1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-02-13 19:52:06 +00:00
iiab/roles/2-common/tasks/main.yml

52 lines
1.6 KiB
YAML
Raw Normal View History

2017-10-27 03:43:50 +00:00
# Common OS-Level Additions & Mods (that only need to be performed once)
2017-10-30 20:31:16 +00:00
- name: ...IS BEGINNING ==========================================
2017-10-27 03:43:50 +00:00
command: echo
2017-05-27 18:09:50 +00:00
- include_tasks: centos.yml
2017-05-27 18:09:50 +00:00
when: ansible_distribution == "CentOS"
- include_tasks: fedora.yml
2017-05-27 18:09:50 +00:00
when: ansible_distribution == "Fedora"
2017-11-09 10:51:07 +00:00
- include_tasks: prep.yml
when: not is_debuntu
- include_tasks: xo.yml
when: xo_model != "none" or osbuilder is defined
2017-05-27 18:09:50 +00:00
# the following installs common packages for both debian and fedora
- include_tasks: packages.yml
2017-05-27 18:09:50 +00:00
2017-11-09 12:11:15 +00:00
- include_tasks: iptables.yml
2017-11-09 10:51:07 +00:00
2017-05-27 18:09:50 +00:00
- sysctl: name=net.ipv4.ip_forward value=1 state=present
- sysctl: name=net.ipv4.conf.default.rp_filter value=1 state=present
- sysctl: name=net.ipv4.conf.default.accept_source_route value=0 state=present
- sysctl: name=kernel.sysrq value=1 state=present
- sysctl: name=kernel.core_uses_pid value=1 state=present
- sysctl: name=net.ipv4.tcp_syncookies value=1 state=present
- sysctl: name=kernel.shmmax value=268435456 state=present
# IPv6 disabled
- sysctl: name=net.ipv6.conf.all.disable_ipv6 value=1 state=present
- sysctl: name=net.ipv6.conf.default.disable_ipv6 value=1 state=present
- sysctl: name=net.ipv6.conf.lo.disable_ipv6 value=1 state=present
- name: Install custom profile file
template: dest=/etc/profile.d/zzz_iiab.sh
src=zzz_iiab.sh
2017-05-27 18:09:50 +00:00
owner=root
mode=0644
backup=no
- include_tasks: net_mods.yml
2017-05-27 23:10:45 +00:00
when: not is_debuntu and not is_F18
2017-05-27 18:09:50 +00:00
- include_tasks: udev.yml
2017-10-27 03:43:50 +00:00
2017-10-30 20:31:16 +00:00
- name: Recording STAGE 2 HAS COMPLETED ==========================
lineinfile: dest=/etc/iiab/iiab.env
regexp='^STAGE=*'
line='STAGE=2'
state=present