b85c6abfbb
This patch implements new functionality which allows operators not only load or configure kernel modules, but also explicitly blacklist them. We don't use community.general.kernel_blacklist for this, as using copy with content seems more trivial in terms of adding/removing modules to the list and does not require it to be list of mappings. Change-Id: I3b7e54e5064ed5bf528ac7fb3d7769777bb5ddf8 Signed-off-by: Dmitriy Rabotyagov <dmitriy.rabotyagov@cleura.com>
97 lines
2.6 KiB
YAML
97 lines
2.6 KiB
YAML
---
|
|
# Copyright 2019, VEXXHOST, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
## Defined required kernel
|
|
openstack_host_required_kernel: 4.9.0-0-amd64
|
|
openstack_host_sysstat_file: /etc/default/sysstat
|
|
openstack_host_sysstat_cron_file: /etc/cron.d/sysstat
|
|
openstack_host_cron_template: sysstat.cron.debian.j2
|
|
_openstack_host_initramfs_command: /usr/sbin/update-initramfs -u
|
|
|
|
## Kernel modules loaded on hosts
|
|
openstack_host_kernel_modules:
|
|
- name: 8021q
|
|
- name: br_netfilter
|
|
- name: dm_multipath
|
|
- name: dm_snapshot
|
|
- name: ebtables
|
|
- name: ip6table_filter
|
|
- name: ip6_tables
|
|
- name: ip_tables
|
|
- name: ipt_MASQUERADE
|
|
- name: ipt_REJECT
|
|
- name: iptable_filter
|
|
- name: iptable_mangle
|
|
- name: iptable_nat
|
|
- name: ip_vs
|
|
- name: iscsi_tcp
|
|
- name: nbd
|
|
- name: nf_conntrack
|
|
- name: nf_defrag_ipv4
|
|
- name: nf_nat
|
|
- name: vhost_net
|
|
- name: x_tables
|
|
|
|
## Base packages
|
|
_openstack_host_distro_packages:
|
|
- acl
|
|
- python3-packaging
|
|
|
|
## Bare metal base packages
|
|
_openstack_host_metal_distro_packages:
|
|
- apparmor-utils
|
|
- apt-transport-https
|
|
- bridge-utils
|
|
- curl
|
|
- dmeventd
|
|
- dstat
|
|
- ebtables
|
|
- htop
|
|
- iptables
|
|
- irqbalance
|
|
- libkmod2
|
|
- lvm2
|
|
- rsync
|
|
- software-properties-common
|
|
- sysstat
|
|
- sudo
|
|
- time
|
|
- vlan
|
|
- wget
|
|
|
|
_openstack_hosts_package_list:
|
|
- name: python3-debian
|
|
state: present
|
|
- name: ca-certificates
|
|
state: latest
|
|
|
|
_osbpo_release: "{{ (ansible_facts['distribution_version'] is version('12', '<')) | ternary('zed', openstack_distrib_code_name | lower) }}"
|
|
|
|
_package_repos:
|
|
- name: "osbpo"
|
|
suites:
|
|
- "{{ ansible_facts['distribution_release'] ~ '-' ~ _osbpo_release ~ '-backports-nochange' }}"
|
|
- "{{ ansible_facts['distribution_release'] ~ '-' ~ _osbpo_release ~ '-backports' }}"
|
|
uris: "{{ apt_repo_url | default('http://osbpo.debian.net/osbpo') }}"
|
|
signed_by: "{{ lookup('file', 'gpg/FEE4EECB') }}"
|
|
components: main
|
|
architectures: "{{ openstack_architecture_mapping.get(ansible_facts['architecture']) }}"
|
|
state: present
|
|
|
|
_openstack_ca_bundle_path: /etc/ssl/certs/ca-certificates.crt
|
|
|
|
_openstack_hosts_package_manager_default_conf: |
|
|
APT::Install-Recommends "false";
|