From a71c0d198ec0c79d5ba97bf32952efd634ae1c53 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Thu, 14 Jul 2016 22:41:15 +0200 Subject: [PATCH 1/5] Aggiunta cartella di produzione per Liceo del Seminario Vescovile di Bergamo. --- domainpwd.vault | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/domainpwd.vault b/domainpwd.vault index 3a3047d..eeab21e 100644 --- a/domainpwd.vault +++ b/domainpwd.vault @@ -1,7 +1,7 @@ $ANSIBLE_VAULT;1.1;AES256 -36333564653138626465303239313536396663303831346364336264343763323932666162303730 -3136363537366130643335613763303932323235383435660a323164663663373632303161356530 -36366565323134656562366639366237316635646262666162363436363135303839353163656161 -3566653133616163630a363364303061326433616565613662313765306532316339363734666631 -38613865366133663639643930633063653339373035313764623862613237623762396564333466 -3163663439393238373331666534363335326633336661323763 +61346634373262366638356239623132393734353135376535653433636137363331646432323438 +3666376430616632613366653463303431313336346166330a616166366330333038666164626663 +62623562333864613537313436323136666336656533346264323730386130316566633432383531 +3338333862626664380a366638656363363663303031646366303964333361646336666134333134 +37383035613166663838373632343061656537326163303831323335333464613964656531383933 +3833343663333130636631643865393933656332616636366263 From 6c0c326b9550948df41a1b3060a8c2f3dbf45a27 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Tue, 6 Sep 2016 22:09:23 +0200 Subject: [PATCH 2/5] Disabling removal of notification of system upgrade. --- roles/domain/tasks/disable-upgrade-notifications.yml | 11 +++++++++++ roles/domain/tasks/gui-changes.yml | 3 +++ 2 files changed, 14 insertions(+) create mode 100644 roles/domain/tasks/disable-upgrade-notifications.yml diff --git a/roles/domain/tasks/disable-upgrade-notifications.yml b/roles/domain/tasks/disable-upgrade-notifications.yml new file mode 100644 index 0000000..459a12a --- /dev/null +++ b/roles/domain/tasks/disable-upgrade-notifications.yml @@ -0,0 +1,11 @@ +--- + +- name: Checking for upgrade-notification configuration + stat: + path: /usr/share/upstart/sessions/update-notifier-release.conf + register: update_notifier_release_stat + ignore_errors: yes + +- name: Removing notifications for system upgrade + shell: mv /usr/share/upstart/sessions/update-notifier-release.conf /usr/share/upstart/sessions/update-notifier-release.conf.disabled + when: update_notifier_release_stat|success diff --git a/roles/domain/tasks/gui-changes.yml b/roles/domain/tasks/gui-changes.yml index 7396844..ee5c579 100644 --- a/roles/domain/tasks/gui-changes.yml +++ b/roles/domain/tasks/gui-changes.yml @@ -9,3 +9,6 @@ - include: policykit-1.yml tags: policykit + +- include: disable-upgrade-notifications.yml + tags: disable-upgrade-notifications From 67f5908e130fdd8f52dd18a11ce8a3afe5cdb809 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Tue, 6 Sep 2016 23:54:22 +0200 Subject: [PATCH 3/5] Fixing audio not starting. --- roles/domain/tasks/audio.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/domain/tasks/audio.yml b/roles/domain/tasks/audio.yml index 22275a9..824e4dd 100644 --- a/roles/domain/tasks/audio.yml +++ b/roles/domain/tasks/audio.yml @@ -3,7 +3,7 @@ - name: "Allowing pulseaudio to run at startup" replace: - regexp: '^#start on runlevel' + regexp: '^#start on runlevel.*$' replace: 'start on runlevel [2345]' dest: /etc/init/pulseaudio.conf From 091857b9652efc892abfdfe124db21e32f8537d7 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Fri, 25 Nov 2016 01:37:46 +0100 Subject: [PATCH 4/5] Adding local signed fixes. --- .../prereq/files/samba-downgrade_20161124.sh | 42 +++++++++++++++++++ roles/prereq/tasks/fixes.yml | 18 ++++++++ roles/prereq/tasks/main.yml | 6 +++ 3 files changed, 66 insertions(+) create mode 100644 roles/prereq/files/samba-downgrade_20161124.sh create mode 100644 roles/prereq/tasks/fixes.yml diff --git a/roles/prereq/files/samba-downgrade_20161124.sh b/roles/prereq/files/samba-downgrade_20161124.sh new file mode 100644 index 0000000..89216cf --- /dev/null +++ b/roles/prereq/files/samba-downgrade_20161124.sh @@ -0,0 +1,42 @@ +#!/bin/bash + +# Define a fix name. This will be used to check if the fix was already +# applied. +name=samba-downgrade_20161124.sh + +# If already applied, skip +if [[ -f "/var/lib/topolin.ia/fixes/${name}.done" ]]; then + echo "Already fixed with ${name}. Skipping." + exit 0 +fi + +# Make the required modifications. + +export DEBIAN_FRONTEND=noninteractive +apt-get install -q -y --force-yes \ +-o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" \ +libsmbclient=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +python-samba=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +samba=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +samba-common=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +samba-common-bin=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +samba-dsdb-modules=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +samba-libs=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +samba-vfs-modules=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +smbclient=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +libnss-winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +libpam-winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +libwbclient0=2:4.3.11+dfsg-0ubuntu0.14.04.1 \ +winbind=2:4.3.11+dfsg-0ubuntu0.14.04.1 + +pkglist="libsmbclient python-samba samba-common samba-common-bin samba-dsdb-modules samba-libs samba-vfs-modules smbclient libnss-winbind libpam-winbind libwbclient0" + +for pkg in ${pkglist}; do + apt-mark auto ${pkg} + apt-mark hold ${pkg} +done + +# Once modified the system, ensure to create a check file to skip and not run +# it again if not needed. +mkdir -p /var/lib/topolin.ia/fixes +echo "$(date --iso | tr -d '-')" > /var/lib/topolin.ia/fixes/${name}.done diff --git a/roles/prereq/tasks/fixes.yml b/roles/prereq/tasks/fixes.yml new file mode 100644 index 0000000..815be1b --- /dev/null +++ b/roles/prereq/tasks/fixes.yml @@ -0,0 +1,18 @@ +--- +# Permits to apply per-site signed fixes automatically +# +# Prepare a script file, then crypt it with the Domain Administrator password: +# gpg -r info@bglug.it --symmetric --encrypt script.sh > script.sh.gpg +# +# Put the script within the server directory /var/lib/nethserver/ibay/ks/fixes +# +# List the file within domain.yml: +# apply_fixes: +# - script.sh.gpg +# +# Please see roles/prereq/files/samba-downgrade_20161124.sh as a template. +# + +- name: Applying local signed fixes + shell: "/usr/bin/curl -sSL http://{{ ansible_local.domain.serverfqdn }}/ks/fixes/{{ item }} | /usr/bin/gpg --passphrase {{ domainadminpasswd }} --decrypt | sudo /bin/bash" + with_items: "{{ ansible_local.domain.apply_fixes|default([]) }}" diff --git a/roles/prereq/tasks/main.yml b/roles/prereq/tasks/main.yml index 4412571..ab74d55 100644 --- a/roles/prereq/tasks/main.yml +++ b/roles/prereq/tasks/main.yml @@ -10,3 +10,9 @@ tags: - prereq - repos + +- include: fixes.yml + tags: + - prereq + - fixes + when: ansible_local.domain.apply_fixes is defined From 5b8842272433dcf2d7f09cd54e6363121a339c9c Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Mon, 23 Jan 2017 22:09:32 +0100 Subject: [PATCH 5/5] Removed ssl certificate requirements. --- roles/domain/tasks/main.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/roles/domain/tasks/main.yml b/roles/domain/tasks/main.yml index d81c54f..18d1e40 100644 --- a/roles/domain/tasks/main.yml +++ b/roles/domain/tasks/main.yml @@ -21,10 +21,10 @@ - domain - gui -- include: sslproxy.yml - tags: - - domain - - crt +#- include: sslproxy.yml +# tags: +# - domain +# - crt - include: pkgs.yml tags: