Base¶

Description¶

This Ansible role carries the premise every desktop role shares: the login account whose home the desktop files live in, and whose name they are owned by.

It pulls in user-workstation and nothing else. Desktop roles declare it in their meta/main.yml dependencies instead of each reaching for the account themselves.

Overview¶

This role guarantees the workstation account before any desktop role writes for it.

Architecture¶

ARCHITECTURE.md draws Base from its own metadata: the containers it runs under compose, what changes under swarm, how each volume is backed, and every role it depends on or is depended upon by.

Section	Drawn from
Compose	`meta/services.yml`
Swarm	`meta/services.yml` replicas and placement
Volumes	`meta/volumes.yml` against the NFS decision chain
Dependencies	`meta/services.yml` and `meta/main.yml` of every role

Features¶

Automated provisioning: Configured by Ansible without manual steps.
One premise, one place: A second shared desktop prerequisite is added here rather than in every dsk-* role.

Quick Setup¶

Development¶

Clone, set up the workstation, and deploy Base onto the local stack:

git clone https://github.com/infinito-nexus/core.git
cd core
make onboard
make compose-deploy mode=reinstall apps=dsk-base full_cycle=false

Production¶

Install Base directly onto the target machine: clone the repository, install the OS prerequisites and the repository toolchain, then deploy against localhost over a local connection (no SSH, no container):

git clone https://github.com/infinito-nexus/core.git
cd core
bash scripts/install/package.sh
make install
source scripts/meta/env/load.sh

APP=dsk-base
DOMAIN="<your-domain>"
TLS_MODE=self_signed
SSH_PUBLIC_KEY="<your-ssh-public-key>"
INVENTORY=inventories/production
infinito administration inventory provision "$INVENTORY" \
  --inventory-file "$INVENTORY/devices.yml" \
  --host localhost \
  --include "$APP" \
  --vars "{\"TLS_MODE\": \"$TLS_MODE\", \"DOMAIN_PRIMARY\": \"$DOMAIN\", \"users\": {\"administrator\": {\"authorized_keys\": [\"$SSH_PUBLIC_KEY\"]}}}"
infinito administration deploy dedicated "$INVENTORY/devices.yml" \
  --password-file "$INVENTORY/.password" \
  --diff -vv

Credits¶

Kevin Veen-Birkenbach

Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).

This role deploys no third-party application, so the licence above is the only one that applies.

Usage¶

Declare it as a dependency in the desktop role’s meta/main.yml:

dependencies:
  - dsk-base

Ansible resolves the dependency before the role’s own tasks and runs it once per play, so no guard is needed at the call site.

Variables¶

The role takes none of its own. user-workstation reads WORKSTATION_USER and the users entry it names.