b85c6abfbb
This patch implements new functionality which allows operators not only load or configure kernel modules, but also explicitly blacklist them. We don't use community.general.kernel_blacklist for this, as using copy with content seems more trivial in terms of adding/removing modules to the list and does not require it to be list of mappings. Change-Id: I3b7e54e5064ed5bf528ac7fb3d7769777bb5ddf8 Signed-off-by: Dmitriy Rabotyagov <dmitriy.rabotyagov@cleura.com>
112 lines
2.9 KiB
YAML
112 lines
2.9 KiB
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
## Defined required kernel
|
|
openstack_host_required_kernel: 4.18.0
|
|
openstack_host_sysstat_file: /etc/sysconfig/sysstat
|
|
openstack_host_sysstat_cron_file: /etc/cron.d/sysstat
|
|
openstack_host_cron_template: sysstat.cron.redhat.j2
|
|
_openstack_host_initramfs_command: /bin/dracut -f
|
|
|
|
openstack_host_sysstat_cron_mode: "0600"
|
|
|
|
## Kernel modules loaded on hosts
|
|
openstack_host_kernel_modules:
|
|
- name: 8021q
|
|
- name: br_netfilter
|
|
- name: dm_multipath
|
|
- name: dm_snapshot
|
|
- name: ebtables
|
|
- name: ip6table_filter
|
|
- name: ip6_tables
|
|
- name: ip_tables
|
|
- name: ipt_MASQUERADE
|
|
- name: ipt_REJECT
|
|
- name: iptable_filter
|
|
- name: iptable_mangle
|
|
- name: iptable_nat
|
|
- name: ip_vs
|
|
- name: iscsi_tcp
|
|
- name: nf_conntrack
|
|
- name: nf_defrag_ipv4
|
|
- name: nf_nat
|
|
- name: vhost_net
|
|
|
|
## Base packages
|
|
_openstack_host_distro_packages:
|
|
- python3-devel
|
|
- python3-libselinux
|
|
- python3-packaging
|
|
- acl
|
|
|
|
## Bare metal base packages
|
|
_openstack_host_metal_distro_packages:
|
|
- cronie
|
|
- device-mapper-event
|
|
- dstat
|
|
- ebtables
|
|
- git
|
|
- iptables
|
|
- irqbalance
|
|
- kmod-libs
|
|
- kmod
|
|
- lvm2
|
|
- python3-libselinux
|
|
- rsync
|
|
- sysstat
|
|
- sudo
|
|
- time
|
|
- wget
|
|
|
|
_package_repos_keys:
|
|
- name: openstack-queens
|
|
key: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Cloud
|
|
keyfile: "gpg/764429E6"
|
|
- name: rdo-qemu-ev
|
|
key: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization-RDO
|
|
keyfile: "gpg/61E8806C"
|
|
|
|
_openstack_hosts_package_list:
|
|
- name: dnf-plugins-core
|
|
state: present
|
|
- name: epel-release
|
|
state: absent
|
|
- name: centos-release-storage-common
|
|
state: absent
|
|
- name: ca-certificates
|
|
state: latest
|
|
|
|
_openstack_hosts_rdo_repo_url: >-
|
|
{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/current/
|
|
_openstack_hosts_rdo_deps_url: >-
|
|
{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/deps/latest/
|
|
|
|
_package_repos_trunk:
|
|
- name: rdo-deps
|
|
file: rdo-deps
|
|
description: rdo-deps
|
|
baseurl: "{{ openstack_hosts_rdo_deps_url }}"
|
|
gpgcheck: false
|
|
module_hotfixes: true
|
|
|
|
_package_repos: |-
|
|
{% if openstack_hosts_rdo_repo_type == 'trunk' %}
|
|
{{ _package_repos_trunk }}
|
|
{% else %}
|
|
[]
|
|
{% endif %}
|
|
|
|
_openstack_ca_bundle_path: /etc/pki/tls/certs/ca-bundle.crt
|