You've already forked ansible-role-common
65 lines
1.4 KiB
YAML
65 lines
1.4 KiB
YAML
---
|
|
# tasks file for common role
|
|
- include: networking.yml
|
|
|
|
- name: Ensure common packages
|
|
yum:
|
|
name: "{{item}}"
|
|
state: present
|
|
enablerepo: epel
|
|
with_items: "{{ common_packages }}"
|
|
tags: packages
|
|
|
|
- name: Check if SELinux is installed
|
|
stat:
|
|
path: /etc/selinux/config
|
|
register: se
|
|
tags: security
|
|
|
|
- name: SELinux Management
|
|
block:
|
|
- name: selinux | Ensure SELinux status
|
|
selinux:
|
|
state: disabled
|
|
register: sestate
|
|
- name: selinux | Message Output
|
|
debug:
|
|
msg: "SELinux {{ sestate.msg }}"
|
|
when: sestate.changed
|
|
when: se.stat.exists
|
|
tags: security
|
|
|
|
- name: Create admin group
|
|
group: name={{ADMIN_GROUP}} state=present
|
|
|
|
- name: Configure yum limit
|
|
lineinfile:
|
|
dest: /etc/yum.conf
|
|
regexp: "installonly_limit="
|
|
line: "installonly_limit=2"
|
|
tags: packages
|
|
|
|
- name: Ensure Helpers are present
|
|
copy:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
mode: u+rwx,g+rx,o+rx
|
|
with_items:
|
|
- src: helpers/reload_scsi_devices
|
|
dest: /usr/local/bin/reload_scsi_devices
|
|
- src: helpers/reload_scsi_hosts
|
|
dest: /usr/local/bin/reload_scsi_hosts
|
|
|
|
- name: Ensure Hostname is set
|
|
hostname:
|
|
name: "{{ inventory_hostname }}.{{ domain }}"
|
|
|
|
- name: Change root password
|
|
user:
|
|
name: root
|
|
password: "{{ root_pwd }}"
|
|
changed_when: false
|
|
|
|
- include: grub.yml
|
|
- include: communication.yml
|
|
- include: motd.yml |