Files
ja d9392447f9 doxify: inject DOX framework into AGENTS.md and update system config docs
- Inject all 10 DOX sections into root AGENTS.md (Core Contract, Read Before
  Editing, Update After Editing, Hierarchy, Child Doc Shape, Style, Closeout,
  User Preferences, Child DOX Index)
- Update ADR 0002: linux612->linux618, 575xx->580xx NVIDIA migration
- Update setup.md: kernel/driver refs to current linux618 + 580xx
- Update stack.md, hardware-inventory.md: NVIDIA note 595.71->580xx
- Update manual-overrides.md: add br_vm_internal bridge deletion entry
- Update workstation-health.md: add Recent Cleanup section
- Update README.md: current software versions, expand roles list
- Add docs/neovim-cheatsheet.md
- Bump last_updated to 2026-06-17 on all modified docs
2026-06-17 14:13:34 +02:00

2.4 KiB

description, tags, last_updated
description tags last_updated
Workstation bootstrapping and setup instructions using Ansible.
setup
bootstrap
ansible
2026-06-17

Workstation Setup Guide

This guide describes how to bootstrap the mw-pfeddersheim-workstation infrastructure on a fresh installation.

Prerequisites

  • Linux (Manjaro/Arch Linux)
  • Python 3.12+
  • Git

Bootstrap Steps

  1. Clone the Infrastructure Repo

    mkdir -p ~/infrastructure
    cd ~/infrastructure
    git clone https://git.satware.ai/infrastructure/mw-pfeddersheim-workstation.git
    cd mw-pfeddersheim-workstation
    
  2. Install Ansible

    sudo pacman -S ansible
    
  3. Configure Secrets

    # Create a vault password file (do not commit!)
    echo "your-strong-password" > ansible/vault_password
    
    # Create secrets file
    ansible-vault create ansible/vars/secrets.yml
    
  4. Run system upgrade & kernel install (preparation for Hyprland/Wayland)

    This step runs the dedicated system-upgrade role: full pacman -Syu, dual-kernel install (linux618 LTS + linux70 stable), and NVIDIA driver migration from the pinned 575xx branch to 580xx (NVIDIA Fast Branch). Always preview first with --check. See ADR 0002 for the rationale.

    # Preview — never run the live playbook before --check is clean
    ansible-playbook -i localhost, -c local \
      --vault-password-file ansible/vault_password \
      ansible/workstation.yml --check --tags system-upgrade
    
    # Apply (will install/remove packages and regenerate GRUB)
    ansible-playbook -i localhost, -c local \
      --vault-password-file ansible/vault_password \
      ansible/workstation.yml --tags system-upgrade
    

    After it finishes, reboot and select linux70 from the GRUB menu before continuing to step 5. Verify with uname -r (expect 7.0.x) and nvidia-smi (expect driver 580.x).

  5. Run the Playbook (remaining roles: common, dev-tools, maintenance)

    ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml --check
    # If check passes:
    ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml
    
  6. Initialize Maintenance

    ./scripts/maintenance.sh