From 65d17338a4feab34c746b0628ead45f303c97f3c Mon Sep 17 00:00:00 2001 From: Alexander Kazantsev Date: Tue, 12 May 2026 21:49:44 +0300 Subject: [PATCH] add bridge check --- roles/rocky9/tasks/install_packages.yml | 8 ++++---- roles/rocky9/tasks/ip_bridge.yml | 6 +++--- roles/rocky9/tasks/ip_forward.yml | 2 +- roles/rocky9/tasks/sysctl_tuning.yml | 6 ++++++ 4 files changed, 14 insertions(+), 8 deletions(-) diff --git a/roles/rocky9/tasks/install_packages.yml b/roles/rocky9/tasks/install_packages.yml index 83fa480..d4a6a79 100644 --- a/roles/rocky9/tasks/install_packages.yml +++ b/roles/rocky9/tasks/install_packages.yml @@ -36,7 +36,7 @@ - name: Install EPEL repo ansible.builtin.include_tasks: install-epel-repo.yml -#- name: Upgrade all packages +# - name: Upgrade all packages # ansible.builtin.dnf: # name: "*" # state: latest @@ -92,11 +92,11 @@ - name: Обновить всё become: true - package: + ansible.builtin.package: name: "*" state: latest - name: Удалить старые ядра и ненужные зависимости become: true - dnf: - autoremove: yes + ansible.builtin.dnf: + autoremove: true diff --git a/roles/rocky9/tasks/ip_bridge.yml b/roles/rocky9/tasks/ip_bridge.yml index 44d26a1..fcacfe6 100644 --- a/roles/rocky9/tasks/ip_bridge.yml +++ b/roles/rocky9/tasks/ip_bridge.yml @@ -7,18 +7,18 @@ value: 0 state: present sysctl_file: /etc/sysctl.d/ip_bridge.conf - ignore_errors: true + when: br_netfilter_status.stat.exists - name: net.bridge.bridge-nf-call-iptables ansible.posix.sysctl: name: net.bridge.bridge-nf-call-iptables value: 0 state: present sysctl_file: /etc/sysctl.d/ip_bridge.conf - ignore_errors: true + when: br_netfilter_status.stat.exists - name: net.bridge.bridge-nf-call-arptables ansible.posix.sysctl: name: net.bridge.bridge-nf-call-arptables value: 0 state: present sysctl_file: /etc/sysctl.d/ip_bridge.conf - ignore_errors: true + when: br_netfilter_status.stat.exists diff --git a/roles/rocky9/tasks/ip_forward.yml b/roles/rocky9/tasks/ip_forward.yml index b52af66..9d45ac7 100644 --- a/roles/rocky9/tasks/ip_forward.yml +++ b/roles/rocky9/tasks/ip_forward.yml @@ -43,7 +43,7 @@ state: present sysctl_file: /etc/sysctl.d/ip_forward.conf -#- name: net.ipv4.conf.default.send_redirects +# - name: net.ipv4.conf.default.send_redirects # ansible.posix.sysctl: # name: net.ipv4.conf.default.send_redirects # value: 0 diff --git a/roles/rocky9/tasks/sysctl_tuning.yml b/roles/rocky9/tasks/sysctl_tuning.yml index 5dc35ab..e56ce0e 100644 --- a/roles/rocky9/tasks/sysctl_tuning.yml +++ b/roles/rocky9/tasks/sysctl_tuning.yml @@ -11,8 +11,14 @@ - name: IP Forwarding ansible.builtin.include_tasks: ip_forward.yml +- name: Проверить, загружен ли модуль br_netfilter + ansible.builtin.stat: + path: /sys/module/br_netfilter + register: br_netfilter_status + - name: IP Bridge ansible.builtin.include_tasks: ip_bridge.yml + when: br_netfilter_status.stat.exists # - name: Deploy kernel_tune.conf # ansible.builtin.template: