ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to file: with ansible.builtin.file Signed-off-by: Ryan Lerch <rlerch@redhat.com>
This commit is contained in:
parent
f3517ab537
commit
62952df107
167 changed files with 380 additions and 381 deletions
|
@ -274,11 +274,11 @@
|
||||||
# clean up: can also be put as handlers
|
# clean up: can also be put as handlers
|
||||||
|
|
||||||
- name: Clean remote temp dir
|
- name: Clean remote temp dir
|
||||||
file: path={{temp_dir.stdout}} state=absent
|
ansible.builtin.file: path={{temp_dir.stdout}} state=absent
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: Clean rpm temp file
|
- name: Clean rpm temp file
|
||||||
file: path={{localchanges.stdout}} state=absent
|
ansible.builtin.file: path={{localchanges.stdout}} state=absent
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -116,11 +116,11 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: create secondary volume dir for stg bodhi
|
- name: create secondary volume dir for stg bodhi
|
||||||
file: dest=/mnt/koji/vol state=directory owner=apache group=apache mode=0755
|
ansible.builtin.file: dest=/mnt/koji/vol state=directory owner=apache group=apache mode=0755
|
||||||
tags: bodhi
|
tags: bodhi
|
||||||
when: env == 'staging'
|
when: env == 'staging'
|
||||||
- name: create symlink for stg/prod secondary volume
|
- name: create symlink for stg/prod secondary volume
|
||||||
file: src=/mnt/fedora_koji_prod/koji dest=/mnt/koji/vol/prod state=link
|
ansible.builtin.file: src=/mnt/fedora_koji_prod/koji dest=/mnt/koji/vol/prod state=link
|
||||||
tags: bodhi
|
tags: bodhi
|
||||||
when: env == 'staging'
|
when: env == 'staging'
|
||||||
- import_tasks: "{{ tasks_path }}/motd.yml"
|
- import_tasks: "{{ tasks_path }}/motd.yml"
|
||||||
|
|
|
@ -20,7 +20,7 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Make a keytab dir
|
- name: Make a keytab dir
|
||||||
file: dest="/etc/kojid-cloud-scheduler/" state=directory
|
ansible.builtin.file: dest="/etc/kojid-cloud-scheduler/" state=directory
|
||||||
|
|
||||||
roles:
|
roles:
|
||||||
- role: keytab/service
|
- role: keytab/service
|
||||||
|
|
|
@ -60,7 +60,7 @@
|
||||||
- restart debuginfod
|
- restart debuginfod
|
||||||
|
|
||||||
- name: ensure systemd drop-in directory exists
|
- name: ensure systemd drop-in directory exists
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
dest=/etc/systemd/system/debuginfod.service.d
|
dest=/etc/systemd/system/debuginfod.service.d
|
||||||
state=directory
|
state=directory
|
||||||
tags: debuginfod
|
tags: debuginfod
|
||||||
|
|
|
@ -85,7 +85,7 @@
|
||||||
when: inventory_hostname == 'download-cc-rdu01.fedoraproject.org'
|
when: inventory_hostname == 'download-cc-rdu01.fedoraproject.org'
|
||||||
|
|
||||||
- name: make a mnt/koji link
|
- name: make a mnt/koji link
|
||||||
file: state=link src=/mnt/fedora_koji/koji dest=/mnt/koji
|
ansible.builtin.file: state=link src=/mnt/fedora_koji/koji dest=/mnt/koji
|
||||||
when: datacenter == "iad2"
|
when: datacenter == "iad2"
|
||||||
|
|
||||||
handlers:
|
handlers:
|
||||||
|
|
|
@ -66,7 +66,7 @@
|
||||||
- krb5
|
- krb5
|
||||||
- ipa/server
|
- ipa/server
|
||||||
- name: Set owner and permissions on combined keytab
|
- name: Set owner and permissions on combined keytab
|
||||||
file: path="/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined"
|
ansible.builtin.file: path="/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined"
|
||||||
owner=apache
|
owner=apache
|
||||||
group=apache
|
group=apache
|
||||||
mode=0600
|
mode=0600
|
||||||
|
|
|
@ -44,7 +44,7 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Create top level directory
|
- name: Create top level directory
|
||||||
file: path=/srv/nfs state=directory owner=root group=root
|
ansible.builtin.file: path=/srv/nfs state=directory owner=root group=root
|
||||||
tags:
|
tags:
|
||||||
- drives
|
- drives
|
||||||
- copr
|
- copr
|
||||||
|
@ -62,7 +62,7 @@
|
||||||
- copr
|
- copr
|
||||||
|
|
||||||
- name: Create copr-be tree directory
|
- name: Create copr-be tree directory
|
||||||
file: path=/srv/nfs/copr-be state=directory owner=root group=root
|
ansible.builtin.file: path=/srv/nfs/copr-be state=directory owner=root group=root
|
||||||
tags:
|
tags:
|
||||||
- drives
|
- drives
|
||||||
- copr
|
- copr
|
||||||
|
|
|
@ -38,7 +38,7 @@
|
||||||
|
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: Create /srv/registry on staging since it does not use NFS
|
- name: Create /srv/registry on staging since it does not use NFS
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /srv/registry
|
path: /srv/registry
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -26,7 +26,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
|
|
||||||
- name: Create the directories to hold the templates
|
- name: Create the directories to hold the templates
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/etc/openshift_apps"
|
path: "/etc/openshift_apps"
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -45,7 +45,7 @@
|
||||||
- mount
|
- mount
|
||||||
|
|
||||||
- name: create /srv/home directory
|
- name: create /srv/home directory
|
||||||
file: path=/srv/home state=directory owner=root group=root
|
ansible.builtin.file: path=/srv/home state=directory owner=root group=root
|
||||||
|
|
||||||
- name: bind mount home volume
|
- name: bind mount home volume
|
||||||
mount: >
|
mount: >
|
||||||
|
|
|
@ -14,7 +14,7 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Ensure directories exists
|
- name: Ensure directories exists
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ item }}"
|
path: "{{ item }}"
|
||||||
state: directory
|
state: directory
|
||||||
mode: '0755'
|
mode: '0755'
|
||||||
|
|
|
@ -15,7 +15,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
# We retired this in favor of PDC
|
# We retired this in favor of PDC
|
||||||
# https://lists.fedoraproject.org/archives/list/rel-eng@lists.fedoraproject.org/thread/LOWVTF6WTS43LNPWDEISLXUELXAH5YXR/#LOWVTF6WTS43LNPWDEISLXUELXAH5YXR
|
# https://lists.fedoraproject.org/archives/list/rel-eng@lists.fedoraproject.org/thread/LOWVTF6WTS43LNPWDEISLXUELXAH5YXR/#LOWVTF6WTS43LNPWDEISLXUELXAH5YXR
|
||||||
- file:
|
- ansible.builtin.file:
|
||||||
dest=/etc/httpd/conf.d/apps.fedoraproject.org/fedora-releng-dash.conf
|
dest=/etc/httpd/conf.d/apps.fedoraproject.org/fedora-releng-dash.conf
|
||||||
state=absent
|
state=absent
|
||||||
tags: releng-dash
|
tags: releng-dash
|
||||||
|
|
|
@ -18,7 +18,7 @@
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
|
|
||||||
- name: Remove some crusty files from bygone eras
|
- name: Remove some crusty files from bygone eras
|
||||||
file: dest=/etc/httpd/conf.d/{{item}} state=absent
|
ansible.builtin.file: dest=/etc/httpd/conf.d/{{item}} state=absent
|
||||||
with_items:
|
with_items:
|
||||||
- meetbot.fedoraproject.org/reversepassproxy.conf
|
- meetbot.fedoraproject.org/reversepassproxy.conf
|
||||||
- meetbot.fedoraproject.org/meetbot.conf
|
- meetbot.fedoraproject.org/meetbot.conf
|
||||||
|
|
|
@ -14,7 +14,7 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Create /srv/web/ for all the goodies.
|
- name: Create /srv/web/ for all the goodies.
|
||||||
file: dest=/srv/web state=directory owner=root group=root mode=0755
|
ansible.builtin.file: dest=/srv/web state=directory owner=root group=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
- httpd
|
- httpd
|
||||||
- httpd/website
|
- httpd/website
|
||||||
|
|
|
@ -33,7 +33,7 @@
|
||||||
when: home_fedora_res.stat.isdir
|
when: home_fedora_res.stat.isdir
|
||||||
|
|
||||||
- name: Delete the script from the host
|
- name: Delete the script from the host
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /usr/local/sbin/fix-home-fedora-ownerships.sh
|
path: /usr/local/sbin/fix-home-fedora-ownerships.sh
|
||||||
state: absent
|
state: absent
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
|
@ -61,7 +61,7 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Remove keytab
|
- name: Remove keytab
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/etc/openshift_apps/{{item.app}}/{{item.key}}.kt"
|
path: "/etc/openshift_apps/{{item.app}}/{{item.key}}.kt"
|
||||||
state: absent
|
state: absent
|
||||||
loop: "{{keytabs}}"
|
loop: "{{keytabs}}"
|
||||||
|
|
|
@ -23,7 +23,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- block:
|
- block:
|
||||||
- name: == OCP KVM provisioning == Ensuring we have needed httpd dir
|
- name: == OCP KVM provisioning == Ensuring we have needed httpd dir
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/var/www/html/rhcos"
|
path: "/var/www/html/rhcos"
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
@ -58,7 +58,7 @@
|
||||||
- "rhcos-{{ rhcos_version }}-x86_64-metal.x86_64.raw.gz"
|
- "rhcos-{{ rhcos_version }}-x86_64-metal.x86_64.raw.gz"
|
||||||
- "rhcos-{{ rhcos_version }}-x86_64-live-kernel-x86_64"
|
- "rhcos-{{ rhcos_version }}-x86_64-live-kernel-x86_64"
|
||||||
- name: == OCP KVM provisioning == Ensuring symlink for correct version {{ rhcos_version }}
|
- name: == OCP KVM provisioning == Ensuring symlink for correct version {{ rhcos_version }}
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: link
|
state: link
|
||||||
src: "/var/www/html/rhcos/rhcos-{{ rhcos_version }}-x86_64-metal.x86_64.raw.gz"
|
src: "/var/www/html/rhcos/rhcos-{{ rhcos_version }}-x86_64-metal.x86_64.raw.gz"
|
||||||
dest: "/var/www/html/rhcos/rhcos-metal.raw"
|
dest: "/var/www/html/rhcos/rhcos-metal.raw"
|
||||||
|
|
|
@ -8,5 +8,5 @@
|
||||||
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- file: dest=/srv/web/fedoraproject.org/static/ state=directory
|
- ansible.builtin.file: dest=/srv/web/fedoraproject.org/static/ state=directory
|
||||||
- copy: src=hotspot.txt dest=/srv/web/fedoraproject.org/static/hotspot.txt
|
- copy: src=hotspot.txt dest=/srv/web/fedoraproject.org/static/hotspot.txt
|
||||||
|
|
|
@ -10,6 +10,6 @@
|
||||||
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- file: dest=/var/cache/httpd/mote/cache.json state=absent
|
- ansible.builtin.file: dest=/var/cache/httpd/mote/cache.json state=absent
|
||||||
- service: name="httpd" state=restarted
|
- service: name="httpd" state=restarted
|
||||||
- service: name="mote-updater" state=restarted
|
- service: name="mote-updater" state=restarted
|
||||||
|
|
|
@ -17,6 +17,6 @@
|
||||||
register: out
|
register: out
|
||||||
|
|
||||||
- name: Remove it
|
- name: Remove it
|
||||||
file: path=/root/drivestatus.py state=absent
|
ansible.builtin.file: path=/root/drivestatus.py state=absent
|
||||||
|
|
||||||
- debug: var=out.stdout_lines
|
- debug: var=out.stdout_lines
|
||||||
|
|
|
@ -44,7 +44,7 @@
|
||||||
shell: /bin/rpm --resign {{ rpmdir }}/*.rpm
|
shell: /bin/rpm --resign {{ rpmdir }}/*.rpm
|
||||||
|
|
||||||
- name: Make a directory where we store the rpms afterwards
|
- name: Make a directory where we store the rpms afterwards
|
||||||
file: path={{ rpmdir }}-old state=directory
|
ansible.builtin.file: path={{ rpmdir }}-old state=directory
|
||||||
|
|
||||||
- name: Copy the source rpms to the SRPMS dir of {{ repodir }}
|
- name: Copy the source rpms to the SRPMS dir of {{ repodir }}
|
||||||
copy: src={{ item }} dest={{ repodir }}/SRPMS/
|
copy: src={{ item }} dest={{ repodir }}/SRPMS/
|
||||||
|
|
|
@ -64,7 +64,7 @@
|
||||||
- command: createdb -O bodhi2 bodhi2
|
- command: createdb -O bodhi2 bodhi2
|
||||||
- name: Import the prod db.
|
- name: Import the prod db.
|
||||||
shell: cat /var/tmp/bodhi2.dump | psql bodhi2
|
shell: cat /var/tmp/bodhi2.dump | psql bodhi2
|
||||||
- file: path=/var/tmp/bodhi2.dump state=absent
|
- ansible.builtin.file: path=/var/tmp/bodhi2.dump state=absent
|
||||||
|
|
||||||
- name: Bring staging services up (OpenShift web services)
|
- name: Bring staging services up (OpenShift web services)
|
||||||
hosts: os-control01.stg.iad2.fedoraproject.org
|
hosts: os-control01.stg.iad2.fedoraproject.org
|
||||||
|
|
|
@ -112,7 +112,7 @@
|
||||||
- name: Mount newly-created empty koji filesystem
|
- name: Mount newly-created empty koji filesystem
|
||||||
mount: name=/mnt/fedora_koji src=/dev/GuestVolGroup00/fedora_koji fstype=xfs state=mounted
|
mount: name=/mnt/fedora_koji src=/dev/GuestVolGroup00/fedora_koji fstype=xfs state=mounted
|
||||||
- name: Recreate koji directory structure
|
- name: Recreate koji directory structure
|
||||||
file: name={{item}} state=directory owner=apache group=apache setype=httpd_sys_rw_content_t
|
ansible.builtin.file: name={{item}} state=directory owner=apache group=apache setype=httpd_sys_rw_content_t
|
||||||
with_items:
|
with_items:
|
||||||
- /mnt/fedora_koji/koji
|
- /mnt/fedora_koji/koji
|
||||||
- /mnt/koji/compose
|
- /mnt/koji/compose
|
||||||
|
@ -125,7 +125,7 @@
|
||||||
- /mnt/koji/work
|
- /mnt/koji/work
|
||||||
# TODO recreate directories under /mnt/koji/compose (which ones?) that composer expects to exist
|
# TODO recreate directories under /mnt/koji/compose (which ones?) that composer expects to exist
|
||||||
- name: Symlink production volume
|
- name: Symlink production volume
|
||||||
file: src=/mnt/fedora_koji_prod/koji dest=/mnt/koji/vol/prod state=link
|
ansible.builtin.file: src=/mnt/fedora_koji_prod/koji dest=/mnt/koji/vol/prod state=link
|
||||||
- name: Restart nfs-server
|
- name: Restart nfs-server
|
||||||
service: name=nfs-server state=started
|
service: name=nfs-server state=started
|
||||||
- name: Restart httpd
|
- name: Restart httpd
|
||||||
|
|
|
@ -77,7 +77,7 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Nuke the prod db dump that we cached on batcave
|
- name: Nuke the prod db dump that we cached on batcave
|
||||||
file: path=/var/tmp/prod-mailman-dump/ state=absent
|
ansible.builtin.file: path=/var/tmp/prod-mailman-dump/ state=absent
|
||||||
|
|
||||||
|
|
||||||
- name: Convert the data to staging and bring services back up. This will take a while too.
|
- name: Convert the data to staging and bring services back up. This will take a while too.
|
||||||
|
|
|
@ -52,7 +52,7 @@
|
||||||
- name: Create drop place for upgrades
|
- name: Create drop place for upgrades
|
||||||
check_mode: no
|
check_mode: no
|
||||||
when: ansible_virtualization_role == "host"
|
when: ansible_virtualization_role == "host"
|
||||||
file: path=/root/firmware-upgrades state=directory
|
ansible.builtin.file: path=/root/firmware-upgrades state=directory
|
||||||
|
|
||||||
- name: Check which updates to copy
|
- name: Check which updates to copy
|
||||||
check_mode: no
|
check_mode: no
|
||||||
|
@ -98,7 +98,7 @@
|
||||||
|
|
||||||
# Generic stuff continues here
|
# Generic stuff continues here
|
||||||
- name: Mark updates as done
|
- name: Mark updates as done
|
||||||
file: path=/root/firmware-upgrades/{{ item.item.1 }}.applied
|
ansible.builtin.file: path=/root/firmware-upgrades/{{ item.item.1 }}.applied
|
||||||
state=touch owner=root mode=644
|
state=touch owner=root mode=644
|
||||||
when: "'stat' in item and not item.stat.exists"
|
when: "'stat' in item and not item.stat.exists"
|
||||||
with_items: "{{is_applied_results.results}}"
|
with_items: "{{is_applied_results.results}}"
|
||||||
|
@ -106,7 +106,7 @@
|
||||||
# We are cleaning up all files we copied, regardless of update result
|
# We are cleaning up all files we copied, regardless of update result
|
||||||
- name: Delete update files
|
- name: Delete update files
|
||||||
check_mode: no
|
check_mode: no
|
||||||
file: path=/root/firmware-upgrades/{{ item.item.1 }}
|
ansible.builtin.file: path=/root/firmware-upgrades/{{ item.item.1 }}
|
||||||
state=absent
|
state=absent
|
||||||
when: "'stat' in item and not item.stat.exists"
|
when: "'stat' in item and not item.stat.exists"
|
||||||
with_items: "{{is_applied_results.results}}"
|
with_items: "{{is_applied_results.results}}"
|
||||||
|
|
|
@ -4,7 +4,7 @@
|
||||||
- import_tasks: repositories.yml
|
- import_tasks: repositories.yml
|
||||||
|
|
||||||
- name: Ensure directory for FAF database backups exists
|
- name: Ensure directory for FAF database backups exists
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ faf_backup_dir }}"
|
path: "{{ faf_backup_dir }}"
|
||||||
state: directory
|
state: directory
|
||||||
owner: faf
|
owner: faf
|
||||||
|
|
|
@ -11,14 +11,14 @@
|
||||||
- import_tasks: services.yml
|
- import_tasks: services.yml
|
||||||
|
|
||||||
- name: Create a directory /srv/faf
|
- name: Create a directory /srv/faf
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /srv/faf
|
path: /srv/faf
|
||||||
state: directory
|
state: directory
|
||||||
owner: faf
|
owner: faf
|
||||||
group: faf
|
group: faf
|
||||||
|
|
||||||
- name: Create folders where we place certs for fedora-messaging
|
- name: Create folders where we place certs for fedora-messaging
|
||||||
file: path=/etc/fedora-messaging/faf owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/etc/fedora-messaging/faf owner=root group=root mode=0755 state=directory
|
||||||
|
|
||||||
- name: Install certs for fedora-messaging
|
- name: Install certs for fedora-messaging
|
||||||
copy: src={{ item.src }}
|
copy: src={{ item.src }}
|
||||||
|
|
|
@ -7,7 +7,7 @@
|
||||||
|
|
||||||
# setup fedora-messaging
|
# setup fedora-messaging
|
||||||
- name: Create the config folder for fedora-messaging
|
- name: Create the config folder for fedora-messaging
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/fedora-messaging/
|
path: /etc/fedora-messaging/
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
|
|
|
@ -17,21 +17,21 @@
|
||||||
tags: [rs_reposync, rs_fedora]
|
tags: [rs_reposync, rs_fedora]
|
||||||
when: env != 'staging'
|
when: env != 'staging'
|
||||||
|
|
||||||
- file:
|
- ansible.builtin.file:
|
||||||
path: /srv/retrace/repos
|
path: /srv/retrace/repos
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
owner: retrace
|
owner: retrace
|
||||||
group: retrace
|
group: retrace
|
||||||
|
|
||||||
- file:
|
- ansible.builtin.file:
|
||||||
path: /srv/retrace/tasks
|
path: /srv/retrace/tasks
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
owner: retrace
|
owner: retrace
|
||||||
group: retrace
|
group: retrace
|
||||||
|
|
||||||
- file:
|
- ansible.builtin.file:
|
||||||
path: /srv/retrace/hardlink-local
|
path: /srv/retrace/hardlink-local
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
|
|
@ -44,7 +44,7 @@
|
||||||
state: started
|
state: started
|
||||||
|
|
||||||
- name: Create directory for repositories
|
- name: Create directory for repositories
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /srv/retrace/repos
|
path: /srv/retrace/repos
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
@ -52,14 +52,14 @@
|
||||||
group: retrace
|
group: retrace
|
||||||
|
|
||||||
- name: Create directory for retrace tasks
|
- name: Create directory for retrace tasks
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /srv/retrace/tasks
|
path: /srv/retrace/tasks
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
owner: retrace
|
owner: retrace
|
||||||
group: retrace
|
group: retrace
|
||||||
|
|
||||||
- file:
|
- ansible.builtin.file:
|
||||||
path: /srv/retrace/hardlink-local
|
path: /srv/retrace/hardlink-local
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
|
|
@ -14,7 +14,7 @@
|
||||||
- apps-fp-o
|
- apps-fp-o
|
||||||
|
|
||||||
- name: Ensure directory exixts
|
- name: Ensure directory exixts
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ item }}"
|
path: "{{ item }}"
|
||||||
state: directory
|
state: directory
|
||||||
mode: '2755'
|
mode: '2755'
|
||||||
|
|
|
@ -88,7 +88,7 @@
|
||||||
|
|
||||||
- name: Destroy stored keytab
|
- name: Destroy stored keytab
|
||||||
delegate_to: "{{ ipa_server }}"
|
delegate_to: "{{ ipa_server }}"
|
||||||
file: path=/tmp/{{inventory_hostname}}.kt state=absent
|
ansible.builtin.file: path=/tmp/{{inventory_hostname}}.kt state=absent
|
||||||
tags:
|
tags:
|
||||||
- base
|
- base
|
||||||
- config
|
- config
|
||||||
|
@ -114,7 +114,7 @@
|
||||||
when: not host_keytab_status.stat.exists
|
when: not host_keytab_status.stat.exists
|
||||||
|
|
||||||
- name: Set keytab permissions
|
- name: Set keytab permissions
|
||||||
file: path=/etc/krb5.keytab owner=root group=root mode=0600
|
ansible.builtin.file: path=/etc/krb5.keytab owner=root group=root mode=0600
|
||||||
tags:
|
tags:
|
||||||
- base
|
- base
|
||||||
- config
|
- config
|
||||||
|
@ -122,7 +122,7 @@
|
||||||
when: not host_keytab_status.stat.exists
|
when: not host_keytab_status.stat.exists
|
||||||
|
|
||||||
- name: Destroy encoded keytab
|
- name: Destroy encoded keytab
|
||||||
file: path=/etc/krb5.keytab.b64 state=absent
|
ansible.builtin.file: path=/etc/krb5.keytab.b64 state=absent
|
||||||
tags:
|
tags:
|
||||||
- base
|
- base
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -238,7 +238,7 @@
|
||||||
when: baseiptables|bool
|
when: baseiptables|bool
|
||||||
|
|
||||||
- name: Enable journald persistence
|
- name: Enable journald persistence
|
||||||
file: path=/var/log/journal state=directory
|
ansible.builtin.file: path=/var/log/journal state=directory
|
||||||
owner=root group=systemd-journal mode=2755
|
owner=root group=systemd-journal mode=2755
|
||||||
when: ansible_distribution_major_version|int >= 7 and ansible_distribution == 'RedHat'
|
when: ansible_distribution_major_version|int >= 7 and ansible_distribution == 'RedHat'
|
||||||
tags:
|
tags:
|
||||||
|
@ -249,7 +249,7 @@
|
||||||
- flush journald tmpfiles to persistent store
|
- flush journald tmpfiles to persistent store
|
||||||
|
|
||||||
- name: Enable journald persistence
|
- name: Enable journald persistence
|
||||||
file: path=/var/log/journal state=directory
|
ansible.builtin.file: path=/var/log/journal state=directory
|
||||||
owner=root group=systemd-journal mode=2755
|
owner=root group=systemd-journal mode=2755
|
||||||
when: ansible_distribution_major_version|int >= 29 and ansible_distribution == 'Fedora'
|
when: ansible_distribution_major_version|int >= 29 and ansible_distribution == 'Fedora'
|
||||||
tags:
|
tags:
|
||||||
|
@ -341,7 +341,7 @@
|
||||||
- base
|
- base
|
||||||
|
|
||||||
- name: Rsyslogd make systemd limits directory for file handles
|
- name: Rsyslogd make systemd limits directory for file handles
|
||||||
file: dest=/etc/systemd/system/rsyslog.service.d/ mode=0755 owner=root group=root state=directory
|
ansible.builtin.file: dest=/etc/systemd/system/rsyslog.service.d/ mode=0755 owner=root group=root state=directory
|
||||||
when: inventory_hostname.startswith('log') or inventory_hostname.startswith('people')
|
when: inventory_hostname.startswith('log') or inventory_hostname.startswith('people')
|
||||||
tags:
|
tags:
|
||||||
- rsyslogd
|
- rsyslogd
|
||||||
|
@ -357,7 +357,7 @@
|
||||||
|
|
||||||
# Custom selinux policy to allow rsyslog to read and send audit to log01
|
# Custom selinux policy to allow rsyslog to read and send audit to log01
|
||||||
- name: Ensure a directory exists for our custom selinux module
|
- name: Ensure a directory exists for our custom selinux module
|
||||||
file: dest=/usr/local/share/rsyslog state=directory
|
ansible.builtin.file: dest=/usr/local/share/rsyslog state=directory
|
||||||
tags:
|
tags:
|
||||||
- rsyslogd
|
- rsyslogd
|
||||||
- config
|
- config
|
||||||
|
@ -504,7 +504,7 @@
|
||||||
# is actually expired, and kinit's still not refreshing them and such alike.
|
# is actually expired, and kinit's still not refreshing them and such alike.
|
||||||
# Let's just nuke it for now.
|
# Let's just nuke it for now.
|
||||||
- name: We do NOT use sssd-kcm
|
- name: We do NOT use sssd-kcm
|
||||||
file: path=/etc/krb5.conf.d/kcm_default_ccache state=absent
|
ansible.builtin.file: path=/etc/krb5.conf.d/kcm_default_ccache state=absent
|
||||||
tags:
|
tags:
|
||||||
- base
|
- base
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -156,7 +156,7 @@
|
||||||
- base
|
- base
|
||||||
|
|
||||||
- name: Create directory for storing pubkeys
|
- name: Create directory for storing pubkeys
|
||||||
file: path="{{pubkeydir}}"
|
ansible.builtin.file: path="{{pubkeydir}}"
|
||||||
owner=root
|
owner=root
|
||||||
group=root
|
group=root
|
||||||
mode=0600
|
mode=0600
|
||||||
|
|
|
@ -8,7 +8,7 @@
|
||||||
|
|
||||||
---
|
---
|
||||||
- name: Create /srv/web/pub for nfs mounts
|
- name: Create /srv/web/pub for nfs mounts
|
||||||
file: dest=/srv/web/pub state=directory mode=0755
|
ansible.builtin.file: dest=/srv/web/pub state=directory mode=0755
|
||||||
tags:
|
tags:
|
||||||
- batcave
|
- batcave
|
||||||
- config
|
- config
|
||||||
|
@ -129,7 +129,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Create folder where we'll place the certs
|
- name: Create folder where we'll place the certs
|
||||||
file: path=/etc/pki/rabbitmq/ owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/etc/pki/rabbitmq/ owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- batcave
|
- batcave
|
||||||
- config
|
- config
|
||||||
|
@ -372,7 +372,7 @@
|
||||||
#
|
#
|
||||||
|
|
||||||
- name: Create repo2json directory
|
- name: Create repo2json directory
|
||||||
file: dest=/srv/web/repo/json mode=0755 state=directory owner=apache group=apache
|
ansible.builtin.file: dest=/srv/web/repo/json mode=0755 state=directory owner=apache group=apache
|
||||||
tags:
|
tags:
|
||||||
- batcave
|
- batcave
|
||||||
- config
|
- config
|
||||||
|
@ -557,14 +557,14 @@
|
||||||
- batcave
|
- batcave
|
||||||
|
|
||||||
- name: Create some tmp dirs
|
- name: Create some tmp dirs
|
||||||
file: path=/tmp-inst mode=000 owner=root group=root state=directory
|
ansible.builtin.file: path=/tmp-inst mode=000 owner=root group=root state=directory
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- batcave
|
- batcave
|
||||||
- selinux
|
- selinux
|
||||||
|
|
||||||
- name: Create some tmp dirs
|
- name: Create some tmp dirs
|
||||||
file: path=/var/tmp-inst mode=000 owner=root group=root state=directory
|
ansible.builtin.file: path=/var/tmp-inst mode=000 owner=root group=root state=directory
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- batcave
|
- batcave
|
||||||
|
@ -578,7 +578,7 @@
|
||||||
- selinux
|
- selinux
|
||||||
|
|
||||||
- name: Create the /var/tmux folder for shared tmux session
|
- name: Create the /var/tmux folder for shared tmux session
|
||||||
file: path=/var/tmux mode=2774 owner=root group=sysadmin state=directory
|
ansible.builtin.file: path=/var/tmux mode=2774 owner=root group=sysadmin state=directory
|
||||||
tags:
|
tags:
|
||||||
- batcave
|
- batcave
|
||||||
- tmux
|
- tmux
|
||||||
|
@ -590,7 +590,7 @@
|
||||||
- tmux
|
- tmux
|
||||||
|
|
||||||
- name: Create dir for openshift pxe boot files
|
- name: Create dir for openshift pxe boot files
|
||||||
file: path=/srv/web/infra/bigfiles/{{item}} mode=2660 owner=root group=sysadmin-openshift state=directory
|
ansible.builtin.file: path=/srv/web/infra/bigfiles/{{item}} mode=2660 owner=root group=sysadmin-openshift state=directory
|
||||||
with_items:
|
with_items:
|
||||||
- openshiftboot
|
- openshiftboot
|
||||||
- tftpboot/rhcos
|
- tftpboot/rhcos
|
||||||
|
|
|
@ -330,7 +330,7 @@
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Create /etc/pki/fedora-messaging
|
- name: Create /etc/pki/fedora-messaging
|
||||||
file:
|
ansible.builtin.file:
|
||||||
dest: /etc/pki/fedora-messaging
|
dest: /etc/pki/fedora-messaging
|
||||||
mode: "0775"
|
mode: "0775"
|
||||||
owner: root
|
owner: root
|
||||||
|
@ -382,12 +382,12 @@
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Make a mnt/koji link
|
- name: Make a mnt/koji link
|
||||||
file: state=link src=/mnt/fedora_koji/koji dest=/mnt/koji force=yes
|
ansible.builtin.file: state=link src=/mnt/fedora_koji/koji dest=/mnt/koji force=yes
|
||||||
tags:
|
tags:
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Create /etc/systemd/system/fm-consumer@.service.d
|
- name: Create /etc/systemd/system/fm-consumer@.service.d
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
path: /etc/systemd/system/fm-consumer@.service.d
|
path: /etc/systemd/system/fm-consumer@.service.d
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -3,7 +3,7 @@
|
||||||
# This is the base set of files needed for bodhi
|
# This is the base set of files needed for bodhi
|
||||||
|
|
||||||
- name: Create the bodhi configuration directory
|
- name: Create the bodhi configuration directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/bodhi
|
path: /etc/bodhi
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -7,7 +7,7 @@
|
||||||
|
|
||||||
|
|
||||||
- name: Create /etc/systemd/system/btrfs-balance.timer.d
|
- name: Create /etc/systemd/system/btrfs-balance.timer.d
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
path: /etc/systemd/system/btrfs-balance.timer.d
|
path: /etc/systemd/system/btrfs-balance.timer.d
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -22,7 +22,7 @@
|
||||||
- bugzilla2fedmsg
|
- bugzilla2fedmsg
|
||||||
|
|
||||||
- name: Make sure a few directories exist.
|
- name: Make sure a few directories exist.
|
||||||
file:
|
ansible.builtin.file:
|
||||||
dest="{{ item }}"
|
dest="{{ item }}"
|
||||||
owner=fedmsg
|
owner=fedmsg
|
||||||
group=fedmsg
|
group=fedmsg
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
---
|
---
|
||||||
- name: Add builder infra yum repo
|
- name: Add builder infra yum repo
|
||||||
file: dest=/etc/yum.repos.d/builder-infrastructure.repo state=absent
|
ansible.builtin.file: dest=/etc/yum.repos.d/builder-infrastructure.repo state=absent
|
||||||
tags:
|
tags:
|
||||||
- builder_infra
|
- builder_infra
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Create the CentosCIAuthorization operator keytab path
|
- name: Create the CentosCIAuthorization operator keytab path
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/etc/openshift_apps/centos-ci-authorization/"
|
path: "/etc/openshift_apps/centos-ci-authorization/"
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -13,11 +13,11 @@
|
||||||
|
|
||||||
# See https://github.com/robyduck/cgit-custom
|
# See https://github.com/robyduck/cgit-custom
|
||||||
- name: Make sure cgit directory exists
|
- name: Make sure cgit directory exists
|
||||||
file: dest=/usr/share/cgit state=directory owner=root group=root mode=0755
|
ansible.builtin.file: dest=/usr/share/cgit state=directory owner=root group=root mode=0755
|
||||||
tags: cgit
|
tags: cgit
|
||||||
|
|
||||||
- name: Make sure cgit images directory exists
|
- name: Make sure cgit images directory exists
|
||||||
file: dest=/usr/share/cgit/images state=directory owner=root group=root mode=0755
|
ansible.builtin.file: dest=/usr/share/cgit/images state=directory owner=root group=root mode=0755
|
||||||
tags: cgit
|
tags: cgit
|
||||||
|
|
||||||
- name: Copy cgit them into place.
|
- name: Copy cgit them into place.
|
||||||
|
|
|
@ -6,7 +6,7 @@
|
||||||
tags: cgit
|
tags: cgit
|
||||||
|
|
||||||
- name: Create the git root directory (/srv/git)
|
- name: Create the git root directory (/srv/git)
|
||||||
file: dest=/srv/git state=directory mode=0755
|
ansible.builtin.file: dest=/srv/git state=directory mode=0755
|
||||||
tags: cgit
|
tags: cgit
|
||||||
|
|
||||||
- name: Ensure the repo list file exists
|
- name: Ensure the repo list file exists
|
||||||
|
|
|
@ -137,7 +137,7 @@
|
||||||
- restart check-compose
|
- restart check-compose
|
||||||
|
|
||||||
- name: Create /etc/pki/fedora-messaging
|
- name: Create /etc/pki/fedora-messaging
|
||||||
file:
|
ansible.builtin.file:
|
||||||
dest: /etc/pki/fedora-messaging
|
dest: /etc/pki/fedora-messaging
|
||||||
mode: "0775"
|
mode: "0775"
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -119,7 +119,7 @@
|
||||||
|
|
||||||
# Three tasks for handling our (two) custom selinux modules.
|
# Three tasks for handling our (two) custom selinux modules.
|
||||||
- name: Ensure a directory exists for our custom selinux module
|
- name: Ensure a directory exists for our custom selinux module
|
||||||
file: dest=/usr/share/collectd state=directory
|
ansible.builtin.file: dest=/usr/share/collectd state=directory
|
||||||
tags:
|
tags:
|
||||||
- collectd
|
- collectd
|
||||||
- selinux
|
- selinux
|
||||||
|
|
|
@ -24,7 +24,7 @@
|
||||||
|
|
||||||
# Three tasks for handling our custom selinux module.
|
# Three tasks for handling our custom selinux module.
|
||||||
- name: Ensure a directory exists for our custom selinux module
|
- name: Ensure a directory exists for our custom selinux module
|
||||||
file: dest=/usr/share/collectd state=directory
|
ansible.builtin.file: dest=/usr/share/collectd state=directory
|
||||||
tags:
|
tags:
|
||||||
- collectd
|
- collectd
|
||||||
- selinux
|
- selinux
|
||||||
|
|
|
@ -73,7 +73,7 @@
|
||||||
|
|
||||||
# create /var/log/collectd as it's on a larger volume
|
# create /var/log/collectd as it's on a larger volume
|
||||||
- name: Create /var/log/collectd
|
- name: Create /var/log/collectd
|
||||||
file: path=/var/log/collectd owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/var/log/collectd owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- collectd/server
|
- collectd/server
|
||||||
|
@ -88,7 +88,7 @@
|
||||||
- collectd/server
|
- collectd/server
|
||||||
|
|
||||||
- name: Create the service configuration directory
|
- name: Create the service configuration directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/systemd/system/collectd.service.d
|
path: /etc/systemd/system/collectd.service.d
|
||||||
state: directory
|
state: directory
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
- deploy-operators
|
- deploy-operators
|
||||||
|
|
||||||
- name: Create the CommunishiftAuthorization operator keytab path
|
- name: Create the CommunishiftAuthorization operator keytab path
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/etc/openshift_apps/communishift-authorization/"
|
path: "/etc/openshift_apps/communishift-authorization/"
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -35,12 +35,12 @@
|
||||||
- starting_builder
|
- starting_builder
|
||||||
|
|
||||||
- name: work-around for wrongly generated ami
|
- name: work-around for wrongly generated ami
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/yum.repos.d/pr.repo
|
path: /etc/yum.repos.d/pr.repo
|
||||||
state: absent
|
state: absent
|
||||||
|
|
||||||
- name: disable updates-testing
|
- name: disable updates-testing
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/yum.repos.d/fedora-updates-testing.repo
|
path: /etc/yum.repos.d/fedora-updates-testing.repo
|
||||||
state: absent
|
state: absent
|
||||||
when:
|
when:
|
||||||
|
@ -55,7 +55,7 @@
|
||||||
register: system_updated
|
register: system_updated
|
||||||
|
|
||||||
- name: disable updates-testing, could be restored after update
|
- name: disable updates-testing, could be restored after update
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/yum.repos.d/fedora-updates-testing.repo
|
path: /etc/yum.repos.d/fedora-updates-testing.repo
|
||||||
state: absent
|
state: absent
|
||||||
when: system_updated.changed
|
when: system_updated.changed
|
||||||
|
@ -174,7 +174,7 @@
|
||||||
|
|
||||||
- name: check disk space
|
- name: check disk space
|
||||||
include_tasks:
|
include_tasks:
|
||||||
file: check_path_free_space.yml
|
ansible.builtin.file: check_path_free_space.yml
|
||||||
vars:
|
vars:
|
||||||
path: "{{ item.path }}"
|
path: "{{ item.path }}"
|
||||||
size: "{{ item.size|int }}"
|
size: "{{ item.size|int }}"
|
||||||
|
@ -241,7 +241,7 @@
|
||||||
- preparing_image
|
- preparing_image
|
||||||
|
|
||||||
- name: mockbuilder .ssh
|
- name: mockbuilder .ssh
|
||||||
file: state=directory path=/home/mockbuilder/.ssh mode=0700 owner=mockbuilder group=mockbuilder
|
ansible.builtin.file: state=directory path=/home/mockbuilder/.ssh mode=0700 owner=mockbuilder group=mockbuilder
|
||||||
when:
|
when:
|
||||||
- preparing_image
|
- preparing_image
|
||||||
|
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: chmod_key
|
- name: chmod_key
|
||||||
file: path=/etc/lighttpd/copr-be.fedoraproject.org.pem owner=root group=root mode=0600
|
ansible.builtin.file: path=/etc/lighttpd/copr-be.fedoraproject.org.pem owner=root group=root mode=0600
|
||||||
|
|
||||||
- name: restart copr-backend
|
- name: restart copr-backend
|
||||||
service: name="{{ copr_backend_target }}" state=restarted
|
service: name="{{ copr_backend_target }}" state=restarted
|
||||||
|
|
|
@ -3,7 +3,7 @@
|
||||||
dnf: state=present name=awscli
|
dnf: state=present name=awscli
|
||||||
|
|
||||||
- name: Create aws HOME config directory
|
- name: Create aws HOME config directory
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path="{{ item.homedir }}/.aws"
|
path="{{ item.homedir }}/.aws"
|
||||||
owner={{ item.user }}
|
owner={{ item.user }}
|
||||||
group={{ item.user }}
|
group={{ item.user }}
|
||||||
|
|
|
@ -15,7 +15,7 @@
|
||||||
tags: copr_ping
|
tags: copr_ping
|
||||||
|
|
||||||
- name: Pre-create ping log file
|
- name: Pre-create ping log file
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ ping_log }}"
|
path: "{{ ping_log }}"
|
||||||
owner: "{{ ping_user }}"
|
owner: "{{ ping_user }}"
|
||||||
group: nagios
|
group: nagios
|
||||||
|
@ -61,7 +61,7 @@
|
||||||
tags: copr_ping
|
tags: copr_ping
|
||||||
|
|
||||||
- name: Create home/.config dir
|
- name: Create home/.config dir
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ ping_homedir }}/.config"
|
path: "{{ ping_homedir }}/.config"
|
||||||
owner: "{{ ping_user }}"
|
owner: "{{ ping_user }}"
|
||||||
group: "{{ ping_user }}"
|
group: "{{ ping_user }}"
|
||||||
|
|
|
@ -44,13 +44,13 @@
|
||||||
when: devel|bool
|
when: devel|bool
|
||||||
|
|
||||||
- name: Make copr dirs
|
- name: Make copr dirs
|
||||||
file: state=directory path={{ item }}
|
ansible.builtin.file: state=directory path={{ item }}
|
||||||
with_items:
|
with_items:
|
||||||
- /var/lib/copr/jobs
|
- /var/lib/copr/jobs
|
||||||
- /var/lib/copr/public_html/results
|
- /var/lib/copr/public_html/results
|
||||||
|
|
||||||
- name: Setup dirs there
|
- name: Setup dirs there
|
||||||
file: state=directory path="/home/copr/{{ item }}" owner=copr group=copr mode=0700
|
ansible.builtin.file: state=directory path="/home/copr/{{ item }}" owner=copr group=copr mode=0700
|
||||||
with_items:
|
with_items:
|
||||||
- cloud
|
- cloud
|
||||||
- .ssh
|
- .ssh
|
||||||
|
@ -77,7 +77,7 @@
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
|
|
||||||
- name: Create empty known_hosts
|
- name: Create empty known_hosts
|
||||||
file: state=touch dest=/home/copr/.ssh/known_hosts owner=copr group=copr mode=600
|
ansible.builtin.file: state=touch dest=/home/copr/.ssh/known_hosts owner=copr group=copr mode=600
|
||||||
when: hostsstat.rc == 1
|
when: hostsstat.rc == 1
|
||||||
|
|
||||||
- name: Replace bashrc for copr user
|
- name: Replace bashrc for copr user
|
||||||
|
@ -118,7 +118,7 @@
|
||||||
seboolean: name=httpd_setrlimit state=yes persistent=yes
|
seboolean: name=httpd_setrlimit state=yes persistent=yes
|
||||||
|
|
||||||
- name: Create directory for compress module of lighttpd
|
- name: Create directory for compress module of lighttpd
|
||||||
file: path=/var/cache/lighttpd/compress owner=lighttpd group=lighttpd mode=0644 state=directory
|
ansible.builtin.file: path=/var/cache/lighttpd/compress owner=lighttpd group=lighttpd mode=0644 state=directory
|
||||||
|
|
||||||
# mime default to text/plain and enable dirlisting for indexes
|
# mime default to text/plain and enable dirlisting for indexes
|
||||||
- name: Update lighttpd configs
|
- name: Update lighttpd configs
|
||||||
|
@ -168,7 +168,7 @@
|
||||||
|
|
||||||
# setup dirs for the ansible execution off of provisioning
|
# setup dirs for the ansible execution off of provisioning
|
||||||
# - name: Dirs from provision
|
# - name: Dirs from provision
|
||||||
# file: state=directory path="/home/copr/provision/{{ item }}" owner=copr group=copr
|
# ansible.builtin.file: state=directory path="/home/copr/provision/{{ item }}" owner=copr group=copr
|
||||||
# with_items:
|
# with_items:
|
||||||
# - action_plugins
|
# - action_plugins
|
||||||
# - library
|
# - library
|
||||||
|
@ -248,7 +248,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Create messaging config directory
|
- name: Create messaging config directory
|
||||||
file: dest=/etc/copr/msgbuses state=directory owner=copr group=copr mode=0700
|
ansible.builtin.file: dest=/etc/copr/msgbuses state=directory owner=copr group=copr mode=0700
|
||||||
when: copr_messaging
|
when: copr_messaging
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -357,7 +357,7 @@
|
||||||
|
|
||||||
# Three tasks for handling our custom selinux module
|
# Three tasks for handling our custom selinux module
|
||||||
- name: Ensure a directory exists for our custom selinux module
|
- name: Ensure a directory exists for our custom selinux module
|
||||||
file: dest=/usr/local/share/copr state=directory
|
ansible.builtin.file: dest=/usr/local/share/copr state=directory
|
||||||
|
|
||||||
- name: Copy over our custom selinux module
|
- name: Copy over our custom selinux module
|
||||||
copy: src=selinux/copr_rules.pp dest=/usr/local/share/copr/copr_rules.pp
|
copy: src=selinux/copr_rules.pp dest=/usr/local/share/copr/copr_rules.pp
|
||||||
|
|
|
@ -70,7 +70,7 @@
|
||||||
notify: systemctl daemon-reload
|
notify: systemctl daemon-reload
|
||||||
|
|
||||||
- name: Prepare mount point
|
- name: Prepare mount point
|
||||||
file: state=directory path=/var/lib/copr/public_html
|
ansible.builtin.file: state=directory path=/var/lib/copr/public_html
|
||||||
|
|
||||||
- name: Mount up disk of copr repo
|
- name: Mount up disk of copr repo
|
||||||
mount: name=/var/lib/copr/public_html src='LABEL=copr-repo' fstype=ext4 state=mounted opts=nofail
|
mount: name=/var/lib/copr/public_html src='LABEL=copr-repo' fstype=ext4 state=mounted opts=nofail
|
||||||
|
|
|
@ -5,7 +5,7 @@
|
||||||
# dnf: state=present name=pulp-cli
|
# dnf: state=present name=pulp-cli
|
||||||
|
|
||||||
- name: Create pulp config directory
|
- name: Create pulp config directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
path: /home/copr/.config/pulp/
|
path: /home/copr/.config/pulp/
|
||||||
owner: copr
|
owner: copr
|
||||||
|
|
|
@ -131,7 +131,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Resalloc, ssh directory
|
- name: Resalloc, ssh directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /var/lib/resallocserver/.ssh
|
path: /var/lib/resallocserver/.ssh
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0700"
|
mode: "0700"
|
||||||
|
|
|
@ -82,7 +82,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Remove currently unused and broken os_nova filter
|
- name: Remove currently unused and broken os_nova filter
|
||||||
file: state=absent
|
ansible.builtin.file: state=absent
|
||||||
path="{{ provision_directory }}/filter_plugins/os_nova.py"
|
path="{{ provision_directory }}/filter_plugins/os_nova.py"
|
||||||
tags:
|
tags:
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
|
@ -130,7 +130,7 @@
|
||||||
|
|
||||||
- name: Prepare the certbot backup directory on batcave
|
- name: Prepare the certbot backup directory on batcave
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ le_backup_path }}"
|
path: "{{ le_backup_path }}"
|
||||||
# nobody, except for root, can step into this directory (on batcave)
|
# nobody, except for root, can step into this directory (on batcave)
|
||||||
mode: "0700"
|
mode: "0700"
|
||||||
|
|
|
@ -36,7 +36,7 @@
|
||||||
selinux: policy=targeted state=enforcing
|
selinux: policy=targeted state=enforcing
|
||||||
|
|
||||||
- name: Make sure directories are owned by copr-dist-git user
|
- name: Make sure directories are owned by copr-dist-git user
|
||||||
file: path={{ item }} owner=copr-dist-git group=copr-dist-git state=directory recurse=yes
|
ansible.builtin.file: path={{ item }} owner=copr-dist-git group=copr-dist-git state=directory recurse=yes
|
||||||
with_items:
|
with_items:
|
||||||
- /var/log/copr-dist-git/
|
- /var/log/copr-dist-git/
|
||||||
|
|
||||||
|
@ -114,7 +114,7 @@
|
||||||
when: not services_disabled|bool
|
when: not services_disabled|bool
|
||||||
|
|
||||||
- name: Create place for our custom SELinux policy
|
- name: Create place for our custom SELinux policy
|
||||||
file: path=/usr/local/share/selinux state=directory
|
ansible.builtin.file: path=/usr/local/share/selinux state=directory
|
||||||
|
|
||||||
- name: Copy over our custom selinux policy for cgit
|
- name: Copy over our custom selinux policy for cgit
|
||||||
copy: src=git_script_t.pp dest=/usr/local/share/selinux/git_script_t.pp
|
copy: src=git_script_t.pp dest=/usr/local/share/selinux/git_script_t.pp
|
||||||
|
@ -132,7 +132,7 @@
|
||||||
command: /usr/bin/copr-dist-git-refresh-cgit creates=/var/cache/cgit/repo-configuration.rc
|
command: /usr/bin/copr-dist-git-refresh-cgit creates=/var/cache/cgit/repo-configuration.rc
|
||||||
|
|
||||||
- name: Ensure that .config directory exists
|
- name: Ensure that .config directory exists
|
||||||
file: path=/home/copr-dist-git/.config state=directory
|
ansible.builtin.file: path=/home/copr-dist-git/.config state=directory
|
||||||
|
|
||||||
- name: Install .config/copr for copr-dist-git user (required for pruning)
|
- name: Install .config/copr for copr-dist-git user (required for pruning)
|
||||||
template: src="copr.conf" dest="/home/copr-dist-git/.config/copr" owner=copr-dist-git group=copr-dist-git
|
template: src="copr.conf" dest="/home/copr-dist-git/.config/copr" owner=copr-dist-git group=copr-dist-git
|
||||||
|
@ -161,7 +161,7 @@
|
||||||
- cron
|
- cron
|
||||||
|
|
||||||
- name: Drop monthly cron job
|
- name: Drop monthly cron job
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/cron.monthly/copr-dist-git
|
path: /etc/cron.monthly/copr-dist-git
|
||||||
state: absent
|
state: absent
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -1,15 +1,15 @@
|
||||||
---
|
---
|
||||||
- name: Prepare mount point
|
- name: Prepare mount point
|
||||||
file: state=directory path=/var/lib/dist-git
|
ansible.builtin.file: state=directory path=/var/lib/dist-git
|
||||||
|
|
||||||
- name: Mount up disk of copr repo
|
- name: Mount up disk of copr repo
|
||||||
mount: name=/var/lib/dist-git src='LABEL=copr-dist-git' fstype=ext4 state=mounted
|
mount: name=/var/lib/dist-git src='LABEL=copr-dist-git' fstype=ext4 state=mounted
|
||||||
|
|
||||||
- name: Prepare mount point
|
- name: Prepare mount point
|
||||||
file: state=directory path=/var/lib/copr-dist-git
|
ansible.builtin.file: state=directory path=/var/lib/copr-dist-git
|
||||||
|
|
||||||
- name: Create symlink for per-task-logs
|
- name: Create symlink for per-task-logs
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: link
|
state: link
|
||||||
src: /var/lib/dist-git/per-task-logs
|
src: /var/lib/dist-git/per-task-logs
|
||||||
path: /var/lib/copr-dist-git/per-task-logs
|
path: /var/lib/copr-dist-git/per-task-logs
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
- certbot
|
- certbot
|
||||||
|
|
||||||
- name: Drop old and now unused coprs_ssl.conf
|
- name: Drop old and now unused coprs_ssl.conf
|
||||||
file: path=/etc/httpd/conf.d/coprs_ssl.conf state=absent
|
ansible.builtin.file: path=/etc/httpd/conf.d/coprs_ssl.conf state=absent
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -76,11 +76,11 @@
|
||||||
# tags: patches
|
# tags: patches
|
||||||
|
|
||||||
- name: Directory for postgresql dumps
|
- name: Directory for postgresql dumps
|
||||||
file: state=directory path=/var/www/html/db_dumps/
|
ansible.builtin.file: state=directory path=/var/www/html/db_dumps/
|
||||||
owner=copr-fe mode=755
|
owner=copr-fe mode=755
|
||||||
|
|
||||||
- name: Directory for usage graphs
|
- name: Directory for usage graphs
|
||||||
file: state=directory path=/var/www/html/usage/
|
ansible.builtin.file: state=directory path=/var/www/html/usage/
|
||||||
owner=copr-fe mode=755
|
owner=copr-fe mode=755
|
||||||
|
|
||||||
- name: Install copr configs
|
- name: Install copr configs
|
||||||
|
@ -176,7 +176,7 @@
|
||||||
when: update_indexes_required_result.rc != 0
|
when: update_indexes_required_result.rc != 0
|
||||||
|
|
||||||
- name: Make sure /etc/fedora-messaging directory exists
|
- name: Make sure /etc/fedora-messaging directory exists
|
||||||
file: path=/etc/fedora-messaging state=directory
|
ansible.builtin.file: path=/etc/fedora-messaging state=directory
|
||||||
|
|
||||||
- name: Install fedora messaging config for Copr
|
- name: Install fedora messaging config for Copr
|
||||||
template: src="fedora-messaging/copr_messaging.toml" dest="/etc/fedora-messaging/copr_messaging.toml"
|
template: src="fedora-messaging/copr_messaging.toml" dest="/etc/fedora-messaging/copr_messaging.toml"
|
||||||
|
|
|
@ -22,7 +22,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Ensure postgres has a place to backup to
|
- name: Ensure postgres has a place to backup to
|
||||||
file: dest=/backups state=directory owner=postgres
|
ansible.builtin.file: dest=/backups state=directory owner=postgres
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
||||||
|
@ -147,6 +147,6 @@
|
||||||
register: history_file
|
register: history_file
|
||||||
|
|
||||||
- name: Install pghistory file
|
- name: Install pghistory file
|
||||||
file: path="{{ copr_fe_homedir }}/.psql_history" state=touch
|
ansible.builtin.file: path="{{ copr_fe_homedir }}/.psql_history" state=touch
|
||||||
owner=copr-fe group=copr-fe mode=0600
|
owner=copr-fe group=copr-fe mode=0600
|
||||||
when: not history_file.stat.exists
|
when: not history_file.stat.exists
|
||||||
|
|
|
@ -57,7 +57,7 @@
|
||||||
tags: libvirtd
|
tags: libvirtd
|
||||||
|
|
||||||
- name: Create libvirt image directory
|
- name: Create libvirt image directory
|
||||||
file: path={{ image_pool_dir }}
|
ansible.builtin.file: path={{ image_pool_dir }}
|
||||||
owner=qemu group=qemu mode=ug=rwx,g+s
|
owner=qemu group=qemu mode=ug=rwx,g+s
|
||||||
state=directory
|
state=directory
|
||||||
tags: libvirtd
|
tags: libvirtd
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Prepare mount point
|
- name: Prepare mount point
|
||||||
file: state=directory path=/var/lib/copr-keygen
|
ansible.builtin.file: state=directory path=/var/lib/copr-keygen
|
||||||
|
|
||||||
- name: Mount up disk of copr repo
|
- name: Mount up disk of copr repo
|
||||||
mount: name=/var/lib/copr-keygen src='LABEL=copr-keygen' fstype=ext4 state=mounted
|
mount: name=/var/lib/copr-keygen src='LABEL=copr-keygen' fstype=ext4 state=mounted
|
||||||
|
@ -12,8 +12,7 @@
|
||||||
- restart haveged
|
- restart haveged
|
||||||
|
|
||||||
- name: Change owner of data to copr-signer
|
- name: Change owner of data to copr-signer
|
||||||
file: path=/var/lib/copr-keygen owner=copr-signer group=copr-signer recurse=yes
|
ansible.builtin.file: path=/var/lib/copr-keygen owner=copr-signer group=copr-signer recurse=yes
|
||||||
when: keychain_mounted.changed
|
|
||||||
|
|
||||||
- name: Put keygen vhost for httpd
|
- name: Put keygen vhost for httpd
|
||||||
copy: src="httpd/copr-keygen.conf" dest="/etc/httpd/conf.d/copr-keygen.conf"
|
copy: src="httpd/copr-keygen.conf" dest="/etc/httpd/conf.d/copr-keygen.conf"
|
||||||
|
@ -46,7 +45,7 @@
|
||||||
|
|
||||||
# Three tasks for handling our custom selinux module
|
# Three tasks for handling our custom selinux module
|
||||||
- name: Ensure a directory exists for our custom selinux module
|
- name: Ensure a directory exists for our custom selinux module
|
||||||
file: dest=/usr/local/share/copr state=directory
|
ansible.builtin.file: dest=/usr/local/share/copr state=directory
|
||||||
|
|
||||||
- name: Copy over our custom selinux module
|
- name: Copy over our custom selinux module
|
||||||
copy: src=selinux/copr_rules.pp dest=/usr/local/share/copr/copr_rules.pp
|
copy: src=selinux/copr_rules.pp dest=/usr/local/share/copr/copr_rules.pp
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Ensure /backup dir
|
- name: Ensure /backup dir
|
||||||
file: path=/backup state=directory
|
ansible.builtin.file: path=/backup state=directory
|
||||||
|
|
||||||
- name: Copy pubkey for backup encryption
|
- name: Copy pubkey for backup encryption
|
||||||
copy: src="{{ private }}/files/copr/keygen/backup_key.asc" dest="/root/backup_key.asc"
|
copy: src="{{ private }}/files/copr/keygen/backup_key.asc" dest="/root/backup_key.asc"
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Create directories
|
- name: Create directories
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/web/{{item}}
|
path=/srv/web/{{item}}
|
||||||
owner=apache group=apache mode=0755
|
owner=apache group=apache mode=0755
|
||||||
setype=httpd_sys_content_t seuser=system_u
|
setype=httpd_sys_content_t seuser=system_u
|
||||||
|
|
|
@ -49,7 +49,7 @@
|
||||||
# - stunnel
|
# - stunnel
|
||||||
|
|
||||||
# - name: Ensure old stunnel init file is gone
|
# - name: Ensure old stunnel init file is gone
|
||||||
# file: dest=/etc/init.d/stunnel/stunnel.init state=absent
|
# ansible.builtin.file: dest=/etc/init.d/stunnel/stunnel.init state=absent
|
||||||
# tags:
|
# tags:
|
||||||
# - pagure
|
# - pagure
|
||||||
# - stunnel
|
# - stunnel
|
||||||
|
@ -93,7 +93,7 @@
|
||||||
- pagure
|
- pagure
|
||||||
|
|
||||||
- name: Create the /var/log/pagure folder where to store the logs
|
- name: Create the /var/log/pagure folder where to store the logs
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/var/log/pagure
|
path=/var/log/pagure
|
||||||
owner=pagure group=packager mode=u+rwx,g+rwxs,o+rx
|
owner=pagure group=packager mode=u+rwx,g+rwxs,o+rx
|
||||||
tags:
|
tags:
|
||||||
|
@ -113,7 +113,7 @@
|
||||||
- fix_log
|
- fix_log
|
||||||
|
|
||||||
- name: Create the /srv/tmp folder where to clone repos
|
- name: Create the /srv/tmp folder where to clone repos
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/tmp
|
path=/srv/tmp
|
||||||
owner=pagure group=pagure mode=0775
|
owner=pagure group=pagure mode=0775
|
||||||
tags:
|
tags:
|
||||||
|
@ -163,7 +163,7 @@
|
||||||
- pagure
|
- pagure
|
||||||
|
|
||||||
- name: Create all the directories where we store the git repos
|
- name: Create all the directories where we store the git repos
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path={{ item }}
|
path={{ item }}
|
||||||
owner=root group=packager mode=2775
|
owner=root group=packager mode=2775
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -176,7 +176,7 @@
|
||||||
- pagure
|
- pagure
|
||||||
|
|
||||||
- name: Create the remotes folder so pagure can clone remote repos
|
- name: Create the remotes folder so pagure can clone remote repos
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path={{ item }}
|
path={{ item }}
|
||||||
owner=root group=packager mode=2775
|
owner=root group=packager mode=2775
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -271,7 +271,7 @@
|
||||||
- restart apache
|
- restart apache
|
||||||
|
|
||||||
- name: Create the /srv/cache/extras folder for the crons
|
- name: Create the /srv/cache/extras folder for the crons
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/cache/extras
|
path=/srv/cache/extras
|
||||||
owner=apache group=apache mode=0775
|
owner=apache group=apache mode=0775
|
||||||
tags:
|
tags:
|
||||||
|
@ -321,7 +321,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Create the config folder for fedora-messaging
|
- name: Create the config folder for fedora-messaging
|
||||||
file: path=/etc/fedora-messaging/ owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/etc/fedora-messaging/ owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- pagure
|
- pagure
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
@ -335,7 +335,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Create folder where we'll place the certs
|
- name: Create folder where we'll place the certs
|
||||||
file: path=/etc/pki/rabbitmq/pagurecert/ owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/etc/pki/rabbitmq/pagurecert/ owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- pagure
|
- pagure
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
|
@ -42,7 +42,7 @@
|
||||||
- distgit
|
- distgit
|
||||||
|
|
||||||
- name: Create suexec wrapper directory
|
- name: Create suexec wrapper directory
|
||||||
file: path=/var/www/bin state=directory owner=pagure group=packager
|
ansible.builtin.file: path=/var/www/bin state=directory owner=pagure group=packager
|
||||||
tags:
|
tags:
|
||||||
- distgit
|
- distgit
|
||||||
|
|
||||||
|
@ -168,13 +168,13 @@
|
||||||
when: inventory_hostname.startswith('batcave')
|
when: inventory_hostname.startswith('batcave')
|
||||||
|
|
||||||
- name: Create the distgit root directory (/srv/git)
|
- name: Create the distgit root directory (/srv/git)
|
||||||
file: dest=/srv/git state=directory mode=0755
|
ansible.builtin.file: dest=/srv/git state=directory mode=0755
|
||||||
tags:
|
tags:
|
||||||
- distgit
|
- distgit
|
||||||
|
|
||||||
# These should all map to pkgdb namespaces
|
# These should all map to pkgdb namespaces
|
||||||
- name: Create our namespace directories inside there..
|
- name: Create our namespace directories inside there..
|
||||||
file: dest=/srv/git/repositories/{{item}} state=directory mode=2775 group=packager
|
ansible.builtin.file: dest=/srv/git/repositories/{{item}} state=directory mode=2775 group=packager
|
||||||
with_items:
|
with_items:
|
||||||
- rpms
|
- rpms
|
||||||
- docker
|
- docker
|
||||||
|
@ -247,7 +247,7 @@
|
||||||
- sslciphers
|
- sslciphers
|
||||||
|
|
||||||
- name: Create the Lookaside Cache root directory
|
- name: Create the Lookaside Cache root directory
|
||||||
file: dest=/srv/cache/lookaside/pkgs state=directory
|
ansible.builtin.file: dest=/srv/cache/lookaside/pkgs state=directory
|
||||||
owner=apache group=apache
|
owner=apache group=apache
|
||||||
tags:
|
tags:
|
||||||
- distgit
|
- distgit
|
||||||
|
@ -310,7 +310,7 @@
|
||||||
|
|
||||||
# Three tasks for handling our selinux policy for upload.cgi
|
# Three tasks for handling our selinux policy for upload.cgi
|
||||||
- name: Ensure a directory exists for our SELinux policy
|
- name: Ensure a directory exists for our SELinux policy
|
||||||
file: dest=/usr/local/share/selinux/ state=directory
|
ansible.builtin.file: dest=/usr/local/share/selinux/ state=directory
|
||||||
tags: selinux
|
tags: selinux
|
||||||
|
|
||||||
- name: Copy over our custom selinux policy
|
- name: Copy over our custom selinux policy
|
||||||
|
@ -349,7 +349,7 @@
|
||||||
- pkgs
|
- pkgs
|
||||||
|
|
||||||
- name: Make dir for grokmirror manifest
|
- name: Make dir for grokmirror manifest
|
||||||
file: path=/srv/git/grokmirror state=directory owner=root group=packager mode=2775
|
ansible.builtin.file: path=/srv/git/grokmirror state=directory owner=root group=packager mode=2775
|
||||||
tags:
|
tags:
|
||||||
- grokmirror
|
- grokmirror
|
||||||
- pkgs
|
- pkgs
|
||||||
|
|
|
@ -20,7 +20,7 @@
|
||||||
- docker-distribution
|
- docker-distribution
|
||||||
|
|
||||||
- name: Ensure docker certs dir exists
|
- name: Ensure docker certs dir exists
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ cert.dest_dir }}"
|
path: "{{ cert.dest_dir }}"
|
||||||
state: directory
|
state: directory
|
||||||
when: tls.enabled
|
when: tls.enabled
|
||||||
|
|
|
@ -9,10 +9,10 @@
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
- name: Create /srv/pub directory
|
- name: Create /srv/pub directory
|
||||||
file: path=/srv/pub state=directory
|
ansible.builtin.file: path=/srv/pub state=directory
|
||||||
|
|
||||||
- name: Create /srv/web directory
|
- name: Create /srv/web directory
|
||||||
file: path=/srv/web state=directory
|
ansible.builtin.file: path=/srv/web state=directory
|
||||||
|
|
||||||
- name: Set httpd_use_nfs seboolean
|
- name: Set httpd_use_nfs seboolean
|
||||||
seboolean: name=httpd_use_nfs state=yes persistent=yes
|
seboolean: name=httpd_use_nfs state=yes persistent=yes
|
||||||
|
|
|
@ -3,14 +3,14 @@
|
||||||
|
|
||||||
## Create all the folder used/needed
|
## Create all the folder used/needed
|
||||||
- name: Create the easyfix folder
|
- name: Create the easyfix folder
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/web/easyfix
|
path=/srv/web/easyfix
|
||||||
owner=apache group=apache mode=0755
|
owner=apache group=apache mode=0755
|
||||||
tags:
|
tags:
|
||||||
- easyfix
|
- easyfix
|
||||||
|
|
||||||
- name: Create the easyfix configuration folder
|
- name: Create the easyfix configuration folder
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/etc/fedora-gather-easyfix/
|
path=/etc/fedora-gather-easyfix/
|
||||||
owner=root group=root mode=0755
|
owner=root group=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Ensure dir for content exists
|
- name: Ensure dir for content exists
|
||||||
file: dest=/srv/web/gather-easyfix owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: dest=/srv/web/gather-easyfix owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- easyfix
|
- easyfix
|
||||||
- easyfix/proxy
|
- easyfix/proxy
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Create the directories to hold the templates
|
- name: Create the directories to hold the templates
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/root/ocp4/openshift-apps/fas2discourse-operator"
|
path: "/root/ocp4/openshift-apps/fas2discourse-operator"
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: Create the fas2discourse keytab path on the batcave01
|
- name: Create the fas2discourse keytab path on the batcave01
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/etc/openshift_apps/fas2discourse/"
|
path: "/etc/openshift_apps/fas2discourse/"
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -43,13 +43,13 @@
|
||||||
when: ansible_distribution_major_version|int < 31 and ansible_distribution == 'Fedora'
|
when: ansible_distribution_major_version|int < 31 and ansible_distribution == 'Fedora'
|
||||||
|
|
||||||
- name: Setup /etc/fedmsg.d directory
|
- name: Setup /etc/fedmsg.d directory
|
||||||
file: path=/etc/fedmsg.d owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/etc/fedmsg.d owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- fedmsg/base
|
- fedmsg/base
|
||||||
|
|
||||||
- name: Remove any old static endpoints files
|
- name: Remove any old static endpoints files
|
||||||
file: dest="/etc/fedmsg.d/{{item}}" state=absent
|
ansible.builtin.file: dest="/etc/fedmsg.d/{{item}}" state=absent
|
||||||
with_items:
|
with_items:
|
||||||
- endpoints-bodhi.py
|
- endpoints-bodhi.py
|
||||||
- endpoints-elections.py
|
- endpoints-elections.py
|
||||||
|
@ -172,7 +172,7 @@
|
||||||
- restart fedmsg-relay
|
- restart fedmsg-relay
|
||||||
|
|
||||||
- name: Destroy standard config to make way for debug loopback.
|
- name: Destroy standard config to make way for debug loopback.
|
||||||
file: dest=/etc/fedmsg.d/{{item}} state=absent
|
ansible.builtin.file: dest=/etc/fedmsg.d/{{item}} state=absent
|
||||||
with_items:
|
with_items:
|
||||||
- relay.py
|
- relay.py
|
||||||
- policy.py
|
- policy.py
|
||||||
|
@ -208,7 +208,7 @@
|
||||||
- fedmsg/base
|
- fedmsg/base
|
||||||
|
|
||||||
- name: Setup /etc/pki/fedmsg directory
|
- name: Setup /etc/pki/fedmsg directory
|
||||||
file: path=/etc/pki/fedmsg owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/etc/pki/fedmsg owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- fedmsg/base
|
- fedmsg/base
|
||||||
|
@ -254,7 +254,7 @@
|
||||||
|
|
||||||
# Three tasks for handling our custom selinux module
|
# Three tasks for handling our custom selinux module
|
||||||
- name: Ensure a directory exists for our custom selinux module
|
- name: Ensure a directory exists for our custom selinux module
|
||||||
file: dest=/usr/local/share/fedmsg state=directory
|
ansible.builtin.file: dest=/usr/local/share/fedmsg state=directory
|
||||||
tags:
|
tags:
|
||||||
- fedmsg/base
|
- fedmsg/base
|
||||||
|
|
||||||
|
|
|
@ -5,7 +5,7 @@
|
||||||
|
|
||||||
---
|
---
|
||||||
- name: Ensure dir for content exists
|
- name: Ensure dir for content exists
|
||||||
file: dest=/srv/web/fedmsg owner=apache group=apache mode=0755 state=directory
|
ansible.builtin.file: dest=/srv/web/fedmsg owner=apache group=apache mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- fedmsg
|
- fedmsg
|
||||||
- fedmsg/crl
|
- fedmsg/crl
|
||||||
|
|
|
@ -61,7 +61,7 @@
|
||||||
# Stunnel specific bits
|
# Stunnel specific bits
|
||||||
|
|
||||||
- name: Create directories
|
- name: Create directories
|
||||||
file: path=/etc/{{ item }} state=directory
|
ansible.builtin.file: path=/etc/{{ item }} state=directory
|
||||||
with_items:
|
with_items:
|
||||||
- stunnel
|
- stunnel
|
||||||
tags:
|
tags:
|
||||||
|
@ -80,7 +80,7 @@
|
||||||
- fedmsg/gateway/slave
|
- fedmsg/gateway/slave
|
||||||
|
|
||||||
- name: Ensure old stunnel init file is gone
|
- name: Ensure old stunnel init file is gone
|
||||||
file: dest=/etc/init.d/stunnel/stunnel.init state=absent
|
ansible.builtin.file: dest=/etc/init.d/stunnel/stunnel.init state=absent
|
||||||
tags:
|
tags:
|
||||||
- fedmsg/gateway
|
- fedmsg/gateway
|
||||||
- fedmsg/gateway/slave
|
- fedmsg/gateway/slave
|
||||||
|
|
|
@ -6,7 +6,7 @@
|
||||||
- fedmsg/gateway
|
- fedmsg/gateway
|
||||||
|
|
||||||
- name: Ensure that nrpe has rights to monitor us
|
- name: Ensure that nrpe has rights to monitor us
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
dest=/var/run/fedmsg/monitoring-fedmsg-gateway.socket
|
dest=/var/run/fedmsg/monitoring-fedmsg-gateway.socket
|
||||||
mode=0775
|
mode=0775
|
||||||
owner=fedmsg
|
owner=fedmsg
|
||||||
|
@ -25,7 +25,7 @@
|
||||||
- restart fedmsg-gateway
|
- restart fedmsg-gateway
|
||||||
|
|
||||||
- name: Create systemd drop-in directory
|
- name: Create systemd drop-in directory
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
dest=/etc/systemd/system/fedmsg-gateway.service.d
|
dest=/etc/systemd/system/fedmsg-gateway.service.d
|
||||||
state=directory
|
state=directory
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -35,12 +35,12 @@
|
||||||
notify: restart fedmsg-hub
|
notify: restart fedmsg-hub
|
||||||
|
|
||||||
- name: Disable the websocket server if we should..
|
- name: Disable the websocket server if we should..
|
||||||
file: dest=/etc/fedmsg.d/websockets.py state=absent
|
ansible.builtin.file: dest=/etc/fedmsg.d/websockets.py state=absent
|
||||||
when: not enable_websocket_server
|
when: not enable_websocket_server
|
||||||
notify: restart fedmsg-hub
|
notify: restart fedmsg-hub
|
||||||
|
|
||||||
- name: Set fedmsg ownership on /var/run/fedmsg
|
- name: Set fedmsg ownership on /var/run/fedmsg
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
dest=/var/run/fedmsg/
|
dest=/var/run/fedmsg/
|
||||||
mode=2775
|
mode=2775
|
||||||
owner=fedmsg
|
owner=fedmsg
|
||||||
|
@ -50,7 +50,7 @@
|
||||||
- fedmsgmonitor
|
- fedmsgmonitor
|
||||||
|
|
||||||
- name: Ensure that nrpe has rights to monitor us
|
- name: Ensure that nrpe has rights to monitor us
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
dest=/var/run/fedmsg/monitoring-fedmsg-hub.socket
|
dest=/var/run/fedmsg/monitoring-fedmsg-hub.socket
|
||||||
mode=0775
|
mode=0775
|
||||||
owner=fedmsg
|
owner=fedmsg
|
||||||
|
@ -63,7 +63,7 @@
|
||||||
- fedmsgmonitor
|
- fedmsgmonitor
|
||||||
|
|
||||||
- name: Create systemd config directoryies
|
- name: Create systemd config directoryies
|
||||||
file: path="/etc/systemd/system/{{ item }}.service.d" state=directory
|
ansible.builtin.file: path="/etc/systemd/system/{{ item }}.service.d" state=directory
|
||||||
with_items:
|
with_items:
|
||||||
- fedmsg-hub
|
- fedmsg-hub
|
||||||
- fedmsg-hub-3
|
- fedmsg-hub-3
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
- fedmsg/irc
|
- fedmsg/irc
|
||||||
|
|
||||||
- name: Ensure that nrpe has rights to monitor us
|
- name: Ensure that nrpe has rights to monitor us
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
dest=/var/run/fedmsg/monitoring-fedmsg-irc.socket
|
dest=/var/run/fedmsg/monitoring-fedmsg-irc.socket
|
||||||
mode=0775
|
mode=0775
|
||||||
owner=fedmsg
|
owner=fedmsg
|
||||||
|
|
|
@ -17,7 +17,7 @@
|
||||||
when: ansible_distribution_major_version|int > 21
|
when: ansible_distribution_major_version|int > 21
|
||||||
|
|
||||||
- name: Ensure that nrpe has rights to monitor us
|
- name: Ensure that nrpe has rights to monitor us
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
dest=/var/run/fedmsg/monitoring-fedmsg-relay.socket
|
dest=/var/run/fedmsg/monitoring-fedmsg-relay.socket
|
||||||
mode=0775
|
mode=0775
|
||||||
owner=fedmsg
|
owner=fedmsg
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
---
|
---
|
||||||
- file: dest=/srv/web/budget.fedoraproject.org state=directory
|
- ansible.builtin.file: dest=/srv/web/budget.fedoraproject.org state=directory
|
||||||
|
|
||||||
- template: >
|
- template: >
|
||||||
src=budget-sync.j2 dest=/usr/local/bin/budget-sync
|
src=budget-sync.j2 dest=/usr/local/bin/budget-sync
|
||||||
|
|
|
@ -57,7 +57,7 @@
|
||||||
- fedora-web
|
- fedora-web
|
||||||
|
|
||||||
- name: Create directories
|
- name: Create directories
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
path: /srv/web/{{ item }}
|
path: /srv/web/{{ item }}
|
||||||
owner: apache
|
owner: apache
|
||||||
|
@ -75,7 +75,7 @@
|
||||||
- fedora-web
|
- fedora-web
|
||||||
|
|
||||||
- name: Make fmw dir
|
- name: Make fmw dir
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
path: /srv/web/fmw
|
path: /srv/web/fmw
|
||||||
owner: apache
|
owner: apache
|
||||||
|
@ -88,7 +88,7 @@
|
||||||
when: env != 'staging'
|
when: env != 'staging'
|
||||||
|
|
||||||
- name: Make fmw dir
|
- name: Make fmw dir
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
path: /srv/web/fmw
|
path: /srv/web/fmw
|
||||||
owner: apache
|
owner: apache
|
||||||
|
@ -101,14 +101,14 @@
|
||||||
when: env == 'staging'
|
when: env == 'staging'
|
||||||
|
|
||||||
- name: Remove the syncTranslations cronjob
|
- name: Remove the syncTranslations cronjob
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/cron.d/syncTranslations.cron
|
path: /etc/cron.d/syncTranslations.cron
|
||||||
state: absent
|
state: absent
|
||||||
tags:
|
tags:
|
||||||
- cron
|
- cron
|
||||||
|
|
||||||
- name: Remove the syncStatic cronjob
|
- name: Remove the syncStatic cronjob
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/cron.d/syncStatic.cron
|
path: /etc/cron.d/syncStatic.cron
|
||||||
state: absent
|
state: absent
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Make /srv/web/fedora.im dir
|
- name: Make /srv/web/fedora.im dir
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/web/fedora.im
|
path=/srv/web/fedora.im
|
||||||
owner=apache
|
owner=apache
|
||||||
group=apache
|
group=apache
|
||||||
|
|
|
@ -10,7 +10,7 @@
|
||||||
|
|
||||||
- name: Load s3 credentials
|
- name: Load s3 credentials
|
||||||
ansible.builtin.include_vars:
|
ansible.builtin.include_vars:
|
||||||
file: "{{ private }}/files/websites/s3_fedoraproject_{{ env_short }}.yml"
|
ansible.builtin.file: "{{ private }}/files/websites/s3_fedoraproject_{{ env_short }}.yml"
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
tags:
|
tags:
|
||||||
- fedora-web
|
- fedora-web
|
||||||
|
@ -38,7 +38,7 @@
|
||||||
- fedoraproject_s3_bucket_name is defined
|
- fedoraproject_s3_bucket_name is defined
|
||||||
|
|
||||||
- name: Make directory for the config files for {{website}} we are about to copy
|
- name: Make directory for the config files for {{website}} we are about to copy
|
||||||
file: path=/etc/httpd/conf.d/{{website}} state=directory owner=root group=root mode=0755
|
ansible.builtin.file: path=/etc/httpd/conf.d/{{website}} state=directory owner=root group=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
- fedora-web
|
- fedora-web
|
||||||
- fedora-web/main
|
- fedora-web/main
|
||||||
|
@ -80,7 +80,7 @@
|
||||||
- fedora-web/main
|
- fedora-web/main
|
||||||
|
|
||||||
- name: Create a directory for hotspot
|
- name: Create a directory for hotspot
|
||||||
file: path=/srv/web state=directory owner=root group=root mode=0755
|
ansible.builtin.file: path=/srv/web state=directory owner=root group=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
- fedora-web
|
- fedora-web
|
||||||
- fedora-web/main
|
- fedora-web/main
|
||||||
|
|
|
@ -8,7 +8,7 @@
|
||||||
- ostree
|
- ostree
|
||||||
|
|
||||||
- name: Make ostree dir
|
- name: Make ostree dir
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/web/ostree
|
path=/srv/web/ostree
|
||||||
owner=apache
|
owner=apache
|
||||||
group=sysadmin-releng
|
group=sysadmin-releng
|
||||||
|
@ -21,7 +21,7 @@
|
||||||
when: env != 'staging'
|
when: env != 'staging'
|
||||||
|
|
||||||
- name: Make ostree dir
|
- name: Make ostree dir
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/web/ostree
|
path=/srv/web/ostree
|
||||||
owner=apache
|
owner=apache
|
||||||
group=apache
|
group=apache
|
||||||
|
@ -43,7 +43,7 @@
|
||||||
- ostree
|
- ostree
|
||||||
|
|
||||||
- name: Make IoT ostree dir
|
- name: Make IoT ostree dir
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/web/ostree/iot
|
path=/srv/web/ostree/iot
|
||||||
owner=apache
|
owner=apache
|
||||||
group=sysadmin-releng
|
group=sysadmin-releng
|
||||||
|
@ -56,7 +56,7 @@
|
||||||
when: env != 'staging'
|
when: env != 'staging'
|
||||||
|
|
||||||
- name: Make IoT ostree dir
|
- name: Make IoT ostree dir
|
||||||
file: state=directory
|
ansible.builtin.file: state=directory
|
||||||
path=/srv/web/ostree/iot
|
path=/srv/web/ostree/iot
|
||||||
owner=apache
|
owner=apache
|
||||||
group=apache
|
group=apache
|
||||||
|
|
|
@ -1,11 +1,11 @@
|
||||||
---
|
---
|
||||||
- name: Make registry-signatures dir
|
- name: Make registry-signatures dir
|
||||||
file: state=directory path=/srv/web/registry-signatures owner=apache group=sysadmin-releng mode=2775 setype=httpd_sys_content_t seuser=system_u
|
ansible.builtin.file: state=directory path=/srv/web/registry-signatures owner=apache group=sysadmin-releng mode=2775 setype=httpd_sys_content_t seuser=system_u
|
||||||
tags:
|
tags:
|
||||||
- fedora-web
|
- fedora-web
|
||||||
|
|
||||||
- name: Make registry-index dir
|
- name: Make registry-index dir
|
||||||
file: state=directory path=/srv/web/registry-index owner=apache group=apache mode=755 setype=httpd_sys_content_t seuser=system_u
|
ansible.builtin.file: state=directory path=/srv/web/registry-index owner=apache group=apache mode=755 setype=httpd_sys_content_t seuser=system_u
|
||||||
tags:
|
tags:
|
||||||
- fedora-web
|
- fedora-web
|
||||||
|
|
||||||
|
|
|
@ -104,7 +104,7 @@
|
||||||
- restart fedora_nightlies
|
- restart fedora_nightlies
|
||||||
|
|
||||||
- name: Create /etc/pki/fedora-messaging
|
- name: Create /etc/pki/fedora-messaging
|
||||||
file:
|
ansible.builtin.file:
|
||||||
dest: /etc/pki/fedora-messaging
|
dest: /etc/pki/fedora-messaging
|
||||||
mode: "0775"
|
mode: "0775"
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Create directories
|
- name: Create directories
|
||||||
file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
path: "/srv/web/{{item}}"
|
path: "/srv/web/{{item}}"
|
||||||
owner: apache
|
owner: apache
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Ensure /var/spool/squid directory exists
|
- name: Ensure /var/spool/squid directory exists
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /var/spool/squid
|
path: /var/spool/squid
|
||||||
state: directory
|
state: directory
|
||||||
owner: squid
|
owner: squid
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Ensure /etc/pki/squid directory exists
|
- name: Ensure /etc/pki/squid directory exists
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/pki/squid
|
path: /etc/pki/squid
|
||||||
state: directory
|
state: directory
|
||||||
owner: squid
|
owner: squid
|
||||||
|
|
|
@ -12,7 +12,7 @@
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
- name: Setup /srv/web/freemedia directory
|
- name: Setup /srv/web/freemedia directory
|
||||||
file: path=/srv/web/freemedia owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/srv/web/freemedia owner=root group=root mode=0755 state=directory
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
||||||
|
|
|
@ -41,7 +41,7 @@
|
||||||
- geoip-city-wsgi/app
|
- geoip-city-wsgi/app
|
||||||
|
|
||||||
- name: Setup /usr/share/geoip-city-wsgi directory
|
- name: Setup /usr/share/geoip-city-wsgi directory
|
||||||
file: >
|
ansible.builtin.file: >
|
||||||
path=/usr/share/geoip-city-wsgi
|
path=/usr/share/geoip-city-wsgi
|
||||||
owner=root
|
owner=root
|
||||||
group=root
|
group=root
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
- geoip-city-wsgi/proxy
|
- geoip-city-wsgi/proxy
|
||||||
|
|
||||||
- name: Make a dir for our fancy about page. So chic!
|
- name: Make a dir for our fancy about page. So chic!
|
||||||
file: dest=/srv/web/geoip state=directory mode=0775 owner=root group=root
|
ansible.builtin.file: dest=/srv/web/geoip state=directory mode=0775 owner=root group=root
|
||||||
tags:
|
tags:
|
||||||
- geoip-city-wsgi
|
- geoip-city-wsgi
|
||||||
- geoip-city-wsgi/proxy
|
- geoip-city-wsgi/proxy
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
when: (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int >= 8)
|
when: (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int >= 8)
|
||||||
|
|
||||||
- name: Make sure the /usr/share/GeoIP/ directory exists
|
- name: Make sure the /usr/share/GeoIP/ directory exists
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /usr/share/GeoIP/
|
path: /usr/share/GeoIP/
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -8,7 +8,7 @@
|
||||||
- python2
|
- python2
|
||||||
|
|
||||||
- name: Create the destination directory
|
- name: Create the destination directory
|
||||||
file: dest=/srv/git_seed owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: dest=/srv/git_seed owner=root group=root mode=0755 state=directory
|
||||||
when: env != 'staging'
|
when: env != 'staging'
|
||||||
|
|
||||||
- name: Install the production version of the script and schedule its execution
|
- name: Install the production version of the script and schedule its execution
|
||||||
|
|
|
@ -7,12 +7,12 @@
|
||||||
|
|
||||||
# If NOT using xinetd
|
# If NOT using xinetd
|
||||||
- name: Delete stock git daemon config
|
- name: Delete stock git daemon config
|
||||||
file: path="/usr/lib/systemd/system/git.service" state=absent
|
ansible.builtin.file: path="/usr/lib/systemd/system/git.service" state=absent
|
||||||
when: ansible_distribution_major_version|int >= 7 and ansible_distribution == 'RedHat'
|
when: ansible_distribution_major_version|int >= 7 and ansible_distribution == 'RedHat'
|
||||||
tags: git/server
|
tags: git/server
|
||||||
|
|
||||||
- name: Delete stock git daemon config
|
- name: Delete stock git daemon config
|
||||||
file: path="/usr/lib/systemd/system/git.service" state=absent
|
ansible.builtin.file: path="/usr/lib/systemd/system/git.service" state=absent
|
||||||
when: ansible_distribution_major_version|int >= 29 and ansible_distribution == 'Fedora'
|
when: ansible_distribution_major_version|int >= 29 and ansible_distribution == 'Fedora'
|
||||||
tags: git/server
|
tags: git/server
|
||||||
|
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- github2fedmsg
|
- github2fedmsg
|
||||||
|
|
||||||
- name: Make some directories
|
- name: Make some directories
|
||||||
file: dest="{{item}}" mode=0755 state=directory
|
ansible.builtin.file: dest="{{item}}" mode=0755 state=directory
|
||||||
with_items:
|
with_items:
|
||||||
- /etc/github2fedmsg
|
- /etc/github2fedmsg
|
||||||
- /usr/share/github2fedmsg
|
- /usr/share/github2fedmsg
|
||||||
|
|
|
@ -8,4 +8,4 @@
|
||||||
- perl-Sys-Syslog
|
- perl-Sys-Syslog
|
||||||
|
|
||||||
- name: Ensure the /etc/gitolite directory
|
- name: Ensure the /etc/gitolite directory
|
||||||
file: path=/etc/gitolite owner=root group=root mode=0755 state=directory
|
ansible.builtin.file: path=/etc/gitolite owner=root group=root mode=0755 state=directory
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
- grobi
|
- grobi
|
||||||
|
|
||||||
- name: Make sure that /usr/local/bin exists
|
- name: Make sure that /usr/local/bin exists
|
||||||
file: path=/usr/local/bin state=directory
|
ansible.builtin.file: path=/usr/local/bin state=directory
|
||||||
tags:
|
tags:
|
||||||
- grobi
|
- grobi
|
||||||
|
|
||||||
|
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Add table
Add a link
Reference in a new issue