Joshua Boniface
b90717e25a
Make ownership check consistent with cmk-agent 2.1
...
The new CheckMK agent uses UID 998 (dynamic) for itself. This causes
ownership problems with the old logic of this check. Move instead to a
range, where the UIDs from 200-599 are reserved for administrators, and
check for this range explicitly. Also eliminates the exceptions for ceph
and 2000 from previous iterations.
2022-05-31 22:33:07 -04:00
Joshua Boniface
1a7969b707
Update freshness checks
2022-05-31 22:27:30 -04:00
Joshua Boniface
8f28decfe2
Replace freshness and kernel_version checks
...
Use an updated plugin from BLSE that uses needrestart instead of manual
parsing of these elements.
2022-05-31 22:27:30 -04:00
Joshua Boniface
0a8b1bfa6e
Add method to remove inactive SSH keys
2022-05-18 14:47:27 -04:00
Joshua Boniface
db77d5fcdd
Populate /etc/timezone as well
2022-01-01 16:29:15 -05:00
Joshua Boniface
4b6fdf301f
Make locale generation universal
...
Don't rely on a notify/handler, just do it every time in the base role.
2021-12-28 14:57:25 -05:00
Joshua Boniface
c7a11ca396
Customize grub distributor
2021-12-09 12:54:52 -05:00
Joshua Boniface
2d2e5aff80
Set postfix to listen on all interfaces
...
Binding to just localhost was causing problems.
2021-12-01 13:03:16 -05:00
Joshua Boniface
e4e084cc5b
Fix name of task
2021-11-15 14:46:44 -05:00
Joshua Boniface
bb3b7e3922
Fix a few more splits
2021-11-11 17:37:27 -05:00
Joshua Boniface
414678f683
Fix a few more extraneous splits
...
Just use this_node if applicable, or the raw node.hostname.
2021-11-11 17:35:42 -05:00
Joshua Boniface
243c910d6d
Unify and standardize inventory_hostname
...
This was causing some confusing conflicts, so create a new fact called
"this_node" which is inventory_hostname.split('.')[0], i.e. the short
name, and use that everywhere instead of an FQDN or true inventory
hostname.
2021-11-11 17:19:03 -05:00
Joshua Boniface
fed71d7add
Add option for setting CPU governor
...
Allows the administrator to set a CPU frequency governor if they need
to, though the default of ondemand is usually sufficient.
2021-11-08 00:21:58 -05:00
Joshua Boniface
dd60b6b9ea
Fix name of IPMI check again
2021-11-02 22:21:16 -04:00
Joshua Boniface
99682c16a2
Fix name of ipmi check
2021-11-02 22:16:47 -04:00
Joshua Boniface
319ca891d5
Add IPMI check to tasks
2021-11-02 22:04:51 -04:00
Joshua Boniface
b7bca571a8
Adjust headers and add LOM check
2021-11-02 22:04:27 -04:00
Joshua Boniface
bd98fdfbd8
Add node list to PVC MOTD
2021-11-02 22:04:27 -04:00
Joshua Boniface
079013dfbc
Fix whitespaced manufacturer and bad [[
2021-10-11 15:08:04 -04:00
Joshua Boniface
8c3b5d7dab
Add coordinator state to MOTD
2021-10-11 15:05:01 -04:00
Joshua Boniface
cb6199ef0d
Support unknown manufacturers in MOTD
2021-10-11 14:59:55 -04:00
Joshua Boniface
739c60fce0
Add resolv.conf customization
2021-10-11 14:41:29 -04:00
Joshua Boniface
3de777a036
Disable unified cgroup heirarchy on kernel cmdline
...
This is required on Debian 11 to use the cset tool, since the newer
systemd implementation of a unified cgroup hierarchy is not compatible
with the cset tool.
Ref for future use:
https://github.com/lpechacek/cpuset/issues/40
2021-10-10 03:44:13 -04:00
Joshua Boniface
f0f3960250
Use inventory_hostname in IPMI fragment
2021-10-10 02:57:54 -04:00
Joshua Boniface
5ab40fa15f
Update bondX configuration
2021-10-10 02:31:47 -04:00
Joshua Boniface
859cfbb51e
Add smartmontools to base package list
2021-10-07 15:18:45 -04:00
Joshua Boniface
d7b07925bb
Fix bad flag
2021-09-09 13:07:15 -04:00
Joshua Boniface
77c84cec52
Add package installs for different Debian versions
2021-09-09 12:59:18 -04:00
Joshua Boniface
a91112fa71
Move paths and keys to defaults
2021-08-24 15:25:42 -04:00
Joshua Boniface
2cc4548af6
Fix sources.list for Bullseye
2021-07-26 00:36:39 -04:00
Joshua Boniface
b33096202e
Fix bad Ansible variable name
2021-07-18 17:49:42 -04:00
Joshua Boniface
a1362c4363
Don't fail if IPMI tasks fail
2021-07-07 10:42:30 -04:00
Joshua Boniface
96544aabb8
Add GRUB, Plymouth themes and issue for PVC
2021-06-30 02:50:18 -04:00
Joshua Boniface
9d4eb89bde
Fix zkcli for good
2021-06-29 18:16:02 -04:00
Joshua Boniface
3d47b12b76
Add GRUB configuration to Ansible role
2021-06-29 17:48:55 -04:00
Joshua Boniface
d794197633
Fix zkcli alias to use hostname
2021-06-29 16:47:42 -04:00
Joshua Boniface
9855088a8e
Use short ansible_hostname in ipmi fragment
2021-06-29 15:38:19 -04:00
Joshua Boniface
10e8947cb0
Add ipmitool to packages list
2021-06-29 15:30:54 -04:00
Joshua Boniface
d88ba7272d
Ensure we can connect to Patroni
2021-06-22 03:28:36 -04:00
Joshua Boniface
73bc005c0b
Ensure deb-src is present for bullseye
2021-06-22 03:15:23 -04:00
Joshua Boniface
b4e9ed5d39
Ensure DEBIAN_FRONTEND is noninteractive
2021-06-22 03:15:23 -04:00
Joshua Boniface
8a140f70dc
Use inventory_hostname for IPMI dict
2021-06-22 03:15:23 -04:00
Joshua Boniface
836c946c72
Use independent fact to work around codename
2021-06-07 10:54:55 -04:00
Joshua Boniface
69c037c136
Ensure backup_keys isn't empty
2021-06-06 00:41:53 -04:00
Joshua Boniface
6b79e5db31
Avoid writing hosts if empty
2021-06-05 01:12:00 -04:00
Joshua Boniface
8fa8590eb8
Ensure apt-update runs if configs update
2021-06-05 01:03:35 -04:00
Joshua Boniface
9dc0949b47
Add bullseye support
2021-06-05 00:56:02 -04:00
Joshua Boniface
998e5a8752
Add directory creation to backup script
2021-06-01 10:16:08 -04:00
Joshua Boniface
0aa328e350
Add PostgreSQL to daily backup script
2021-06-01 10:10:22 -04:00
Joshua Boniface
9deee94332
Update tags and fix backup keys to var
2021-05-27 12:29:19 -04:00