[ansible] Add nm_controllect_resolv
by Nicolas Chauvet
commit f22a3483c94e0f286eba9e1f58255bd94bfeed9f
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 21:17:29 2024 +0200
Add nm_controllect_resolv
inventory/group_vars/buildvm | 1 +
.../aarch64-jetson-orin.home.rpmfusion.net | 1 +
.../host_vars/buildvm-01.online.rpmfusion.net | 1 +
.../host_vars/buildvm-02.online.rpmfusion.net | 1 +
4 files changed, 4 insertions(+), 0 deletions(-)
---
diff --git a/inventory/group_vars/buildvm b/inventory/group_vars/buildvm
index 73c8fbd..fe18a91 100644
--- a/inventory/group_vars/buildvm
+++ b/inventory/group_vars/buildvm
@@ -6,6 +6,7 @@ mem_size: 4096
num_cpus: 2
ks_url: http://192.168.181.254/install/ks/buildvm-01.ks
ks_repo: http://dl.fedoraproject.org/pub/fedora/linux/releases/27/Server/x86_64/os/
+ansible_ifcfg_blocklist: false
nm: 255.255.255.0
gw: 192.168.181.254
dns: 8.8.8.8
diff --git a/inventory/host_vars/aarch64-jetson-orin.home.rpmfusion.net b/inventory/host_vars/aarch64-jetson-orin.home.rpmfusion.net
index 068e3f1..9036c8e 100644
--- a/inventory/host_vars/aarch64-jetson-orin.home.rpmfusion.net
+++ b/inventory/host_vars/aarch64-jetson-orin.home.rpmfusion.net
@@ -2,3 +2,4 @@
datacenter: home
ansible_ifcfg_blocklist: true
nm_controlled_resolv: true
+ansible_ifcfg_blocklist: true
diff --git a/inventory/host_vars/buildvm-01.online.rpmfusion.net b/inventory/host_vars/buildvm-01.online.rpmfusion.net
index effde90..fceb089 100644
--- a/inventory/host_vars/buildvm-01.online.rpmfusion.net
+++ b/inventory/host_vars/buildvm-01.online.rpmfusion.net
@@ -1,5 +1,6 @@
---
vmhost: hv01.online.rpmfusion.net
+nm_controlled_resolv: true
eth0_ip: 192.168.181.101
ks_url: http://192.168.181.254/install/ks/buildvm-01.ks
diff --git a/inventory/host_vars/buildvm-02.online.rpmfusion.net b/inventory/host_vars/buildvm-02.online.rpmfusion.net
index a9615a8..0b183ce 100644
--- a/inventory/host_vars/buildvm-02.online.rpmfusion.net
+++ b/inventory/host_vars/buildvm-02.online.rpmfusion.net
@@ -1,5 +1,6 @@
---
vmhost: hv01.online.rpmfusion.net
+nm_controlled_resolv: true
eth0_ip: 192.168.181.102
ks_url: http://192.168.181.254/install/ks/buildvm-02.ks
2 months
[ansible] Comment out sysadmin-main for now
by Nicolas Chauvet
commit 0b78722674b41b897076566344f0a464bf950671
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 21:17:01 2024 +0200
Comment out sysadmin-main for now
files/virthost/libvirtd.conf | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/files/virthost/libvirtd.conf b/files/virthost/libvirtd.conf
index e36ce0a..018b48e 100644
--- a/files/virthost/libvirtd.conf
+++ b/files/virthost/libvirtd.conf
@@ -1,3 +1,3 @@
-unix_sock_group = "sysadmin-main"
+#unix_sock_group = "sysadmin-main"
unix_sock_rw_perms = "0770"
auth_unix_rw = "none"
2 months
[ansible] Rework builders
by Nicolas Chauvet
commit 42497341e56bebecacc281ed24e22083aafc2a46
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 18:51:36 2024 +0200
Rework builders
inventory/builders | 9 ++++++---
1 files changed, 6 insertions(+), 3 deletions(-)
---
diff --git a/inventory/builders b/inventory/builders
index e649963..128cd68 100644
--- a/inventory/builders
+++ b/inventory/builders
@@ -1,8 +1,10 @@
-[buildhw_aarch64]
+[buildhw_aarch64_linaro]
#aarch64-01.linaro.rpmfusion.net ansible_user=fedora ansible_become=yes ansible_python_interpreter=/usr/bin/python3
#aarch64-02.linaro.rpmfusion.net ansible_user=fedora ansible_become=yes ansible_python_interpreter=/usr/bin/python3
aarch64-03.linaro.rpmfusion.net ansible_user=fedora ansible_become=yes ansible_python_interpreter=/usr/bin/python3
aarch64-04.linaro.rpmfusion.net ansible_user=fedora ansible_become=yes ansible_python_interpreter=/usr/bin/python3
+
+[buildhw_aarch64_home]
aarch64-jetson-tx1.home.rpmfusion.net
aarch64-jetson-orin.home.rpmfusion.net
@@ -29,7 +31,7 @@ buildppcle-02.osuosl.rpmfusion.net ansible_user=fedora ansible_become=yes
[linaro:children]
-buildhw_aarch64
+buildhw_aarch64_linaro
[osuosl:children]
buildhw_ppc64
@@ -42,7 +44,8 @@ buildvm
[buildhw:children]
buildhw_ppc64
buildhw_ppc64le
-buildhw_aarch64
+buildhw_aarch64_linaro
+buildhw_aarch64_home
[buildvm:children]
buildvm_aarch64
2 months
[ansible] Add builders repos
by Nicolas Chauvet
commit 2ab89ee49cdd3aaa5611d01f9b349c5096604580
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 17:33:01 2024 +0200
Add builders repos
...edorainfracloud.org:kwizart:infrastructure.repo | 10 ++++++++++
roles/koji_builder/files/infra-builders.repo | 5 +++++
roles/koji_builder/tasks/main.yml | 10 ++++++++++
3 files changed, 25 insertions(+), 0 deletions(-)
---
diff --git a/roles/koji_builder/files/_copr:copr.fedorainfracloud.org:kwizart:infrastructure.repo b/roles/koji_builder/files/_copr:copr.fedorainfracloud.org:kwizart:infrastructure.repo
new file mode 100644
index 0000000..3b09e7a
--- /dev/null
+++ b/roles/koji_builder/files/_copr:copr.fedorainfracloud.org:kwizart:infrastructure.repo
@@ -0,0 +1,10 @@
+[copr:copr.fedorainfracloud.org:kwizart:infrastructure]
+name=Copr repo for infrastructure owned by kwizart
+baseurl=https://download.copr.fedorainfracloud.org/results/kwizart/infrastructure/fedora-$releasever-$basearch/
+type=rpm-md
+skip_if_unavailable=True
+gpgcheck=1
+gpgkey=https://download.copr.fedorainfracloud.org/results/kwizart/infrastructure/pubkey.gpg
+repo_gpgcheck=0
+enabled=1
+enabled_metadata=1
diff --git a/roles/koji_builder/files/infra-builders.repo b/roles/koji_builder/files/infra-builders.repo
new file mode 100644
index 0000000..9d7fd00
--- /dev/null
+++ b/roles/koji_builder/files/infra-builders.repo
@@ -0,0 +1,5 @@
+[infra-builders]
+name=RPM Fusion - Free - Infra builders
+baseurl=https://koji.rpmfusion.org/buildsys-override/infra-builders/$basearch/
+enabled=1
+gpgcheck=0
diff --git a/roles/koji_builder/tasks/main.yml b/roles/koji_builder/tasks/main.yml
index 0b6967a..053d1af 100644
--- a/roles/koji_builder/tasks/main.yml
+++ b/roles/koji_builder/tasks/main.yml
@@ -70,6 +70,16 @@
tags:
- koji_builder
+- name: Install some builders repositories
+ copy:
+ src: infra-builders.repo
+ dest: /etc/yum.repos.d/infra-builders.repo
+ with_items:
+ - infra-builders.repo
+ - _copr\:copr.fedorainfracloud.org\:kwizart\:infrastructure.repo
+ tags:
+ - koji_builder
+
- name: add pkgs
package:
state: present
2 months
[ansible] Update koji_builders
by Nicolas Chauvet
commit ee97ddac7b8a19616ccd44964cda668eed0c6b9e
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 17:53:13 2024 +0200
Update koji_builders
roles/koji_builder/tasks/main.yml | 6 ++++--
roles/koji_builder/templates/oz.cfg.j2 | 18 ++++++++++++------
2 files changed, 16 insertions(+), 8 deletions(-)
---
diff --git a/roles/koji_builder/tasks/main.yml b/roles/koji_builder/tasks/main.yml
index c60ebe0..0b6967a 100644
--- a/roles/koji_builder/tasks/main.yml
+++ b/roles/koji_builder/tasks/main.yml
@@ -88,6 +88,8 @@
- pycdio
- python3-kickstart
- libvirt-client
+ - oz
+ - imagefactory
- pykickstart
- nosync
tags:
@@ -198,6 +200,7 @@
template: src=oz.cfg.j2 dest=/etc/oz/oz.cfg
tags:
- koji_builder
+ - koji_builder/oz.cfg
# install libvirtd.conf
#
@@ -286,7 +289,6 @@
tags:
- koji_builder
- selinux
- when: ansible_architecture != 'armv7l' and ansible_architecture != 'aarch64'
- name: Create directory for shared secrets
file:
@@ -328,7 +330,7 @@
tags:
- koji_builder
- koji_builder/rngd
- when: ansible_architecture != 's390x'
+ when: ansible_architecture != 's390x' and ansible_architecture != 'ppc64le'
- name: disable systemd-oomd we do not need or want it
systemd: name=systemd-oomd state=stopped enabled=no masked=true
diff --git a/roles/koji_builder/templates/oz.cfg.j2 b/roles/koji_builder/templates/oz.cfg.j2
index 33a76e4..aac5f7d 100644
--- a/roles/koji_builder/templates/oz.cfg.j2
+++ b/roles/koji_builder/templates/oz.cfg.j2
@@ -9,12 +9,13 @@ uri = qemu:///system
image_type = raw
# type = kvm
# bridge_name = virbr0
-{% if ansible_architecture == 'armv7l' or ansible_architecture == 'aarch64' %}
-cpus = 1
-memory = 1024
-{% else %}
-cpus = 2
-memory = 3096
+{% if ansible_architecture == 'ppc64le' or ansible_architecture == 'aarch64' %}
+cpus = 4
+memory = 4096
+{% endif %}
+{% if ansible_architecture == 'x86_64' %}
+cpus = 6
+memory = 8192
{% endif %}
[cache]
@@ -25,3 +26,8 @@ jeos = no
[icicle]
safe_generation = no
+[timeouts]
+install = 14400
+inactivity = 450
+boot = 300
+shutdown = 90
2 months
[ansible] Update all from fedora
by Nicolas Chauvet
commit 07977d484b5a7bc838744a46e3116ff0a3e90151
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 17:51:50 2024 +0200
Update all from fedora
inventory/group_vars/all | 40 +++++++++++++++++++---------------------
1 files changed, 19 insertions(+), 21 deletions(-)
---
diff --git a/inventory/group_vars/all b/inventory/group_vars/all
index 2406880..7871a96 100644
--- a/inventory/group_vars/all
+++ b/inventory/group_vars/all
@@ -5,7 +5,14 @@
# Background/reference about external repos pulled in:
# https://pagure.io/fedora-infrastructure/issue/5476
#
+# IPA settings
+additional_host_keytabs: []
ansible_base: /srv/web/infra
+# Default to managing the network, we want to not do this on select
+# hosts (like cloud nodes)
+# List of interfaces to explicitly disable
+ansible_ifcfg_disabled: []
+
# Path to the openshift-ansible checkout as external git repo brought into
# Fedora Infra
@@ -63,7 +70,18 @@ lvm_size: 20000
# on openqa-ppc64le-01.qa it's eth2 for some reason, and on qa01.qa and
# qa02.qa it's em3. currently this only affects whether GATEWAY, DOMAIN
# and DNS1/DNS2 lines are put into ifcfg-(device).
-ansible_ifcfg_infra_net_devices: [ 'eth0', 'enc900' ]
+ansible_ifcfg_infra_net_devices: ['eth0', 'enc900']
+#
+# Autodetect python version
+#
+ansible_python_interpreter: auto
+# Set variable if we want to use our global iptables defaults
+# Some things need to set their own.
+baseiptables: True
+# by default set become to false here We can override it as needed.
+# Note that if become is true, you need to unset requiretty for
+# ssh controlpersist to work.
+become: false
# Default netmask. Almost all our phx2 nets are /24's with the
# exception of 10.5.124.128/25. Almost all of our non phx2 sites are
@@ -74,11 +92,6 @@ br0_nm: 255.255.255.0
br1_nm: 255.255.255.0
nm: 255.255.255.0
-# Default to managing the network, we want to not do this on select
-# hosts (like cloud nodes)
-ansible_ifcfg_blocklist: false
-# List of interfaces to explicitly disable
-ansible_ifcfg_disabled: []
#
# The default virt-install works for rhel7 or fedora with 1 nic
#
@@ -334,11 +347,6 @@ env_short: prod
# nfs mount options, override at the group/host level
nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
-# by default set become to false here We can override it as needed.
-# Note that if become is true, you need to unset requiretty for
-# ssh controlpersist to work.
-become: false
-
# default the root_auth_users to nothing.
# This should be set for cloud instances in their host or group vars.
root_auth_users: ''
@@ -363,7 +371,6 @@ csi_relationship: |
wsgi_wants_apache: true
# IPA settings
-additional_host_keytabs: []
ipa_server: ipa01.online.rpmfusion.org
ipa_realm: RPMFUSION.ORG
ipa_server_nodes:
@@ -404,10 +411,6 @@ nagios_Check_Services:
nagios_Can_Connect: true
-# Set variable if we want to use our global iptables defaults
-# Some things need to set their own.
-baseiptables: True
-
# Most of our machines have manual resolv.conf files
# These settings are for machines where NM is supposed to control resolv.conf.
nm_controlled_resolv: False
@@ -433,11 +436,6 @@ redirectmatch_enabled: True
# rpmfusion sane default:
sshd_sftp: true
-#
-# Autodetect python version
-#
-ansible_python_interpreter: auto
-
# set no x-forward header by default
x_forward: false
2 months
[ansible] Add ansible.cfg
by Nicolas Chauvet
commit e3001aeb6b2f4c8c2453506845080d63c7ba300d
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 17:44:21 2024 +0200
Add ansible.cfg
ansible.cfg | 276 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 files changed, 276 insertions(+), 0 deletions(-)
---
diff --git a/ansible.cfg b/ansible.cfg
new file mode 100644
index 0000000..5bc679e
--- /dev/null
+++ b/ansible.cfg
@@ -0,0 +1,276 @@
+# config file for ansible -- http://ansible.com/
+# ==============================================
+
+# nearly all parameters can be overridden in ansible-playbook
+# or with command line flags. ansible will read ANSIBLE_CONFIG,
+# ansible.cfg in the current working directory, .ansible.cfg in
+# the home directory or /etc/ansible/ansible.cfg, whichever it
+# finds first
+
+[defaults]
+
+# some basic default values...
+
+interpreter_python = auto
+
+hostfile = /srv/web/infra/ansible/inventory
+library = /srv/web/infra/ansible/library:/usr/share/ansible
+#remote_tmp = $HOME/.ansible/tmp
+pattern = *
+forks = 125
+poll_interval = 15
+#sudo_user = root
+#ask_sudo_pass = True
+#ask_pass = True
+#transport = smart
+#remote_port = 22
+#module_lang = C
+
+# We don't always want to be required to specify a name to get useful info
+# https://github.com/ansible/ansible/issues/14554
+display_args_to_stdout = True
+
+# plays will gather facts by default, which contain information about
+# the remote system.
+#
+# smart - gather by default, but don't regather if already gathered
+# implicit - gather by default, turn off with gather_facts: False
+# explicit - do not gather by default, must say gather_facts: True
+gathering = smart
+
+# additional paths to search for roles in, colon separated
+roles_path = /srv/web/infra/ansible/roles:/srv/web/infra/openshift-ansible/roles
+
+# uncomment this to disable SSH key host checking
+#host_key_checking = False
+
+# change the default callback
+#stdout_callback = skippy
+# enable additional callbacks
+callback_whitelist = profile_tasks,logdetail
+
+# Determine whether includes in tasks and handlers are "static" by
+# default. As of 2.0, includes are dynamic by default. Setting these
+# values to True will make includes behave more like they did in the
+# 1.x versions.
+#task_includes_static = True
+handler_includes_static = True
+
+# change this for alternative sudo implementations
+#sudo_exe = sudo
+
+# What flags to pass to sudo
+# WARNING: leaving out the defaults might create unexpected behaviours
+#sudo_flags = -H -S -n
+
+# SSH timeout
+timeout = 60
+
+# default user to use for playbooks if user is not specified
+# (/usr/bin/ansible will use current user as default)
+#remote_user = root
+
+# logging is off by default unless this path is defined
+# if so defined, consider logrotate
+#log_path = /var/log/ansible.log
+
+# default module name for /usr/bin/ansible
+#module_name = command
+
+# use this shell for commands executed under sudo
+# you may need to change this to bin/bash in rare instances
+# if sudo is constrained
+#executable = /bin/sh
+
+# if inventory variables overlap, does the higher precedence one win
+# or are hash values merged together? The default is 'replace' but
+# this can also be set to 'merge'.
+#hash_behaviour = replace
+
+# by default, variables from roles will be visible in the global variable
+# scope. To prevent this, the following option can be enabled, and only
+# tasks and handlers within the role will see the variables there
+#private_role_vars = yes
+
+# list any Jinja2 extensions to enable here:
+#jinja2_extensions = jinja2.ext.do,jinja2.ext.i18n
+
+# if set, always use this private key file for authentication, same as
+# if passing --private-key to ansible or ansible-playbook
+#private_key_file = /path/to/file
+
+# format of string Ansible managed: /srv/web/infra/ansible/roles/ansible-server/templates/ansible.cfg.j2 modified on 2016-11-08 19:37:16 by kwizart on hv01.online.rpmfusion.net available within Jinja2
+# templates indicates to users editing templates files will be replaced.
+# replacing {file}, {host} and {uid} and strftime codes with proper values.
+ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
+# This short version is better used in templates as it won't flag the file as changed every run.
+#ansible_managed = Ansible managed: {file} on {host}
+
+# by default, ansible-playbook will display "Skipping [host]" if it determines a task
+# should not be run on a host. Set this to "False" if you don't want to see these "Skipping"
+# messages. NOTE: the task header will still be shown regardless of whether or not the
+# task is skipped.
+#display_skipped_hosts = True
+
+# by default (as of 1.3), Ansible will raise errors when attempting to dereference
+# Jinja2 variables that are not set in templates or action lines. Uncomment this line
+# to revert the behavior to pre-1.3.
+#error_on_undefined_vars = False
+
+# by default (as of 1.6), Ansible may display warnings based on the configuration of the
+# system running ansible itself. This may include warnings about 3rd party packages or
+# other conditions that should be resolved if possible.
+# to disable these warnings, set the following value to False:
+#system_warnings = True
+
+# by default (as of 1.4), Ansible may display deprecation warnings for language
+# features that should no longer be used and will be removed in future versions.
+# to disable these warnings, set the following value to False:
+#deprecation_warnings = True
+
+# (as of 1.8), Ansible can optionally warn when usage of the shell and
+# command module appear to be simplified by using a default Ansible module
+# instead. These warnings can be silenced by adjusting the following
+# setting or adding warn=yes or warn=no to the end of the command line
+# parameter string. This will for example suggest using the git module
+# instead of shelling out to the git command.
+# command_warnings = False
+
+# set plugin path directories here, seperate with colons
+action_plugins = /srv/web/infra/ansible/action_plugins:/usr/share/ansible_plugins/action_plugins
+callback_plugins = /srv/web/infra/ansible/callback_plugins:/usr/share/ansible_plugins/callback_plugins
+connection_plugins = /srv/web/infra/ansible/connection_plugins:/usr/share/ansible_plugins/connection_plugins
+lookup_plugins = /srv/web/infra/ansible/lookup_plugins:/usr/share/ansible_plugins/lookup_plugins
+vars_plugins = /srv/web/infra/ansible/vars_plugins:/usr/share/ansible_plugins/vars_plugins
+filter_plugins = /srv/web/infra/ansible/filter_plugins:/usr/share/ansible_plugins/filter_plugins
+
+# by default callbacks are not loaded for /bin/ansible, enable this if you
+# want, for example, a notification or logging callback to also apply to
+# /bin/ansible runs
+#bin_ansible_callbacks = False
+
+
+# don't like cows? that's unfortunate.
+# set to 1 if you don't want cowsay support or export ANSIBLE_NOCOWS=1
+#nocows = 1
+
+# set which cowsay stencil you'd like to use by default. When set to 'random',
+# a random stencil will be selected for each task. The selection will be filtered
+# against the `cow_whitelist` option below.
+#cow_selection = default
+#cow_selection = random
+
+# when using the 'random' option for cowsay, stencils will be restricted to this list.
+# it should be formatted as a comma-separated list with no spaces between names.
+# NOTE: line continuations here are for formatting purposes only, as the INI parser
+# in python does not support them.
+#cow_whitelist=bud-frogs,bunny,cheese,daemon,default,dragon,elephant-in-snake,elephant,eyes,\
+# hellokitty,kitty,luke-koala,meow,milk,moofasa,moose,ren,sheep,small,stegosaurus,\
+# stimpy,supermilker,three-eyes,turkey,turtle,tux,udder,vader-koala,vader,www
+
+# don't like colors either?
+# set to 1 if you don't want colors, or export ANSIBLE_NOCOLOR=1
+#nocolor = 1
+
+# if set to a persistent type (not 'memory', for example 'redis') fact values
+# from previous runs in Ansible will be stored. This may be useful when
+# wanting to use, for example, IP information from one group of servers
+# without having to talk to them in the same playbook run to get their
+# current IP information.
+#fact_caching = memory
+
+
+# retry files
+# When a playbook fails by default a .retry file will be created in ~/
+# You can disable this feature by setting retry_files_enabled to False
+# and you can change the location of the files by setting retry_files_save_path
+
+retry_files_enabled = False
+#retry_files_save_path = ~/.ansible-retry
+
+
+# prevents logging of task data, off by default
+#no_log = False
+
+# prevents logging of tasks, but only on the targets, data is still logged on the master/controller
+#no_target_syslog = False
+
+# controls the compression level of variables sent to
+# worker processes. At the default of 0, no compression
+# is used. This value must be an integer from 0 to 9.
+#var_compression_level = 9
+
+[privilege_escalation]
+#become=True
+#become_method=sudo
+#become_user=root
+#become_ask_pass=False
+
+[paramiko_connection]
+
+# uncomment this line to cause the paramiko connection plugin to not record new host
+# keys encountered. Increases performance on new host additions. Setting works independently of the
+# host key checking setting above.
+#record_host_keys=False
+
+# by default, Ansible requests a pseudo-terminal for commands executed under sudo. Uncomment this
+# line to disable this behaviour.
+#pty=False
+
+[ssh_connection]
+
+# ssh arguments to use
+# Leaving off ControlPersist will result in poor performance, so use
+# paramiko on older platforms rather than removing it
+#ssh_args = -o ControlMaster=auto -o ControlPersist=60s
+
+# The path to use for the ControlPath sockets. This defaults to
+# "%(directory)s/ansible-ssh-%%h-%%p-%%r", however on some systems with
+# very long hostnames or very long path names (caused by long user names or
+# deeply nested home directories) this can exceed the character limit on
+# file socket names (108 characters for most platforms). In that case, you
+# may wish to shorten the string below.
+#
+# Example:
+# control_path = %(directory)s/%%h-%%r
+# control_path = %(directory)s/ansible-ssh-%%h-%%p-%%r
+
+# Enabling pipelining reduces the number of SSH operations required to
+# execute a module on the remote server. This can result in a significant
+# performance improvement when enabled, however when using "sudo:" you must
+# first disable 'requiretty' in /etc/sudoers
+#
+# By default, this option is disabled to preserve compatibility with
+# sudoers configurations that have requiretty (the default on many distros).
+#
+pipelining = True
+
+# if True, make ansible use scp if the connection type is ssh
+# (default is sftp)
+scp_if_ssh = True
+
+# if False, sftp will not use batch mode to transfer files. This may cause some
+# types of file transfer failures impossible to catch however, and should
+# only be disabled if your sftp version has problems with batch mode
+#sftp_batch_mode = False
+
+[accelerate]
+#accelerate_port = 5099
+#accelerate_timeout = 30
+#accelerate_connect_timeout = 5.0
+
+# The daemon timeout is measured in minutes. This time is measured
+# from the last activity to the accelerate daemon.
+#accelerate_daemon_timeout = 30
+
+# If set to yes, accelerate_multi_key will allow multiple
+# private keys to be uploaded to it, though each user must
+# have access to the system via SSH to add a new key. The default
+# is "no".
+#accelerate_multi_key = yes
+
+[selinux]
+# file systems that require special treatment when dealing with security context
+# the default behaviour that copies the existing context or uses the user default
+# needs to be changed to use the file system dependent context.
+#special_context_filesystems=nfs,vboxsf,fuse,ramfs
2 months
[ansible] Update callback
by Nicolas Chauvet
commit 6cdaf30da64e9e12224fd0d93c90636d4020f957
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Oct 18 17:43:53 2024 +0200
Update callback
callback_plugins/logdetail.py | 4 +-
callback_plugins/logdetail2.py | 278 ----------------------------------------
2 files changed, 2 insertions(+), 280 deletions(-)
---
diff --git a/callback_plugins/logdetail.py b/callback_plugins/logdetail.py
index 902ecad..21aa97c 100644
--- a/callback_plugins/logdetail.py
+++ b/callback_plugins/logdetail.py
@@ -60,7 +60,7 @@ MSG_FORMAT = "%(now)s\t%(count)s\t%(category)s\t%(name)s\t%(data)s\n"
def getlogin():
try:
user = os.getlogin()
- except OSError as e:
+ except OSError:
user = pwd.getpwuid(os.geteuid())[0]
return user
@@ -75,7 +75,7 @@ class LogMech(object):
self.logpath = logpath
if not os.path.exists(self.logpath):
try:
- os.makedirs(self.logpath, mode=0750)
+ os.makedirs(self.logpath, mode=0o750)
except OSError as e:
if e.errno != 17:
raise
2 months