ja
d9392447f9
- Inject all 10 DOX sections into root AGENTS.md (Core Contract, Read Before Editing, Update After Editing, Hierarchy, Child Doc Shape, Style, Closeout, User Preferences, Child DOX Index) - Update ADR 0002: linux612->linux618, 575xx->580xx NVIDIA migration - Update setup.md: kernel/driver refs to current linux618 + 580xx - Update stack.md, hardware-inventory.md: NVIDIA note 595.71->580xx - Update manual-overrides.md: add br_vm_internal bridge deletion entry - Update workstation-health.md: add Recent Cleanup section - Update README.md: current software versions, expand roles list - Add docs/neovim-cheatsheet.md - Bump last_updated to 2026-06-17 on all modified docs
79 lines
2.4 KiB
Markdown
79 lines
2.4 KiB
Markdown
---
|
|
description: >-
|
|
Workstation bootstrapping and setup instructions using Ansible.
|
|
tags:
|
|
- setup
|
|
- bootstrap
|
|
- ansible
|
|
last_updated: '2026-06-17'
|
|
---
|
|
|
|
# Workstation Setup Guide
|
|
|
|
This guide describes how to bootstrap the **mw-pfeddersheim-workstation** infrastructure on a fresh installation.
|
|
|
|
## Prerequisites
|
|
- Linux (Manjaro/Arch Linux)
|
|
- Python 3.12+
|
|
- Git
|
|
|
|
## Bootstrap Steps
|
|
|
|
1. **Clone the Infrastructure Repo**
|
|
```bash
|
|
mkdir -p ~/infrastructure
|
|
cd ~/infrastructure
|
|
git clone https://git.satware.ai/infrastructure/mw-pfeddersheim-workstation.git
|
|
cd mw-pfeddersheim-workstation
|
|
```
|
|
|
|
2. **Install Ansible**
|
|
```bash
|
|
sudo pacman -S ansible
|
|
```
|
|
|
|
3. **Configure Secrets**
|
|
```bash
|
|
# Create a vault password file (do not commit!)
|
|
echo "your-strong-password" > ansible/vault_password
|
|
|
|
# Create secrets file
|
|
ansible-vault create ansible/vars/secrets.yml
|
|
```
|
|
|
|
4. **Run system upgrade & kernel install** (preparation for Hyprland/Wayland)
|
|
|
|
This step runs the dedicated `system-upgrade` role: full `pacman -Syu`,
|
|
dual-kernel install (`linux618` LTS + `linux70` stable), and NVIDIA
|
|
driver migration from the pinned `575xx` branch to `580xx` (NVIDIA Fast Branch).
|
|
Always preview first with `--check`. See
|
|
[ADR 0002](../adr/0002-kernel-and-nvidia-strategy.md) for the rationale.
|
|
|
|
```bash
|
|
# Preview — never run the live playbook before --check is clean
|
|
ansible-playbook -i localhost, -c local \
|
|
--vault-password-file ansible/vault_password \
|
|
ansible/workstation.yml --check --tags system-upgrade
|
|
|
|
# Apply (will install/remove packages and regenerate GRUB)
|
|
ansible-playbook -i localhost, -c local \
|
|
--vault-password-file ansible/vault_password \
|
|
ansible/workstation.yml --tags system-upgrade
|
|
```
|
|
|
|
After it finishes, **reboot and select `linux70` from the GRUB menu**
|
|
before continuing to step 5. Verify with `uname -r` (expect 7.0.x)
|
|
and `nvidia-smi` (expect driver 580.x).
|
|
|
|
5. **Run the Playbook** (remaining roles: common, dev-tools, maintenance)
|
|
```bash
|
|
ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml --check
|
|
# If check passes:
|
|
ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml
|
|
```
|
|
|
|
6. **Initialize Maintenance**
|
|
```bash
|
|
./scripts/maintenance.sh
|
|
```
|