...
 
Commits (19)
......@@ -113,7 +113,7 @@ The prompts `#` show that you are working at root.
**Warning** Please run the following commands just once! In case anything went wrong, follow the instructions of [Decommission/Uninstall a host](#decommissionuninstall-a-host)
* Get a Kerberos ticket (``obelix# kinit -f admin@LAS.KIT.EDU``)
* Go to ansible, by `cd /root/ansible`
* Run `ansible-playbook -l lasXXX.las.kit.edu add_ipa_host.yml --vault-id @prompt`
* Run `ansible-playbook -l lasXXX.las.kit.edu add_ipa_host.yml --vault-password-file password`
and provide the root password for the new host.
......@@ -123,8 +123,8 @@ You may also want to save and run the sudo rule for one user and computer (snipp
* edit the ``add_ipa_host.yml`` and uncomment the uninstall step in it.
## Edit encrypted files
* You can either use `ansible-vault edit --vault-id @prompt group_vars/all/vault.yml` to edit the file in your editor mentioned in the `$EDITOR` environment variable or
* you can decrypt the file `ansible-vault decrypt --vault-id @prompt group_vars/all/vault.yml`, edit the file and encrypt it again `ansible-vault encrypt --ask-vault-pass group_vars/all/vault.yml`
* You can either use `ansible-vault edit --vault-password-file group_vars/all/vault.yml` to edit the file in your editor mentioned in the `$EDITOR` environment variable or
* you can decrypt the file `ansible-vault decrypt --vault-password-file password group_vars/all/vault.yml`, edit the file and encrypt it again `ansible-vault encrypt --ask-vault-pass group_vars/all/vault.yml`
The first one is of cause the preferred one, because there is no risk to add a unencrypted file to the repo.
......
......@@ -36,7 +36,6 @@ desktop_software:
- thunderbird
- firefox
- libreoffice
- "https://download.bwsyncandshare.kit.edu/clients/bwSyncAndShare_Latest.x86_64.rpm"
- perl-Clipboard
- perl-Capture-Tiny
......
---
nfs_server: 129.13.238.126
nfs_server: obelix.las.kit.edu
ansible_user: root
user_account: richter
ip_suffix: 118
loc: 620
os: Fedora 29
loc: 622
os: Fedora 32
computer_name: amnesix
......@@ -2,7 +2,7 @@ ansible_user: root
user_account: gethmann
ip_suffix: 91
loc: 618
os: Fedora 30
os: Fedora 32
computer_name: galantine
extra_software:
......
......@@ -2,7 +2,7 @@ ansible_user: root
user_account: ning
ip_suffix: 115
loc: 619
os: Fedora 29
os: Fedora 31
computer_name: pepe
extra_software:
......
......@@ -3,6 +3,7 @@ user_account: bernhard
loc: -119
os: Fedora 31
computer_name: titania
ip_suffix: 105
extra_software:
- subversion # ANKA software
......
ansible_user: root
user_account: tong
loc: -119
os: Fedora 31
computer_name: ueberdrus
extra_software:
- subversion # ANKA software
ip_suffix: 74
......@@ -17,6 +17,7 @@ spuernix.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[desktop]
amnesix.las.kit.edu
......@@ -35,6 +36,7 @@ spuernix.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[graphics]
asterix.las.kit.edu
......@@ -59,6 +61,7 @@ pepe.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[python]
amnesix.las.kit.edu
......@@ -75,15 +78,14 @@ pepe.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[kdev] # KDevelope
[jabref]
[zotero]
asterix.las.kit.edu
idefix.las.kit.edu
lysander.las.kit.edu
[pynaff]
lysander.las.kit.edu
......@@ -95,6 +97,7 @@ lysander.las.kit.edu
asterix.las.kit.edu
pepe.las.kit.edu
idefix.las.kit.edu
ueberdrus.las.kit.edu
[chrome]
lysander.las.kit.edu
......@@ -108,6 +111,7 @@ gutemine.las.kit.edu
homoeopatix.las.kit.edu
methusalix.las.kit.edu
troubadix.las.kit.edu
ueberdrus.las.kit.edu
[latex]
amnesix.las.kit.edu
......@@ -124,6 +128,7 @@ pepe.las.kit.edu
teefax.las.kit.edu
troubadix.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[opera]
amnesix.las.kit.edu
......@@ -135,7 +140,7 @@ methusalix.las.kit.edu
obelix.las.kit.edu
pepe.las.kit.edu
troubadix.las.kit.edu
las-gethmann.las.kit.edu ansible_python_interpreter=/usr/bin/python3
lysander.las.kit.edu ansible_python_interpreter=/usr/bin/python3
[mad8]
# depercated for Fedora >=26
......@@ -150,6 +155,7 @@ obelix.las.kit.edu
faulus.las.kit.edu ansible_python_interpreter=/usr/bin/python3
gutemine.las.kit.edu ansible_python_interpreter=/usr/bin/python3
titania.las.kit.edu ansible_python_interpreter=/usr/bin/python3
ueberdrus.las.kit.edu ansible_python_interpreter=/usr/bin/python3
[rpmbuild]
asterix.las.kit.edu
......@@ -179,6 +185,7 @@ lysander.las.kit.edu
majestix.las.kit.edu
pepe.las.kit.edu
titania.las.kit.edu
ueberdrus.las.kit.edu
[ripgrep]
asterix.las.kit.edu
......@@ -203,7 +210,7 @@ faulus.las.kit.edu
gutemine.las.kit.edu
[local]
127.0.0.1 ansible_connection=local
# 127.0.0.1 ansible_connection=local
[admin_pcs]
asterix.las.kit.edu
......
# Configuration file for NetworkManager.
#
# See "man 5 NetworkManager.conf" for details.
#
# The directories /usr/lib/NetworkManager/conf.d/ and /run/NetworkManager/conf.d/
# can contain additional configuration snippets installed by packages. These files are
# read before NetworkManager.conf and have thus lowest priority.
# The directory /etc/NetworkManager/conf.d/ can contain additional configuration
# snippets. Those snippets are merged last and overwrite the settings from this main
# file.
#
# The files within one conf.d/ directory are read in asciibetical order.
#
# If /etc/NetworkManager/conf.d/ contains a file with the same name as
# /usr/lib/NetworkManager/conf.d/, the latter file is shadowed and thus ignored.
# Hence, to disable loading a file from /usr/lib/NetworkManager/conf.d/ you can
# put an empty file to /etc with the same name. The same applies with respect
# to the directory /run/NetworkManager/conf.d where files in /run shadow
# /usr/lib and are themselves shadowed by files under /etc.
#
# If two files define the same key, the one that is read afterwards will overwrite
# the previous one.
[main]
#plugins=ifcfg-rh,ibft
dhcp=dhclient
[logging]
# When debugging NetworkManager, enabling debug logging is of great help.
#
# Logfiles contain no passwords and little sensitive information. But please
# check before posting the file online. You can also personally hand over the
# logfile to a NM developer to treat it confidential. Meet us on #nm on freenode.
# Please post full logfiles except minimal modifications of private data.
#
# You can also change the log-level at runtime via
# $ nmcli general logging level TRACE domains ALL
# However, usually it's cleaner to enable debug logging
# in the configuration and restart NetworkManager so that
# debug logging is enabled from the start.
#
# You will find the logfiles in syslog, for example via
# $ journalctl -u NetworkManager
#
# Note that debug logging of NetworkManager can be quite verbose. Some messages
# might be rate-limited by the logging daemon (see RateLimitIntervalSec, RateLimitBurst
# in man journald.conf). Please disable rate-limiting before collecting debug logs.
#
#level=TRACE
#domains=ALL
......@@ -11,9 +11,14 @@
- name: Set dhclient as dhcp client for NetworkManager (admin issue 19)
become: yes
copy:
src: NetworkManager.conf
dest: /etc/NetworkManager/NetworkManager.conf
ini_file:
path: /etc/NetworkManager/NetworkManager.conf
section: main
option: dhcp
value: dhclient
no_extra_spaces: yes
create: no
backup: yes
notify:
- reload nm
- restart network
......@@ -2,51 +2,49 @@
- name: install Inovesa's dependencies on Fedora without openCL or PNG support
become: yes
dnf:
name: "{{ item }}"
name:
- cmake
- gcc-c++
- boost-devel
- boost-system
- boost-filesystem
- boost-program-options
- fftw-devel
- glew-devel
- glfw-devel
- hdf5-devel
- libpng-devel
- libXrandr-devel
# - libclfft-dev # does not exist
# attempts to get opencl running
# - opencl-headers
# - mesa-libOpenCL-devel # did not help
# - opencl-filesystem
# - libclc
# - mesa-libOpenCL
# - mesa-libOpenCL-devel
state: present
with_items:
- cmake
- gcc-c++
- boost-devel
- boost-system
- boost-filesystem
- boost-program-options
- fftw-devel
- glew-devel
- glfw-devel
- hdf5-devel
- libpng-devel
- libXrandr-devel
# - libclfft-dev # does not exist
# attempts to get opencl running
# - opencl-headers
# - mesa-libOpenCL-devel # did not help
# - opencl-filesystem
# - libclc
# - mesa-libOpenCL
# - mesa-libOpenCL-devel
when: ansible_distribution == "Fedora"
- name: install Inovesa's dependencies on Ubuntu
become: yes
apt:
name: "{{ item }}"
name:
- cmake
- g++
- libboost-dev
- libboost-system-dev
- libboost-filesystem-dev
- libboost-program-options-dev
- libfftw3-dev
- libglew-dev
- libglfw3-dev
- libhdf5-dev
- libpng++-dev
- libxrandr-dev
- opencl-dev
- libclfft-dev
state: present
with_items:
- cmake
- g++
- libboost-dev
- libboost-system-dev
- libboost-filesystem-dev
- libboost-program-options-dev
- libfftw3-dev
- libglew-dev
- libglfw3-dev
- libhdf5-dev
- libpng++-dev
- libxrandr-dev
- opencl-dev
- libclfft-dev
when: ansible_distribution == "Debian"
- name: clone Inovesa
......
......@@ -20,15 +20,33 @@
become: yes
when: ansible_distribution == 'CentOS'
- name: mount lasarchiv1
- name: add lasarchiv1 to fstab
mount:
name: "/mnt/las-archiv1"
src: "{{ nfs_server }}:/las-archiv1"
fstype: nfs4
opts: "soft,timeo=14,intr,nosuid"
state: "{{ item }}"
state: "present"
become: yes
when: (ansible_default_ipv4.address | ipv4('129.13.238.64/26')) or (ansible_default_ipv6.address | ipv6('2a00:1398:4:8200::/64'))
with_items:
- mounted
- present
register: fstab
- name: check if mount exist
stat:
path: "/mnt/las-archiv1"
register: lasarchiv1
ignore_errors: True
- name: remount lasarchiv1
mount:
name: "/mnt/las-archiv1"
src: "{{ nfs_server }}:/las-archiv1"
fstype: nfs4
opts: "soft,timeo=14,intr,nosuid"
state: "remounted"
become: yes
when: >
((ansible_default_ipv4.address | ipv4('129.13.238.64/26')) or (ansible_default_ipv6.address | ipv6('2a00:1398:4:8200::/64'))) and
((fstab.changed) and (lasarchiv1.stat.isdir is defined and lasarchiv1.stat.isdir) or ("'Input/output error' in lasarchiv1.stderr"))