482e1110f0
There are long-standing issues with ntp start ordering w.r.t unbound and being able to resolve DNS names. Things have moved on to systemd-timesyncd anyway. Move the ntp start from the generic locations to only apply to older distros, and use system-timesyncd on Bionic. Update testing. Change-Id: I664539f93242e2c68d0cb1cf95c260f3bc03550d
63 lines
1.6 KiB
YAML
63 lines
1.6 KiB
YAML
# NOTE(ianw) There are ordering issues with this. Hopefully when
|
|
# we're bionic only we can just remove ntp
|
|
- name: Install ntp
|
|
package:
|
|
name: ntp
|
|
state: present
|
|
|
|
- name: Ensure NTP service is running
|
|
service:
|
|
name: ntp
|
|
enabled: yes
|
|
state: started
|
|
|
|
- name: Install HWE kernel for arm64
|
|
apt:
|
|
name: linux-generic-hwe-16.04
|
|
state: present
|
|
|
|
# This is copy pasta'd from Debian.yaml because
|
|
# include_tasks: Debian.yaml
|
|
# Was here previously and resulted in this entire surrounding play
|
|
# stopping/crashing and ansible continued with the next play in the
|
|
# playbook as if nothing were wrong. This is concerning for a couple
|
|
# reasons, why doesnt include_tasks work? and why does it crash ansible
|
|
# without any reported failure.
|
|
- name: Remove packages that make no sense for our servers
|
|
package:
|
|
name:
|
|
- whoopsie
|
|
- popularity-contest
|
|
- lxd
|
|
- lxd-client
|
|
state: absent
|
|
|
|
- name: Configure file limits
|
|
copy:
|
|
mode: 0644
|
|
src: debian_limits.conf
|
|
dest: /etc/security/limits.d/60-nofile-limit.conf
|
|
|
|
- name: Custom rsyslog config to disable /dev/xconsole noise
|
|
copy:
|
|
mode: 0644
|
|
src: rsyslog.d_50-default.conf
|
|
dest: /etc/rsyslog.d/50-default.conf
|
|
notify: Restart rsyslog
|
|
|
|
- name: Install apt-daily 10periodic file for unattended-upgrades
|
|
copy:
|
|
mode: 0444
|
|
src: 10periodic
|
|
dest: /etc/apt/apt.conf.d/10periodic
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Install 50unattended-upgrades file for unattended-upgrades
|
|
copy:
|
|
mode: 0444
|
|
src: 50unattended-upgrades
|
|
dest: /etc/apt/apt.conf.d/50unattended-upgrades
|
|
owner: root
|
|
group: root
|