support openEuler

* upgrade ansible to support ansible_os_family for openEuler
* openEuler has python3 only
* openEuler has no firewalld installed
* openEuler doesn't have /etc/redhat-release
* adjust additional repos for openEuler
* openEuler doesn't support to disable selinux
* openEuler has no yum-utils, moreutils and inxi available
* openEuler has its own way to install Docker

Author: joez

Pipfile

@@ -7,7 +7,7 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-ansible = "==2.9.27"
+ansible = "==2.10.0"
 ansible-lint = "==5.0.8"
 jinja2 = "==3.0.3"
 pylint = "==2.7.2"

roles/baseline_ansible/action_plugins/package.py

@@ -40,7 +40,7 @@ def run(self, tmp=None, task_vars=None):
         # Add/Change ansible_python_interpreter to python2 for CentOS 7.x and RHEL 7.x
         # pylint: disable=f-string-without-interpolation
         is_redhat_family_7 = \
-            self._templar.template("{{ (ansible_os_family == 'RedHat' and "
+            self._templar.template("{{ (ansible_os_family == 'RedHat' and ansible_distribution != 'openEuler' and "
                                    "ansible_distribution_version < '8') | bool }}")
         if is_redhat_family_7:
             if 'ansible_python_interpreter' in task_vars:

roles/baseline_ansible/action_plugins/yum.py

@@ -40,7 +40,7 @@ def run(self, tmp=None, task_vars=None):
         # Add/Change ansible_python_interpreter to python2 for CentOS 7.x and RHEL 7.x
         # pylint: disable=f-string-without-interpolation
         is_redhat_family_7 = \
-            self._templar.template("{{ (ansible_os_family == 'RedHat' and "
+            self._templar.template("{{ (ansible_os_family == 'RedHat'and ansible_distribution != 'openEuler' and "
                                    "ansible_distribution_version < '8') | bool }}")
         if is_redhat_family_7:
             if 'ansible_python_interpreter' in task_vars:

roles/baseline_ansible/infrastructure/firewall_open_ports/tasks/main.yml

@@ -20,4 +20,4 @@
   # where every element has the value "enabled" or "disabled"
   loop: "{{ (fw_open_ports | default([]) | zip_longest([], fillvalue='enabled') | list) + (fw_close_ports | default([]) | zip_longest([], fillvalue='disabled') | list) }}" # noqa line-length
   become: yes
-  when: ansible_os_family == 'RedHat'
+  when: ansible_os_family == 'RedHat' and ansible_distribution != 'openEuler'

roles/baseline_ansible/infrastructure/install_dependencies/tasks/install_os_packages.yml

@@ -19,7 +19,7 @@
 - name: install os packages
   block:
     - name: install os packages
-      action: "{{ ansible_pkg_mgr }} name={{ install_dependencies_full_list }} state=present update_cache=yes"
+      action: "{{ ansible_pkg_mgr }} disable_excludes=main name={{ install_dependencies_full_list }} state=present update_cache=yes"
       register: pkg_mgr_results
       retries: "{{ number_of_retries | default(3) }}"
       until: pkg_mgr_results is success

roles/baseline_ansible/infrastructure/install_packages/tasks/redhat_enable_repositories.yml

@@ -31,6 +31,7 @@
   when:
     - ansible_distribution_version < '8'
     - ius_repository_enabled
+    - ansible_distribution != 'openEuler'
 
 - name: Install PowerTools repository
   include_tasks: redhat_powertools_repository.yml
@@ -46,6 +47,8 @@
   command: cat /etc/redhat-release
   register: release
   changed_when: false
+  when:
+    - ansible_distribution != 'openEuler'
 
 - name: set full distribution version RHEL
   set_fact:

roles/baseline_ansible/infrastructure/install_packages/tasks/redhat_epel_repository.yml

@@ -23,3 +23,14 @@
   become: yes
   when:
     - ansible_distribution == "CentOS"
+
+- name: add EPEL repository for openEuler
+  ansible.builtin.yum_repository:
+    name: epel
+    description: EPEL
+    baseurl: https://dl.fedoraproject.org/pub/epel/8/Everything/$basearch/
+    gpgkey: https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-8
+    enabled: true
+  become: yes
+  when:
+    - ansible_distribution == "openEuler"

roles/baseline_ansible/infrastructure/install_packages/tasks/redhat_install_kernel_headers_and_devel.yml

@@ -91,3 +91,20 @@
   when:
     - ansible_distribution == "RedHat"
     - ansible_distribution_version >= '8'
+
+- name: pull matching kernel headers and devel on openEuler
+  become: yes
+  package:
+    name: "{{ item }}"
+    state: present
+    allow_downgrade: true
+    disable_excludes: main
+  retries: "{{ number_of_retries | default(5) }}"
+  delay: "{{ retry_delay | default(3) }}"
+  register: source_status
+  until: source_status is not failed
+  loop:
+    - "kernel-headers"
+    - "kernel-devel"
+  when:
+    - ansible_distribution == "openEuler"

roles/baseline_ansible/infrastructure/install_packages/vars/main.yml

@@ -4,8 +4,10 @@
 ---
 os_base_packages:
   RedHat:
+    - CentOS:
+      - yum-utils
+      - moreutils
     - curl
-    - yum-utils
     - device-mapper-persistent-data
     - lvm2
     - wget
@@ -29,7 +31,6 @@ os_base_packages:
     - gcc-c++
     - psmisc
     - pixman-devel
-    - moreutils
     - createrepo
     - sshpass
     - bash-completion
@@ -111,8 +112,9 @@ os_python_packages:
 
 hardware_details_tools:
   RedHat:
+    - CentOS:
+      - inxi
     - hwinfo
-    - inxi
     - jq
     - pciutils
   Debian:

roles/baseline_ansible/infrastructure/selinux/tasks/main.yml

@@ -22,4 +22,4 @@
         state: disabled
       become: yes
       when: ansible_distribution_version >= '8'
-  when: ansible_os_family == "RedHat"
+  when: ansible_os_family == "RedHat" and ansible_distribution != "openEuler"