Commit graph

415 commits

Author SHA1 Message Date
5199c89a04 Cleanup old facts before starting installer 2021-02-23 17:35:28 +00:00
b2de68ebac Use weak ciphers for boot.foo.sh
iPXE doesn't support modern ciphers so use older ones.
2021-02-12 07:12:13 +00:00
353e7facf7 base: Mount /tmp using tmpfs on CentOS hosts 2021-02-12 06:48:21 +00:00
c9040a4529 sendmail: Initial version of module 2021-02-12 06:31:09 +00:00
01c3b23c9b Open HTTP port from mail servers for cert validation 2021-02-12 06:28:44 +00:00
af061d0083 nginx/server: Validate certificate before installing 2021-02-12 06:26:25 +00:00
5f679fd659 Better handling for package group installs 2021-02-12 05:32:12 +00:00
d017446a0e ldap/server: Index username (uid) attributes 2021-02-12 05:21:40 +00:00
612875ca44 syslogd: Restart server when new certs are deployed 2021-02-10 07:02:42 +00:00
0d693da604 mirror: Disable progress bar when downloading thinlinc packages 2021-02-08 06:40:22 +00:00
eaa0e25b41 zfs: Remove unused role 2020-12-13 16:08:39 +00:00
051e256c3b Move nas hosts to use XFS instead of ZFS filesystem 2020-12-13 16:07:50 +00:00
c1198880bb ldap/server: Include chain files to certificates tag 2020-12-08 08:02:32 +00:00
36cbc1dd48 syslogd: Fix log rotation command 2020-11-27 08:58:22 +00:00
5d10282cdb autofs: Use mkdir instead of install command 2020-11-24 07:24:07 +00:00
0d083acbd4 Add kernel documentation and php client to shell hosts 2020-11-19 21:37:55 +00:00
d12b28a0a0 Remove pulseuadio bluetooth support from shell hosts 2020-11-19 21:37:28 +00:00
ea61b2f5f7 Use dynamic address for lan interface on shell hosts 2020-11-19 20:15:56 +00:00
aca3b191e6 nfs-client: Disable using raw uid/gid mapping
Fixes error:

kernel: NFS: v4 server nas02.home.foo.sh does not accept raw uid/gids. Reenabling the idmapper.

Hopefully also makes logins faster.
2020-11-19 18:16:34 +00:00
9dad43c226 Remove bluetooth support from shell hosts
No need for bluetooth in remote servers. This seems to drop login times
from 40s to 10s.
2020-11-18 07:48:43 +00:00
06883d5010 Add gnu grep utils to log hosts 2020-11-18 05:48:21 +00:00
0ba135be52 sssd: Disable unused services and enumeration
We are not using autofs or sudo via LDAP so disable them. Enumeration
doesn't seem to help getting all users via getent so disable it.
2020-11-17 18:15:23 +00:00
f035101cce Add log and shell to global playbook 2020-11-17 17:29:32 +00:00
74b58f9313 sssd: Enable sssd as authentication backend 2020-11-17 16:50:49 +00:00
067007c307 Fix warnings from log playbook 2020-11-17 16:50:15 +00:00
90e32a1e33 Move loghost to vmhost02 and add datadisk 2020-11-17 16:49:57 +00:00
0d40ff3e92 nfs-client: Allow gssproxy to connect krb5 over https 2020-11-17 16:49:21 +00:00
b3329efbeb mirror: Add git as depency to report mirror 2020-11-15 16:53:24 +00:00
9e3b204b3a sssd: More specific config options to sssd.conf 2020-11-15 16:52:09 +00:00
4f98c287ab mirror: Print postcmd output only when running verbose 2020-11-15 16:50:39 +00:00
81dd2cbc50 Install more packages to shell hosts 2020-11-14 18:07:41 +00:00
f89672dd59 autofs: Fix cache path when xdg runtime is not set 2020-11-14 17:13:56 +00:00
822e46c818 Move shell hosts to use sssd 2020-11-14 14:17:03 +00:00
277630dcf9 thinlinc-server: Add missing policy file 2020-11-14 13:48:05 +00:00
019dd4978e sssd: Initial version of module 2020-11-14 13:46:54 +00:00
fa6062de18 Also use local name server for shell02 2020-11-13 18:38:08 +00:00
b317e5b12e autofs: Move users .cache directory out from home direcotry
No need to store users local .cache directory on NFS home directories.
Use tmpfs which is much faster.
2020-11-13 18:35:28 +00:00
93c1ae2e89 network: Configure DNS servers
EL systems use DNS servers from interface configs so support it.
2020-11-13 18:31:24 +00:00
d2befe152b google-chrome: Lint fixes 2020-11-13 18:10:16 +00:00
326caa417d autofs: Disable ssh authorized keys from users
When home directories are mounted using NFS and Kerberos the system
doesn't have access to authorized_keys file before user logs in.
2020-11-13 17:19:25 +00:00
962787dc04 thinlinc-server: disable auth dialogs during login 2020-11-13 16:19:23 +00:00
e26ea402c7 Fix password store path 2020-11-13 10:30:23 +00:00
7fc06236e4 mirror: Shellcheck fixes for sync-mirrors 2020-11-13 05:35:41 +00:00
5f8723c9c9 mirror: Print postcmd output to log and console 2020-11-12 19:24:57 +00:00
e099ee58ab Sync OpenBSD install packages to mirror servers 2020-11-12 19:02:37 +00:00
271f8c191b Fix warnings and postcmd from mirror servers 2020-11-12 19:02:08 +00:00
4807166c85 rpm-build: Add rpmlint 2020-11-12 19:01:09 +00:00
855b3b8063 mirror: Fix postcmd handling for mirrors 2020-11-12 19:00:26 +00:00
142025eafc mirror: Install report_mirror script from git 2020-11-12 18:57:31 +00:00
e2b18c7f36 mirror: Fix warnings from cron jobs 2020-11-12 18:15:05 +00:00