add bridge check
This commit is contained in:
parent
e9d692dfcf
commit
65d17338a4
4 changed files with 14 additions and 8 deletions
|
|
@ -36,7 +36,7 @@
|
||||||
- name: Install EPEL repo
|
- name: Install EPEL repo
|
||||||
ansible.builtin.include_tasks: install-epel-repo.yml
|
ansible.builtin.include_tasks: install-epel-repo.yml
|
||||||
|
|
||||||
#- name: Upgrade all packages
|
# - name: Upgrade all packages
|
||||||
# ansible.builtin.dnf:
|
# ansible.builtin.dnf:
|
||||||
# name: "*"
|
# name: "*"
|
||||||
# state: latest
|
# state: latest
|
||||||
|
|
@ -92,11 +92,11 @@
|
||||||
|
|
||||||
- name: Обновить всё
|
- name: Обновить всё
|
||||||
become: true
|
become: true
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "*"
|
name: "*"
|
||||||
state: latest
|
state: latest
|
||||||
|
|
||||||
- name: Удалить старые ядра и ненужные зависимости
|
- name: Удалить старые ядра и ненужные зависимости
|
||||||
become: true
|
become: true
|
||||||
dnf:
|
ansible.builtin.dnf:
|
||||||
autoremove: yes
|
autoremove: true
|
||||||
|
|
|
||||||
|
|
@ -7,18 +7,18 @@
|
||||||
value: 0
|
value: 0
|
||||||
state: present
|
state: present
|
||||||
sysctl_file: /etc/sysctl.d/ip_bridge.conf
|
sysctl_file: /etc/sysctl.d/ip_bridge.conf
|
||||||
ignore_errors: true
|
when: br_netfilter_status.stat.exists
|
||||||
- name: net.bridge.bridge-nf-call-iptables
|
- name: net.bridge.bridge-nf-call-iptables
|
||||||
ansible.posix.sysctl:
|
ansible.posix.sysctl:
|
||||||
name: net.bridge.bridge-nf-call-iptables
|
name: net.bridge.bridge-nf-call-iptables
|
||||||
value: 0
|
value: 0
|
||||||
state: present
|
state: present
|
||||||
sysctl_file: /etc/sysctl.d/ip_bridge.conf
|
sysctl_file: /etc/sysctl.d/ip_bridge.conf
|
||||||
ignore_errors: true
|
when: br_netfilter_status.stat.exists
|
||||||
- name: net.bridge.bridge-nf-call-arptables
|
- name: net.bridge.bridge-nf-call-arptables
|
||||||
ansible.posix.sysctl:
|
ansible.posix.sysctl:
|
||||||
name: net.bridge.bridge-nf-call-arptables
|
name: net.bridge.bridge-nf-call-arptables
|
||||||
value: 0
|
value: 0
|
||||||
state: present
|
state: present
|
||||||
sysctl_file: /etc/sysctl.d/ip_bridge.conf
|
sysctl_file: /etc/sysctl.d/ip_bridge.conf
|
||||||
ignore_errors: true
|
when: br_netfilter_status.stat.exists
|
||||||
|
|
|
||||||
|
|
@ -43,7 +43,7 @@
|
||||||
state: present
|
state: present
|
||||||
sysctl_file: /etc/sysctl.d/ip_forward.conf
|
sysctl_file: /etc/sysctl.d/ip_forward.conf
|
||||||
|
|
||||||
#- name: net.ipv4.conf.default.send_redirects
|
# - name: net.ipv4.conf.default.send_redirects
|
||||||
# ansible.posix.sysctl:
|
# ansible.posix.sysctl:
|
||||||
# name: net.ipv4.conf.default.send_redirects
|
# name: net.ipv4.conf.default.send_redirects
|
||||||
# value: 0
|
# value: 0
|
||||||
|
|
|
||||||
|
|
@ -11,8 +11,14 @@
|
||||||
- name: IP Forwarding
|
- name: IP Forwarding
|
||||||
ansible.builtin.include_tasks: ip_forward.yml
|
ansible.builtin.include_tasks: ip_forward.yml
|
||||||
|
|
||||||
|
- name: Проверить, загружен ли модуль br_netfilter
|
||||||
|
ansible.builtin.stat:
|
||||||
|
path: /sys/module/br_netfilter
|
||||||
|
register: br_netfilter_status
|
||||||
|
|
||||||
- name: IP Bridge
|
- name: IP Bridge
|
||||||
ansible.builtin.include_tasks: ip_bridge.yml
|
ansible.builtin.include_tasks: ip_bridge.yml
|
||||||
|
when: br_netfilter_status.stat.exists
|
||||||
|
|
||||||
# - name: Deploy kernel_tune.conf
|
# - name: Deploy kernel_tune.conf
|
||||||
# ansible.builtin.template:
|
# ansible.builtin.template:
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue