diff --git a/inventory/prod/hosts.yml b/inventory/prod/hosts.yml index 44fc114..1b1e28c 100644 --- a/inventory/prod/hosts.yml +++ b/inventory/prod/hosts.yml @@ -19,4 +19,4 @@ all: ansible_host: 192.168.99.42 rocky9-template: - ansible_host: 192.168.99.43 \ No newline at end of file + ansible_host: 172.20.21.103 \ No newline at end of file diff --git a/roles/rocky9/tasks/install_packages.yml b/roles/rocky9/tasks/install_packages.yml index 3179a60..2759a16 100644 --- a/roles/rocky9/tasks/install_packages.yml +++ b/roles/rocky9/tasks/install_packages.yml @@ -94,3 +94,8 @@ package: name: "*" state: latest + +- name: Удалить старые ядра и ненужные зависимости + become: true + dnf: + autoremove: yes diff --git a/roles/rocky9/tasks/security_setup.yml b/roles/rocky9/tasks/security_setup.yml index 5417d43..600a4b1 100644 --- a/roles/rocky9/tasks/security_setup.yml +++ b/roles/rocky9/tasks/security_setup.yml @@ -5,12 +5,6 @@ name: "{{ (ansible_facts['distribution_major_version'] | int >= 8) | ternary('python3-libselinux', 'libselinux-python') }}" state: present -#- name: Ensure libselinux is installed on the control node -# delegate_to: localhost -# become: false -# ansible.builtin.pip: -# name: libselinux - - name: Disable SELinux ansible.posix.selinux: state: disabled diff --git a/roles/rocky9/tasks/tcp_tune.yml b/roles/rocky9/tasks/tcp_tune.yml index 6a056ad..2109c74 100644 --- a/roles/rocky9/tasks/tcp_tune.yml +++ b/roles/rocky9/tasks/tcp_tune.yml @@ -87,12 +87,14 @@ value: 1 state: present sysctl_file: /etc/sysctl.d/tcp_tune.conf + # Разрешаем быструю утилизацию сокетов находящихся в состоянии TIME_WAIT DEPRICATRED -#- ansible.posix.sysctl: +# - ansible.posix.sysctl: # name: net.ipv4.tcp_tw_recycle # value: 1 # state: present # sysctl_file: /etc/sysctl.d/tcp_tune.conf + # Параметр tcp_fin_timeout определяет время сохранения сокета в состоянии FIN-WAIT-2 после его закрытия локальной стороной. # Партнер может не закрыть это соединение никогда. - name: net.ipv4.tcp_fin_timeout