This repository contains the foundata.linux Ansible Collection.
It provides roles for managing common Linux host concerns: automatic updates, conditional reboots, sudo policy, kernel parameters, and local users and groups.
⭐ Found this useful? Support open-source and star this project:
Configures each supported distribution's native unattended-update service through a consistent interface, including update scope, schedules, exclusions, notifications, and controlled reboot policies.
Its README.md covers configuration, usage examples, and more:
- Ansible role:
foundata.linux.auto_update- Table of contents
- Features
- Example playbooks, using this role
- Supported tags
- Role variables
auto_update_linux_stateauto_update_linux_autoupgradeauto_update_linux_service_stateauto_update_linux_typeauto_update_linux_applyauto_update_linux_timer_settingsauto_update_linux_rebootauto_update_linux_reboot_timer_settingsauto_update_linux_excludeauto_update_linux_notify_emailauto_update_linux_extra_config
- Dependencies
- Compatibility
- External requirements
Manages dedicated data disks: single partition spanning the disk, filesystem (XFS or ext4), mount plus /etc/fstab entry by filesystem UUID — with safe handling of existing data, mountpoint content preservation on first mount, and one-time SELinux relabeling. Its README.md covers configuration, usage examples, and more:
- Ansible role:
foundata.linux.disk- Table of contents
- Example playbooks, using this role
- Supported tags
- Role variables
disk_linux_statedisk_linux_autoupgradedisk_linux_device_defaultsdisk_linux_device_defaults['state']disk_linux_device_defaults['wipe']disk_linux_device_defaults['on_missing']disk_linux_device_defaults['on_mismatch']disk_linux_device_defaults['partition_table']disk_linux_device_defaults['grow']disk_linux_device_defaults['filesystem']disk_linux_device_defaults['mount']
disk_linux_devices
- Dependencies
- Compatibility
- External requirements
Detects whether Linux systems require a reboot and performs it safely, with cross-platform checks and configurable connection, timeout, messaging, and readiness validation. Its README.md covers configuration, usage examples, and more:
- Ansible role:
foundata.linux.reboot
Installs and configures sudo through declarative, visudo-validated rules and defaults, with optional authoritative cleanup of unmanaged drop-ins. Its README.md covers configuration, usage examples, and more:
- Ansible role:
foundata.linux.sudo- Table of contents
- Features
- Example playbooks, using this role
- Supported tags
- Role variables
- Dependencies
- Compatibility
- External requirements
Manages Linux kernel parameters through sysctl, combining explicit overrides with stackable, resource-aware workload and security profiles. Its README.md covers configuration, usage examples, and more:
- Ansible role:
foundata.linux.sysctl
Manages local users and groups declaratively, including account defaults, home directories, password policies, SSH authorized keys, and optional cleanup of unmanaged accounts. Its README.md covers configuration, usage examples, and more:
- Ansible role:
foundata.linux.user- Table of contents
- Features
- Example playbooks, using this role
- Supported tags
- Role variables
user_linux_account_defaultsuser_linux_accountsuser_linux_accounts['name']user_linux_accounts['state']user_linux_accounts['uid']user_linux_accounts['comment']user_linux_accounts['shell']user_linux_accounts['umask']user_linux_accounts['system']user_linux_accounts['local']user_linux_accounts['seuser']user_linux_accounts['group']user_linux_accounts['groups']user_linux_accounts['groups_append']user_linux_accounts['expires']user_linux_accounts['home']user_linux_accounts['password']user_linux_accounts['ssh_authorized_keys']user_linux_accounts['ssh_authorized_keys_delete_unmanaged']
user_linux_group_defaultsuser_linux_groupsuser_linux_accounts_delete_unmanageduser_linux_accounts_delete_unmanaged_excludeuser_linux_uid_minuser_linux_uid_max
- Dependencies
- Compatibility
- External requirements
See dependencies in galaxy.yml.
Copyright (c) 2026 foundata GmbH (https://foundata.com)
This project is licensed under the GNU General Public License v3.0 or later (SPDX-License-Identifier: GPL-3.0-or-later), see LICENSES/GPL-3.0-or-later.txt for the full text.
The REUSE.toml file provides detailed licensing and copyright information in a human- and machine-readable format. This includes parts that may be subject to different licensing or usage terms, such as third-party components. The repository conforms to the REUSE specification. You can use reuse spdx to create a SPDX software bill of materials (SBOM).
This project was created and is maintained by foundata.
Initially based on an Ansible skeleton developed by foundata.