...
 
Commits (236)
...@@ -40,4 +40,4 @@ Possible fixes ...@@ -40,4 +40,4 @@ Possible fixes
(If you can, link to the line of code that might be responsible for the problem) (If you can, link to the line of code that might be responsible for the problem)
/label ~bug /label ~bug
/cc @gethmann /cc @vn4918
[submodule "roles/opera/files/opera_utils"]
path = roles/opera/files/opera_utils
url = git@git.scc.kit.edu:las-software/15-4-Utilities/opera_utils.git
This diff is collapsed.
---
- hosts: all
remote_user: root
vars:
ipa_host: "{{ computer_name }}.las.kit.edu"
ipa_host_ip: "129.13.238.{{ ip_suffix }}"
ipa_domain: las.kit.edu
vars_prompt:
- name: "ipa_pass"
prompt: "What is the admin@LAS.KIT.EDU password?"
private: yes
# - name: uninstall host
# become: yes
# command: ipa-client --uninstall -U
roles:
- ipa_hosts
...@@ -3,6 +3,5 @@ ...@@ -3,6 +3,5 @@
- name: install admin software - name: install admin software
become: yes become: yes
dnf: dnf:
name: "{{ item }}" name: "{{ admin_software }}"
state: present state: present
with_items: "{{ admin_software }}"
[defaults] [defaults]
inventory=hosts inventory = hosts
roles_path = roles
fact_caching = jsonfile
fact_caching_connection = cachedir
fact_caching_timeout = 86400
[inventory]
[privilege_escalation]
[paramiko_connection]
[ssh_connection]
ssh_args = -C -o ControlMaster=auto -o ControlPersist=3600s
pipelining = True pipelining = True
ssh_args = -o ControlMaster=auto -o ControlPersist=60s
remote_user=gethmann [persistent_connection]
roles_path=roles connection_timeout = 3600
become=False command_timeout = 3600
become_user="root"
become_ask_pass=True [accelerate]
become_method="sudo"
[selinux]
[colors]
[diff]
- hosts: all - hosts: all
roles: roles:
- common - common
- hosts: cn
become: yes
tasks:
- name: rename CN computer
hostname: name=las-bernhard.anka.kit.edu
tags:
- cn
- always
...@@ -2,9 +2,7 @@ ...@@ -2,9 +2,7 @@
tasks: tasks:
- name: install desktop software - name: install desktop software
dnf: dnf:
name: "{{ item }}" name: "{{ desktop_software }}"
state: present state: present
become: yes become: yes
when: ansible_distribution == 'Fedora' when: ansible_distribution == 'Fedora'
with_items:
- "{{ desktop_software }}"
- hosts: dhcpd - hosts: dhcpd
vars:
- dhcpd:
domain: las.kit.edu
subnet: 129.13.108.0
netmask: 255.255.255.0
range_start: 129.13.108.74
range_end: 129.13.108.89
routers: 129.13.108.254
broadcast: 129.13.255.255
host_list: host-list-las
roles: roles:
- dhcpd - dhcpd
...@@ -17,6 +17,7 @@ common_software: ...@@ -17,6 +17,7 @@ common_software:
client_software: client_software:
- gnuplot - gnuplot
- kpcli - kpcli
- dino
admin_software: admin_software:
- ansible - ansible
...@@ -35,17 +36,41 @@ desktop_software: ...@@ -35,17 +36,41 @@ desktop_software:
- thunderbird - thunderbird
- firefox - firefox
- libreoffice - libreoffice
# - bwSyncAndShare
- perl-Clipboard - perl-Clipboard
- perl-Capture-Tiny - perl-Capture-Tiny
ipaserver: las126.las.kit.edu # Networking
ipaserver2: las100.las.kit.edu
ipaserver3: las101.las.kit.edu
# this should be the IP or in the sshd_config the "UseDNS" must be set to yes # this should be the IP or in the sshd_config the "UseDNS" must be set to yes
ansible_server: 129.13.108.126 ansible_server: 129.13.238.126
ansible_server_ipv6: "2a00:1398:4:8200:f610:60d7:fa90:7603"
ansible_ipv6_prefix: "2a00:1398:4:8200:"
nfs_server: 129.13.238.126
dns4:
- "129.13.64.5"
- "141.3.175.65" # extern
# use only two, so that IPv6 gets also at least one
# - "129.13.96.2"
dns6:
- "2a00:1398::1"
- "2a00:1398::2"
- "2a00:1398::e:1" # extern
domains:
- las.kit.edu
- scc.kit.edu
gw4: 129.13.238.65
ntp:
- ntp1.scc.kit.edu
- ntp2.scc.kit.edu
- ntp3.scc.kit.edu
- ntp4.scc.kit.edu
# Secure variables
# file: group_vars/all/vault.yml # file: group_vars/all/vault.yml
sudoer: "{{ vault_sudoer }}" sudoer: "{{ vault_sudoer }}"
...@@ -54,3 +79,13 @@ userinstall_vars: "{{ vault_userinstall_vars }}" ...@@ -54,3 +79,13 @@ userinstall_vars: "{{ vault_userinstall_vars }}"
admin_mail: "{{ vault_admin_mail }}" admin_mail: "{{ vault_admin_mail }}"
rootkey: "{{ vault_rootkey }}" rootkey: "{{ vault_rootkey }}"
# IPA
gid: "{{ vault_gid }}"
ipaserver1: "{{ vault_ipaserver1 }}"
ipaserver2: "{{ vault_ipaserver2 }}"
ipaserver3: "{{ vault_ipaserver3 }}"
ipa_users: "{{ vault_ipa_users }}"
undine_password: "{{ vault_undine_password }}"
This diff is collapsed.
---
primary_dhcpd: 129.13.108.101
secondary_dhcpd: 129.13.108.126
--- ---
nfs_server: 129.13.108.126 nfs_server: obelix.las.kit.edu
...@@ -22,7 +22,7 @@ kit_tikz: ...@@ -22,7 +22,7 @@ kit_tikz:
- texlive-mycv - texlive-mycv
- texlive-pgf-spectra - texlive-pgf-spectra
texlivepackages: texlivepackages:
- texlive.x86_64 - "texlive-scheme-small"
- kile - kile
- texmaker - texmaker
- texlive-epstopdf-bin - texlive-epstopdf-bin
...@@ -67,6 +67,7 @@ texlivepackages: ...@@ -67,6 +67,7 @@ texlivepackages:
- texlive-boondox - texlive-boondox
- biber - biber
- texlive-newtx - texlive-newtx
- texlive-newtxtt # jacow
# biber dependencies # biber dependencies
# gdbm-devel # gdbm-devel
# libdb-devel # libdb-devel
...@@ -153,79 +154,79 @@ texlivepackages: ...@@ -153,79 +154,79 @@ texlivepackages:
- texlive-xecolor - texlive-xecolor
- texlive-fontspec - texlive-fontspec
# Thought to be usefull # Thought to be usefull
- texlive-texlive-de-doc.noarch - texlive-texlive-de-doc
- texlive-texlive-common-doc.noarch - texlive-texlive-common-doc
- texlive-texlive-docindex-doc.noarch - texlive-texlive-docindex-doc
- texlive-ae.noarch - texlive-ae
- texlive-cm.noarch - texlive-cm
- texlive-cv.noarch - texlive-cv
- texlive-ec.noarch - texlive-ec
- texlive-ed.noarch - texlive-ed
- texlive-fp.noarch - texlive-fp
- texlive-gu.noarch - texlive-gu
- texlive-hc.noarch - texlive-hc
- texlive-lm.noarch - texlive-lm
- texlive-t2.noarch - texlive-t2
- texlive-alg.noarch - texlive-alg
- texlive-doi.noarch - texlive-doi
- texlive-dox.noarch - texlive-dox
- texlive-eco.noarch - texlive-eco
- texlive-ecv.noarch - texlive-ecv
- texlive-emp.noarch - texlive-emp
- texlive-esk.noarch - texlive-esk
- texlive-fbs.noarch - texlive-fbs
- texlive-fmp.noarch - texlive-fmp
- texlive-gmp.noarch - texlive-gmp
- texlive-hep.noarch - texlive-hep
- texlive-iso.noarch - texlive-iso
- texlive-lcg.noarch - texlive-lcg
- texlive-lfb.noarch - texlive-lfb
- texlive-msg.noarch - texlive-msg
- texlive-nag.noarch - texlive-nag
- texlive-nuc.noarch - texlive-nuc
- texlive-ofs.noarch - texlive-ofs
- texlive-pax.noarch - texlive-pax
- texlive-pgf.noarch - texlive-pgf
- texlive-qcm.noarch - texlive-qcm
- texlive-sfg.noarch - texlive-sfg
- texlive-svg.noarch - texlive-svg
- texlive-svn.noarch - texlive-svn
- texlive-tap.noarch - texlive-tap
- texlive-ucs.noarch - texlive-ucs
- texlive-uml.noarch - texlive-uml
- texlive-uri.noarch - texlive-uri
- texlive-url.noarch - texlive-url
- texlive-vpe.noarch - texlive-vpe
- texlive-base.noarch - texlive-base
- texlive-abbr.noarch - texlive-abbr
- texlive-acro.noarch - texlive-acro
- texlive-bohr.noarch - texlive-bohr
- texlive-cals.noarch - texlive-cals
- texlive-circ.noarch - texlive-circ
- texlive-cite.noarch - texlive-cite
- texlive-cmap.noarch - texlive-cmap
- texlive-cmll.noarch - texlive-cmll
- texlive-cmpj.noarch - texlive-cmpj
- texlive-cmsd.noarch - texlive-cmsd
- texlive-cool.noarch - texlive-cool
- texlive-crop.noarch - texlive-crop
- texlive-dhua.noarch - texlive-dhua
- texlive-epsf.noarch - texlive-epsf
- texlive-etoc.noarch - texlive-etoc
- texlive-euro.noarch - texlive-euro
- texlive-exam.noarch - texlive-exam
- texlive-feyn.noarch - texlive-feyn
- texlive-fink.noarch - texlive-fink
- texlive-mycv.noarch - texlive-mycv
- texlive-nath.noarch - texlive-nath
- texlive-pbox.noarch - texlive-pbox
- texlive-pdfx.noarch - texlive-pdfx
- texlive-spot.noarch - texlive-spot
- texlive-tikz-palattice - texlive-tikz-palattice
- texlive-biblatex.noarch - texlive-biblatex
- texlive-enumitem.noarch - texlive-enumitem
- texlive-ctablestack.noarch - texlive-ctablestack
- texlive-gitinfo2.noarch - texlive-gitinfo2
- texlive-fncychap # e. g. Sphinx - texlive-fncychap # e. g. Sphinx
- latexmk # sphinx - latexmk # sphinx
- texlive-tabulary - texlive-tabulary
...@@ -253,3 +254,10 @@ texlivepackages: ...@@ -253,3 +254,10 @@ texlivepackages:
# to be continued # to be continued
- texlive-cleveref - texlive-cleveref
- texlive-fonttable - texlive-fonttable
- texlive-tcolorbox
- texlive-appendixnumberbeamer
#
- texlive-textpos
# multi line table cells
- texlive-makecell
- texlive-svg
opera_path: /usr/local/share/Opera_18R2 opera_path: /usr/local/share/Opera_2020
...@@ -15,36 +15,16 @@ python3pkg: ...@@ -15,36 +15,16 @@ python3pkg:
- python3-sphinx - python3-sphinx
- python3-tox - python3-tox
- python3-pip - python3-pip
python3pip:
- brewer2mpl
- Cython
- flake8
- flake8-mypy
- flake8-pep257
- i18n
- mypy_extensions
- pipenv - pipenv
- pre-commit - llvm
- PyScaffold - cmake
- pytest-yapf - python3-flake8
- tox - python3-Cython
- yapf - nodejs
- nbdime - nodejs-libs
- kf5-purpose-twitter
python2pkg: - npm
- python2
- python2-setuptools
- python-pip
python2pip: python2pkg: ""
- backports.shutil_get_terminal_size
- brewer2mpl
- Cython
- ipython
- mpld3
- notebook
- pandas
- sklearn
pip3bin: /bin/pip3 pip3bin: /bin/pip3
ansible_user: root ansible_user: root
user_account: richter user_account: richter
ip_suffix: 118 ip_suffix: 118
loc: 620 loc: 622
os: Fedora 27 os: Fedora 32
computer_name: Amnesix computer_name: amnesix
ansible_user: root
user_account: gethmann
ip_suffix: 73
loc: 618
os: Fedora 31
computer_name: asterix
extra_software:
- subversion # for ANKA software
- borgbackup
- mosh # ssh alternative
# keepass compatible console client
- kpcli
- perl-Clipboard
- perl-Capture-Tiny
- ctags # vim tags
- zsh
- neovim
- ShellCheck
- inkscape-table
# - fd-find
- ripgrep
- fzf # fuzzy finder
- fd-find
- gsl-devel # Needed to compile Eva Burkhards code
- mupdf # better alternative to pdftk than pdfseparate+pdfunite
- evince # for fixing RIP errors when printing LaTeX posters
- screen
# PDL for undulator/wiggler Opera script
- perl-PDL
# Installing dependencies:
- perl-Devel-Peek
- perl-Inline
- perl-Inline-C
- perl-Pegex
- freeglut
- perl-B-Utils
- perl-Class-Load
- perl-Class-Tiny
- perl-Data-Dump-Streamer
- perl-Devel-OverloadInfo
- perl-Devel-PartialDump
- perl-Devel-REPL
- perl-Devel-REPL-Plugin-Completion
- perl-Devel-REPL-Plugin-DDS
- perl-Devel-REPL-Plugin-LexEnv
- perl-Devel-REPL-Plugin-MultiLine-PPI
- perl-File-HomeDir
- perl-File-Map
- perl-Filter-Simple
- perl-Getopt-Long-Descriptive
- perl-IPC-System-Simple
- perl-Lexical-Persistence
- perl-Module-Compile
- perl-Module-Pluggable
- perl-Moose
- perl-MooseX-Getopt
- perl-MooseX-Object-Pluggable
- perl-MooseX-Role-Parameterized
- perl-OpenGL
- perl-PPI
- perl-Parse-RecDescent
- perl-PerlIO-Layers
- perl-Pod-Parser
- perl-Prima
- perl-Text-Balanced
- perl-YAML-LibYAML
- perl-autodie
# Installing weak dependencies:
- perl-Text-Bidi
# End of PDL
- snapd
ansible_user: root
user_account: gutknecht
ip_suffix: 94
loc: 620
os: Fedora 31
computer_name: falbala
extra_software:
- zsh
ansible_user: root ansible_user: root
user_account: widmann user_account: blomley
ip_suffix: 112 loc: -119
loc: 618 os: Fedora 30
os: Fedora 28 computer_name: faulus
computer_name: Gutemine
extra_software: extra_software:
- subversion # ANKA software - subversion # ANKA software
- zsh - zsh
ip_suffix: 83
ansible_user: root
user_account: nie
ip_suffix: 91
loc: 618
os: Fedora 32
computer_name: galantine
extra_software:
- zsh
ansible_user: root
user_account: blomley
loc: -119
os: Fedora 30
computer_name: gutemine
extra_software:
- subversion # ANKA software
- zsh
ansible_user: root
user_account: nie
ip_suffix: 92
loc: 618
os: Fedora 31
computer_name: homoeopatix
extra_software:
- zsh
...@@ -2,5 +2,8 @@ ansible_user: root ...@@ -2,5 +2,8 @@ ansible_user: root
user_account: damminsek user_account: damminsek
ip_suffix: 117 ip_suffix: 117
loc: 620 loc: 620
os: Fedora 27 os: Fedora 31
computer_name: Idefix computer_name: idefix
extra_software:
- mupdf
ansible_user: root
ansible_ssh_user: root
ansible_remote_user: fatehi
remote_user: fatehi
ip_suffix: 100
loc: 612
os: CentOS 7.4
computer_name: kantine
...@@ -5,3 +5,4 @@ remote_user: gethmann ...@@ -5,3 +5,4 @@ remote_user: gethmann
ip_suffix: 101 ip_suffix: 101
loc: 612 loc: 612
os: Fedora 28 os: Fedora 28
computer_name: Kneipix
ansible_user: root
user_account: gethmann
ip_suffix: 113
loc: 618
os: Fedora 27
computer_name: Asterix
extra_software:
- subversion # for ANKA software
- borgbackup
- mosh # ssh alternative
# keepass compatible console client
- kpcli
- perl-Clipboard
- perl-Capture-Tiny
- ctags # vim tags
- zsh
- neovim
- ShellCheck
- inkscape-table
# - fd-find
- ripgrep
- fzf # fuzzy finder
# ansible_connection: local
ansible_user: root
user_account: petri
ip_suffix: 122
loc: 621
os: Fedora 26
computer_name: Falbala
extra_software:
- freecad
ansible_user: bernhard
user_account: bernhard
ip_suffix: 127
loc: 622
os: Fedora 27
computer_name: Majestix
ansible_user: gethmann ansible_user: root
user_account: bernhard user_account: bernhard
ip_suffix: 93 ip_suffix: 93
loc: -10. loc: -119
os: ubuntu os: ubuntu
computer_name: Taubenus
ansible_user: root ansible_user: root
user_account: gethmann user_account: gethmann
ip_suffix: -gethmann ip_suffix: -gethmann
computer_name: lysander
loc: 618 loc: 618
os: Fedora 28 os: Fedora 32
extra_software: extra_software:
- subversion # for ANKA software - subversion # for ANKA software
- borgbackup - borgbackup
......
ansible_user: root
ansible_ssh_user: root
user_account: bernhard
ip_suffix: 70
loc: 601
os: Fedora 31
computer_name: majestix
ansible_user: root
user_account: fatehi
ip_suffix: 97
loc: 620
os: Fedora 31
computer_name: methusalix
ansible_user: root ansible_user: root
user_account: gethmann user_account: nie
ip_suffix: 126 ip_suffix: 126
loc: 618 loc: 618
os: Fedora 27 os: Fedora 31
computer_name: Obelix computer_name: obelix
extra_software:
- borgbackup
...@@ -2,5 +2,9 @@ ansible_user: root ...@@ -2,5 +2,9 @@ ansible_user: root
user_account: ning user_account: ning
ip_suffix: 115 ip_suffix: 115
loc: 619 loc: 619
os: Fedora 26 os: Fedora 31
computer_name: Costa Y Bravo computer_name: pepe
extra_software:
- python-qt5
- "qt5-qttools-devel"
...@@ -3,5 +3,5 @@ ansible_user: root ...@@ -3,5 +3,5 @@ ansible_user: root
user_account: rossmanith user_account: rossmanith
ip_suffix: 116 ip_suffix: 116
loc: 619 loc: 619
os: Fedora 27 os: Fedora 29
computer_name: Spürnix computer_name: spuernix
...@@ -3,4 +3,4 @@ user_account: tong ...@@ -3,4 +3,4 @@ user_account: tong
ip_suffix: 120 ip_suffix: 120
loc: 621 loc: 621
os: Fedora 28 os: Fedora 28
computer_name: Teefax computer_name: teefax
ansible_user: root
user_account: bernhard
loc: -119
os: Fedora 31
computer_name: titania
ip_suffix: 105
extra_software:
- subversion # ANKA software
- zsh
ansible_user: root
user_account: fatehi
ip_suffix: 96
loc: 619
os: Fedora 31
computer_name: troubadix
ansible_user: root
user_account: tong
loc: -119
os: Fedora 31
computer_name: ueberdrus
extra_software:
- subversion # ANKA software
ip_suffix: 74
# stable # stable
[clients] [clients]
las112.las.kit.edu amnesix.las.kit.edu
las113.las.kit.edu asterix.las.kit.edu
las115.las.kit.edu falbala.las.kit.edu
las116.las.kit.edu faulus.las.kit.edu
las117.las.kit.edu galantine.las.kit.edu
las118.las.kit.edu gutemine.las.kit.edu
las120.las.kit.edu homoeopatix.las.kit.edu
las122.las.kit.edu idefix.las.kit.edu
las126.las.kit.edu lysander.las.kit.edu
las-gethmann.las.kit.edu majestix.las.kit.edu
methusalix.las.kit.edu
obelix.las.kit.edu
pepe.las.kit.edu
spuernix.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[desktop] [desktop]
las112.las.kit.edu amnesix.las.kit.edu
las113.las.kit.edu asterix.las.kit.edu
las115.las.kit.edu falbala.las.kit.edu
las116.las.kit.edu faulus.las.kit.edu
las117.las.kit.edu galantine.las.kit.edu
las118.las.kit.edu gutemine.las.kit.edu
las120.las.kit.edu homoeopatix.las.kit.edu
las122.las.kit.edu idefix.las.kit.edu
las-gethmann.las.kit.edu lysander.las.kit.edu
majestix.las.kit.edu
methusalix.las.kit.edu
pepe.las.kit.edu
spuernix.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[graphics] [graphics]
las113.las.kit.edu asterix.las.kit.edu
las-gethmann.las.kit.edu lysander.las.kit.edu
las118.las.kit.edu amnesix.las.kit.edu
galantine.las.kit.edu
homoeopatix.las.kit.edu
[lasarchiv] [lasarchiv]
las113.las.kit.edu amnesix.las.kit.edu
las115.las.kit.edu asterix.las.kit.edu
las117.las.kit.edu falbala.las.kit.edu
las118.las.kit.edu faulus.las.kit.edu
las120.las.kit.edu gutemine.las.kit.edu
las122.las.kit.edu homoeopatix.las.kit.edu
las126.las.kit.edu idefix.las.kit.edu
las127.las.kit.edu lysander.las.kit.edu
las-gethmann.las.kit.edu majestix.las.kit.edu
methusalix.las.kit.edu
obelix.las.kit.edu
pepe.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[python] [python]
las112.las.kit.edu amnesix.las.kit.edu
las113.las.kit.edu asterix.las.kit.edu
las115.las.kit.edu falbala.las.kit.edu
las117.las.kit.edu faulus.las.kit.edu
las118.las.kit.edu galantine.las.kit.edu
las120.las.kit.edu gutemine.las.kit.edu
las122.las.kit.edu homoeopatix.las.kit.edu
las-gethmann.las.kit.edu idefix.las.kit.edu
lysander.las.kit.edu
methusalix.las.kit.edu
pepe.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[kdev] # KDevelope [kdev] # KDevelope
[jabref] [jabref]
las113.las.kit.edu
las117.las.kit.edu [zotero]
las-gethmann.las.kit.edu idefix.las.kit.edu
[pynaff] [pynaff]
las-gethmann.las.kit.edu lysander.las.kit.edu
las113.las.kit.edu asterix.las.kit.edu
las126.las.kit.edu obelix.las.kit.edu
[pycharm] [pycharm]
las-gethmann.las.kit.edu lysander.las.kit.edu
las113.las.kit.edu asterix.las.kit.edu
las115.las.kit.edu pepe.las.kit.edu
las117.las.kit.edu idefix.las.kit.edu
las122.las.kit.edu ueberdrus.las.kit.edu
[chrome] [chrome]
las-gethmann.las.kit.edu lysander.las.kit.edu
[rdp]
amnesix.las.kit.edu
asterix.las.kit.edu
faulus.las.kit.edu
galantine.las.kit.edu
gutemine.las.kit.edu
homoeopatix.las.kit.edu
methusalix.las.kit.edu
troubadix.las.kit.edu
ueberdrus.las.kit.edu
[latex] [latex]
las112.las.kit.edu amnesix.las.kit.edu
las-gethmann.las.kit.edu asterix.las.kit.edu
las113.las.kit.edu falbala.las.kit.edu
las115.las.kit.edu faulus.las.kit.edu
las117.las.kit.edu galantine.las.kit.edu
las118.las.kit.edu gutemine.las.kit.edu
las120.las.kit.edu homoeopatix.las.kit.edu
las122.las.kit.edu idefix.las.kit.edu
lysander.las.kit.edu
methusalix.las.kit.edu
pepe.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[opera] [opera]
las113.las.kit.edu amnesix.las.kit.edu
las118.las.kit.edu asterix.las.kit.edu
las122.las.kit.edu homoeopatix.las.kit.edu
las126.las.kit.edu idefix.las.kit.edu
las127.las.kit.edu majestix.las.kit.edu
methusalix.las.kit.edu
obelix.las.kit.edu
pepe.las.kit.edu
troubadix.las.kit.edu
lysander.las.kit.edu ansible_python_interpreter=/usr/bin/python3
[mad8] [mad8]
# depercated for Fedora >=26 # depercated for Fedora >=26
[nfs-server] [nfsserver]
las126.las.kit.edu obelix.las.kit.edu
# developement # developement
[dhcpd]
las101.las.kit.edu
las126.las.kit.edu
[lab] [lab]
# las93.las.kit.edu # las93.las.kit.edu
faulus.las.kit.edu ansible_python_interpreter=/usr/bin/python3
gutemine.las.kit.edu ansible_python_interpreter=/usr/bin/python3
titania.las.kit.edu ansible_python_interpreter=/usr/bin/python3
ueberdrus.las.kit.edu ansible_python_interpreter=/usr/bin/python3
[rpmbuild] [rpmbuild]
las113.las.kit.edu asterix.las.kit.edu
las-gethmann.las.kit.edu lysander.las.kit.edu
[elegant] [elegant]
las113.las.kit.edu asterix.las.kit.edu ansible_python_interpreter=/usr/bin/python3
las117.las.kit.edu falbala.las.kit.edu ansible_python_interpreter=/usr/bin/python3
las120.las.kit.edu galantine.las.kit.edu ansible_python_interpreter=/usr/bin/python3
las126.las.kit.edu homoeopatix.las.kit.edu ansible_python_interpreter=/usr/bin/python3
las-gethmann.las.kit.edu idefix.las.kit.edu ansible_python_interpreter=/usr/bin/python3
lysander.las.kit.edu ansible_python_interpreter=/usr/bin/python3
majestix.las.kit.edu ansible_python_interpreter=/usr/bin/python3
methusalix.las.kit.edu ansible_python_interpreter=/usr/bin/python3
obelix.las.kit.edu ansible_python_interpreter=/usr/bin/python3
pepe.las.kit.edu ansible_python_interpreter=/usr/bin/python3
spuernix.las.kit.edu ansible_python_interpreter=/usr/bin/python3
[epics] [epics]
las112.las.kit.edu asterix.las.kit.edu
las113.las.kit.edu faulus.las.kit.edu
las115.las.kit.edu galantine.las.kit.edu
las117.las.kit.edu gutemine.las.kit.edu
las-gethmann.las.kit.edu homoeopatix.las.kit.edu
idefix.las.kit.edu
lysander.las.kit.edu
majestix.las.kit.edu
pepe.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[ripgrep] [ripgrep]
las101.las.kit.edu asterix.las.kit.edu
las113.las.kit.edu lysander.las.kit.edu
las-gethmann.las.kit.edu
[inovesa] [inovesa]
las113.las.kit.edu asterix.las.kit.edu
obelix.las.kit.edu # ansible_connection=local
galantine.las.kit.edu
homoeopatix.las.kit.edu
pepe.las.kit.edu
[ipynb] # Jupyter notebook [ipynb] # Jupyter notebook
las120.las.kit.edu idefix.las.kit.edu
las122.las.kit.edu teefax.las.kit.edu
las-gethmann.las.kit.edu lysander.las.kit.edu
# semi stable # semi stable
[tgu] [tgu]
las115.las.kit.edu pepe.las.kit.edu
faulus.las.kit.edu
gutemine.las.kit.edu
[local] [local]
# 127.0.0.1 ansible_connection=local # 127.0.0.1 ansible_connection=local
[admin_pcs] [admin_pcs]
las101.las.kit.edu asterix.las.kit.edu
las113.las.kit.edu homoeopatix.las.kit.edu
las-gethmann.las.kit.edu lysander.las.kit.edu
[server] [server]
las101.las.kit.edu
[cn]
las-bernhard.anka.kit.edu
---
- hosts: all
vars:
vars_prompt:
- name: "ipa_admin_pass"
prompt: "What is IPA's admin password?"
private: yes
roles:
- ipa_users
...@@ -5,3 +5,8 @@ ...@@ -5,3 +5,8 @@
dnf: dnf:
name: jabref name: jabref
state: present state: present
when: (ansible_distribution == "Fedora" and (ansible_distribution_major_version | int) <= 28)
- name: UNSUPPORTED
fail:
msg: Jabref is no longer maintained by Fedora! Use zotero instead.
- hosts: lab
vars:
- dhcpd:
domain: maglab
subnet: 192.168.0.0
netmask: 255.255.255.0
range_start: 192.168.0.1
range_end: 192.168.0.100
routers: 192.168.0.10
broadcast: 192.168.0.255
host_list: host-list-maglab
roles:
- dhcpd
- lab
---
- include: common.yml
- include: clients.yml
tags: client
- include: lasarchiv.yml
- include: opera.yml
- include: desktop.yml
- include: elegant.yml
- include: epics.yml
- hosts: nfs-server - hosts: nfsserver
roles: roles:
- nfs-server - nfs-server
tags: nfs-server tags: nfs-server
......
- hosts: rdp
roles:
- rdp
client
remote 141.52.8.19
port 1194
dev tap
proto udp
auth-user-pass
nobind
comp-lzo no
tls-version-min 1.2
ca /etc/ssl/certs/ca-bundle.crt
verify-x509-name "C=DE, ST=Baden-Wuerttemberg, L=Karlsruhe, O=Karlsruhe Institute of Technology, OU=Steinbuch Centre for Computing, CN=ovpn.scc.kit.edu" subject
cipher AES-256-CBC
auth SHA384
reneg-sec 43200
verb 3
script-security 2
...@@ -41,7 +41,7 @@ ErrorPolicy stop-printer ...@@ -41,7 +41,7 @@ ErrorPolicy stop-printer
UUID urn:uuid:c20b481d-848e-30e6-5eab-8ba9fb397809 UUID urn:uuid:c20b481d-848e-30e6-5eab-8ba9fb397809
Info Oki MC851(PS) Info Oki MC851(PS)
Location Library Location Library
DeviceURI socket://129.13.108.106/ DeviceURI socket://oki.las.kit.edu/
State Idle State Idle
StateTime 1414591314 StateTime 1414591314
Type 8433756 Type 8433756
......
--- ---
- name: "Install basic client software" - name: "Install basic client software"
apt: apt:
name: "{{ item }}" name: "{{ client_software }}"
state: present state: present
with_items: "{{ client_software }}" # with_items: "{{ client_software }}"
when: ansible_distribution == 'Ubuntu' when: ansible_distribution == 'Ubuntu'
become: yes become: yes
- name: "Install basic client software" - name: "Install basic client software"
dnf: dnf:
name: "{{ item }}" name: "{{ client_software }}"
state: present state: present
with_items: "{{ client_software }}" # with_items: "{{ client_software }}"
when: ansible_distribution == 'Fedora' when: ansible_distribution == 'Fedora'
become: yes become: yes
...@@ -9,11 +9,8 @@ ...@@ -9,11 +9,8 @@
- name: install dependencies - name: install dependencies
become: yes become: yes
dnf: dnf:
name: "{{ item }}" name: ["hplip-common", "hplip"]
state: present state: present
with_items:
- "hplip-common"
- "hplip"
when: ansible_distribution == 'Fedora' when: ansible_distribution == 'Fedora'
- name: install CUPS - name: install CUPS
......
...@@ -3,4 +3,6 @@ ...@@ -3,4 +3,6 @@
tags: printer tags: printer
- import_tasks: basic_software.yml - import_tasks: basic_software.yml
- import_tasks: kill_x.yml - import_tasks: kill_x.yml
- import_tasks: vpn.yml
- import_tasks: ms_fonts.yml - import_tasks: ms_fonts.yml
tags: fonts
...@@ -2,7 +2,7 @@ ...@@ -2,7 +2,7 @@
- name: install fonts - name: install fonts
become: true become: true
dnf: dnf:
name: https://downloads.sourceforge.net/project/mscorefonts2/rpms/msttcore-fonts-installer-2.6-1.noarch.rpm name: "https://sourceforge.net/projects/mscorefonts2/files/rpms/msttcore-fonts-installer-2.6-1.noarch.rpm/download?use_mirror=netcologne&ts=1566291689&use_mirror=netcologne"
state: installed state: installed
tags: fonts tags: fonts
when: ansible_distribution == "Fedora" when: ansible_distribution == "Fedora"
---
- name: install OpenVPN client
become: yes
dnf:
name: ["openvpn", "NetworkManager-openvpn"]
state: present
# - name: install network manager for ansible
# become: yes
# dnf:
# name: ["NetworkManager-glib", "libnm-qt-devel", "nm-connection-editor", "libsemanage-python", "policycoreutils-python"]
# state: present
- name: get configuration file from SCC
# https://www.scc.kit.edu/dienste/10100.php
become: yes
copy:
src: kit-vpn2vlan.ovpn
dest: /etc/kit-vpn2vlan.ovpn
backup: yes
when: ansible_distribution == "Fedora"
# unfortunately you have to install the VPN on your own using the GUI tool NetworkManager.
# Configuration file for NetworkManager.
#
# See "man 5 NetworkManager.conf" for details.
#
# The directories /usr/lib/NetworkManager/conf.d/ and /run/NetworkManager/conf.d/
# can contain additional configuration snippets installed by packages. These files are
# read before NetworkManager.conf and have thus lowest priority.
# The directory /etc/NetworkManager/conf.d/ can contain additional configuration
# snippets. Those snippets are merged last and overwrite the settings from this main
# file.
#
# The files within one conf.d/ directory are read in asciibetical order.
#
# If /etc/NetworkManager/conf.d/ contains a file with the same name as
# /usr/lib/NetworkManager/conf.d/, the latter file is shadowed and thus ignored.
# Hence, to disable loading a file from /usr/lib/NetworkManager/conf.d/ you can
# put an empty file to /etc with the same name. The same applies with respect
# to the directory /run/NetworkManager/conf.d where files in /run shadow
# /usr/lib and are themselves shadowed by files under /etc.
#
# If two files define the same key, the one that is read afterwards will overwrite
# the previous one.
[main]
#plugins=ifcfg-rh,ibft
dhcp=dhclient
[logging]
# When debugging NetworkManager, enabling debug logging is of great help.
#
# Logfiles contain no passwords and little sensitive information. But please
# check before posting the file online. You can also personally hand over the
# logfile to a NM developer to treat it confidential. Meet us on #nm on freenode.
# Please post full logfiles except minimal modifications of private data.
#
# You can also change the log-level at runtime via
# $ nmcli general logging level TRACE domains ALL
# However, usually it's cleaner to enable debug logging
# in the configuration and restart NetworkManager so that
# debug logging is enabled from the start.
#
# You will find the logfiles in syslog, for example via
# $ journalctl -u NetworkManager
#
# Note that debug logging of NetworkManager can be quite verbose. Some messages
# might be rate-limited by the logging daemon (see RateLimitIntervalSec, RateLimitBurst
# in man journald.conf). Please disable rate-limiting before collecting debug logs.
#
#level=TRACE
#domains=ALL
[commands]
# What kind of upgrade to perform:
# default = all available upgrades
# security = only the security upgrades
upgrade_type = security
random_sleep = 0
# To just receive updates use dnf-automatic-notifyonly.timer
# Whether updates should be downloaded when they are available, by
# dnf-automatic.timer. notifyonly.timer, download.timer and
# install.timer override this setting.
download_updates = yes
# Whether updates should be applied when they are available, by
# dnf-automatic.timer. notifyonly.timer, download.timer and
# install.timer override this setting.
apply_updates = yes
[emitters]
# Name to use for this system in messages that are emitted. Default is the
# hostname.
# system_name = my-host
# How to send messages. Valid options are stdio, email and motd. If
# emit_via includes stdio, messages will be sent to stdout; this is useful
# to have cron send the messages. If emit_via includes email, this
# program will send email itself according to the configured options.
# If emit_via includes motd, /etc/motd file will have the messages. if
# emit_via includes command_email, then messages will be send via a shell
# command compatible with sendmail.
# Default is email,stdio.
# If emit_via is None or left blank, no messages will be sent.
emit_via = motd,stdio
[email]
# The address to send email messages from.
email_from = root@localhost
# List of addresses to send messages to.
email_to = root
# Name of the host to connect to to send email messages.
email_host = localhost
[command]
# The shell command to execute. This is a Python format string, as used in
# str.format(). The format function will pass a shell-quoted argument called
# `body`.
# command_format = "cat"
# The contents of stdin to pass to the command. It is a format string with the
# same arguments as `command_format`.
# stdin_format = "{body}"
[command_email]
# The shell command to use to send email. This is a Python format string,
# as used in str.format(). The format function will pass shell-quoted arguments
# called body, subject, email_from, email_to.
# command_format = "mail -s {subject} -r {email_from} {email_to}"
# The contents of stdin to pass to the command. It is a format string with the
# same arguments as `command_format`.
# stdin_format = "{body}"
# The address to send email messages from.
email_from = root@localhost
# List of addresses to send messages to.
email_to = root
[base]
# This section overrides dnf.conf
# Use this to filter DNF core messages
debuglevel = 1
-----BEGIN CERTIFICATE-----
MIIKcjCCCVqgAwIBAgIMIKiiExs4FR9L2Kp4MA0GCSqGSIb3DQEBCwUAMHsxCzAJ
BgNVBAYTAkRFMRswGQYDVQQIDBJCYWRlbi1XdWVydHRlbWJlcmcxEjAQBgNVBAcM
CUthcmxzcnVoZTEqMCgGA1UECgwhS2FybHNydWhlIEluc3RpdHV0ZSBvZiBUZWNo
bm9sb2d5MQ8wDQYDVQQDDAZLSVQtQ0EwHhcNMTkwMzEzMTU0MDU0WhcNMjEwNjE0
MTU0MDU0WjCBhDELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVt
YmVyZzESMBAGA1UEBwwJS2FybHNydWhlMSowKAYDVQQKDCFLYXJsc3J1aGUgSW5z
dGl0dXRlIG9mIFRlY2hub2xvZ3kxGDAWBgNVBAMMD3dlYi5sYXMua2l0LmVkdTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKLgVunuUl0m3520OuAnewPw
N+zG0A295N4wSIS5KYflOxfmGBKKnAwefSzNvUIIOnyr+rrD2GdVG4ZMjQXmATAm
ibiQLVAYsPu+yTOfWUmwKDJCYLOCH1VkwPJbebSMTTuSGC3uRaKdtCucXX6TnHqY
jB0LPs730+KVPDFIiKps6U/SqfOmoCTr5owDiZXM75rl4sPtHSvNpsfFC1Ls6RIm
z2moISu0Q1wLdU6sPUMmvjRtv+pkPD6nMLfO0j9y6SL2z7AbOVJt+JcXZLteGW11
nQnRDOkHwpldy8xrYczIHd6bMp0hllVHSE8LsXs9H16yOy7LNkUMS8SfGFVlam84
yn5/h7jFUgHY1BCsORyfR2w5MznOWH+HIy2U+RKA3u1JlPQZtH1Q6hHR6oSRgx8O
4cf4lqgUELM2TydxEBiEupcHhiIHwleGHfTXL3ChtxSu/VyJZQcIiZ8gSDVTDrG7
bAX5rnXEoTeqvenLJAv8cAECl9J22wUCzSz3MzFpalDQY2+P7mpPxYKcRcQQxCpo
wVuKiiRw+JjN51AKkmELtZ5a/SD5JOy9PvmfAN1OUqJguxO+MbhYfp2If47Gy0ht
WuYZ47H8VFIPbVD7a8uVKX1VWKBaBvW5N4Cl7Wu/2yny3Zw+yw2XZFpPvmSNlq/T
8CYw0kFOQynCDzhrKASnAgMBAAGjggXqMIIF5jAJBgNVHRMEAjAAMA4GA1UdDwEB
/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQU/hB/iqc12SwT
I7iIPJPSnPnKgLcwHwYDVR0jBBgwFoAUBBq/HJORPdPZPbDeEyPlmnD0LggwaAYD
VR0RBGEwX4IPZG5mLmxhcy5raXQuZWR1ghFtdW5pbi5sYXMua2l0LmVkdYIQcHlw
aS5sYXMua2l0LmVkdYIWc2hhcmVsYXRleC5sYXMua2l0LmVkdYIPd2ViLmxhcy5r
aXQuZWR1MH0GA1UdHwR2MHQwOKA2oDSGMmh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUv
a2l0LWNhLWcyL3B1Yi9jcmwvY2FjcmwuY3JsMDigNqA0hjJodHRwOi8vY2RwMi5w
Y2EuZGZuLmRlL2tpdC1jYS1nMi9wdWIvY3JsL2NhY3JsLmNybDCBzQYIKwYBBQUH
AQEEgcAwgb0wMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NT
UC1TZXJ2ZXIvT0NTUDBCBggrBgEFBQcwAoY2aHR0cDovL2NkcDEucGNhLmRmbi5k
ZS9raXQtY2EtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEIGCCsGAQUFBzAChjZo
dHRwOi8vY2RwMi5wY2EuZGZuLmRlL2tpdC1jYS1nMi9wdWIvY2FjZXJ0L2NhY2Vy
dC5jcnQwWQYDVR0gBFIwUDAIBgZngQwBAgIwDQYLKwYBBAGBrSGCLB4wDwYNKwYB
BAGBrSGCLAEBBDARBg8rBgEEAYGtIYIsAQEEAwkwEQYPKwYBBAGBrSGCLAIBBAMJ
MIIDXgYKKwYBBAHWeQIEAgSCA04EggNKA0gAdwBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAWl3tsubAAAEAwBIMEYCIQDleY52tBqLOUlBzrb6Dz5M
uWEXellG3NnTfBaN87g67AIhAPHCGa4Y2xNiGoTecdUngDbbj+xdQyBLFR1mFrQV
m0V9AHcAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFpd7bMqAAA
BAMASDBGAiEA/mfu1lL6ri+Ib4fRjPRkLiSzriZQgHOt+ew5UVI0YHoCIQDXtv2r
HG6aNaa9YCunjpA7Bc3w/RBjkCWmwKKoRzKzlwB2AKrnC388uNVmyGwvFpecn0Rf
aasOtFNVibL3egMBBPPNAAABaXe2y7QAAAQDAEcwRQIgOWYMd92nC6diBFP9EJk2
rvjYZMq92BSuGBKjy8P+OQQCIQCq2c2bqSRqX8biZ/WrpUgUs3CxOiX+OnUkci49
RXxCFwB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABaXe2y+AA
AAQDAEcwRQIhALRrZGVHHpPLjOWbrs6xb+DCeRnXDyfZR5ttNezHZirFAiA80IU7
FTBq3H7kswcnSiK3RAs0WLd5h5NpV+CsmeNzmgB1AKS5CZC0GFgUh7sTosxncAo8
NZgE+RvfuON3zQ7IDdwQAAABaXe2y+AAAAQDAEYwRAIgbb9xvS1vv31chFtfr/nl
9GPzyx9Uo2vjIJKgk8KcTKkCIAtl6Zgda9Bnj47yTfVkbM3Tzc6ZvxOToqVVWO9v
Z4a9AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFpd7bL2wAA
BAMARzBFAiBD2wzVFDMmTRHKnF0vZN4Yia4Z2xe11iBpYtQU5mZ3vQIhAOgfeMi9
7x96dZRZLsTs8J00KGz4NJcHX9RHRXyjeXQlAHUARJRlLrDuzq/EQAfYqP4owNrm
gr7YyzG1P9MzlrW2gagAAAFpd7bScAAABAMARjBEAh8PGD3UXg5AeqX1KK2rEZWY
jDyVOKXiaNM5uyEzGPIgAiEAuSLcjMd8cDtFuRotM+Jn9aIXiJIIcRpexcoA26PL
PJkwDQYJKoZIhvcNAQELBQADggEBAE5OhnWn7XdXaIbX16SpWHV/Qfb/4+Hzzf6F
KVl6bUJJ/maIUkmrjUWVYxHSfkL0Kx6aYL/WEdjZD0S40rjCZkEETJo3Lqy+WDgT
ChgWEGzRBvqoNDVkywevsE77K5w2HaGKogWvD8IeOu/YOfZYKqTYYFz4ej7/PUit
8TNbY0pYyEhXoKmoXsBJUvY0Fc03GJZDTevC6iEqCQOlMLprQxT/KuYthIHc/lv/
qCIlbzsml0poyglupVIwzhvarFsQUPyZGoSEHcMG82Ors9VJbTaBk28uvdtORX9m
gCkCBwb7DRxZb5US49rygRGROHqRaqlC/ASoXSznJgxUj8jL7Lc=
-----END CERTIFICATE-----
subject= /C=DE/ST=Baden-Wuerttemberg/L=Karlsruhe/O=Karlsruhe Institute of Technology/CN=KIT-CA
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIMHDrUjCTtki6w9JCuMA0GCSqGSIb3DQEBCwUAMIGVMQsw
CQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLEwdERk4t
UEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5
IDIwHhcNMTYxMTAzMTUyNTQ4WhcNMzEwMjIyMjM1OTU5WjB7MQswCQYDVQQGEwJE
RTEbMBkGA1UECAwSQmFkZW4tV3VlcnR0ZW1iZXJnMRIwEAYDVQQHDAlLYXJsc3J1
aGUxKjAoBgNVBAoMIUthcmxzcnVoZSBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEP
MA0GA1UEAwwGS0lULUNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
1cwA90GCGWXXCQ+V4MkCc9CaPcYU0hrUc0mTyvbQ3DuOMey+w5aFI8JkmAD5CHsj
jDWe/uuANc6OR828xLoN6EV4AsNMhD9HMelYZrGuBS2nsOVlGzIIf8t+RX7pDVQg
Dc/UvczziO45HmLCoYeUDcqn9Qho8Jnuh4nXJdPCRB4UvcwtRCpYkgCeC+Llxfe4
IpdnvABTX1kwYR4TVmnAg3Mel5tLoV+WcxTdwJMpsbjFz8P11qMta53Nactef4gx
BWMSEpDlnGL+swzkUfd1s+3NQkFKBbAZ6ehZivOZc4ah4iRxB1T/5v2Tza+Hyao0
4f5SbkkD2Y1p0Z5vdMVEPwIDAQABo4ICBTCCAgEwEgYDVR0TAQH/BAgwBgEB/wIB
ATAOBgNVHQ8BAf8EBAMCAQYwKQYDVR0gBCIwIDANBgsrBgEEAYGtIYIsHjAPBg0r
BgEEAYGtIYIsAQEEMB0GA1UdDgQWBBQEGr8ck5E909k9sN4TI+WacPQuCDAfBgNV
HSMEGDAWgBST49gyJtrV8UqlkUrg6kviogzP4TCBjwYDVR0fBIGHMIGEMECgPqA8
hjpodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWcyLWNhL3B1Yi9j
cmwvY2FjcmwuY3JsMECgPqA8hjpodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2dsb2Jh
bC1yb290LWcyLWNhL3B1Yi9jcmwvY2FjcmwuY3JsMIHdBggrBgEFBQcBAQSB0DCB
zTAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZl
ci9PQ1NQMEoGCCsGAQUFBzAChj5odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2Jh
bC1yb290LWcyLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDBKBggrBgEFBQcwAoY+
aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2Fj
ZXJ0L2NhY2VydC5jcnQwDQYJKoZIhvcNAQELBQADggEBAH+/QKluUYGThHAZeh5I
erhZdIN9B488jjjexsfs1p0IHjKAElUaxHdjTfHc2zENqfPtc+EKRJL04MOUWJj7
8BSR2MOWu8WrOVXYmIZAJAzH1L1eFNR6cem3d1nsnjqtqw21EQ+/O/kXb9lIK/sv
YDwudINFcdWE5UmOic9ZHSwFPb4oEeM97tG18WQkiVzKF1cM6nzLHWp78uRLwD1Q
ek1y7eX5gc8iQSvv33wTlh0ppmbDqfaMTR/X/ED7SFfd5S9CF07EXj/XWlv7ps2g
afR793FaPrPloGvghtC7pKT8uOMNBXC02Xq6drN6JlU+5k+bbSRcAd40Bqn6vyYA
RKQ=
-----END CERTIFICATE-----
subject= /C=DE/O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V./OU=DFN-PKI/CN=DFN-Verein Certification Authority 2
-----BEGIN CERTIFICATE-----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