276 Commits

Author SHA1 Message Date
c83145f9c5 Adjust GRUB_DIST and add UEFI regeneration
Keeps the UEFI boot list cleaned and consistent
2022-11-01 02:30:52 -04:00
0dbcf10d4a Add rinse dependency for provisioner 2022-10-07 00:41:03 -04:00
503a2e6c0b Remove pvc-flush references
This service causes more problems than it solves usually, so it is being
removed in the next PVC version.
2022-07-25 23:19:38 -04:00
1bf6d97cdb Increase timeout threshold for freshness 2022-07-18 13:10:32 -04:00
879b533b66 Fix the other instance too 2022-07-18 12:51:16 -04:00
15dbe61e67 Ignore errors about removing keys 2022-07-18 12:48:22 -04:00
Joshua Boniface
87ae5a12e9 Add Ceph support for single-node clusters
Ensures that the pool default size/min size is set to something
reasonable for a single node (effective RAID-1) and replace teh default
CRUSH replicate_rule set for this situation with one choosing OSD
instead of host as the default.
2022-07-08 09:33:28 -04:00
Joshua Boniface
a213ee7d4a Add cgroup delegation override
Required to solve the occasional
  libvirt: QEMU Driver error : Requested operation is not valid:
  cgroup CPUACCT controller is not mounted
problem, as per:
  https://answers.launchpad.net/ubuntu/+question/665132
2022-06-03 12:01:08 -04:00
f2a9764f52 Further optimize ownership agent output 2022-05-31 22:38:05 -04:00
b90717e25a Make ownership check consistent with cmk-agent 2.1
The new CheckMK agent uses UID 998 (dynamic) for itself. This causes
ownership problems with the old logic of this check. Move instead to a
range, where the UIDs from 200-599 are reserved for administrators, and
check for this range explicitly. Also eliminates the exceptions for ceph
and 2000 from previous iterations.
2022-05-31 22:33:07 -04:00
1a7969b707 Update freshness checks 2022-05-31 22:27:30 -04:00
8f28decfe2 Replace freshness and kernel_version checks
Use an updated plugin from BLSE that uses needrestart instead of manual
parsing of these elements.
2022-05-31 22:27:30 -04:00
Joshua Boniface
0a8b1bfa6e Add method to remove inactive SSH keys 2022-05-18 14:47:27 -04:00
Joshua Boniface
dd4825a30a Ensure packages are installed as newhost 2022-04-26 11:10:11 -04:00
Joshua Boniface
edcf14a78c Ensure Admin users are in additional groups 2022-01-04 15:13:13 -05:00
db77d5fcdd Populate /etc/timezone as well 2022-01-01 16:29:15 -05:00
7b07a81eca Convert default libvirtd to template 2022-01-01 01:50:54 -05:00
4b6fdf301f Make locale generation universal
Don't rely on a notify/handler, just do it every time in the base role.
2021-12-28 14:57:25 -05:00
d859e032be Ensure insecure_global_id_reclaim is false 2021-12-28 02:06:38 -05:00
e48b6eef3a Fix bugs with Patroni bootstrap 2021-12-20 16:52:53 -05:00
908982e97d Add proper PostgreSQL versioning 2021-12-15 12:11:49 -05:00
f8898f22b4 Ensure all zkCli has -server set 2021-12-15 11:29:10 -05:00
a9d636dcf5 Fix incorrect postgresql version 2021-12-15 02:22:10 -05:00
c7a11ca396 Customize grub distributor 2021-12-09 12:54:52 -05:00
2d2e5aff80 Set postfix to listen on all interfaces
Binding to just localhost was causing problems.
2021-12-01 13:03:16 -05:00
Joshua Boniface
e4e084cc5b Fix name of task 2021-11-15 14:46:44 -05:00
Joshua Boniface
bea79b5102 Add immutability to PVC subrole
1. Remove the obsolete pvc-vacuum script install.

2. Remove notifies when modifying configs; we do not want to restart the
daemons uncontrolled.

3. Add bootstrap check to package installs so they only happen on
bootstrap.

This ensures this part of the role, on re-runs, will *only* update
configs and not actually touch the running daemon. This makes it safe to
run before a oneshot/update-pvc-daemons.yml playbook run.
2021-11-15 10:51:38 -05:00
Joshua Boniface
bb3b7e3922 Fix a few more splits 2021-11-11 17:37:27 -05:00
Joshua Boniface
414678f683 Fix a few more extraneous splits
Just use this_node if applicable, or the raw node.hostname.
2021-11-11 17:35:42 -05:00
Joshua Boniface
b24e539252 Remove extraneous splits
The node.hostname should always be short.
2021-11-11 17:31:56 -05:00
Joshua Boniface
243c910d6d Unify and standardize inventory_hostname
This was causing some confusing conflicts, so create a new fact called
"this_node" which is inventory_hostname.split('.')[0], i.e. the short
name, and use that everywhere instead of an FQDN or true inventory
hostname.
2021-11-11 17:19:03 -05:00
fed71d7add Add option for setting CPU governor
Allows the administrator to set a CPU frequency governor if they need
to, though the default of ondemand is usually sufficient.
2021-11-08 00:21:58 -05:00
dd60b6b9ea Fix name of IPMI check again 2021-11-02 22:21:16 -04:00
99682c16a2 Fix name of ipmi check 2021-11-02 22:16:47 -04:00
319ca891d5 Add IPMI check to tasks 2021-11-02 22:04:51 -04:00
b7bca571a8 Adjust headers and add LOM check 2021-11-02 22:04:27 -04:00
bd98fdfbd8 Add node list to PVC MOTD 2021-11-02 22:04:27 -04:00
079013dfbc Fix whitespaced manufacturer and bad [[ 2021-10-11 15:08:04 -04:00
8c3b5d7dab Add coordinator state to MOTD 2021-10-11 15:05:01 -04:00
cb6199ef0d Support unknown manufacturers in MOTD 2021-10-11 14:59:55 -04:00
34a016bdac Ignore errors restarting libvirtd
This seems to inexplicably fail sometimes. We can just ignore it.
2021-10-11 14:47:04 -04:00
739c60fce0 Add resolv.conf customization 2021-10-11 14:41:29 -04:00
3de777a036 Disable unified cgroup heirarchy on kernel cmdline
This is required on Debian 11 to use the cset tool, since the newer
systemd implementation of a unified cgroup hierarchy is not compatible
with the cset tool.

Ref for future use:
  https://github.com/lpechacek/cpuset/issues/40
2021-10-10 03:44:13 -04:00
f0f3960250 Use inventory_hostname in IPMI fragment 2021-10-10 02:57:54 -04:00
5ab40fa15f Update bondX configuration 2021-10-10 02:31:47 -04:00
2c0e09f657 Add setting bridge_mtu to config 2021-10-09 19:29:22 -04:00
859cfbb51e Add smartmontools to base package list 2021-10-07 15:18:45 -04:00
5797535997 Adjust documentation and behaviour of cpuset
1. Detail the caveats and specific situations and ref the documentation
which will provide more details.

2. Always install the configs, but use /etc/default/ceph-osd-cpuset to
control if the script does anything or not (so, the "osd" cset set is
always active just not set in a special way.
2021-09-29 20:49:00 -04:00
81cf341c32 Install cset configs even if disabled
The setup script handles this instead.
2021-09-29 10:23:01 -04:00
645249b57e Allow dynamic enabling/disabling of cset
Add a separate config to handle enable/disable on the system itself.
2021-09-29 10:21:47 -04:00