Playbook #2

/home/zuul/src/opendev.org/opendev/system-config/playbooks/base.yaml

Report Status CLI Date Duration Controller User Versions Hosts Plays Tasks Results Files Records
18 Jul 2025 20:43:54 +0000 00:01:43.18 bridge99.opendev.org root Ansible 2.15.13 ara 1.7.2 (client), 1.7.2 (server) Python 3.10.12 3 1 85 251 27 0
check:False tags:all

File: /home/zuul/src/opendev.org/opendev/system-config/playbooks/roles/base/server/tasks/Debian.yaml

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
- name: Disable install of additional recommends and suggests packages
  copy:
     mode: 0444
     src: 95disable-recommends
     dest: /etc/apt/apt.conf.d/
     owner: root
     group: root

# NOTE(ianw) There are ordering issues with this.  Hopefully when
# we're bionic only we can just remove ntp
- name: Install NTP
  when: ansible_distribution_version is version('18.04', '<')
  block:
    - name: Install ntp
      package:
        name: ntp
        state: present

    - name: Ensure NTP service is running
      service:
        name: ntp
        enabled: yes
        state: started

- name: Remove ntp and run timesyncd
  when: ansible_distribution_version is version('18.04', '>=')
  block:
    - name: Remove ntp
      package:
        name: ntp
        state: absent

    - name: Ensure systemd-timesyncd is running
      service:
        name: systemd-timesyncd
        enabled: yes
        state: started

- name: Remove packages that make no sense for our servers
  package:
    name:
      - apport
      - whoopsie
      - popularity-contest
      - lxd
      - lxd-client
      - cloud-init
      - open-vm-tools
      - snapd
      - sosreport
    state: absent

- name: Get rid of extra depends
  command: apt-get autoremove -y

- name: Configure file limits
  copy:
    mode: 0644
    src: debian_limits.conf
    dest: /etc/security/limits.d/60-nofile-limit.conf

# The next two files share a source file. Different packages manage
# each of these and we do not want them to get out of sync with each
# other as that can impact the configuration that apt sees based on
# priority rules. We address this by making the two files have the same
# content.
- name: Install apt-daily 10periodic file for unattended-upgrades
  copy:
     mode: 0444
     src: XYperiodic-updates
     dest: /etc/apt/apt.conf.d/10periodic
     owner: root
     group: root

- name: Install 20auto-upgrades file for unattended-upgrades
  copy:
     mode: 0444
     src: XYperiodic-updates
     dest: /etc/apt/apt.conf.d/20auto-upgrades
     owner: root
     group: root

- name: Install 50unattended-upgrades file for unattended-upgrades
  copy:
     mode: 0444
     src: 50unattended-upgrades
     dest: /etc/apt/apt.conf.d/50unattended-upgrades
     owner: root
     group: root

- name: Ensure required build packages for non-wheel architectures
  apt:
    update_cache: yes
    name:
      - libffi-dev
      - libssl-dev
      - build-essential
  when: ansible_architecture == 'aarch64'