mirror of https://github.com/easzlab/kubeasz.git
50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
- name: 删除centos/redhat默认安装
|
|
package:
|
|
name:
|
|
- firewalld
|
|
- python-firewall
|
|
- firewalld-filesystem
|
|
state: absent
|
|
ignore_errors: true
|
|
|
|
- name: 安装基础软件包
|
|
package:
|
|
name:
|
|
- conntrack-tools # ipvs 模式需要
|
|
- libseccomp # 安装containerd需要
|
|
- nfs-utils # 挂载nfs 共享文件需要 (创建基于 nfs的PV 需要)
|
|
state: present
|
|
when: 'INSTALL_SOURCE != "offline"'
|
|
|
|
# 离线安装基础软件包
|
|
- import_tasks: offline.yml
|
|
when: 'INSTALL_SOURCE == "offline"'
|
|
|
|
- name: 临时关闭 selinux
|
|
shell: "setenforce 0"
|
|
failed_when: false
|
|
|
|
- name: 永久关闭 selinux
|
|
lineinfile:
|
|
dest: /etc/selinux/config
|
|
regexp: "^SELINUX="
|
|
line: "SELINUX=disabled"
|
|
|
|
# 优化设置 journal 日志相关，避免日志重复搜集，浪费系统资源
|
|
- name: 禁止rsyslog获取journald日志1
|
|
lineinfile:
|
|
dest: /etc/rsyslog.conf
|
|
state: present
|
|
regexp: 'ModLoad imjournal'
|
|
line: '#$ModLoad imjournal # provides access to the systemd journal'
|
|
|
|
- name: 禁止rsyslog获取journald日志2
|
|
lineinfile:
|
|
dest: /etc/rsyslog.conf
|
|
state: present
|
|
regexp: 'IMJournalStateFile'
|
|
line: '#$IMJournalStateFile imjournal.state'
|
|
|
|
- name: 重启rsyslog服务
|
|
service: name=rsyslog state=restarted
|