mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 19:52:06 +00:00
98 lines
1.9 KiB
YAML
98 lines
1.9 KiB
YAML
# Common OS-Level Additions & Mods (that only need to be performed once)
|
|
|
|
- name: ...IS BEGINNING ==========================================
|
|
command: echo
|
|
|
|
- name: Create IIAB directory structure ("file layout")
|
|
include_tasks: fl.yml
|
|
|
|
- include_tasks: centos.yml
|
|
when: ansible_distribution == "CentOS"
|
|
|
|
- include_tasks: fedora.yml
|
|
when: ansible_distribution == "Fedora"
|
|
|
|
- include_tasks: prep.yml
|
|
when: not is_debuntu
|
|
|
|
- include_tasks: xo.yml
|
|
when: xo_model != "none" or osbuilder is defined
|
|
|
|
# the following installs common packages for both debian and fedora
|
|
- include_tasks: packages.yml
|
|
|
|
- include_tasks: iptables.yml
|
|
|
|
- sysctl:
|
|
name: net.ipv4.ip_forward
|
|
value: 1
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: net.ipv4.conf.default.rp_filter
|
|
value: 1
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: net.ipv4.conf.default.accept_source_route
|
|
value: 0
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: kernel.sysrq
|
|
value: 1
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: kernel.core_uses_pid
|
|
value: 1
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: net.ipv4.tcp_syncookies
|
|
value: 1
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: kernel.shmmax
|
|
value: 268435456
|
|
state: present
|
|
|
|
# IPv6 disabled
|
|
|
|
- sysctl:
|
|
name: net.ipv6.conf.all.disable_ipv6
|
|
value: 1
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: net.ipv6.conf.default.disable_ipv6
|
|
value: 1
|
|
state: present
|
|
|
|
- sysctl:
|
|
name: net.ipv6.conf.lo.disable_ipv6
|
|
value: 1
|
|
state: present
|
|
|
|
- name: Install custom /etc/profile.d/zzz_iiab.sh from template
|
|
template:
|
|
dest: /etc/profile.d/zzz_iiab.sh
|
|
src: zzz_iiab.sh
|
|
owner: root
|
|
mode: 0644
|
|
backup: no
|
|
|
|
- include_tasks: net_mods.yml
|
|
when: not is_debuntu and not is_F18
|
|
|
|
- include_tasks: udev.yml
|
|
|
|
- include_tasks: iiab-startup.yml
|
|
|
|
- name: Recording STAGE 2 HAS COMPLETED ==========================
|
|
lineinfile:
|
|
dest: "{{ iiab_env_file }}"
|
|
regexp: '^STAGE=*'
|
|
line: 'STAGE=2'
|
|
state: present
|