9 Commits

Author SHA1 Message Date
Clark Boylan
bf658dacda Add support for Xenial ESM repos to our base roles
This will run the ua tool to attach an UA token and to enable the
esm-infra repos. We also update unattended upgrades to auto pull
security updates from the ESM repos.

Change-Id: Ifb487d12df7b799d5fd2973d56741e0757bc4d4f
2021-05-04 08:46:06 -07:00
Ian Wienand
a12d2fce2b install-ansible: ensure stevedore
We have identified an issue with stevedore < 3.3.0 where the
cloud-launcher, running under ansible, makes stevedore hashe a /tmp
path into a entry-point cache file it makes, causing a never-ending
expansion.

This appears to be fixed by [1] which is available in 3.3.0.  Ensure
we install this on bridge.  For good measure, add a ".disable" file as
we don't really need caches here.

There's currently 491,089 leaked files, so I didn't think it wise to
delete these in a ansible loop as it will probably time out the job.
We can do this manually once we stop creating them :)

[1] d7cfadbb7d

Change-Id: If5773613f953f64941a1d8cc779e893e0b2dd516
2021-03-04 08:29:01 +11:00
Ian Wienand
343c626c5e base: Remove rsyslogd reinstall
This reverts the changes made with
e0fc90cd067647ffcf06e0bfb84fe11636d33be5 as it has been deployed.

Change-Id: If5de429d2259a151c5e4c22fab0c6588341465e1
2020-11-20 07:41:43 +11:00
Ian Wienand
e0fc90cd06 Remove rsyslogd xconsole workaround
This was added in 2013 with I68594d489ab50ef25d351162b9dcb50ca003c409
to avoid rsyslog trying to open /dev/xconsole, and is no longer
relevant.

To get back to the upstream default, remove the modified file, purge
the package and re-install it.  We can remove this shortly after it
has applied to servers.

Change-Id: Icf47abc295a6de8d43553f0a4ebdc6ce1483284e
2020-10-19 16:06:03 +11:00
Ian Wienand
2a63ce7d30 Remove Ubuntu Xenial ARM64 base testing
We no longer have any ARM64 Xenial nodes using this, we can remove it.

Change-Id: I20f22a4538bbaa9cb3a3ca11e156c3d02ca5406f
2020-10-08 14:31:31 +11:00
Ian Wienand
4ea57feabb arm64 mirror : update to Focal
We have having constant issues with the bionic arm64 mirror shutting
itself off.  Before we go too far down the path of debugging what
appears to be a kernel oops issue, let's rebuild it as focal.

Update the sources list in the base.  Update the testing to use a
focal node.

Change-Id: I5b7106e2263010ff353e8a1de43e73b0c0ec57e1
2020-08-20 13:32:08 +10:00
Monty Taylor
d93a661ae4 Run iptables in service playbooks instead of base
It's the only part of base that's important to run when we run a
service. Run it in the service playbooks and get rid of the
dependency on infra-prod-base.

Continue running it in base so that new nodes are brought up
with iptables in place.

Bump the timeout for the mirror job, because the iptables addition
seems to have just bumped it over the edge.

Change-Id: I4608216f7a59cfa96d3bdb191edd9bc7bb9cca39
2020-06-04 07:44:22 -05:00
Monty Taylor
7be1857fb5 Move rackspace repo management to the repos role
Also fix a typo.

Change-Id: Ie5e986eae3fb4b5c26889e4ebba194cf0fd4fd50
2020-05-27 16:28:37 -05:00
Monty Taylor
e8716e742e Move base roles into a base subdir
If we move these into a subdir, it cleans up the number of things
we nave to files match on.

Stop running disable-puppet-agent in base. We run it in run-puppet
which should be fine.

Change-Id: Ia16adb96b11d25a097490882c4c59a50a0b7b23d
2020-05-27 16:28:37 -05:00