Upload

update_jobs/hourly_update.yaml

@@ -4,7 +4,6 @@
   become: true
 
   tasks:
-
     - name: block shutdown
       blockinfile:
         path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules

update_jobs/install_desktop_packages.yaml

@@ -4,12 +4,34 @@
   become: true
 
   tasks:
+    - name: block shutdown
+      blockinfile:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: present
+        create: true
+        owner: "root"
+        group: "root"
+        mode: "0666"
+        block: |
+          polkit.addRule(function(action, subject) {
+            if (action.id.indexOf("org.freedesktop.login1.power-off") == 0 ||
+              action.id.indexOf("org.freedesktop.login1.reboot") == 0) {
+              return polkit.Result.AUTH_ADMIN;
+            }
+          });
+
+    - name: Make sure systemd-oomd service unit is stopped
+      systemd_service:
+        state: stopped
+        name: systemd-oomd
+
     - name: Install base system
       include_tasks: yaml_sub/install_base_system.yaml
 
     - name: remove other files
       include_tasks: yaml_sub/myrepo_clean.yaml
     - name: update file myrepo.repo
+
       import_tasks: yaml_sub/myrepo_data.yaml
 
     - name: install movie tools
@@ -41,3 +63,13 @@
 
     - name: disable tracker
       shell: 'for f in /etc/xdg/autostart/tracker*.desktop; do echo "Hidden=true" | tee -a "$f"; done'
+
+    - name: Make sure systemd-oomd service unit is started
+      systemd_service:
+        state: started
+        name: systemd-oomd
+
+    - name: stop shutdown embargo
+      ansible.builtin.file:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: "absent"

update_jobs/update_to_version.yaml

@@ -0,0 +1,56 @@
+---
+- name: upgrade to next version
+  hosts: all
+  become: true
+
+  tasks:
+
+    - name: block shutdown
+      blockinfile:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: present
+        create: true
+        owner: "root"
+        group: "root"
+        mode: "0666"
+        block: |
+          polkit.addRule(function(action, subject) {
+            if (action.id.indexOf("org.freedesktop.login1.power-off") == 0 ||
+              action.id.indexOf("org.freedesktop.login1.reboot") == 0) {
+              return polkit.Result.AUTH_ADMIN;
+            }
+          });
+
+    - name: Make sure systemd-oomd service unit is stopped
+      systemd_service:
+       state: stopped
+       name: systemd-oomd
+
+    - name: remove other files
+      include_tasks: ../yaml_sub/myrepo_clean.yaml
+    - name: update file myrepo.repo
+      import_tasks: ../yaml_sub/myrepo_data.yaml
+
+    - name: install system-upgrade
+      dnf:
+        name: "dnf-command(system-upgrade)"
+        state: present
+        update_cache: true
+        skip_broken: true
+        nobest: false
+        allowerasing: true
+
+    - name: upgrade version 
+      shell: "dnf -y system-upgrade download --refresh --releasever={{version}} --allowerasing --best --skip-broken; dnf system-upgrade reboot"
+
+    - name: Make sure systemd-oomd service unit is started
+      systemd_service:
+       state: started
+       name: systemd-oomd
+
+    - name: stop shutdown embargo
+      ansible.builtin.file:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: "absent"
+
+

update_jobs/yaml_sub

@@ -0,0 +1 @@
+../yaml_sub

yaml_sub/install_base_system.yaml

@@ -1,10 +1,10 @@
 ---
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: update system (base)
+- name: update system (base)
   dnf:
     name: "*"
     state: latest
@@ -13,15 +13,15 @@
     nobest: false
     allowerasing: true
 
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: Load group list
+- name: Load group list
   include_vars:
     file: yaml_sub/groups_39.yaml
-    - name: Install groups
+- name: Install groups
   dnf:
     name: "{{ groupnames }}"
     disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
@@ -32,15 +32,15 @@
     allowerasing: true
     exclude: ghdl,sddm-x11
 
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: Load package 1 list
+- name: Load package 1 list
   include_vars:
     file: yaml_sub/packages_1.yaml
-    - name: Install package 1
+- name: Install package 1
   dnf:
     name: "{{ package1names }}"
     disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
@@ -50,15 +50,15 @@
     nobest: false
     allowerasing: true
 
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: Load package 2 list
+- name: Load package 2 list
   include_vars:
     file: yaml_sub/packages_2.yaml
-    - name: Install package 2
+- name: Install package 2
   dnf:
     name: "{{ package2names }}"
     disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
@@ -68,15 +68,15 @@
     nobest: false
     allowerasing: true
 
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: Load package 3 list
+- name: Load package 3 list
   include_vars:
     file: yaml_sub/packages_3.yaml
-    - name: Install package 3
+- name: Install package 3
   dnf:
     name: "{{ package3names }}"
     disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
@@ -86,12 +86,12 @@
     nobest: false
     allowerasing: true
 
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: Install cuda
+- name: Install cuda
   dnf:
     name: cuda
     enablerepo: "*"
@@ -101,12 +101,12 @@
     nobest: false
     allowerasing: true
 
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: Make sure firewall service unit is diabled
+- name: Make sure firewall service unit is diabled
   systemd_service:
     state: stopped
     enabled: false
@@ -114,15 +114,15 @@
     name: firewalld
   ignore_errors: true
 
-    - name: mount_info
+- name: mount_info
   include_tasks: yaml_sub/mount_info.yaml
 
-    - name: remove other files
+- name: remove other files
   include_tasks: yaml_sub/myrepo_clean.yaml
-    - name: update file myrepo.repo
+- name: update file myrepo.repo
   import_tasks: yaml_sub/myrepo_data.yaml
 
-    - name: ssh
+- name: ssh
   dnf:
     name: "openssh,openssh-clients,openssh-server"
     state: present
@@ -131,70 +131,72 @@
     nobest: false
     allowerasing: true
 
-    - name: Set SELinux to disabled
+- name: Set SELinux to disabled
   lineinfile:
     path: /etc/selinux/config
-        regexp: '^SELINUX='
+    regexp: "^SELINUX="
     line: SELINUX=disabled
     create: true
 
-    - name: Set SSHd Config (TCPKeepAlive)
+- name: Set SSHd Config (TCPKeepAlive)
   lineinfile:
     path: /etc/ssh/sshd_config
     state: present
     line: "TCPKeepAlive yes"
     create: true
-    - name: Set SSHd Config (ClientAliveInterval)
+
+- name: Set SSHd Config (ClientAliveInterval)
   lineinfile:
     path: /etc/ssh/sshd_config
     state: present
     line: "ClientAliveInterval 30"
-    - name: Set SSHd Config (ClientAliveCountMax)
+
+- name: Set SSHd Config (ClientAliveCountMax)
   lineinfile:
     path: /etc/ssh/sshd_config
     state: present
     line: "ClientAliveCountMax 500"
 
-    - name: Set Services (sge_qmaster)
+- name: Set Services (sge_qmaster)
   lineinfile:
     path: /etc/services
     state: present
     line: "sge_qmaster 6444/tcp"
     create: true
 
-    - name: Set Services (sge_execd)
+- name: Set Services (sge_execd)
   lineinfile:
     path: /etc/services
     state: present
     line: "sge_execd 6445/tcp"
 
-    - name: Set Services (nrpe)
+- name: Set Services (nrpe)
   lineinfile:
     path: /etc/services
     state: present
     line: "nrpe 5666/tcp # NRPE"
 
-    - name: Set Cups
+- name: Set Cups
   lineinfile:
     path: /etc/cups/client.conf
     state: present
-        line: "ServerName 10.10.10.16"
+    line: "ServerName 10.10.0.8"
     create: true
 
-    - name: ldap
+- name: ldap
   include_tasks: yaml_sub/ldap.yaml
 
-    - name: sssd
+- name: sssd
   include_tasks: yaml_sub/sssd.yaml
 
-    - name: set time zone
+- name: set time zone
   timezone:
     name: Europe/Berlin
 
-    - name: enable ping
+- name: enable ping
   shell: "setcap cap_net_raw+p /bin/ping"
 
-    - name: procmail
+- name: procmail
   dnf:
     name: "procmail"
     state: present
@@ -203,7 +205,7 @@
     nobest: false
     allowerasing: true
 
-    - name: esmtprc
+- name: esmtprc
   blockinfile:
     path: /etc/esmtprc
     state: present
@@ -212,13 +214,13 @@
       hostname = 134.102.55.235:25
       mda "/usr/bin/procmail -d %T"
 
-    - name: Link for chrome
+- name: Link for chrome
   file:
     src: /opt/google/chrome/chrome
     dest: /bin/chrome
     state: link
 
-    - name: set /etc/profile
+- name: set /etc/profile
   blockinfile:
     path: /etc/profile.d/sge.sh
     state: present
@@ -248,4 +250,3 @@
       export PATH
       shlib_path_name=/opt/sge/lib/lx-amd64/:$LD_LIBRARY_PATH
       export shlib_path_name
-          

yaml_sub/myrepo_data.yaml

@@ -50,11 +50,11 @@
       enabled=1
       gpgcheck=0
 
-      [oneAPI]
+      # [oneAPI]
-      name=oneAPI
+      # name=oneAPI
-      baseurl=http://10.10.0.11/repos/Fedora/AllVersion/oneAPI
+      # baseurl=http://10.10.0.11/repos/Fedora/AllVersion/oneAPI
-      enabled=1
+      # enabled=1
-      gpgcheck=0
+      # gpgcheck=0
 
       [Opera]
       name=Opera
@@ -88,7 +88,7 @@
 
       [SGE]
       name=SGE
-      baseurl=http://10.10.0.11/repos/Fedora/32/sge/copr-be.cloud.fedoraproject.org/results/loveshack/SGE/fedora-32-x86_64
+      baseurl=http://10.10.0.11/repos/Fedora/37/sge/copr-be.cloud.fedoraproject.org/results/loveshack/SGE/fedora-37-x86_64
       enabled=1
       gpgcheck=0
 
@@ -115,4 +115,3 @@
       baseurl=http://10.10.0.11/repos/Fedora/$releasever/docker
       enabled=0
       gpgcheck=0
-