diff --git a/playbooks/hosts/cloud-noc01-os01.rdu-cc.fedoraproject.org.yml b/playbooks/hosts/cloud-noc01-os01.rdu-cc.fedoraproject.org.yml new file mode 100644 index 0000000000..012b233f7c --- /dev/null +++ b/playbooks/hosts/cloud-noc01-os01.rdu-cc.fedoraproject.org.yml @@ -0,0 +1,61 @@ +# This is a basic playbook + +- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=cloud-noc-os01.rdu-cc.fedoraproject.org" + +- name: make cloud noc hardware + hosts: cloud-noc-os01.rdu-cc.fedoraproject.org + user: root + gather_facts: True + + vars_files: + - /srv/web/infra/ansible/vars/global.yml + - "/srv/private/ansible/vars.yml" + - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml + + roles: + - base + - rkhunter + - nagios_client + - hosts + - fas_client + - collectd/base + - sudo + - dhcp_server + - tftp_server + + pre_tasks: + - import_tasks: "{{ tasks_path }}/yumrepos.yml" + + tasks: + - import_tasks: "{{ tasks_path }}/2fa_client.yml" + - import_tasks: "{{ tasks_path }}/motd.yml" + + - name: check if ntpd port is already known by selinux + shell: semanage port -l | grep ntp + register: ntp_selinux_port + check_mode: no + changed_when: false + failed_when: false + tags: + - config + - selinux + + - name: allow alternate ntpd port + command: semanage port -a -t ntp_port_t -p tcp 124 + when: '"124" not in ntp_selinux_port' + failed_when: false + tags: + - config + - selinux + + - name: allow alternate ntpd port + command: semanage port -a -t ntp_port_t -p udp 124 + when: '"124" not in ntp_selinux_port' + failed_when: false + tags: + - config + - selinux + + handlers: + - import_tasks: "{{ handlers_path }}/restart_services.yml" + diff --git a/roles/dhcp_server/files/dhcpd.conf.cloud-noc01-os.rdu-cc.fedoraproject.org b/roles/dhcp_server/files/dhcpd.conf.cloud-noc01-os.rdu-cc.fedoraproject.org new file mode 100644 index 0000000000..571edc58a7 --- /dev/null +++ b/roles/dhcp_server/files/dhcpd.conf.cloud-noc01-os.rdu-cc.fedoraproject.org @@ -0,0 +1,15 @@ +server-identifier cloud-noc-os01.rdu-cc.fedoraproject.org; +ddns-update-style none; + +shared-network mgmt { + option domain-name "mgmt.rdu-cc.fedoraproject.org"; + option domain-name-servers 8.8.8.8, 1.1.1.1; + + subnet 172.29.160.0 netmask 255.255.255.0 { + allow booting; + allow bootp; + + option routers 172.29.160.1; + range 10.29.160.100 10.29.160.249; + }; +};