Files
configpolicy/roles/pxe/tasks/main.yml
Dustin C. Hatch 02e4df023c r/pxe: Set up a PXE server
The *pxe* role configures the TFTP and NBD stages of PXE network
booting.  The TFTP server provides the files used for the boot stage,
which may either be a kernel and initramfs, or another bootloader like
SYSLINUX/PXELINUX or GRUB.  The NBD server provides the root filesystem,
typically mounted by code in early userspace/initramfs.

The *pxe* role also creates a user group called *pxeadmins*.  Users in
this group can publish content via TFTP; they have write-access to the
`/var/lib/tftpboot` directory.
2022-08-15 17:12:35 -05:00

37 lines
668 B
YAML

- name: ensure pxeadmins group exists
group:
name: pxeadmins
state: present
tags:
- group
- name: ensure pxeadmins can write to tftpboot directory
acl:
path: /var/lib/tftpboot
entity: pxeadmins
etype: group
permissions: rwX
recursive: True
default: '{{ item == "default" }}'
state: present
loop:
- default
- current
tags:
- permissions
- name: ensure pxeadmins can write to nbd directory
acl:
path: /var/lib/nbd
entity: pxeadmins
etype: group
permissions: rwX
recursive: True
default: '{{ item == "default" }}'
state: present
loop:
- default
- current
tags:
- permissions