external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-03-09 15:40:17 +00:00
Code Issues Releases Wiki Activity

Merge pull request #3560 from holta/munin-IPv6-workaround

Browse source 
Temporarily Enable sysctl's IPv6 during Munin install/enable, so munin-node.service starts
This commit is contained in:
A Holt 2023-04-30 19:21:50 -04:00 • committed by GitHub
commit 9c4a6ce723
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 25 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
roles/munin/tasks/enable-or-disable.yml
View file

@ -1,3 +1,9 @@
# SEE ALSO roles/network/tasks/install.yml
- name: TEMPORARILY REVERT net.ipv6.conf.all.disable_ipv6 to 0 in /etc/sysctl.conf for #3434
sysctl:
name: net.ipv6.conf.all.disable_ipv6
value: 0
- name: Enable & Start 'munin-node' systemd service - name: Enable & Start 'munin-node' systemd service
systemd: systemd:
name: munin-node name: munin-node
@ -6,6 +12,12 @@
state: started state: started
when: munin_enabled when: munin_enabled
# SEE ALSO roles/network/tasks/install.yml
- name: RESTORE net.ipv6.conf.all.disable_ipv6 to 1 in /etc/sysctl.conf for #3434
sysctl:
name: net.ipv6.conf.all.disable_ipv6
value: 1
- name: Disable & Stop 'munin-node' systemd service - name: Disable & Stop 'munin-node' systemd service
systemd: systemd:
name: munin-node name: munin-node

12
roles/munin/tasks/install.yml
View file

@ -1,3 +1,9 @@
# SEE ALSO roles/network/tasks/install.yml
- name: TEMPORARILY REVERT net.ipv6.conf.all.disable_ipv6 to 0 in /etc/sysctl.conf for #3434
sysctl:
name: net.ipv6.conf.all.disable_ipv6
value: 0
- name: "Install 5 packages: libcgi-fast-perl, munin, munin-node, munin-plugins-extra, python3-passlib" - name: "Install 5 packages: libcgi-fast-perl, munin, munin-node, munin-plugins-extra, python3-passlib"
package: package:
name: name:
@ -9,6 +15,12 @@
- python3-passlib # For Ansible module 'htpasswd' in Ansible collection community.general -- used just below - python3-passlib # For Ansible module 'htpasswd' in Ansible collection community.general -- used just below
state: present state: present
# SEE ALSO roles/network/tasks/install.yml
- name: RESTORE net.ipv6.conf.all.disable_ipv6 to 1 in /etc/sysctl.conf for #3434
sysctl:
name: net.ipv6.conf.all.disable_ipv6
value: 1
- name: Establish username/password Admin/changeme in /etc/munin/munin-htpasswd - name: Establish username/password Admin/changeme in /etc/munin/munin-htpasswd
htpasswd: htpasswd:
path: /etc/munin/munin-htpasswd path: /etc/munin/munin-htpasswd

2
roles/network/tasks/install.yml
View file

@ -59,7 +59,7 @@
- { name: 'net.ipv4.conf.default.rp_filter', value: '1' } # Default: 2. Enable Spoof protection (reverse-path filter) - { name: 'net.ipv4.conf.default.rp_filter', value: '1' } # Default: 2. Enable Spoof protection (reverse-path filter)
- { name: 'net.ipv4.conf.default.accept_source_route', value: '0' } # Default: 1. Do not accept IP source route packets (we are not a router) - { name: 'net.ipv4.conf.default.accept_source_route', value: '0' } # Default: 1. Do not accept IP source route packets (we are not a router)
#- { name: 'net.ipv4.tcp_syncookies', value: '1' } # Very standard in 2020 #- { name: 'net.ipv4.tcp_syncookies', value: '1' } # Very standard in 2020
- { name: 'net.ipv6.conf.all.disable_ipv6', value: '1' } # Default: 0. Disable IPv6 - { name: 'net.ipv6.conf.all.disable_ipv6', value: '1' } # Default: 0. Disable IPv6. SEE ALSO: roles/munin/tasks/install.yml & enable-and-disable.yml
#- { name: 'net.ipv6.conf.default.disable_ipv6', value: '1' } # AUTO-SET #- { name: 'net.ipv6.conf.default.disable_ipv6', value: '1' } # AUTO-SET
#- { name: 'net.ipv6.conf.lo.disable_ipv6', value: '1' } # BY ABOVE #- { name: 'net.ipv6.conf.lo.disable_ipv6', value: '1' } # BY ABOVE