32-0-IT instructions and rules issueshttps://git.scc.kit.edu/groups/las-it-organisation/32-0-IT-InstructionsAndRules/-/issues2021-09-03T15:25:45+02:00https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/73Fix auto-update role2021-09-03T15:25:45+02:00sg7149Fix auto-update roleCalling host: obelix.las.kit.edu (Fedora 30)
Failing nodes: homoeopatix, galantine
Summary
-------
The timer does not work
Steps to reproduce
------------------
* disable the timer if it is not anyway `sudo systemctl stop dnf-autom...Calling host: obelix.las.kit.edu (Fedora 30)
Failing nodes: homoeopatix, galantine
Summary
-------
The timer does not work
Steps to reproduce
------------------
* disable the timer if it is not anyway `sudo systemctl stop dnf-automatic.timer`
* Make a change in the config, to trigger a run of `configure autoupdate` and its handlers.
* Have a look if the timer is enabled/running `systemctl status dnf-automatic.timer`
What is the current bug behavior?
---------------------------------
* the timer is not enabled, though the handlers run
* the next task (install ntpdate) aborts with a connection timeout
What is the expected correct behaviour?
---------------------------------------
* timer is enabled like when running `sudo systemctl start dnf-automatic.timer`
* ansible does not stop at the next task
Relevant logs and/or screenshots
--------------------------------
```
NOTIFIED HANDLER common : enable automatic for homoeopatix.las.kit.edu
changed: [homoeopatix.las.kit.edu] => {
"changed": true,
"checksum": "696d44dfa164390f90c382977fd4f6017a41d36f",
"dest": "/etc/dnf/automatic.conf",
"diff": [],
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_original_basename": "automatic.conf",
"attributes": null,
"backup": false,
"checksum": "696d44dfa164390f90c382977fd4f6017a41d36f",
"content": null,
"delimiter": null,
"dest": "/etc/dnf/automatic.conf",
"directory_mode": null,
"follow": false,
"force": true,
"group": "root",
"local_follow": null,
"mode": 644,
"owner": "root",
"regexp": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/root/.ansible/tmp/ansible-tmp-1563879277.1940045-149113441544632/source",
"unsafe_writes": null,
"validate": null
}
},
"md5sum": "bfccf2820f6617355dc306e4f97cb290",
"mode": "01204",
"owner": "root",
"secontext": "system_u:object_r:etc_t:s0",
"size": 2572,
"src": "/root/.ansible/tmp/ansible-tmp-1563879277.1940045-149113441544632/source",
"state": "file",
"uid": 0
}
<homoeopatix.las.kit.edu> ESTABLISH SSH CONNECTION FOR USER: root
<homoeopatix.las.kit.edu> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/4830240bc1 homoeopatix.las.kit.edu '/bin/sh -c '"'"'echo ~root && sleep 0'"'"''
<homoeopatix.las.kit.edu> (0, b'/root\n', b'')
<homoeopatix.las.kit.edu> ESTABLISH SSH CONNECTION FOR USER: root
<homoeopatix.las.kit.edu> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/4830240bc1 homoeopatix.las.kit.edu '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763 `" && echo ansible-tmp-1563879278.9439619-57665086813763="` echo /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763 `" ) && sleep 0'"'"''
<homoeopatix.las.kit.edu> (0, b'ansible-tmp-1563879278.9439619-57665086813763=/root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763\n', b'')
Using module file /usr/lib/python3.7/site-packages/ansible/modules/packaging/os/dnf.py
<homoeopatix.las.kit.edu> PUT /root/.ansible/tmp/ansible-local-284632oi9hj3u/tmpqen7qowb TO /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/AnsiballZ_dnf.py
<homoeopatix.las.kit.edu> SSH: EXEC sftp -b - -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/4830240bc1 '[homoeopatix.las.kit.edu]'
<homoeopatix.las.kit.edu> (0, b'sftp> put /root/.ansible/tmp/ansible-local-284632oi9hj3u/tmpqen7qowb /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/AnsiballZ_dnf.py\n', b'')
<homoeopatix.las.kit.edu> ESTABLISH SSH CONNECTION FOR USER: root
<homoeopatix.las.kit.edu> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/4830240bc1 homoeopatix.las.kit.edu '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/ /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/AnsiballZ_dnf.py && sleep 0'"'"''
<homoeopatix.las.kit.edu> (0, b'', b'')
<homoeopatix.las.kit.edu> ESTABLISH SSH CONNECTION FOR USER: root
<homoeopatix.las.kit.edu> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/4830240bc1 -tt homoeopatix.las.kit.edu '/bin/sh -c '"'"'/usr/bin/python3 /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/AnsiballZ_dnf.py && sleep 0'"'"''
<homoeopatix.las.kit.edu> (0, b'/root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/AnsiballZ_dnf.py:18: DeprecationWarning: the imp module is deprecated in favour of importlib; see the module\'s documentation for alternative uses\r\n import imp\r\n[master ac956f1] saving uncommitted changes in /etc prior to dnf run\r\n 1 file changed, 1 insertion(+), 1 deletion(-)\r\n\r\n{"msg": "Nothing to do", "changed": false, "results": ["Installed: ntpdate"], "rc": 0, "invocation": {"module_args": {"state": "present", "name": ["ntpdate"], "allow_downgrade": false, "autoremove": false, "bugfix": false, "disable_gpg_check": false, "disable_plugin": [], "disablerepo": [], "download_only": false, "enable_plugin": [], "enablerepo": [], "exclude": [], "installroot": "/", "install_repoquery": true, "install_weak_deps": true, "security": false, "skip_broken": false, "update_cache": false, "update_only": false, "validate_certs": true, "lock_timeout": 0, "conf_file": null, "disable_excludes": null, "download_dir": null, "list": null, "releasever": null}}}\r\n', b'Shared connection to homoeopatix.las.kit.edu closed.\r\n')
<homoeopatix.las.kit.edu> ESTABLISH SSH CONNECTION FOR USER: root
<homoeopatix.las.kit.edu> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/4830240bc1 homoeopatix.las.kit.edu '/bin/sh -c '"'"'rm -f -r /root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/ > /dev/null 2>&1 && sleep 0'"'"''
<homoeopatix.las.kit.edu> (0, b'', b'')
fatal: [homoeopatix.las.kit.edu]: FAILED! => {
"changed": false,
"module_stderr": "Shared connection to homoeopatix.las.kit.edu closed.\r\n",
"module_stdout": "/root/.ansible/tmp/ansible-tmp-1563879278.9439619-57665086813763/AnsiballZ_dnf.py:18: DeprecationWarning: the imp module is deprecated in favour of importlib; see the module's documentation for alternative uses\r\n import imp\r\n[master ac956f1] saving uncommitted changes in /etc prior to dnf run\r\n 1 file changed, 1 insertion(+), 1 deletion(-)\r\n\r\n{\"msg\": \"Nothing to do\", \"changed\": false, \"results\": [\"Installed: ntpdate\"], \"rc\": 0, \"invocation\": {\"module_args\": {\"state\": \"present\", \"name\": [\"ntpdate\"], \"allow_downgrade\": false, \"autoremove\": false, \"bugfix\": false, \"disable_gpg_check\": false, \"disable_plugin\": [], \"disablerepo\": [], \"download_only\": false, \"enable_plugin\": [], \"enablerepo\": [], \"exclude\": [], \"installroot\": \"/\", \"install_repoquery\": true, \"install_weak_deps\": true, \"security\": false, \"skip_broken\": false, \"update_cache\": false, \"update_only\": false, \"validate_certs\": true, \"lock_timeout\": 0, \"conf_file\": null, \"disable_excludes\": null, \"download_dir\": null, \"list\": null, \"releasever\": null}}}\r\n",
"msg": "MODULE FAILURE\nSee stdout/stderr for the exact error",
"rc": 0
}
RUNNING HANDLER [common : enable automatic] ***********************************************************************************************************************************************************************************************************************************
task path: /root/ansible/roles/common/handlers/main.yml:82
PLAY RECAP ********************************************************************************************************************************************************************************************************************************************************************
homoeopatix.las.kit.edu : ok=24 changed=1 unreachable=0 failed=1 skipped=5 rescued=0 ignored=0
```
Possible fixes
--------------
(If you can, link to the line of code that might be responsible for the problem)
/cc @gethmannhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/74MS fonts2019-10-28T18:15:54+01:00sg7149MS fontsCalling host: obelix.las.kit.edu (Fedora 30)
Failing nodes: asterix, obelix
Summary
-------
MS fonts installation (client role) fails, because of certificate issues of sf.net
Steps to reproduce
------------------
Run client role
...Calling host: obelix.las.kit.edu (Fedora 30)
Failing nodes: asterix, obelix
Summary
-------
MS fonts installation (client role) fails, because of certificate issues of sf.net
Steps to reproduce
------------------
Run client role
What is the current bug behavior?
---------------------------------
Client role fails when reaching the MS fonts task
What is the expected correct behaviour?
---------------------------------------
MS fonst install
Relevant logs and/or screenshots
--------------------------------
```
TASK [clients : install fonts] **************************************************************************************************************************************************************************************************************
fatal: [asterix.las.kit.edu]: FAILED! => {"changed": false, "msg": "Failed to validate the SSL certificate for kent.dl.sourceforge.net:443. Make sure your managed systems have a valid CA certificate installed. You can use validate_certs=
False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org,
/etc/ansible. The exception msg was: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1076).", "status": -1, "url": "https://kent.dl.sourceforge.net/project/mscorefonts2/rpms/msttcore-fonts-ins
taller-2.6-1.noarch.rpm"} ```
Possible fixes
--------------
(If you can, link to the line of code that might be responsible for the problem)
/cc @gethmannhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/75Replace bwSync&Share with Nextcloud2020-05-15T09:54:00+02:00sg7149Replace bwSync&Share with NextcloudHost: lasXXX.las.kit.edu
OS: Fedora XX
Software name:
--------------
Nextcloud client for KIT's bwSync&Share
Date:
------
End of 2019
Software installation instruction if not in repos:
------------------------------------------------...Host: lasXXX.las.kit.edu
OS: Fedora XX
Software name:
--------------
Nextcloud client for KIT's bwSync&Share
Date:
------
End of 2019
Software installation instruction if not in repos:
--------------------------------------------------
Maybe at https://nextcloud.com/de/install/#install-clients with the URL: https://bwsyncandshare.kit.edu
Possibly also interesting for:
-------------------------------
http://help.bwsyncandshare.kit.edu/134.php
/cc @project-managerlp5884lp5884https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/76Create role for TGU experimental computer2020-02-29T23:58:13+01:00sg7149Create role for TGU experimental computer* [ ] docu https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/systemdocu/blob/master/setup-tgu-coputer.md
* [ ] service files/timer docu
* [x] /home/messuser/README
* [ ] /etc/systemd/system/...
* [ ] ~/.ssh/...
* [...* [ ] docu https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/systemdocu/blob/master/setup-tgu-coputer.md
* [ ] service files/timer docu
* [x] /home/messuser/README
* [ ] /etc/systemd/system/...
* [ ] ~/.ssh/...
* [ ] git checkout of all repos
* [ ] add users
* [ ] network confighttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/77IOC tasks2021-09-03T15:19:23+02:00sg7149IOC tasksSetup on the DHCP computer (e.g. faulus).
* [x] Add to DHCPd host list
* [x] Add to `/etc/hosts`
For each IOC computer (after [vinegar](https://github.com/KIT-IBPT/vinegar) and salt stack setup)
* Add `/etc/ssh/ssh_config`
```
Host git...Setup on the DHCP computer (e.g. faulus).
* [x] Add to DHCPd host list
* [x] Add to `/etc/hosts`
For each IOC computer (after [vinegar](https://github.com/KIT-IBPT/vinegar) and salt stack setup)
* Add `/etc/ssh/ssh_config`
```
Host git.scc.kit.edu
HostName git.scc.kit.edu
ProxyCommand ssh ${USER}@192.168.0.1 nc %h %p
```
(tested only for `~/.ssh/config`, yet.
* Add ssh-key-signature from gitlab to your known_hosts `/etc/ssh/ssh_known_hosts` (world readable) (not tested yet)
For each user on an IOC computer (e.g. caligula) one has to
* create the user `useradd $name -u $ID -G users -m`
* create ssh-key `ssh-keygen`
* ssh-copy-id to faulusyuancun.nieyuancun.niehttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/78Add lab computers to munin2019-12-19T12:59:26+01:00sg7149Add lab computers to muninLab computers are not connected with one person so there should be almost no privacy issue. But since they run for a long time without user interaction errors aren't observed quickly. Hence it makes sense to supervise them.Lab computers are not connected with one person so there should be almost no privacy issue. But since they run for a long time without user interaction errors aren't observed quickly. Hence it makes sense to supervise them.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/80VGA-port @ ThinkCentres2020-02-17T15:54:47+01:00sg7149VGA-port @ ThinkCentresThe VGA-port on ThinkCentres seems to misbehave on Linux.
ThinkCentres (new M920t) with VGA connected to a VGA-Display boots and when switching to a higher resolution during booting (the monitor searches for signal and turns off).
Durin...The VGA-port on ThinkCentres seems to misbehave on Linux.
ThinkCentres (new M920t) with VGA connected to a VGA-Display boots and when switching to a higher resolution during booting (the monitor searches for signal and turns off).
During installation with KDE-Live-System it was possible to switch to a non-graphical console (ctrl+alt+2) and to login there and reboot (killing X did not help).
Probably it's possible to fix it with the right boot-flags.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/82Install LASMagLab software on terminal computer2020-02-24T17:16:42+01:00sg7149Install LASMagLab software on terminal computerInstall the LASMagLab software on the terminal [lab] computer and add the GitLab-Token automatically.
Atm. the computer is only setup as a normal epics client and DHCPd server, but not with all the Control system components installed, y...Install the LASMagLab software on the terminal [lab] computer and add the GitLab-Token automatically.
Atm. the computer is only setup as a normal epics client and DHCPd server, but not with all the Control system components installed, yet.
Also the (Python) dependencies might be missing.
Checking out all the software at `/usr/local/share` would make sense.
The computer needed to be replaced quite often in the near past and might be replaced in the not too far future, so it would make sense to automate it.
At least one should do it when setting it up as a CSS host (if one sticks to our Fedora/ansible deployment and does not change completely to CN-machine-group's Ubuntu/salt-stack deployment)https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/83LASMagLab DHCPd with template instead of static file2020-02-29T23:16:35+01:00sg7149LASMagLab DHCPd with template instead of static fileOne might want to use a template for the DHCPd server entry in the `dhcpd.conf`, so that one does not have to change it for a new computer.
Hints/Ideas for the template:
* MAC address: ('ansible_interfaces' starts with 'enp') ['ansible_...One might want to use a template for the DHCPd server entry in the `dhcpd.conf`, so that one does not have to change it for a new computer.
Hints/Ideas for the template:
* MAC address: ('ansible_interfaces' starts with 'enp') ['ansible_enp????']['macaddress'] when ['ansible_enp???']['ipv4']['network'] == '192.168.0.0'
* Hostname: ['ansible_fqdn']
* IP: '192.168.0.1'
```
# DHCPd host
host {{'ansible_hostname'}} {
hardware ethernet {{ macaddress }};
fixed-address {{ ip }};
}
```https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/84Rename [lab] to [maglab]2020-07-15T16:08:35+02:00sg7149Rename [lab] to [maglab]Rename `[lab]` role to avoid ambiguities between eg. LASMagLab and TGU-measurement stand.
(incomplete) list of its occurrence:
* hosts
* roles/lab
* sites.yml
* lab.yml
* README?Rename `[lab]` role to avoid ambiguities between eg. LASMagLab and TGU-measurement stand.
(incomplete) list of its occurrence:
* hosts
* roles/lab
* sites.yml
* lab.yml
* README?yuancun.nieyuancun.niehttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/85Opera on Fedora 312020-03-02T14:52:39+01:00sg7149Opera on Fedora 31To work around Opera not starting on Fedora 31 I linked the libhwloc.so.5->libhwloc.so.15.
Maybe one should also copy libhwloc.so.5 from CentOS7 (kantine) instead of linking the new one.
Probably also the new Opera 2020 will not depend ...To work around Opera not starting on Fedora 31 I linked the libhwloc.so.5->libhwloc.so.15.
Maybe one should also copy libhwloc.so.5 from CentOS7 (kantine) instead of linking the new one.
Probably also the new Opera 2020 will not depend on libhwloc.so.15, because their webpage claims to support RHEL7, but not RHEL8 and even RHEL8 seems to have libhwloc.so.5 instead of .15.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/87Add backup daemon to LASMagLab computer2020-06-09T15:54:01+02:00sg7149Add backup daemon to LASMagLab computerLike done on the CN TGU terminal, it would make sense to have a backup daemon for the measurement data of the LASMagLab (on ueberdrus), too.
See also: las-software/15-1-Controls/Jena_UndulatorDocumentation#5 and las-it-organisation/issu...Like done on the CN TGU terminal, it would make sense to have a backup daemon for the measurement data of the LASMagLab (on ueberdrus), too.
See also: las-software/15-1-Controls/Jena_UndulatorDocumentation#5 and las-it-organisation/issues#8 and https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/systemdocu/-/blob/master/experiment_backup.md
It's not trivial and requires some more advanced knowledge of (Fedora/RHEL) Linux like SELinux and systemd.
@ue5734 hopefully understands my documentation and can do it or assist you (@vn4918 @updzh).ue5734ue5734https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/88SDDM not showing users2020-03-01T01:10:33+01:00sg7149SDDM not showing usersOnly the installation (local) user is displayed at the login screen.
[My documentation](https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/systemdocu/-/blob/master/ipa/freeipa.md#sddmlogin-manager)
suggests, that ...Only the installation (local) user is displayed at the login screen.
[My documentation](https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/systemdocu/-/blob/master/ipa/freeipa.md#sddmlogin-manager)
suggests, that it might help to add the network as a dependency to the sddm.service
```
SDDM/Login-Manager
In the case that KDE’s default login manager SDDM does not show any accounts to select for logging in, the following might help: Copy sddm.service from /lib/systemd/system to /etc/systemd/system, and add a line After=network.target to the [Unit] section.
```
Implement it as part of the ipa-hosts role.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/89Add fix to missing users at CN login screen2020-03-03T14:43:07+01:00sg7149Add fix to missing users at CN login screenFailing nodes: nichtsalsverdrus (Fedora LXQt)
Summary
-------
Users with UIDs of the IPA range and not the typical Linux user range (1000+) weren't shown in the login screen and one cannot type a user name either.
Steps to reproduce
...Failing nodes: nichtsalsverdrus (Fedora LXQt)
Summary
-------
Users with UIDs of the IPA range and not the typical Linux user range (1000+) weren't shown in the login screen and one cannot type a user name either.
Steps to reproduce
------------------
Log out and have a look at the login screen of the LXQt (SDDM) Fedora.
What is the current bug behavior?
---------------------------------
No users shown with too large UID (until workaround)
What is the expected correct behaviour?
---------------------------------------
All users selectable as login users.
Possible fixes
--------------
Fixed it (but not in ansible and not with a good upper limit, but only a value that is larger than the largest UID that is in use and small enough to show users.
If the UID is too large no user is shown at all.
In the `/etc/sddm.conf` one has to add the following lines:
```
HideUsers=nfsnobody
MaximumUid=1911111111
```
and restart sddm/Xorg.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/90Autoupdate on lab computers2020-07-15T15:40:04+02:00sg7149Autoupdate on lab computersChange the settings from security to all updates.
The computers are not used on a daily basis by one user, but may not be used interactively for some time. Hence the updates aren't triggered by the user, but there is also no user that ex...Change the settings from security to all updates.
The computers are not used on a daily basis by one user, but may not be used interactively for some time. Hence the updates aren't triggered by the user, but there is also no user that expects certain behaviour not to change.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/91Add networking to common role2020-05-13T12:10:22+02:00sg7149Add networking to common roleAdd some basic networking setup to the common role (maybe via nmcli-module)
* [ ] DNS v4, v6
* [ ] Default gateway v4 v6
* [x] Hostname
* [ ] dhclient on start
* [ ] auto negotiationAdd some basic networking setup to the common role (maybe via nmcli-module)
* [ ] DNS v4, v6
* [ ] Default gateway v4 v6
* [x] Hostname
* [ ] dhclient on start
* [ ] auto negotiationhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/92ansible ipv6 vs root2020-05-13T10:44:29+02:00sg7149ansible ipv6 vs rootansible tries to use IPv6 now that our hosts have proper DNS for IPv6.
Unfortunately the SSH-key for root only allows the IPv4 of obelix, so that running ansible fail atm.
One should either change the SSH-allowed IP addresses.
Or one sh...ansible tries to use IPv6 now that our hosts have proper DNS for IPv6.
Unfortunately the SSH-key for root only allows the IPv4 of obelix, so that running ansible fail atm.
One should either change the SSH-allowed IP addresses.
Or one should force ansible to use IPv4 only.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/93teamviewer installation stopps updates2020-08-17T09:57:29+02:00sg7149teamviewer installation stopps updatesCalling host: obelix.las.kit.edu (Fedora 31)
Failing nodes: pepe, asterix
Summary
-------
Updates fail, because teamviewer repo cannot be found
Steps to reproduce
------------------
enable the teamviewer repositories () and run `dn...Calling host: obelix.las.kit.edu (Fedora 31)
Failing nodes: pepe, asterix
Summary
-------
Updates fail, because teamviewer repo cannot be found
Steps to reproduce
------------------
enable the teamviewer repositories () and run `dnf update`
What is the current bug behavior?
---------------------------------
```
Failed to synchronize cache for repo 'tvinternal_dev'
Ignoring repositories: tvinternal_dev
```
when running via ansible, it fails due to timeouts.
What is the expected correct behaviour?
---------------------------------------
Update runs without any problems.
Relevant logs and/or screenshots
--------------------------------
```
(Paste any relevant logs - please use code blocks (```) to format console output,
logs, and code as it's very hard to read otherwise.)
```
Possible fixes
--------------
As a workaround one can deactivate the repository, but then teamviewer will not get updates!
/cc @vn4918lp5884lp5884https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/95lasarchiv1 role fails sometimes2020-05-14T18:00:01+02:00sg7149lasarchiv1 role fails sometimesCalling host: obelix.las.kit.edu (Fedora 31)
Failing nodes: pepe, faulus
Summary
-------
Running the newly merged code !43 it first failed for some hosts, but not for all.
After having a look at https://github.com/ansible/ansible/issu...Calling host: obelix.las.kit.edu (Fedora 31)
Failing nodes: pepe, faulus
Summary
-------
Running the newly merged code !43 it first failed for some hosts, but not for all.
After having a look at https://github.com/ansible/ansible/issues/29814 and changing `remounted` to `mounted` again succeeded.
But `mounted` initially failed, so maybe it is the bug and we cannot do much about it in our role. From the github-issue, I understand the documentation like it should work with `mounted` which is more consistent with the idea of stateless-ness though I read the documentation of the `mount` module differently the last time.
Steps to reproduce
------------------
Run `ansible-playbook --vault-password-file password nfs.yml --skip-tags fonts`.
What is the current bug behavior?
---------------------------------
SOMETIMES:
Hosts with unmounted /mnt/las-archiv1 and not installed fail. Broken, and correctly mounted /mnt/las-archiv1 machines do not fail.
What is the expected correct behaviour?
---------------------------------------
ALWAYS: None of the machines fail and all have a mounted /mnt/las-archiv1
Relevant logs and/or screenshots
--------------------------------
```
TASK [lasarchiv : remount lasarchiv1] ********************************************************************************
fatal: [homoeopatix.las.kit.edu]: FAILED! => {"changed": false, "msg": "Error remounting /mnt/las-archiv1: umount: /mnt/las-archiv1: not mounted.\n"}
changed: [methusalix.las.kit.edu]
changed: [majestix.las.kit.edu]
changed: [troubadix.las.kit.edu]
fatal: [faulus.las.kit.edu]: FAILED! => {"changed": false, "msg": "Error remounting /mnt/las-archiv1: umount: /mnt/las-archiv1: no mount point specified.\n"}
fatal: [pepe.las.kit.edu]: FAILED! => {"changed": false, "msg": "Error remounting /mnt/las-archiv1: umount: /mnt/las-archiv1: not mounted.\n"}
changed: [idefix.las.kit.edu]
```
https://github.com/ansible/ansible/issues/29814
Possible fixes
--------------
(If you can, link to the line of code that might be responsible for the problem)
/cc @vn4918https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/96Fix deprecation warning (loop in Jupyter notebbok)2020-05-15T20:10:47+02:00sg7149Fix deprecation warning (loop in Jupyter notebbok)Calling host: obelix.las.kit.edu (Fedora 31)
Failing nodes: idefix
Summary
-------
Deprecation warning for using list as loop for package managers instead of installing the list. See other roles (eg. common) for the fix of this issue....Calling host: obelix.las.kit.edu (Fedora 31)
Failing nodes: idefix
Summary
-------
Deprecation warning for using list as loop for package managers instead of installing the list. See other roles (eg. common) for the fix of this issue.
Steps to reproduce
------------------
Run sites.yml
What is the current bug behavior?
---------------------------------
Deprecation warning
What is the expected correct behaviour?
---------------------------------------
No deprecation warning
Relevant logs and/or screenshots
--------------------------------
```
TASK [ipynb : install Jupyter notebook for Python 3] *****************************************************************
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using
a loop to supply multiple items and specifying `name: "{{ item }}"`, please use `name: ['python3-jupyter-core',
'python3-ipykernel', 'python3-nbformat', 'python3-ipdb', 'python3-ipython']` and remove the loop. This feature will
be removed in version 2.11. Deprecation warnings can be disabled by setting deprecation_warnings=False in
ansible.cfg.
ok: [idefix.las.kit.edu] => (item=['python3-jupyter-core', 'python3-ipykernel', 'python3-nbformat', 'python3-ipdb', 'python3-ipython'])
TASK [ipynb : install Jupyter notebook extensions] *******************************************************************
[DEPRECATION WARNING]: Invoking "pip" only once while using a loop via squash_actions is deprecated. Instead of using
a loop to supply multiple items and specifying `name: "{{ item }}"`, please use `name: ['ipywidgets']` and remove
the loop. This feature will be removed in version 2.11. Deprecation warnings can be disabled by setting
deprecation_warnings=False in ansible.cfg.
ok: [idefix.las.kit.edu] => (item=['ipywidgets'])
```
Possible fixes
--------------
Don't use a loop (with_items), but provide the list as the `name` argument.
/cc @vn4918