276 Commits

Author SHA1 Message Date
b987c4ea8f Adjust GRUB_DIST and add UEFI regeneration
Keeps the UEFI boot list cleaned and consistent
2023-09-01 15:42:29 -04:00
144f519e76 Add rinse dependency for provisioner 2023-09-01 15:42:29 -04:00
be091f66d4 Remove pvc-flush references
This service causes more problems than it solves usually, so it is being
removed in the next PVC version.
2023-09-01 15:42:28 -04:00
08c8be66b3 Increase timeout threshold for freshness 2023-09-01 15:42:28 -04:00
00482aec06 Fix the other instance too 2023-09-01 15:42:28 -04:00
da98a4d445 Ignore errors about removing keys 2023-09-01 15:42:28 -04:00
6cf8948107 Add Ceph support for single-node clusters
Ensures that the pool default size/min size is set to something
reasonable for a single node (effective RAID-1) and replace teh default
CRUSH replicate_rule set for this situation with one choosing OSD
instead of host as the default.
2023-09-01 15:42:28 -04:00
e4ccafee73 Add cgroup delegation override
Required to solve the occasional
  libvirt: QEMU Driver error : Requested operation is not valid:
  cgroup CPUACCT controller is not mounted
problem, as per:
  https://answers.launchpad.net/ubuntu/+question/665132
2023-09-01 15:42:28 -04:00
e8fe165e00 Further optimize ownership agent output 2023-09-01 15:42:28 -04:00
cbea6e284c Make ownership check consistent with cmk-agent 2.1
The new CheckMK agent uses UID 998 (dynamic) for itself. This causes
ownership problems with the old logic of this check. Move instead to a
range, where the UIDs from 200-599 are reserved for administrators, and
check for this range explicitly. Also eliminates the exceptions for ceph
and 2000 from previous iterations.
2023-09-01 15:42:28 -04:00
9e20e47903 Update freshness checks 2023-09-01 15:42:28 -04:00
d47d320bb3 Replace freshness and kernel_version checks
Use an updated plugin from BLSE that uses needrestart instead of manual
parsing of these elements.
2023-09-01 15:42:28 -04:00
ea9fe5570f Add method to remove inactive SSH keys 2023-09-01 15:42:28 -04:00
25dde4709b Ensure packages are installed as newhost 2023-09-01 15:42:28 -04:00
4dfd877c7f Ensure Admin users are in additional groups 2023-09-01 15:42:28 -04:00
ce9304e43e Populate /etc/timezone as well 2023-09-01 15:42:28 -04:00
9fe43efac2 Convert default libvirtd to template 2023-09-01 15:42:28 -04:00
aa6b4ac3dc Make locale generation universal
Don't rely on a notify/handler, just do it every time in the base role.
2023-09-01 15:42:28 -04:00
91ca3d1510 Ensure insecure_global_id_reclaim is false 2023-09-01 15:42:28 -04:00
3397dacab4 Fix bugs with Patroni bootstrap 2023-09-01 15:42:28 -04:00
1838f8ff56 Add proper PostgreSQL versioning 2023-09-01 15:42:28 -04:00
773fd5a9d4 Ensure all zkCli has -server set 2023-09-01 15:42:28 -04:00
0e9d0b3294 Fix incorrect postgresql version 2023-09-01 15:42:28 -04:00
35dcf979f4 Customize grub distributor 2023-09-01 15:42:28 -04:00
ba81a106d2 Set postfix to listen on all interfaces
Binding to just localhost was causing problems.
2023-09-01 15:42:28 -04:00
a87745d640 Fix name of task 2023-09-01 15:42:28 -04:00
d6cb28b639 Add immutability to PVC subrole
1. Remove the obsolete pvc-vacuum script install.

2. Remove notifies when modifying configs; we do not want to restart the
daemons uncontrolled.

3. Add bootstrap check to package installs so they only happen on
bootstrap.

This ensures this part of the role, on re-runs, will *only* update
configs and not actually touch the running daemon. This makes it safe to
run before a oneshot/update-pvc-daemons.yml playbook run.
2023-09-01 15:42:28 -04:00
77be96bf6f Fix a few more splits 2023-09-01 15:42:28 -04:00
95b47f8b09 Fix a few more extraneous splits
Just use this_node if applicable, or the raw node.hostname.
2023-09-01 15:42:28 -04:00
87803cb7a2 Remove extraneous splits
The node.hostname should always be short.
2023-09-01 15:42:28 -04:00
d24cb8a8ef Unify and standardize inventory_hostname
This was causing some confusing conflicts, so create a new fact called
"this_node" which is inventory_hostname.split('.')[0], i.e. the short
name, and use that everywhere instead of an FQDN or true inventory
hostname.
2023-09-01 15:42:28 -04:00
056c325486 Add option for setting CPU governor
Allows the administrator to set a CPU frequency governor if they need
to, though the default of ondemand is usually sufficient.
2023-09-01 15:42:28 -04:00
fc5bcf139c Fix name of IPMI check again 2023-09-01 15:42:28 -04:00
44cedf66c9 Fix name of ipmi check 2023-09-01 15:42:28 -04:00
9f7dbfb4f8 Add IPMI check to tasks 2023-09-01 15:42:28 -04:00
b9ae4d1009 Adjust headers and add LOM check 2023-09-01 15:42:27 -04:00
48fb21af75 Add node list to PVC MOTD 2023-09-01 15:42:27 -04:00
e009cf4076 Fix whitespaced manufacturer and bad [[ 2023-09-01 15:42:27 -04:00
e65f1d15a6 Add coordinator state to MOTD 2023-09-01 15:42:27 -04:00
894ce9b517 Support unknown manufacturers in MOTD 2023-09-01 15:42:27 -04:00
55ec177919 Ignore errors restarting libvirtd
This seems to inexplicably fail sometimes. We can just ignore it.
2023-09-01 15:42:27 -04:00
b814ec60f6 Add resolv.conf customization 2023-09-01 15:42:27 -04:00
ddecb94348 Disable unified cgroup heirarchy on kernel cmdline
This is required on Debian 11 to use the cset tool, since the newer
systemd implementation of a unified cgroup hierarchy is not compatible
with the cset tool.

Ref for future use:
  https://github.com/lpechacek/cpuset/issues/40
2023-09-01 15:42:27 -04:00
be3ce67574 Use inventory_hostname in IPMI fragment 2023-09-01 15:42:27 -04:00
5f05835721 Update bondX configuration 2023-09-01 15:42:27 -04:00
4cb2d7835c Add setting bridge_mtu to config 2023-09-01 15:42:27 -04:00
9f16995f59 Add smartmontools to base package list 2023-09-01 15:42:27 -04:00
6e2d661134 Adjust documentation and behaviour of cpuset
1. Detail the caveats and specific situations and ref the documentation
which will provide more details.

2. Always install the configs, but use /etc/default/ceph-osd-cpuset to
control if the script does anything or not (so, the "osd" cset set is
always active just not set in a special way.
2023-09-01 15:42:27 -04:00
83bd1b1efd Install cset configs even if disabled
The setup script handles this instead.
2023-09-01 15:42:27 -04:00
7927ec4f11 Allow dynamic enabling/disabling of cset
Add a separate config to handle enable/disable on the system itself.
2023-09-01 15:42:27 -04:00