ClearLinux 10910 creates /etc/ssl/certs as a symlink
to /var/cache/ca-certs and Ubuntu already ships the
directory.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
* docker: docker service is not started in clearlinux
Docker service is usually started when docker is installed.
In ClearLinux, docker is not started when containers-basic
bundle is installed
This change enables and starts the docker service to ensure
it is usable after installation.
Fixes#75
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
* docker: Add name of distro to distro specific tasks
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
the `qemu-nbd` tool it's used to manipulate the cnci image, which
is already a raw image (not qcow as thought), so we can use
raw image manipulation, removing all the need of nbd manipulation
tools.
Signed-off-by: Simental Magana, Marcos <marcos.simental.magana@intel.com>
Before this commit, all build tasks for the ciao-controller
role were perfomed as `connection: local`, this is handy
but not accurate (e.g: "Fetch ciao files" shouldn't be local).
This commit specifies which tasks in build should be
performed as local, instead of the whole build.yml playbook.
Signed-off-by: Simental Magana, Marcos <marcos.simental.magana@intel.com>
Using $GOPATH as the value for gopath is not
so easily achievable because the GOPATH value
for the deployment machine does not get copied
automatically to other nodes.
Also setting a fact on one node does not set it
on other nodes.
The easiest way to share this value across the
different ciao roles is to set it as a variable
that can be overriden in groups_vars/all file or
via the cmdline with --extra-vars "gopath=$GOPATH"
Fixes: #57
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
This option is no longer configurable since there is no secure
way to pass this value to qemu cli other than looking for the
default path for the keyring file.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
docker containers uses /etc/resolv.conf file from the
host machine filtering any localhost reference in it.
If after the filter there are no nameservers entries then
the daemon adds google public dns servers (8.8.8.8 and 8.8.4.4)
This Changes adds a note to remind the administrator to setup a
dns server that the containers can use to resolv the ciao cluster
nodes names.
Fixes#39
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
The playbooks were creating a ciaorc to authenticate the cli
with the ciao user.
The ciao user is reserved for ciao services authenticating into keystone
and should not be used in the cli to create instances.
This changes creates admin-openrc with credentials for the admin user
and demo-openrc with credentials for the demo user to be used by ciao-cli.
Fixes#46
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
ciao creates systemd unit files to start ciao services.
In the case of ClearLinux, there is the possibility that
/etc/systemd/system has not been created yet. This change
ensures /etc/systemd/system is present before trying to
create unit files there.
Fixes#53
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
When deploying from an ubuntu or fedora machine to a
ClearLinux node, ansible tries to use sftp which is
disabled in ClearLinux by default.
Enabling scp_if_ssh in ansible.cfg makes anisble use
ssh to copy files to the nodes.
Fixes#54
Signed-off-by: Jesus Ornelas Aguayo <jesus.ornelas.aguayo@intel.com>
- Specify ansible requirements for managed nodes and control machine
- Specify passwordless sudo is required in deployment machine and managed nodes
- Specify which commands have to be run as sudo
Fixes#37
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- Allow the user to customize the location of GOPATH
- Remove -u option from go get command to pickup changes
made by developers that are not ready in the repository.
Fixes#40
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
Add a contribution notice on each role to direct users to
open issues and pull requests at github.com/clearlinux/clear-config-management
rather than github.com/clearlinux/ansible-role-<rolename>
Fixes#43
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
SOmetimes when behind a proxy, cnci and fedora images cannot be
downloaded because of certificate cannot be validated.
Fixes#45
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
When ciao_dev is set to true and there was an update in the code, ciao
sources is updated and binaries are recompiled and transfered to the nodes
but the service were not being restarted.
Fixes#42
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
add ceph_id and secret_path variables to specify the
cephx user id and its keyring file in the configuration file.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- Creation of openrc and clouds.yaml file should be done
in the current directory of the user running the playbook.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- Deployment of ciao has changed from installing everyghin in packages
to install keystone and ciao-webui from containers.
- ciao-laucher will detect the operating system and install the required
dependencies
- Support for Ubuntu 16.04 and Fedora 24 has been added.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
This role will start a docker container with keystone
already configured with SSL based on the dockerhub image
clearlinux/keystone
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
profile_tasks prints how much time takes each task to run
The feature is disabled by default but can be enabled by
uncommenting the corresponding line in ansible.cfg
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
The synchronize module uses rsync to transfer files between
hosts. The default behaviour is to compress the file before
transfer but tests show that it's faster to just transfer
the cnci image uncompressed.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
Ceph FileSystem requires a metadata server.
This functionallity is already provided.
This commit updates the example to install a metadata server.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- Add an ansible.cfg file to enable pipelining.
Pipelining increases the performance by executing many ansible
modules without actual file transfer.
- Prerun ciao-common
ciao-common role install ciao code and dependencies. By running
this role on all nodes in parallel we can save some time.
- Set strategy: free
By default all hosts will run each task before any host starts the next task
Using the 'free' strategy allows each host to run until the end of the play
as fast as it can.:
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
These variables will setup access to ALL vm launched including
CNCI images.
This is a temporary solution for development/testing purposes
until a formal way to define per VM access from the user
perspective is available
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
This commit creates /var/lib/ciao/images/.cnci_ready file after
it has finished with the configuration of a cnci image.
If the file exists then the cnci image setup will be skipped.
This change prevents the playbook from creating and transfering the cnci
image each time is run and only does it when its necessary.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
Tasks to retrieve and enable the controllers ca root certificate
where being marked as changed every time the playbooks runs
This commit properly handles the copy and enabling of the ca
certificate in both clearlinux and ubuntu.
A demo user and a demo project is included in the example
for testing purposes of a ciao cluster.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
Task Build CIAO from sources is always tagged as 'changed'
even when nothing has changed
This commit tags the task as unchanged when there is no change
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
If ciao_dev is set to false (default) it will try to install
ciao from the operating system packages which is only supported
in Clear Linux.
In order to install ciao in Ubuntu, ciao_dev must be set to
true to build ciao from github master branch.
This commit adds the variable to the examples to have it handy
for users who wants to deploy ciao in Ubuntu.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- ciao_dev might not be defined and should be treated as false by default
- mysql_packages is defined for ubuntu and should not cause a failure
in clearlinux when not defined.
Fixes#30
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
Alberto Murillo