Ansible collection: foundata.linux

This repository contains the foundata.linux Ansible Collection.

It provides roles for managing common Linux host concerns: automatic updates, conditional reboots, sudo policy, kernel parameters, and local users and groups.

⭐ Found this useful? Support open-source and star this project:

Table of contents

• Included content
  • Role: foundata.linux.auto_update
  • Role: foundata.linux.disk
  • Role: foundata.linux.reboot
  • Role: foundata.linux.sudo
  • Role: foundata.linux.sysctl
  • Role: foundata.linux.user
• Dependencies
• Versioning and deprecation
• Licensing, copyright
• Author information

Included content

Role: foundata.linux.auto_update

Configures each supported distribution's native unattended-update service through a consistent interface, including update scope, schedules, exclusions, notifications, and controlled reboot policies. Its README.md covers configuration, usage examples, and more:

• Ansible role: foundata.linux.auto_update
  • Table of contents
  • Features
  • Example playbooks, using this role
  • Supported tags
  • Role variables
    • auto_update_linux_state
    • auto_update_linux_autoupgrade
    • auto_update_linux_service_state
    • auto_update_linux_type
    • auto_update_linux_apply
    • auto_update_linux_timer_settings
    • auto_update_linux_reboot
    • auto_update_linux_reboot_timer_settings
    • auto_update_linux_exclude
    • auto_update_linux_notify_email
    • auto_update_linux_extra_config
      • auto_update_linux_extra_config['unattended-upgrades']
      • auto_update_linux_extra_config['dnf-automatic']
      • auto_update_linux_extra_config['os-update']
  • Dependencies
  • Compatibility
  • External requirements

Role: foundata.linux.disk

Manages dedicated data disks: single partition spanning the disk, filesystem (XFS or ext4), mount plus /etc/fstab entry by filesystem UUID — with safe handling of existing data, mountpoint content preservation on first mount, and one-time SELinux relabeling. Its README.md covers configuration, usage examples, and more:

• Ansible role: foundata.linux.disk
  • Table of contents
  • Example playbooks, using this role
  • Supported tags
  • Role variables
    • disk_linux_state
    • disk_linux_autoupgrade
    • disk_linux_device_defaults
      • disk_linux_device_defaults['state']
      • disk_linux_device_defaults['wipe']
      • disk_linux_device_defaults['on_missing']
      • disk_linux_device_defaults['on_mismatch']
      • disk_linux_device_defaults['partition_table']
      • disk_linux_device_defaults['grow']
      • disk_linux_device_defaults['filesystem']
        • disk_linux_device_defaults['filesystem']['type']
        • disk_linux_device_defaults['filesystem']['mkfs_options']
      • disk_linux_device_defaults['mount']
        • disk_linux_device_defaults['mount']['options']
        • disk_linux_device_defaults['mount']['dump']
        • disk_linux_device_defaults['mount']['passno']
        • disk_linux_device_defaults['mount']['on_nonempty']
        • disk_linux_device_defaults['mount']['selinux_relabel']
    • disk_linux_devices
      • disk_linux_devices['device']
      • disk_linux_devices['state']
      • disk_linux_devices['wipe']
      • disk_linux_devices['on_missing']
      • disk_linux_devices['on_mismatch']
      • disk_linux_devices['partition_table']
      • disk_linux_devices['grow']
      • disk_linux_devices['filesystem']
        • disk_linux_devices['filesystem']['type']
        • disk_linux_devices['filesystem']['mkfs_options']
      • disk_linux_devices['mount']
        • disk_linux_devices['mount']['path']
        • disk_linux_devices['mount']['options']
        • disk_linux_devices['mount']['dump']
        • disk_linux_devices['mount']['passno']
        • disk_linux_devices['mount']['on_nonempty']
        • disk_linux_devices['mount']['selinux_relabel']
  • Dependencies
  • Compatibility
  • External requirements

Role: foundata.linux.reboot

Detects whether Linux systems require a reboot and performs it safely, with cross-platform checks and configurable connection, timeout, messaging, and readiness validation. Its README.md covers configuration, usage examples, and more:

• Ansible role: foundata.linux.reboot
  • Table of contents
  • Features
  • Example playbooks, using this role
  • Supported tags
  • Role variables
    • reboot_linux_state
    • reboot_linux_autoupgrade
    • reboot_linux_boot_time_cmd
    • reboot_linux_connect_timeout
    • reboot_linux_msg
    • reboot_linux_post_delay
    • reboot_linux_timeout
    • reboot_linux_test_cmd
  • Dependencies
  • Compatibility
  • External requirements

Role: foundata.linux.sudo

Installs and configures sudo through declarative, visudo-validated rules and defaults, with optional authoritative cleanup of unmanaged drop-ins. Its README.md covers configuration, usage examples, and more:

• Ansible role: foundata.linux.sudo
  • Table of contents
  • Features
  • Example playbooks, using this role
  • Supported tags
  • Role variables
    • sudo_linux_state
    • sudo_linux_autoupgrade
    • sudo_linux_rules
      • sudo_linux_rules['name']
      • sudo_linux_rules['state']
      • sudo_linux_rules['users']
      • sudo_linux_rules['groups']
      • sudo_linux_rules['commands']
      • sudo_linux_rules['runas']
      • sudo_linux_rules['nopassword']
      • sudo_linux_rules['setenv']
      • sudo_linux_rules['noexec']
      • sudo_linux_rules['host']
    • sudo_linux_rule_defaults
    • sudo_linux_defaults
    • sudo_linux_extra_content
    • sudo_linux_delete_unmanaged
    • sudo_linux_delete_unmanaged_exclude
  • Dependencies
  • Compatibility
  • External requirements

Role: foundata.linux.sysctl

Manages Linux kernel parameters through sysctl, combining explicit overrides with stackable, resource-aware workload and security profiles. Its README.md covers configuration, usage examples, and more:

• Ansible role: foundata.linux.sysctl
  • Table of contents
  • Features
  • Example playbooks, using this role
  • Supported tags
  • Role variables
    • sysctl_linux_state
    • sysctl_linux_autoupgrade
    • sysctl_linux_profile
    • sysctl_linux_parameters
    • sysctl_linux_reload
    • sysctl_linux_verify
    • sysctl_linux_ignore_unknown_key_errors
    • sysctl_linux_modules_required
    • sysctl_linux_config_dropin_file_name
  • Dependencies
  • Compatibility
  • External requirements

Role: foundata.linux.user

Manages local users and groups declaratively, including account defaults, home directories, password policies, SSH authorized keys, and optional cleanup of unmanaged accounts. Its README.md covers configuration, usage examples, and more:

• Ansible role: foundata.linux.user
  • Table of contents
  • Features
  • Example playbooks, using this role
  • Supported tags
  • Role variables
    • user_linux_account_defaults
    • user_linux_accounts
      • user_linux_accounts['name']
      • user_linux_accounts['state']
      • user_linux_accounts['uid']
      • user_linux_accounts['comment']
      • user_linux_accounts['shell']
      • user_linux_accounts['umask']
      • user_linux_accounts['system']
      • user_linux_accounts['local']
      • user_linux_accounts['seuser']
      • user_linux_accounts['group']
      • user_linux_accounts['groups']
      • user_linux_accounts['groups_append']
      • user_linux_accounts['expires']
      • user_linux_accounts['home']
        • user_linux_accounts['home']['path']
        • user_linux_accounts['home']['create']
        • user_linux_accounts['home']['move']
        • user_linux_accounts['home']['skeleton']
      • user_linux_accounts['password']
        • user_linux_accounts['password']['hash']
        • user_linux_accounts['password']['lock']
        • user_linux_accounts['password']['update']
        • user_linux_accounts['password']['expire_min']
        • user_linux_accounts['password']['expire_max']
        • user_linux_accounts['password']['expire_warn']
      • user_linux_accounts['ssh_authorized_keys']
        • user_linux_accounts['ssh_authorized_keys']['key']
        • user_linux_accounts['ssh_authorized_keys']['options']
        • user_linux_accounts['ssh_authorized_keys']['state']
      • user_linux_accounts['ssh_authorized_keys_delete_unmanaged']
    • user_linux_group_defaults
    • user_linux_groups
      • user_linux_groups['name']
      • user_linux_groups['state']
      • user_linux_groups['gid']
      • user_linux_groups['system']
    • user_linux_accounts_delete_unmanaged
    • user_linux_accounts_delete_unmanaged_exclude
    • user_linux_uid_min
    • user_linux_uid_max
  • Dependencies
  • Compatibility
  • External requirements

Dependencies

See dependencies in galaxy.yml.

Versioning and deprecation

This project follows Semantic Versioning. Patch releases contain compatible fixes; minor releases may add compatible features or deprecations. Breaking changes, including changes to public defaults or removal of supported runtimes, require a major release.

Deprecations are announced in the changelog and relevant documentation, with migration guidance and the planned removal version. Deprecated interfaces remain available until that major release.

Licensing, copyright

Copyright (c) 2026, foundata GmbH https://foundata.com

This project is licensed under the GNU General Public License v3.0 or later (SPDX-License-Identifier: GPL-3.0-or-later), see LICENSES/GPL-3.0-or-later.txt for the full text.

The REUSE.toml file provides detailed licensing and copyright information in a human- and machine-readable format. This includes parts that may be subject to different licensing or usage terms, such as third-party components. The repository conforms to the REUSE specification. You can use reuse spdx to create an SPDX software bill of materials (SBOM).

Trademarks

Third-party trademarks used in this repository:

• Ansible®, Fedora®, Red Hat® and RHEL® are trademarks of Red Hat, LLC, registered in the United States and other countries.
• Debian® is a trademark of Software in the Public Interest, Inc., registered in Germany and the United States.
• Docker® is a trademark of Docker, Inc., registered in the European Union and the United States.
• Kubernetes® is a trademark of The Linux Foundation, registered in the European Union and the United States.
• Linux® is a trademark of Linus Torvalds, registered in Germany, the European Union and the United States.
• openSUSE® is a trademark of SUSE LLC or its affiliates, registered in the European Union and the United States.
• Proxmox® is a trademark of Proxmox Server Solutions GmbH, registered in Germany and the United States.
• SUSE® is a trademark of SUSE LLC or its affiliates, registered in Germany, the European Union and the United States.
• Ubuntu® is a trademark of Canonical Ltd., registered in Germany, the European Union and the United States.

Their use here is purely descriptive and does not imply any affiliation with or endorsement by the trademark holders.

Own and licensed trademarks used in this repository:

• foundata® is a trademark of IPAM GmbH, registered in Germany and the European Union, licensed to foundata GmbH.

Author information

This project was created and is maintained by foundata.