Django BOfH
ffmuc-offloader_rpb4

Repository

$ ssh-keygen -t ed25519 -a 100 -C 'FFMUC Remote-User' -f ~/.ssh/id_ed25519_ffmuc
 $ mkdir ~/ansible
 $ cp /etc/ansible/ansible.cfg ~/.ansible.cfg
 $ vim ~/.ansible.cfg
 $ egrep -v '(^.*#|^$)' ~/.ansible.cfg

[defaults]
inventory          = ~/ansible/inventories/production/hosts
interpreter_python = auto_silent
[inventory]
[privilege_escalation]
[paramiko_connection]
[ssh_connection]
[persistent_connection]
connect_timeout = 30
[accelerate]
[selinux]
[colors]
[diff]
$ clone https://github.com/Django-BOfH/ffmuc-offloader_rpb4.git ~/ansible
 $ wget https://downloads.raspberrypi.org/raspios_lite_arm64/images/raspios_lite_arm64-2022-01-28/2022-01-28-raspios-bullseye-arm64-lite.zip{,.sha256}`
 $ sha256sum --check 2022-01-28-raspios-bullseye-arm64-lite.zip.sha256`

2022-01-28-raspios-bullseye-arm64-lite.zip: OK
 $ unzip 2022-01-28-raspios-bullseye-arm64-lite.zip

Archive:  2022-01-28-raspios-bullseye-arm64-lite.zip
inflating: 2022-01-28-raspios-bullseye-arm64-lite.img
Sep  5 21:10:57 Djangos-ThinkPad-X230 kernel: [12795.867603] mmc0: new high speed SDHC card at address aaaa
Sep  5 21:10:57 Djangos-ThinkPad-X230 kernel: [12795.868313] mmcblk0: mmc0:aaaa SC16G 14.8 GiB
Sep  5 21:10:57 Djangos-ThinkPad-X230 kernel: [12795.871017]  mmcblk0: p1 p2
Sep  5 21:10:58 Djangos-ThinkPad-X230 kernel: [12796.199093] FAT-fs (mmcblk0p1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
Sep  5 21:10:58 Djangos-ThinkPad-X230 systemd[1]: Finished Clean the /media/django/boot mount point.
Sep  5 21:10:58 Djangos-ThinkPad-X230 udisksd[976]: Mounted /dev/mmcblk0p1 at /media/django/boot on behalf of uid 1001
Sep  5 21:10:58 Djangos-ThinkPad-X230 kernel: [12796.302402] EXT4-fs (mmcblk0p2): recovery complete
Sep  5 21:10:58 Djangos-ThinkPad-X230 kernel: [12796.303545] EXT4-fs (mmcblk0p2): mounted filesystem with ordered data mode. Opts: (null)
Sep  5 21:10:58 Djangos-ThinkPad-X230 systemd[1]: Finished Clean the /media/django/rootfs mount point.
Sep  5 21:10:58 Djangos-ThinkPad-X230 udisksd[976]: Mounted /dev/mmcblk0p2 at /media/django/rootfs on behalf of uid 1001
Sep  5 21:11:09 Djangos-ThinkPad-X230 gnome-terminal-[8119]: g_menu_insert_item: assertion 'G_IS_MENU_ITEM (item)' failed</code>
 # dd if=/home/django/Freifunk/2022-01-28-raspios-bullseye-arm64-lite.img of=/dev/mmcblk0 \
      bs=4M status=progress conv=fsync`
 $ sudo dd if=/home/django/Freifunk/2022-01-28-raspios-bullseye-arm64-lite.img of=/dev/mmcblk0 \
      bs=4M status=progress conv=fsync`
 # touch /run/media/django/boot/ssh
 $ touch /media/django/boot/ssh
 $ ssh -l pi 192.168.0.23 -o IdentitiesOnly=yes "passwd" && \
       ssh-copy-id -i ~/.ssh/id_ed25519_ffmuc.pub -o IdentitiesOnly=yes pi@192.168.0.23
The authenticity of host '192.168.0.23 (192.268.0.23)' can't be established.
ECDSA key fingerprint is SHA256:vXhdvud24tyTUtOan4XeTZ7GzxZDQn9Rj0mxuhimkH4.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '192.168.0.23' (ECDSA) to the list of known hosts.

pi@192.168.0.23's password:

Current password: raspberry

New password: gECzebzn7GYSLvXueECAxeGm7l7
Retype new password: gECzebzn7GYSLvXueECAxeGm7l7

passwd: password updated successfully
Changing password for pi.
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/django/.ssh/id_ed25519_freifunk.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
pi@192.168.0.23's password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh -o 'IdentitiesOnly=yes' 'pi@192.168.0.23'"
and check to make sure that only the key(s) you wanted were added.


 $ ssh -o 'IdentitiesOnly=yes' 'pi@192.168.0.23'

Linux raspberrypi 5.4.51-v7l+ #1333 SMP Mon Aug 10 16:51:40 BST 2020 armv7l

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/STERNCHEN/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.

Wi-Fi is currently blocked by rfkill.
Use raspi-config to set the country before use.

pi@raspberrypi:~ $
 vim ~/ansible/inventories/production/host_vars/rpb4-ol-a/individual_host_specification

# IP-Adresse unseres Raspberry in unserem eigenen lokalen Netzwerk
# Alugehäuse ohne Lüfter und ohne Display
# MAC: dc:a6:32:5c:46:07
ansible_ssh_host: 192.168.0.23
ansible_port: 22
ansible_user: pi
ansible_ssh_private_key_file: ~/.ssh/id_ed25519_freifunk
#
batman_adv_version:   "2022.0"
ffmuc_segment:        "muc_ost"
ffmuc_gateway:        "gw06"
raspberry_hostname:   "ff_pliening_rpb4_ol_v6a"
node_contact_address: "hier entlang => https://bit.ly/2VxGoXp"
raspberry_latitude:   "48.198790640"
raspberry_longitude:  "11.798020899"
raspberry_wifi:       "ja"
raspberry_clientvlan: "7"
raspberry_meshvlan:   "8"
 $ ansible-playbook -i ~/ansible/inventories/production/hosts
                       ~/ansible/wireguard-offloader.yml
                       --limit rpb4-ol-a