this post was submitted on 13 Mar 2026
4 points (83.3% liked)

Arch Linux

9601 readers
1 users here now

The beloved lightweight distro

founded 6 years ago
MODERATORS
k_o_t@lemmy.ml
4
What security measures did everyone use when configuring and can Ansible manage multiple installs? (lemmy.dbzer0.com)
submitted 2 weeks ago by ScoffingLizard@lemmy.dbzer0.com to c/archlinux@lemmy.ml
9 comments fedilink hide all child comments
 

I have a basic firewall, but did not use App Armor, SELinux, or kernel blacklists. I definitely shut down port 22 just for now. It's just a laptop daily driver. Should I do more?

Also, I'm now addicted to Arch. I'm using Hyprland with it. This means I've got two bleeding edge wares and that gets rough sometimes when things break. I want Arch on my desktop gaming rig though. I tired other distros but I just love Arch. Has anyone tried using Ansible to manage multiple installations? I really can't maintain two so I was wondering if Ansible would make it easier, especially for updating.

you are viewing a single comment's thread
view the rest of the comments
[–] eldavi@lemmy.ml 5 points 2 weeks ago (1 children)

Ansible is a little bit overkill for 2 systems, but it's worth learning since it's a valuable skill in today's job market

[–] ScoffingLizard@lemmy.dbzer0.com 2 points 2 weeks ago (1 children)

So I have a laptop (already configured with Arch), openwrt router, a Pi 5 for Jellyfin with Diet Pi, and a desktop. I want to put Arch with Hyperland on the desktop. It would be cool if I could just use Ansible to perform updates on the Arch Nodes at once. I also have trouble remembering configs and it causes me problems. I'd like to use my other Pi 3s with Arch for Immich, NextCloud ( I have a digital book library), Wikipedia, and etc if possible. Honestly the Pi 5 is not up yet so I could use Ansible for all. I wouldn't have put Diet Pi on there if I had previously thought about automating Arch with Ansible.

Hell, I think I just talked myself into it.

[–] eldavi@lemmy.ml 2 points 1 week ago (1 children)

I also have trouble remembering configs and it causes me problems.

ansible's strength comes in the form of infrastructure as code and managing armies of systems; it sounds like it'll atleast help with the first part since i rely on iac to help me learn and remember configs also.