Automation for configuring a worker-only host
This commit is contained in:
parent
f65755a31a
commit
2a237385ef
42
init-rocky-openqa-worker-host.yml
Normal file
42
init-rocky-openqa-worker-host.yml
Normal file
@ -0,0 +1,42 @@
|
||||
# Configure an openQA worker host
|
||||
# This playbook is *NOT* intended for WAN-facing systems!
|
||||
#
|
||||
# Created: @akatch
|
||||
---
|
||||
- name: Rocky openQA Worker Runbook
|
||||
hosts: openqa_workers
|
||||
become: true
|
||||
gather_facts: false
|
||||
vars_files:
|
||||
- vars/openqa-worker.yml
|
||||
|
||||
# This is to try to avoid the handler issue in pre/post tasks
|
||||
handlers:
|
||||
- import_tasks: handlers/main.yml
|
||||
|
||||
pre_tasks:
|
||||
- name: Check if ansible cannot be run here
|
||||
stat:
|
||||
path: /etc/no-ansible
|
||||
register: no_ansible
|
||||
|
||||
- name: Verify if we can run ansible
|
||||
assert:
|
||||
that:
|
||||
- "not no_ansible.stat.exists"
|
||||
success_msg: "We are able to run on this node"
|
||||
fail_msg: "/etc/no-ansible exists - skipping run on this node"
|
||||
|
||||
tasks:
|
||||
- name: Install and configure OpenQA workers
|
||||
import_tasks: tasks/openqa-worker.yml
|
||||
|
||||
post_tasks:
|
||||
- name: Touching run file that ansible has ran here
|
||||
file:
|
||||
path: /var/log/ansible.run
|
||||
state: touch
|
||||
mode: '0644'
|
||||
owner: root
|
||||
group: root
|
||||
...
|
66
tasks/openqa-worker.yml
Normal file
66
tasks/openqa-worker.yml
Normal file
@ -0,0 +1,66 @@
|
||||
---
|
||||
- name: Install OpenQA worker packages
|
||||
dnf:
|
||||
name: "{{ openqa_worker_packages }}"
|
||||
state: present
|
||||
tags:
|
||||
- packages
|
||||
|
||||
- name: Create openQA group
|
||||
group:
|
||||
name: "{{ openqa_group }}"
|
||||
system: true
|
||||
|
||||
- name: Create openQA user
|
||||
user:
|
||||
name: "{{ openqa_user }}"
|
||||
groups: "{{ openqa_group }}"
|
||||
append: true
|
||||
system: true
|
||||
|
||||
- name: Configure firewalld for openQA worker connections
|
||||
template:
|
||||
src: etc/firewalld/services/{{ item }}.xml.j2
|
||||
dest: /etc/firewalld/services/{{ item }}.xml
|
||||
owner: root
|
||||
group: root
|
||||
mode: "0644"
|
||||
loop:
|
||||
- openqa-socket
|
||||
- openqa-vnc
|
||||
tags:
|
||||
- configure
|
||||
|
||||
- name: Reload firewalld
|
||||
systemd:
|
||||
name: firewalld
|
||||
state: reloaded
|
||||
tags:
|
||||
- configure
|
||||
ignore_errors: "{{ ansible_check_mode }}"
|
||||
|
||||
- name: Write openQA configuration file
|
||||
template:
|
||||
src: etc/openqa/{{ item }}.j2
|
||||
dest: /etc/openqa/{{ item }}
|
||||
owner: "{{ openqa_user }}"
|
||||
group: "{{ openqa_group }}"
|
||||
mode: "0444"
|
||||
loop:
|
||||
- client.conf
|
||||
- workers.conf
|
||||
tags:
|
||||
- configure
|
||||
|
||||
- name: Start {{ openqa_worker_count }} openQA workers
|
||||
ansible.builtin.systemd:
|
||||
name: "openqa-worker@{{ item }}"
|
||||
state: started
|
||||
enabled: true
|
||||
# range "end" parameter is exclusive, so add 1
|
||||
loop: "{{ range(1, (openqa_worker_count|int + 1)) | list }}"
|
||||
tags:
|
||||
- start_workers
|
||||
- configure
|
||||
ignore_errors: "{{ ansible_check_mode }}"
|
||||
...
|
4
templates/etc/firewalld/services/openqa-socket.xml.j2
Normal file
4
templates/etc/firewalld/services/openqa-socket.xml.j2
Normal file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<service>
|
||||
<port port="{{ openqa_min_socket_port }}-{{ openqa_max_socket_port }}" protocol="tcp"/>
|
||||
</service>
|
9
templates/etc/openqa/workers.conf.j2
Normal file
9
templates/etc/openqa/workers.conf.j2
Normal file
@ -0,0 +1,9 @@
|
||||
[global]
|
||||
HOST = https://{{ openqa_host }}
|
||||
CACHEDIRECTORY = /var/lib/openqa/cache # desired cache location
|
||||
CACHELIMIT = 50 # max. cache size in GiB, defaults to 50
|
||||
CACHE_MIN_FREE_PERCENTAGE = 10 # min. free disk space to preserve in percent
|
||||
CACHEWORKERS = 5 # number of parallel cache minion workers, defaults to 5
|
||||
|
||||
[https://{{ openqa_host }}]
|
||||
TESTPOOLSERVER = rsync://{{ openqa_host }}/tests # also cache tests (via rsync)
|
36
vars/openqa-worker.yml
Normal file
36
vars/openqa-worker.yml
Normal file
@ -0,0 +1,36 @@
|
||||
---
|
||||
# The primary openQA host
|
||||
openqa_host: openqa.rockylinux.org
|
||||
openqa_client_key: 1234567890ABCDEF
|
||||
openqa_client_secret: 1234567890ABCDEF
|
||||
|
||||
# Default OpenQA user and group
|
||||
openqa_user: geekotest
|
||||
openqa_group: geekotest
|
||||
|
||||
# The number of workers to enable on this system
|
||||
openqa_worker_count: 2
|
||||
|
||||
# Port range to open for VNC access to local workers.
|
||||
# The max port should be 5990 + n where n is the total
|
||||
# number of workers you want to enable on your system.
|
||||
openqa_min_vnc_port: 5991
|
||||
openqa_max_vnc_port: "{{ 5990 + openqa_worker_count|int }}"
|
||||
|
||||
# Port range to open for socket connections from the primary host.
|
||||
openqa_min_socket_port: 20000
|
||||
openqa_max_socket_port: 20089
|
||||
|
||||
# Packages to install
|
||||
openqa_worker_packages:
|
||||
- guestfs-tools
|
||||
- libguestfs-xfs
|
||||
- libvirt-daemon-config-network
|
||||
- virt-install
|
||||
- openqa-worker
|
||||
- perl-REST-Client
|
||||
- python3-libguestfs
|
||||
- virt-install
|
||||
- withlock
|
||||
- firewalld
|
||||
...
|
Loading…
Reference in New Issue
Block a user