Upload

update_jobs/hourly_update.yaml

@@ -4,7 +4,6 @@
   become: true
 
   tasks:
-
     - name: block shutdown
       blockinfile:
         path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules

update_jobs/install_desktop_packages.yaml

@@ -4,12 +4,34 @@
   become: true
 
   tasks:
+    - name: block shutdown
+      blockinfile:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: present
+        create: true
+        owner: "root"
+        group: "root"
+        mode: "0666"
+        block: |
+          polkit.addRule(function(action, subject) {
+            if (action.id.indexOf("org.freedesktop.login1.power-off") == 0 ||
+              action.id.indexOf("org.freedesktop.login1.reboot") == 0) {
+              return polkit.Result.AUTH_ADMIN;
+            }
+          });
+
+    - name: Make sure systemd-oomd service unit is stopped
+      systemd_service:
+        state: stopped
+        name: systemd-oomd
+
     - name: Install base system
       include_tasks: yaml_sub/install_base_system.yaml
 
     - name: remove other files
       include_tasks: yaml_sub/myrepo_clean.yaml
     - name: update file myrepo.repo
+
       import_tasks: yaml_sub/myrepo_data.yaml
 
     - name: install movie tools
@@ -41,3 +63,13 @@
 
     - name: disable tracker
       shell: 'for f in /etc/xdg/autostart/tracker*.desktop; do echo "Hidden=true" | tee -a "$f"; done'
+
+    - name: Make sure systemd-oomd service unit is started
+      systemd_service:
+        state: started
+        name: systemd-oomd
+
+    - name: stop shutdown embargo
+      ansible.builtin.file:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: "absent"

update_jobs/update_to_version.yaml

@@ -0,0 +1,56 @@
+---
+- name: upgrade to next version
+  hosts: all
+  become: true
+
+  tasks:
+
+    - name: block shutdown
+      blockinfile:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: present
+        create: true
+        owner: "root"
+        group: "root"
+        mode: "0666"
+        block: |
+          polkit.addRule(function(action, subject) {
+            if (action.id.indexOf("org.freedesktop.login1.power-off") == 0 ||
+              action.id.indexOf("org.freedesktop.login1.reboot") == 0) {
+              return polkit.Result.AUTH_ADMIN;
+            }
+          });
+
+    - name: Make sure systemd-oomd service unit is stopped
+      systemd_service:
+       state: stopped
+       name: systemd-oomd
+
+    - name: remove other files
+      include_tasks: ../yaml_sub/myrepo_clean.yaml
+    - name: update file myrepo.repo
+      import_tasks: ../yaml_sub/myrepo_data.yaml
+
+    - name: install system-upgrade
+      dnf:
+        name: "dnf-command(system-upgrade)"
+        state: present
+        update_cache: true
+        skip_broken: true
+        nobest: false
+        allowerasing: true
+
+    - name: upgrade version 
+      shell: "dnf -y system-upgrade download --refresh --releasever={{version}} --allowerasing --best --skip-broken; dnf system-upgrade reboot"
+
+    - name: Make sure systemd-oomd service unit is started
+      systemd_service:
+       state: started
+       name: systemd-oomd
+
+    - name: stop shutdown embargo
+      ansible.builtin.file:
+        path: /etc/polkit-1/rules.d/55-inhibit-shutdown.rules
+        state: "absent"
+
+

update_jobs/yaml_sub

@@ -0,0 +1 @@
+../yaml_sub

yaml_sub/install_base_system.yaml

@@ -134,7 +134,7 @@
 - name: Set SELinux to disabled
   lineinfile:
     path: /etc/selinux/config
-        regexp: '^SELINUX='
+    regexp: "^SELINUX="
     line: SELINUX=disabled
     create: true
 
@@ -144,11 +144,13 @@
     state: present
     line: "TCPKeepAlive yes"
     create: true
+
 - name: Set SSHd Config (ClientAliveInterval)
   lineinfile:
     path: /etc/ssh/sshd_config
     state: present
     line: "ClientAliveInterval 30"
+
 - name: Set SSHd Config (ClientAliveCountMax)
   lineinfile:
     path: /etc/ssh/sshd_config
@@ -178,7 +180,7 @@
   lineinfile:
     path: /etc/cups/client.conf
     state: present
-        line: "ServerName 10.10.10.16"
+    line: "ServerName 10.10.0.8"
     create: true
 
 - name: ldap
@@ -248,4 +250,3 @@
       export PATH
       shlib_path_name=/opt/sge/lib/lx-amd64/:$LD_LIBRARY_PATH
       export shlib_path_name
-          

yaml_sub/myrepo_data.yaml

@@ -50,11 +50,11 @@
       enabled=1
       gpgcheck=0
 
-      [oneAPI]
-      name=oneAPI
-      baseurl=http://10.10.0.11/repos/Fedora/AllVersion/oneAPI
-      enabled=1
-      gpgcheck=0
+      # [oneAPI]
+      # name=oneAPI
+      # baseurl=http://10.10.0.11/repos/Fedora/AllVersion/oneAPI
+      # enabled=1
+      # gpgcheck=0
 
       [Opera]
       name=Opera
@@ -88,7 +88,7 @@
 
       [SGE]
       name=SGE
-      baseurl=http://10.10.0.11/repos/Fedora/32/sge/copr-be.cloud.fedoraproject.org/results/loveshack/SGE/fedora-32-x86_64
+      baseurl=http://10.10.0.11/repos/Fedora/37/sge/copr-be.cloud.fedoraproject.org/results/loveshack/SGE/fedora-37-x86_64
       enabled=1
       gpgcheck=0
 
@@ -115,4 +115,3 @@
       baseurl=http://10.10.0.11/repos/Fedora/$releasever/docker
       enabled=0
       gpgcheck=0
-