wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Ansible base OS customization ======

===== Conditional role =====

Assume 3 roles:
  * aix_setup
  * ppc64le_setup
  * x86_64_setup

  site.yml
  roles/
  ├── aix_setup/
  ├── ppc64le_setup/
  └── x86_64_setup/

<cli prompt='#'>
# ansible-galaxy init roles/aix_setup
# ansible-galaxy init roles/ppc64le_setup
# ansible-galaxy init roles/x86_64_setup
</cli>

  roles/
  ├── aix_setup/
  │   ├── defaults/
  │   │   └── main.yml
  │   ├── files/
  │   ├── handlers/
  │   │   └── main.yml
  │   ├── meta/
  │   │   └── main.yml
  │   ├── tasks/
  │   │   └── main.yml
  │   ├── templates/
  │   ├── tests/
  │   │   ├── inventory
  │   │   └── test.yml
  │   └── vars/
  │       └── main.yml
  
Example main.yml
<cli prompt='#'>
# cat roles/ppc64le_setup/tasks/main.yml
---
- name: Print ppc64le architecture and OS
  debug:
    msg: "Running setup role on {{ inventory_hostname }}, OS: {{ ansible_system }}, Arch: {{ ansible_architecture }}"
</cli>

<cli prompt='#'>
# cat conditional_roles.yml
---
- name: Run role based on system architecture and OS
  hosts: all
  become: yes
  gather_facts: yes

  pre_tasks:
    - name: Get AIX version if applicable
      ansible.builtin.shell: oslevel
      when: ansible_system == "AIX"
      register: aix_version
      changed_when: false

  roles:

    - role: aix_setup
      when:
        - ansible_system == "AIX"
        - "'7.2' in aix_version.stdout or '7.3' in aix_version.stdout"

    - role: ppc64le_setup
      when:
        - ansible_architecture == "ppc64le"
        - ansible_system != "AIX"

    - role: x86_64_setup
      when:
        - ansible_architecture == "x86_64"
        - ansible_system != "AIX"
</cli>

Also useful facts: 

=== AIX ===
  "ansible_os_family": "AIX",
  "ansible_distribution": "AIX",
  "ansible_distribution_major_version": "7",
  "ansible_distribution_release": "2",
  "ansible_distribution_version": "7.2",
  "ansible_architecture": "chrp",
  "ansible_system": "AIX"
  
=== Linux ===
  "ansible_os_family": "RedHat",
  "ansible_distribution": "openSUSE Leap",
  "ansible_distribution_file_variety": "SUSE",
  "ansible_distribution_major_version": "15",
  "ansible_distribution_release": "1",
  "ansible_distribution_version": "15.1",
  "ansible_architecture": "x86_64",
  "ansible_system": "Linux"
or "ansible_architecture": "ppc64le",
===== Pre task for AIX to set ansible_python_interpreter =====

<cli prompt='#'>
# cat pretask.yml
---
- name: Set Python interpreter based on AIX version
  hosts: aix_hosts
  gather_facts: false  # we'll do manual version check
  become: yes

  pre_tasks:

    - name: Get AIX version
      ansible.builtin.shell: oslevel
      register: aix_version
      changed_when: false

    - name: Set Python interpreter for AIX 7.2
      ansible.builtin.set_fact:
        ansible_python_interpreter: "/opt/freeware/bin/python3"
      when: "'7.2' in aix_version.stdout"

    - name: Set Python interpreter for AIX 7.3
      ansible.builtin.set_fact:
        ansible_python_interpreter: "/opt/freeware/bin/python3_73"
      when: "'7.3' in aix_version.stdout"

  tasks:
    - name: Debug current interpreter
      ansible.builtin.debug:
        msg: "Using interpreter: {{ ansible_python_interpreter }}"

    # You can continue here with other tasks
</cli>

===== Create filesystems =====

<cli prompt='#'>
# cat inventory.ini
[aix_hosts]
aixserver1 ansible_user=root ansible_connection=ssh ansible_python_interpreter=/opt/freeware/bin/python3
</cli>

<cli prompt='#'>
# cat lv_config.json
[
  {
    "vgname": "datavg",
    "lvname": "lv_data",
    "mount_point": "/data",
    "size": "2G"
    "type": "jfs2"
  },
  {
    "vgname": "appvg",
    "lvname": "lv_app",
    "mount_point": "/app",
    "size": "5G"
    "type": "jfs2"
  }
]
</cli>

Create filesystems
<cli prompt='#'>
# cat create_aix_lvs.yml
---
- name: Create Logical Volumes and Filesystems on AIX
  hosts: aix_hosts
  become: yes
  vars_files:
    - lv_config.json

  tasks:

    - name: Create logical volume
      ansible.builtin.shell: |
        mklv -t {{ item.type }} -y {{ item.lvname }} {{ item.vgname }} {{ item.size }}
      args:
        creates: "/dev/{{ item.lvname }}"
      loop: "{{ lv_config }}"

    - name: Create file system
      ansible.builtin.shell: |
        crfs -v {{ item.type }} -d {{ item.lvname }} -m {{ item.mount_point }} -A yes
      args:
        creates: "{{ item.mount_point }}"
      loop: "{{ lv_config }}"

    - name: Create mount point directory
      ansible.builtin.file:
        path: "{{ item.mount_point }}"
        state: directory
        mode: '0755'
      loop: "{{ lv_config }}"

    - name: Mount filesystem
      ansible.builtin.shell: |
        mount {{ item.mount_point }}
      loop: "{{ lv_config }}"

    - name: Ensure filesystem is in /etc/filesystems (automount)
      ansible.builtin.shell: |
        chfs -A yes {{ item.mount_point }}
      loop: "{{ lv_config }}"
</cli>

Extend filesystems if smaller than desired
<cli prompt='#'>
# cat extend_aix_lvs.yml
---
- name: Extend filesystems on AIX if current size is smaller
  hosts: aix_hosts
  become: yes
  vars_files:
    - lv_config.json

  tasks:
    - name: Get current size of filesystem
      ansible.builtin.shell: |
        lsfs {{ item.mount_point }} | awk 'NR>1 {print $3}'
      register: current_fs_size
      changed_when: false
      loop: "{{ lv_config }}"
      loop_control:
        label: "{{ item.mount_point }}"
      delegate_to: localhost

    - name: Set fact with comparison results
      ansible.builtin.set_fact:
        fs_resize_list: >-
          {{
            fs_resize_list | default([]) +
            [{
              'mount_point': item.1.mount_point,
              'lvname': item.1.lvname,
              'vgname': item.1.vgname,
              'current_size': (item.0.stdout | trim),
              'desired_size': item.1.size
            }] if (item.0.stdout | trim is version(item.1.size, '<')) else fs_resize_list | default([])
          }}
      loop: "{{ zip(current_fs_size.results, lv_config) }}"
      loop_control:
        label: "{{ item.1.mount_point }}"

    - name: Extend filesystem only if current size is less than desired
      ansible.builtin.shell: |
        chfs -a size={{ item.desired_size }} {{ item.mount_point }}
      loop: "{{ fs_resize_list }}"
      when: fs_resize_list | length > 0
</cli>

//Note//
  AIX lsfs returns sizes in 512-byte blocks. So 4194304 blocks = 2G. You may need a helper function to normalize that if you want more accuracy.

  You could replace size parsing with something like:
  lsfs /data | awk 'NR>1 {printf "%.0fG\n", $3*512/1024/1024/1024}'


===== Playbook2 =====

<cli prompt='$'>
[ansible@lnx001 playbooks]$ cat main.yml
---
- name: Master playbook
  hosts: all
  gather_facts: true
  become: yes
  roles:
    - role: aix_system_config
      when:
        - ansible_system == "AIX"
    - role: lnx_system_config
      when:
        - ansible_system == "Linux"

[ansible@lnx001 playbooks]$ cat roles/lnx_system_config/tasks/main.yml
---
- name: Include SSH configuration tasks
  include_tasks: ssh_config.yml

[ansible@lnx001 playbooks]$ cat roles/lnx_system_config/vars/main.yml
---
_etc_ssh_sshd_config: /etc/ssh/sshd_config

[ansible@lnx001 playbooks]$ cat roles/lnx_system_config/files/sshd_config.json
[
  {
    "name": "Port",
    "line": "Port 22",
    "action": "replace"
  },
  {
    "name": "ListenAddress",
    "line": "ListenAddress 0.0.0.0",
    "action": "replace"
  },
  {
    "name": "ListenAddress",
    "line": "ListenAddress ::",
    "action": "remove"
  },
  {
    "name": "UseDNS",
    "line": "UseDNS no",
    "action": "replace"
  },
  {
    "name": "SyslogFacility",
    "line": "SyslogFacility AUTH",
    "action": "replace"
  },
  {
    "name": "LogLevel",
    "line": "LogLevel INFO",
    "action": "replace"
  },
  {
    "name": "PermitRootLogin",
    "line": "PermitRootLogin yes",
    "action": "replace"
  },
  {
    "name": "PasswordAuthentication",
    "line": "PasswordAuthentication yes",
    "action": "replace"
  },
  {
    "name": "UsePAM",
    "line": "UsePAM yes",
    "action": "replace"
  },
  {
    "name": "PidFile",
    "line": "PidFile /var/run/sshd.pid",
    "action": "replace"
  },
  {
    "name": "Subsystem",
    "line": "Subsystem sftp /usr/libexec/openssh/sftp-server -f AUTH -l INFO",
    "action": "replace"
  },
  {
    "name": "KexAlgorithms",
    "line": "KexAlgorithms -*sha1*",
    "action": "insertafter",
    "after": "GSSAPIEnablek5users"
  },
  {
    "name": "MACs",
    "line": "MACs -*umac-64*,*sha1*,umac-128-etm@openssh.com",
    "action": "insertafter",
    "after": "GSSAPIEnablek5users"
  }
]

</cli>
wiki

User Tools

Site Tools

Page Tools
