|
14 | 14 | # License for the specific language governing permissions and limitations |
15 | 15 | # under the License. |
16 | 16 |
|
17 | | -- name: Ensure /var/log/journal exists |
18 | | - ansible.builtin.file: |
19 | | - path: /var/log/journal |
20 | | - state: directory |
21 | | - mode: '0750' |
22 | | - owner: root |
23 | | - group: root |
24 | | - setype: var_log_t |
25 | | - become: true |
| 17 | +- name: Import edpm_bootc role |
| 18 | + ansible.builtin.import_role: |
| 19 | + name: edpm_bootc |
26 | 20 |
|
27 | | -- name: Gather services facts |
28 | | - ansible.builtin.service_facts: |
| 21 | +- name: Import common pre packages tasks |
| 22 | + ansible.builtin.import_tasks: bootstrap-common-pre-packages.yml |
29 | 23 |
|
30 | | -- name: Print cloud-init service status |
31 | | - ansible.builtin.debug: |
32 | | - var: ansible_facts.services["cloud-init.service"] |
| 24 | +- name: Include packages tasks |
| 25 | + ansible.builtin.include_tasks: packages.yml |
| 26 | + when: not bootc |
33 | 27 |
|
34 | | -- name: Check if cloud-init is disabled via kernel args |
35 | | - ansible.builtin.lineinfile: |
36 | | - path: /proc/cmdline |
37 | | - line: "cloud-init=disabled" |
38 | | - state: present |
39 | | - check_mode: true |
40 | | - register: cloud_init_vendor_disabled |
| 28 | +- name: Import common post packages tasks |
| 29 | + ansible.builtin.import_tasks: bootstrap-common-post-packages.yml |
41 | 30 |
|
42 | | -- name: Wait for cloud-init to finish, if enabled |
43 | | - community.general.cloud_init_data_facts: |
44 | | - filter: status |
45 | | - register: res |
46 | | - until: > |
47 | | - res.cloud_init_data_facts.status.v1.stage is defined and |
48 | | - not res.cloud_init_data_facts.status.v1.stage |
49 | | - retries: 50 |
50 | | - delay: 5 |
51 | | - when: |
52 | | - - not ansible_check_mode |
53 | | - - ansible_facts.services["cloud-init.service"] is defined |
54 | | - - ansible_facts.services["cloud-init.service"]["status"] != "not-found" |
55 | | - - ansible_facts.services["cloud-init.service"]["state"] == "running" |
56 | | - - ansible_facts.services["cloud-init.service"]["status"] == "enabled" |
57 | | - - cloud_init_vendor_disabled is changed |
58 | | - become: true |
| 31 | +- name: Include swap tasks |
| 32 | + ansible.builtin.include_tasks: swap.yml |
| 33 | + when: not bootc |
59 | 34 |
|
60 | | -- name: Execute bootstrap command |
61 | | - ansible.builtin.import_tasks: bootstrap_command.yml |
62 | | - |
63 | | -- name: Import packages tasks |
64 | | - ansible.builtin.import_tasks: packages.yml |
65 | | - |
66 | | -- name: Set selinux state |
67 | | - ansible.posix.selinux: |
68 | | - policy: targeted |
69 | | - state: "{{ edpm_bootstrap_selinux_mode }}" |
70 | | - become: true |
71 | | - |
72 | | -- name: Stop NetworkManager from updating resolv.conf |
73 | | - when: ( edpm_bootstrap_network_service == 'NetworkManager' ) and ( not edpm_bootstrap_network_resolvconf_update ) |
74 | | - become: true |
75 | | - block: |
76 | | - - name: Set 'dns=none' in /etc/NetworkManager/NetworkManager.conf |
77 | | - community.general.ini_file: |
78 | | - path: /etc/NetworkManager/NetworkManager.conf |
79 | | - state: present |
80 | | - no_extra_spaces: true |
81 | | - section: main |
82 | | - option: dns |
83 | | - value: none |
84 | | - backup: true |
85 | | - mode: '0644' |
86 | | - - name: Set 'rc-manager=unmanaged' in /etc/NetworkManager/NetworkManager.conf |
87 | | - community.general.ini_file: |
88 | | - path: /etc/NetworkManager/NetworkManager.conf |
89 | | - state: present |
90 | | - no_extra_spaces: true |
91 | | - section: main |
92 | | - option: rc-manager |
93 | | - value: unmanaged |
94 | | - backup: true |
95 | | - mode: '0644' |
96 | | - - name: Reload NetworkManager |
97 | | - ansible.builtin.systemd: |
98 | | - name: NetworkManager |
99 | | - state: reloaded |
100 | | - |
101 | | -- name: Stop dhclient from updating resolv.conf |
102 | | - become: true |
103 | | - ansible.builtin.copy: |
104 | | - dest: /etc/dhcp/dhclient-enter-hooks |
105 | | - mode: "0755" |
106 | | - content: | |
107 | | - #!/bin/sh |
108 | | - make_resolv_conf() { : ; } |
109 | | -
|
110 | | -- name: Configure swap |
111 | | - ansible.builtin.import_tasks: swap.yml |
112 | | - |
113 | | -- name: FIPS tasks |
| 35 | +- name: Import FIPS tasks |
114 | 36 | ansible.builtin.import_tasks: fips.yml |
115 | 37 | when: edpm_bootstrap_fips_mode != 'check' |
0 commit comments