Merge branch 'master' of git.scc.kit.edu:las/ansible

README.md

@@ -18,12 +18,13 @@ dnf install ansible git python3-dnf libselinux-python python3-netaddr
 Run 
 
 ``` bash
-git clone  clone git@git.scc.kit.edu:las/ansible.git
+git clone  git@git.scc.kit.edu:las-it-organisation/32-0-IT-InstructionsAndRules/ansible.git
 cd ansible
-ansible-playbook --ask-become-pass --limit $(hostname -f) --vault-id @prompt site.yml
+sudo ansible-playbook --limit $(hostname -f) --vault-id @prompt sites.yml
 ```
 
   * If you only want some parts of the roles to be run, you can use the option `-t TAGNAME` to run only those tasks with the given tag.
+  * The vault-password is known to the usual suspects.
 
 ### Ask for new software
 Open an issue in the GitLab issue tracker and use the template for softwarerequests.

group_vars/python.yml

@@ -20,6 +20,10 @@ python3pkg:
   - cmake
   - python3-flake8
   - python3-Cython
+  - nodejs
+  - nodejs-libs
+  - kf5-purpose-twitter
+  - npm
 
 python2pkg: ""
 

host_vars/asterix.las.kit.edu

@@ -9,7 +9,7 @@ extra_software:
   - subversion  # for ANKA software
   - borgbackup
   - mosh  # ssh alternative
-  # keepass compatible console client
+    # keepass compatible console client
   - kpcli
   - perl-Clipboard
   - perl-Capture-Tiny
@@ -18,10 +18,53 @@ extra_software:
   - neovim
   - ShellCheck
   - inkscape-table
-  # - fd-find
+    # - fd-find
   - ripgrep
   - fzf  # fuzzy finder
   - gsl-devel  # Needed to compile Eva Burkhards code
   - mupdf  # better alternative to pdftk than pdfseparate+pdfunite
   - evince  # for fixing RIP errors when printing LaTeX posters
   - screen
+    # PDL for undulator/wiggler Opera script
+  - perl-PDL
+    # Installing dependencies:
+  - perl-Devel-Peek
+  - perl-Inline
+  - perl-Inline-C
+  - perl-Pegex
+  - freeglut
+  - perl-B-Utils
+  - perl-Class-Load
+  - perl-Class-Tiny
+  - perl-Data-Dump-Streamer
+  - perl-Devel-OverloadInfo
+  - perl-Devel-PartialDump
+  - perl-Devel-REPL
+  - perl-Devel-REPL-Plugin-Completion
+  - perl-Devel-REPL-Plugin-DDS
+  - perl-Devel-REPL-Plugin-LexEnv
+  - perl-Devel-REPL-Plugin-MultiLine-PPI
+  - perl-File-HomeDir
+  - perl-File-Map
+  - perl-Filter-Simple
+  - perl-Getopt-Long-Descriptive
+  - perl-IPC-System-Simple
+  - perl-Lexical-Persistence
+  - perl-Module-Compile
+  - perl-Module-Pluggable
+  - perl-Moose
+  - perl-MooseX-Getopt
+  - perl-MooseX-Object-Pluggable
+  - perl-MooseX-Role-Parameterized
+  - perl-OpenGL
+  - perl-PPI
+  - perl-Parse-RecDescent
+  - perl-PerlIO-Layers
+  - perl-Pod-Parser
+  - perl-Prima
+  - perl-Text-Balanced
+  - perl-YAML-LibYAML
+  - perl-autodie
+    # Installing weak dependencies:
+  - perl-Text-Bidi
+    # End of PDL

host_vars/idefix.las.kit.edu

@@ -4,3 +4,6 @@ ip_suffix: 117
 loc: 620
 os: Fedora 27
 computer_name: idefix
+
+extra_software:
+  - mupdf

hosts

@@ -54,6 +54,7 @@ lysander.las.kit.edu
 asterix.las.kit.edu
 idefix.las.kit.edu
 lysander.las.kit.edu
+gutemine.las.kit.edu
 
 [pynaff]
 lysander.las.kit.edu

roles/common/tasks/certificate.yml

@@ -5,4 +5,4 @@
     src: web.las.pub
     dest: /etc/pki/ca-trust/source/anchors/web.las.pem
   notify:
-    - activate cert
+    - "update-ca-trust"

roles/common/tasks/main.yml

@@ -7,8 +7,6 @@
 - import_tasks: sudoer.yml
 - import_tasks: sysupdate.yml
 - import_tasks: ntp.yml
-- import_tasks: yumrepos.yml
-  tags: lasrepo
 - import_tasks: software.yml
 - import_tasks: smartd.yml
   tags: smartd

roles/elegant/tasks/blas.yml

@@ -18,7 +18,7 @@
   firewalld:
     state: enabled
     permanent: true
-    rich_rule: 'rule family="ipv4" source address="129.13.108.96/27" port port="10000-10100" protocol="tcp" accept'
+    rich_rule: 'rule family="ipv4" source address="129.13.238.64/24" port port="10000-10100" protocol="tcp" accept'
   notify:
   - reload firewall
   - restart firewall
@@ -27,9 +27,9 @@
 - name: Pelegant open ports
   become: yes
   firewalld:
-    state: enabled
+    state: disabled
     permanent: true
-    rich_rule: 'rule family="ipv4" source address="129.13.238.64/24" port port="10000-10100" protocol="tcp" accept'
+    rich_rule: 'rule family="ipv4" source address="129.13.108.64/24" port port="10000-10100" protocol="tcp" accept'
   notify:
   - reload firewall
   - restart firewall

roles/elegant/vars/main.yml

@@ -24,6 +24,8 @@ prePelegant:
   - "mpich-devel"
   - "blas"
   - "blas-devel"
+  - "gsl"
+  - "lapack"
 
 preSDDSdev:
   - "libXpm-devel"

roles/epics/tasks/main.yml

@@ -16,15 +16,8 @@
 - name: ensure gcc is installed
   become: yes
   dnf:
-    name: "{{ item }}"
+    name: ["gcc", "gcc-c++", "readline-devel", "perl-ExtUtils-ParseXS", "perl-Pod-Checker", "perl-devel"]
     state: installed
-  with_items:
-          - gcc
-          - gcc-c++
-          - readline-devel
-          - perl-ExtUtils-ParseXS
-          - perl-Pod-Checker
-          - perl-devel
 
 - name: make links
   become: yes

roles/latex/tasks/KITLaTeX.yml

@@ -7,29 +7,23 @@
 
 - name: install dependencies
   dnf:
-    name: "{{ item }}"
+    name: ["texlive-a0poster", "texlive-beamer", "texlive-bophook", "texlive-boxedminipage", "texlive-dinbrief", "texlive-hyperref", "texlive-lettrine", "texlive-mathpazo", "texlive-rcs", "texlive-sciposter", "texlive-shadow", "texlive-pgf", "texlive-xcolor",]
     state: present
+    skip_broken: yes
+  become: yes
+
+- name: install dependencies
+  dnf:
+    name: "{{ kit_tikz }}"
+    state: present
+    skip_broken: yes
   become: yes
-  with_items:
-    - "texlive-a0poster"
-    - "texlive-beamer"
-    - "texlive-bophook"
-    - "texlive-boxedminipage"
-    - "texlive-dinbrief"
-    - "texlive-hyperref"
-    - "texlive-lettrine"
-    - "texlive-mathpazo"
-    - "texlive-rcs"
-    - "texlive-sciposter"
-    - "texlive-shadow"
-    - "texlive-pgf"
-    - "texlive-xcolor"
-    - "{{ kit_tikz }}"
 
 - name: make tmpdir
   tempfile:
     prefix: ansi
     state: directory
+    mode: 0755
   register: tmpdir
 
 - name: Add ssh-key for the LaTeX repository
@@ -58,6 +52,7 @@
   file:
     path: "{{ texpath }}/tex/latex/KIT"
     state: directory
+    mode: 0755
 
 - name: copy tex files
   become: yes
@@ -73,6 +68,7 @@
   file:
     path: "{{ texpath }}/doc/latex/KIT"
     state: directory
+    mode: 0755
 
 - name: copy pdf files
   become: yes
@@ -86,8 +82,8 @@
 # This should be deleted when the Arial task is working
 - name: hack Helvetica into KIT styles due to broken font installation
   lineinfile:
-    line: "\\RequirePackage{helvet}"
-    regexp: "\\RequirePackage{(uarial|helvet)}"
+    line: "\\\\RequirePackage{helvet}"
+    regexp: "\\\\RequirePackage{(uarial|helvet)}"
     dest: "{{ texpath }}/tex/latex/KIT/{{ item }}"
     backup: yes
   become: yes

roles/latex/tasks/LaTeXfonts.yml

@@ -17,7 +17,7 @@
   get_url:
     dest: "{{ texpath }}"
     url: "https://www.tug.org/fonts/getnonfreefonts/install-getnonfreefonts"
-    mode: 0777
+    mode: 0755
   register: tex_fonts_dl_ok
   when: gnff_available.changed
 

roles/latex/tasks/dpg.yml

@@ -4,12 +4,14 @@
   file:
     path: "{{ texpath }}/tex/latex"
     state: directory
+    mode: 0755
 
 - name: Install DPG-Tagungen document class
   become: yes
   copy:
     src: scdpg.cls
     dest: "{{ texpath }}/tex/latex/"
+    mode: 0755
   notify:
     - hash latex
   tags: latex
@@ -19,6 +21,7 @@
   copy:
     src: jacow.cls
     dest: "{{ texpath }}/tex/latex/"
+    mode: 0755
   notify:
     - hash latex
   tags: latex

roles/latex/tasks/neo2.yml

@@ -42,6 +42,7 @@
     src: /tmp/uniinput.sty
     dest: "{{ texpath }}/tex/latex/uniinput/uniinput.sty"
     remote_src: yes
+    mode: 0755
   notify: update latex
   when: sty_file is defined and sty_file.changed
 
@@ -51,5 +52,6 @@
     src: /tmp/uniinput.pdf
     dest: "{{ texpath }}/doc/latex/uniinput/uniinput.pdf"
     remote_src: yes
+    mode: 0755
   notify: update latex
   when: pdf_file is defined and pdf_file.changed

roles/nfs-server/files/export

-/las-archiv1 129.13.108.64/26(rw,sync,root_squash) 129.13.238.64/26(rw,sync,root_squash)
-/las-archiv1/users 129.13.108.64/26(rw,sync,root_squash) 129.13.238.64/26(rw,sync,root_squash)
+/las-archiv1 2a00:1398:4:8200::/64(rw,sync,root_squash) 129.13.238.64/26(rw,sync,root_squash)
+/las-archiv1/users 2a00:1398:4:8200::/64(rw,sync,root_squash) 129.13.238.64/26(rw,sync,root_squash)

roles/pycharm/vars/main.yml

 ---
-pycharm_name: pycharm-professional-2019.1
+pycharm_name: pycharm-professional-2019.1.2
 old_versions:
+  - pycharm-professional-2019.1.1
+  - pycharm-professional-2019.1
   - pycharm-professional-2018.3.3
   - pycharm-professional-2018.3.1
   - pycharm-professional-2018.2.4

roles/python_stack/tasks/fitting.yml

@@ -3,10 +3,7 @@
   become: yes
   dnf:
     state: present
-    name: "{{ item }}"
-  with_items:
-  - python3-scipy
-  - python3-scikit-learn
+    name: ["python3-scipy", "python3-scikit-learn",]
   tags: fit
   when: ansible_distribution == 'Fedora'
 
@@ -15,9 +12,5 @@
   pip:
     executable: "{{ pip3bin }}"
     state: present
-    name: "{{ item }}"
-  with_items:
-  - iminuit
-  # - kafe
-  - lmfit
+    name: ["iminuit", "lmfit", ]
   tags: fit

roles/python_stack/tasks/python.yml

 ---
 - name: Software for dependency installation
   dnf:
-    name: ["gcc", "gcc-c++", "glibc-devel.x86_64", "openssl-devel", "python-devel", "lapack-devel", "numpy-f2py", "redhat-rpm-config"]
+    name: ["gcc", "gcc-c++", "glibc-devel.x86_64", "openssl-devel", "python-devel", "lapack-devel", "numpy-f2py", "redhat-rpm-config", "python3-tkinter", "libxcrypt-compat"]
     state: present
   become: yes
   when: ansible_distribution == 'Fedora'

roles/ripgrep/tasks/main.yml

@@ -8,7 +8,7 @@
   args:
     warn: False
   changed_when: false
-  when: (ansible_distribution == "Fedora" and (ansible_distribution_major_version|int) >= 24)
+  when: (ansible_distribution == "Fedora" and (ansible_distribution_major_version|int) >= 24 and (ansible_distribution_major_version|int) < 28)
   tags: ripgrep
 
 - name: install ripgrep

roles/zotero/tasks/main.yml

+---
+- import_tasks: zotero.yml

roles/zotero/tasks/zotero.yml

 ---
+# - name: create dir for zotero
+#   file:
+#     name: /usr/local/Zotero
+#     state: directory
+
 - name: unarchive zotero
   become: yes
   unarchive:
     src: "{{ zotero_file }}"
+    dest: /usr/local/
+    list_files: yes
+  register: archive_contents
+
+- name: move zotero to version independent location
+  become: yes
+  copy:
+    src: "/usr/local/{{ archive_contents.files[0] }}"
     dest: /usr/local/Zotero
+    remote_src: True
+
+- name: move 2/2
+  become: yes
+  file:
+    path: "/usr/local/{{ archive_contents.files[0] }}"
+    state: absent
 
 - name: link zotero
   become: yes

roles/zotero/vars/main.yml

-zotero_file: Zotero-5.0.59_linux-x86_64.tar.bz2
+zotero_file: Zotero-5.0.66_linux-x86_64.tar.bz2