File tree Expand file tree Collapse file tree 1 file changed +21
-21
lines changed
ansible/roles/compute_init/files Expand file tree Collapse file tree 1 file changed +21
-21
lines changed Original file line number Diff line number Diff line change 244244 cmd : " cvmfs_config setup"
245245 when : enable_eessi
246246
247- - name : Set locked memory limits on user-facing nodes
248- lineinfile :
249- path : /etc/security/limits.conf
250- regexp : ' \* soft memlock unlimited'
251- line : " * soft memlock unlimited"
252-
253- - name : Configure sshd pam module
254- blockinfile :
255- path : /etc/pam.d/sshd
256- insertafter : ' account\s+required\s+pam_nologin.so'
257- block : |
258- account sufficient pam_access.so
259- account required pam_slurm.so
260-
261- - name : Configure login access control
262- blockinfile :
263- path : /etc/security/access.conf
264- block : |
265- +:adm:ALL
266- -:ALL:ALL
267-
268247 # NB: don't need conditional block on enable_compute as have already exited
269248 # if not the case
270249 - name : Write Munge key
297276 enabled : true
298277 state : started
299278
279+ - name : Set locked memory limits on user-facing nodes
280+ lineinfile :
281+ path : /etc/security/limits.conf
282+ regexp : ' \* soft memlock unlimited'
283+ line : " * soft memlock unlimited"
284+
285+ - name : Configure sshd pam module
286+ blockinfile :
287+ path : /etc/pam.d/sshd
288+ insertafter : ' account\s+required\s+pam_nologin.so'
289+ block : |
290+ account sufficient pam_access.so
291+ account required pam_slurm.so
292+
293+ - name : Configure login access control
294+ blockinfile :
295+ path : /etc/security/access.conf
296+ block : |
297+ +:adm:ALL
298+ -:ALL:ALL
299+
300300 - name : Ensure node is resumed
301301 # TODO: consider if this is always safe for all job states?
302302 command : scontrol update state=resume nodename={{ ansible_hostname }}
You can’t perform that action at this time.
0 commit comments