Turns out the current version of linux-system-roles network doesn't like
setting ipv6 no and setting search domains since NetworkManager wants to
set them for both ipv4 and ipv6. There's some upstream fix, but not in
our current version.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This was done using yq (
https://mikefarah.gitbook.io/yq/operators/sort-keys )
Doing things this way makes it much easier to see if a variable is set
in a file or if two hosts differ in what variables they set. Hopefully
we can keep things sorted moving forward.
Basically this means just sort a-z anything you add to any host or group
vaiable and it will be in the right place.
Additionally, this enforces 'normal' intent rules for all the variable
files which we should also try and obey. 2 spaces for first level, 3 for
next, etc. When in doubt you can run yq on it.
This should cause NO actual vairable changes, it's all just readability
fixing for humans, ansible parses it exactly the same.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Currently we still see some errors with scanning the primary centos
stream 9 mirror.
The current assumption is that because of '--delay-updates' rsync
updates the primary mirror timestamps even if the actual files are moved
to the final location much later. This breaks our assumption during
scanning that we only have to check files in directories with changed
timestamps.
Currently we might scan the primary mirror and see updated timestamps
but the files are not yet moved to the final location because of
'--delay-updates'. After our scan, rsync finishes on the primary mirror
and the files are moved to the final location, but the timestamps of the
directories do not change. That results in us not detecting new files.
This change checks the timestamp of the COMPOSE_ID file and only runs
the scan if the timestamp is newer than during the last scan. The hope
is that the timestamp of COMPOSE_ID is only updated once the actual new
file is replacing the old file.
In addition to hopefully fixing the primary mirror scanning this should
also reduce the I/O load on the primary mirror because we do not run a
full rsync directory listing if COMPOSE_ID has not changed.
Signed-off-by: Adrian Reber <adrian@lisas.de>
I'm not sure what is causing some users to get /home/user instead of
/home/fedora/user. The ipa default is /home/fedora. Noggin doesn't
appear to override anything.
In any case fedorapeople is where this is really important as we have
web config and the like expecting /home/fedora/user. So, lets override
in sssd to make sure it uses the right place.
I'm also going to manually fix those users that are currently wrong.
See infra 10315
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Move all the prod and stg mounts into the same areas and fix the
conditional to not be negative and fix the ostree mounts to mount in the
right place in staging.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
ibiblio is moving it's ipv6 network and wants us to move our machines.
The last commit did this, but these machines aren't using linux sytem
roles, so it wouldn't change anything unless we reinstalled them.
So, lets move them over and then run playbooks to reconfigure.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The script was erroring because a stray uncommented url, but while I was
fixing that I cleaned up some more things. Unfortunatey, it's still
spewing module related junk, and I didn't see a way to prevent that. :(
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
