move koji/make_builder to koji_buildvm group playbook
This commit is contained in:
parent
9e3c081606
commit
0bea0f922f
2 changed files with 0 additions and 196 deletions
|
|
@ -1,196 +0,0 @@
|
|||
- hosts:
|
||||
- buildvm-*
|
||||
- buildhw-*
|
||||
- bkernel*
|
||||
- arm*
|
||||
user: root
|
||||
|
||||
vars_files:
|
||||
- /srv/web/infra/ansible/vars/global.yml
|
||||
- ${private}/vars.yml
|
||||
tags:
|
||||
- builder_setup
|
||||
|
||||
tasks:
|
||||
- name: enforce certain packages previously assumed from kickstarts
|
||||
action: yum name=$item state=installed
|
||||
with_items:
|
||||
- postfix
|
||||
- joe
|
||||
- perl
|
||||
|
||||
- name: set root passwd
|
||||
action: user name=root password=$builder_rootpw state=present
|
||||
- name: add mock user as 425
|
||||
action: user name=mock uid=425 state=present home=/var/lib/mock createhome=yes system=yes
|
||||
- name: make mock homedir perms
|
||||
action: file state=directory path=/var/lib/mock mode=2775 owner=root group=mock
|
||||
- name: add mock ssh dir
|
||||
action: file state=directory path=/var/lib/mock/.ssh mode=700 owner=mock group=mock
|
||||
|
||||
# FIXME - authkeys
|
||||
- name: add mock ssh keys
|
||||
action: copy src=$configs/mock_auth_keys dest=/var/lib/mock/.ssh/authorized_keys mode=640 owner=mock group=mock
|
||||
|
||||
- name: add kojibuilder
|
||||
action: user name=kojibuilder groups=mock
|
||||
- name: add mockbuilder
|
||||
action: user name=mockbuilder groups=mock
|
||||
- name: mockbuilder .ssh dir
|
||||
action: file state=directory path=/home/mockbuilder/.ssh mode=700 owner=mockbuilder group=mockbuilder
|
||||
|
||||
# FIXME authkeys
|
||||
- name: mockbuilder ssh key
|
||||
action: copy src=$configs/ftbfs_auth_keys dest=/home/mockbuilder/.ssh/authorized_keys mode=644 owner=mockbuilder group=mockbuilder
|
||||
- name: iptables
|
||||
action: copy src=$configs/iptables dest=/etc/sysconfig/iptables mode=600
|
||||
notify:
|
||||
- restart iptables
|
||||
- name: sshd_config
|
||||
action: copy src=$configs/sshd_config dest=/etc/ssh/sshd_config mode=600
|
||||
notify:
|
||||
- restart sshd
|
||||
- name: /etc/resolv.conf
|
||||
action: copy src=$configs/resolv.conf dest=/etc/resolv.conf
|
||||
|
||||
- name: add to hosts
|
||||
action: fileline file=/etc/hosts present="$item"
|
||||
with_items:
|
||||
- '10.5.125.63 koji.fedoraproject.org'
|
||||
- '10.5.125.36 kojipkgs.fedoraproject.org'
|
||||
- '10.5.126.23 infrastructure.fedoraproject.org'
|
||||
- '10.5.124.138 arm.koji.fedoraproject.org'
|
||||
- '10.5.125.44 pkgs.fedoraproject.org pkgs'
|
||||
- '66.35.62.166 mirrors.fedoraproject.org'
|
||||
- name: rsyslog.conf
|
||||
action: copy src=$configs/rsyslog.conf dest=/etc/rsyslog.conf mode=644
|
||||
- name: /etc/postfix/main.cf
|
||||
action: copy src=$configs/postfix/main.cf dest=/etc/postfix/main.cf
|
||||
- name: make a bunch of dirs
|
||||
action: file state=directory path=$item
|
||||
with_items:
|
||||
- /pub
|
||||
- /mnt/koji
|
||||
- /pub/fedora
|
||||
- /pub/epel
|
||||
- /var/spool/rsyslog
|
||||
- name: add builder infra yum repo
|
||||
action: copy src=$configs/builder-infrastructure.repo dest=/etc/yum.repos.d/builder-infrastructure.repo
|
||||
|
||||
- name: remove include= from yum.conf for now
|
||||
action: command /usr/bin/perl -pi -e "s/include=.*//g;" /etc/yum.conf
|
||||
|
||||
- name: clean up packages we do not need
|
||||
action: yum state=removed pkg=$item
|
||||
with_items:
|
||||
- audit
|
||||
- 'cronie\*'
|
||||
- name: add pkgs
|
||||
action: yum state=installed pkg=$item
|
||||
with_items:
|
||||
- yum-utils
|
||||
- koji-builder
|
||||
- strace
|
||||
- mock
|
||||
- nfs-utils
|
||||
- kernel-firmware
|
||||
- ntp
|
||||
- ntpdate
|
||||
tags:
|
||||
- installed_packages
|
||||
|
||||
- name: update latest
|
||||
action: command /usr/bin/yum -y update
|
||||
- name: /etc/kojid/kojid.conf
|
||||
action: copy src=$configs/kojid.conf dest=/etc/kojid/kojid.conf
|
||||
only_if: "not '${ansible_fqdn}'.startswith('arm')"
|
||||
- name: arm /etc/kojid/kojid.conf
|
||||
action: copy src=$configs/arm-kojid.conf dest=/etc/kojid/kojid.conf
|
||||
only_if: "'${ansible_fqdn}'.startswith('arm')"
|
||||
- name: /etc/koji/koji.conf
|
||||
action: copy src=$configs/koji.conf dest=/etc/koji.conf
|
||||
only_if: "not '${ansible_fqdn}'.startswith('arm')"
|
||||
- name: /etc/koji/koji.conf
|
||||
action: copy src=$configs/arm-koji.conf dest=/etc/koji.conf
|
||||
only_if: "'${ansible_fqdn}'.startswith('arm')"
|
||||
- name: copy over koji ca cert
|
||||
action: copy src=../buildercerts/fedora-ca.cert dest=/etc/kojid/cacert.pem
|
||||
- name: copy over /etc/security/limits.conf
|
||||
action: copy src=$configs/limits.conf dest=/etc/security/limits.conf
|
||||
- name: copy over builder cert to /etc/kojid/kojibuilder.pem
|
||||
action: copy src=../buildercerts/${ansible_fqdn}.pem dest=/etc/kojid/kojibuilder.pem mode=600
|
||||
ignore_errors: true
|
||||
- name: chkconfig kojid on
|
||||
action: service name=kojid enabled=on
|
||||
- name: copy over authorized keys for root
|
||||
action: copy src=$configs/root_auth_keys dest=/root/.ssh/authorized_keys mode=644
|
||||
tags:
|
||||
- root_ssh_key
|
||||
- name: nfs mount points
|
||||
action: mount name=/mnt/koji src=nfs01.phx2.fedoraproject.org:/ fstype=nfs4 opts=ro,hard,bg,intr,noatime,nodev,nosuid passno=0 dump=0 state=present
|
||||
only_if: "not '${ansible_fqdn}'.startswith('bkernel')"
|
||||
# mock configs for pungify job
|
||||
- name: put extra special mock configs in
|
||||
action: copy src=$configs/builders/$item dest=/etc/mock/$item mode=644
|
||||
with_items:
|
||||
- fedora-devel-pungi-i386.cfg
|
||||
- fedora-devel-pungi-x86_64.cfg
|
||||
tags:
|
||||
- mock_config_files
|
||||
|
||||
- name: ntp steptickers
|
||||
action: copy src=$configs/step-tickers dest=/etc/ntp/step-tickers
|
||||
tags:
|
||||
- ntp
|
||||
- name: ntp.conf
|
||||
action: copy src=$configs/ntp.conf dest=/etc/ntp.conf
|
||||
tags:
|
||||
- ntp
|
||||
|
||||
- name: enable ntpd
|
||||
action: service name=ntpd enabled=true state=started
|
||||
tags:
|
||||
- ntp
|
||||
|
||||
|
||||
handlers:
|
||||
- name: restart iptables
|
||||
action: service name=iptables state=restarted
|
||||
- name: restart sshd
|
||||
action: service name=sshd state=restarted
|
||||
|
||||
- hosts:
|
||||
- bkernel*
|
||||
- buildvm*
|
||||
- buildhw*
|
||||
user: root
|
||||
vars:
|
||||
configs: ../configs
|
||||
tags:
|
||||
- bkernel_setup
|
||||
- builder_setup
|
||||
|
||||
tasks:
|
||||
- name: set kernel params for loopback partitioning
|
||||
action: command /sbin/grubby --update-kernel=ALL --args=loop.max_part=256
|
||||
tags:
|
||||
- kernel_params
|
||||
- name: set kernel params for more loops
|
||||
action: command /sbin/grubby --update-kernel=ALL --args=max_loop=64
|
||||
tags:
|
||||
- kernel_params
|
||||
- name: special pkgs for the x86_64 builders
|
||||
action: yum state=installed pkg=$item
|
||||
with_items:
|
||||
- kmod-hfsplus
|
||||
- hosts:
|
||||
- bkernel*
|
||||
user: root
|
||||
vars:
|
||||
configs: ../configs
|
||||
tags:
|
||||
- bkernel_setup
|
||||
- builder_setup
|
||||
|
||||
tasks:
|
||||
- include: ../tasks/bkernel-setup.yml
|
||||
Loading…
Add table
Add a link
Reference in a new issue