alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
967 Commits 2 Branches 0 Tags 4.5 MiB
Commit Graph

65 Commits

Author SHA1 Message Date
Alan Orth 20dbe61fe1
roles/mariadb: use MariaDB 10.11 
The server has already been updated from 10.6 to 10.11.

See: https://mariadb.com/kb/en/upgrading-from-mariadb-10-6-to-mariadb-10-11/
 2023-09-10 22:53:10 +03:00
Alan Orth 06416a3b64
roles: run ansible-lint --write 2023-08-23 22:22:51 +03:00
Alan Orth f4b32e516b
roles/mariadb: use newer Ansible task syntax 2022-09-12 10:16:42 +03:00
Alan Orth fcb12ecee0
roles/mariadb: remove sources.list template 2022-09-12 10:13:27 +03:00
Alan Orth 5bc03ceacc
roles/mariadb: install packages in single transaction 
Using a list we can install these in a single apt transaction. Also
use the newer task format.
 2022-09-12 10:12:07 +03:00
Alan Orth c317429f6d
roles/mariadb: rework package signing key and repo 2022-09-12 10:09:41 +03:00
Alan Orth e3a87d4f79
roles/mariadb: MariaDB 10.6 
See: https://mariadb.com/kb/en/mariadb-1069-release-notes/
See: https://mariadb.com/kb/en/upgrading-from-mariadb-105-to-mariadb-106/
 2022-09-12 09:25:46 +03:00
Alan Orth ffe7a872dd
roles: strict truthy values 
According to Ansible we can use yes, true, True, "or any quoted st-
ring" for a boolean true, but ansible-lint wants us to use either
true or false.

See: https://chronicler.tech/red-hat-ansible-yes-no-and/
 2022-09-10 22:33:19 +03:00
Alan Orth 587bd6dcdd roles: use fully qualified module names 2022-09-10 18:35:27 +03:00
Alan Orth a2d61abba2
roles/mariadb: update mirror 
I started getting 'does not have a Release file' for the old repo-
sitory. Not sure why.
 2022-08-14 22:09:47 -07:00
Alan Orth 8467dc1300
roles/mariadb: Change socket location 
Instead of using /var/run, just use /run directly. This is the real
path and it's the default anyways.
 2021-09-08 15:50:48 +03:00
Alan Orth bd4ae36bb6
roles/mariadb: use socket for all operations 
Otherwise Ansible will try to connect with host 'localhost', which
we do not use (and we have disabled name resolution anyways).
 2021-09-07 16:48:15 +03:00
Alan Orth b60637c7d9
roles/mariadb: Update comments for Ansible module 2021-09-07 16:47:47 +03:00
Alan Orth db412066b3
roles/mariadb: Only create users on 127.0.0.1 and ::1 
A few months ago I disabled hostname lookups so only IP addresses
work now anyways.
 2021-02-13 13:11:28 +02:00
Alan Orth b0420d2adb
roles: Remove mentions of Piwik 
I never check the damn analytics stats and the database is huge.
 2021-01-06 09:00:18 +02:00
Alan Orth 1b75679496
roles/mariadb: The service is mariadb 2020-12-29 11:25:30 +02:00
Alan Orth ebf4a4c2ac
roles/mariadb: Disable name lookups 
Add skip-name-resolve=1 to disable lookups of hostnames to IPs. We
need to make sure all accounts are using IPs like 127.0.0.1 instead
of "localhost" now.
 2020-12-29 11:19:01 +02:00
Alan Orth 57a83cef26
roles/mariadb: Tweak temp table size 
mysqltuner.pl said:

    When making adjustments, make tmp_table_size/max_heap_table_size equal
 2020-12-29 11:10:31 +02:00
Alan Orth 8ee52143fc
roles/mariadb: Disable the query cache by default 
It seems that the usefulness of the query cache is diminishing in
recent years. If your cache is large then the time taken to scan
the cache can be longer than the SQL query itself.

See: https://haydenjames.io/mysql-query-cache-size-performance/
 2020-12-29 11:07:33 +02:00
Alan Orth 67a18c4f49
roles/mariadb: Reduce key buffer size 
mysqltuner.pl shows currently 6M out of 33M being used.
 2020-12-29 10:58:12 +02:00
Alan Orth b8428e67a8
roles/mariadb: Install MariaDB 10.5 2020-12-29 10:41:27 +02:00
Alan Orth e18529e6e1
roles/mariadb: Update service name 
As of MariaDB 10.5 the service name and binaries have changed from
mysql, mysqld, etc to mariadbd.

See: https://mariadb.com/kb/en/upgrading-from-mariadb-104-to-mariadb-105/
 2020-12-29 10:40:13 +02:00
Alan Orth 89db1449d1
roles/mariadb: Fetch signing key from mariadb.org 
I downloaded the key and checked the fingerprint with gpg:

    $ gpg --dry-run --import mariadb_release_signing_key.asc
    gpg: key F1656F24C74CD1D8: 6 signatures not checked due to missing keys
    gpg: Total number processed: 1
 2020-12-29 10:36:33 +02:00
Alan Orth 6660a0cd36
roles/mariadb: Remove innodb_buffer_pool_instances 
This was deprecated in MariaDB 10.5. The setting is now ignored and
will be removed in a future version.

See: https://mariadb.com/kb/en/changes-improvements-in-mariadb-105/#innodb-removed-or-deprecated-variables
 2020-12-29 10:18:23 +02:00
Alan Orth c9ea286fff
roles/mariadb: Simplify sources.list 2020-07-14 09:51:35 +03:00
Alan Orth a7231bcf5f
roles/mariadb: Remove login_unix_socket from .my.cnf 
It is causing an error at client runtime.
 2019-09-14 18:32:26 +03:00
Alan Orth 2fadb9029a
roles/mariadb: Use Unix socket for MariaDB tasks 
Otherwise Ansible fails due to PyMySQL using a TCP connection.

See: https://github.com/ansible/ansible/issues/47736
 2019-07-23 17:26:23 +03:00
Alan Orth 4fb2d48e10
roles/mariadb: Install MariaDB 10.4 
MariaDB 10.4 is now GA.

See: https://mariadb.com/kb/en/library/changes-improvements-in-mariadb-104/
See: https://mariadb.com/kb/en/library/upgrading-from-mariadb-103-to-mariadb-104/
 2019-07-05 20:39:17 +03:00
Alan Orth dc2e14a6a3
roles/mariadb: Use python3-pymysql for Ansible 
For Python 3 Ansible needs a different library to help with MySQL
tasks.
 2019-05-08 09:15:47 +03:00
Alan Orth 5957f5f2c5
roles: The apt cache_valid_time implies update_cache 
See: https://docs.ansible.com/ansible/latest/modules/apt_module.html
 2019-03-17 17:29:28 +02:00
Alan Orth c5b5cda3d3
Smarter updating of apt index during playbook execution 
We can register changes when adding repositories and keys and then
update the apt package index conditionally. This should make it be
more consistent between initial host setup and subsequent re-runs.
 2019-03-17 17:29:15 +02:00
Alan Orth bbab45ae6f
Adjust ansible_managed to use comment filter 
We don't need to comment the ansible_managed block manually.
 2019-01-10 12:50:54 +02:00
Alan Orth da615fb368
roles/mariadb: Update my.cnf template 
Sync from upstream's provided my.cnf.
 2018-07-29 16:43:56 +03:00
Alan Orth b47f66512d
roles/mariadb: Use MariaDB 10.3 
Also disables the fetching of i386 packages because the mirror does
not appear to have them anymore (and I wasn't using them anyways).
 2018-07-29 16:23:24 +03:00
Alan Orth c29d37c159
roles/mariadb: Use German mirror 2018-05-20 12:05:35 +03:00
Alan Orth 314a33d37c
Use official MariaDB builds for Ubuntu bionic 
We had been using the Ubuntu 17.10 "artful" builds for Ubuntu 18.04
"bionic" but there are now official bionic builds.
 2018-05-19 23:12:35 +03:00
Alan Orth 632aa1cf14 Fix a few more Jinja2 filters used as tests 
I had created these earlier in this branch before rebasing it on top
of the Ansible 2.5.0 readiness branch.

See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
 2018-04-05 12:17:26 +03:00
Alan Orth d1ba60e15d Use version_compare to test for Ubuntu 18.04 "bionic" 
It just feels more correct, plus I usually forget the release code
name from time to time.
 2018-04-05 12:17:26 +03:00
Alan Orth 6c093801c4 roles/mariadb: Use Ubuntu 17.10's packages on Ubuntu 18.04 
There are no mariadb packages for Ubuntu 18.04 "bionic" yet so we
should use Ubuntu 17.10 "artful".
 2018-04-05 12:17:25 +03:00
Alan Orth 57120308dc
Update with_items loops to use new-ish "loop" keyword 
Ansible 2.4 and 2.5 are moving away from specialized loop functions
and the old syntax will eventually be deprecated and removed. I did
not change the with_fileglob loops because I'm not sure about their
syntax yet.

See: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html
 2018-04-02 15:52:51 +03:00
Alan Orth 58598f470c
roles/mariadb: Remove start/enable task 
After installation the mariadb service is started and enabled, so we
don't need to do that explicitly.
 2017-11-05 00:28:07 +02:00
Alan Orth 7aafa1553b roles/mariadb: Use systemd module instead of service 2017-11-05 00:27:44 +02:00
Alan Orth 0e409792ca
roles/mariadb: Update comment with link to MySQL module docs 2017-11-05 00:26:32 +02:00
Alan Orth a38e2a4ff6
roles/mariadb: Use MariaDB 10.2 from vendor repo 
I can't remember right now why I needed to use Debian's MariaDB build
but now I just want to use upstream's latest stable. Debian's version
is 10.1 and upstream has moved on to 10.2.
 2017-09-26 15:15:27 +03:00
Alan Orth 47407188cb
roles/mariadb: Use Debian's MariaDB packages for now 
MariaDB actually already has Debian 9 (stretch) packages, but they
seem to cause issues with how I'm deploying. I'll skip them for now
I think.
 2017-01-30 16:54:22 +02:00
Alan Orth 8851f8f631 Revert "Only update packages indexes if the cache is 1 hour old" 
This reverts commit 201165cff6.

Turns out this actually breaks initial deployments, because the
cache gets updated in the first task, then you add sources for
nginx and mariadb, but it doesn't update the indexes because the
cache is < 3600 seconds old, so you end up getting the distro's
versions of nginx and mariadb.
 2016-08-25 12:58:15 +03:00
Alan Orth bd318c5754
Use long GPG key id fingerprints 2016-08-22 16:30:20 +03:00
Alan Orth c9ef9e24f5
Use https:// for fetching apt package signing keys 
I don't know why I wasn't using these before.
 2016-08-22 16:06:13 +03:00
Alan Orth 96500a6e33
roles/mariadb: Use Ubuntu 16.04 (xenial) builds 
When I originally deployed Ubuntu 16.04 there were no public xenial
MariaDB builds yet, so I used wily (15.10). Now there are official
xenial builds so we can use them instead.
 2016-08-22 16:00:45 +03:00
Alan Orth 201165cff6
Only update packages indexes if the cache is 1 hour old 
I have added cache_valid_time=3600 for the first task in each
tag that could be possibly running apt-related commands. For ex,
the "nginx" tag is also in the "packages" tag, but sometimes you
run the nginx tag by itself (perhaps repeatadely), so you'd want
to limit the update unless the cache was 1 hour old
 2016-08-22 15:33:57 +03:00