summaryrefslogtreecommitdiffstats
path: root/roles/base
Commit message (Collapse)AuthorAgeFilesLines
...
* filter virbr and deal with ansible iface name convdoteast2016-02-051-1/+1
|
* Re-add ansible network setup and split out virbr case.Kevin Fenzi2016-02-051-35/+35
|
* Comment tasks for now until we can sort out whats going on with it on some ↵Kevin Fenzi2016-02-041-35/+35
| | | | staging hosts
* Some non virthosts still have virbr interfaces.Kevin Fenzi2016-02-041-1/+1
|
* Copy these handlers to base role handers to avoid include handers bug in ↵Kevin Fenzi2016-02-041-0/+13
| | | | ansible 2.0
* rename handler for clearitydoteast2016-02-041-1/+1
|
* no need for restart. reload is enoughdoteast2016-02-041-1/+1
|
* net iface config templating and decouple resolvconf from NMdoteast2016-02-042-0/+61
|
* Blacklist cdc_ether on all virt hosts.Kevin Fenzi2016-02-022-0/+12
|
* Fix missing parensKevin Fenzi2016-01-311-1/+1
|
* SimplifyKevin Fenzi2016-01-311-1/+1
|
* Drop log02 old stuff and drop some negatives from conditionalKevin Fenzi2016-01-311-17/+2
|
* copr and jenkins use base but shouldn't try and log to log01 as they are in ↵Kevin Fenzi2016-01-311-1/+1
| | | | the cloud network.
* Also enable persistent journald on FedoraPatrick Uiterwijk2016-01-301-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Enable rsyslog journald module and persistent journaldPatrick Uiterwijk2016-01-303-3/+24
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* remove staging conditional on watchdog stuff, add conditionals for ensuring ↵Ricky Elrod2016-01-181-4/+9
| | | | | | /dev/watchdog exists and that we are on a VM Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* Drop a extra line that causes a changeKevin Fenzi2016-01-081-1/+0
|
* Setup a qa-isolated group in the qa net and have all other machines in that ↵Kevin Fenzi2016-01-081-0/+34
| | | | | | | net reject anything from them. This helps us isolate higher risk qa hosts from lower risk ones without having to move everything to a different network/vlan for now.
* Make smtp-mm accept email for lists.fh.o and forwardPatrick Uiterwijk2015-12-232-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* when adding a new proxy.. always remember to sync its httpd logs or they go bybyStephen Smoogen2015-12-181-0/+1
|
* Set sshd Protocol here to 2, this makes rkhunter happy hopefully.Kevin Fenzi2015-12-112-2/+2
|
* allow the builders to talk o kojipkgs on port 443Dennis Gilmore2015-12-091-0/+1
| | | | Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
* Drop backup for testKevin Fenzi2015-12-091-1/+1
|
* Revert "Drop validate just for a test"Kevin Fenzi2015-12-091-1/+1
| | | | This reverts commit 19ed9254b80f0af11c11dcbaf5006b3169250dd8.
* Drop validate just for a testKevin Fenzi2015-12-091-1/+1
|
* This is /sbin on rhel6 hosts and should work on rhel7 tooKevin Fenzi2015-12-091-1/+1
|
* Does this work now?Kevin Fenzi2015-12-091-10/+10
|
* Lets sort staging hosts in iptables template tooKevin Fenzi2015-12-091-1/+1
|
* Add dnf-automatic as a required role for base. This will enable it on all ↵Kevin Fenzi2015-12-091-0/+3
| | | | Fedora machines.
* fedorahosted server moved and we did not update the iptables rulesDennis Gilmore2015-12-091-2/+2
| | | | Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
* Add closing conditionalKevin Fenzi2015-12-081-1/+1
|
* Switch builders to use bastion01/02 for ntpKevin Fenzi2015-12-081-5/+2
|
* Move ntp to a template. In phx2 non bastion01/02 hosts will use bastion01/02 ↵Kevin Fenzi2015-12-082-6/+13
| | | | and those will use the normal rhel pools.
* Fix validate syntaxTill Maas2015-12-071-2/+1
|
* Validate iptables files before restoringTill Maas2015-12-071-0/+1
|
* This hotfix is now reverted, and should be deletedPatrick Uiterwijk2015-12-031-14/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Remove digicert hotfixPatrick Uiterwijk2015-12-031-2/+6
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* But rhel6 does not hae usr unificationPatrick Uiterwijk2015-12-031-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* This also seems to exist on RHEL6Patrick Uiterwijk2015-12-031-2/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Fix pathPatrick Uiterwijk2015-12-031-1/+1
|
* Jinja2-izePatrick Uiterwijk2015-12-031-2/+2
|
* Add temporary digicert hotfixPatrick Uiterwijk2015-12-032-0/+41
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Hey look. Some new ntp servers.Kevin Fenzi2015-12-021-5/+5
|
* Add ceylon-lang.org to transports so it delivers correctly.Kevin Fenzi2015-12-021-0/+1
|
* Revert "install python-dnf on F22+"Kevin Fenzi2015-11-301-7/+0
| | | | This reverts commit b1c890974ce114effd7c43f3dd7f5353b306d8a3.
* install python-dnf on F22+Miroslav Suchý2015-11-301-0/+7
|
* Add a conditional-reload script and use it so we can not fail on hosts with ↵Kevin Fenzi2015-11-131-0/+20
| | | | no httpd installed.
* think we need and here.Kevin Fenzi2015-11-101-2/+2
|
* watchdog-ify staging, hopefullyRicky Elrod2015-11-103-0/+49
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* kojibuilder: add ppc hub to firewallPeter Robinson2015-10-131-0/+4
|