neuro_ansible/yaml_sub/install_base_system.yaml

---
# # 39 -> 40
# - name: remove sddm-wayland-plasma
#   dnf:
#     name: "sddm-wayland-plasma"
#     state: absent
#     update_cache: true
#     skip_broken: true
#     nobest: false
#     allowerasing: true

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: update system (base)
  dnf:
    name: "*"
    state: latest
    update_cache: true
    skip_broken: true
    nobest: false
    allowerasing: true

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: Load group list
  include_vars:
    file: yaml_sub/groups_39.yaml
- name: Install groups
  dnf:
    name: "{{ groupnames }}"
    disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
    update_cache: true
    state: present
    skip_broken: true
    nobest: false
    allowerasing: true
    exclude: ghdl,sddm-x11,sddm-wayland-plasma,blender,sddm-wayland-sway

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: Load package 1 list
  include_vars:
    file: yaml_sub/packages_1.yaml
- name: Install package 1
  dnf:
    name: "{{ package1names }}"
    disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
    update_cache: true
    state: present
    skip_broken: true
    nobest: false
    allowerasing: true

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: Load package 2 list
  include_vars:
    file: yaml_sub/packages_2.yaml
- name: Install package 2
  dnf:
    name: "{{ package2names }}"
    disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
    update_cache: true
    state: present
    skip_broken: true
    nobest: false
    allowerasing: true

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: Load package 3 list
  include_vars:
    file: yaml_sub/packages_3.yaml
- name: Install package 3
  dnf:
    name: "{{ package3names }}"
    disablerepo: RPMFusionNonFreeUpdate,RPMFusionFreeUpdate,RPMFusionFreeEverything,RPMFusionNonFreeEverything
    update_cache: true
    state: present
    skip_broken: true
    nobest: false
    allowerasing: true

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: Install cuda
  dnf:
    name: cuda
    enablerepo: "*"
    update_cache: true
    state: present
    skip_broken: true
    nobest: false
    allowerasing: true

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: Make sure firewall service unit is diabled
  systemd_service:
    state: stopped
    enabled: false
    masked: true
    name: firewalld
  ignore_errors: true

- name: mount_info
  include_tasks: yaml_sub/mount_info.yaml

- name: remove other files
  include_tasks: yaml_sub/myrepo_clean.yaml
- name: update file myrepo.repo
  import_tasks: yaml_sub/myrepo_data.yaml

- name: ssh
  dnf:
    name: "openssh,openssh-clients,openssh-server"
    state: present
    update_cache: true
    skip_broken: true
    nobest: false
    allowerasing: true

- name: Set SELinux to disabled
  lineinfile:
    path: /etc/selinux/config
    regexp: "^SELINUX="
    line: SELINUX=disabled
    create: true

- name: Set SSHd Config (TCPKeepAlive)
  lineinfile:
    path: /etc/ssh/sshd_config
    state: present
    line: "TCPKeepAlive yes"
    create: true

- name: Set SSHd Config (ClientAliveInterval)
  lineinfile:
    path: /etc/ssh/sshd_config
    state: present
    line: "ClientAliveInterval 30"

- name: Set SSHd Config (ClientAliveCountMax)
  lineinfile:
    path: /etc/ssh/sshd_config
    state: present
    line: "ClientAliveCountMax 500"

- name: Set Services (sge_qmaster)
  lineinfile:
    path: /etc/services
    state: present
    line: "sge_qmaster 6444/tcp"
    create: true

- name: Set Services (sge_execd)
  lineinfile:
    path: /etc/services
    state: present
    line: "sge_execd 6445/tcp"

- name: Set Services (nrpe)
  lineinfile:
    path: /etc/services
    state: present
    line: "nrpe 5666/tcp # NRPE"

- name: Set Cups
  lineinfile:
    path: /etc/cups/client.conf
    state: present
    line: "ServerName 10.10.0.8"
    create: true

- name: ldap
  include_tasks: yaml_sub/ldap.yaml

- name: sssd
  include_tasks: yaml_sub/sssd.yaml

- name: set time zone
  timezone:
    name: Europe/Berlin

- name: enable ping
  shell: "setcap cap_net_raw+p /bin/ping"

- name: procmail
  dnf:
    name: "procmail"
    state: present
    update_cache: true
    skip_broken: true
    nobest: false
    allowerasing: true

- name: esmtprc
  blockinfile:
    path: /etc/esmtprc
    state: present
    create: true
    block: |
      hostname = 134.102.55.235:25
      mda "/usr/bin/procmail -d %T"      

- name: cockpit enabled
  systemd_service:
    state: started
    enabled: true
    name: cockpit.socket
  ignore_errors: true

- name: Link for chrome
  file:
    src: /opt/google/chrome/chrome
    dest: /bin/chrome
    state: link

- name: set /etc/profile
  blockinfile:
    path: /etc/profile.d/sge.sh
    state: present
    create: true
    owner: "root"
    group: "root"
    mode: "0666"
    block: |
      SGE_ROOT=/sge-root
      export SGE_ROOT

      SGE_ARCH=`/opt/sge/util/arch`
      export SGE_ARCH
      DRMAA_LIBRARY_PATH=/opt/sge/lib/lx-amd64/libdrmaa.so

      SGE_CELL=neuro
      export SGE_CELL
      SGE_CLUSTER_NAME=Neuro
      export SGE_CLUSTER_NAME

      unset SGE_QMASTER_PORT
      unset SGE_EXECD_PORT

      MANPATH=/opt/sge/man:$MANPATH
      export MANPATH
      PATH=/opt/sge/bin:/opt/sge/bin/lx-amd64/:$PATH
      export PATH
      shlib_path_name=/opt/sge/lib/lx-amd64/:$LD_LIBRARY_PATH
      export shlib_path_name