Commit Graph

83 Commits

Author SHA1 Message Date
795fdfebca Refactoring 2022-03-29 04:12:05 +04:00
940735e2e4 Update ansible-samba submodule 2022-03-29 04:10:56 +04:00
b02060413e Update ansible-samba submodule 2022-03-12 21:47:03 +04:00
c46f685ba2 Update ansible-samba submodule 2022-03-09 14:29:10 +04:00
1b4696fabd Update ansible-samba submodule 2022-03-09 05:06:52 +04:00
2cdfa7c198 Fix waiting for VMs up 2022-03-09 04:53:23 +04:00
03c8b6ef66 Update ansible-samba submodule 2022-03-08 23:15:42 +04:00
d39a7788fa Force enabling QEMU guest agent 2022-03-08 23:05:58 +04:00
17ecb2d824 Python3 support fixes 2022-03-08 23:05:46 +04:00
Evgeny Sinelnikov
34de85486e roles/pve/tasks/{create_vm,destroy_vm,enable_vlans}: Rename node srv to pve 2021-07-04 05:48:29 +04:00
Ivan A. Melnikov
51ec2730b8 roles/kerberos5: Drop single-DES enctypes
Beginning with the krb5-1.18 release, single-DES encryption
types are no longer supported, and KDC (as well as some
utilities  like kadmin.local) refuses to work when such
enctypes are present in configuration.
2020-02-16 00:03:22 +04:00
547f85e73b
Don't ignore stop errors 2020-01-13 20:54:35 +04:00
03362c0ecf
Increase timeouts on Proxmox actions 2019-11-20 17:09:23 +04:00
Sergey Bubnov (omg)
ef92e28885 update tester role with abstract exploit executor 2019-07-19 17:34:30 +04:00
omgbebebe
1208e753f8
Merge pull request #9 from altlinuxteam/kerberos5-idempotency
Make Kerberos 5 role idempotent
2019-07-17 17:05:48 +04:00
feccab9e96
Make Kerberos 5 role idempotent 2019-07-17 16:47:19 +04:00
Sergey Bubnov (omg)
a4d31494a5 initial tester role 2019-07-17 14:07:49 +04:00
e2af2cbd43 Disabled resolv.conf workarounds for 'systemd-networkd' 2019-07-03 19:19:17 +04:00
f63df41138 krb5.conf.j2 - consistently use uppercase and lowercase names 2019-07-03 19:19:17 +04:00
f550d0bac9 Role to deploy Kerberos 5 KDC and client introduced 2019-07-03 19:19:17 +04:00
Sergey Bubnov (omg)
284cc6c782 [bind-role] support zones forwarding 2019-06-30 21:49:13 +04:00
Sergey Bubnov (omg)
d026de558d fix bind unit file 2019-06-30 14:18:23 +04:00
Sergey Bubnov (omg)
71cdc425fd put rndc.key to the right place 2019-06-30 13:21:08 +04:00
Sergey Bubnov (omg)
8559e1f3d3 bump submodules commits 2019-06-30 12:41:55 +04:00
Sergey Bubnov (omg)
c2ac109686 use static rndc.key; set localhost as a dns-resolver 2019-06-30 12:39:20 +04:00
Sergey Bubnov (omg)
aa46353af2 allow define network ranges in dhcp config 2019-06-29 15:11:26 +04:00
Sergey Bubnov (omg)
5ebb841c94 fix fetch key in bind role 2019-06-29 15:07:15 +04:00
Sergey Bubnov (omg)
7beb947254 fix fetch key in bind role 2019-06-29 01:27:51 +04:00
Sergey Bubnov (omg)
8dc65328a3 new nginx role 2019-06-29 01:27:16 +04:00
Sergey Bubnov (omg)
859e2575e0 set sisyphus as platform when no node.platform is defined 2019-06-28 16:43:36 +04:00
Sergey Bubnov (omg)
5904a7d0ba use full branch path from env 2019-06-27 14:44:18 +04:00
Sergey Bubnov (omg)
3cdfbf81f3 use url for apt from env 2019-06-27 14:29:55 +04:00
Sergey Bubnov (omg)
f3be7f5c9e fix apt.sources template 2019-06-27 14:15:59 +04:00
Sergey Bubnov (omg)
a9f3258cd9 use keyname and branch prefix from env 2019-06-27 14:09:53 +04:00
Sergey Bubnov (omg)
d89c7ab77e prevent wrong behaviour when more than one dhcp on interfaces
firts we check that the VM has already get some IP address
and if so we just deploy as usual. If VM have no IP address
on any interface we throw all interfaces except first (eth0) to
the `empty vlan` that have no DHCP server enabled. VLAD ID defined
in environment variable. After network configuration inside VM we
restore propper VLAN IDs on all interfaces. This approach should help
in situations when DHCP available on more than one interfaces and those
interfaces configured as dhcp-clients, thus more than one default gw
will be configured with some metrics and all traffic will be routed
to the right one or will be not.
2019-06-27 13:21:48 +04:00
Sergey Bubnov (omg)
d0893b87df fix key distribution in bind role 2019-06-27 13:11:40 +04:00
Sergey Bubnov (omg)
d5bf5d23f8 fix default(omit) behaviour 2019-06-26 17:54:02 +04:00
Sergey Bubnov (omg)
2fa7099cbb omit nameserver when undefined 2019-06-26 16:53:24 +04:00
Sergey Bubnov (omg)
aad9337422 omit searchdomain when undefined 2019-06-26 16:45:24 +04:00
Sergey Bubnov (omg)
7913775562 new bind configuration fix 2019-06-26 16:40:14 +04:00
Sergey Bubnov (omg)
b242e30184 support for cloud-init on pve 2019-06-26 16:20:56 +04:00
b3f53c4c5e
[ODDJOB-18] Disable 'vagrant' user
We have boxes built for both Vagrant and testing purposes. We don't
need 'vagrant' user when performing tests so this step deletes this
user completely from the VM.
2019-06-24 16:03:41 +04:00
Sergey Bubnov
101b41e462 configure PBR after interfaces has come back 2019-06-05 11:10:05 +04:00
Sergey Bubnov
e6eb7015fe check for ip rules existence 2019-06-05 10:41:52 +04:00
Sergey Bubnov
02982f4b66 configure pbr after alterator`s commit 2019-06-04 20:39:17 +04:00
Sergey Bubnov
c7c3317689 use etcnet to configure PBR 2019-06-04 20:23:15 +04:00
Sergey Bubnov
0c285e5bff do not add default gw on priv nics 2019-06-04 18:50:36 +04:00
Sergey Bubnov
d8ce4d57bb fix PBR definitions 2019-06-04 17:46:38 +04:00
Sergey Bubnov
23885617af define PBR when nics count more than one 2019-06-04 16:55:09 +04:00
Sergey Bubnov
59f214ffd7 Revert "disable rp_filter on all interfaces"
It's useless on client workstations
2019-06-04 15:19:19 +04:00