Initial commit

handlers/main.yml

+- name: update initramfs
+  ansible.builtin.command: update-initramfs -u

tasks/main.yml

+- name: install dropbear-initramfs
+  apt:
+    pkg:
+ 
+- name: write config file for dropbear-initramfs
+  notify: update initramfs
+  template:
+    src: config.j2
+    dest: /etc/dropbear-initramfs/config
+
+- name: write authorized_keys file for dropbear-initramfs
+  notify: update initramfs
+  template:
+    src: authorized_keys.j2
+    dest: /etc/dropbear-initramfs/authorized_keys

templates/authorized_keys.j2

+# {{ ansible_managed }}
+
+{% for name, keys in admin_ssh_keys.items() %}
+#{{ name }}
+{{ keys }}
+
+{% endfor %}

templates/config.j2

+# {{ ansible_managed }}
+
+#
+# Command line options to pass to dropbear(8)
+#
+# -s -> disable password login
+DROPBEAR_OPTIONS="-s"
+
+#
+# On local (non-NFS) mounts, interfaces matching this pattern are
+# brought down before exiting the ramdisk to avoid dirty network
+# configuration in the normal kernel.
+# The special value 'none' keeps all interfaces up and preserves routing
+# tables and addresses.
+#
+#IFDOWN=*
+