ansible-personal/roles/common/tasks/main.yml

---
# not needed on OpenStack images...
#- name: Set hostname
#  hostname: name={{ inventory_hostname }}
#  tags: hostname
#
#- name: Add hostname to /etc/hosts
#  lineinfile: dest=/etc/hosts insertafter=^127.0.0.1 line='127.0.1.1       {{ inventory_hostname }}'
#  tags: hostname

- include: packages_Ubuntu.yml
  when: ansible_distribution == 'Ubuntu'
  tags: packages

- include: packages_Debian.yml
  when: ansible_distribution == 'Debian'
  tags: packages

- include: iptables_Ubuntu.yml
  when: ansible_distribution == 'Ubuntu'
  tags: firewall

- include: iptables_Debian.yml
  when: ansible_distribution == 'Debian'
  tags: firewall

- include: sshd.yml
  tags: sshd

# containers identify as virtualization hosts, which makes this tricky, because we have actual Debian VM hosts!
- name: Reconfigure /etc/sysctl.conf
  when: ansible_virtualization_role != 'host'
  template: src=sysctl_{{ ansible_distribution }}.j2 dest=/etc/sysctl.conf owner=root group=root mode=0644
  notify:
    - reload sysctl
  tags: sysctl

- name: Reconfigure /etc/rc.local
  when: ansible_distribution == 'Ubuntu'
  template: src=rc.local_{{ ansible_distribution }}.j2 dest=/etc/rc.local owner=root group=root mode=0755

- name: Set I/O scheduler
  template: src=etc/udev/rules.d/60-scheduler.rules.j2 dest=/etc/udev/rules.d/60-scheduler.rules owner=root group=root mode=0644
  tags: udev

- include: ssh-keys.yml
  tags: ssh-keys

# vim: set sw=2 ts=2:
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`---`
			`# not needed on OpenStack images...`
			`#- name: Set hostname`
			`# hostname: name={{ inventory_hostname }}`
			`# tags: hostname`
			`#`
			`#- name: Add hostname to /etc/hosts`
			`# lineinfile: dest=/etc/hosts insertafter=^127.0.0.1 line='127.0.1.1 {{ inventory_hostname }}'`
			`# tags: hostname`

			`- include: packages_Ubuntu.yml`
roles/common: Simplify `when` logic in main template Less syntax is more readable syntax. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:29:41 +01:00			`when: ansible_distribution == 'Ubuntu'`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`tags: packages`

roles/common: Add playbook for Debian packages Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-07-24 18:52:54 +02:00			`- include: packages_Debian.yml`
			`when: ansible_distribution == 'Debian'`
			`tags: packages`

roles/common: Separate firewalld tasks for Ubuntu and Debian Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-23 11:06:25 +02:00			`- include: iptables_Ubuntu.yml`
			`when: ansible_distribution == 'Ubuntu'`
			`tags: firewall`

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`- include: iptables_Debian.yml`
roles/common: Separate firewalld tasks for Ubuntu and Debian Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-23 11:06:25 +02:00			`when: ansible_distribution == 'Debian'`
roles/common: Move tags from subtask to main one Child tasks inherit the tag of the parent. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:33:48 +01:00			`tags: firewall`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00
roles/common: Move sshd tasks to their own playbook Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-22 23:00:43 +02:00			`- include: sshd.yml`
roles/common: Add DSA/ECDSA cleanup to ssh tasks We don't want to support these signature algorithms! Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-01-20 14:28:06 +01:00			`tags: sshd`

roles/common: Add sysctl template for Debian hosts Note: I've only tested this on a Debian container, and you can't set these sysctls on containers (the host controls them). To make matters worse, there is no fact to make ansible skip this on hosts that are running in containers. For now I will just skip it on hosts that are "virtualization" servers... even though we actually do have KVM running on Debian on real hardware. sigh Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-22 23:12:17 +02:00			`# containers identify as virtualization hosts, which makes this tricky, because we have actual Debian VM hosts!`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`- name: Reconfigure /etc/sysctl.conf`
roles/common: Add sysctl template for Debian hosts Note: I've only tested this on a Debian container, and you can't set these sysctls on containers (the host controls them). To make matters worse, there is no fact to make ansible skip this on hosts that are running in containers. For now I will just skip it on hosts that are "virtualization" servers... even though we actually do have KVM running on Debian on real hardware. sigh Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-22 23:12:17 +02:00			`when: ansible_virtualization_role != 'host'`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`template: src=sysctl_{{ ansible_distribution }}.j2 dest=/etc/sysctl.conf owner=root group=root mode=0644`
			`notify:`
roles/common: Indent some yaml stuff in main.yml Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:31:29 +01:00			`- reload sysctl`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`tags: sysctl`

			`- name: Reconfigure /etc/rc.local`
roles/common: Fix one logic mistake in rc.local task I think it was originally supposed to be `ansible_os_family` but we don't have anything other than Ubuntu, so let's just use that. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:43:21 +01:00			`when: ansible_distribution == 'Ubuntu'`
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`template: src=rc.local_{{ ansible_distribution }}.j2 dest=/etc/rc.local owner=root group=root mode=0755`

roles/common: Set I/O scheduler via udev All servers with non-rotating disks (SSDs) should be running noop, and the rest should be running deadline. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-03-15 15:52:05 +01:00			`- name: Set I/O scheduler`
			`template: src=etc/udev/rules.d/60-scheduler.rules.j2 dest=/etc/udev/rules.d/60-scheduler.rules owner=root group=root mode=0644`
			`tags: udev`

roles/common: Add functionality to copy user keys to provisioning user Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-10-11 11:13:45 +02:00			`- include: ssh-keys.yml`
			`tags: ssh-keys`

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`# vim: set sw=2 ts=2:`