...
 
Commits (49)
......@@ -2,6 +2,7 @@ obs/*/home:VIFIBnexedi*
obs/slapos/slapos-node_*
obs/slapos/slapos-recipe-version
obs/slapos/slapos-version
obs/slapos/slapos_repository/
debian.tar.gz
obs/slapos/templates/debian/cron.d
obs/slapos/templates/debian/slapos-node.logrotate
......
......@@ -11,6 +11,8 @@ develop =
extensions = slapos.rebootstrap
newest = false
allow-picked-versions = true
parts += chrpath python
[python]
......
......@@ -9,7 +9,7 @@ source release_configuration.sh
TARGET_DIRECTORY=/opt/slapos
BUILD_ROOT_DIRECTORY="$CURRENT_DIRECTORY/$SLAPOS_DIRECTORY/slapos/build"
BUILD_DIRECTORY=$BUILD_ROOT_DIRECTORY$TARGET_DIRECTORY
BUILDOUT_VERSION="2.5.2+slapos011"
BUILDOUT_VERSION="2.5.2+slapos013"
rm -rf $BUILD_ROOT_DIRECTORY
......
......@@ -3,17 +3,17 @@
####################################################
# Edit for release
VERSION=1.4.8
VERSION=`grep ^slapos.core slapos_repository/stack/slapos.cfg | cut -f3 -d\ `
# Edit for release
RECIPE_VERSION=1.0.67
RECIPE_VERSION=1.0.83.1
# Edit for release
RELEASE=3
RELEASE=1
CURRENT_DIRECTORY="$(pwd)"
# Development Section
OBS_DIRECTORY=$CURRENT_DIRECTORY/home:VIFIBnexedi:branches:home:VIFIBnexedi/SlapOS-Node
VERSION_REGEX="s!\%BUILDOUT_URL\%!$BUILDOUT_URL!g;s/\%RECIPE_VERSION\%/$RECIPE_VERSION/g;s/\%VERSION\%/$VERSION/g;s/\%RELEASE\%/$RELEASE/g"
VERSION_REGEX="s/\%RECIPE_VERSION\%/$RECIPE_VERSION/g;s/\%VERSION\%/$VERSION/g;s/\%RELEASE\%/$RELEASE/g"
TEMPLATES_DIRECTORY=$CURRENT_DIRECTORY/templates
SLAPOS_ORGINAL_DIRECTORY=slapos-node
SLAPOS_DIRECTORY=slapos-node_$VERSION+$RECIPE_VERSION+$RELEASE
......
[buildout]
rootdir = %TARGET_DIRECTORY%
destdir = %BUILD_ROOT_DIRECTORY%
builddir = %BUILD_DIRECTORY%
extends =
%BUILD_ROOT_DIRECTORY%/../slapos_repository/component/slapos/buildout.cfg
%BUILD_ROOT_DIRECTORY%/../slapos_repository/component/slapos/obs.cfg
# Don't load extensions
extensions =
slapos.rebootstrap
extends-cache= extends-cache
download-cache= download-cache
# Uguu, upstream buildout.cfg must be patched as it works the other way
# around from a packager point of view at least, thus at the end static
# path, such as Python HOME directory, are wrong...
#
# Currently:
# ./configure --prefix=BUILD_DIRECTORY && make install
# Instead of:
# ./configure --prefix=INSTALL_DIRECTORY && make install DESTDIR=BUILD_DIRECTORY
[python2.7]
configure-options +=
--prefix=${buildout:rootdir}/parts/${:_buildout_section_name_}
environment +=
DESTDIR=${buildout:destdir}
[gettext]
# Add gettext library path to RPATH as its binaries are used to build
# glib for example
environment =
PATH=${perl:location}/bin:${lunzip:location}/bin:%(PATH)s
CPPFLAGS=-I${libxml2:location}/include -I${zlib:location}/include -I${ncurses:location}/include
LDFLAGS=-L${libxml2:location}/lib -Wl,-rpath=${libxml2:location}/lib -L${zlib:location}/lib -Wl,-rpath=${zlib:location}/lib -L${ncurses:location}/lib -Wl,-rpath=${ncurses:location}/lib -Wl,-rpath=%BUILD_DIRECTORY%/parts/${:_buildout_section_name_}/lib
[bison]
configure-options +=
--prefix=${buildout:rootdir}/parts/${:_buildout_section_name_}
make-options +=
DESTDIR=${buildout:destdir}
[dbus]
configure-options +=
--prefix=${buildout:rootdir}/parts/${:_buildout_section_name_}
make-options +=
DESTDIR=${buildout:destdir}
environment +=
LDFLAGS=-L${libexpat:location}/lib -L${buildout:parts-directory}/${:_buildout_section_name_}/lib -Wl,-rpath=${buildout:parts-directory}/${:_buildout_section_name_}/lib
LD_LIBRARY_PATH=${buildout:parts-directory}/${:_buildout_section_name_}/lib
post-install =
mkdir -p ${buildout:destdir}/parts/${:_buildout_section_name_}/var/run/dbus
[dbus-glib]
environment +=
CPPFLAGS=-I${libexpat:location}/include -I${dbus:location}/include/dbus-1.0 -I${dbus:location}/lib/dbus-1.0/include
LDFLAGS=-L${libexpat:location}/lib -L${gettext:location}/lib -Wl,-rpath=${zlib:location}/lib -L${dbus:location}/lib -Wl,-rpath=${dbus:location}/lib
LD_LIBRARY_PATH=${dbus:location}/lib
[dbus-python]
pre-configure =
sed -i 's#/opt/slapos/parts/dbus/lib/libdbus-1.la#${dbus:location}/lib/libdbus-1.la#' ${dbus-glib:location}/lib/libdbus-glib-1.la
environment +=
LD_LIBRARY_PATH=${dbus:location}/lib
LDFLAGS=-L${glib:location}/lib -Wl,-rpath=${glib:location}/lib -L${dbus:location}/lib -Wl,-rpath=${dbus:location}/lib
post-install =
sed -i 's#${dbus:location}/lib/libdbus-1.la#/opt/slapos/parts/dbus/lib/libdbus-1.la#' ${dbus-glib:location}/lib/libdbus-glib-1.la
[openssl]
# HTTPS is not work on debian 6 where the package is originally
# prepared to be upload.
url = ftp://ftp.openssl.org/source/openssl-1.0.2l.tar.gz
md5sum = f85123cd390e864dfbe517e7616e6566
prefix = ${buildout:rootdir}/parts/${:_buildout_section_name_}
make-options +=
INSTALL_PREFIX=${buildout:destdir}
[bison-go]
<= bison
configure-options =
--prefix=${buildout:parts-directory}/${:_buildout_section_name_}
make-options =
[gobject-introspection]
pre-configure =
sed -i 's#!/opt/slapos/parts/python2.7/bin/python2.7#!${python2.7:location}/bin/python2.7#' ${python2.7:location}/bin/python-config
libtoolize -c -f
aclocal -I${pkgconfig:location}/share/aclocal -I${gettext:location}/share/aclocal -I${libtool:location}/share/aclocal -I${glib:location}/share/aclocal
./autogen.sh
configure-options +=
--enable-shared
environment +=
PATH=${autoconf:location}/bin:${automake:location}/bin:${pkgconfig:location}/bin:${libtool:location}/bin:${intltool:location}/bin:${gettext:location}/bin:${glib:location}/bin:${flex:location}/bin:${bison-go:location}/bin:%(PATH)s
GIR_DIR=${buildout:parts-directory}/${:_buildout_section_name_}/share/gir-1.0
CPPFLAGS=-I${glib:location}/include/glib-2.0 -I${glib:location}/lib/glib-2.0/include -I${python2.7:location}/include/python2.7
LDFLAGS=-L${glib:location}/lib -Wl,-rpath=${glib:location}/lib -L${libffi:location}/lib -Wl,-rpath=${libffi:location}/lib -lffi -L${python2.7:location}/lib
ACLOCAL_PATH=${pkgconfig:location}/share/aclocal:${gettext:location}/share/aclocal:${libtool:location}/share/aclocal:${glib:location}/share/aclocal:${intltool:location}/share/aclocal
M4=${m4:location}/bin/m4
post-install =
sed -i 's#!${python2.7:location}/bin/python2.7#!/opt/slapos/parts/python2.7/bin/python2.7#' ${python2.7:location}/bin/python-config
rm -rf ${bison-go:location}
[pygobject3]
pre-configure +=
sed -i 's#!/opt/slapos/parts/python2.7/bin/python2.7#!${python2.7:location}/bin/python2.7#' ${python2.7:location}/bin/python-config
environment +=
CPPFLAGS=-I${glib:location}/include/glib-2.0 -I${glib:location}/lib/glib-2.0/include -I${gettext:location}/include -I${libffi:location}/include -I${python2.7:location}/include/python2.7
LDFLAGS=-L${glib:location}/lib -Wl,-rpath=${glib:location}/lib -L${gettext:location}/lib -Wl,-rpath=${gettext:location}/lib -L${python2.7:location}/lib
post-install =
sed -i 's#!${python2.7:location}/bin/python2.7#!/opt/slapos/parts/python2.7/bin/python2.7#' ${python2.7:location}/bin/python-config
[ncurses]
configure-options =
--prefix=${buildout:parts-directory}/${:_buildout_section_name_}
--with-shared
--without-ada
--without-manpages
--without-tests
--without-normal
--without-debug
--without-gpm
--enable-rpath
[flex]
environment +=
BISON_PKGDATADIR=${bison:location}/share/bison/
[perl]
configure-command =
sh Configure -des \
-Dprefix=${buildout:rootdir}/parts/${:_buildout_section_name_} \
-Dsiteprefix=${buildout:rootdir}/parts/site_${:_buildout_section_name_} \
-Dcflags=-I${gdbm:location}/include \
-Dldflags="-L${gdbm:location}/lib -Wl,-rpath=${gdbm:location}/lib" \
-Ui_db \
-Dnoextensions=ODBM_File \
-Dusethreads
[versions]
cliff = 1.4.5
......@@ -19,5 +19,6 @@
default: "notoken"
roles:
- { role: re6stnet, package_state: present }
- { role: re6stnet-install }
- { role: re6stnet-ensure-running }
......@@ -15,5 +15,6 @@
default: "noname"
roles:
- { role: re6stnet, package_state: present }
- { role: re6stnet-install }
- { role: re6stnet-ensure-running }
- rina
......@@ -25,9 +25,9 @@
- file: path=/etc/.gitignore state=touch mode=0660
- lineinfile:
path:/etc/.gitignore
line:{{ item }}
when: etckeeper_configuration.stat.exists == False
dest=/etc/.gitignore
line={{ item }}
when: etckeeper_configuration.stat.exists == True
with_items:
- ~*
- shadow*
......@@ -38,11 +38,10 @@
- re6stnet/cert.key
- opt/slapos/ssl
- lineinfile:
path:/etc/etckeeper/etckeeper.conf
line:VCS="git"
when: etckeeper_configuration.stat.exists == False
- lineinfile:
dest=/etc/etckeeper/etckeeper.conf
line="VCS=\"git\""
when: etckeeper_configuration.stat.exists == True
- shell: git config user.email `root@hostname`
when: etckeeper_configuration.stat.exists == False
......
......@@ -46,6 +46,27 @@
- { regexp: '^manager_list\s*=', line: 'manager_list = prerm' }
when: post_config is defined and slapos_cfg.stat.exists == True
- name: Check whether firewall is enabled
shell: grep -Fxq "[firewall]" /etc/opt/slapos/slapos.cfg
register: has_firewall
ignore_errors: yes
when: post_config is defined and slapos_cfg.stat.exists == True
- name: activate firewalld in slapos config
lineinfile: dest=/etc/opt/slapos/slapos.cfg line="[firewall]\n" insertbefore="^\[networkcache\]"
when: post_config is defined and has_firewall.rc != 0 and slapos_cfg.stat.exists == True
- name: Update firewall configuration
lineinfile: dest=/etc/opt/slapos/slapos.cfg regexp="{{ item.regexp }}" line="{{ item.line }}" insertafter="^\[firewall\]$" state=present
with_items:
- { regexp: '^dbus_executable\s*=', line: 'dbus_executable = /opt/slapos/parts/dbus/bin/dbus-daemon --nofork --nopidfile --system' }
- { regexp: '^firewall_executable\s*=', line: 'firewall_executable = /opt/slapos/parts/firewalld/sbin/firewalld --nofork' }
- { regexp: '^firewall_cmd\s*=', line: 'firewall_cmd = /opt/slapos/parts/firewalld/bin/firewall-cmd' }
- { regexp: '^log_file\s*=*firewalld*', line: 'log_file = /opt/slapos/log/firewalld.log' }
- { regexp: '^dbus_log_file\s*=', line: 'dbus_log_file = /opt/slapos/log/dbus.log' }
- { regexp: '^reload_config_cmd\s*=', line: 'reload_config_cmd = slapos node restart firewall' }
when: post_config is defined and slapos_cfg.stat.exists == True
- modprobe: name=kvm state=present
when: post_config is defined
- modprobe: name=kvm_intel state=present
......
- name: Install packages using apt
- name: Install {{ package_name }} using apt
apt: name={{ package_name }} state={{ package_state }} update_cache=yes cache_valid_time=3600
when: ansible_os_family == "Debian" or ansible_os_family == "Linuxmint"
- name: Install re6stnet on CentOS
- name: Install {{ package_name }} using yum
yum: name={{ package_name }} state={{ package_state }} update_cache=yes
when: ansible_os_family == "RedHat"
- name: Check if ip6tables check script is present
stat: path=/usr/bin/re6stnet-ip6tables-check
register: ip6tables_check
- name: Run re6stnet-ip6tables-check
shell: /usr/bin/re6stnet-ip6tables-check
when: ip6tables_check.stat.exists == True
- name: Check if configuration already exists
stat: path=/etc/re6stnet/re6stnet.conf
register: check_re6stnet_conf
- name: Start re6st-node service
service: name=re6stnet state=started enabled=yes
when: check_re6stnet_conf.stat.exists == True
---
- name: Check if configuration exists already
- name: Check if configuration already exists
stat: path=/etc/re6stnet/re6stnet.conf
register: re6stnet_conf
......@@ -25,7 +25,7 @@
shell: "re6st-conf --registry {{ re6st_registry_url }} --token {{ re6sttoken }} -r title {{ re6sttoken }} -d /etc/re6stnet"
when: re6st_annon == False and re6stnet_conf.stat.exists == False and "{{ re6sttoken }}" != "notoken" and "{{ re6st_fingerprint }}" == "nofingerprint"
- name: Check if configuration exists already
- name: Recheck if configuration already exists (after running re6st-conf)
stat: path=/etc/re6stnet/re6stnet.conf
register: recheck_re6stnet_conf
......@@ -50,14 +50,8 @@
- name: Add script for check ip6tables well configured
copy: src=ip6tables dest=/usr/bin/re6stnet-ip6tables-check mode=755
- name: Run re6stnet-ip6tables-check
shell: /usr/bin/re6stnet-ip6tables-check
- name: Include re6stnet-ip6tables-check at reboot on cron
cron: name="ip6tables at reboot" special_time=reboot job="sleep 20 && /usr/bin/re6stnet-ip6tables-check"
- include: tcp_nodelay.yml
- name: Start re6st-node service
service: name=re6stnet state=started enabled=yes
when: recheck_re6stnet_conf.stat.exists == True
......@@ -96,6 +96,10 @@
apt_repository: repo='deb {{ base_open_build_url }}/xUbuntu_17.10/ ./' state=present
when: ansible_distribution == "Ubuntu" and ansible_distribution_version == "17.10"
- name: Install CentOS 7 Repository
get_url: url=http://download.opensuse.org/repositories/home:/VIFIBnexedi/CentOS_7/home:VIFIBnexedi.repo dest=/etc/yum.repos.d/slapos.repo mode=0440
when: ansible_distribution == "CentOS" and ansible_distribution_major_version == "7"
- name: Install CentOS 7 RPM Key
# workarounded with https://github.com/marbu/ansible-modules-core-issue-1853-reproducer/commit/41727b465533717015d8d55904c5a102fe248bc4
# for https://github.com/ansible/ansible-modules-core/issues/1853
......
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
mQINBE4cLroBEADpvqxw6SbNxQJVWVJKPSBF0zRKb4o3fM2OqJCcV5Uz888auonz
tOM7XU+d7Err6W0fO/Wa1GaK1VhlLF8QmjYU9xYrzgkFMu8BG6zqJD1Bqd3MSw24
......@@ -12,41 +11,41 @@ P6Edy5NEO27SbcOed4ngD53SVR1GH8RCWLD6pLHEtKLW+mGdpoPqwKgEqwaALMBZ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=Q+ni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=7fXm
-----END PGP PUBLIC KEY BLOCK-----
- name: Install packages using apt
- name: Install slapos.node using apt
apt: name=slapos-node state={{ package_state }} update_cache=yes cache_valid_time=3600
when: ansible_os_family == "Debian"
- name: Install re6stnet on CentOS
- name: Install slapos.node using yum
yum: name=slapos.node state={{ package_state }} update_cache=yes
when: ansible_os_family == "RedHat"
......
- name: Install dctrl-tools using apt
apt: name=dctrl-tools state=latest
- name: get packages to upgrade
shell: grep-status -X -S apt -ns Package
register: packages_to_upgrade
check_mode: no
- name: Upgrade all apt related packages
apt: name={{ packages_to_upgrade.stdout.split('\n') }} state=latest
......@@ -43,6 +43,7 @@
- name: Update playbook md5
shell: echo {{ archive.stat.md5 }} > /opt/upgrader/next-upgrade-signature
when: not ansible_check_mode
- name: Stat Current Upgrade Signature
file: path=/opt/upgrader/current-upgrade-signature state=touch mode="0666"
......@@ -59,7 +60,7 @@
- name: Do upgrade
shell: ansible-playbook {{ upgrader_playbook }} -i hosts 2>>/opt/upgrader/latest_upgrade.log >> /opt/upgrader/latest_upgrade.log
when: (upgrade_after > lookup('file', '/opt/upgrader/last-upgrade')|int ) and (lookup('file', '/opt/upgrader/next-upgrade-signature') != lookup('file', '/opt/upgrader/current-upgrade-signature'))
when: not ansible_check_mode and (upgrade_after > lookup('file', '/opt/upgrader/last-upgrade')|int ) and (lookup('file', '/opt/upgrader/next-upgrade-signature') != lookup('file', '/opt/upgrader/current-upgrade-signature'))
args:
chdir: /opt/upgrader/playbook-tmp/
......@@ -72,9 +73,9 @@
- name: Upgrade Current Upgrade Signature
shell: cat /opt/upgrader/next-upgrade-signature > /opt/upgrader/current-upgrade-signature
when: (upgrade_after > lookup('file', '/opt/upgrader/last-upgrade')|int ) and (lookup('file', '/opt/upgrader/next-upgrade-signature') != lookup('file', '/opt/upgrader/current-upgrade-signature'))
when: not ansible_check_mode and (upgrade_after > lookup('file', '/opt/upgrader/last-upgrade')|int ) and (lookup('file', '/opt/upgrader/next-upgrade-signature') != lookup('file', '/opt/upgrader/current-upgrade-signature'))
- shell: echo {{ ansible_date_time.epoch }} > /opt/upgrader/last-upgrade
when: (upgrade_after > lookup('file', '/opt/upgrader/last-upgrade')|int )
when: not ansible_check_mode and (upgrade_after > lookup('file', '/opt/upgrader/last-upgrade')|int )
- include: remove-legacy.yml
[Service]
# Increase TasksMax as the default value is too low for a a slapos node
# (on a normal slapos node server, cron starts slapos, which starts supervisord,
# which then manage all deployed instances)
TasksMax=infinity
---
- name: Update cron service definition
# For ansible version < 2.4, state=restarted is mandatory to
# apply the changes (daemon_reload=yes only is not enough)
systemd: daemon_reload=yes name=cron state=restarted
---
- modprobe: name=kvm_intel state=present
- modprobe: name=kvm_intel state=present params='nested=Y'
ignore_errors: True
- pause: seconds=2
......@@ -24,3 +24,11 @@
- name: Set 666 on /dev/vhost-net
shell: chmod 666 /dev/vhost-net
when: dev_vhost.stat.exists == True
- name: Check if configuration exists already
stat: path=/etc/opt/slapos/slapos.cfg
register: xslapos_cfg
- name: Force create_tap to be true
shell: sed -i 's/^create_tap =.*/create_tap = True/' /etc/opt/slapos/slapos.cfg
when: xslapos_cfg.stat.exists == True
......@@ -15,19 +15,30 @@
- sysctl: name="net.ipv6.neigh.default.gc_thresh1" value=512 sysctl_set=yes state=present reload=yes
- sysctl: name="net.ipv6.neigh.default.gc_thresh2" value=1024 sysctl_set=yes state=present reload=yes
- sysctl: name="net.ipv6.neigh.default.gc_thresh3" value=2048 sysctl_set=yes state=present reload=yes
- sysctl: name="net.ipv6.conf.all.accept_ra" value=0 sysctl_set=yes state=present reload=yes
- sysctl: name="net.ipv6.conf.default.accept_ra" value=0 sysctl_set=yes state=present reload=yes
- sysctl: name="net.ipv6.conf.all.forwarding" value=1 sysctl_set=yes state=present reload=yes
- sysctl: name="net.ipv6.conf.default.forwarding" value=1 sysctl_set=yes state=present reload=yes
- include: kvm.yml
- include: kvm.yml
- include: shuttle-modprobe.yml
- name: Include table 0 on re6st
shell: echo "TODO"
- name: interface on re6st
shell: echo "TODO"
- name: Increase ulimit
shell: echo "TODO"
- name: Set Cron
cron: name="Launch Startup with ansible" special_time=reboot job='cd /opt/upgrader/playbook && ansible-playbook vifib-startup.yml -i hosts 2>>/opt/upgrader/startup.log >> /opt/upgrader/startup.log'
- name: Get systemd version
shell: systemd --version | head -n 1 | cut -d " " -f 2
register: systemd_version
check_mode: no
- file: state=directory path="/etc/systemd/system/cron.service.d/"
when: systemd_version.stdout | int > 228
- name: Increase the maximum of subprocesses for cron
copy: src="etc_systemd_system_cron_service_d_override.conf" dest="/etc/systemd/system/cron.service.d/override.conf" mode=0644 owner=root group=root
when: systemd_version.stdout | int > 228
notify:
- "Update cron service definition"
ssh-rsa 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 guillaume.hervier@chromebook
ssh-rsa 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 guillaume.hervier@kiwi-nxd-spot
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6l9E+0SN6oZbJXF8iOYZBSG+GmWjzjcqkyqUPk/UyL2riS/82qGdzAxa30/ChU41Yo9DEpIlaUZS9EwCQCBf2R+EUAJWn3/tHPRxtzU5g5+MLjHamnLvt7HlsewCYbR2ln5aOVU/jMQMXLCrP770fFRaP+if5G4mcyD6t5OqjUivqlqVUvXIqhogrRPX3+iIvep9CZGkzijm98O9PFeGPY+zcZTkHyjPMQu4S83jio55s3WyvK4/SSSkcn/Lb0mCFAGFN11qijNKsWRN1lLagHOch2YyAiY9ttna6gJJvExPfqpjpsR1FvkBkwgMnR1IGxk4w6SkeqXNRa6fg589V cardno:000604886723
ssh-rsa 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 klaus@nexedi.com
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5qVcd6gclQmxL9i0Vsasy6vMiVaIjKHHNAwVBRjx0Ie+sDxaCZRJHrRGJmbDMMJBSV2vO08DgureHdDkXoLpR4M7LjgjPW/gAP3nQ9w0b8L1VixXvXiIDWIdgeD+beHrMJyZM0cbEWN1nGL0eMP8C9PWIZDvxPvAGDwW1uSDKdBtfQuLTcByWQa0IP9I/tJaC5gov8IOdWS6x7pqZW29SYoRd0HOQJfODoq8lFhtCrpMbzgXEaXTglSTXPI92URqSAqY2WXW1Aqm3baZSU5eM9HfU7a6OYC8RQ0Lywxw276uHRribLSPZelWO+HiIEu7jQ3VUIe0bXu5tgcMsuswd luke@nexedi.com-chronos
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMM3+BECpbrqQunZsbK37u5e+mBJ/rrDaZL2F8hZx5dpSabexpnSLl5kRQ+hPh5Em/V512OvvdocI6IC3eMa55/uPgE6AUci4uRankZ3lLnPAJ+7Z0zwG1bsyI8cd6erAB6r7bPT8ZX70UJGnkDYFcJrQ2vsYYjmZDmwja/uNQmElapG8gy+FG7qt4LLohFt5mRP4VP63SJ/Pz1RYjlGt84Z+eooNHJadn6aWndcp8QvapisnA2MmJGDqpFDTBr/t9Aq2TNp39QmSsDlG8TGBWhR7P4NshuOrjjDvZ8Z7pedkhheOp0T9vdKYLTcbzg0ogqlnXCeumfYLy+jisHcmZ Luke.Main
ssh-rsa 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 guillaume.hervier@chromebook
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgWMvWHV2ftxHooiP9znsRdt27ZZRhXrrFdrHP270JLS/dWTnn8nmiH8GKsqZWr05nTnPJpnuLxIFtGRiPMc8oyaHWZ665nHIJikFYzcuwrlGw6CofOOyABoKSO+SO12q+err+i8K3qI4Bf3k62dHIXH/OHk0ZUTieAGmG/GaMajSgqHgJRMkjC+KEKUvHbm4JlQUJGKb+KaXkAT/8sSzI4EpCWSmGP6R/cPJFd8IYYDxaDjD0UvpZ5RETIalPa9sh3Kc6u3ITT4eUQwEY1InghtNeP8tP1BL8th48CwsHPqV9fl9V62cFtEBoQkzLFtXhfQOZNvsPn6G4MWjknlXl vincent.bechu@nexedi.com
\ No newline at end of file
ssh-rsa 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 romain@nexedi.com
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5MAMmMmojqNRoOnGc7xGoJWWAzYo2f2zO2K4elsZhHfG6l2SQJTmna0DuUi8qEtBbA9+TN1HAOeEXQKMsQyydG8dAE9vT41Lj5y8kXQDDquQxcpTIrqjmSqxjG42Olk+sT+XvcdyqA//29OHhhrKdhIf9LAOsIPHDYW06hRMf7kXIgt3MNi8ayPpA9coTHIscvV8MzwbF2q8Owrkj5UpPmSd/cjmFTcijT3rXmN0E1d3lrCvIuqxFBsFB47o0q53rFZMc5HoHQjJbg6dB4E0GNT0Ujl9ZaIDEzQbe1/T5BVWXrwDfYXbj8UlqtXeFQlo2dB+au2tHw56s4boqDxIl thomas.gambier@nexedi.com
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUkd5cZeM+B5GxXWc49E0OLl0BgoU7IczvwL5IaAM9JlCGGJ3dZk8ER3h0rnqRuQ1y5qwb5WnAtpkCGL2jYDseyQkjcCa92GPJdxdXL5n/CghzTFeI0v1d4CLxhYD84Inn2kCQcQGoJNj5U1JIRlt8HwJbr1Wnu4yggzSzOv4mQaX0AtC1JMu3zM7MCV2CgF7N5jtU/e2b1M8M45Soxy/h7xEeMxbGJBZt5MsLSpM5MChVqkZ61Qw5HOSuUeKSUaZd3/FOckIq0ujBOzFxn4inlTIRgZChp7fVrADCD/r+VLmpUw5Ld0IdW+KKBkJZfTVhSk6mdt4mFqS2JxZg4MkZ root@localhost
......@@ -17,6 +17,33 @@
- name: Add G SSH Key
authorized_key: user=root key="{{ lookup('file', 'guillaume_key') }}"
- name: Add TG SSH Key
authorized_key: user=root key="{{ lookup('file', 'thomas_key') }}"
- name: Add LNC SSH Key
authorized_key: user=root key="{{ lookup('file', 'luke_chronos_key') }}"
- name: Add LNW SSH Key
authorized_key: user=root key="{{ lookup('file', 'luke_web_key') }}"
- name: Add RC SSH Key
authorized_key: user=root key="{{ lookup('file', 'romain_key') }}"
- name: Add Jerome Perrin SSH Key
authorized_key: user=root key="{{ lookup('file', 'jerome_perrin_key') }}"
- name: Add Xiaowu Zhang SSH Key
authorized_key: user=root key="{{ lookup('file', 'xiaowu_zhang_key') }}"
- name: Add KW SSH Key
authorized_key: user=root key="{{ lookup('file', 'klaus_key') }}"
- name: Remove VB SSH Key
authorized_key: user=root key="{{ lookup('file', 'remove_key_3') }}" state=absent
- name: Remove old G Key
authorized_key: user=root key="{{ lookup('file', 'remove_key_2') }}" state=absent
- name: Remove H Key
authorized_key: user=root key="{{ lookup('file', 'remove_key_1') }}" state=absent
......
......@@ -12,7 +12,9 @@ dependencies:
- { role: package, package_name: exim4-base, package_state: absent }
- { role: package, package_name: slapos-node, package_state: latest }
- { role: package, package_name: re6st-node, package_state: latest }
- { role: re6stnet }
- { role: upgrade-apt, when: is_debian_or_ubuntu }
- { role: re6stnet-ensure-running }
- { role: etckeeper }
- { role: vifib-team-ssh-key }
- { role: vifib-server }
- { role: rsyslogd }
......
......@@ -8,6 +8,24 @@
stat: path=/etc/opt/gateway
register: gateway_file
- stat: path=/etc/sysconfig/network-scripts/ifcfg-eth0
register: ifcfg_eth0
- stat: path=/etc/network/interfaces
register: iface_config
- name: Disable network default route on interface eth0/CentOS
lineinfile: dest={{ ifcfg_eth0.stat.path }} state=present line="DEFROUTE=no"
when: ifcfg_eth0.stat.exists == True and gateway_file.stat.exists == True
- name: Disable network default route on interface eth0/Debian-Ubuntu
lineinfile:
dest: "{{ iface_config.stat.path }}"
state: present
line: "post-up route del default dev eth0"
insertafter: "iface eth0 inet dhcp"
when: iface_config.stat.exists == True and gateway_file.stat.exists == True
- name: Check default route
shell: /sbin/ip route list | grep default
register: default_route
......
---
upgrade_after: 1531735177
upgrade_after: 1549653307
- name: SlapOS Proxy
hosts: 127.0.0.1
connection: local
roles:
- slapos-proxy
sed -i "s/upgrade_after:.*/upgrade_after: `date +%s`/g" settings/upgrader.yml
......@@ -13,7 +13,7 @@
- settings/slapos-master.yml
roles:
- { role: re6stnet, package_state: present }
- { role: re6stnet-install }
- { role: slapos, package_state: present }
- { role: package, package_name: ntp, package_state: present }
- vifib-team-ssh-key
......
......@@ -10,10 +10,11 @@
vars_prompt:
- name: "computer_name"
prompt: "Please insert your email or a name of this computer:"
prompt: "Please insert your email or a name of this computer, it will be used to configure re6st:"
private: no
default: "noname"
roles:
- { role: re6stnet, package_state: present }
- { role: re6stnet-install }
- { role: re6stnet-ensure-running }
......@@ -22,9 +22,8 @@
default: "notoken"
roles:
- { role: re6stnet, package_state: present }
- { role: slapos, package_state: present }
- { role: slapos, package_state: present }
- { role: package, package_name: ntp, package_state: present }
- vifib-team-ssh-key
- vifib-shuttle
- upgrader
- vifib-server
......@@ -22,7 +22,7 @@
default: "notoken"
roles:
- { role: re6stnet, package_state: present }
- { role: re6stnet-install, package_state: present }
- { role: slapos, package_state: present }
- { role: package, package_name: ntp, package_state: present }
- vifib-team-ssh-key
......