installer: move bootstrap roles to common subdir

8 files changed, 0 insertions, 971 deletions

diff --git a/roles/preseed/defaults/main.yml b/roles/preseed/defaults/main.yml
deleted file mode 100644
index c5400493..00000000
--- a/roles/preseed/defaults/main.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-#preseed_force_net_ifnames_policy: path
-
-preseed_no_netplan: no
diff --git a/roles/preseed/tasks/main.yml b/roles/preseed/tasks/main.yml
deleted file mode 100644
index b1b5d275..00000000
--- a/roles/preseed/tasks/main.yml
+++ /dev/null
@@ -1,47 +0,0 @@
----
-- name: Copy initramfs into position
-  copy:
-    remote_src: yes
-    src: "{{ installer_path | mandatory }}/{{ install_distro }}-{{ install_codename }}/{{ hostvars[hostname].install_cooked.arch | default('amd64') }}/initrd.gz"
-    dest: "{{ preseed_tmpdir }}/initrd.preseed.gz"
-
-- name: Generate preseed file
-  template:
-    src: "preseed_{{ hostvars[hostname].preseed_template_name | default(install_distro + '-' + install_codename) }}.cfg.j2"
-    dest: "{{ preseed_tmpdir }}/preseed.cfg"
-
-- name: Generate authorized_keys file
-  authorized_key:
-    user: root
-    manage_dir: no
-    path: "{{ preseed_tmpdir }}/authorized_keys"
-    key: "{{ ssh_keys_root | join('\n') }}"
-
-- name: force net interface name policy
-  when: preseed_force_net_ifnames_policy is defined
-  block:
-  - name: prepare directories to force network interface name policy
-    file:
-      path: "{{ preseed_tmpdir }}/etc/systemd/network"
-      state: directory
-
-  - name: install link unit to force network interface name policy
-    copy:
-      dest: "{{ preseed_tmpdir }}/etc/systemd/network/90-namepolicy.link"
-      content: |
-        [Link]
-        NamePolicy={{ preseed_force_net_ifnames_policy }}
-
-- name: Inject files into initramfs
-  shell: cpio -H newc -o | gzip -9 >> 'initrd.preseed.gz'
-  args:
-    chdir: "{{ preseed_tmpdir }}"
-    stdin: |
-      preseed.cfg
-      authorized_keys
-      etc/
-      etc/systemd/
-      etc/systemd/network/
-      etc/systemd/network/90-namepolicy.link
-  tags:
-  - skip_ansible_lint
diff --git a/roles/preseed/templates/preseed_debian-buster.cfg.j2 b/roles/preseed/templates/preseed_debian-buster.cfg.j2
deleted file mode 100644
index 9952fa0a..00000000
--- a/roles/preseed/templates/preseed_debian-buster.cfg.j2
+++ /dev/null
@@ -1,147 +0,0 @@
-#########################################################################
-#  spreadspace preseed file for Debian buster based VMs
-#########################################################################
-
-d-i debian-installer/language string en
-d-i debian-installer/country string AT
-d-i debian-installer/locale string en_US.UTF-8
-d-i keyboard-configuration/xkb-keymap select us
-
-d-i hw-detect/load_firmware boolean false
-
-d-i netcfg/choose_interface select {{ install_interface | default(hostvars[hostname].network_cooked.primary.interface) }}
-{% if 'install_dhcp' in hostvars[hostname] and hostvars[hostname].install_dhcp %}
-d-i netcfg/disable_dhcp boolean false
-d-i netcfg/disable_autoconfig boolean false
-{% else %}
-d-i netcfg/disable_dhcp boolean true
-d-i netcfg/disable_autoconfig boolean true
-d-i netcfg/get_ipaddress string {{ hostvars[hostname].network_cooked.primary.ip }}
-d-i netcfg/get_netmask string {{ hostvars[hostname].network_cooked.primary.mask }}
-d-i netcfg/get_gateway string {{ hostvars[hostname].network_cooked.primary.gateway }}
-d-i netcfg/get_nameservers string {{ hostvars[hostname].network_cooked.nameservers | join(' ') }}
-d-i netcfg/confirm_static boolean true
-{% endif %}
-
-d-i netcfg/hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/get_hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/get_domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/wireless_wep string
-
-
-d-i mirror/country string manual
-d-i mirror/http/hostname string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].debian }}
-d-i mirror/http/directory string /debian
-d-i mirror/http/proxy string
-
-
-d-i passwd/make-user boolean false
-d-i passwd/root-password password this-very-very-secure-password-will-be-removed-by-latecommand
-d-i passwd/root-password-again password this-very-very-secure-password-will-be-removed-by-latecommand
-
-
-d-i clock-setup/utc boolean true
-d-i time/zone string Europe/Vienna
-d-i clock-setup/ntp boolean false
-
-
-d-i partman/early_command string \
-    debconf-set partman-auto/disk "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    debconf-set grub-installer/bootdev "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    umount -l /media || true
-
-d-i grub-installer/choose_bootdev string manual
-d-i grub-installer/bootdev seen true
-
-d-i partman-auto/method string lvm
-d-i partman-auto/purge_lvm_from_device boolean true
-d-i partman-auto-lvm/new_vg_name string {{ hostvars[hostname].host_name }}
-d-i partman-auto-lvm/guided_size string max
-
-d-i partman-lvm/device_remove_lvm boolean true
-d-i partman-md/device_remove_md boolean true
-
-d-i partman-lvm/confirm boolean true
-d-i partman-lvm/confirm_nooverwrite boolean true
-
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-d-i partman-efi/non_efi_system boolean true
-d-i partman/choose_label string gpt
-d-i partman/default_label string gpt
-{% endif %}
-d-i partman-auto/expert_recipe string                                             \
-      boot-root ::                                                                \
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-              100 100 128 fat16                                                   \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ efi } format{ }                                     \
-              .                                                                   \
-{% endif %}
-              1000 10000 -1 ext4                                                  \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ lvm } vg_name{ {{ hostvars[hostname].host_name }} } \
-              .                                                                   \
-              2048 10000 2560 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ / }                                             \
-              .                                                                   \
-              1024 11000 1280 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var }                                          \
-              .                                                                   \
-              768 10000 768 ext4                                                  \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var/log }                                      \
-                      options/nodev{ nodev } options/noatime{ noatime }           \
-                      options/noexec{ noexec }                                    \
-              .                                                                   \
-              16 20000 -1 ext4                                                    \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      lv_name{ dummy }                                            \
-              .
-
-d-i partman-auto-lvm/no_boot boolean true
-d-i partman-basicfilesystems/no_swap true
-d-i partman-partitioning/confirm_write_new_label boolean true
-d-i partman/choose_partition select finish
-d-i partman/confirm boolean true
-d-i partman/confirm_nooverwrite boolean true
-
-
-d-i base-installer/install-recommends boolean false
-d-i apt-setup/security_host string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].debian }}
-
-tasksel tasksel/first multiselect
-d-i pkgsel/include string openssh-server python python-apt
-d-i pkgsel/upgrade select safe-upgrade
-popularity-contest popularity-contest/participate boolean false
-
-d-i grub-installer/only_debian boolean true
-d-i grub-installer/with_other_os boolean false
-
-d-i finish-install/reboot_in_progress note
-
-
-d-i preseed/late_command string \
-    lvremove -f {{ hostvars[hostname].host_name }}/dummy; \
-    in-target bash -c "apt-get update -q && apt-get full-upgrade -y -q"; \
-    in-target bash -c "sed -e 's/^allow-hotplug/auto/' -i /etc/network/interfaces"; \
-{% if preseed_force_net_ifnames_policy is defined %}
-    mkdir -p /target/etc/systemd/network; \
-    in-target bash -c "echo '[Link]' > /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "echo 'NamePolicy={{ preseed_force_net_ifnames_policy }}' >> /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "update-initramfs -u"; \
-{% endif %}
-    in-target bash -c "passwd -d root && passwd -l root"; \
-{% if hostvars[hostname].ansible_port is defined %}
-    in-target bash -c "sed -e 's/^\(\s*#*\s*Port.*\)/Port {{ hostvars[hostname].ansible_port }}/' -i /etc/ssh/sshd_config"; \
-{% endif %}
-    mkdir -p -m 0700 /target/root/.ssh; \
-    cp /authorized_keys /target/root/.ssh/
diff --git a/roles/preseed/templates/preseed_debian-jessie.cfg.j2 b/roles/preseed/templates/preseed_debian-jessie.cfg.j2
deleted file mode 100644
index 4519d910..00000000
--- a/roles/preseed/templates/preseed_debian-jessie.cfg.j2
+++ /dev/null
@@ -1,147 +0,0 @@
-#########################################################################
-#  spreadspace preseed file for Debian jessie based VMs
-#########################################################################
-
-d-i debian-installer/language string en
-d-i debian-installer/country string AT
-d-i debian-installer/locale string en_US.UTF-8
-d-i keyboard-configuration/xkb-keymap select us
-
-d-i hw-detect/load_firmware boolean false
-
-d-i netcfg/choose_interface select {{ install_interface | default(hostvars[hostname].network_cooked.primary.interface) }}
-{% if 'install_dhcp' in hostvars[hostname] and hostvars[hostname].install_dhcp %}
-d-i netcfg/disable_dhcp boolean false
-d-i netcfg/disable_autoconfig boolean false
-{% else %}
-d-i netcfg/disable_dhcp boolean true
-d-i netcfg/disable_autoconfig boolean true
-d-i netcfg/get_ipaddress string {{ hostvars[hostname].network_cooked.primary.ip }}
-d-i netcfg/get_netmask string {{ hostvars[hostname].network_cooked.primary.mask }}
-d-i netcfg/get_gateway string {{ hostvars[hostname].network_cooked.primary.gateway }}
-d-i netcfg/get_nameservers string {{ hostvars[hostname].network_cooked.nameservers | join(' ') }}
-d-i netcfg/confirm_static boolean true
-{% endif %}
-
-d-i netcfg/hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/get_hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/get_domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/wireless_wep string
-
-
-d-i mirror/country string manual
-d-i mirror/http/hostname string archive.debian.org
-d-i mirror/http/directory string /debian
-d-i mirror/http/proxy string
-
-
-d-i passwd/make-user boolean false
-d-i passwd/root-password password this-very-very-secure-password-will-be-removed-by-latecommand
-d-i passwd/root-password-again password this-very-very-secure-password-will-be-removed-by-latecommand
-
-
-d-i clock-setup/utc boolean true
-d-i time/zone string Europe/Vienna
-d-i clock-setup/ntp boolean false
-
-
-d-i partman/early_command string \
-    debconf-set partman-auto/disk "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    debconf-set grub-installer/bootdev "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    umount -l /media || true
-
-d-i grub-installer/choose_bootdev string manual
-d-i grub-installer/bootdev seen true
-
-d-i partman-auto/method string lvm
-d-i partman-auto/purge_lvm_from_device boolean true
-d-i partman-auto-lvm/new_vg_name string {{ hostvars[hostname].host_name }}
-d-i partman-auto-lvm/guided_size string max
-
-d-i partman-lvm/device_remove_lvm boolean true
-d-i partman-md/device_remove_md boolean true
-
-d-i partman-lvm/confirm boolean true
-d-i partman-lvm/confirm_nooverwrite boolean true
-
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-d-i partman-efi/non_efi_system boolean true
-d-i partman/choose_label string gpt
-d-i partman/default_label string gpt
-{% endif %}
-d-i partman-auto/expert_recipe string                                             \
-      boot-root ::                                                                \
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-              100 100 128 fat16                                                   \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ efi } format{ }                                     \
-              .                                                                   \
-{% endif %}
-              1000 10000 -1 ext4                                                  \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ lvm } vg_name{ {{ hostvars[hostname].host_name }} } \
-              .                                                                   \
-              2048 10000 2560 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ / }                                             \
-              .                                                                   \
-              1024 11000 1280 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var }                                          \
-              .                                                                   \
-              768 10000 768 ext4                                                  \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var/log }                                      \
-                      options/nodev{ nodev } options/noatime{ noatime }           \
-                      options/noexec{ noexec }                                    \
-              .                                                                   \
-              16 20000 -1 ext4                                                    \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      lv_name{ dummy }                                            \
-              .
-
-d-i partman-auto-lvm/no_boot boolean true
-d-i partman-basicfilesystems/no_swap true
-d-i partman-partitioning/confirm_write_new_label boolean true
-d-i partman/choose_partition select finish
-d-i partman/confirm boolean true
-d-i partman/confirm_nooverwrite boolean true
-
-
-d-i base-installer/install-recommends boolean false
-d-i apt-setup/security_host string
-
-tasksel tasksel/first multiselect
-d-i pkgsel/include string openssh-server python python-apt
-d-i pkgsel/upgrade select safe-upgrade
-popularity-contest popularity-contest/participate boolean false
-
-d-i grub-installer/only_debian boolean true
-d-i grub-installer/with_other_os boolean false
-
-d-i finish-install/reboot_in_progress note
-
-
-d-i preseed/late_command string \
-    lvremove -f {{ hostvars[hostname].host_name }}/dummy; \
-    in-target bash -c "apt-get update -q && apt-get full-upgrade -y -q"; \
-    in-target bash -c "sed -e 's/^allow-hotplug/auto/' -i /etc/network/interfaces"; \
-{% if preseed_force_net_ifnames_policy is defined %}
-    mkdir -p /target/etc/systemd/network; \
-    in-target bash -c "echo '[Link]' > /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "echo 'NamePolicy={{ preseed_force_net_ifnames_policy }}' >> /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "update-initramfs -u"; \
-{% endif %}
-    in-target bash -c "passwd -d root && passwd -l root"; \
-{% if hostvars[hostname].ansible_port is defined %}
-    in-target bash -c "sed -e 's/^\(\s*#*\s*Port.*\)/Port {{ hostvars[hostname].ansible_port }}/' -i /etc/ssh/sshd_config"; \
-{% endif %}
-    mkdir -p -m 0700 /target/root/.ssh; \
-    cp /authorized_keys /target/root/.ssh/
diff --git a/roles/preseed/templates/preseed_debian-stretch.cfg.j2 b/roles/preseed/templates/preseed_debian-stretch.cfg.j2
deleted file mode 100644
index 8969fa7c..00000000
--- a/roles/preseed/templates/preseed_debian-stretch.cfg.j2
+++ /dev/null
@@ -1,147 +0,0 @@
-#########################################################################
-#  spreadspace preseed file for Debian stretch based VMs
-#########################################################################
-
-d-i debian-installer/language string en
-d-i debian-installer/country string AT
-d-i debian-installer/locale string en_US.UTF-8
-d-i keyboard-configuration/xkb-keymap select us
-
-d-i hw-detect/load_firmware boolean false
-
-d-i netcfg/choose_interface select {{ install_interface | default(hostvars[hostname].network_cooked.primary.interface) }}
-{% if 'install_dhcp' in hostvars[hostname] and hostvars[hostname].install_dhcp %}
-d-i netcfg/disable_dhcp boolean false
-d-i netcfg/disable_autoconfig boolean false
-{% else %}
-d-i netcfg/disable_dhcp boolean true
-d-i netcfg/disable_autoconfig boolean true
-d-i netcfg/get_ipaddress string {{ hostvars[hostname].network_cooked.primary.ip }}
-d-i netcfg/get_netmask string {{ hostvars[hostname].network_cooked.primary.mask }}
-d-i netcfg/get_gateway string {{ hostvars[hostname].network_cooked.primary.gateway }}
-d-i netcfg/get_nameservers string {{ hostvars[hostname].network_cooked.nameservers | join(' ') }}
-d-i netcfg/confirm_static boolean true
-{% endif %}
-
-d-i netcfg/hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/get_hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/get_domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/wireless_wep string
-
-
-d-i mirror/country string manual
-d-i mirror/http/hostname string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].debian }}
-d-i mirror/http/directory string /debian
-d-i mirror/http/proxy string
-
-
-d-i passwd/make-user boolean false
-d-i passwd/root-password password this-very-very-secure-password-will-be-removed-by-latecommand
-d-i passwd/root-password-again password this-very-very-secure-password-will-be-removed-by-latecommand
-
-
-d-i clock-setup/utc boolean true
-d-i time/zone string Europe/Vienna
-d-i clock-setup/ntp boolean false
-
-
-d-i partman/early_command string \
-    debconf-set partman-auto/disk "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    debconf-set grub-installer/bootdev "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    umount -l /media || true
-
-d-i grub-installer/choose_bootdev string manual
-d-i grub-installer/bootdev seen true
-
-d-i partman-auto/method string lvm
-d-i partman-auto/purge_lvm_from_device boolean true
-d-i partman-auto-lvm/new_vg_name string {{ hostvars[hostname].host_name }}
-d-i partman-auto-lvm/guided_size string max
-
-d-i partman-lvm/device_remove_lvm boolean true
-d-i partman-md/device_remove_md boolean true
-
-d-i partman-lvm/confirm boolean true
-d-i partman-lvm/confirm_nooverwrite boolean true
-
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-d-i partman-efi/non_efi_system boolean true
-d-i partman/choose_label string gpt
-d-i partman/default_label string gpt
-{% endif %}
-d-i partman-auto/expert_recipe string                                             \
-      boot-root ::                                                                \
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-              100 100 128 fat16                                                   \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ efi } format{ }                                     \
-              .                                                                   \
-{% endif %}
-              1000 10000 -1 ext4                                                  \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ lvm } vg_name{ {{ hostvars[hostname].host_name }} } \
-              .                                                                   \
-              2048 10000 2560 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ / }                                             \
-              .                                                                   \
-              1024 11000 1280 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var }                                          \
-              .                                                                   \
-              768 10000 768 ext4                                                  \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var/log }                                      \
-                      options/nodev{ nodev } options/noatime{ noatime }           \
-                      options/noexec{ noexec }                                    \
-              .                                                                   \
-              16 20000 -1 ext4                                                    \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      lv_name{ dummy }                                            \
-              .
-
-d-i partman-auto-lvm/no_boot boolean true
-d-i partman-basicfilesystems/no_swap true
-d-i partman-partitioning/confirm_write_new_label boolean true
-d-i partman/choose_partition select finish
-d-i partman/confirm boolean true
-d-i partman/confirm_nooverwrite boolean true
-
-
-d-i base-installer/install-recommends boolean false
-d-i apt-setup/security_host string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].debian }}
-
-tasksel tasksel/first multiselect
-d-i pkgsel/include string openssh-server python python-apt
-d-i pkgsel/upgrade select safe-upgrade
-popularity-contest popularity-contest/participate boolean false
-
-d-i grub-installer/only_debian boolean true
-d-i grub-installer/with_other_os boolean false
-
-d-i finish-install/reboot_in_progress note
-
-
-d-i preseed/late_command string \
-    lvremove -f {{ hostvars[hostname].host_name }}/dummy; \
-    in-target bash -c "apt-get update -q && apt-get full-upgrade -y -q"; \
-    in-target bash -c "sed -e 's/^allow-hotplug/auto/' -i /etc/network/interfaces"; \
-{% if preseed_force_net_ifnames_policy is defined %}
-    mkdir -p /target/etc/systemd/network; \
-    in-target bash -c "echo '[Link]' > /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "echo 'NamePolicy={{ preseed_force_net_ifnames_policy }}' >> /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "update-initramfs -u"; \
-{% endif %}
-    in-target bash -c "passwd -d root && passwd -l root"; \
-{% if hostvars[hostname].ansible_port is defined %}
-    in-target bash -c "sed -e 's/^\(\s*#*\s*Port.*\)/Port {{ hostvars[hostname].ansible_port }}/' -i /etc/ssh/sshd_config"; \
-{% endif %}
-    mkdir -p -m 0700 /target/root/.ssh; \
-    cp /authorized_keys /target/root/.ssh/
diff --git a/roles/preseed/templates/preseed_ubuntu-bionic.cfg.j2 b/roles/preseed/templates/preseed_ubuntu-bionic.cfg.j2
deleted file mode 100644
index a2fffd11..00000000
--- a/roles/preseed/templates/preseed_ubuntu-bionic.cfg.j2
+++ /dev/null
@@ -1,160 +0,0 @@
-#########################################################################
-#  spreadspace preseed file for Ubuntu bionic based VMs
-#########################################################################
-
-d-i debian-installer/language string en
-d-i debian-installer/country string AT
-d-i debian-installer/locale string en_US.UTF-8
-d-i localechooser/preferred-locale string en_US.UTF-8
-d-i localechooser/supported-locales multiselect de_DE.UTF-8, de_AT.UTF-8
-d-i console-setup/ask_detect boolean false
-d-i keyboard-configuration/xkb-keymap select us
-d-i keyboard-configuration/layoutcode string us
-
-d-i hw-detect/load_firmware boolean false
-
-{% if preseed_no_netplan %}
-d-i netcfg/do_not_use_netplan boolean true
-{% endif %}
-d-i netcfg/choose_interface select {{ install_interface | default(hostvars[hostname].network_cooked.primary.interface) }}
-{% if 'install_dhcp' in hostvars[hostname] and hostvars[hostname].install_dhcp %}
-d-i netcfg/disable_dhcp boolean false
-d-i netcfg/disable_autoconfig boolean false
-{% else %}
-d-i netcfg/disable_dhcp boolean true
-d-i netcfg/disable_autoconfig boolean true
-d-i netcfg/get_ipaddress string {{ hostvars[hostname].network_cooked.primary.ip }}
-d-i netcfg/get_netmask string {{ hostvars[hostname].network_cooked.primary.mask }}
-d-i netcfg/get_gateway string {{ hostvars[hostname].network_cooked.primary.gateway }}
-d-i netcfg/get_nameservers string {{ hostvars[hostname].network_cooked.nameservers | join(' ') }}
-d-i netcfg/confirm_static boolean true
-{% endif %}
-
-d-i netcfg/hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/get_hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/get_domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/wireless_wep string
-
-
-d-i mirror/country string manual
-d-i mirror/http/hostname string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].ubuntu }}
-d-i mirror/http/directory string /ubuntu
-d-i mirror/http/proxy string
-
-
-d-i passwd/make-user boolean false
-d-i passwd/root-login boolean true
-d-i passwd/root-password password this-very-very-secure-password-will-be-removed-by-latecommand
-d-i passwd/root-password-again password this-very-very-secure-password-will-be-removed-by-latecommand
-
-
-d-i clock-setup/utc boolean true
-d-i time/zone string Europe/Vienna
-d-i clock-setup/ntp boolean false
-
-
-d-i partman/early_command string \
-    debconf-set partman-auto/disk "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    debconf-set grub-installer/bootdev "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    umount -l /media || true
-
-d-i grub-installer/choose_bootdev string manual
-d-i grub-installer/bootdev seen true
-
-d-i partman-auto/method string lvm
-d-i partman-auto/purge_lvm_from_device boolean true
-d-i partman-auto-lvm/new_vg_name string {{ hostvars[hostname].host_name }}
-d-i partman-auto-lvm/guided_size string max
-
-d-i partman-lvm/device_remove_lvm boolean true
-d-i partman-md/device_remove_md boolean true
-
-d-i partman-lvm/confirm boolean true
-d-i partman-lvm/confirm_nooverwrite boolean true
-
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-d-i partman-efi/non_efi_system boolean true
-d-i partman/choose_label string gpt
-d-i partman/default_label string gpt
-{% endif %}
-d-i partman-auto/expert_recipe string                                             \
-      boot-root ::                                                                \
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-              100 100 128 fat16                                                   \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ efi } format{ }                                     \
-              .                                                                   \
-{% endif %}
-              1000 10000 -1 ext4                                                  \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ lvm } vg_name{ {{ hostvars[hostname].host_name }} } \
-              .                                                                   \
-              2048 10000 2560 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ / }                                             \
-              .                                                                   \
-              1024 11000 1280 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var }                                          \
-              .                                                                   \
-              768 10000 768 ext4                                                  \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var/log }                                      \
-                      options/nodev{ nodev } options/noatime{ noatime }           \
-                      options/noexec{ noexec }                                    \
-              .                                                                   \
-              16 20000 -1 ext4                                                    \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      lv_name{ dummy }                                            \
-              .
-
-d-i partman-auto-lvm/no_boot boolean true
-d-i partman-basicfilesystems/no_swap true
-d-i partman-partitioning/confirm_write_new_label boolean true
-d-i partman/choose_partition select finish
-d-i partman/confirm boolean true
-d-i partman/confirm_nooverwrite boolean true
-
-
-d-i base-installer/install-recommends boolean false
-d-i apt-setup/security_host string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].ubuntu }}
-
-tasksel tasksel/first multiselect
-d-i pkgsel/include string openssh-server python python-apt ifupdown
-d-i pkgsel/upgrade select safe-upgrade
-popularity-contest popularity-contest/participate boolean false
-d-i pkgsel/update-policy select none
-
-d-i grub-installer/only_debian boolean true
-d-i grub-installer/with_other_os boolean false
-
-d-i finish-install/reboot_in_progress note
-
-
-d-i preseed/late_command string \
-    lvremove -f {{ hostvars[hostname].host_name }}/dummy; \
-    in-target bash -c "swapoff -a; sed -e '/^\/swapfile/d' -i /etc/fstab; rm -f /swapfile"; \
-    in-target bash -c "apt-get update -q && apt-get full-upgrade -y -q"; \
-{% if preseed_no_netplan %}
-    in-target bash -c "apt-get purge -y -q netplan.io && apt-get autoremove -y -q && rm -rf /etc/netplan"; \
-{% endif %}
-    in-target bash -c "sed -e 's/^allow-hotplug/auto/' -i /etc/network/interfaces"; \
-{% if preseed_force_net_ifnames_policy is defined %}
-    mkdir -p /target/etc/systemd/network; \
-    in-target bash -c "echo '[Link]' > /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "echo 'NamePolicy={{ preseed_force_net_ifnames_policy }}' >> /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "update-initramfs -u"; \
-{% endif %}
-    in-target bash -c "passwd -d root && passwd -l root"; \
-{% if hostvars[hostname].ansible_port is defined %}
-    in-target bash -c "sed -e 's/^\(\s*#*\s*Port.*\)/Port {{ hostvars[hostname].ansible_port }}/' -i /etc/ssh/sshd_config"; \
-{% endif %}
-    mkdir -p -m 0700 /target/root/.ssh; \
-    cp /authorized_keys /target/root/.ssh/
diff --git a/roles/preseed/templates/preseed_ubuntu-xenial.cfg.j2 b/roles/preseed/templates/preseed_ubuntu-xenial.cfg.j2
deleted file mode 100644
index 0b3d3698..00000000
--- a/roles/preseed/templates/preseed_ubuntu-xenial.cfg.j2
+++ /dev/null
@@ -1,153 +0,0 @@
-#########################################################################
-#  spreadspace preseed file for Ubuntu xenial based VMs
-#########################################################################
-
-d-i debian-installer/language string en
-d-i debian-installer/country string AT
-d-i debian-installer/locale string en_US.UTF-8
-d-i localechooser/preferred-locale string en_US.UTF-8
-d-i localechooser/supported-locales multiselect de_DE.UTF-8, de_AT.UTF-8
-d-i console-setup/ask_detect boolean false
-d-i keyboard-configuration/xkb-keymap select us
-d-i keyboard-configuration/layoutcode string us
-
-d-i hw-detect/load_firmware boolean false
-
-d-i netcfg/choose_interface select {{ install_interface | default(hostvars[hostname].network_cooked.primary.interface) }}
-{% if 'install_dhcp' in hostvars[hostname] and hostvars[hostname].install_dhcp %}
-d-i netcfg/disable_dhcp boolean false
-d-i netcfg/disable_autoconfig boolean false
-{% else %}
-d-i netcfg/disable_dhcp boolean true
-d-i netcfg/disable_autoconfig boolean true
-d-i netcfg/get_ipaddress string {{ hostvars[hostname].network_cooked.primary.ip }}
-d-i netcfg/get_netmask string {{ hostvars[hostname].network_cooked.primary.mask }}
-d-i netcfg/get_gateway string {{ hostvars[hostname].network_cooked.primary.gateway }}
-d-i netcfg/get_nameservers string {{ hostvars[hostname].network_cooked.nameservers | join(' ') }}
-d-i netcfg/confirm_static boolean true
-{% endif %}
-
-d-i netcfg/hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/get_hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/get_domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/wireless_wep string
-
-
-d-i mirror/country string manual
-d-i mirror/http/hostname string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].ubuntu }}
-d-i mirror/http/directory string /ubuntu
-d-i mirror/http/proxy string
-
-
-d-i passwd/make-user boolean false
-d-i passwd/root-login boolean true
-d-i passwd/root-password password this-very-very-secure-password-will-be-removed-by-latecommand
-d-i passwd/root-password-again password this-very-very-secure-password-will-be-removed-by-latecommand
-
-
-d-i clock-setup/utc boolean true
-d-i time/zone string Europe/Vienna
-d-i clock-setup/ntp boolean false
-
-
-d-i partman/early_command string \
-    debconf-set partman-auto/disk "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    debconf-set grub-installer/bootdev "$(readlink -f {{ hostvars[hostname].install_cooked.disks.primary }})"; \
-    umount -l /media || true
-
-d-i grub-installer/choose_bootdev string manual
-d-i grub-installer/bootdev seen true
-
-d-i partman-auto/method string lvm
-d-i partman-auto/purge_lvm_from_device boolean true
-d-i partman-auto-lvm/new_vg_name string {{ hostvars[hostname].host_name }}
-d-i partman-auto-lvm/guided_size string max
-
-d-i partman-lvm/device_remove_lvm boolean true
-d-i partman-md/device_remove_md boolean true
-
-d-i partman-lvm/confirm boolean true
-d-i partman-lvm/confirm_nooverwrite boolean true
-
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-d-i partman-efi/non_efi_system boolean true
-d-i partman/choose_label string gpt
-d-i partman/default_label string gpt
-{% endif %}
-d-i partman-auto/expert_recipe string                                             \
-      boot-root ::                                                                \
-{% if (hostvars[hostname].install_cooked.efi | default(false)) %}
-              100 100 128 fat16                                                   \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ efi } format{ }                                     \
-              .                                                                   \
-{% endif %}
-              1000 10000 -1 ext4                                                  \
-                      $defaultignore{ } $primary{ } $bootable{ }                  \
-                      method{ lvm } vg_name{ {{ hostvars[hostname].host_name }} } \
-              .                                                                   \
-              2048 10000 2560 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ / }                                             \
-              .                                                                   \
-              1024 11000 1280 ext4                                                \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var }                                          \
-              .                                                                   \
-              768 10000 768 ext4                                                  \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      method{ format } format{ }                                  \
-                      use_filesystem{ } filesystem{ ext4 }                        \
-                      mountpoint{ /var/log }                                      \
-                      options/nodev{ nodev } options/noatime{ noatime }           \
-                      options/noexec{ noexec }                                    \
-              .                                                                   \
-              16 20000 -1 ext4                                                    \
-                      $lvmok{ } in_vg{ {{ hostvars[hostname].host_name }} }       \
-                      lv_name{ dummy }                                            \
-              .
-
-d-i partman-auto-lvm/no_boot boolean true
-d-i partman-basicfilesystems/no_swap true
-d-i partman-partitioning/confirm_write_new_label boolean true
-d-i partman/choose_partition select finish
-d-i partman/confirm boolean true
-d-i partman/confirm_nooverwrite boolean true
-
-
-d-i base-installer/install-recommends boolean false
-d-i apt-setup/security_host string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].ubuntu }}
-
-tasksel tasksel/first multiselect
-d-i pkgsel/include string openssh-server python python-apt
-d-i pkgsel/upgrade select safe-upgrade
-popularity-contest popularity-contest/participate boolean false
-d-i pkgsel/update-policy select none
-
-d-i grub-installer/only_debian boolean true
-d-i grub-installer/with_other_os boolean false
-
-d-i finish-install/reboot_in_progress note
-
-
-d-i preseed/late_command string \
-    lvremove -f {{ hostvars[hostname].host_name }}/dummy; \
-    in-target bash -c "apt-get update -q && apt-get full-upgrade -y -q"; \
-    in-target bash -c "sed -e 's/^allow-hotplug/auto/' -i /etc/network/interfaces"; \
-{% if preseed_force_net_ifnames_policy is defined %}
-    mkdir -p /target/etc/systemd/network; \
-    in-target bash -c "echo '[Link]' > /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "echo 'NamePolicy={{ preseed_force_net_ifnames_policy }}' >> /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "update-initramfs -u"; \
-{% endif %}
-    in-target bash -c "passwd -d root && passwd -l root"; \
-{% if hostvars[hostname].ansible_port is defined %}
-    in-target bash -c "sed -e 's/^\(\s*#*\s*Port.*\)/Port {{ hostvars[hostname].ansible_port }}/' -i /etc/ssh/sshd_config"; \
-{% endif %}
-    mkdir -p -m 0700 /target/root/.ssh; \
-    cp /authorized_keys /target/root/.ssh/
diff --git a/roles/preseed/templates/preseed_xubuntu-cosmic-desktop-with-raid.cfg.j2 b/roles/preseed/templates/preseed_xubuntu-cosmic-desktop-with-raid.cfg.j2
deleted file mode 100644
index 22f47ce7..00000000
--- a/roles/preseed/templates/preseed_xubuntu-cosmic-desktop-with-raid.cfg.j2
+++ /dev/null
@@ -1,166 +0,0 @@
-#########################################################################
-#  spreadspace preseed file for Ubuntu cosmic based Workstations
-#########################################################################
-
-d-i debian-installer/language string en
-d-i debian-installer/country string AT
-d-i debian-installer/locale string de_AT.UTF-8
-d-i localechooser/preferred-locale string de_AT.UTF-8
-d-i localechooser/supported-locales multiselect de_DE.UTF-8, en_US.UTF-8
-d-i keyboard-configuration/xkb-keymap select de
-## TODO: this still doesn't work properly...
-d-i keyboard-configuration/layout select German (Austria)
-d-i keyboard-configuration/layoutcode string at
-d-i keyboard-configuration/layoutcode string nodeadkeys
-d-i console-setup/ask_detect boolean false
-
-d-i hw-detect/load_firmware boolean false
-
-{% if preseed_no_netplan %}
-d-i netcfg/do_not_use_netplan boolean true
-{% endif %}
-d-i netcfg/choose_interface select {{ install_interface | default(hostvars[hostname].network_cooked.primary.interface) }}
-{% if 'install_dhcp' in hostvars[hostname] and hostvars[hostname].install_dhcp %}
-d-i netcfg/disable_dhcp boolean false
-d-i netcfg/disable_autoconfig boolean false
-{% else %}
-d-i netcfg/disable_dhcp boolean true
-d-i netcfg/disable_autoconfig boolean true
-d-i netcfg/get_ipaddress string {{ hostvars[hostname].network_cooked.primary.ip }}
-d-i netcfg/get_netmask string {{ hostvars[hostname].network_cooked.primary.mask }}
-d-i netcfg/get_gateway string {{ hostvars[hostname].network_cooked.primary.gateway }}
-d-i netcfg/get_nameservers string {{ hostvars[hostname].network_cooked.nameservers | join(' ') }}
-d-i netcfg/confirm_static boolean true
-{% endif %}
-
-d-i netcfg/hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/get_hostname string {{ hostvars[hostname].host_name }}
-d-i netcfg/domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/get_domain string {{ hostvars[hostname].network_cooked.domain }}
-d-i netcfg/wireless_wep string
-
-
-d-i mirror/country string manual
-d-i mirror/http/hostname string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].ubuntu }}
-d-i mirror/http/directory string /ubuntu
-d-i mirror/http/proxy string
-
-
-d-i passwd/make-user boolean false
-d-i passwd/root-login boolean true
-d-i passwd/root-password password this-very-very-secure-password-will-be-removed-by-latecommand
-d-i passwd/root-password-again password this-very-very-secure-password-will-be-removed-by-latecommand
-
-
-d-i clock-setup/utc boolean true
-d-i time/zone string Europe/Vienna
-d-i clock-setup/ntp boolean false
-
-d-i partman-auto/disk string /dev/sda /dev/sdb
-
-d-i partman-auto/method string raid
-d-i partman-auto/purge_lvm_from_device boolean true
-d-i partman-auto-lvm/new_vg_name string {{ hostvars[hostname].host_name }}
-d-i partman-auto-lvm/guided_size string max
-
-d-i partman-lvm/device_remove_lvm boolean true
-d-i partman-md/device_remove_md boolean true
-d-i partman-md/confirm boolean true
-d-i partman-md/confirm_nooverwrite boolean true
-d-i partman-lvm/confirm boolean true
-d-i partman-lvm/confirm_nooverwrite boolean true
-
-d-i partman/choose_label string dos
-d-i partman/default_label string dos
-d-i partman-auto/choose_recipe select boot-root
-d-i partman-auto/expert_recipe string                                    \
-      boot-root ::                                                       \
-              256 512 256 raid                                           \
-                      $lvmignore{ } $primary{ } method{ raid }           \
-              .                                                          \
-              1000 10000 -1 raid                                         \
-                      $lvmignore{ } $primary{ } method{ raid }           \
-              .                                                          \
-              15360 10000 20480 ext4                                     \
-                      $defaultignore{ } $lvmok{ }                        \
-                      in_vg{ {{ hostvars[hostname].host_name }} }        \
-                      method{ format } format{ }                         \
-                      use_filesystem{ } filesystem{ ext4 }               \
-                      mountpoint{ / }                                    \
-              .                                                          \
-              768 10000 768 ext4                                         \
-                      $defaultignore{ } $lvmok{ }                        \
-                      in_vg{ {{ hostvars[hostname].host_name }} }        \
-                      method{ format } format{ }                         \
-                      use_filesystem{ } filesystem{ ext4 }               \
-                      mountpoint{ /var/log }                             \
-                      options/nodev{ nodev } options/noatime{ noatime }  \
-                      options/noexec{ noexec }                           \
-              .                                                          \
-              20480 10000 20480 ext4                                     \
-                      $defaultignore{ } $lvmok{ }                        \
-                      in_vg{ {{ hostvars[hostname].host_name }} }        \
-                      method{ format } format{ }                         \
-                      use_filesystem{ } filesystem{ ext4 }               \
-                      mountpoint{ /home }                                \
-              .                                                          \
-              16 20000 -1 ext4                                           \
-                      $defaultignore{ } $lvmok{ }                        \
-                      in_vg{ {{ hostvars[hostname].host_name }} }        \
-                      lv_name{ dummy }                                   \
-              .
-
-d-i partman-auto-raid/recipe string \
-    1 2 0 ext4 /boot                \
-          /dev/sda1#/dev/sdb1       \
-    .                               \
-    1 2 0 lvm -                     \
-          /dev/sda2#/dev/sdb2       \
-    .
-
-d-i partman-basicfilesystems/no_swap true
-d-i partman-partitioning/confirm_write_new_label boolean true
-d-i partman/choose_partition select finish
-d-i partman/confirm boolean true
-d-i partman/confirm_nooverwrite boolean true
-
-
-d-i base-installer/install-recommends boolean false
-d-i apt-setup/security_host string {{ apt_repo_providers[(hostvars[hostname].apt_repo_provider | default('default'))].ubuntu }}
-
-tasksel tasksel/first multiselect xubuntu-desktop
-d-i pkgsel/include string openssh-server python python-apt ifupdown
-d-i pkgsel/upgrade select safe-upgrade
-popularity-contest popularity-contest/participate boolean false
-d-i pkgsel/update-policy select none
-
-d-i grub-installer/choose_bootdev string /dev/sda /dev/sdb
-d-i grub-installer/bootdev string /dev/sda /dev/sdb
-d-i grub-installer/only_debian boolean true
-d-i grub-installer/with_other_os boolean false
-
-d-i nobootloader/confirmation_common boolean true
-
-d-i finish-install/reboot_in_progress note
-
-
-d-i preseed/late_command string \
-    lvremove -f {{ hostvars[hostname].host_name }}/dummy; \
-    in-target bash -c "swapoff -a; sed -e '/^\/swapfile/d' -i /etc/fstab; rm -f /swapfile"; \
-    in-target bash -c "apt-get update -q && apt-get full-upgrade -y -q"; \
-{% if preseed_no_netplan %}
-    in-target bash -c "apt-get purge -y -q netplan.io && apt-get autoremove -y -q && rm -rf /etc/netplan"; \
-{% endif %}
-    in-target bash -c "sed -e 's/^allow-hotplug/auto/' -i /etc/network/interfaces"; \
-{% if preseed_force_net_ifnames_policy is defined %}
-    mkdir -p /target/etc/systemd/network; \
-    in-target bash -c "echo '[Link]' > /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "echo 'NamePolicy={{ preseed_force_net_ifnames_policy }}' >> /etc/systemd/network/90-namepolicy.link"; \
-    in-target bash -c "update-initramfs -u"; \
-{% endif %}
-    in-target bash -c "passwd -d root && passwd -l root"; \
-{% if hostvars[hostname].ansible_port is defined %}
-    in-target bash -c "sed -e 's/^\(\s*#*\s*Port.*\)/Port {{ hostvars[hostname].ansible_port }}/' -i /etc/ssh/sshd_config"; \
-{% endif %}
-    mkdir -p -m 0700 /target/root/.ssh; \
-    cp /authorized_keys /target/root/.ssh/