a213ee7d4a
Add cgroup delegation override
...
Required to solve the occasional
libvirt: QEMU Driver error : Requested operation is not valid:
cgroup CPUACCT controller is not mounted
problem, as per:
https://answers.launchpad.net/ubuntu/+question/665132
2022-06-03 12:01:08 -04:00
Joshua Boniface
f2a9764f52
Further optimize ownership agent output
2022-05-31 22:38:05 -04:00
Joshua Boniface
b90717e25a
Make ownership check consistent with cmk-agent 2.1
...
The new CheckMK agent uses UID 998 (dynamic) for itself. This causes
ownership problems with the old logic of this check. Move instead to a
range, where the UIDs from 200-599 are reserved for administrators, and
check for this range explicitly. Also eliminates the exceptions for ceph
and 2000 from previous iterations.
2022-05-31 22:33:07 -04:00
Joshua Boniface
1a7969b707
Update freshness checks
2022-05-31 22:27:30 -04:00
Joshua Boniface
8f28decfe2
Replace freshness and kernel_version checks
...
Use an updated plugin from BLSE that uses needrestart instead of manual
parsing of these elements.
2022-05-31 22:27:30 -04:00
0a8b1bfa6e
Add method to remove inactive SSH keys
2022-05-18 14:47:27 -04:00
dd4825a30a
Ensure packages are installed as newhost
2022-04-26 11:10:11 -04:00
edcf14a78c
Ensure Admin users are in additional groups
2022-01-04 15:13:13 -05:00
Joshua Boniface
db77d5fcdd
Populate /etc/timezone as well
2022-01-01 16:29:15 -05:00
Joshua Boniface
88764c44b2
Add clusters.yml to setup
2022-01-01 05:06:13 -05:00
Joshua Boniface
593b1efe6c
Add additional hook type webhook to example
2022-01-01 02:17:49 -05:00
Joshua Boniface
0e28bfccc8
Update example bootstrap.yml
2022-01-01 01:53:04 -05:00
Joshua Boniface
7b07a81eca
Convert default libvirtd to template
2022-01-01 01:50:54 -05:00
Joshua Boniface
4b6fdf301f
Make locale generation universal
...
Don't rely on a notify/handler, just do it every time in the base role.
2021-12-28 14:57:25 -05:00
Joshua Boniface
d859e032be
Ensure insecure_global_id_reclaim is false
2021-12-28 02:06:38 -05:00
Joshua Boniface
e48b6eef3a
Fix bugs with Patroni bootstrap
2021-12-20 16:52:53 -05:00
Joshua Boniface
d48a7dbab6
Don't reboot if purge fails
2021-12-20 04:41:03 -05:00
Joshua Boniface
2e4fddf284
Add SD-CARD example
2021-12-19 20:37:32 -05:00
Joshua Boniface
265a1b7ad2
Add example of a pvcbootstrapd variables file
...
Also add a README to clarify some details.
2021-12-19 17:43:55 -05:00
Joshua Boniface
908982e97d
Add proper PostgreSQL versioning
2021-12-15 12:11:49 -05:00
Joshua Boniface
f8898f22b4
Ensure all zkCli has -server set
2021-12-15 11:29:10 -05:00
Joshua Boniface
d87bce908b
Purge ceph too
2021-12-15 10:44:36 -05:00
Joshua Boniface
b7b6e6762b
Improve purge configuration
2021-12-15 09:47:52 -05:00
Joshua Boniface
a9d636dcf5
Fix incorrect postgresql version
2021-12-15 02:22:10 -05:00
Joshua Boniface
f12f9b116f
Add additional ceph symlink
2021-12-14 23:29:28 -05:00
Joshua Boniface
c7a11ca396
Customize grub distributor
2021-12-09 12:54:52 -05:00
Joshua Boniface
2d2e5aff80
Set postfix to listen on all interfaces
...
Binding to just localhost was causing problems.
2021-12-01 13:03:16 -05:00
e4e084cc5b
Fix name of task
2021-11-15 14:46:44 -05:00
bea79b5102
Add immutability to PVC subrole
...
1. Remove the obsolete pvc-vacuum script install.
2. Remove notifies when modifying configs; we do not want to restart the
daemons uncontrolled.
3. Add bootstrap check to package installs so they only happen on
bootstrap.
This ensures this part of the role, on re-runs, will *only* update
configs and not actually touch the running daemon. This makes it safe to
run before a oneshot/update-pvc-daemons.yml playbook run.
2021-11-15 10:51:38 -05:00
bb3b7e3922
Fix a few more splits
2021-11-11 17:37:27 -05:00
414678f683
Fix a few more extraneous splits
...
Just use this_node if applicable, or the raw node.hostname.
2021-11-11 17:35:42 -05:00
b24e539252
Remove extraneous splits
...
The node.hostname should always be short.
2021-11-11 17:31:56 -05:00
243c910d6d
Unify and standardize inventory_hostname
...
This was causing some confusing conflicts, so create a new fact called
"this_node" which is inventory_hostname.split('.')[0], i.e. the short
name, and use that everywhere instead of an FQDN or true inventory
hostname.
2021-11-11 17:19:03 -05:00
70c7c76605
Move pvc maintenance to separate plays
...
This ensures that the maintenance on/off happens before all tasks and
after all tasks and not intermittently.
2021-11-11 15:54:22 -05:00
Joshua Boniface
fed71d7add
Add option for setting CPU governor
...
Allows the administrator to set a CPU frequency governor if they need
to, though the default of ondemand is usually sufficient.
2021-11-08 00:21:58 -05:00
Joshua Boniface
dd60b6b9ea
Fix name of IPMI check again
2021-11-02 22:21:16 -04:00
Joshua Boniface
99682c16a2
Fix name of ipmi check
2021-11-02 22:16:47 -04:00
Joshua Boniface
319ca891d5
Add IPMI check to tasks
2021-11-02 22:04:51 -04:00
Joshua Boniface
b7bca571a8
Adjust headers and add LOM check
2021-11-02 22:04:27 -04:00
Joshua Boniface
bd98fdfbd8
Add node list to PVC MOTD
2021-11-02 22:04:27 -04:00
820e2a64d0
Ignore errors during flush commands
...
These might inexplicably fail, but that is fine.
2021-10-13 10:34:36 -04:00
Joshua Boniface
079013dfbc
Fix whitespaced manufacturer and bad [[
2021-10-11 15:08:04 -04:00
Joshua Boniface
8c3b5d7dab
Add coordinator state to MOTD
2021-10-11 15:05:01 -04:00
Joshua Boniface
cb6199ef0d
Support unknown manufacturers in MOTD
2021-10-11 14:59:55 -04:00
Joshua Boniface
34a016bdac
Ignore errors restarting libvirtd
...
This seems to inexplicably fail sometimes. We can just ignore it.
2021-10-11 14:47:04 -04:00
Joshua Boniface
739c60fce0
Add resolv.conf customization
2021-10-11 14:41:29 -04:00
Joshua Boniface
5e83f1826e
Add note about moving files up
2021-10-10 05:42:01 -04:00
Joshua Boniface
bc99c0b7cc
Revert "Add symlink for Ceph file pickup"
...
This reverts commit 3ac946bf2e
2021-10-10 05:41:55 -04:00
Joshua Boniface
3ac946bf2e
Add symlink for Ceph file pickup
2021-10-10 05:23:25 -04:00
Joshua Boniface
2c80c187c3
Include another upgrade in deb11 playbook
...
Ensures that the system is fully updated after re-enabling the security
repository during the base run.
2021-10-10 05:10:57 -04:00
Joshua Boniface
Joshua Boniface