Commit Graph

278 Commits

Author SHA1 Message Date
Kevin Fenzi
18e16cbcfa base: forgot when conditional on last alternatives add
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
5af03fdec0 base: On rhel8 machines set /usr/bin/python to /usr/bin/python3
The reason we do this is so we can use a few scripts (like nag-once)
as python2 on python2 hosts and python3 on rhel8 hosts.
Note that this depends on the script working on either.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
5ecc8a9c4f base / postfix: also work around postfix/systemd bug on buildvmhost-s390x.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
e1bea5fb6b postfix / base: also this is Service not service
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
cdeaa2558c base / postfix: reload systemd after changing the postfix service file.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
015df8dc65 postfix / base: work around s390x bug in private devices.
https://bugzilla.redhat.com/show_bug.cgi?id=1769148

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
75458a9252 base: further specify rootpw play hosts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:15 +02:00
Kevin Fenzi
de7bef8146 base: adjust rootpw setting to cover current names
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:15 +02:00
Rick Elrod
0f9a591216 base: don't copy a bunch of postfix stuff for stg
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:15 +02:00
Kevin Fenzi
f39ba30822 base: exclude this selinux policy for now since it causes a OOM crash on fedora-armv7-31
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
fd1c7cf395 base: change conditional, perhaps ansible likes this one better?
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
53c3309269 base: Tweak conditionals to be much simpiler.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
1d68465ff2 base: set hostname on all hosts, not just rhel7.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:11 +02:00
Rick Elrod
e0fab09b47 base: collapse second uuid getter
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:10 +02:00
Rick Elrod
618752a6d6 base: debug
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:10 +02:00
Kevin Fenzi
a518f49c7b base: rework the conditional for nmcli controlled ifcfg files to be more readable.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:10 +02:00
Kevin Fenzi
81fb4582e7 ansible: change when conditions to use == instead of is when checking strings.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:10 +02:00
Karsten Hopp
c9ed62ac32 update ansible_distribution_major_version conditionals
Signed-off-by: Karsten Hopp <karsten@redhat.com>
2020-04-24 21:34:10 +02:00
Stephen Smoogen
42bf78480e try again. run only against bastion02 to see what isnt happening 2020-04-24 21:34:10 +02:00
Stephen Smoogen
f158bfca8e undo the change to certs 2020-04-24 21:34:10 +02:00
Stephen Smoogen
92b2f4e805 fix matts problem 2020-04-24 21:34:09 +02:00
Kevin Fenzi
ec17c4962a keytab: try and set python2 on all the deelegated tasks to ipa server.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-07-01 20:10:36 +00:00
Stephen Smoogen
8611ab80ed put in proper checks like we have for other domains 2019-05-29 15:57:26 +00:00
Stephen Smoogen
1be05a2039 put in header checks postmap and restart 2019-05-29 14:59:43 +00:00
Kevin Fenzi
386d9a1d02 base/hosts: Clean up some depreciations.
koji_builder/sudo: Clean up some more depreciations.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-28 20:47:54 +00:00
Kevin Fenzi
984f012358 sundries/virthost/base: fix a nummber of cases of a variable being used as a boot (now a warning)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-18 00:00:15 +00:00
Kevin Fenzi
80f5658820 base: Fix syntax on dnf command, it should just be the name in this case
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-01 22:40:28 +00:00
Kevin Fenzi
4e51f101be base: Just change this to run on rhel7 and rhel6 only with yum. The next task works for fedora hosts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-04-08 20:55:09 +00:00
Kevin Fenzi
fef0fcbc0e base: fix initial libselinux task to not run on python3 hosts as package: doesn't work there.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-04-08 20:51:14 +00:00
Kevin Fenzi
b6a8c7d5e5 base: only install policycoreutils-python-utils on f28+
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-04-05 22:42:43 +00:00
Kevin Fenzi
f7391dd3fa base: You cannot have two when: clauses, just switch to one of them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-20 01:11:51 +00:00
Kevin Fenzi
b035dceff5 base/postfix: no need to make a hash here, regexp uses the normal file.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-13 18:21:25 +00:00
Kevin Fenzi
8cd9d8750b base/postfix: convert sender map to a regex so we can reject emails with two @'s in From.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-13 17:54:47 +00:00
Kevin Fenzi
df6ecb8a7d base: do not try and install the global set on rhel8 beta yet.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-12 22:25:16 +00:00
Kevin Fenzi
ec716db512 base: do not try and install old policycoreutils name on rhel8 beta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-12 22:21:54 +00:00
Patrick Uiterwijk
697e09fe7e Do a sender_access for mailman as well
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-02-07 09:03:51 +00:00
Adam Williamson
a3f2af5a8c openqa: tweak qa01 ethernet config stuff a bit
Also, allow interface names starting with 'em' in the base
network stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-12-14 19:05:20 -08:00
Stephen Smoogen
474d84d147 and we break more 2018-12-15 00:20:37 +00:00
Kevin Fenzi
7b10fb8967 remove stray name: 2018-12-13 16:14:17 +00:00
Miroslav Suchý
03aa9734f5 do not deploy rsyslog-audit.conf in cloud environment
addressing: https://pagure.io/fedora-infrastructure/issue/7438
2018-12-13 11:25:41 +01:00
Adam Williamson
2ad471f631 On second thoughts, let's have the quotes...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-11-27 15:05:55 -08:00
Adam Williamson
e9f970c058 Try to correct broken 659650ef dnf loop fix
@msuchy was trying to do something good, here, but didn't get
it quite right - base_pkgs_inst and base_pkgs_erase are already
lists. I think this should be the right way to do it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-11-27 15:03:46 -08:00
Miroslav Suchý
659650efb2 Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'policycoreutils-python-utils']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 10:07:52 +01:00
Miroslav Suchý
6fd1dd674a Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'policycoreutils-python-utils']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 10:04:39 +01:00
Miroslav Suchý
91c70c1c83 Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'{{ global_pkgs_inst }}']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 09:53:10 +01:00
Kevin Fenzi
c731ace534 Revert this for now. 2018-06-29 22:35:13 +00:00
Kevin Fenzi
ab927fcd31 let us try this to add vmhost to cached facts 2018-06-29 22:21:06 +00:00
Kevin Fenzi
a8714caab3 first cut at changing all the old |changed to is changed per ansible deprecations 2018-05-07 23:51:48 +00:00
Kevin Fenzi
d55018a9d3 clean up more jenkins leftovers 2018-05-02 17:26:25 +00:00
Kevin Fenzi
eb4ec73246 one more 2018-04-16 17:07:50 +00:00