This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
ansible:ansible_os_deployment [2025/05/13 14:53] manu |
ansible:ansible_os_deployment [2025/06/02 17:51] (current) manu [Create filesystems] |
||
---|---|---|---|
Line 83: | Line 83: | ||
=== AIX === | === AIX === | ||
+ | "ansible_os_family": "AIX", | ||
"ansible_distribution": "AIX", | "ansible_distribution": "AIX", | ||
"ansible_distribution_major_version": "7", | "ansible_distribution_major_version": "7", | ||
Line 88: | Line 89: | ||
"ansible_distribution_version": "7.2", | "ansible_distribution_version": "7.2", | ||
"ansible_architecture": "chrp", | "ansible_architecture": "chrp", | ||
+ | "ansible_system": "AIX" | ||
| | ||
=== Linux === | === Linux === | ||
+ | "ansible_os_family": "RedHat", | ||
"ansible_distribution": "openSUSE Leap", | "ansible_distribution": "openSUSE Leap", | ||
"ansible_distribution_file_variety": "SUSE", | "ansible_distribution_file_variety": "SUSE", | ||
Line 96: | Line 99: | ||
"ansible_distribution_version": "15.1", | "ansible_distribution_version": "15.1", | ||
"ansible_architecture": "x86_64", | "ansible_architecture": "x86_64", | ||
- | | + | "ansible_system": "Linux" |
+ | or "ansible_architecture": "ppc64le", | ||
===== Pre task for AIX to set ansible_python_interpreter ===== | ===== Pre task for AIX to set ansible_python_interpreter ===== | ||
Line 254: | Line 258: | ||
You could replace size parsing with something like: | You could replace size parsing with something like: | ||
lsfs /data | awk 'NR>1 {printf "%.0fG\n", $3*512/1024/1024/1024}' | lsfs /data | awk 'NR>1 {printf "%.0fG\n", $3*512/1024/1024/1024}' | ||
+ | |||
+ | |||
+ | ===== Playbook2 ===== | ||
+ | |||
+ | <cli prompt='$'> | ||
+ | [ansible@lnx001 playbooks]$ cat main.yml | ||
+ | --- | ||
+ | - name: Master playbook | ||
+ | hosts: all | ||
+ | gather_facts: true | ||
+ | become: yes | ||
+ | roles: | ||
+ | - role: aix_system_config | ||
+ | when: | ||
+ | - ansible_system == "AIX" | ||
+ | - role: lnx_system_config | ||
+ | when: | ||
+ | - ansible_system == "Linux" | ||
+ | |||
+ | [ansible@lnx001 playbooks]$ cat roles/lnx_system_config/tasks/main.yml | ||
+ | --- | ||
+ | - name: Include SSH configuration tasks | ||
+ | include_tasks: ssh_config.yml | ||
+ | |||
+ | [ansible@lnx001 playbooks]$ cat roles/lnx_system_config/vars/main.yml | ||
+ | --- | ||
+ | _etc_ssh_sshd_config: /etc/ssh/sshd_config | ||
+ | |||
+ | [ansible@lnx001 playbooks]$ cat roles/lnx_system_config/files/sshd_config.json | ||
+ | [ | ||
+ | { | ||
+ | "name": "Port", | ||
+ | "line": "Port 22", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "ListenAddress", | ||
+ | "line": "ListenAddress 0.0.0.0", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "ListenAddress", | ||
+ | "line": "ListenAddress ::", | ||
+ | "action": "remove" | ||
+ | }, | ||
+ | { | ||
+ | "name": "UseDNS", | ||
+ | "line": "UseDNS no", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "SyslogFacility", | ||
+ | "line": "SyslogFacility AUTH", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "LogLevel", | ||
+ | "line": "LogLevel INFO", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "PermitRootLogin", | ||
+ | "line": "PermitRootLogin yes", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "PasswordAuthentication", | ||
+ | "line": "PasswordAuthentication yes", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "UsePAM", | ||
+ | "line": "UsePAM yes", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "PidFile", | ||
+ | "line": "PidFile /var/run/sshd.pid", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "Subsystem", | ||
+ | "line": "Subsystem sftp /usr/libexec/openssh/sftp-server -f AUTH -l INFO", | ||
+ | "action": "replace" | ||
+ | }, | ||
+ | { | ||
+ | "name": "KexAlgorithms", | ||
+ | "line": "KexAlgorithms -*sha1*", | ||
+ | "action": "insertafter", | ||
+ | "after": "GSSAPIEnablek5users" | ||
+ | }, | ||
+ | { | ||
+ | "name": "MACs", | ||
+ | "line": "MACs -*umac-64*,*sha1*,umac-128-etm@openssh.com", | ||
+ | "action": "insertafter", | ||
+ | "after": "GSSAPIEnablek5users" | ||
+ | } | ||
+ | ] | ||
+ | |||
+ | </cli> |