Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Make vhost-info indicate insecure vhosts

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2018-01-11 21:45:16 +00:00
parent 313a61a0f2
commit 5bbafa3c1a
1 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

9
scripts/vhost-info
View file

@ -71,6 +71,8 @@ loader = DataLoader()
inv = InventoryManager(loader=loader, sources=opts.host_file) inv = InventoryManager(loader=loader, sources=opts.host_file)
variable_manager = VariableManager(loader=loader, inventory=inv) variable_manager = VariableManager(loader=loader, inventory=inv)
unpatched_spectre = loader.load_from_file('/srv/private/ansible/vars.yml')['non_spectre_patched']
# create play with tasks # create play with tasks
play_source = dict( play_source = dict(
name = "vhost-info", name = "vhost-info",
@ -99,5 +101,8 @@ finally:
for vhostname in sorted(cb.mem_per_host): for vhostname in sorted(cb.mem_per_host):
freemem = cb.mem_per_host[vhostname] - cb.mem_used_in_vm[vhostname] freemem = cb.mem_per_host[vhostname] - cb.mem_used_in_vm[vhostname]
freecpu = cb.cpu_per_host[vhostname] - cb.cpu_used_in_vm[vhostname] freecpu = cb.cpu_per_host[vhostname] - cb.cpu_used_in_vm[vhostname]
print '%s:\t%s/%s mem(unused/total)\t%s/%s cpus(unused/total)' % ( insecure = ''
vhostname, freemem, cb.mem_per_host[vhostname], freecpu, cb.cpu_per_host[vhostname]) if vhostname in unpatched_spectre:
insecure = ' (NOT PATCHED FOR SPECTRE)'
print '%s:\t%s/%s mem(unused/total)\t%s/%s cpus(unused/total) %s' % (
vhostname, freemem, cb.mem_per_host[vhostname], freecpu, cb.cpu_per_host[vhostname], insecure)