- Inject all 10 DOX sections into root AGENTS.md (Core Contract, Read Before Editing, Update After Editing, Hierarchy, Child Doc Shape, Style, Closeout, User Preferences, Child DOX Index) - Update ADR 0002: linux612->linux618, 575xx->580xx NVIDIA migration - Update setup.md: kernel/driver refs to current linux618 + 580xx - Update stack.md, hardware-inventory.md: NVIDIA note 595.71->580xx - Update manual-overrides.md: add br_vm_internal bridge deletion entry - Update workstation-health.md: add Recent Cleanup section - Update README.md: current software versions, expand roles list - Add docs/neovim-cheatsheet.md - Bump last_updated to 2026-06-17 on all modified docs
2.4 KiB
description, tags, last_updated
| description | tags | last_updated | |||
|---|---|---|---|---|---|
| Workstation bootstrapping and setup instructions using Ansible. |
|
2026-06-17 |
Workstation Setup Guide
This guide describes how to bootstrap the mw-pfeddersheim-workstation infrastructure on a fresh installation.
Prerequisites
- Linux (Manjaro/Arch Linux)
- Python 3.12+
- Git
Bootstrap Steps
-
Clone the Infrastructure Repo
mkdir -p ~/infrastructure cd ~/infrastructure git clone https://git.satware.ai/infrastructure/mw-pfeddersheim-workstation.git cd mw-pfeddersheim-workstation -
Install Ansible
sudo pacman -S ansible -
Configure Secrets
# Create a vault password file (do not commit!) echo "your-strong-password" > ansible/vault_password # Create secrets file ansible-vault create ansible/vars/secrets.yml -
Run system upgrade & kernel install (preparation for Hyprland/Wayland)
This step runs the dedicated
system-upgraderole: fullpacman -Syu, dual-kernel install (linux618LTS +linux70stable), and NVIDIA driver migration from the pinned575xxbranch to580xx(NVIDIA Fast Branch). Always preview first with--check. See ADR 0002 for the rationale.# Preview — never run the live playbook before --check is clean ansible-playbook -i localhost, -c local \ --vault-password-file ansible/vault_password \ ansible/workstation.yml --check --tags system-upgrade # Apply (will install/remove packages and regenerate GRUB) ansible-playbook -i localhost, -c local \ --vault-password-file ansible/vault_password \ ansible/workstation.yml --tags system-upgradeAfter it finishes, reboot and select
linux70from the GRUB menu before continuing to step 5. Verify withuname -r(expect 7.0.x) andnvidia-smi(expect driver 580.x). -
Run the Playbook (remaining roles: common, dev-tools, maintenance)
ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml --check # If check passes: ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml -
Initialize Maintenance
./scripts/maintenance.sh