* project: update all dependencies including ansible Upgrade to ansible 7.x and ansible-core 2.14.x. There seems to be issue with ansible 8/ansible-core 2.15 so we remain on those versions for now. It's quite a big bump already anyway. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: install aws galaxy collection Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * ansible-lint: disable various rules after ansible upgrade Temporarily disable a bunch of linting action following ansible upgrade. Those should be taken care of separately. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve deprecated-module ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve no-free-form ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[meta] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[playbook] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[tasks] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-file-permissions ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-shell-pipe ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: remove deprecated warn args Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use fqcn for non builtin tasks Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve syntax-check[missing-file] for contrib playbook Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use arithmetic inside jinja to fix ansible 6 upgrade Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
85 lines
1.9 KiB
YAML
85 lines
1.9 KiB
YAML
---
|
|
- name: Ensure NTP package
|
|
package:
|
|
name:
|
|
- "{{ ntp_package }}"
|
|
state: present
|
|
when:
|
|
- not is_fedora_coreos
|
|
- not ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk"]
|
|
|
|
- name: Disable systemd-timesyncd
|
|
service:
|
|
name: systemd-timesyncd.service
|
|
enabled: false
|
|
state: stopped
|
|
failed_when: false
|
|
|
|
- name: Set fact NTP settings
|
|
set_fact:
|
|
ntp_config_file: >-
|
|
{% if ntp_package == "ntp" -%}
|
|
/etc/ntp.conf
|
|
{%- elif ansible_os_family in ['RedHat', 'Suse'] -%}
|
|
/etc/chrony.conf
|
|
{%- else -%}
|
|
/etc/chrony/chrony.conf
|
|
{%- endif -%}
|
|
ntp_service_name: >-
|
|
{% if ntp_package == "chrony" -%}
|
|
chronyd
|
|
{%- elif ansible_os_family == 'RedHat' -%}
|
|
ntpd
|
|
{%- else -%}
|
|
ntp
|
|
{%- endif %}
|
|
|
|
- name: Generate NTP configuration file.
|
|
template:
|
|
src: "{{ ntp_config_file | basename }}.j2"
|
|
dest: "{{ ntp_config_file }}"
|
|
mode: 0644
|
|
notify: Preinstall | restart ntp
|
|
when:
|
|
- ntp_manage_config
|
|
|
|
- name: Stop the NTP Deamon For Sync Immediately # `ntpd -gq`,`chronyd -q` requires the ntp daemon stop
|
|
service:
|
|
name: "{{ ntp_service_name }}"
|
|
state: stopped
|
|
when:
|
|
- ntp_force_sync_immediately
|
|
|
|
- name: Force Sync NTP Immediately
|
|
command: >-
|
|
timeout -k 60s 60s
|
|
{% if ntp_package == "ntp" -%}
|
|
ntpd -gq
|
|
{%- else -%}
|
|
chronyd -q
|
|
{%- endif -%}
|
|
when:
|
|
- ntp_force_sync_immediately
|
|
|
|
- name: Ensure NTP service is started and enabled
|
|
service:
|
|
name: "{{ ntp_service_name }}"
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: Ensure tzdata package
|
|
package:
|
|
name:
|
|
- tzdata
|
|
state: present
|
|
when:
|
|
- ntp_timezone
|
|
- not is_fedora_coreos
|
|
- not ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk"]
|
|
|
|
- name: Set timezone
|
|
community.general.timezone:
|
|
name: "{{ ntp_timezone }}"
|
|
when:
|
|
- ntp_timezone
|