - name: 40.191.client + ip: 204.110.191.40 + - name: 41.191.client + ip: 204.110.191.41 + - name: 42.191.client + ip: 204.110.191.42 + - name: 43.191.client + ip: 204.110.191.43 + - name: 44.191.client + ip: 204.110.191.44 + - name: 45.191.client + ip: 204.110.191.45 + - name: 46.191.client + ip: 204.110.191.46 + - name: 47.191.client + ip: 204.110.191.47 + - name: 48.191.client + ip: 204.110.191.48 + - name: 49.191.client + ip: 204.110.191.49 + - name: 50.191.client + ip: 204.110.191.50 + - name: 51.191.client + ip: 204.110.191.51 + - name: 52.191.client + ip: 204.110.191.52 + - name: 53.191.client + ip: 204.110.191.53 + - name: 54.191.client + ip: 204.110.191.54 + - name: 55.191.client + ip: 204.110.191.55 + - name: 56.191.client + ip: 204.110.191.56 + - name: 57.191.client + ip: 204.110.191.57 + - name: 58.191.client + ip: 204.110.191.58 + - name: 59.191.client + ip: 204.110.191.59 + - name: 60.191.client + ip: 204.110.191.60 + - name: 61.191.client + ip: 204.110.191.61 + - name: 62.191.client + ip: 204.110.191.62 + - name: 63.191.client + ip: 204.110.191.63 + - name: 64.191.client + ip: 204.110.191.64 + - name: 65.191.client + ip: 204.110.191.65 + - name: 66.191.client + ip: 204.110.191.66 + - name: 67.191.client + ip: 204.110.191.67 + - name: 68.191.client + ip: 204.110.191.68 + - name: 69.191.client + ip: 204.110.191.69 + - name: 70.191.client + ip: 204.110.191.70 + - name: 71.191.client + ip: 204.110.191.71 + - name: 72.191.client + ip: 204.110.191.72 + - name: 73.191.client + ip: 204.110.191.73 + - name: 74.191.client + ip: 204.110.191.74 + - name: 75.191.client + ip: 204.110.191.75 + - name: 76.191.client + ip: 204.110.191.76 + - name: 77.191.client + ip: 204.110.191.77 + - name: 78.191.client + ip: 204.110.191.78 + - name: 79.191.client + ip: 204.110.191.79 + - name: 80.191.client + ip: 204.110.191.80 + - name: 81.191.client + ip: 204.110.191.81 + - name: 82.191.client + ip: 204.110.191.82 + - name: 83.191.client + ip: 204.110.191.83 + - name: 84.191.client + ip: 204.110.191.84 + - name: 85.191.client + ip: 204.110.191.85 + - name: 86.191.client + ip: 204.110.191.86 + - name: 87.191.client + ip: 204.110.191.87 + - name: 88.191.client + ip: 204.110.191.88 + - name: 89.191.client + ip: 204.110.191.89 + - name: 90.191.client + ip: 204.110.191.90 + - name: 91.191.client + ip: 204.110.191.91 + - name: 92.191.client + ip: 204.110.191.92 + - name: 93.191.client + ip: 204.110.191.93 + - name: 94.191.client + ip: 204.110.191.94 + - name: 95.191.client + ip: 204.110.191.95 + - name: 96.191.client + ip: 204.110.191.96 + - name: 97.191.client + ip: 204.110.191.97 + - name: 98.191.client + ip: 204.110.191.98 + - name: 99.191.client + ip: 204.110.191.99 + - name: 100.191.client + ip: 204.110.191.100 + - name: 101.191.client + ip: 204.110.191.101 + - name: 102.191.client + ip: 204.110.191.102 + - name: 103.191.client + ip: 204.110.191.103 + - name: 104.191.client + ip: 204.110.191.104 + - name: 105.191.client + ip: 204.110.191.105 + - name: 106.191.client + ip: 204.110.191.106 + - name: 107.191.client + ip: 204.110.191.107 + - name: 108.191.client + ip: 204.110.191.108 + - name: 109.191.client + ip: 204.110.191.109 + - name: 110.191.client + ip: 204.110.191.110 + - name: 111.191.client + ip: 204.110.191.111 + - name: 112.191.client + ip: 204.110.191.112 + - name: 113.191.client + ip: 204.110.191.113 + - name: 114.191.client + ip: 204.110.191.114 + - name: 115.191.client + ip: 204.110.191.115 + - name: 116.191.client + ip: 204.110.191.116 + - name: 117.191.client + ip: 204.110.191.117 + - name: 118.191.client + ip: 204.110.191.118 + - name: 119.191.client + ip: 204.110.191.119 + - name: 120.191.client + ip: 204.110.191.120 + - name: 121.191.client + ip: 204.110.191.121 + - name: 122.191.client + ip: 204.110.191.122 + - name: 123.191.client + ip: 204.110.191.123 + - name: 124.191.client + ip: 204.110.191.124 + - name: 125.191.client + ip: 204.110.191.125 + - name: 126.191.client + ip: 204.110.191.126 + - name: 127.191.client + ip: 204.110.191.127 + - name: 128.191.client + ip: 204.110.191.128 + - name: 129.191.client + ip: 204.110.191.129 + - name: 130.191.client + ip: 204.110.191.130 + - name: 131.191.client + ip: 204.110.191.131 + - name: 132.191.client + ip: 204.110.191.132 + - name: 133.191.client + ip: 204.110.191.133 + - name: 134.191.client + ip: 204.110.191.134 + - name: 135.191.client + ip: 204.110.191.135 + - name: 136.191.client + ip: 204.110.191.136 + - name: 137.191.client + ip: 204.110.191.137 + - name: 138.191.client + ip: 204.110.191.138 + - name: 139.191.client + ip: 204.110.191.139 + - name: 140.191.client + ip: 204.110.191.140 + - name: 141.191.client + ip: 204.110.191.141 + - name: 142.191.client + ip: 204.110.191.142 + - name: 143.191.client + ip: 204.110.191.143 + - name: 144.191.client + ip: 204.110.191.144 + - name: 145.191.client + ip: 204.110.191.145 + - name: 146.191.client + ip: 204.110.191.146 + - name: 147.191.client + ip: 204.110.191.147 + - name: 148.191.client + ip: 204.110.191.148 + - name: 149.191.client + ip: 204.110.191.149 + - name: 150.191.client + ip: 204.110.191.150 + - name: 151.191.client + ip: 204.110.191.151 + - name: 152.191.client + ip: 204.110.191.152 + - name: 153.191.client + ip: 204.110.191.153 + - name: 154.191.client + ip: 204.110.191.154 + - name: 155.191.client + ip: 204.110.191.155 + - name: 156.191.client + ip: 204.110.191.156 + - name: 157.191.client + ip: 204.110.191.157 + - name: 158.191.client + ip: 204.110.191.158 + - name: 159.191.client + ip: 204.110.191.159 + - name: 160.191.client + ip: 204.110.191.160 + - name: 161.191.client + ip: 204.110.191.161 + - name: 162.191.client + ip: 204.110.191.162 + - name: 163.191.client + ip: 204.110.191.163 + - name: 164.191.client + ip: 204.110.191.164 + - name: 165.191.client + ip: 204.110.191.165 + - name: 166.191.client + ip: 204.110.191.166 + - name: 167.191.client + ip: 204.110.191.167 + - name: 168.191.client + ip: 204.110.191.168 + - name: 169.191.client + ip: 204.110.191.169 + - name: 170.191.client + ip: 204.110.191.170 + - name: 171.191.client + ip: 204.110.191.171 + - name: 172.191.client + ip: 204.110.191.172 + - name: 173.191.client + ip: 204.110.191.173 + - name: 174.191.client + ip: 204.110.191.174 + - name: 175.191.client + ip: 204.110.191.175 + - name: 176.191.client + ip: 204.110.191.176 + - name: 177.191.client + ip: 204.110.191.177 + - name: 178.191.client + ip: 204.110.191.178 + - name: 179.191.client + ip: 204.110.191.179 + - name: 180.191.client + ip: 204.110.191.180 + - name: 181.191.client + ip: 204.110.191.181 + - name: 182.191.client + ip: 204.110.191.182 + - name: 183.191.client + ip: 204.110.191.183 + - name: 184.191.client + ip: 204.110.191.184 + - name: 185.191.client + ip: 204.110.191.185 + - name: 186.191.client + ip: 204.110.191.186 + - name: 187.191.client + ip: 204.110.191.187 + - name: 188.191.client + ip: 204.110.191.188 + - name: 189.191.client + ip: 204.110.191.189 + - name: 190.191.client + ip: 204.110.191.190 + - name: 191.191.client + ip: 204.110.191.191 + - name: 192.191.client + ip: 204.110.191.192 + - name: 193.191.client + ip: 204.110.191.193 + - name: 194.191.client + ip: 204.110.191.194 + - name: 195.191.client + ip: 204.110.191.195 + - name: 196.191.client + ip: 204.110.191.196 + - name: 197.191.client + ip: 204.110.191.197 + - name: 198.191.client + ip: 204.110.191.198 + - name: 199.191.client + ip: 204.110.191.199 + - name: 200.191.client + ip: 204.110.191.200 + - name: 201.191.client + ip: 204.110.191.201 + - name: 202.191.client + ip: 204.110.191.202 + - name: 203.191.client + ip: 204.110.191.203 + - name: 204.191.client + ip: 204.110.191.204 + - name: 205.191.client + ip: 204.110.191.205 + - name: 206.191.client + ip: 204.110.191.206 + - name: 207.191.client + ip: 204.110.191.207 + - name: 208.191.client + ip: 204.110.191.208 + - name: 209.191.client + ip: 204.110.191.209 + - name: 210.191.client + ip: 204.110.191.210 + - name: 211.191.client + ip: 204.110.191.211 + - name: 212.191.client + ip: 204.110.191.212 + - name: 213.191.client + ip: 204.110.191.213 + - name: 214.191.client + ip: 204.110.191.214 + - name: 215.191.client + ip: 204.110.191.215 + - name: 216.191.client + ip: 204.110.191.216 + - name: 217.191.client + ip: 204.110.191.217 + - name: 218.191.client + ip: 204.110.191.218 + - name: 219.191.client + ip: 204.110.191.219 + - name: 220.191.client + ip: 204.110.191.220 + - name: 221.191.client + ip: 204.110.191.221 + - name: 222.191.client + ip: 204.110.191.222 + - name: 223.191.client + ip: 204.110.191.223 + - name: 224.191.client + ip: 204.110.191.224 + - name: 225.191.client + ip: 204.110.191.225 + - name: 226.191.client + ip: 204.110.191.226 + - name: librenms + ip: 204.110.191.227 + - name: 228.191.client + ip: 204.110.191.228 + - name: logs + ip: 204.110.191.229 + - name: 230.191.client + ip: 204.110.191.230 + - name: 231.191.client + ip: 204.110.191.231 + - name: aprs + ip: 204.110.191.232 + - name: 233.191.client + ip: 204.110.191.233 + - name: 234.191.client + ip: 204.110.191.234 + - name: mirror + ip: 204.110.191.235 + - name: 236.191.client + ip: 204.110.191.236 + - name: poller + ip: 204.110.191.237 + - name: unimus + ip: 204.110.191.238 + - name: ns2 + ip: 204.110.191.239 + - name: resolver01 + ip: 204.110.191.240 + - name: monitor + ip: 204.110.191.241 + - name: suckittony + ip: 204.110.191.242 + - name: netbox + ip: 204.110.191.243 + - name: 244.191.client + ip: 204.110.191.244 + - name: 245.191.client + ip: 204.110.191.245 + - name: 246.191.client + ip: 204.110.191.246 + - name: vpn + ip: 204.110.191.247 + - name: 248.191.client + ip: 204.110.191.248 + - name: ns1 + ip: 204.110.191.249 + - name: resolver02 + ip: 204.110.191.250 + - name: 251.191.client + ip: 204.110.191.251 + - name: 252.191.client + ip: 204.110.191.252 + - name: 253.191.client + ip: 204.110.191.253 + - name: 254.191.client + ip: 204.110.191.254 + +- name: Permit traffic in default zone for dns service + ansible.posix.firewalld: + zone: public + service: dns + permanent: true + state: enabled + notify: + - Restart firewalld diff --git a/ansible/roles/requirements.yml b/ansible/roles/requirements.yml new file mode 100644 index 0000000..29bbe06 --- /dev/null +++ b/ansible/roles/requirements.yml @@ -0,0 +1,4 @@ +- src: graylog2.graylog +- src: caddy_ansible.caddy_ansible +- src: m4rcu5nl.zerotier-one +- src: bertvv.bind diff --git a/ansible/roles/resolvers/handlers/main.yml b/ansible/roles/resolvers/handlers/main.yml new file mode 100755 index 0000000..05afc08 --- /dev/null +++ b/ansible/roles/resolvers/handlers/main.yml @@ -0,0 +1,15 @@ +--- +# Handler for the webtier: handlers are called by other plays. +# See http://docs.ansible.com/playbooks_intro.html for more information about handlers. + +- name: Restart unbound + ansible.builtin.service: + name: unbound + state: restarted + become: true + +- name: Restart firewalld + ansible.builtin.service: + name: firewalld + state: restarted + become: true diff --git a/ansible/roles/resolvers/tasks/main.yml b/ansible/roles/resolvers/tasks/main.yml new file mode 100755 index 0000000..2ea90ab --- /dev/null +++ b/ansible/roles/resolvers/tasks/main.yml @@ -0,0 +1,44 @@ +--- +- name: Install unbound + ansible.builtin.dnf: + name: + - unbound + - certbot + state: present + +- name: Enable service Unbound and ensure it is not masked + ansible.builtin.systemd: + name: unbound + enabled: true + masked: false + +- name: Create Unbound config + ansible.builtin.template: + src: unbound.conf.j2 + dest: /etc/unbound/unbound.conf + mode: "644" + notify: + - Restart unbound + +- name: Permit traffic in default zone for dns service + ansible.posix.firewalld: + zone: public + service: dns + permanent: true + state: enabled + +- name: Permit traffic in default zone for http service + ansible.posix.firewalld: + zone: public + service: http + permanent: true + state: enabled + +- name: Permit traffic in default zone for https service + ansible.posix.firewalld: + zone: public + service: https + permanent: true + state: enabled + notify: + - Restart firewalld diff --git a/ansible/roles/resolvers/templates/unbound.conf.j2 b/ansible/roles/resolvers/templates/unbound.conf.j2 new file mode 100644 index 0000000..fcdc07c --- /dev/null +++ b/ansible/roles/resolvers/templates/unbound.conf.j2 @@ -0,0 +1,1328 @@ +# +# Example configuration file. +# +# See unbound.conf(5) man page, version @version@. +# +# this is a comment. + +# Use this anywhere in the file to include other text into this file. +#include: "otherfile.conf" + +# Use this anywhere in the file to include other text, that explicitly starts a +# clause, into this file. Text after this directive needs to start a clause. +#include-toplevel: "otherfile.conf" + +# The server clause sets the main parameters. +server: + # whitespace is not necessary, but looks cleaner. + + # verbosity number, 0 is least verbose. 1 is default. + # verbosity: 1 + + # print statistics to the log (for every thread) every N seconds. + # Set to "" or 0 to disable. Default is disabled. + # statistics-interval: 0 + + # enable shm for stats, default no. if you enable also enable + # statistics-interval, every time it also writes stats to the + # shared memory segment keyed with shm-key. + # shm-enable: no + shm-enable: yes + + # shm for stats uses this key, and key+1 for the shared mem segment. + # shm-key: 11777 + + # enable cumulative statistics, without clearing them after printing. + # statistics-cumulative: no + + # enable extended statistics (query types, answer codes, status) + # printed from unbound-control. Default off, because of speed. + # extended-statistics: no + extended-statistics: yes + + # Inhibits selected extended statistics (qtype, qclass, qopcode, rcode, + # rpz-actions) from printing if their value is 0. + # Default on. + # statistics-inhibit-zero: no + + # number of threads to create. 1 disables threading. + num-threads: 4 + + # specify the interfaces to answer queries from by ip-address. + # The default is to listen to localhost (127.0.0.1 and ::1). + # specify 0.0.0.0 and ::0 to bind to all available interfaces. + # specify every interface[@port] on a new 'interface:' labelled line. + # The listen interfaces are not changed on reload, only on restart. + # interface: 192.0.2.153 + # interface: 192.0.2.154 + # interface: 192.0.2.154@5003 + # interface: 2001:DB8::5 + # interface: eth0@5003 + interface: 0.0.0.0 + interface: ::0 + + # enable this feature to copy the source address of queries to reply. + # Socket options are not supported on all platforms. experimental. + interface-automatic: yes + + # instead of the default port, open additional ports separated by + # spaces when interface-automatic is enabled, by listing them here. + # interface-automatic-ports: "53,443" + + # port to answer queries from + port: 53 + + # specify the interfaces to send outgoing queries to authoritative + # server from by ip-address. If none, the default (all) interface + # is used. Specify every interface on a 'outgoing-interface:' line. + # outgoing-interface: 192.0.2.153 + # outgoing-interface: 2001:DB8::5 + # outgoing-interface: 2001:DB8::6 + + # Specify a netblock to use remainder 64 bits as random bits for + # upstream queries. Uses freebind option (Linux). + # outgoing-interface: 2001:DB8::/64 + # Also (Linux:) ip -6 addr add 2001:db8::/64 dev lo + # And: ip -6 route add local 2001:db8::/64 dev lo + # And set prefer-ip6: yes to use the ip6 randomness from a netblock. + # Set this to yes to prefer ipv6 upstream servers over ipv4. + # prefer-ip6: no + + # Prefer ipv4 upstream servers, even if ipv6 is available. + # prefer-ip4: no + + # number of ports to allocate per thread, determines the size of the + # port range that can be open simultaneously. About double the + # num-queries-per-thread, or, use as many as the OS will allow you. + # outgoing-range: 4096 + + # permit Unbound to use this port number or port range for + # making outgoing queries, using an outgoing interface. + # outgoing-port-permit: 32768 + outgoing-port-permit: 32768-60999 + + # deny Unbound the use this of port number or port range for + # making outgoing queries, using an outgoing interface. + # Use this to make sure Unbound does not grab a UDP port that some + # other server on this computer needs. The default is to avoid + # IANA-assigned port numbers. + # If multiple outgoing-port-permit and outgoing-port-avoid options + # are present, they are processed in order. + # outgoing-port-avoid: "3200-3208" + + # number of outgoing simultaneous tcp buffers to hold per thread. + # outgoing-num-tcp: 10 + outgoing-num-tcp: 100 + + # number of incoming simultaneous tcp buffers to hold per thread. + # incoming-num-tcp: 10 + incoming-num-tcp: 600 + + # buffer size for UDP port 53 incoming (SO_RCVBUF socket option). + # 0 is system default. Use 4m to catch query spikes for busy servers. + # so-rcvbuf: 0 + + # buffer size for UDP port 53 outgoing (SO_SNDBUF socket option). + # 0 is system default. Use 4m to handle spikes on very busy servers. + # so-sndbuf: 0 + + # use SO_REUSEPORT to distribute queries over threads. + # at extreme load it could be better to turn it off to distribute even. + # so-reuseport: yes + + # use IP_TRANSPARENT so the interface: addresses can be non-local + # and you can config non-existing IPs that are going to work later on + # (uses IP_BINDANY on FreeBSD). + ip-transparent: yes + + # use IP_FREEBIND so the interface: addresses can be non-local + # and you can bind to nonexisting IPs and interfaces that are down. + # Linux only. On Linux you also have ip-transparent that is similar. + # ip-freebind: no + + # the value of the Differentiated Services Codepoint (DSCP) + # in the differentiated services field (DS) of the outgoing + # IP packets + # ip-dscp: 0 + + # EDNS reassembly buffer to advertise to UDP peers (the actual buffer + # is set with msg-buffer-size). + # edns-buffer-size: 1232 + edns-buffer-size: 1472 + + # Maximum UDP response size (not applied to TCP response). + # Suggested values are 512 to 4096. Default is 1232. 65536 disables it. + # max-udp-size: 1232 + + # max memory to use for stream(tcp and tls) waiting result buffers. + # stream-wait-size: 4m + + # buffer size for handling DNS data. No messages larger than this + # size can be sent or received, by UDP or TCP. In bytes. + # msg-buffer-size: 65552 + + # the amount of memory to use for the message cache. + # plain value in bytes or you can append k, m or G. default is "4Mb". + # msg-cache-size: 4m + msg-cache-size: 512m + + # the number of slabs to use for the message cache. + # the number of slabs must be a power of 2. + # more slabs reduce lock contention, but fragment memory usage. + # msg-cache-slabs: 4 + msg-cache-slabs: 8 + + # the number of queries that a thread gets to service. + num-queries-per-thread: 1024 + + # if very busy, 50% queries run to completion, 50% get timeout in msec + # jostle-timeout: 200 + + # msec to wait before close of port on timeout UDP. 0 disables. + # delay-close: 0 + + # perform connect for UDP sockets to mitigate ICMP side channel. + # udp-connect: yes + + # The number of retries, per upstream nameserver in a delegation, when + # a throwaway response (also timeouts) is received. + # outbound-msg-retry: 5 + + # Hard limit on the number of outgoing queries Unbound will make while + # resolving a name, making sure large NS sets do not loop. + # It resets on query restarts (e.g., CNAME) and referrals. + # max-sent-count: 32 + + # Hard limit on the number of times Unbound is allowed to restart a + # query upon encountering a CNAME record. + # max-query-restarts: 11 + + # msec for waiting for an unknown server to reply. Increase if you + # are behind a slow satellite link, to eg. 1128. + # unknown-server-time-limit: 376 + + # the amount of memory to use for the RRset cache. + # plain value in bytes or you can append k, m or G. default is "4Mb". + rrset-cache-size: 512m + + # the number of slabs to use for the RRset cache. + # the number of slabs must be a power of 2. + # more slabs reduce lock contention, but fragment memory usage. + # rrset-cache-slabs: 4 + rrset-cache-slabs: 8 + + # the time to live (TTL) value lower bound, in seconds. Default 0. + # If more than an hour could easily give trouble due to stale data. + # cache-min-ttl: 0 + + # the time to live (TTL) value cap for RRsets and messages in the + # cache. Items are not cached for longer. In seconds. + # cache-max-ttl: 86400 + + # the time to live (TTL) value cap for negative responses in the cache + # cache-max-negative-ttl: 3600 + + # the time to live (TTL) value for cached roundtrip times, lameness and + # EDNS version information for hosts. In seconds. + # infra-host-ttl: 900 + + # minimum wait time for responses, increase if uplink is long. In msec. + # infra-cache-min-rtt: 50 + + # maximum wait time for responses. In msec. + # infra-cache-max-rtt: 120000 + + # enable to make server probe down hosts more frequently. + # infra-keep-probing: no + + # the number of slabs to use for the Infrastructure cache. + # the number of slabs must be a power of 2. + # more slabs reduce lock contention, but fragment memory usage. + # infra-cache-slabs: 4 + infra-cache-slabs: 8 + + # the maximum number of hosts that are cached (roundtrip, EDNS, lame). + # infra-cache-numhosts: 10000 + + # define a number of tags here, use with local-zone, access-control, + # interface-*. + # repeat the define-tag statement to add additional tags. + # define-tag: "tag1 tag2 tag3" + + # Enable IPv4, "yes" or "no". + do-ip4: yes + + # Enable IPv6, "yes" or "no". + # do-ip6: yes + + # If running unbound on an IPv6-only host, domains that only have + # IPv4 servers would become unresolveable. If NAT64 is available in + # the network, unbound can use NAT64 to reach these servers with + # the following option. This is NOT needed for enabling DNS64 on a + # system that has IPv4 connectivity. + # Consider also enabling prefer-ip6 to prefer native IPv6 connections + # to nameservers. + # do-nat64: no + + # NAT64 prefix. Defaults to using dns64-prefix value. + # nat64-prefix: 64:ff9b::0/96 + + # Enable UDP, "yes" or "no". + # do-udp: yes + + # Enable TCP, "yes" or "no". + # do-tcp: yes + + # upstream connections use TCP only (and no UDP), "yes" or "no" + # useful for tunneling scenarios, default no. + # tcp-upstream: no + + # upstream connections also use UDP (even if do-udp is no). + # useful if if you want UDP upstream, but don't provide UDP downstream. + # udp-upstream-without-downstream: no + + # Maximum segment size (MSS) of TCP socket on which the server + # responds to queries. Default is 0, system default MSS. + # tcp-mss: 0 + + # Maximum segment size (MSS) of TCP socket for outgoing queries. + # Default is 0, system default MSS. + # outgoing-tcp-mss: 0 + + # Idle TCP timeout, connection closed in milliseconds + # tcp-idle-timeout: 30000 + + # Enable EDNS TCP keepalive option. + edns-tcp-keepalive: yes + + # Timeout for EDNS TCP keepalive, in msec. + # edns-tcp-keepalive-timeout: 120000 + + # UDP queries that have waited in the socket buffer for a long time + # can be dropped. Default is 0, disabled. In seconds, such as 3. + # sock-queue-timeout: 0 + + # Use systemd socket activation for UDP, TCP, and control sockets. + # use-systemd: no + + # Detach from the terminal, run in background, "yes" or "no". + # Set the value to "no" when Unbound runs as systemd service. + # do-daemonize: yes + + # control which clients are allowed to make (recursive) queries + # to this server. Specify classless netblocks with /size and action. + # By default everything is refused, except for localhost. + # Choose deny (drop message), refuse (polite error reply), + # allow (recursive ok), allow_setrd (recursive ok, rd bit is forced on), + # allow_snoop (recursive and nonrecursive ok) + # deny_non_local (drop queries unless can be answered from local-data) + # refuse_non_local (like deny_non_local but polite error reply). + # access-control: 127.0.0.0/8 allow + # access-control: ::1 allow + # access-control: ::ffff:127.0.0.1 allow + access-control: 0.0.0.0/0 refuse + access-control: 127.0.0.0/8 allow + access-control: 204.110.188.0/22 allow + access-control: 10.0.0.0/8 allow + access-control: 172.1.0.0/15 allow + access-control: 100.64.0.0/10 allow + access-control: 216.180.128.0/20 allow + + # tag access-control with list of tags (in "" with spaces between) + # Clients using this access control element use localzones that + # are tagged with one of these tags. + # access-control-tag: 192.0.2.0/24 "tag2 tag3" + + # set action for particular tag for given access control element. + # if you have multiple tag values, the tag used to lookup the action + # is the first tag match between access-control-tag and local-zone-tag + # where "first" comes from the order of the define-tag values. + # access-control-tag-action: 192.0.2.0/24 tag3 refuse + + # set redirect data for particular tag for access control element + # access-control-tag-data: 192.0.2.0/24 tag2 "A 127.0.0.1" + + # Set view for access control element + # access-control-view: 192.0.2.0/24 viewname + + # Similar to 'access-control:' but for interfaces. + # Control which listening interfaces are allowed to accept (recursive) + # queries for this server. + # The specified interfaces should be the same as the ones specified in + # 'interface:' followed by the action. + # The actions are the same as 'access-control:' above. + # By default all the interfaces configured are refused. + # Note: any 'access-control*:' setting overrides all 'interface-*:' + # settings for targeted clients. + # interface-action: 192.0.2.153 allow + # interface-action: 192.0.2.154 allow + # interface-action: 192.0.2.154@5003 allow + # interface-action: 2001:DB8::5 allow + # interface-action: eth0@5003 allow + + # Similar to 'access-control-tag:' but for interfaces. + # Tag interfaces with a list of tags (in "" with spaces between). + # Interfaces using these tags use localzones that are tagged with one + # of these tags. + # The specified interfaces should be the same as the ones specified in + # 'interface:' followed by the list of tags. + # Note: any 'access-control*:' setting overrides all 'interface-*:' + # settings for targeted clients. + # interface-tag: eth0@5003 "tag2 tag3" + + # Similar to 'access-control-tag-action:' but for interfaces. + # Set action for particular tag for a given interface element. + # If you have multiple tag values, the tag used to lookup the action + # is the first tag match between interface-tag and local-zone-tag + # where "first" comes from the order of the define-tag values. + # The specified interfaces should be the same as the ones specified in + # 'interface:' followed by the tag and action. + # Note: any 'access-control*:' setting overrides all 'interface-*:' + # settings for targeted clients. + # interface-tag-action: eth0@5003 tag3 refuse + + # Similar to 'access-control-tag-data:' but for interfaces. + # Set redirect data for a particular tag for an interface element. + # The specified interfaces should be the same as the ones specified in + # 'interface:' followed by the tag and the redirect data. + # Note: any 'access-control*:' setting overrides all 'interface-*:' + # settings for targeted clients. + # interface-tag-data: eth0@5003 tag2 "A 127.0.0.1" + + # Similar to 'access-control-view:' but for interfaces. + # Set view for an interface element. + # The specified interfaces should be the same as the ones specified in + # 'interface:' followed by the view name. + # Note: any 'access-control*:' setting overrides all 'interface-*:' + # settings for targeted clients. + # interface-view: eth0@5003 viewname + + # if given, a chroot(2) is done to the given directory. + # i.e. you can chroot to the working directory, for example, + # for extra security, but make sure all files are in that directory. + # + # If chroot is enabled, you should pass the configfile (from the + # commandline) as a full path from the original root. After the + # chroot has been performed the now defunct portion of the config + # file path is removed to be able to reread the config after a reload. + # + # All other file paths (working dir, logfile, roothints, and + # key files) can be specified in several ways: + # o as an absolute path relative to the new root. + # o as a relative path to the working directory. + # o as an absolute path relative to the original root. + # In the last case the path is adjusted to remove the unused portion. + # + # The pid file can be absolute and outside of the chroot, it is + # written just prior to performing the chroot and dropping permissions. + # + # Additionally, Unbound may need to access /dev/urandom (for entropy). + # How to do this is specific to your OS. + # + # If you give "" no chroot is performed. The path must not end in a /. + # chroot: "@UNBOUND_CHROOT_DIR@" + + # if given, user privileges are dropped (after binding port), + # and the given username is assumed. Default is user "unbound". + # If you give "" no privileges are dropped. + # username: "@UNBOUND_USERNAME@" + + # the working directory. The relative files in this config are + # relative to this directory. If you give "" the working directory + # is not changed. + # If you give a server: directory: dir before include: file statements + # then those includes can be relative to the working directory. + # directory: "@UNBOUND_RUN_DIR@" + + # the log file, "" means log to stderr. + # Use of this option sets use-syslog to "no". + # logfile: "" + + # Log to syslog(3) if yes. The log facility LOG_DAEMON is used to + # log to. If yes, it overrides the logfile. + # use-syslog: yes + + # Log identity to report. if empty, defaults to the name of argv[0] + # (usually "unbound"). + # log-identity: "" + + # print UTC timestamp in ascii to logfile, default is epoch in seconds. + log-time-ascii: yes + + # print one line with time, IP, name, type, class for every query. + # log-queries: no + + # print one line per reply, with time, IP, name, type, class, rcode, + # timetoresolve, fromcache and responsesize. + # log-replies: no + + # log with tag 'query' and 'reply' instead of 'info' for + # filtering log-queries and log-replies from the log. + # log-tag-queryreply: no + + # log the local-zone actions, like local-zone type inform is enabled + # also for the other local zone types. + # log-local-actions: no + + # print log lines that say why queries return SERVFAIL to clients. + # log-servfail: no + + # the pid file. Can be an absolute path outside of chroot/work dir. + # pidfile: "@UNBOUND_PIDFILE@" + + # file to read root hints from. + # get one from https://www.internic.net/domain/named.cache + # root-hints: "" + + # enable to not answer id.server and hostname.bind queries. + # hide-identity: no + + # enable to not answer version.server and version.bind queries. + # hide-version: no + + # enable to not answer trustanchor.unbound queries. + # hide-trustanchor: no + + # enable to not set the User-Agent HTTP header. + # hide-http-user-agent: no + + # the identity to report. Leave "" or default to return hostname. + # identity: "" + + # the version to report. Leave "" or default to return package version. + # version: "" + + # NSID identity (hex string, or "ascii_somestring"). default disabled. + # nsid: "aabbccdd" + + # User-Agent HTTP header to use. Leave "" or default to use package name + # and version. + # http-user-agent: "" + + # the target fetch policy. + # series of integers describing the policy per dependency depth. + # The number of values in the list determines the maximum dependency + # depth the recursor will pursue before giving up. Each integer means: + # -1 : fetch all targets opportunistically, + # 0: fetch on demand, + # positive value: fetch that many targets opportunistically. + # Enclose the list of numbers between quotes (""). + # target-fetch-policy: "3 2 1 0 0" + + # Harden against very small EDNS buffer sizes. + harden-short-bufsize: yes + + # Harden against unseemly large queries. + harden-large-queries: yes + + # Harden against out of zone rrsets, to avoid spoofing attempts. + harden-glue: yes + + # Harden against receiving dnssec-stripped data. If you turn it + # off, failing to validate dnskey data for a trustanchor will + # trigger insecure mode for that zone (like without a trustanchor). + # Default on, which insists on dnssec data for trust-anchored zones. + # harden-dnssec-stripped: yes + + # Harden against queries that fall under dnssec-signed nxdomain names. + # harden-below-nxdomain: yes + + # Harden the referral path by performing additional queries for + # infrastructure data. Validates the replies (if possible). + # Default off, because the lookups burden the server. Experimental + # implementation of draft-wijngaards-dnsext-resolver-side-mitigation. + # harden-referral-path: no + + # Harden against algorithm downgrade when multiple algorithms are + # advertised in the DS record. If no, allows the weakest algorithm + # to validate the zone. + # harden-algo-downgrade: no + + # Harden against unknown records in the authority section and the + # additional section. + # harden-unknown-additional: no + + # Sent minimum amount of information to upstream servers to enhance + # privacy. Only sent minimum required labels of the QNAME and set QTYPE + # to A when possible. + # qname-minimisation: yes + + # QNAME minimisation in strict mode. Do not fall-back to sending full + # QNAME to potentially broken nameservers. A lot of domains will not be + # resolvable when this option in enabled. + # This option only has effect when qname-minimisation is enabled. + # qname-minimisation-strict: no + + # Aggressive NSEC uses the DNSSEC NSEC chain to synthesize NXDOMAIN + # and other denials, using information from previous NXDOMAINs answers. + # aggressive-nsec: yes + + # Use 0x20-encoded random bits in the query to foil spoof attempts. + # This feature is an experimental implementation of draft dns-0x20. + # use-caps-for-id: no + + # Domains (and domains in them) without support for dns-0x20 and + # the fallback fails because they keep sending different answers. + # caps-exempt: "licdn.com" + # caps-exempt: "senderbase.org" + + # Enforce privacy of these addresses. Strips them away from answers. + # It may cause DNSSEC validation to additionally mark it as bogus. + # Protects against 'DNS Rebinding' (uses browser as network proxy). + # Only 'private-domain' and 'local-data' names are allowed to have + # these private addresses. No default. + # private-address: 10.0.0.0/8 + # private-address: 172.16.0.0/12 + # private-address: 192.168.0.0/16 + # private-address: 169.254.0.0/16 + # private-address: fd00::/8 + # private-address: fe80::/10 + # private-address: ::ffff:0:0/96 + + # Allow the domain (and its subdomains) to contain private addresses. + # local-data statements are allowed to contain private addresses too. + # private-domain: "example.com" + + # If nonzero, unwanted replies are not only reported in statistics, + # but also a running total is kept per thread. If it reaches the + # threshold, a warning is printed and a defensive action is taken, + # the cache is cleared to flush potential poison out of it. + # A suggested value is 10000000, the default is 0 (turned off). + # unwanted-reply-threshold: 0 + + # Do not query the following addresses. No DNS queries are sent there. + # List one address per entry. List classless netblocks with /size, + # do-not-query-address: 127.0.0.1/8 + # do-not-query-address: ::1 + + # if yes, the above default do-not-query-address entries are present. + # if no, localhost can be queried (for testing and debugging). + # do-not-query-localhost: yes + + # if yes, perform prefetching of almost expired message cache entries. + # prefetch: no + prefetch: yes + + # if yes, perform key lookups adjacent to normal lookups. + # prefetch-key: no + prefetch-key: yes + + # deny queries of type ANY with an empty response. + # deny-any: no + + # if yes, Unbound rotates RRSet order in response. + # rrset-roundrobin: yes + + # if yes, Unbound doesn't insert authority/additional sections + # into response messages when those sections are not required. + # minimal-responses: yes + + # true to disable DNSSEC lameness check in iterator. + # disable-dnssec-lame-check: no + + # module configuration of the server. A string with identifiers + # separated by spaces. Syntax: "[dns64] [validator] iterator" + # most modules have to be listed at the beginning of the line, + # except cachedb(just before iterator), and python (at the beginning, + # or, just before the iterator). + # module-config: "validator iterator" + + # File with trusted keys, kept uptodate using RFC5011 probes, + # initial file like trust-anchor-file, then it stores metadata. + # Use several entries, one per domain name, to track multiple zones. + # + # If you want to perform DNSSEC validation, run unbound-anchor before + # you start Unbound (i.e. in the system boot scripts). + # And then enable the auto-trust-anchor-file config item. + # Please note usage of unbound-anchor root anchor is at your own risk + # and under the terms of our LICENSE (see that file in the source). + # auto-trust-anchor-file: "@UNBOUND_ROOTKEY_FILE@" + + # trust anchor signaling sends a RFC8145 key tag query after priming. + # trust-anchor-signaling: yes + + # Root key trust anchor sentinel (draft-ietf-dnsop-kskroll-sentinel) + # root-key-sentinel: yes + + # File with trusted keys for validation. Specify more than one file + # with several entries, one file per entry. + # Zone file format, with DS and DNSKEY entries. + # Note this gets out of date, use auto-trust-anchor-file please. + # trust-anchor-file: "" + + # Trusted key for validation. DS or DNSKEY. specify the RR on a + # single line, surrounded by "". TTL is ignored. class is IN default. + # Note this gets out of date, use auto-trust-anchor-file please. + # (These examples are from August 2007 and may not be valid anymore). + # trust-anchor: "nlnetlabs.nl. DNSKEY 257 3 5 AQPzzTWMz8qSWIQlfRnPckx2BiVmkVN6LPupO3mbz7FhLSnm26n6iG9N Lby97Ji453aWZY3M5/xJBSOS2vWtco2t8C0+xeO1bc/d6ZTy32DHchpW 6rDH1vp86Ll+ha0tmwyy9QP7y2bVw5zSbFCrefk8qCUBgfHm9bHzMG1U BYtEIQ==" + # trust-anchor: "jelte.nlnetlabs.nl. DS 42860 5 1 14D739EB566D2B1A5E216A0BA4D17FA9B038BE4A" + + # File with trusted keys for validation. Specify more than one file + # with several entries, one file per entry. Like trust-anchor-file + # but has a different file format. Format is BIND-9 style format, + # the trusted-keys { name flag proto algo "key"; }; clauses are read. + # you need external update procedures to track changes in keys. + # trusted-keys-file: "" + + # Ignore chain of trust. Domain is treated as insecure. + # domain-insecure: "example.com" + + # Override the date for validation with a specific fixed date. + # Do not set this unless you are debugging signature inception + # and expiration. "" or "0" turns the feature off. -1 ignores date. + # val-override-date: "" + + # The time to live for bogus data, rrsets and messages. This avoids + # some of the revalidation, until the time interval expires. in secs. + # val-bogus-ttl: 60 + + # The signature inception and expiration dates are allowed to be off + # by 10% of the signature lifetime (expir-incep) from our local clock. + # This leeway is capped with a minimum and a maximum. In seconds. + # val-sig-skew-min: 3600 + # val-sig-skew-max: 86400 + + # The maximum number the validator should restart validation with + # another authority in case of failed validation. + # val-max-restart: 5 + + # Should additional section of secure message also be kept clean of + # unsecure data. Useful to shield the users of this validator from + # potential bogus data in the additional section. All unsigned data + # in the additional section is removed from secure messages. + # val-clean-additional: yes + + # Turn permissive mode on to permit bogus messages. Thus, messages + # for which security checks failed will be returned to clients, + # instead of SERVFAIL. It still performs the security checks, which + # result in interesting log files and possibly the AD bit in + # replies if the message is found secure. The default is off. + # val-permissive-mode: no + + # Ignore the CD flag in incoming queries and refuse them bogus data. + # Enable it if the only clients of Unbound are legacy servers (w2008) + # that set CD but cannot validate themselves. + # ignore-cd-flag: no + + # Serve expired responses from cache, with serve-expired-reply-ttl in + # the response, and then attempt to fetch the data afresh. + # serve-expired: no + # + # Limit serving of expired responses to configured seconds after + # expiration. 0 disables the limit. + # serve-expired-ttl: 0 + # + # Set the TTL of expired records to the serve-expired-ttl value after a + # failed attempt to retrieve the record from upstream. This makes sure + # that the expired records will be served as long as there are queries + # for it. + # serve-expired-ttl-reset: no + # + # TTL value to use when replying with expired data. + # serve-expired-reply-ttl: 30 + # + # Time in milliseconds before replying to the client with expired data. + # This essentially enables the serve-stale behavior as specified in + # RFC 8767 that first tries to resolve before + # immediately responding with expired data. 0 disables this behavior. + # A recommended value is 1800. + # serve-expired-client-timeout: 0 + + # Return the original TTL as received from the upstream name server rather + # than the decrementing TTL as stored in the cache. Enabling this feature + # does not impact cache expiry, it only changes the TTL Unbound embeds in + # responses to queries. Note that enabling this feature implicitly disables + # enforcement of the configured minimum and maximum TTL. + # serve-original-ttl: no + + # Have the validator log failed validations for your diagnosis. + # 0: off. 1: A line per failed user query. 2: With reason and bad IP. + # val-log-level: 0 + + # It is possible to configure NSEC3 maximum iteration counts per + # keysize. Keep this table very short, as linear search is done. + # A message with an NSEC3 with larger count is marked insecure. + # List in ascending order the keysize and count values. + # val-nsec3-keysize-iterations: "1024 150 2048 150 4096 150" + + # if enabled, ZONEMD verification failures do not block the zone. + # zonemd-permissive-mode: no + + # instruct the auto-trust-anchor-file probing to add anchors after ttl. + # add-holddown: 2592000 # 30 days + + # instruct the auto-trust-anchor-file probing to del anchors after ttl. + # del-holddown: 2592000 # 30 days + + # auto-trust-anchor-file probing removes missing anchors after ttl. + # If the value 0 is given, missing anchors are not removed. + # keep-missing: 31622400 # 366 days + + # debug option that allows very small holddown times for key rollover, + # otherwise the RFC mandates probe intervals must be at least 1 hour. + # permit-small-holddown: no + + # the amount of memory to use for the key cache. + # plain value in bytes or you can append k, m or G. default is "4Mb". + key-cache-size: 512m + + # the number of slabs to use for the key cache. + # the number of slabs must be a power of 2. + # more slabs reduce lock contention, but fragment memory usage. + # key-cache-slabs: 4 + key-cache-slabs: 8 + + # the amount of memory to use for the negative cache. + # plain value in bytes or you can append k, m or G. default is "1Mb". + # neg-cache-size: 1m + + # By default, for a number of zones a small default 'nothing here' + # reply is built-in. Query traffic is thus blocked. If you + # wish to serve such zone you can unblock them by uncommenting one + # of the nodefault statements below. + # You may also have to use domain-insecure: zone to make DNSSEC work, + # unless you have your own trust anchors for this zone. + # local-zone: "localhost." nodefault + # local-zone: "127.in-addr.arpa." nodefault + # local-zone: "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa." nodefault + # local-zone: "home.arpa." nodefault + # local-zone: "onion." nodefault + # local-zone: "test." nodefault + # local-zone: "invalid." nodefault + # local-zone: "10.in-addr.arpa." nodefault + # local-zone: "16.172.in-addr.arpa." nodefault + # local-zone: "17.172.in-addr.arpa." nodefault + # local-zone: "18.172.in-addr.arpa." nodefault + # local-zone: "19.172.in-addr.arpa." nodefault + # local-zone: "20.172.in-addr.arpa." nodefault + # local-zone: "21.172.in-addr.arpa." nodefault + # local-zone: "22.172.in-addr.arpa." nodefault + # local-zone: "23.172.in-addr.arpa." nodefault + # local-zone: "24.172.in-addr.arpa." nodefault + # local-zone: "25.172.in-addr.arpa." nodefault + # local-zone: "26.172.in-addr.arpa." nodefault + # local-zone: "27.172.in-addr.arpa." nodefault + # local-zone: "28.172.in-addr.arpa." nodefault + # local-zone: "29.172.in-addr.arpa." nodefault + # local-zone: "30.172.in-addr.arpa." nodefault + # local-zone: "31.172.in-addr.arpa." nodefault + # local-zone: "168.192.in-addr.arpa." nodefault + # local-zone: "0.in-addr.arpa." nodefault + # local-zone: "254.169.in-addr.arpa." nodefault + # local-zone: "2.0.192.in-addr.arpa." nodefault + # local-zone: "100.51.198.in-addr.arpa." nodefault + # local-zone: "113.0.203.in-addr.arpa." nodefault + # local-zone: "255.255.255.255.in-addr.arpa." nodefault + # local-zone: "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa." nodefault + # local-zone: "d.f.ip6.arpa." nodefault + # local-zone: "8.e.f.ip6.arpa." nodefault + # local-zone: "9.e.f.ip6.arpa." nodefault + # local-zone: "a.e.f.ip6.arpa." nodefault + # local-zone: "b.e.f.ip6.arpa." nodefault + # local-zone: "8.b.d.0.1.0.0.2.ip6.arpa." nodefault + # And for 64.100.in-addr.arpa. to 127.100.in-addr.arpa. + + # Add example.com into ipset + # local-zone: "example.com" ipset + + # If Unbound is running service for the local host then it is useful + # to perform lan-wide lookups to the upstream, and unblock the + # long list of local-zones above. If this Unbound is a dns server + # for a network of computers, disabled is better and stops information + # leakage of local lan information. + # unblock-lan-zones: no + + # The insecure-lan-zones option disables validation for + # these zones, as if they were all listed as domain-insecure. + # insecure-lan-zones: no + + # a number of locally served zones can be configured. + # local-zone: + # local-data: "" + # o deny serves local data (if any), else, drops queries. + # o refuse serves local data (if any), else, replies with error. + # o static serves local data, else, nxdomain or nodata answer. + # o transparent gives local data, but resolves normally for other names + # o redirect serves the zone data for any subdomain in the zone. + # o nodefault can be used to normally resolve AS112 zones. + # o typetransparent resolves normally for other types and other names + # o inform acts like transparent, but logs client IP address + # o inform_deny drops queries and logs client IP address + # o inform_redirect redirects queries and logs client IP address + # o always_transparent, always_refuse, always_nxdomain, always_nodata, + # always_deny resolve in that way but ignore local data for + # that name + # o block_a resolves all records normally but returns + # NODATA for A queries and ignores local data for that name + # o always_null returns 0.0.0.0 or ::0 for any name in the zone. + # o noview breaks out of that view towards global local-zones. + # + # defaults are localhost address, reverse for 127.0.0.1 and ::1 + # and nxdomain for AS112 zones. If you configure one of these zones + # the default content is omitted, or you can omit it with 'nodefault'. + # + # If you configure local-data without specifying local-zone, by + # default a transparent local-zone is created for the data. + # + # You can add locally served data with + # local-zone: "local." static + # local-data: "mycomputer.local. IN A 192.0.2.51" + # local-data: 'mytext.local TXT "content of text record"' + # + # You can override certain queries with + # local-data: "adserver.example.com A 127.0.0.1" + # + # You can redirect a domain to a fixed address with + # (this makes example.com, www.example.com, etc, all go to 192.0.2.3) + # local-zone: "example.com" redirect + # local-data: "example.com A 192.0.2.3" + # + # Shorthand to make PTR records, "IPv4 name" or "IPv6 name". + # You can also add PTR records using local-data directly, but then + # you need to do the reverse notation yourself. + # local-data-ptr: "192.0.2.3 www.example.com" + + # tag a localzone with a list of tag names (in "" with spaces between) + # local-zone-tag: "example.com" "tag2 tag3" + + # add a netblock specific override to a localzone, with zone type + # local-zone-override: "example.com" 192.0.2.0/24 refuse + + # service clients over TLS (on the TCP sockets) with plain DNS inside + # the TLS stream, and over HTTPS using HTTP/2 as specified in RFC8484. + # Give the certificate to use and private key. + # default is "" (disabled). requires restart to take effect. + # tls-service-key: "path/to/privatekeyfile.key" + # tls-service-pem: "path/to/publiccertfile.pem" + # tls-port: 853 + # https-port: 443 + + # cipher setting for TLSv1.2 + # tls-ciphers: "DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256" + # cipher setting for TLSv1.3 + # tls-ciphersuites: "TLS_AES_128_GCM_SHA256:TLS_AES_128_CCM_8_SHA256:TLS_AES_128_CCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" + + # Pad responses to padded queries received over TLS + # pad-responses: yes + + # Padded responses will be padded to the closest multiple of this size. + # pad-responses-block-size: 468 + + # Use the SNI extension for TLS connections. Default is yes. + # Changing the value requires a reload. + # tls-use-sni: yes + + # Add the secret file for TLS Session Ticket. + # Secret file must be 80 bytes of random data. + # First key use to encrypt and decrypt TLS session tickets. + # Other keys use to decrypt only. + # requires restart to take effect. + # tls-session-ticket-keys: "path/to/secret_file1" + # tls-session-ticket-keys: "path/to/secret_file2" + + # request upstream over TLS (with plain DNS inside the TLS stream). + # Default is no. Can be turned on and off with unbound-control. + # tls-upstream: no + + # Certificates used to authenticate connections made upstream. + # tls-cert-bundle: "" + + # Add system certs to the cert bundle, from the Windows Cert Store + # tls-win-cert: no + # and on other systems, the default openssl certificates + # tls-system-cert: no + + # Pad queries over TLS upstreams + # pad-queries: yes + + # Padded queries will be padded to the closest multiple of this size. + # pad-queries-block-size: 128 + + # Also serve tls on these port numbers (eg. 443, ...), by listing + # tls-additional-port: portno for each of the port numbers. + + # HTTP endpoint to provide DNS-over-HTTPS service on. + # http-endpoint: "/dns-query" + + # HTTP/2 SETTINGS_MAX_CONCURRENT_STREAMS value to use. + # http-max-streams: 100 + + # Maximum number of bytes used for all HTTP/2 query buffers. + # http-query-buffer-size: 4m + + # Maximum number of bytes used for all HTTP/2 response buffers. + # http-response-buffer-size: 4m + + # Set TCP_NODELAY socket option on sockets used for DNS-over-HTTPS + # service. + # http-nodelay: yes + + # Disable TLS for DNS-over-HTTP downstream service. + # http-notls-downstream: no + + # The interfaces that use these listed port numbers will support and + # expect PROXYv2. For UDP and TCP/TLS interfaces. + # proxy-protocol-port: portno for each of the port numbers. + + # DNS64 prefix. Must be specified when DNS64 is use. + # Enable dns64 in module-config. Used to synthesize IPv6 from IPv4. + # dns64-prefix: 64:ff9b::0/96 + + # DNS64 ignore AAAA records for these domains and use A instead. + # dns64-ignore-aaaa: "example.com" + + # ratelimit for uncached, new queries, this limits recursion effort. + # ratelimiting is experimental, and may help against randomqueryflood. + # if 0(default) it is disabled, otherwise state qps allowed per zone. + # ratelimit: 0 + + # ratelimits are tracked in a cache, size in bytes of cache (or k,m). + # ratelimit-size: 4m + # ratelimit cache slabs, reduces lock contention if equal to cpucount. + # ratelimit-slabs: 4 + + # 0 blocks when ratelimited, otherwise let 1/xth traffic through + # ratelimit-factor: 10 + + # Aggressive rate limit when the limit is reached and until demand has + # decreased in a 2 second rate window. + # ratelimit-backoff: no + + # override the ratelimit for a specific domain name. + # give this setting multiple times to have multiple overrides. + # ratelimit-for-domain: example.com 1000 + # override the ratelimits for all domains below a domain name + # can give this multiple times, the name closest to the zone is used. + # ratelimit-below-domain: com 1000 + + # global query ratelimit for all ip addresses. + # feature is experimental. + # if 0(default) it is disabled, otherwise states qps allowed per ip address + # ip-ratelimit: 0 + + # ip ratelimits are tracked in a cache, size in bytes of cache (or k,m). + # ip-ratelimit-size: 4m + # ip ratelimit cache slabs, reduces lock contention if equal to cpucount. + # ip-ratelimit-slabs: 4 + + # 0 blocks when ip is ratelimited, otherwise let 1/xth traffic through + # ip-ratelimit-factor: 10 + + # Aggressive rate limit when the limit is reached and until demand has + # decreased in a 2 second rate window. + # ip-ratelimit-backoff: no + + # Limit the number of connections simultaneous from a netblock + # tcp-connection-limit: 192.0.2.0/24 12 + + # select from the fastest servers this many times out of 1000. 0 means + # the fast server select is disabled. prefetches are not sped up. + # fast-server-permil: 0 + # the number of servers that will be used in the fast server selection. + # fast-server-num: 3 + + # Enable to attach Extended DNS Error codes (RFC8914) to responses. + # ede: no + + # Enable to attach an Extended DNS Error (RFC8914) Code 3 - Stale + # Answer as EDNS0 option to expired responses. + # Note that the ede option above needs to be enabled for this to work. + # ede-serve-expired: no + + # Specific options for ipsecmod. Unbound needs to be configured with + # --enable-ipsecmod for these to take effect. + # + # Enable or disable ipsecmod (it still needs to be defined in + # module-config above). Can be used when ipsecmod needs to be + # enabled/disabled via remote-control(below). + # ipsecmod-enabled: yes + # + # Path to executable external hook. It must be defined when ipsecmod is + # listed in module-config (above). + # ipsecmod-hook: "./my_executable" + # + # When enabled Unbound will reply with SERVFAIL if the return value of + # the ipsecmod-hook is not 0. + # ipsecmod-strict: no + # + # Maximum time to live (TTL) for cached A/AAAA records with IPSECKEY. + # ipsecmod-max-ttl: 3600 + # + # Reply with A/AAAA even if the relevant IPSECKEY is bogus. Mainly used for + # testing. + # ipsecmod-ignore-bogus: no + # + # Domains for which ipsecmod will be triggered. If not defined (default) + # all domains are treated as being allowed. + # ipsecmod-allow: "example.com" + # ipsecmod-allow: "nlnetlabs.nl" + + # Timeout for REUSE entries in milliseconds. + # tcp-reuse-timeout: 60000 + # Max number of queries on a reuse connection. + # max-reuse-tcp-queries: 200 + # Timeout in milliseconds for TCP queries to auth servers. + # tcp-auth-query-timeout: 3000 + + +# Python config section. To enable: +# o use --with-pythonmodule to configure before compiling. +# o list python in the module-config string (above) to enable. +# It can be at the start, it gets validated results, or just before +# the iterator and process before DNSSEC validation. +# o and give a python-script to run. +python: + # Script file to load + # python-script: "@UNBOUND_SHARE_DIR@/ubmodule-tst.py" + +# Dynamic library config section. To enable: +# o use --with-dynlibmodule to configure before compiling. +# o list dynlib in the module-config string (above) to enable. +# It can be placed anywhere, the dynlib module is only a very thin wrapper +# to load modules dynamically. +# o and give a dynlib-file to run. If more than one dynlib entry is listed in +# the module-config then you need one dynlib-file per instance. +dynlib: + # Script file to load + # dynlib-file: "@UNBOUND_SHARE_DIR@/dynlib.so" + +# Remote control config section. +remote-control: + # Enable remote control with unbound-control(8) here. + # set up the keys and certificates with unbound-control-setup. + control-enable: yes + + # what interfaces are listened to for remote control. + # give 0.0.0.0 and ::0 to listen to all interfaces. + # set to an absolute path to use a unix local name pipe, certificates + # are not used for that, so key and cert files need not be present. + control-interface: 127.0.0.1 + # control-interface: ::1 + + # port number for remote control operations. + control-port: 8953 + + # for localhost, you can disable use of TLS by setting this to "no" + # For local sockets this option is ignored, and TLS is not used. + control-use-cert: "no" + + # Unbound server key file. + # server-key-file: "@UNBOUND_RUN_DIR@/unbound_server.key" + + # Unbound server certificate file. + # server-cert-file: "@UNBOUND_RUN_DIR@/unbound_server.pem" + + # unbound-control key file. + # control-key-file: "@UNBOUND_RUN_DIR@/unbound_control.key" + + # unbound-control certificate file. + # control-cert-file: "@UNBOUND_RUN_DIR@/unbound_control.pem" + +# Stub zones. +# Create entries like below, to make all queries for 'example.com' and +# 'example.org' go to the given list of nameservers. list zero or more +# nameservers by hostname or by ipaddress. If you set stub-prime to yes, +# the list is treated as priming hints (default is no). +# With stub-first yes, it attempts without the stub if it fails. +# Consider adding domain-insecure: name and local-zone: name nodefault +# to the server: section if the stub is a locally served zone. +# stub-zone: +# name: "example.com" +# stub-addr: 192.0.2.68 +# stub-prime: no +# stub-first: no +# stub-tcp-upstream: no +# stub-tls-upstream: no +# stub-no-cache: no +# stub-zone: +# name: "example.org" +# stub-host: ns.example.com. + +# Forward zones +# Create entries like below, to make all queries for 'example.com' and +# 'example.org' go to the given list of servers. These servers have to handle +# recursion to other nameservers. List zero or more nameservers by hostname +# or by ipaddress. Use an entry with name "." to forward all queries. +# If you enable forward-first, it attempts without the forward if it fails. +# forward-zone: +# name: "example.com" +# forward-addr: 192.0.2.68 +# forward-addr: 192.0.2.73@5355 # forward to port 5355. +# forward-first: no +# forward-tcp-upstream: no +# forward-tls-upstream: no +# forward-no-cache: no +# forward-zone: +# name: "example.org" +# forward-host: fwd.example.com + +# Authority zones +# The data for these zones is kept locally, from a file or downloaded. +# The data can be served to downstream clients, or used instead of the +# upstream (which saves a lookup to the upstream). The first example +# has a copy of the root for local usage. The second serves example.org +# authoritatively. zonefile: reads from file (and writes to it if you also +# download it), primary: fetches with AXFR and IXFR, or url to zonefile. +# With allow-notify: you can give additional (apart from primaries and urls) +# sources of notifies. +# auth-zone: +# name: "." +# primary: 199.9.14.201 # b.root-servers.net +# primary: 192.33.4.12 # c.root-servers.net +# primary: 199.7.91.13 # d.root-servers.net +# primary: 192.5.5.241 # f.root-servers.net +# primary: 192.112.36.4 # g.root-servers.net +# primary: 193.0.14.129 # k.root-servers.net +# primary: 192.0.47.132 # xfr.cjr.dns.icann.org +# primary: 192.0.32.132 # xfr.lax.dns.icann.org +# primary: 2001:500:200::b # b.root-servers.net +# primary: 2001:500:2::c # c.root-servers.net +# primary: 2001:500:2d::d # d.root-servers.net +# primary: 2001:500:2f::f # f.root-servers.net +# primary: 2001:500:12::d0d # g.root-servers.net +# primary: 2001:7fd::1 # k.root-servers.net +# primary: 2620:0:2830:202::132 # xfr.cjr.dns.icann.org +# primary: 2620:0:2d0:202::132 # xfr.lax.dns.icann.org +# fallback-enabled: yes +# for-downstream: no +# for-upstream: yes +# auth-zone: +# name: "example.org" +# for-downstream: yes +# for-upstream: yes +# zonemd-check: no +# zonemd-reject-absence: no +# zonefile: "example.org.zone" + +# Views +# Create named views. Name must be unique. Map views to requests using +# the access-control-view option. Views can contain zero or more local-zone +# and local-data options. Options from matching views will override global +# options. Global options will be used if no matching view is found. +# With view-first yes, it will try to answer using the global local-zone and +# local-data elements if there is no view specific match. +# view: +# name: "viewname" +# local-zone: "example.com" redirect +# local-data: "example.com A 192.0.2.3" +# local-data-ptr: "192.0.2.3 www.example.com" +# view-first: no +# view: +# name: "anotherview" +# local-zone: "example.com" refuse + +# DNSCrypt +# To enable, use --enable-dnscrypt to configure before compiling. +# Caveats: +# 1. the keys/certs cannot be produced by Unbound. You can use dnscrypt-wrapper +# for this: https://github.com/cofyc/dnscrypt-wrapper/blob/master/README.md#usage +# 2. dnscrypt channel attaches to an interface. you MUST set interfaces to +# listen on `dnscrypt-port` with the follo0wing snippet: +# server: +# interface: 0.0.0.0@443 +# interface: ::0@443 +# +# Finally, `dnscrypt` config has its own section. +# dnscrypt: +# dnscrypt-enable: yes +# dnscrypt-port: 443 +# dnscrypt-provider: 2.dnscrypt-cert.example.com. +# dnscrypt-secret-key: /path/unbound-conf/keys1/1.key +# dnscrypt-secret-key: /path/unbound-conf/keys2/1.key +# dnscrypt-provider-cert: /path/unbound-conf/keys1/1.cert +# dnscrypt-provider-cert: /path/unbound-conf/keys2/1.cert + +# CacheDB +# External backend DB as auxiliary cache. +# To enable, use --enable-cachedb to configure before compiling. +# Specify the backend name +# (default is "testframe", which has no use other than for debugging and +# testing) and backend-specific options. The 'cachedb' module must be +# included in module-config, just before the iterator module. +# cachedb: +# backend: "testframe" +# # secret seed string to calculate hashed keys +# secret-seed: "default" +# +# # For "redis" backend: +# # (to enable, use --with-libhiredis to configure before compiling) +# # redis server's IP address or host name +# redis-server-host: 127.0.0.1 +# # redis server's TCP port +# redis-server-port: 6379 +# # if the server uses a unix socket, set its path, or "" when not used. +# # redis-server-path: "/var/lib/redis/redis-server.sock" +# # if the server uses an AUTH password, specify here, or "" when not used. +# # redis-server-password: "" +# # timeout (in ms) for communication with the redis server +# redis-timeout: 100 +# # set timeout on redis records based on DNS response TTL +# redis-expire-records: no + +# IPSet +# Add specify domain into set via ipset. +# To enable: +# o use --enable-ipset to configure before compiling; +# o Unbound then needs to run as root user. +# ipset: +# # set name for ip v4 addresses +# name-v4: "list-v4" +# # set name for ip v6 addresses +# name-v6: "list-v6" +# + +# Dnstap logging support, if compiled in by using --enable-dnstap to configure. +# To enable, set the dnstap-enable to yes and also some of +# dnstap-log-..-messages to yes. And select an upstream log destination, by +# socket path, TCP or TLS destination. +# dnstap: +# dnstap-enable: no +# # if set to yes frame streams will be used in bidirectional mode +# dnstap-bidirectional: yes +# dnstap-socket-path: "@DNSTAP_SOCKET_PATH@" +# # if "" use the unix socket in dnstap-socket-path, otherwise, +# # set it to "IPaddress[@port]" of the destination. +# dnstap-ip: "" +# # if set to yes if you want to use TLS to dnstap-ip, no for TCP. +# dnstap-tls: yes +# # name for authenticating the upstream server. or "" disabled. +# dnstap-tls-server-name: "" +# # if "", it uses the cert bundle from the main Unbound config. +# dnstap-tls-cert-bundle: "" +# # key file for client authentication, or "" disabled. +# dnstap-tls-client-key-file: "" +# # cert file for client authentication, or "" disabled. +# dnstap-tls-client-cert-file: "" +# dnstap-send-identity: no +# dnstap-send-version: no +# # if "" it uses the hostname. +# dnstap-identity: "" +# # if "" it uses the package version. +# dnstap-version: "" +# dnstap-log-resolver-query-messages: no +# dnstap-log-resolver-response-messages: no +# dnstap-log-client-query-messages: no +# dnstap-log-client-response-messages: no +# dnstap-log-forwarder-query-messages: no +# dnstap-log-forwarder-response-messages: no + +# Response Policy Zones +# RPZ policies. Applied in order of configuration. QNAME, Response IP +# Address, nsdname, nsip and clientip triggers are supported. Supported +# actions are: NXDOMAIN, NODATA, PASSTHRU, DROP, Local Data, tcp-only +# and drop. Policies can be loaded from a file, or using zone +# transfer, or using HTTP. The respip module needs to be added +# to the module-config, e.g.: module-config: "respip validator iterator". +# rpz: +# name: "rpz.example.com" +# zonefile: "rpz.example.com" +# primary: 192.0.2.0 +# allow-notify: 192.0.2.0/32 +# url: http://www.example.com/rpz.example.org.zone +# rpz-action-override: cname +# rpz-cname-override: www.example.org +# rpz-log: yes +# rpz-log-name: "example policy" +# rpz-signal-nxdomain-ra: no +# for-downstream: no +# tags: "example" diff --git a/ansible/roles/ubuntu/handlers/main.yml b/ansible/roles/ubuntu/handlers/main.yml new file mode 100755 index 0000000..2735c99 --- /dev/null +++ b/ansible/roles/ubuntu/handlers/main.yml @@ -0,0 +1,12 @@ +--- +- name: Restart unbound + ansible.builtin.service: + name: unbound + state: restarted + become: true + +- name: Restart firewalld + ansible.builtin.service: + name: firewalld + state: restarted + become: true diff --git a/ansible/roles/ubuntu/tasks/main.yml b/ansible/roles/ubuntu/tasks/main.yml new file mode 100755 index 0000000..c804158 --- /dev/null +++ b/ansible/roles/ubuntu/tasks/main.yml @@ -0,0 +1,70 @@ +--- +- name: "Enable passwordless sudo on Ubuntu" + ansible.builtin.lineinfile: + path: /etc/sudoers + state: present + regexp: "^%sudo" + line: "%sudo ALL=(ALL) NOPASSWD: ALL" + validate: "visudo -cf %s" + +- name: "Install updates on Ubuntu" + ansible.builtin.apt: + name: "*" + state: latest + update_cache: true + cache_valid_time: 0 + force_apt_get: true + autoremove: true + autoclean: true + +- name: Install required software + ansible.builtin.apt: + autoremove: true + autoclean: true + state: present + name: + - lsof + - htop + - mosh + - rsync + - tmux + - unattended-upgrades + - silversearcher-ag + - net-tools + - locate + - fail2ban + - munin-node + - nethogs + - pv + - fzf + - qemu-guest-agent + +- name: Remove ubuntu advantage + ansible.builtin.apt: + autoremove: true + autoclean: true + state: absent + name: + - ubuntu-advantage-tools + +- name: Create a user for andys + ansible.builtin.user: + name: andy + groups: + - sudo + state: present +# - name: Allow SSH in ufw +# community.general.ufw: +# rule: limit +# port: ssh +# proto: tcp + +# - name: Allow localhost in ufw +# community.general.ufw: +# rule: allow +# from_ip: 172.27.0.0/16 + +# - name: Allow everything and enable UFW +# community.general.ufw: +# state: enabled +# policy: allow diff --git a/ansible/run.sh b/ansible/run.sh new file mode 100755 index 0000000..a5767ff --- /dev/null +++ b/ansible/run.sh @@ -0,0 +1,19 @@ +#!/bin/bash + +if [[ -z ${ANSIBLE_SETUP_OPTIONS} ]]; then + ANSIBLE_SETUP_OPTIONS="all" +fi + +if [[ -z ${SKIP_SETUP} ]]; then + echo "> Running setup (with ${ANSIBLE_SETUP_OPTIONS})..." + ansible -m setup -o all 2>&1 | awk -F'=' '{ print $1 }' +fi + +if [[ -z ${SKIP_PLAYBOOK} ]]; then + if [[ -z ${ANSIBLE_OPTIONS} ]]; then + ANSIBLE_OPTIONS="playbook.yml" + fi + + echo "> Running playbook (with ${ANSIBLE_OPTIONS})..." + ansible-playbook ${ANSIBLE_OPTIONS} | tee ansible-playbook.log +fi diff --git a/ansible/setup-host.sh b/ansible/setup-host.sh new file mode 100755 index 0000000..288362b --- /dev/null +++ b/ansible/setup-host.sh @@ -0,0 +1,50 @@ +#!/bin/bash + +create_ansible_group() { + groupadd -g 10000 ansible +} + +create_ansible_user() { + useradd -g 10000 -u 10000 -c "Ansible User" -m ansible +} + +add_ansible_user_to_sudoers() { + echo -e "ansible\tALL=NOPASSWD: ALL" >/etc/sudoers.d/ansible +} + +add_ansible_ssh_key() { + mkdir -v ~ansible/.ssh + echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFghGMnDdkfNC6JPEhMxrKhYDmNcXjHXp/y/mf3uLtzb Ansible SSH Key" >~ansible/.ssh/authorized_keys + chown -vR ansible:ansible ~ansible/.ssh + chmod 700 ~ansible/.ssh + chmod 600 ~ansible/.ssh/authorized_keys +} + +copy_setup_to_host() { + local HOST=$1 + + scp $0 ${HOST}:/tmp +} + +install() { + local HOST=$1 + + if [[ -z ${HOST} ]]; then + echo "No host given." + exit 1 + fi + + copy_setup_to_host ${HOST} + ssh -t ${HOST} "sudo /tmp/$0 setup" +} + +setup() { + create_ansible_group + create_ansible_user + add_ansible_user_to_sudoers + add_ansible_ssh_key +} + +CMD=$1 +shift +eval $CMD $* diff --git a/ansible/vars/base.yml b/ansible/vars/base.yml new file mode 100644 index 0000000..98e2b1b --- /dev/null +++ b/ansible/vars/base.yml @@ -0,0 +1,46 @@ +base: + packages: + - git + - fzf + - zsh + - jq + - sysstat + - smartmontools + - lm-sensors + - debconf-utils + - ntp + - ntpdate + - samba + - samba-common + - sssd + - krb5-user + - zsh + - wget + - vim + - htop + - mosh + - tmux + + ntp: + server: 0.us.pool.ntp.org + + # ad: + # realm: OPS.NSNW.CA + # admin_server: DC1.OPS.NSNW.CA + # kdc: DC1.OPS.NSNW.CA + # user: domainjoin + # pass: hqFTIjgEjcQ1XRN6 + # ntp: + # server: dc1.ops.nsnw.ca + # monitoring: + # icinga2_key_id: "D1EE8AC60D1C44CA6B8FEDF417D5C53472D73F56" + # server: monitor.srv.ab.nsnw.ca + # cert_dir: "/var/lib/icinga2/certs" + # ca_hash: 2e63b2bb + # trusted_master_hash: 7100b6a2 + # syslog: + # server: log.srv.ab.nsnw.ca + # preseed: + # dir: /data/build/preseed + # pxeboot: + # dir: /data/build/pxeboot