summaryrefslogtreecommitdiff
path: root/baserock_frontend/image-config.yml
diff options
context:
space:
mode:
authorSam Thursfield <sam.thursfield@codethink.co.uk>2015-06-19 17:16:39 +0100
committerBaserock Gerrit <gerrit@baserock.org>2015-07-13 12:27:43 +0000
commit0feb2555a62834a42b03e2902e68c870156a0fc2 (patch)
treec9ecf589005e64e52a67d04c5055bd4a6f9a9202 /baserock_frontend/image-config.yml
parent5889f7c9539d10bd32050e4e96404bdb9ffa762b (diff)
downloadinfrastructure-0feb2555a62834a42b03e2902e68c870156a0fc2.tar.gz
Avoid using Packer for the frontend system
Also, move it into baserock_frontend so it is clearly differentiated from the upstream definitions.git stuff. It's now based off Fedora 21 instead of Fedora 20. This is now deployed at baserock.org. Change-Id: Icaabc84f9513d08479d8d22c19e8b632ac5108b5
Diffstat (limited to 'baserock_frontend/image-config.yml')
-rw-r--r--baserock_frontend/image-config.yml30
1 files changed, 30 insertions, 0 deletions
diff --git a/baserock_frontend/image-config.yml b/baserock_frontend/image-config.yml
new file mode 100644
index 00000000..5c3f0148
--- /dev/null
+++ b/baserock_frontend/image-config.yml
@@ -0,0 +1,30 @@
+# System configuration for Baserock HAProxy instance.
+---
+- hosts: frontend-haproxy
+ gather_facts: false
+ sudo: yes
+ tasks:
+ - name: enable persistant journal
+ shell: mkdir /var/log/journal
+ args:
+ creates: /var/log/journal
+
+ - name: ensure system up to date
+ yum: name=* state=latest
+
+ - name: HAProxy installed
+ yum: name=haproxy state=latest
+
+ - name: netcat installed
+ yum: name=nc state=latest
+
+ # Yes, SELinux prevents HAProxy from working. In this case I think it's
+ # because we ask it to listen on port 29418 for Gerrit's SSH connections.
+ - name: install libselinux-python, so Ansible can control selinux
+ yum: name=libselinux-python state=latest
+
+ - name: disable SELinux on subsequent boots
+ selinux: state=disabled
+
+ - name: disable SELinux on current boot
+ command: setenforce 0