feat(ssh): additional public servers fingerprints

README.md

@@ -102,6 +102,12 @@ https://github.com/fairyglade/ly
 
 https://archinstall.archlinux.page/
 
+## Known issues
+
+### SSH known hosts
+
+You need to keep updated the known hosts in your profiles to not have this info erased each time you play the ansible book.
+
 ## Pistes
 
 - https://github.com/id101010/ansible-archlinux

ansible/arch_packages.yaml

@@ -5,7 +5,6 @@ common:
     - util-linux
     - dkms
     - less
-    - git
     - tmux
     - screen
     - openssh
@@ -165,9 +164,13 @@ common:
         - aur/tippecanoe
       osm:
         - aur/osmium-tool
-    git:
+    vcs:
-      - aur/gitwatch-git
+      git:
-      - tig
+        - git
+        - tig
+        - aur/gitwatch-git
+      fossil:
+        - fossil
     network:
       bandwidth:
         - name: iperf3
@@ -492,6 +495,9 @@ common:
       geo:
         - aur/mepo
         - qgis
+      vcs:
+        git:
+          - giggle
       db:
         - name: dbeaver
           tags: ['heavy-gui']

ansible/templates/ssh/known_hosts

@@ -1,13 +1,33 @@
-# Auto-generated known hosts file, try to **not** edit this file
+# MonakhOS: Auto-generated known hosts file, try to **not** edit this file
-{% for enabled_profile in enabled_profiles %}
-# {{ enabled_profile.name }}
-{{ lookup('file', tempdir_known_hosts.path + '/' + enabled_profile.name) }}
 
-{% endfor %}
+# ======================
-
+#   Public SSH servers
-# from https://docs.github.com/fr/enterprise-cloud@latest/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
+# ====================== 
-# GITHUB
+# GitHub
+# from: https://docs.github.com/fr/enterprise-cloud@latest/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
 github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
 github.com ssh-rsa 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
 github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
 
+# GitLab
+# from: https://docs.gitlab.com/ee/user/gitlab_com/#ssh-host-keys-fingerprints
+gitlab.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf
+gitlab.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bNKTBSpIYDEGk9KxsGh3mySTRgMtXL583qmBpzeQ+jqCMRgBqB98u3z++J1sKlXHWfM9dyhSevkMwSbhoR8XIq/U0tCNyokEi/ueaBMCvbcTHhO7FcwzY92WK4Yt0aGROY5qX2UKSeOvuP4D6TPqKF1onrSzH9bx9XUf2lEdWT/ia1NEKjunUqu1xOB/StKDHMoX4/OKyIzuS0q/T1zOATthvasJFoPrAjkohTyaDUz2LN5JoH839hViyEG82yB+MjcFV5MU3N1l1QL3cVUCh93xSaua1N85qivl+siMkPGbO5xR/En4iEY6K2XPASUEMaieWVNTRCtJ4S8H+9
+gitlab.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFSMqzJeV9rUzU4kWitGjeR4PWSa29SPqJ1fVkhtj3Hw9xjLVXVYrU9QlYWrOLXBpQ6KWjbjTDTdDkoohFzgbEY=
+
+# Codeberg
+codeberg.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIVIC02vnjFyL+I4RHfvIGNtOgJMe769VTF1VR4EB3ZB
+codeberg.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8hZi7K1/2E2uBX8gwPRJAHvRAob+3Sn+y2hxiEhN0buv1igjYFTgFO2qQD8vLfU/HT/P/rqvEeTvaDfY1y/vcvQ8+YuUYyTwE2UaVU5aJv89y6PEZBYycaJCPdGIfZlLMmjilh/Sk8IWSEK6dQr+g686lu5cSWrFW60ixWpHpEVB26eRWin3lKYWSQGMwwKv4LwmW3ouqqs4Z4vsqRFqXJ/eCi3yhpT+nOjljXvZKiYTpYajqUC48IHAxTWugrKe1vXWOPxVXXMQEPsaIRc2hpK+v1LmfB7GnEGvF1UAKnEZbUuiD9PBEeD5a1MZQIzcoPWCrTxipEpuXQ5Tni4mN
+codeberg.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBL2pDxWr18SoiDJCGZ5LmxPygTlPu+cCKSkpqkvCyQzl5xmIMeKNdfdBpfbCGDPoZQghePzFZkKJNR/v9Win3Sc=
+
+# TODO: add sourcehut SSH public key fingerprints
+
+
+{% for enabled_profile in enabled_profiles %}
+# ==============================
+#   Profile: {{ enabled_profile.name }}
+# ==============================
+{{ lookup('file', tempdir_known_hosts.path + '/' + enabled_profile.name) }}
+
+{% endfor %}
+

ansible/workstation.yaml

@@ -329,6 +329,11 @@
         path: "{{ home }}/.vaults/pass"
         state: directory
         recurse: true
+    - name: Setup workspace folder
+      file:
+        path: "{{ home }}/workspace"
+        state: directory
+        recurse: true
       
     - name: Setup main popequer notebook
       include_role:
@@ -346,17 +351,6 @@
         state: started
         enabled: true
 
-    # WORKSPACE
-    - name: Clone books sources
-      ansible.builtin.git:
-        repo: "git@forge.lefuturiste.fr:mbess/books-sources.git"
-        dest: /home/mbess/workspace/books_sources
-      when: "'perso' in enabled_profiles"
-    - name: Clone snippets space
-      ansible.builtin.git:
-        repo: "git@forge.lefuturiste.fr:mbess/snippets.git"
-        dest: /home/mbess/workspace/snippets
-
     - name: Setup wofi link
       become: true
       file:
@@ -392,7 +386,16 @@
       include_role:
         name: wayland_fixer
 
-    # Final workspaces
+    # Initialize Workspaces
+    - name: Clone books sources
+      ansible.builtin.git:
+        repo: "git@forge.lefuturiste.fr:mbess/books-sources.git"
+        dest: /home/mbess/workspace/books_sources
+      when: "'perso' in enabled_profiles"
+    - name: Clone general programming snippets
+      ansible.builtin.git:
+        repo: "git@forge.lefuturiste.fr:mbess/snippets.git"
+        dest: /home/mbess/workspace/snippets
     - name: Clone monakhos
       ansible.builtin.git:
         repo: "git@forge.lefuturiste.fr:mbess/monakhos.git"