Migrating sudo ansible syntax to 'become', sudo will be obsoleted in 2.2.
This commit is contained in:
parent
79ac46369b
commit
c587b66ee0
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: Creazione directory per ansible-pull
|
- name: Creazione directory per ansible-pull
|
||||||
file: path=/var/lib/nethserver/ibay/ks/ansible-pull state=directory
|
file: path=/var/lib/nethserver/ibay/ks/ansible-pull state=directory
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Template
|
- name: Template
|
||||||
template: src={{ item }} dest=/var/lib/nethserver/ibay/ks/ansible-pull/{{ item }}
|
template: src={{ item }} dest=/var/lib/nethserver/ibay/ks/ansible-pull/{{ item }}
|
||||||
@ -10,8 +10,8 @@
|
|||||||
- ansible-pull.sh
|
- ansible-pull.sh
|
||||||
- getvaultpass.py
|
- getvaultpass.py
|
||||||
- crontab
|
- crontab
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Logrotate
|
- name: Logrotate
|
||||||
copy: src=logrotate dest=/var/lib/nethserver/ibay/ks/ansible-pull/logrotate
|
copy: src=logrotate dest=/var/lib/nethserver/ibay/ks/ansible-pull/logrotate
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -6,7 +6,7 @@
|
|||||||
- rpmdevtools
|
- rpmdevtools
|
||||||
- yum-utils
|
- yum-utils
|
||||||
- rpmlint
|
- rpmlint
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Aggiungo utente per compilazione pacchetti RPM
|
- name: Aggiungo utente per compilazione pacchetti RPM
|
||||||
user:
|
user:
|
||||||
@ -14,16 +14,16 @@
|
|||||||
password: $6$rounds=100000$neTGJ5N7Nu5ogCTX$VmVgS9HRZcdczjiNNdQcZzFVQI/3AFwu6MNFOKxGhBRY4VcBOo6GTxhXr0K/jYVFTygjHWsr.teM6RmBzSnz.0
|
password: $6$rounds=100000$neTGJ5N7Nu5ogCTX$VmVgS9HRZcdczjiNNdQcZzFVQI/3AFwu6MNFOKxGhBRY4VcBOo6GTxhXr0K/jYVFTygjHWsr.teM6RmBzSnz.0
|
||||||
shell: /bin/bash
|
shell: /bin/bash
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Copia della chiave pubblica
|
- name: Copia della chiave pubblica
|
||||||
authorized_key:
|
authorized_key:
|
||||||
user: makepkg
|
user: makepkg
|
||||||
key: "{{ lookup('file', '/Users/syntaxerrormmm/.ssh/id_rsa.pub') }}"
|
key: "{{ lookup('file', '/Users/syntaxerrormmm/.ssh/id_rsa.pub') }}"
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creazione directory per il build di RPM
|
- name: Creazione directory per il build di RPM
|
||||||
shell: rpmdev-setuptree
|
shell: rpmdev-setuptree
|
||||||
sudo: yes
|
become: yes
|
||||||
sudo_user: makepkg
|
become_user: makepkg
|
||||||
|
@ -8,8 +8,8 @@
|
|||||||
yum:
|
yum:
|
||||||
pkg: doraemon
|
pkg: doraemon
|
||||||
state: latest
|
state: latest
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Verifico avvio di doraemon
|
- name: Verifico avvio di doraemon
|
||||||
service: name=doraemon state=restarted
|
service: name=doraemon state=restarted
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -3,14 +3,14 @@
|
|||||||
|
|
||||||
- name: Installo git-daemon
|
- name: Installo git-daemon
|
||||||
yum: pkg=git-daemon state=present
|
yum: pkg=git-daemon state=present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creazione gruppo git
|
- name: Creazione gruppo git
|
||||||
group:
|
group:
|
||||||
name: git
|
name: git
|
||||||
system: yes
|
system: yes
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creazione utente git-daemon
|
- name: Creazione utente git-daemon
|
||||||
user:
|
user:
|
||||||
@ -19,28 +19,28 @@
|
|||||||
group: git
|
group: git
|
||||||
home: /var/lib/git-daemon
|
home: /var/lib/git-daemon
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creo directory repositories
|
- name: Creo directory repositories
|
||||||
file:
|
file:
|
||||||
path: /var/lib/git-daemon/repositories
|
path: /var/lib/git-daemon/repositories
|
||||||
state: directory
|
state: directory
|
||||||
sudo: yes
|
become: yes
|
||||||
sudo_user: git-daemon
|
become_user: git-daemon
|
||||||
|
|
||||||
- name: Verifica presenza repo
|
- name: Verifica presenza repo
|
||||||
shell: test -d /var/lib/git-daemon/repositories/client-pull-installation.git
|
shell: test -d /var/lib/git-daemon/repositories/client-pull-installation.git
|
||||||
register: chk_clientpullinstall_repo
|
register: chk_clientpullinstall_repo
|
||||||
changed_when: chk_clientpullinstall_repo.rc != 0
|
changed_when: chk_clientpullinstall_repo.rc != 0
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
tags:
|
tags:
|
||||||
- git-daemon-update
|
- git-daemon-update
|
||||||
|
|
||||||
- name: Aggiorno il repo se già esistente
|
- name: Aggiorno il repo se già esistente
|
||||||
shell: pushd /var/lib/git-daemon/repositories/client-pull-installation.git; git fetch -p origin; popd
|
shell: pushd /var/lib/git-daemon/repositories/client-pull-installation.git; git fetch -p origin; popd
|
||||||
sudo: yes
|
become: yes
|
||||||
sudo_user: git-daemon
|
become_user: git-daemon
|
||||||
when: chk_clientpullinstall_repo|success
|
when: chk_clientpullinstall_repo|success
|
||||||
tags:
|
tags:
|
||||||
- git-daemon-update
|
- git-daemon-update
|
||||||
@ -49,16 +49,16 @@
|
|||||||
# il parametro --mirror
|
# il parametro --mirror
|
||||||
- name: Clono il repository client-pull-installation
|
- name: Clono il repository client-pull-installation
|
||||||
shell: git clone --mirror https://github.com/bglug-it/client-pull-installation.git /var/lib/git-daemon/repositories/client-pull-installation.git
|
shell: git clone --mirror https://github.com/bglug-it/client-pull-installation.git /var/lib/git-daemon/repositories/client-pull-installation.git
|
||||||
sudo: yes
|
become: yes
|
||||||
sudo_user: git-daemon
|
become_user: git-daemon
|
||||||
when: chk_clientpullinstall_repo|changed
|
when: chk_clientpullinstall_repo|changed
|
||||||
|
|
||||||
- name: Rendo il repository esportabile
|
- name: Rendo il repository esportabile
|
||||||
file:
|
file:
|
||||||
path: /var/lib/git-daemon/repositories/client-pull-installation.git/git-daemon-export-ok
|
path: /var/lib/git-daemon/repositories/client-pull-installation.git/git-daemon-export-ok
|
||||||
state: touch
|
state: touch
|
||||||
sudo: yes
|
become: yes
|
||||||
sudo_user: git-daemon
|
become_user: git-daemon
|
||||||
tags:
|
tags:
|
||||||
- git-daemon-update
|
- git-daemon-update
|
||||||
|
|
||||||
@ -69,7 +69,7 @@
|
|||||||
mode: 0644
|
mode: 0644
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Installo l'init
|
- name: Installo l'init
|
||||||
copy:
|
copy:
|
||||||
@ -78,22 +78,22 @@
|
|||||||
mode: 0755
|
mode: 0755
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configuro l'avvio di git-daemon
|
- name: Configuro l'avvio di git-daemon
|
||||||
shell: /sbin/chkconfig --add git-daemon
|
shell: /sbin/chkconfig --add git-daemon
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Verifica aggiunta servizio
|
- name: Verifica aggiunta servizio
|
||||||
shell: /sbin/e-smith/db configuration show git-daemon
|
shell: /sbin/e-smith/db configuration show git-daemon
|
||||||
sudo: yes
|
become: yes
|
||||||
register: chk_gitdaemon_srv
|
register: chk_gitdaemon_srv
|
||||||
changed_when: chk_gitdaemon_srv.rc != 0
|
changed_when: chk_gitdaemon_srv.rc != 0
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
|
|
||||||
- name: Aggiungo servizio a gestione NethServer
|
- name: Aggiungo servizio a gestione NethServer
|
||||||
shell: /sbin/e-smith/db configuration set git-daemon service status enabled TCPPort 9418 access private
|
shell: /sbin/e-smith/db configuration set git-daemon service status enabled TCPPort 9418 access private
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_gitdaemon_srv|changed
|
when: chk_gitdaemon_srv|changed
|
||||||
|
|
||||||
- name: Creazione directory defaults per NethServer
|
- name: Creazione directory defaults per NethServer
|
||||||
@ -101,7 +101,7 @@
|
|||||||
path: /etc/e-smith/db/configuration/defaults/git-daemon
|
path: /etc/e-smith/db/configuration/defaults/git-daemon
|
||||||
recurse: yes
|
recurse: yes
|
||||||
state: directory
|
state: directory
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_gitdaemon_srv|changed
|
when: chk_gitdaemon_srv|changed
|
||||||
|
|
||||||
- name: Creazione tipo default per NethServer
|
- name: Creazione tipo default per NethServer
|
||||||
@ -111,7 +111,7 @@
|
|||||||
line: "service"
|
line: "service"
|
||||||
create: yes
|
create: yes
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_gitdaemon_srv|changed
|
when: chk_gitdaemon_srv|changed
|
||||||
|
|
||||||
- name: Creazione stato default per NethServer
|
- name: Creazione stato default per NethServer
|
||||||
@ -121,20 +121,20 @@
|
|||||||
line: "enabled"
|
line: "enabled"
|
||||||
create: yes
|
create: yes
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_gitdaemon_srv|changed
|
when: chk_gitdaemon_srv|changed
|
||||||
|
|
||||||
- name: Aggiunta servizio
|
- name: Aggiunta servizio
|
||||||
shell: /sbin/e-smith/signal-event runlevel-adjust
|
shell: /sbin/e-smith/signal-event runlevel-adjust
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_gitdaemon_srv|changed
|
when: chk_gitdaemon_srv|changed
|
||||||
|
|
||||||
- name: Aggiunta servizio di rete e cambio firewall
|
- name: Aggiunta servizio di rete e cambio firewall
|
||||||
shell: /sbin/e-smith/signal-event firewall-adjust
|
shell: /sbin/e-smith/signal-event firewall-adjust
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_gitdaemon_srv|changed
|
when: chk_gitdaemon_srv|changed
|
||||||
|
|
||||||
- name: Avvio servizio
|
- name: Avvio servizio
|
||||||
shell: service git-daemon start
|
shell: service git-daemon start
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_gitdaemon_srv|changed
|
when: chk_gitdaemon_srv|changed
|
||||||
|
@ -2,21 +2,21 @@
|
|||||||
# Copia le configurazioni per il dominio in locale sul server.
|
# Copia le configurazioni per il dominio in locale sul server.
|
||||||
- name: Copia le configurazioni di dominio.
|
- name: Copia le configurazioni di dominio.
|
||||||
copy: src=../../../domain.yml dest=/etc/domain.yml force=yes
|
copy: src=../../../domain.yml dest=/etc/domain.yml force=yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creo la cartella per le configurazioni di Ansible
|
- name: Creo la cartella per le configurazioni di Ansible
|
||||||
file: path=/etc/ansible/facts.d state=directory owner=root mode=0755
|
file: path=/etc/ansible/facts.d state=directory owner=root mode=0755
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Installo PyYAML, necessario per i facts
|
- name: Installo PyYAML, necessario per i facts
|
||||||
yum:
|
yum:
|
||||||
name: PyYAML
|
name: PyYAML
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Utilizzo un piccolo wrapper per passare come fatti informazioni di dominio
|
- name: Utilizzo un piccolo wrapper per passare come fatti informazioni di dominio
|
||||||
copy: src=domain.fact dest=/etc/ansible/facts.d/domain.fact mode=0755 owner=root
|
copy: src=domain.fact dest=/etc/ansible/facts.d/domain.fact mode=0755 owner=root
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Rileggo i fatti per essere sicuri che vengano utilizzati
|
- name: Rileggo i fatti per essere sicuri che vengano utilizzati
|
||||||
setup: filter=ansible_local
|
setup: filter=ansible_local
|
||||||
|
@ -1,9 +1,21 @@
|
|||||||
---
|
---
|
||||||
- name: Creazione account di gestione Ansible
|
- name: Creazione account di gestione Ansible
|
||||||
user: name=amgmt comment="Ansible Management User" group=wheel state=present password=$6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
|
user:
|
||||||
|
name: amgmt
|
||||||
|
comment: "Ansible Management User"
|
||||||
|
group: wheel
|
||||||
|
state: present
|
||||||
|
password: $6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
|
||||||
|
|
||||||
- name: Concessione diritti all'utente di gestione Ansible
|
- name: Concessione diritti all'utente di gestione Ansible
|
||||||
template: src=sudoers.d dest=/etc/sudoers.d/amgmt mode="u=r,g=r" validate="visudo -cf %s"
|
template:
|
||||||
|
src: sudoers.d
|
||||||
|
dest: /etc/sudoers.d/amgmt
|
||||||
|
mode: "u=r,g=r"
|
||||||
|
validate: "visudo -cf %s"
|
||||||
|
|
||||||
- name: Installazione chiave privata PC locale
|
- name: Installazione chiave privata PC locale
|
||||||
authorized_key: user=amgmt key="{{ lookup('file', admin_sshkey) }}" state=present
|
authorized_key:
|
||||||
|
user: amgmt
|
||||||
|
key: "{{ lookup('file', admin_sshkey) }}"
|
||||||
|
state: present
|
||||||
|
@ -2,48 +2,48 @@
|
|||||||
- name: Verifico la presenza del gruppo Domain Users
|
- name: Verifico la presenza del gruppo Domain Users
|
||||||
shell: /sbin/e-smith/db accounts show domusers
|
shell: /sbin/e-smith/db accounts show domusers
|
||||||
register: check_domusers
|
register: check_domusers
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
||||||
- name: Creazione gruppo Domain Users
|
- name: Creazione gruppo Domain Users
|
||||||
shell: /sbin/e-smith/db accounts set domusers group Description "Domain Users" Members admin Removable no
|
shell: /sbin/e-smith/db accounts set domusers group Description "Domain Users" Members admin Removable no
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_domusers|failed
|
when: check_domusers|failed
|
||||||
|
|
||||||
- name: Configurazione nuovo gruppo Domain Users
|
- name: Configurazione nuovo gruppo Domain Users
|
||||||
shell: /sbin/e-smith/signal-event group-create domusers
|
shell: /sbin/e-smith/signal-event group-create domusers
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_domusers|failed
|
when: check_domusers|failed
|
||||||
|
|
||||||
- name: Verifico la presenza del gruppo Domain Operators
|
- name: Verifico la presenza del gruppo Domain Operators
|
||||||
shell: /sbin/e-smith/db accounts show domopers
|
shell: /sbin/e-smith/db accounts show domopers
|
||||||
register: check_domopers
|
register: check_domopers
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
||||||
- name: Creazione gruppo Domain Operators
|
- name: Creazione gruppo Domain Operators
|
||||||
shell: /sbin/e-smith/db accounts set domopers group Description "Domain Operators" Removable no
|
shell: /sbin/e-smith/db accounts set domopers group Description "Domain Operators" Removable no
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_domopers|failed
|
when: check_domopers|failed
|
||||||
|
|
||||||
- name: Configurazione nuovo gruppo Domain Operators
|
- name: Configurazione nuovo gruppo Domain Operators
|
||||||
shell: /sbin/e-smith/signal-event group-create domopers
|
shell: /sbin/e-smith/signal-event group-create domopers
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_domopers|failed
|
when: check_domopers|failed
|
||||||
|
|
||||||
- name: Verifico la presenza del gruppo Docenti
|
- name: Verifico la presenza del gruppo Docenti
|
||||||
shell: /sbin/e-smith/db accounts show docenti
|
shell: /sbin/e-smith/db accounts show docenti
|
||||||
register: check_docenti
|
register: check_docenti
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
||||||
- name: Creazione gruppo Docenti
|
- name: Creazione gruppo Docenti
|
||||||
shell: /sbin/e-smith/db accounts set docenti group Description "Docenti" Removable no
|
shell: /sbin/e-smith/db accounts set docenti group Description "Docenti" Removable no
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_docenti|failed
|
when: check_docenti|failed
|
||||||
|
|
||||||
- name: Configurazione nuovo gruppo Docenti
|
- name: Configurazione nuovo gruppo Docenti
|
||||||
shell: /sbin/e-smith/signal-event group-create docenti
|
shell: /sbin/e-smith/signal-event group-create docenti
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_docenti|failed
|
when: check_docenti|failed
|
||||||
|
|
||||||
|
@ -2,5 +2,5 @@
|
|||||||
|
|
||||||
- name: Installazione pacchetti neth
|
- name: Installazione pacchetti neth
|
||||||
yum: name="{{ item }}" state=present
|
yum: name="{{ item }}" state=present
|
||||||
sudo: yes
|
become: yes
|
||||||
with_items: neth_pkgs
|
with_items: neth_pkgs
|
||||||
|
@ -1,19 +1,19 @@
|
|||||||
- name: Configurazione scheda di rete esterna
|
- name: Configurazione scheda di rete esterna
|
||||||
shell: /sbin/e-smith/db networks setprop {{ extnic }} role red bootproto dhcp
|
shell: /sbin/e-smith/db networks setprop {{ extnic }} role red bootproto dhcp
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configurazione scheda di rete interna
|
- name: Configurazione scheda di rete interna
|
||||||
shell: /sbin/e-smith/db networks setprop {{ intnic }} role green ipaddr {{ ansible_local.domain.serverip }} netmask {{ ansible_local.domain.servernetmask }}
|
shell: /sbin/e-smith/db networks setprop {{ intnic }} role green ipaddr {{ ansible_local.domain.serverip }} netmask {{ ansible_local.domain.servernetmask }}
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Attivo configurazioni di rete
|
- name: Attivo configurazioni di rete
|
||||||
shell: /sbin/e-smith/signal-event interface-update
|
shell: /sbin/e-smith/signal-event interface-update
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configurazione rete trusted
|
- name: Configurazione rete trusted
|
||||||
shell: /sbin/e-smith/db networks set {{ ansible_local.domain.servernet }} network Description "Local LAN" Mask {{ ansible_local.domain.servernetmask }}
|
shell: /sbin/e-smith/db networks set {{ ansible_local.domain.servernet }} network Description "Local LAN" Mask {{ ansible_local.domain.servernetmask }}
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Modifico configurazioni
|
- name: Modifico configurazioni
|
||||||
shell: /sbin/e-smith/signal-event trusted-networks-modify
|
shell: /sbin/e-smith/signal-event trusted-networks-modify
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -4,95 +4,95 @@
|
|||||||
register: check_org
|
register: check_org
|
||||||
changed_when: "'City={{ ansible_local.domain.org_city }}' not in check_org.stdout"
|
changed_when: "'City={{ ansible_local.domain.org_city }}' not in check_org.stdout"
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configurazione organizzazione
|
- name: Configurazione organizzazione
|
||||||
shell: /sbin/e-smith/db configuration setprop OrganizationContact City "{{ ansible_local.domain.org_city }}" Company "{{ ansible_local.domain.org_company }}" CountryCode {{ ansible_local.domain.org_countrycode }} Department "{{ ansible_local.domain.org_department }}" PhoneNumber "{{ ansible_local.domain.org_phone }}" Street "{{ ansible_local.domain.org_street }}"
|
shell: /sbin/e-smith/db configuration setprop OrganizationContact City "{{ ansible_local.domain.org_city }}" Company "{{ ansible_local.domain.org_company }}" CountryCode {{ ansible_local.domain.org_countrycode }} Department "{{ ansible_local.domain.org_department }}" PhoneNumber "{{ ansible_local.domain.org_phone }}" Street "{{ ansible_local.domain.org_street }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_org|changed
|
when: check_org|changed
|
||||||
|
|
||||||
- name: Configurazione nome server
|
- name: Configurazione nome server
|
||||||
shell: /sbin/e-smith/db configuration set SystemName {{ ansible_local.domain.server }}
|
shell: /sbin/e-smith/db configuration set SystemName {{ ansible_local.domain.server }}
|
||||||
sudo: yes
|
become: yes
|
||||||
register: chg_hostname
|
register: chg_hostname
|
||||||
when: "'{{ ansible_hostname }}' != '{{ ansible_local.domain.server }}'"
|
when: "'{{ ansible_hostname }}' != '{{ ansible_local.domain.server }}'"
|
||||||
|
|
||||||
- name: Configurazione nome dominio
|
- name: Configurazione nome dominio
|
||||||
shell: /sbin/e-smith/db configuration set DomainName {{ ansible_local.domain.domainfull }}
|
shell: /sbin/e-smith/db configuration set DomainName {{ ansible_local.domain.domainfull }}
|
||||||
sudo: yes
|
become: yes
|
||||||
register: chg_domainname
|
register: chg_domainname
|
||||||
when: "'{{ ansible_domain }}' != '{{ ansible_local.domain.domainfull }}'"
|
when: "'{{ ansible_domain }}' != '{{ ansible_local.domain.domainfull }}'"
|
||||||
|
|
||||||
- name: Attivazione cambiamenti hostname
|
- name: Attivazione cambiamenti hostname
|
||||||
shell: /sbin/e-smith/signal-event hostname-modify
|
shell: /sbin/e-smith/signal-event hostname-modify
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chg_hostname|changed or chg_domainname|changed
|
when: chg_hostname|changed or chg_domainname|changed
|
||||||
|
|
||||||
- name: Verifica robustezza password
|
- name: Verifica robustezza password
|
||||||
shell: /sbin/e-smith/db configuration printprop passwordstrength Users
|
shell: /sbin/e-smith/db configuration printprop passwordstrength Users
|
||||||
register: chk_passstr
|
register: chk_passstr
|
||||||
changed_when: "'Users=none' not in chk_passstr.stdout"
|
changed_when: "'Users=none' not in chk_passstr.stdout"
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
||||||
- name: Configurazione forza password
|
- name: Configurazione forza password
|
||||||
shell: /sbin/e-smith/db configuration setprop passwordstrength PassExpires no Users none Admin strong MaxPassAge 180 MinPassAge 0 PassExpires no PassWarning 7
|
shell: /sbin/e-smith/db configuration setprop passwordstrength PassExpires no Users none Admin strong MaxPassAge 180 MinPassAge 0 PassExpires no PassWarning 7
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_passstr|changed
|
when: chk_passstr|changed
|
||||||
|
|
||||||
- name: Attivo configurazione policy password
|
- name: Attivo configurazione policy password
|
||||||
shell: /sbin/e-smith/signal-event password-policy-update
|
shell: /sbin/e-smith/signal-event password-policy-update
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_passstr|changed
|
when: chk_passstr|changed
|
||||||
|
|
||||||
- name: Verifica configurazione DHCP
|
- name: Verifica configurazione DHCP
|
||||||
shell: /sbin/e-smith/db dhcp getprop {{ intnic }} DhcpRangeStart
|
shell: /sbin/e-smith/db dhcp getprop {{ intnic }} DhcpRangeStart
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
register: chk_dhcp
|
register: chk_dhcp
|
||||||
|
|
||||||
- name: Configurazione servizio DHCP
|
- name: Configurazione servizio DHCP
|
||||||
shell: /sbin/e-smith/db dhcp set {{ intnic }} range DhcpRangeStart {{ ansible_local.domain.dhcprange_start }} DhcpRangeEnd {{ ansible_local.domain.dhcprange_end }} status enabled
|
shell: /sbin/e-smith/db dhcp set {{ intnic }} range DhcpRangeStart {{ ansible_local.domain.dhcprange_start }} DhcpRangeEnd {{ ansible_local.domain.dhcprange_end }} status enabled
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_dhcp|failed
|
when: chk_dhcp|failed
|
||||||
|
|
||||||
- name: Attivazione configurazione DHCP
|
- name: Attivazione configurazione DHCP
|
||||||
shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save
|
shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_dhcp|failed
|
when: chk_dhcp|failed
|
||||||
|
|
||||||
- name: Verifica configurazione DNS
|
- name: Verifica configurazione DNS
|
||||||
shell: /sbin/e-smith/db configuration printprop dns NameServers
|
shell: /sbin/e-smith/db configuration printprop dns NameServers
|
||||||
sudo: yes
|
become: yes
|
||||||
register: chk_dns
|
register: chk_dns
|
||||||
changed_when: "'NameServers={{ ansible_local.domain.extdnsserver1 }},{{ ansible_local.domain.extdnsserver2 }}' not in chk_dns.stdout"
|
changed_when: "'NameServers={{ ansible_local.domain.extdnsserver1 }},{{ ansible_local.domain.extdnsserver2 }}' not in chk_dns.stdout"
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
|
|
||||||
- name: Configurazione servizio DNS
|
- name: Configurazione servizio DNS
|
||||||
shell: /sbin/e-smith/db configuration setprop dns role resolver NameServers "{{ ansible_local.domain.extdnsserver1 }},{{ ansible_local.domain.extdnsserver2 }}"
|
shell: /sbin/e-smith/db configuration setprop dns role resolver NameServers "{{ ansible_local.domain.extdnsserver1 }},{{ ansible_local.domain.extdnsserver2 }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_dns|changed
|
when: chk_dns|changed
|
||||||
|
|
||||||
- name: Attivo configurazione DNS
|
- name: Attivo configurazione DNS
|
||||||
shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save
|
shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save
|
||||||
when: chk_dns|changed
|
when: chk_dns|changed
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Verifica configurazione NTP
|
- name: Verifica configurazione NTP
|
||||||
shell: /sbin/e-smith/db configuration printprop ntpd NTPServer
|
shell: /sbin/e-smith/db configuration printprop ntpd NTPServer
|
||||||
sudo: yes
|
become: yes
|
||||||
register: chk_ntp
|
register: chk_ntp
|
||||||
changed_when: "'NTPServer=ntp1.inrim.it' not in chk_ntp.stdout"
|
changed_when: "'NTPServer=ntp1.inrim.it' not in chk_ntp.stdout"
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
||||||
- name: Configuro NTP
|
- name: Configuro NTP
|
||||||
shell: /sbin/e-smith/db configuration setprop ntpd NTPServer ntp1.inrim.it status enabled
|
shell: /sbin/e-smith/db configuration setprop ntpd NTPServer ntp1.inrim.it status enabled
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_ntp|changed
|
when: chk_ntp|changed
|
||||||
|
|
||||||
- name: Attivazione NTP
|
- name: Attivazione NTP
|
||||||
shell: /sbin/e-smith/signal-event nethserver-ntp-update
|
shell: /sbin/e-smith/signal-event nethserver-ntp-update
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_ntp|changed
|
when: chk_ntp|changed
|
||||||
|
|
||||||
- name: Utilizzo unix extensions nei template per ibay
|
- name: Utilizzo unix extensions nei template per ibay
|
||||||
@ -100,23 +100,23 @@
|
|||||||
dest: /etc/e-smith/templates/etc/samba/smb.conf/10global
|
dest: /etc/e-smith/templates/etc/samba/smb.conf/10global
|
||||||
regexp: '^unix extensions = no$'
|
regexp: '^unix extensions = no$'
|
||||||
replace: 'unix extensions = yes'
|
replace: 'unix extensions = yes'
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Verifica configurazione SMB
|
- name: Verifica configurazione SMB
|
||||||
shell: /sbin/e-smith/db configuration printprop smb RoamingProfiles
|
shell: /sbin/e-smith/db configuration printprop smb RoamingProfiles
|
||||||
sudo: yes
|
become: yes
|
||||||
register: chk_smb
|
register: chk_smb
|
||||||
changed_when: "'RoamingProfiles=yes' not in chk_smb.stdout"
|
changed_when: "'RoamingProfiles=yes' not in chk_smb.stdout"
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
||||||
- name: Configurazione SMB
|
- name: Configurazione SMB
|
||||||
shell: /sbin/e-smith/db configuration setprop smb RoamingProfiles yes ServerRole PDC Workgroup "{{ ansible_local.domain.domainshort }}" status enabled
|
shell: /sbin/e-smith/db configuration setprop smb RoamingProfiles yes ServerRole PDC Workgroup "{{ ansible_local.domain.domainshort }}" status enabled
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_smb|changed
|
when: chk_smb|changed
|
||||||
|
|
||||||
- name: Attivo configurazione SMB
|
- name: Attivo configurazione SMB
|
||||||
shell: /sbin/e-smith/signal-event nethserver-samba-save
|
shell: /sbin/e-smith/signal-event nethserver-samba-save
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_smb|changed
|
when: chk_smb|changed
|
||||||
|
|
||||||
- name: Abilito il ricaricamento dei servizi smb su ibay-create
|
- name: Abilito il ricaricamento dei servizi smb su ibay-create
|
||||||
@ -125,17 +125,17 @@
|
|||||||
- /etc/e-smith/events/ibay-delete/services2adjust
|
- /etc/e-smith/events/ibay-delete/services2adjust
|
||||||
- /etc/e-smith/events/ibay-create/services2adjust
|
- /etc/e-smith/events/ibay-create/services2adjust
|
||||||
- /etc/e-smith/events/ibay-modify/services2adjust
|
- /etc/e-smith/events/ibay-modify/services2adjust
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Verifica creazione share condiviso
|
- name: Verifica creazione share condiviso
|
||||||
shell: /sbin/e-smith/db accounts show shared
|
shell: /sbin/e-smith/db accounts show shared
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
register: chk_shared
|
register: chk_shared
|
||||||
|
|
||||||
- name: Copying default templates for new template type
|
- name: Copying default templates for new template type
|
||||||
shell: cp -r /etc/e-smith/templates/etc/samba/smb.conf/ibay-default /etc/e-smith/templates/etc/samba/smb.conf/ibay-shared
|
shell: cp -r /etc/e-smith/templates/etc/samba/smb.conf/ibay-default /etc/e-smith/templates/etc/samba/smb.conf/ibay-shared
|
||||||
sudo: yes
|
become: yes
|
||||||
when: force_ibay_shared|bool or chk_shared|failed
|
when: force_ibay_shared|bool or chk_shared|failed
|
||||||
|
|
||||||
- name: Configuring ibay-shared template structure (directory mask)
|
- name: Configuring ibay-shared template structure (directory mask)
|
||||||
@ -144,7 +144,7 @@
|
|||||||
line: 'directory mask = 0775'
|
line: 'directory mask = 0775'
|
||||||
insertafter: '^create mask'
|
insertafter: '^create mask'
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
when: force_ibay_shared|bool or chk_shared|failed
|
when: force_ibay_shared|bool or chk_shared|failed
|
||||||
|
|
||||||
- name: Configuring force create mode
|
- name: Configuring force create mode
|
||||||
@ -153,7 +153,7 @@
|
|||||||
line: 'force create mode = 0664'
|
line: 'force create mode = 0664'
|
||||||
insertafter: '^directory mask'
|
insertafter: '^directory mask'
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
when: force_ibay_shared|bool or chk_shared|failed
|
when: force_ibay_shared|bool or chk_shared|failed
|
||||||
|
|
||||||
- name: Configuring force directory mode
|
- name: Configuring force directory mode
|
||||||
@ -162,88 +162,88 @@
|
|||||||
line: 'force directory mode = 0775'
|
line: 'force directory mode = 0775'
|
||||||
insertafter: '^force create mode'
|
insertafter: '^force create mode'
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
when: force_ibay_shared|bool or chk_shared|failed
|
when: force_ibay_shared|bool or chk_shared|failed
|
||||||
|
|
||||||
- name: Configurazione share Condiviso
|
- name: Configurazione share Condiviso
|
||||||
shell: /sbin/e-smith/db accounts set shared ibay AclRead domusers,domadmins AclWrite domusers,domadmins Description "Cartella condivisa" GroupAccess rw HttpStatus disabled OtherAccess r OwningGroup locals SmbAuditStatus enabled SmbGuestAccessType none SmbRecycleBinStatus enabled SmbRecycleBinVersionsStatus enabled SmbStatus enabled
|
shell: /sbin/e-smith/db accounts set shared ibay AclRead domusers,domadmins AclWrite domusers,domadmins Description "Cartella condivisa" GroupAccess rw HttpStatus disabled OtherAccess r OwningGroup locals SmbAuditStatus enabled SmbGuestAccessType none SmbRecycleBinStatus enabled SmbRecycleBinVersionsStatus enabled SmbStatus enabled
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_shared|failed
|
when: chk_shared|failed
|
||||||
|
|
||||||
- name: Attivazione share condiviso
|
- name: Attivazione share condiviso
|
||||||
shell: /sbin/e-smith/signal-event ibay-create shared
|
shell: /sbin/e-smith/signal-event ibay-create shared
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_shared|failed
|
when: chk_shared|failed
|
||||||
|
|
||||||
- name: Changing ibay profile for shared
|
- name: Changing ibay profile for shared
|
||||||
shell: /sbin/e-smith/db accounts setprop shared SmbProfileType shared
|
shell: /sbin/e-smith/db accounts setprop shared SmbProfileType shared
|
||||||
sudo: yes
|
become: yes
|
||||||
when: force_ibay_shared|bool or chk_shared|failed
|
when: force_ibay_shared|bool or chk_shared|failed
|
||||||
|
|
||||||
- name: Forcing regeneration of smb.conf
|
- name: Forcing regeneration of smb.conf
|
||||||
shell: /sbin/e-smith/signal-event nethserver-samba-update
|
shell: /sbin/e-smith/signal-event nethserver-samba-update
|
||||||
sudo: yes
|
become: yes
|
||||||
when: force_ibay_shared|bool or chk_shared|failed
|
when: force_ibay_shared|bool or chk_shared|failed
|
||||||
|
|
||||||
- name: Verifica configurazione squid
|
- name: Verifica configurazione squid
|
||||||
shell: /sbin/e-smith/db configuration printprop squid GreenMode
|
shell: /sbin/e-smith/db configuration printprop squid GreenMode
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
register: chk_squid
|
register: chk_squid
|
||||||
changed_when: "'GreenMode=transparent_ssl' not in chk_squid.stdout"
|
changed_when: "'GreenMode=transparent_ssl' not in chk_squid.stdout"
|
||||||
|
|
||||||
- name: Configurazione squid
|
- name: Configurazione squid
|
||||||
shell: /sbin/e-smith/db configuration setprop squid BlueMode transparent_ssl GreenMode transparent_ssl PortBlock enabled status enabled DiskCache enabled DiskCacheSize 500
|
shell: /sbin/e-smith/db configuration setprop squid BlueMode transparent_ssl GreenMode transparent_ssl PortBlock enabled status enabled DiskCache enabled DiskCacheSize 500
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_squid|changed
|
when: chk_squid|changed
|
||||||
|
|
||||||
- name: Attivazione configurazione squid
|
- name: Attivazione configurazione squid
|
||||||
shell: /sbin/e-smith/signal-event nethserver-squid-update
|
shell: /sbin/e-smith/signal-event nethserver-squid-update
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_squid|changed
|
when: chk_squid|changed
|
||||||
|
|
||||||
- name: Verifica configurazione squidguard
|
- name: Verifica configurazione squidguard
|
||||||
shell: /sbin/e-smith/db configuration printprop squidguard Lists
|
shell: /sbin/e-smith/db configuration printprop squidguard Lists
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
register: chk_squidguard
|
register: chk_squidguard
|
||||||
changed_when: "'Lists=shalla' not in chk_squidguard.stdout"
|
changed_when: "'Lists=shalla' not in chk_squidguard.stdout"
|
||||||
|
|
||||||
- name: Configurazione squidguard
|
- name: Configurazione squidguard
|
||||||
shell: /sbin/e-smith/db configuration setprop squidguard Expressions enabled Lists shalla status enabled
|
shell: /sbin/e-smith/db configuration setprop squidguard Expressions enabled Lists shalla status enabled
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_squidguard|changed
|
when: chk_squidguard|changed
|
||||||
|
|
||||||
- name: Scarico liste di filtraggio
|
- name: Scarico liste di filtraggio
|
||||||
shell: /sbin/e-smith/signal-event nethserver-squidguard-downloadlists
|
shell: /sbin/e-smith/signal-event nethserver-squidguard-downloadlists
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_squidguard|changed
|
when: chk_squidguard|changed
|
||||||
|
|
||||||
- name: Attivazione squidguard
|
- name: Attivazione squidguard
|
||||||
shell: /sbin/e-smith/signal-event nethserver-squidguard-update
|
shell: /sbin/e-smith/signal-event nethserver-squidguard-update
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_squidguard|changed
|
when: chk_squidguard|changed
|
||||||
|
|
||||||
- name: Verifica configurazione squidclamav
|
- name: Verifica configurazione squidclamav
|
||||||
shell: /sbin/e-smith/db configuration printprop squidclamav status
|
shell: /sbin/e-smith/db configuration printprop squidclamav status
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
register: chk_squidclamav
|
register: chk_squidclamav
|
||||||
changed_when: "'status=enabled' not in chk_squidclamav.stdout"
|
changed_when: "'status=enabled' not in chk_squidclamav.stdout"
|
||||||
|
|
||||||
- name: Configurazione squidclamav
|
- name: Configurazione squidclamav
|
||||||
shell: /sbin/e-smith/db configuration setprop squidclamav status enabled
|
shell: /sbin/e-smith/db configuration setprop squidclamav status enabled
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_squidclamav|changed
|
when: chk_squidclamav|changed
|
||||||
|
|
||||||
- name: Attivazione squidclamav
|
- name: Attivazione squidclamav
|
||||||
shell: /sbin/e-smith/signal-event nethserver-squidclamav-update
|
shell: /sbin/e-smith/signal-event nethserver-squidclamav-update
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_squidclamav|changed
|
when: chk_squidclamav|changed
|
||||||
|
|
||||||
- name: Verifica completamento configurazione per certificato
|
- name: Verifica completamento configurazione per certificato
|
||||||
shell: /sbin/e-smith/db configuration printprop pki CommonName
|
shell: /sbin/e-smith/db configuration printprop pki CommonName
|
||||||
sudo: yes
|
become: yes
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
register: chk_crt
|
register: chk_crt
|
||||||
changed_when: "'CommonName={{ ansible_local.domain.serverfqdn }}' not in chk_crt.stdout"
|
changed_when: "'CommonName={{ ansible_local.domain.serverfqdn }}' not in chk_crt.stdout"
|
||||||
@ -251,12 +251,12 @@
|
|||||||
|
|
||||||
- name: Completo la configurazione per produzione certificato
|
- name: Completo la configurazione per produzione certificato
|
||||||
shell: /sbin/e-smith/db configuration setprop pki CertificateDuration 3650 CommonName {{ ansible_local.domain.serverfqdn }} CountryCode {{ ansible_local.domain.org_countrycode }} EmailAddress {{ ansible_local.domain.org_email }} Locality "{{ ansible_local.domain.org_city }}" Organization "{{ ansible_local.domain.org_company }}"
|
shell: /sbin/e-smith/db configuration setprop pki CertificateDuration 3650 CommonName {{ ansible_local.domain.serverfqdn }} CountryCode {{ ansible_local.domain.org_countrycode }} EmailAddress {{ ansible_local.domain.org_email }} Locality "{{ ansible_local.domain.org_city }}" Organization "{{ ansible_local.domain.org_company }}"
|
||||||
sudo: yes
|
become: yes
|
||||||
tags: regen-ca
|
tags: regen-ca
|
||||||
when: chk_crt|changed or force_regen_ca|bool
|
when: chk_crt|changed or force_regen_ca|bool
|
||||||
|
|
||||||
- name: Rigenero il certificato con le informazioni inserite
|
- name: Rigenero il certificato con le informazioni inserite
|
||||||
shell: /sbin/e-smith/signal-event certificate-update
|
shell: /sbin/e-smith/signal-event certificate-update
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_crt|changed or force_regen_ca|bool
|
when: chk_crt|changed or force_regen_ca|bool
|
||||||
tags: regen-ca
|
tags: regen-ca
|
||||||
|
@ -5,4 +5,4 @@
|
|||||||
yum:
|
yum:
|
||||||
pkg: nethserver-networkpackagemanager
|
pkg: nethserver-networkpackagemanager
|
||||||
state: latest
|
state: latest
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -13,7 +13,7 @@
|
|||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
mode: 0755
|
mode: 0755
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
|
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
|
||||||
copy:
|
copy:
|
||||||
@ -21,15 +21,15 @@
|
|||||||
dest: /var/lib/nethserver/ibay/ks/server-ca/cert8.db
|
dest: /var/lib/nethserver/ibay/ks/server-ca/cert8.db
|
||||||
owner: root
|
owner: root
|
||||||
mode: 0644
|
mode: 0644
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Integro la CA nel db
|
- name: Integro la CA nel db
|
||||||
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks/server-ca
|
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks/server-ca
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Pulizia
|
- name: Pulizia
|
||||||
shell: rm -f {{ item }}
|
shell: rm -f {{ item }}
|
||||||
sudo: yes
|
become: yes
|
||||||
with_items:
|
with_items:
|
||||||
- /tmp/ca.crt
|
- /tmp/ca.crt
|
||||||
- /var/lib/nethserver/ibay/ks/server-ca/key3.db
|
- /var/lib/nethserver/ibay/ks/server-ca/key3.db
|
||||||
|
@ -4,34 +4,34 @@
|
|||||||
register: chk_ks_created
|
register: chk_ks_created
|
||||||
changed_when: chk_ks_created.rc != 0
|
changed_when: chk_ks_created.rc != 0
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configurazione web preseed
|
- name: Configurazione web preseed
|
||||||
shell: /sbin/e-smith/db accounts set ks ibay Description "Preseed share" GroupAccess rw HttpAccess private HttpAliasType default HttpAllowOverrideStatus disabled HttpForceSslStatus disabled HttpPasswordStatus disabled HttpStatus enabled HttpVirtualHost __ANY__ OtherAccess r OwningGroup locals SmbAuditStatus disabled SmbStatus disabled
|
shell: /sbin/e-smith/db accounts set ks ibay Description "Preseed share" GroupAccess rw HttpAccess private HttpAliasType default HttpAllowOverrideStatus disabled HttpForceSslStatus disabled HttpPasswordStatus disabled HttpStatus enabled HttpVirtualHost __ANY__ OtherAccess r OwningGroup locals SmbAuditStatus disabled SmbStatus disabled
|
||||||
when: chk_ks_created|failed
|
when: chk_ks_created|failed
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Attivazione web preseed
|
- name: Attivazione web preseed
|
||||||
shell: /sbin/e-smith/signal-event ibay-create ks
|
shell: /sbin/e-smith/signal-event ibay-create ks
|
||||||
when: chk_ks_created|failed
|
when: chk_ks_created|failed
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Verifica presenza directory mirror
|
- name: Verifica presenza directory mirror
|
||||||
file: path=/var/spool/apt-mirror/mirror state=directory
|
file: path=/var/spool/apt-mirror/mirror state=directory
|
||||||
register: chk_mirror_dir
|
register: chk_mirror_dir
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Collegamento directory mirror
|
- name: Collegamento directory mirror
|
||||||
file: path=/var/lib/nethserver/ibay/ks/mirror src=/var/spool/apt-mirror/mirror state=link
|
file: path=/var/lib/nethserver/ibay/ks/mirror src=/var/spool/apt-mirror/mirror state=link
|
||||||
sudo: yes
|
become: yes
|
||||||
when: chk_mirror_dir|success
|
when: chk_mirror_dir|success
|
||||||
|
|
||||||
- name: Creazione directory preseed
|
- name: Creazione directory preseed
|
||||||
file:
|
file:
|
||||||
path: "/var/lib/nethserver/ibay/ks/preseed"
|
path: "/var/lib/nethserver/ibay/ks/preseed"
|
||||||
state: directory
|
state: directory
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Copia profili preseed
|
- name: Copia profili preseed
|
||||||
template:
|
template:
|
||||||
@ -41,7 +41,7 @@
|
|||||||
- edubuntu.seed
|
- edubuntu.seed
|
||||||
- client-trusty.seed
|
- client-trusty.seed
|
||||||
- docenti-trusty.seed
|
- docenti-trusty.seed
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Copia script post-installazione
|
- name: Copia script post-installazione
|
||||||
template:
|
template:
|
||||||
@ -52,4 +52,4 @@
|
|||||||
- postseed-docenti.sh
|
- postseed-docenti.sh
|
||||||
- pulseaudio-perms.sh
|
- pulseaudio-perms.sh
|
||||||
- checksum.fact
|
- checksum.fact
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -6,17 +6,17 @@
|
|||||||
register: chk_tftp_enabled
|
register: chk_tftp_enabled
|
||||||
changed_when: "'pxelinux.0' not in chk_tftp_enabled.stdout"
|
changed_when: "'pxelinux.0' not in chk_tftp_enabled.stdout"
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Configuro tftp
|
- name: Configuro tftp
|
||||||
shell: /sbin/e-smith/db configuration setprop dnsmasq tftp-status enabled dhcp-boot pxelinux.0
|
shell: /sbin/e-smith/db configuration setprop dnsmasq tftp-status enabled dhcp-boot pxelinux.0
|
||||||
when: chk_tftp_enabled|changed
|
when: chk_tftp_enabled|changed
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Attivo tftp
|
- name: Attivo tftp
|
||||||
shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save
|
shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save
|
||||||
when: chk_tftp_enabled|changed
|
when: chk_tftp_enabled|changed
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creo directory necessarie
|
- name: Creo directory necessarie
|
||||||
file: path={{ item }} state=directory
|
file: path={{ item }} state=directory
|
||||||
@ -25,72 +25,72 @@
|
|||||||
- /var/lib/tftpboot/ubuntu/14.04/i386
|
- /var/lib/tftpboot/ubuntu/14.04/i386
|
||||||
- /var/lib/tftpboot/ubuntu/14.04/amd64
|
- /var/lib/tftpboot/ubuntu/14.04/amd64
|
||||||
- /var/lib/tftpboot/utils/memtest86
|
- /var/lib/tftpboot/utils/memtest86
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: pxelinux.0
|
- name: pxelinux.0
|
||||||
get_url:
|
get_url:
|
||||||
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/pxelinux.0
|
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/pxelinux.0
|
||||||
dest: /var/lib/tftpboot/pxelinux.0
|
dest: /var/lib/tftpboot/pxelinux.0
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: pxelinux.cfg/default
|
- name: pxelinux.cfg/default
|
||||||
template: src=pxelinux.cfg/default dest=/var/lib/tftpboot/pxelinux.cfg/default
|
template: src=pxelinux.cfg/default dest=/var/lib/tftpboot/pxelinux.cfg/default
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: bglug.png
|
- name: bglug.png
|
||||||
copy: src=bglug.png dest=/var/lib/tftpboot/utils/bglug.png
|
copy: src=bglug.png dest=/var/lib/tftpboot/utils/bglug.png
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: vesamenu.c32
|
- name: vesamenu.c32
|
||||||
get_url:
|
get_url:
|
||||||
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/ubuntu-installer/i386/boot-screens/vesamenu.c32
|
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/ubuntu-installer/i386/boot-screens/vesamenu.c32
|
||||||
dest: /var/lib/tftpboot/utils/vesamenu.c32
|
dest: /var/lib/tftpboot/utils/vesamenu.c32
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: chain.c32
|
- name: chain.c32
|
||||||
get_url:
|
get_url:
|
||||||
url: "http://bglug.sys42.eu/chain.c32"
|
url: "http://bglug.sys42.eu/chain.c32"
|
||||||
dest: /var/lib/tftpboot/utils/chain.c32
|
dest: /var/lib/tftpboot/utils/chain.c32
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: linux i386
|
- name: linux i386
|
||||||
get_url:
|
get_url:
|
||||||
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/ubuntu-installer/i386/linux
|
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/ubuntu-installer/i386/linux
|
||||||
dest: /var/lib/tftpboot/ubuntu/14.04/i386/linux
|
dest: /var/lib/tftpboot/ubuntu/14.04/i386/linux
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: initrd.gz i386
|
- name: initrd.gz i386
|
||||||
get_url:
|
get_url:
|
||||||
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/ubuntu-installer/i386/initrd.gz
|
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-i386/current/images/netboot/ubuntu-installer/i386/initrd.gz
|
||||||
dest: /var/lib/tftpboot/ubuntu/14.04/i386/initrd.gz
|
dest: /var/lib/tftpboot/ubuntu/14.04/i386/initrd.gz
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: linux amd64
|
- name: linux amd64
|
||||||
get_url:
|
get_url:
|
||||||
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/linux
|
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/linux
|
||||||
dest: /var/lib/tftpboot/ubuntu/14.04/amd64/linux
|
dest: /var/lib/tftpboot/ubuntu/14.04/amd64/linux
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: initrd.gz amd64
|
- name: initrd.gz amd64
|
||||||
get_url:
|
get_url:
|
||||||
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/initrd.gz
|
url: http://archive.ubuntu.com/ubuntu/dists/trusty/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/initrd.gz
|
||||||
dest: /var/lib/tftpboot/ubuntu/14.04/amd64/initrd.gz
|
dest: /var/lib/tftpboot/ubuntu/14.04/amd64/initrd.gz
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: memdisk
|
- name: memdisk
|
||||||
get_url:
|
get_url:
|
||||||
url: http://sys42.eu/pxe-bootimg/memdisk
|
url: http://sys42.eu/pxe-bootimg/memdisk
|
||||||
dest: /var/lib/tftpboot/utils/memdisk
|
dest: /var/lib/tftpboot/utils/memdisk
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: memtest86
|
- name: memtest86
|
||||||
get_url:
|
get_url:
|
||||||
url: http://sys42.eu/pxe-bootimg/memtest86/vmlinuz
|
url: http://sys42.eu/pxe-bootimg/memtest86/vmlinuz
|
||||||
dest: /var/lib/tftpboot/utils/memtest86/vmlinuz
|
dest: /var/lib/tftpboot/utils/memtest86/vmlinuz
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: hdt
|
- name: hdt
|
||||||
get_url:
|
get_url:
|
||||||
url: http://sys42.eu/pxe-bootimg/hdt.img
|
url: http://sys42.eu/pxe-bootimg/hdt.img
|
||||||
dest: /var/lib/tftpboot/utils/hdt.img
|
dest: /var/lib/tftpboot/utils/hdt.img
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -1,8 +1,8 @@
|
|||||||
---
|
---
|
||||||
- name: ntp save
|
- name: ntp save
|
||||||
shell: /sbin/e-smith/signal-event nethserver-ntp-save
|
shell: /sbin/e-smith/signal-event nethserver-ntp-save
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: password-policy-update
|
- name: password-policy-update
|
||||||
shell: /sbin/e-smith/signal-event password-policy-update
|
shell: /sbin/e-smith/signal-event password-policy-update
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -2,19 +2,19 @@
|
|||||||
|
|
||||||
- name: Verifica installazione git
|
- name: Verifica installazione git
|
||||||
yum: name=git state=present
|
yum: name=git state=present
|
||||||
sudo: yes
|
become: yes
|
||||||
tags: git
|
tags: git
|
||||||
|
|
||||||
- name: Verifica installazione ansible
|
- name: Verifica installazione ansible
|
||||||
yum: name=ansible state=present
|
yum: name=ansible state=present
|
||||||
sudo: yes
|
become: yes
|
||||||
tags: ansible
|
tags: ansible
|
||||||
|
|
||||||
- name: Installazione python-argparse
|
- name: Installazione python-argparse
|
||||||
shell:
|
shell:
|
||||||
name: "ftp://fr2.rpmfind.net/linux/centos/6.7/extras/i386/Packages/python-argparse-1.2.1-2.el6.centos.noarch.rpm"
|
name: "ftp://fr2.rpmfind.net/linux/centos/6.7/extras/i386/Packages/python-argparse-1.2.1-2.el6.centos.noarch.rpm"
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
tags: ansible
|
tags: ansible
|
||||||
|
|
||||||
#- name: Download della gestione client con ansible
|
#- name: Download della gestione client con ansible
|
||||||
|
@ -8,7 +8,7 @@
|
|||||||
|
|
||||||
- name: Installo epel-release
|
- name: Installo epel-release
|
||||||
yum: name=epel-release state=present
|
yum: name=epel-release state=present
|
||||||
sudo: yes
|
become: yes
|
||||||
when: check_epel|failed
|
when: check_epel|failed
|
||||||
register: epel_installed
|
register: epel_installed
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
@ -17,31 +17,31 @@
|
|||||||
yum:
|
yum:
|
||||||
name: "http://dl.fedoraproject.org/pub/epel/6/{{ ansible_architecture }}/epel-release-6-8.noarch.rpm"
|
name: "http://dl.fedoraproject.org/pub/epel/6/{{ ansible_architecture }}/epel-release-6-8.noarch.rpm"
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
when: epel_installed|failed
|
when: epel_installed|failed
|
||||||
register: rpm_epel_installed
|
register: rpm_epel_installed
|
||||||
|
|
||||||
- name: Abilito il repo EPEL
|
- name: Abilito il repo EPEL
|
||||||
shell: yum-config-manager --enable epel
|
shell: yum-config-manager --enable epel
|
||||||
sudo: yes
|
become: yes
|
||||||
when: epel_installed|changed or epel_installed|success or rpm_epel_installed|changed
|
when: epel_installed|changed or epel_installed|success or rpm_epel_installed|changed
|
||||||
changed_when: "'[epel]' in epel_enabled.stdout and epel_enabled.rc == 0"
|
changed_when: "'[epel]' in epel_enabled.stdout and epel_enabled.rc == 0"
|
||||||
register: epel_enabled
|
register: epel_enabled
|
||||||
|
|
||||||
- name: Pulizia e ricaricam. repo
|
- name: Pulizia e ricaricam. repo
|
||||||
shell: yum clean all && yum repolist
|
shell: yum clean all && yum repolist
|
||||||
sudo: yes
|
become: yes
|
||||||
when: epel_enabled|changed
|
when: epel_enabled|changed
|
||||||
tags: repo
|
tags: repo
|
||||||
|
|
||||||
- name: Aggiorno il sistema
|
- name: Aggiorno il sistema
|
||||||
yum: name=* state=latest
|
yum: name=* state=latest
|
||||||
sudo: yes
|
become: yes
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
- name: Installo pacchetti addizionali
|
- name: Installo pacchetti addizionali
|
||||||
yum: name={{ item }} state=present
|
yum: name={{ item }} state=present
|
||||||
sudo: yes
|
become: yes
|
||||||
with_items: addin_pkgs
|
with_items: addin_pkgs
|
||||||
tags: pkg
|
tags: pkg
|
||||||
|
|
||||||
@ -50,4 +50,4 @@
|
|||||||
yum:
|
yum:
|
||||||
name: "http://rpm.mag-sol.com/Centos/6/{{ ansible_architecture }}/perl-Authen-SASL-2.16-1.el6.noarch.rpm"
|
name: "http://rpm.mag-sol.com/Centos/6/{{ ansible_architecture }}/perl-Authen-SASL-2.16-1.el6.noarch.rpm"
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -4,7 +4,7 @@
|
|||||||
tags: ssh
|
tags: ssh
|
||||||
|
|
||||||
- include: lock-nethrelease.yml
|
- include: lock-nethrelease.yml
|
||||||
sudo: yes
|
become: yes
|
||||||
tags: lock-nethrelease
|
tags: lock-nethrelease
|
||||||
|
|
||||||
- include: centos_pkgs.yml
|
- include: centos_pkgs.yml
|
||||||
|
@ -3,8 +3,8 @@
|
|||||||
copy:
|
copy:
|
||||||
src: sys42.repo
|
src: sys42.repo
|
||||||
dest: /etc/yum.repos.d/sys42.repo
|
dest: /etc/yum.repos.d/sys42.repo
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Ricalcolo repository disponibili
|
- name: Ricalcolo repository disponibili
|
||||||
shell: yum repolist
|
shell: yum repolist
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -2,17 +2,27 @@
|
|||||||
# Configurazione del server come repo
|
# Configurazione del server come repo
|
||||||
|
|
||||||
- name: Installazione apt-mirror
|
- name: Installazione apt-mirror
|
||||||
yum: pkg=apt-mirror state=present
|
yum:
|
||||||
sudo: yes
|
pkg: apt-mirror
|
||||||
|
state: present
|
||||||
|
become: yes
|
||||||
|
|
||||||
- name: Installazione configurazione apt-mirror
|
- name: Installazione configurazione apt-mirror
|
||||||
copy: src=apt-mirror.list dest=/etc/apt-mirror.list
|
copy:
|
||||||
sudo: yes
|
src: apt-mirror.list
|
||||||
|
dest: /etc/apt-mirror.list
|
||||||
|
become: yes
|
||||||
|
|
||||||
- name: Installazione cron per sincronizzazione notturna
|
- name: Installazione cron per sincronizzazione notturna
|
||||||
copy: src=apt-mirror-cron dest=/etc/cron.daily/apt-mirror mode=0755
|
copy:
|
||||||
sudo: yes
|
src: apt-mirror-cron
|
||||||
|
dest: /etc/cron.daily/apt-mirror
|
||||||
|
mode: 0755
|
||||||
|
become: yes
|
||||||
|
|
||||||
- name: Installazione logrotate per sincronizzazione notturna
|
- name: Installazione logrotate per sincronizzazione notturna
|
||||||
copy: src=apt-mirror-logrotate dest=/etc/logrotate.d/apt-mirror mode=0644
|
copy:
|
||||||
sudo: yes
|
src: apt-mirror-logrotate
|
||||||
|
dest: /etc/logrotate.d/apt-mirror
|
||||||
|
mode: 0644
|
||||||
|
become: yes
|
||||||
|
@ -13,14 +13,14 @@
|
|||||||
|
|
||||||
- include: nfs-mirror.yml
|
- include: nfs-mirror.yml
|
||||||
when: ansible_local.domain.mirror_mode == 'nfs'
|
when: ansible_local.domain.mirror_mode == 'nfs'
|
||||||
sudo: yes
|
become: yes
|
||||||
tags:
|
tags:
|
||||||
- mirror
|
- mirror
|
||||||
- nfs-mirror
|
- nfs-mirror
|
||||||
|
|
||||||
- include: remote-mirror.yml
|
- include: remote-mirror.yml
|
||||||
when: ansible_local.domain.mirror_mode == 'remote'
|
when: ansible_local.domain.mirror_mode == 'remote'
|
||||||
sudo: yes
|
become: yes
|
||||||
tags:
|
tags:
|
||||||
- mirror
|
- mirror
|
||||||
- remote-mirror
|
- remote-mirror
|
||||||
|
@ -5,36 +5,36 @@
|
|||||||
dest: /etc/udev/rules.d/70-persistent-net.rules
|
dest: /etc/udev/rules.d/70-persistent-net.rules
|
||||||
regexp: 'eth0'
|
regexp: 'eth0'
|
||||||
replace: '{{ extnic }}'
|
replace: '{{ extnic }}'
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creo interfaccia esterna in NethServer
|
- name: Creo interfaccia esterna in NethServer
|
||||||
shell: /sbin/e-smith/db networks set {{ extnic }} ethernet bootproto dhcp device {{ extnic }} hwaddr {{ ansible_eth0.macaddress }} onboot yes peerdns yes role red
|
shell: /sbin/e-smith/db networks set {{ extnic }} ethernet bootproto dhcp device {{ extnic }} hwaddr {{ ansible_eth0.macaddress }} onboot yes peerdns yes role red
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Pulizia vecchia interfaccia esterna
|
- name: Pulizia vecchia interfaccia esterna
|
||||||
shell: /sbin/e-smith/db networks delete eth0
|
shell: /sbin/e-smith/db networks delete eth0
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Rinomino interfaccia interna
|
- name: Rinomino interfaccia interna
|
||||||
replace:
|
replace:
|
||||||
dest: /etc/udev/rules.d/70-persistent-net.rules
|
dest: /etc/udev/rules.d/70-persistent-net.rules
|
||||||
regexp: 'eth1'
|
regexp: 'eth1'
|
||||||
replace: '{{ intnic }}'
|
replace: '{{ intnic }}'
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Creo interfaccia interna in NethServer
|
- name: Creo interfaccia interna in NethServer
|
||||||
shell: /sbin/e-smith/db networks set {{ intnic }} ethernet bootproto none device {{ intnic }} hwaddr {{ ansible_eth1.macaddress }} ipaddr 192.168.1.1 netmask 255.255.255.0 onboot yes role green
|
shell: /sbin/e-smith/db networks set {{ intnic }} ethernet bootproto none device {{ intnic }} hwaddr {{ ansible_eth1.macaddress }} ipaddr 192.168.1.1 netmask 255.255.255.0 onboot yes role green
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Pulizia vecchia interfaccia interna
|
- name: Pulizia vecchia interfaccia interna
|
||||||
shell: /sbin/e-smith/db networks delete eth1
|
shell: /sbin/e-smith/db networks delete eth1
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
# Forzo il processo a tornare zero, altrimenti non va.
|
# Forzo il processo a tornare zero, altrimenti non va.
|
||||||
- name: Ricreo le interfacce
|
- name: Ricreo le interfacce
|
||||||
shell: udevadm control --reload-rules && udevadm trigger --attr-match=subsystem=net
|
shell: udevadm control --reload-rules && udevadm trigger --attr-match=subsystem=net
|
||||||
sudo: yes
|
become: yes
|
||||||
|
|
||||||
- name: Segnalo il cambiamento a livello di interfacce
|
- name: Segnalo il cambiamento a livello di interfacce
|
||||||
shell: /sbin/e-smith/signal-event interface-update
|
shell: /sbin/e-smith/signal-event interface-update
|
||||||
sudo: yes
|
become: yes
|
||||||
|
@ -4,4 +4,4 @@
|
|||||||
yum:
|
yum:
|
||||||
name: libselinux-python
|
name: libselinux-python
|
||||||
state: present
|
state: present
|
||||||
sudo: yes
|
become: yes
|
||||||
|
Loading…
x
Reference in New Issue
Block a user