/
debian.yml
99 lines (89 loc) · 2.66 KB
/
debian.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
---
# Copyright 2019, VEXXHOST, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
## Defined required kernel
openstack_host_required_kernel: 4.9.0-0-amd64
openstack_host_sysstat_file: /etc/default/sysstat
openstack_host_sysstat_cron_file: /etc/cron.d/sysstat
openstack_host_cron_template: sysstat.cron.debian.j2
openstack_host_module_file: /etc/modules
## Kernel modules loaded on hosts
openstack_host_kernel_modules:
- name: 8021q
- name: br_netfilter
- name: dm_multipath
- name: dm_snapshot
- name: ebtables
- name: ip6table_filter
- name: ip6_tables
- name: ip_tables
- name: ipt_MASQUERADE
- name: ipt_REJECT
- name: iptable_filter
- name: iptable_mangle
- name: iptable_nat
- name: ip_vs
- name: iscsi_tcp
- name: nbd
- name: nf_conntrack
- name: nf_defrag_ipv4
- name: nf_nat
- name: vhost_net
- name: x_tables
## Base packages
_openstack_host_distro_packages:
- acl
## Bare metal base packages
_openstack_host_metal_distro_packages:
- apparmor-utils
- apt-transport-https
- bridge-utils
- curl
- dmeventd
- dstat
- ebtables
- htop
- iptables
- irqbalance
- libkmod2
- lvm2
- rsync
- software-properties-common
- sysstat
- sudo
- time
- vlan
- wget
_package_repos_keys:
- id: 0FB8E8DD19498FEC90B25E5E56056AB2FEE4EECB
url: "http://osbpo.debian.net/osbpo/dists/pubkey.gpg"
state: present
_openstack_hosts_package_list:
- name: ca-certificates
state: latest
_osbpo_release: "{{ (ansible_facts['distribution_version'] is version('12', '<')) | ternary('zed', openstack_distrib_code_name | lower) }}"
_package_repos:
- repo: >-
deb {{ apt_repo_url | default('http://osbpo.debian.net/osbpo/ ' ~ ansible_facts['distribution_release'] ~ '-' ~ _osbpo_release ~ '-backports main') }}
state: present
filename: "osbpo"
- repo: >-
deb {{ apt_repo_url | default(
'http://osbpo.debian.net/osbpo/ ' ~ ansible_facts['distribution_release'] ~ '-' ~ _osbpo_release ~ '-backports-nochange main'
) }}
state: present
filename: "osbpo"
_openstack_ca_bundle_path: /etc/ssl/certs/ca-certificates.crt
_openstack_hosts_package_manager_default_conf: |
APT::Install-Recommends "false";