Add in dhcp.conf file and playbook for unfrozen /cloud-noc01-os01.rdu-cc.fedoraproject.org

playbooks/hosts/cloud-noc01-os01.rdu-cc.fedoraproject.org.yml

@@ -0,0 +1,61 @@
+# This is a basic playbook
+
+- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=cloud-noc-os01.rdu-cc.fedoraproject.org"
+
+- name: make cloud noc hardware
+  hosts: cloud-noc-os01.rdu-cc.fedoraproject.org
+  user: root
+  gather_facts: True
+
+  vars_files:
+   - /srv/web/infra/ansible/vars/global.yml
+   - "/srv/private/ansible/vars.yml"
+   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  roles:
+  - base
+  - rkhunter
+  - nagios_client
+  - hosts
+  - fas_client
+  - collectd/base
+  - sudo
+  - dhcp_server
+  - tftp_server
+
+  pre_tasks:
+  - import_tasks: "{{ tasks_path }}/yumrepos.yml"
+
+  tasks:
+  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
+  - import_tasks: "{{ tasks_path }}/motd.yml"
+
+  - name: check if ntpd port is already known by selinux
+    shell: semanage port -l | grep ntp
+    register: ntp_selinux_port
+    check_mode: no
+    changed_when: false
+    failed_when: false
+    tags:
+    - config
+    - selinux
+
+  - name: allow alternate ntpd port
+    command: semanage port -a -t ntp_port_t -p tcp 124
+    when: '"124" not in ntp_selinux_port'
+    failed_when: false
+    tags:
+    - config
+    - selinux
+
+  - name: allow alternate ntpd port
+    command: semanage port -a -t ntp_port_t -p udp 124
+    when: '"124" not in ntp_selinux_port'
+    failed_when: false
+    tags:
+    - config
+    - selinux
+
+  handlers:
+  - import_tasks: "{{ handlers_path }}/restart_services.yml"
+

roles/dhcp_server/files/dhcpd.conf.cloud-noc01-os.rdu-cc.fedoraproject.org

@@ -0,0 +1,15 @@
+server-identifier cloud-noc-os01.rdu-cc.fedoraproject.org;
+ddns-update-style none;
+
+shared-network mgmt {
+    option domain-name "mgmt.rdu-cc.fedoraproject.org";
+    option domain-name-servers 8.8.8.8, 1.1.1.1;
+
+    subnet 172.29.160.0 netmask 255.255.255.0 {
+    	   allow booting;
+    	   allow bootp;
+
+    	   option routers 172.29.160.1;
+	   range 10.29.160.100 10.29.160.249;
+	   };
+};