kubeasz/roles/prepare/tasks/centos.yml

63 lines
1.8 KiB
YAML
Raw Normal View History

2019-01-03 20:21:39 +08:00
- name: 删除centos/redhat默认安装
yum:
name:
- firewalld
- python-firewall
- firewalld-filesystem
state: absent
2018-09-02 14:08:51 +08:00
2019-04-03 15:02:05 +08:00
#- name: 添加EPEL仓库
# yum: name=epel-release state=present
2018-09-02 14:08:51 +08:00
2019-05-11 21:23:08 +08:00
- name: 添加Amazon EPEL仓库
shell: "amazon-linux-extras install epel"
when: ansible_distribution == "Amazon"
ignore_errors: true
2018-09-02 14:08:51 +08:00
- name: 安装基础软件包
yum:
name:
- conntrack-tools # ipvs 模式需要
- psmisc # 安装psmisc 才能使用命令killall它在keepalive的监测脚本中使用到
- nfs-utils # 挂载nfs 共享文件需要 (创建基于 nfs的PV 需要)
2019-04-03 15:02:05 +08:00
#- jq # 轻量JSON处理程序安装docker查询镜像需要
- socat # 用于port forwarding
- bash-completion # bash命令补全工具需要重新登录服务器生效
- rsync # 文件同步工具,分发证书等配置文件需要
- ipset
- ipvsadm
2019-06-28 12:53:04 +08:00
state: present
when: 'INSTALL_SOURCE != "offline"'
# 离线安装基础软件包
- import_tasks: offline.yml
when: 'INSTALL_SOURCE == "offline"'
2018-09-02 14:08:51 +08:00
- name: 临时关闭 selinux
shell: "setenforce 0"
failed_when: false
- name: 永久关闭 selinux
lineinfile:
dest: /etc/selinux/config
regexp: "^SELINUX="
line: "SELINUX=disabled"
2019-03-28 18:44:10 +08:00
# 优化设置 journal 日志相关,避免日志重复搜集,浪费系统资源
- name: 禁止rsyslog获取journald日志1
2019-03-28 18:44:10 +08:00
lineinfile:
dest: /etc/rsyslog.conf
state: present
regexp: 'ModLoad imjournal'
line: '#$ModLoad imjournal # provides access to the systemd journal'
- name: 禁止rsyslog获取journald日志2
lineinfile:
dest: /etc/rsyslog.conf
state: present
regexp: 'IMJournalStateFile'
line: '#$IMJournalStateFile imjournal.state'
2019-03-28 18:44:10 +08:00
- name: 重启rsyslog服务
service: name=rsyslog state=restarted