# -*- mode: yaml; indent-tabs-mode: nil; tab-width: 2; coding: utf-8-unix -*-

# man  wget: Using --ca-directory is more efficient than --ca-certificate when many certificates are installed
# --ca-certificate={{PLAY_CA_CERT}} --ca-directory=/etc/ssl/certs/
BASE_WGET_ARGS: "--no-hsts --tries=1 --ca-certificate={{PLAY_CA_CERT|default('/usr/local/etc/ssl/cacert-testforge.pem')}}"

BASE_TIME_DAEMON: sdwdate

#PROXY_INSTALL_INSECURE

# does have export
base_etc_env_d: "profile.d"
# im confused between default and conf.d
ETC_CONF_D: "default"
# definitely need export in profile.d
etc_env_export: "export "

base_sudo_group: "sudo"
base_system_users: ['{{BASE_USER_NAME}}']

base_gpg_keys_system: []

base_initial_debs:
  - adduser
  - apt
  - base-files
  - base-passwd
  - bash
  - bind9-host
  - bootlogd
  - bsdutils
  - ca-certificates
  - coreutils
  - curl
  - dash
  - debconf
  - debian-archive-keyring
  - debianutils
  - devuan-keyring
  - dialog
  - diffutils
  - dnsutils
  - dpkg
  - e2fsprogs
  - fdisk
  - findutils
  - geoip-database
  - gpgv
  - grep
  - gzip
  - hostname
  - htop
  - ifupdown
  - init-system-helpers
  - initscripts
  - insserv
  - iproute2
  - iputils-ping
  - isc-dhcp-client
  - isc-dhcp-common
  - krb5-locales
  - less
  - linux-libc-dev
  - locales
  - login
  - lsb-base
  - mawk
  - mime-support
  - mount
  - nano
  - ncurses-base
  - ncurses-bin
  - net-tools
  - netbase
  - openssh-client
  - openssl
  - passwd
  - perl
  - perl-base
  - publicsuffix
  - rsync
  - sed
  - startpar
  - sudo
  - tar
  - tzdata
  - util-linux
  - vim-common
  - vim-tiny
  - wget
  - xauth
  - xxd
  - zlib1g

base_bootstrap_debs:
  - readline-common
  - unzip

# these were there on an lxd from linuxcontainers.o.org for DevuanBeowolf
# /var/lib/dpkg/status
base_lxd_debs_inst:
  - apt
  - bootlogd
  - ca-certificates
  - curl
  - findutils
  - grep
  - hostname
  - htop
  - ifupdown
  - init-system-helpers
  - iproute2
  - iputils-ping
  - less
  - login
  - lsb-base
  - mount
  - nano
  - ncurses-base
  - ncurses-bin
  - net-tools
  - netbase
  - openssh-client
  - openssl
  - passwd
  - perl
  - perl-base
  - rsync
  - sed
  - sudo
  - tar
  - tzdata
  - unzip
  - util-linux
  - wget