wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-06-06 15:13:56 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #125 from cernekee/tag-fix. Fix #128

Browse source 
Add missing playbook tags
This commit is contained in:
Jack Ivanov 2016-11-26 23:24:43 +03:00 • committed by GitHub
commit c5860cbc5d
1 changed files with 19 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
roles/common/tasks/main.yml
View file

@ -2,13 +2,17 @@
- name: Gather Facts - name: Gather Facts
setup: setup:
tags:
- always
- name: Install software updates - name: Install software updates
apt: update_cache=yes upgrade=dist apt: update_cache=yes upgrade=dist
tags:
- cloud
- name: Check if reboot is required - name: Check if reboot is required
shell: > shell: >
if [[ $(readlink -f /vmlinuz) != /boot/vmlinuz-$(uname -r) ]]; then echo "required"; else echo "no"; fi if [[ -e /var/run/reboot-required ]]; then echo "required"; else echo "no"; fi
args: args:
executable: /bin/bash executable: /bin/bash
register: reboot_required register: reboot_required
@ -43,6 +47,8 @@
with_items: with_items:
- { regexp: '^session.*optional.*pam_motd.so.*', line: '# MOTD DISABLED', file: '/etc/pam.d/login' } - { regexp: '^session.*optional.*pam_motd.so.*', line: '# MOTD DISABLED', file: '/etc/pam.d/login' }
- { regexp: '^session.*optional.*pam_motd.so.*', line: '# MOTD DISABLED', file: '/etc/pam.d/sshd' } - { regexp: '^session.*optional.*pam_motd.so.*', line: '# MOTD DISABLED', file: '/etc/pam.d/sshd' }
tags:
- cloud
- name: Install tools - name: Install tools
apt: name="{{ item }}" state=latest apt: name="{{ item }}" state=latest
@ -55,24 +61,36 @@
- sendmail - sendmail
- iptables-persistent - iptables-persistent
- cgroup-tools - cgroup-tools
tags:
- always
- name: Loopback for services configured - name: Loopback for services configured
template: src=10-loopback-services.cfg.j2 dest=/etc/network/interfaces.d/10-loopback-services.cfg template: src=10-loopback-services.cfg.j2 dest=/etc/network/interfaces.d/10-loopback-services.cfg
notify: notify:
- restart loopback - restart loopback
tags:
- always
- name: Loopback included into the network config - name: Loopback included into the network config
lineinfile: dest=/etc/network/interfaces line='source /etc/network/interfaces.d/10-loopback-services.cfg' state=present lineinfile: dest=/etc/network/interfaces line='source /etc/network/interfaces.d/10-loopback-services.cfg' state=present
notify: notify:
- restart loopback - restart loopback
tags:
- always
- meta: flush_handlers - meta: flush_handlers
tags:
- always
- name: Enable packet forwarding for IPv4 - name: Enable packet forwarding for IPv4
sysctl: name="{{ item }}" value=1 sysctl: name="{{ item }}" value=1
with_items: with_items:
- net.ipv4.ip_forward - net.ipv4.ip_forward
- net.ipv4.conf.all.forwarding - net.ipv4.conf.all.forwarding
tags:
- always
- name: Enable packet forwarding for IPv6 - name: Enable packet forwarding for IPv6
sysctl: name=net.ipv6.conf.all.forwarding value=1 sysctl: name=net.ipv6.conf.all.forwarding value=1
tags:
- always