VMs and LXC Containers

All machines managed by Bridges have a common configuration. At a high level the following are included in every machine managed by Bridges.

• The Locale of the machine
  • ansible/roles/ubuntu/tasks/locale.yaml
• A common break glass account is created
  • ansible/roles/ubuntu/tasks/user.yaml
• All packages are upgraded
  • ansible/roles/ubuntu/tasks/packages.yaml
• Packages for troubleshooting
  • ansible/roles/ubuntu/defaults/main.yaml
• The hostname is set to the inventory name
  • ansible/roles/ubuntu/tasks/network.yaml
• Firewall (UFW) is configured to allow only SSH
  • ansible/roles/ubuntu/tasks/firewall_rules.yaml
  • Each role needs firewall rules added to allow additional ports other than SSH