Alan Kay AjkayAlan

RPI4 Docker Host With Ansible

A fun experement to run everything on my home network using Docker, with it all managed via Ansible. A few notes...

This will rely on you setting up some things on the RPI manually
It will rely on running Ansible via localhost (instead of another device running ansible against the RPI)

Plug WAN into eth1, LAN into eth2
Boot up, go to 192.168.88.1. Login with default creds.
Webfig -> System -> Reset Configuration. Wait for the reboot.
- This makes it so you get good IPv6 firewall rules by default
In Quick Set:
- Ensure Port is Eth1
- Ensure Address Acquisition is Automatic
- Set IP Address to 192.168.1.1

Format your SD Card with FAT32 if <= 32GB, otherwise use exFAT
Go to https://www.raspberrypi.org/downloads/raspberry-pi-os/ and the lite image, then unzip it
Download https://www.balena.io/etcher/ and install it
Use Etcher to write the downloaded image to the SD card
Create a blank file named ssh into the boot partition to enable ssh with headless
Put the SD card into your Raspberry Pi, plug it into ethernet, and power it on

Run the following in powershell as admin Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linux
Install a distro (ex: Ubuntu 18.04 LTS - https://www.microsoft.com/store/apps/9N9TNGVNDL3Q)
Open your distro you installed via the start menu, let it setup
Update and upgrade

sudo apt-get update

	# This assumes your already running OpenWRT
	# Follow https://teklager.se/en/knowledge-base/openwrt-installation-instructions/ to get OpenWRT initally installed on an SSD if you haven't
	# My device expects LAN on eth0, and WAN on eth1

	# Sign into the router
	ssh [email protected]

	# Set vars
	DOWNLOAD_LINK="https://downloads.openwrt.org/releases/23.05.3/targets/x86/64/openwrt-23.05.3-x86-64-generic-squashfs-combined-efi.img.gz"
	SHA256SUMS="https://downloads.openwrt.org/releases/23.05.3/targets/x86/64/sha256sums"

	## Getting image and Pi up and running
	# Go to https://www.raspberrypi.org/downloads/raspbian/ and download an image, then unzip it
	# Download https://www.balena.io/etcher/ and install it
	# Plug in microsd card, Unzip the downloaded image and use Etcher to write the downloaded image to the SD card
	# Edit boot/config.txt, and uncomment hdmi_force_hotplug=1 and hdmi_drive=2
	# Plug the PI in, and go through to setup prompts
	# Run the following commands in terminal

	## Config stuff
	sudo raspi-config

	# Plug in ethernet to eth0, connect to laptop, and set static IP to 192.168.1.10, subnet mask 255.255.255.0
	# TODO: Script this so I dont need to touch the gui
	# Navigate to 192.168.1.1, login using ubnt for username and password
	# Run basic setup wizard, and set the following settings:
	### Internet Port: eth0
	### DHCP
	### Enable the default firewall
	### Enable DHCPv6 Prefix Delegation, /56, default firewall
	### LAN port: eth1, enable dhcp
	### Set password to whatever you want

	Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
	choco feature enable -n allowGlobalConfirmation
	choco install googlechrome
	choco install vlc
	choco install microsoft-windows-terminal
	choco install peazip
	choco install vscode
	choco install steam
	choco install choco-upgrade-all-at --params "'/TIME:21:00'"
	choco install origin