124 lines
3.6 KiB
YAML

---
# Proxmox VE 9.x (Debian 13 / trixie) sources and repo configuration using deb822
- name: "Find legacy .list APT source files on 9.x"
ansible.builtin.find:
paths:
- /etc/apt/sources.list.d
patterns: "*.list"
file_type: file
register: proxmox_legacy_list_files
- name: "Backup and disable entries in /etc/apt/sources.list (if any)"
ansible.builtin.copy:
src: /etc/apt/sources.list
dest: /etc/apt/sources.list.bak
owner: root
group: root
mode: '0644'
remote_src: true
when:
- proxmox_fix_sources
- ansible_facts['os_family'] is defined
ignore_errors: true
- name: "Comment legacy deb lines in /etc/apt/sources.list (bookworm/proxmox)"
ansible.builtin.replace:
path: /etc/apt/sources.list
regexp: '^(\s*deb\s+.*(proxmox|bookworm).*)$'
replace: '# Disabled by Proxmox Helper Ansible role \1'
when: proxmox_fix_sources
ignore_errors: true
- name: "Remove legacy .list files on 9.x when migrating to deb822"
ansible.builtin.file:
path: "{{ item.path }}"
state: absent
loop: "{{ proxmox_legacy_list_files.files | default([]) }}"
when: proxmox_fix_sources
- name: "Configure Debian Trixie deb822 sources for 9.x"
ansible.builtin.copy:
dest: /etc/apt/sources.list.d/debian.sources
owner: root
group: root
mode: '0644'
content: |
Types: deb
URIs: http://deb.debian.org/debian
Suites: trixie
Components: main contrib
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
Types: deb
URIs: http://security.debian.org/debian-security
Suites: trixie-security
Components: main contrib
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
Types: deb
URIs: http://deb.debian.org/debian
Suites: trixie-updates
Components: main contrib
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
when: proxmox_fix_sources
- name: "Ensure pve-enterprise deb822 source is disabled on 9.x"
ansible.builtin.blockinfile:
path: /etc/apt/sources.list.d/pve-enterprise.sources
create: true
owner: root
group: root
mode: '0644'
block: |
Types: deb
URIs: https://enterprise.proxmox.com/debian/pve
Suites: trixie
Components: pve-enterprise
Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
Enabled: false
when: proxmox_disable_pve_enterprise
- name: "Configure pve-no-subscription deb822 source on 9.x"
ansible.builtin.copy:
dest: /etc/apt/sources.list.d/proxmox.sources
owner: root
group: root
mode: '0644'
content: |
Types: deb
URIs: http://download.proxmox.com/debian/pve
Suites: trixie
Components: pve-no-subscription
Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
when: proxmox_enable_pve_no_subscription
- name: "Configure Ceph deb822 source on 9.x (no-subscription)"
ansible.builtin.copy:
dest: /etc/apt/sources.list.d/ceph.sources
owner: root
group: root
mode: '0644'
content: |
Types: deb
URIs: http://download.proxmox.com/debian/ceph-squid
Suites: trixie
Components: no-subscription
Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
when: proxmox_fix_ceph_repos
- name: "Add disabled pve-test deb822 source on 9.x"
ansible.builtin.copy:
dest: /etc/apt/sources.list.d/pve-test.sources
owner: root
group: root
mode: '0644'
content: |
Types: deb
URIs: http://download.proxmox.com/debian/pve
Suites: trixie
Components: pve-test
Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
Enabled: false
when: proxmox_add_pvetest_repo_disabled