Commit Graph

333 Commits

Author SHA1 Message Date
Stephen Smoogen
bb719cdc5d rsyslogd: fix rsyslogd on all EL8 and F32 boxes
In 2017, I (Stephen Smoogen), put in a change to copy
roles/base/files/rsyslog/rsyslog-limits.conf to /etc/systemd on
log01. This was to make it so we have adequete limits on the logrunner
on log01. However I missed the fact that all *.conf files are copied
over to /etc/rsyslog.d/ in a previous section. So this file has been
copied over to every system since 2017.. which was ok when rsyslogd just
ignored the syntax. However on EL8, it dies and kills rsyslogd so
servers are not able to run.

Fix: change the file name to one which won't get globbed. Remove the
file from all systems in /etc/rsyslo.d
2020-04-30 11:25:25 +00:00
Kevin Fenzi
f927c2774f base / selinux module: do not try and load this on el6
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:27 +02:00
Kevin Fenzi
333b791f8a Revert "base: exclude this selinux policy for now since it causes a OOM crash on fedora-armv7-31"
I am going to test this in staging now.

This reverts commit 239f247757868a27df5802392ac24291eed931d0.
2020-04-24 21:34:27 +02:00
Kevin Fenzi
00af04a024 openstack cloud: decomission
Finally take fed-cloud* out and all playbooks associated with the old (and attempts to make a new one).
This cloud was a pain at times, but it did serve long and well, we salute it!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:26 +02:00
Stephen Smoogen
c04e8c2652 make sure this is here so we can do the next step 2020-04-24 21:34:22 +02:00
Kevin Fenzi
18e16cbcfa base: forgot when conditional on last alternatives add
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
5af03fdec0 base: On rhel8 machines set /usr/bin/python to /usr/bin/python3
The reason we do this is so we can use a few scripts (like nag-once)
as python2 on python2 hosts and python3 on rhel8 hosts.
Note that this depends on the script working on either.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
5ecc8a9c4f base / postfix: also work around postfix/systemd bug on buildvmhost-s390x.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
e1bea5fb6b postfix / base: also this is Service not service
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
cdeaa2558c base / postfix: reload systemd after changing the postfix service file.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
015df8dc65 postfix / base: work around s390x bug in private devices.
https://bugzilla.redhat.com/show_bug.cgi?id=1769148

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:16 +02:00
Kevin Fenzi
75458a9252 base: further specify rootpw play hosts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:15 +02:00
Kevin Fenzi
de7bef8146 base: adjust rootpw setting to cover current names
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:15 +02:00
Rick Elrod
0f9a591216 base: don't copy a bunch of postfix stuff for stg
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:15 +02:00
Kevin Fenzi
f39ba30822 base: exclude this selinux policy for now since it causes a OOM crash on fedora-armv7-31
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
fd1c7cf395 base: change conditional, perhaps ansible likes this one better?
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
53c3309269 base: Tweak conditionals to be much simpiler.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
1d68465ff2 base: set hostname on all hosts, not just rhel7.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:11 +02:00
Rick Elrod
e0fab09b47 base: collapse second uuid getter
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:10 +02:00
Rick Elrod
618752a6d6 base: debug
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:10 +02:00
Kevin Fenzi
a518f49c7b base: rework the conditional for nmcli controlled ifcfg files to be more readable.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:10 +02:00
Kevin Fenzi
81fb4582e7 ansible: change when conditions to use == instead of is when checking strings.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:10 +02:00
Karsten Hopp
c9ed62ac32 update ansible_distribution_major_version conditionals
Signed-off-by: Karsten Hopp <karsten@redhat.com>
2020-04-24 21:34:10 +02:00
Stephen Smoogen
42bf78480e try again. run only against bastion02 to see what isnt happening 2020-04-24 21:34:10 +02:00
Stephen Smoogen
f158bfca8e undo the change to certs 2020-04-24 21:34:10 +02:00
Stephen Smoogen
92b2f4e805 fix matts problem 2020-04-24 21:34:09 +02:00
Kevin Fenzi
ec17c4962a keytab: try and set python2 on all the deelegated tasks to ipa server.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-07-01 20:10:36 +00:00
Stephen Smoogen
8611ab80ed put in proper checks like we have for other domains 2019-05-29 15:57:26 +00:00
Stephen Smoogen
1be05a2039 put in header checks postmap and restart 2019-05-29 14:59:43 +00:00
Kevin Fenzi
386d9a1d02 base/hosts: Clean up some depreciations.
koji_builder/sudo: Clean up some more depreciations.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-28 20:47:54 +00:00
Kevin Fenzi
984f012358 sundries/virthost/base: fix a nummber of cases of a variable being used as a boot (now a warning)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-18 00:00:15 +00:00
Kevin Fenzi
80f5658820 base: Fix syntax on dnf command, it should just be the name in this case
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-01 22:40:28 +00:00
Kevin Fenzi
4e51f101be base: Just change this to run on rhel7 and rhel6 only with yum. The next task works for fedora hosts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-04-08 20:55:09 +00:00
Kevin Fenzi
fef0fcbc0e base: fix initial libselinux task to not run on python3 hosts as package: doesn't work there.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-04-08 20:51:14 +00:00
Kevin Fenzi
b6a8c7d5e5 base: only install policycoreutils-python-utils on f28+
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-04-05 22:42:43 +00:00
Kevin Fenzi
f7391dd3fa base: You cannot have two when: clauses, just switch to one of them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-20 01:11:51 +00:00
Kevin Fenzi
b035dceff5 base/postfix: no need to make a hash here, regexp uses the normal file.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-13 18:21:25 +00:00
Kevin Fenzi
8cd9d8750b base/postfix: convert sender map to a regex so we can reject emails with two @'s in From.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-13 17:54:47 +00:00
Kevin Fenzi
df6ecb8a7d base: do not try and install the global set on rhel8 beta yet.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-12 22:25:16 +00:00
Kevin Fenzi
ec716db512 base: do not try and install old policycoreutils name on rhel8 beta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-12 22:21:54 +00:00
Patrick Uiterwijk
697e09fe7e Do a sender_access for mailman as well
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-02-07 09:03:51 +00:00
Adam Williamson
a3f2af5a8c openqa: tweak qa01 ethernet config stuff a bit
Also, allow interface names starting with 'em' in the base
network stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-12-14 19:05:20 -08:00
Stephen Smoogen
474d84d147 and we break more 2018-12-15 00:20:37 +00:00
Kevin Fenzi
7b10fb8967 remove stray name: 2018-12-13 16:14:17 +00:00
Miroslav Suchý
03aa9734f5 do not deploy rsyslog-audit.conf in cloud environment
addressing: https://pagure.io/fedora-infrastructure/issue/7438
2018-12-13 11:25:41 +01:00
Adam Williamson
2ad471f631 On second thoughts, let's have the quotes...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-11-27 15:05:55 -08:00
Adam Williamson
e9f970c058 Try to correct broken 659650ef dnf loop fix
@msuchy was trying to do something good, here, but didn't get
it quite right - base_pkgs_inst and base_pkgs_erase are already
lists. I think this should be the right way to do it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-11-27 15:03:46 -08:00
Miroslav Suchý
659650efb2 Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'policycoreutils-python-utils']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 10:07:52 +01:00
Miroslav Suchý
6fd1dd674a Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'policycoreutils-python-utils']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 10:04:39 +01:00
Miroslav Suchý
91c70c1c83 Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'{{ global_pkgs_inst }}']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 09:53:10 +01:00