diff --git a/book-config-oel-6-7.sublime-project b/book-config-oel-6-7.sublime-project new file mode 100644 index 0000000..e5303ed --- /dev/null +++ b/book-config-oel-6-7.sublime-project @@ -0,0 +1,11 @@ +{ + "folders": + [ + { + "path": "." + }, + { + "path": "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/preparation/preparation_20190131" + } + ] +} diff --git a/book-config-oel-6-7.sublime-workspace b/book-config-oel-6-7.sublime-workspace new file mode 100644 index 0000000..9851e9a --- /dev/null +++ b/book-config-oel-6-7.sublime-workspace @@ -0,0 +1,846 @@ +{ + "auto_complete": + { + "selected_items": + [ + [ + "el", + "else" + ], + [ + "st", + "sticky\tposition" + ], + [ + "block", + "block\tdisplay" + ], + [ + "fil", + "filter.\tfilter (block)" + ], + [ + "Entity", + "EntityType" + ], + [ + "array", + "array" + ], + [ + "Ser", + "ServeurName" + ], + [ + "domaine", + "domain-version" + ], + [ + "instan", + "instances" + ], + [ + "find", + "findBy" + ], + [ + "repo", + "repoInstance" + ], + [ + "tab", + "table-primary" + ], + [ + "th", + "thead\tTag" + ], + [ + "ent", + "Entity" + ], + [ + "Serve", + "ServeurFixture" + ], + [ + "Phy", + "setPhysicalServer" + ], + [ + "server", + "serveur" + ], + [ + "Server", + "ServeurRepository" + ], + [ + "fun", + "function" + ], + [ + "PRIM", + "PRIM_DB_UNIQUE_NAME" + ], + [ + "STB", + "STBY_DB_UNIQUE_NAME" + ], + [ + "ST", + "STBY_DB_UNIQUE_NAME" + ], + [ + "DB", + "DB_NAME" + ], + [ + "PRI", + "PRIM_DB_UNIQUE_NAME" + ], + [ + "gr", + "group" + ], + [ + "remo", + "remote_host" + ], + [ + "ex", + "exploir_dir" + ], + [ + "ou", + "output_file" + ], + [ + "rman_", + "rman_backup_report" + ], + [ + "lin", + "lineinfile" + ], + [ + "glo", + "glogin_vars" + ], + [ + "RUNN", + "RUNNING_BKP" + ], + [ + "RUN", + "RUNNING_BKP" + ], + [ + "std", + "stdout" + ], + [ + "invento", + "inventory_loc" + ], + [ + "oracle", + "oracle_home" + ], + [ + "scrip", + "scripts_dir" + ], + [ + "expo", + "exploit_dir" + ], + [ + "show", + "show_alert" + ], + [ + "F", + "File_Name" + ], + [ + "FR", + "FREE_MB" + ], + [ + "MYSQ", + "MYSQL_BIN" + ], + [ + "tsi", + "tsid_maj" + ], + [ + "ts", + "tsid_maj" + ], + [ + "f_", + "f_print" + ], + [ + "LOG", + "LOG_FILE" + ], + [ + "LO", + "LOG_FILE" + ], + [ + "ORACLE", + "ORACLE_SID" + ], + [ + "P", + "PREFER" + ], + [ + "prin", + "print_r" + ], + [ + "n", + "name" + ], + [ + "ad", + "advcomp" + ], + [ + "pro", + "Processor_Type" + ], + [ + "yo", + "you_dba_feature" + ], + [ + "p", + "pdb" + ], + [ + "physi", + "physical_server" + ], + [ + "v_c", + "v_cpu_aix_lpar" + ], + [ + "ta", + "table_name" + ], + [ + "host", + "host_name" + ], + [ + "hot", + "host_name" + ], + [ + "i", + "itoto" + ], + [ + "stock", + "s_stock" + ], + [ + "lib", + "lbarti" + ], + [ + "I", + "IF" + ], + [ + "di", + "div\tTag" + ], + [ + "fa", + "fast_recovery_area" + ], + [ + "Insta", + "InstallDir" + ], + [ + "device", + "device_file" + ] + ] + }, + "buffers": + [ + { + "contents": "fs.aio-max-nr = 1048576\nfs.file-max = 6815744\n\n\n===\nInstallation des sauvegardes \n\n", + "settings": + { + "buffer_size": 83, + "line_ending": "Unix" + } + }, + { + "contents": "https://wwv.papseries.net/series/\n\n\nmv 'Voir la série Les Experts Saison 8 Episode 1 en streaming VF.mp4' 'CSI.Las.Vegas.S08E01.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 2 en streaming VF.mp4' 'CSI.Las.Vegas.S08E02.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 3 en streaming VF.mp4' 'CSI.Las.Vegas.S08E03.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 4 en streaming VF.mp4' 'CSI.Las.Vegas.S08E04.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 5 en streaming VF.mp4' 'CSI.Las.Vegas.S08E05.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 6 en streaming VF.mp4' 'CSI.Las.Vegas.S08E06.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 7 en streaming VF.mp4' 'CSI.Las.Vegas.S08E07.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 8 en streaming VF.mp4' 'CSI.Las.Vegas.S08E08.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 9 en streaming VF.mp4' 'CSI.Las.Vegas.S08E09.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 10 en streaming V.mp4' 'CSI.Las.Vegas.S08E10.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 11 en streaming V.mp4' 'CSI.Las.Vegas.S08E11.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 12 en streaming V.mp4' 'CSI.Las.Vegas.S08E12.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 13 en streaming V.mp4' 'CSI.Las.Vegas.S08E13.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 14 en streaming V.mp4' 'CSI.Las.Vegas.S08E14.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 15 en streaming V.mp4' 'CSI.Las.Vegas.S08E15.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 16 en streaming V.mp4' 'CSI.Las.Vegas.S08E16.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 17 en streaming V.mp4' 'CSI.Las.Vegas.S08E17.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 18 en streaming V.mp4' 'CSI.Las.Vegas.S08E18.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 19 en streaming V.mp4' 'CSI.Las.Vegas.S08E19.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 20 en streaming V.mp4' 'CSI.Las.Vegas.S08E20.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 21 en streaming V.mp4' 'CSI.Las.Vegas.S08E21.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 22 en streaming V.mp4' 'CSI.Las.Vegas.S08E22.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 23 en streaming V.mp4' 'CSI.Las.Vegas.S08E23.mp4'\nmv 'Voir la série Les Experts Saison 8 Episode 24 en streaming V.mp4' 'CSI.Las.Vegas.S08E24.mp4'\n", + "settings": + { + "buffer_size": 2364, + "line_ending": "Unix", + "name": "https://wwv.papseries.net/series/" + } + } + ], + "build_system": "", + "build_system_choices": + [ + ], + "build_varint": "", + "command_palette": + { + "height": 0.0, + "last_filter": "", + "selected_items": + [ + [ + "Package Control: ", + "Package Control: Install Package" + ], + [ + "php", + "Set Syntax: PHP" + ], + [ + "bash", + "Set Syntax: Bourne Again Shell (bash)" + ], + [ + "Package Control: insta", + "Package Control: Install Package" + ], + [ + "twi", + "Set Syntax: HTML (Twig)" + ], + [ + "html", + "Set Syntax: HTML" + ], + [ + "set synt", + "Set Syntax: YAML" + ], + [ + "sql", + "Set Syntax: SQL" + ], + [ + "bat", + "Set Syntax: Batch File" + ], + [ + "json", + "Set Syntax: JSON" + ], + [ + "bas", + "Set Syntax: Bourne Again Shell (bash)" + ], + [ + "shell", + "Set Syntax: Bourne Again Shell (bash)" + ], + [ + "insta", + "Package Control: Install Package" + ] + ], + "width": 0.0 + }, + "console": + { + "height": 0.0, + "history": + [ + ] + }, + "distraction_free": + { + "menu_visible": true, + "show_minimap": false, + "show_open_files": false, + "show_tabs": false, + "side_bar_visible": false, + "status_bar_visible": false + }, + "expanded_folders": + [ + "/home/merlin/scripts/configure_oracle", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/preparation/preparation_20190131" + ], + "file_history": + [ + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/preparation/preparation_20190131/bin/configuration_kernel.sh", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/preparation/preparation_20190131/bin/configuration_rpm.sh", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/vars/oracle_settings.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/install-oracle-sw/tasks/install_database.yml", + "/home/merlin/scripts/configure_oracle/configure-host-oel7/vars/linux_settings.yml", + "/home/merlin/scripts/configure_oracle/configure-host-oel7/tasks/secure_configuration.yml", + "/home/merlin/scripts/configure_oracle/configure-host-oel7/tasks/kernel_configuration.yml", + "/home/merlin/scripts/configure_oracle/book-config-oel-6-7.yml", + "/home/merlin/scripts/configure_oracle/configure-host-oel7/tasks/os_configuration.yml", + "/home/merlin/scripts/configure_oracle/configure-host-oel7/tasks/grub_configuration.yml", + "/home/merlin/scripts/configure_oracle/readme.txt", + "/home/merlin/scripts/configure_oracle/configure-host-oel6/tasks/grub_configuration.yml", + "/home/merlin/scripts/configure_oracle/configure-host-oel7/tasks/main.yml", + "/home/merlin/scripts/configure_oracle/configure-host-oel6/tasks/main.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/ansible.bkp/book-config-and-install.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/ansible.bkp/install-oracle-sw/vars/main.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/ansible.bkp/install-oracle-sw/tasks/main.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/ansible.bkp/install-oracle-sw/tasks/install_database.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/pihole_config.yaml", + "/home/merlin/scripts/configure_oracle/hosts.oracle", + "/home/merlin/scripts/screenly-ose-0.18.2/ansible/site.yml", + "/home/merlin/scripts/ansible_portable/ansible/book-config-oel-6-7.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/terminal_output.txt", + "/home/merlin/scripts/ansible_portable/book-config-oel-6-7.yml", + "/home/merlin/scripts/screenly-ose-0.18.2/README.md", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/book-config-oel-6-7.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/you_things_todo.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Repository/InstanceRepository.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Controller/InstanceController.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/instance/_filter.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Form/SearchForm.php", + "/home/merlin/Bureau/android/SMSBackupRestore/sms-2018-06-29 14-42-32.xml", + "/tmp/2-IPTV France M3u Liste Channels.m3u.html", + "/tmp/adult-freeiptvservercom-24-12-2019-3.m3u.html", + "/media/merlin/windows/Users/youmghar/Documents/rsync_win10.sh", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/instance/index.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/base.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Data/SearchData.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Entity/Instance.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Form/SearchData.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/lms_scripts.you/wls_v4_DILA.sh", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/lms_scripts.you/weblogic_2019_12_02.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Controller/ServerController.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/server/index.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/Acme/AcmeBundle/Command/ImportCommand.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/server/show.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/DataFixtures/ServeurFixtures.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Entity/Serveur.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/instance/create.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Form/InstanceType.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Form/ServeurType.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/instance/show.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/server/create.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Migrations/Version20191201045108.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/Controller/AuditController.php", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/config/packages/twig.yaml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/.env", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/home.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/audit/server_create.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/audit/serveurs.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/audit/server_update.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/server/home.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/terminal_output.txt", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/audit/index.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/templates/audit/home.html.twig", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/symfony_lms/auditLMS/src/DataFixtures/ServeurFixture.php", + "/home/merlin/Documents/ch_perpi/backup_rman_DBCW_DB_20190409-0010.log", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/LIEBHERR/2019_03_27_MeP/srvora18.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/LIEBHERR/2019_06_04_MeP/docs_yacine/mes_notes_svora18.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/LIEBHERR/2019_06_04_MeP/docs_yacine/term_output_svora18.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/LIEBHERR/2019_06_04_MeP/docs_yacine/term_output_svora15.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/LIEBHERR/2019_06_04_MeP/docs_yacine/mes_notes_svora15.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/LIEBHERR/2018_10_Migration_DB/mes_notes.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD84/2019_05_Installation_ODA-X7-2M/xterm/ODA-RDL_20190516_155257.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD84/2019_05_Installation_ODA-X7-2M/xterm/MobaXterm_drivescUsersyoumgharDownloads_20190516_150703.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD84/2019_05_Installation_ODA-X7-2M/xterm/ODA-BCH_20190516_155315.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/Mairie Blagnac/2019_05_Scripts_RMAN/SORACLET/Scripts/mysql_clone.bat", + "/home/merlin/Documents/ch_perpi/sortie_rman.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD84/2019_07_Import_et Dataguard/mes_notes.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/XPO/Connexion via VPN GlobalProtect.txt", + "/home/merlin/Documents/Paul_Scripts/XPO/create-PRVPFR.sql", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/opatch_apply.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/tasks/kernel_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/vars/main.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/templates/sudoers.j2", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/tasks/users_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/tasks/os_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel6/tasks/secure_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel6/tasks/grub_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/tasks/grub_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel7/tasks/main.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/pihole_update_listes.sh", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/remove_mailto_from_cron.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel6/tasks/users_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel6/tasks/kernel_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel6/tasks/main.yml", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/ansible/configure-host-oel6/tasks/os_configuration.yml", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/Habitat_Toulouse/2019_10_MCO/clonage_base.bat", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/Habitat_Toulouse/2019_10_MCO/mes_notes_ODS_DWH.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/Habitat_Toulouse/2019_10_MCO/nagios_plugins.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/Habitat_Toulouse/2019_10_MCO/Ticket 152876.txt", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/redolog_freq_switch.sql", + "/home/merlin/cozy_drive/Docs/Grafana Oracle.txt", + "/home/merlin/Documents/assistants_dataguard/oda_derby_database.txt", + "/home/merlin/Documents/assistants_dataguard/socr_dataguard.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/XPO/2019_08_08_creation_MTCKPP6T/creation_base_MCTKPP6T.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/XPO/2019_08_21/PRHMPL5T_timeout.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/XPO/2019_08_21/2019_08_23/nb_objets_par_schema.txt", + "/home/merlin/scripts/backup_this_vm_2_quark.sh", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD23/SR_Oracle__2019_11_14/Mes_notes.txt", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/DILA/2019_06_SAM/Collection_FMW/parse_registry.csv", + "/home/merlin/tmp/contacts_sr_gmail.csv", + "/home/merlin/tmp/SR_Recup/all_contacts.csv", + "/home/merlin/tmp/SR_Recup/you_all_sms_05.10.2019.csv", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD84/2019_10_28_Dataguard/index_dg_linux_12c.html", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD84/2019_10_28_Dataguard/index_dg_linux_12c (copie).html", + "/home/merlin/tmp/samsung_s2/Repair2/pit_files/YOU_I91001GB_4GB.pit", + "/media/merlin/windows/Users/youmghar/Documents/Axiome/Projets/CD84/2019_10_28_Dataguard/MobaXterm_a-oda-rdl_20191030_170546.rtf", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/Duplicate_database.sh", + "/home/merlin/Documents/Paul_Scripts/XPO/create ARCISFRT.sql", + "/home/merlin/tmp/SR_Recup/SMSBackupRestore/sms-20180224190428.xml", + "/home/merlin/tmp/SR_Recup/YOU_backup_to_be_deleted.xml", + "/home/merlin/tmp/SR_Recup/calls_modifié.xml", + "/home/merlin/tmp/SR_Recup/calls.xml", + "/media/merlin/1F88-5838/00001.vcf", + "/home/merlin/tmp/export_contacts.csv", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/rman_backup_report.sh", + "/media/merlin/windows/Users/youmghar/Documents/3_Scripts/check_all_rman_backup.sh" + ], + "find": + { + "height": 29.0 + }, + "find_in_files": + { + "height": 0.0, + "where_history": + [ + ] + }, + "find_state": + { + "case_sensitive": false, + "find_history": + [ + "S05", + "Saison 5", + "' '", + ";", + "rhgb", + "http", + " ", + " ;", + " ;", + " ;", + " ;", + " ; ", + " ;", + " ;", + " ; ", + "|", + "é", + " ;", + " ;", + " ;", + " ;", + " ;", + " ; ", + " ; ", + "|", + ";", + "\t", + "Web", + "Traitement", + "Base de données", + "enterpriseeee", + "enterprise", + "standard", + "andWhere", + "Where", + "true", + "standard", + "string", + "p", + "\t", + "_all/", + "========", + "Nom de fichier", + "DOMAINE=", + "VERSION=", + "CLUSTER=", + "config/config.xml", + "./", + "_all/", + "_all/FMW/domaines/", + "SERVERNAME=", + "CLUSTER=", + "SERVERNAME=", + "VERSION=", + "DOMAINE=", + "_all;", + "config/config.xml", + "./", + "|Cluster", + ";CLUSTER=", + "SERVERNAME=", + "VERSION=", + "DOMAINE=", + "instance.hostname", + "instances", + "instance", + "tr", + "h2", + "h1", + "serveur", + "model", + "os", + "physical", + "physical_server", + "hostname", + "serveur", + "Serveur", + "server", + "this", + "formServeur", + "server", + "Serveur", + "serveur", + "Serveur", + "serveur", + "intTotalCores", + "server", + "instance.", + "serveur", + "serveur.", + "$i", + "Database", + "`database`", + "database", + "formWidget", + "_", + "href", + "h2>Nom du serveur", + "Dell-E7440:/media/merlin/windows/Users/youmghar/Documents/3_Scripts", + "merlin@Dell-E7440:/media/merlin/windows/Users/youmghar/Documents/3_Scripts", + "merlin@Dell-E7440:/media/merlin/windows/Users/youmghar/Documents/", + "server:", + "_all/", + "-e", + "tp1pec", + "PhyscialServer", + "CoresPerSocket", + "Socket", + "hostname", + "serveur>", + "= '2.6.32' + tags: oscheck + + + # --------------------------------------------------- + # configuration des packages necessaires pour Linux + # --------------------------------------------------- + - include: os_configuration.yml + + # --------------------------------------------------- + # configuration réseau + # --------------------------------------------------- + - include: network_configuration.yml + + # --------------------------------------------------- + # configuration Linux : Utilisateurs et groupes + # --------------------------------------------------- + - include: users_configuration.yml + + # --------------------------------------------------- + # configuration Linux : Paramètres du kernel + # --------------------------------------------------- + - include: kernel_configuration.yml + + # --------------------------------------------------- + # configuration Linux : grub + # --------------------------------------------------- + - include: grub_configuration.yml + + # --------------------------------------------------- + # configuration Linux : Personnalisation + # --------------------------------------------------- + - name: Ajout du fichier z_oracle dans /etc/profile.d + copy: src=z_oracle.sh dest=/etc/profile.d/z_oracle.sh owner=root mode=644 + tags: z_oracle + + # --------------------------------------------------- + # configuration Linux : Sécurisation + # --------------------------------------------------- + - include: secure_configuration.yml + + # --------------------------------------------------- + # configuration des packages necessaires pour Oracle + # --------------------------------------------------- + - name: Installation des packages pour Oracle + yum: name={{ item }} state=installed + with_items: + - bind-utils + - binutils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - compat-libstdc++*i686 + - compat-libstdc++-33 + - cpp + - ethtool + - gcc + - gcc-c++ + - glibc + - glibc*i686 + - glibc-devel + - glibc-headers + - kernel-headers + - kmod-oracleasm + - ksh + - libaio + - libaio*i686 + - libaio-devel + - libaio-devel*i686 + - libgcc + - libselinux-python + - libstdc++ + - libstdc++*i686 + - libstdc++-devel + - libstdc++-devel*i686 + - libtool-ltdl + - libX11 + - libX11*i686 + - libXau + - libXau*i686 + - libxcb + - libxcb*i686 + - libXext + - libXi + - libXp + - libXt + - libXtst + - make + - module-init-tools + - mpfr + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - ntp + - openssh-clients + - oracleasm-support + - parted + - ppl + - procps + - readline + - readline-devel + - sysstat + - twm + - unixODBC + - util-linux-ng + - vim-enhanced + - xdpyinfo + - xfsprogs + - xorg-x11-utils + - xorg-x11-xauth + - xorg-x11-xinit + - xsetroot + - xterm + when: install_os_packages and internet_connection + tags: os_packages + + # --------------------------------------------------- + # configuration Linux : Création des répertoires Oracle + # --------------------------------------------------- +# - include: creation_repertoire.yml + diff --git a/configure-host-oel6/tasks/network_configuration.yml b/configure-host-oel6/tasks/network_configuration.yml new file mode 100755 index 0000000..81aa231 --- /dev/null +++ b/configure-host-oel6/tasks/network_configuration.yml @@ -0,0 +1,32 @@ +--- + # --------------------------------------------------- + # configuration réseau + # --------------------------------------------------- + + - name: Vérification de l enregistrement DNS + command: nslookup {{ ansible_hostname }} + register: ns + ignore_errors: True + tags: etchosts + + - name: Ajout du host dans /etc/hosts si absent + lineinfile: dest=/etc/hosts regexp='.*{{ ansible_fqdn }}$' + line="{{ ansible_default_ipv4.address }} {{ ansible_hostname }} {{ ansible_fqdn }}" + state=present + # when: "'find {{ ansible_hostname }}: NXDOMAIN' in ns.stdout" + tags: etchosts + + - name: Modification resolv.conf pour ajouter attempts et timeout + lineinfile: dest=/etc/resolv.conf line="{{ item.line }}" + with_items: + - { line: "options attempts:2" } + - { line: "options timeout:1" } + + - name: Desactivation de IP v6 + lineinfile: dest=/etc/sysconfig/network line="{{ item.line }}" + with_items: + - { line: "NETWORKING_IPV6=no" } + - { line: "IPV6INIT=no" } + + - name: desactivation permanente + copy: src=desactivation_ipv6.conf dest=/etc/modprobe.d/desactivation_ipv6.conf diff --git a/configure-host-oel6/tasks/os_configuration.yml b/configure-host-oel6/tasks/os_configuration.yml new file mode 100755 index 0000000..93cf32e --- /dev/null +++ b/configure-host-oel6/tasks/os_configuration.yml @@ -0,0 +1,120 @@ +--- + # --------------------------------------------------- + # configuration des packages necessaires pour Linux + # --------------------------------------------------- + - name: Installation du packet libselinux-python + yum: name="libselinux-python" state=installed + + - name: Installation du RPM EPEL Repo + yum: name={{ epel_rpm }} state=installed + when: configure_epel_repo and internet_connection + tags: epelrepo + + - name: Copie du fichier local EPEL Repo (pour remplacer https par http) + copy: src=epel.repo dest=/etc/yum.repos.d/epel.repo + tags: epelrepo + + - name: Récupération du nouveau fichier repository pour OL6 (public-yum) + copy: src=public-yum-ol6.repo dest=/etc/yum.repos.d/public-yum-ol6.repo + tags: ol6repo + + - name: Installation des packages communs pour Linux + yum: name={{ item }} state=installed + when: internet_connection + with_items: + - bc + - bind-utils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - ethtool + - expect + - git + - htop + - lvm2 + - make + - module-init-tools + - mpfr + - multitail + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - nss-softokn-freebl + - ntp + - openssh-clients + - ppl + - procps + - readline + - rlwrap + - screen + - sysstat + - system-config-lvm + - tigervnc-server + - tree + - twm + - unzip + - wget + - vim + - xfsprogs + tags: commonpackages + + - name: Configuratio du mode panic sur perte du / + shell: free_form="tune2fs -e panic `df -P / |tail -1 | awk '{print $1}'`" + + - name: Configuratio du mode panic sur bug du kernel + sysctl: name=kernel.panic_on_oops value=1 state=present reload=yes ignoreerrors=yes + + # --------------------------------------------------- + # configuration du serveur NTPD + # --------------------------------------------------- + - name: Modification de la configuration NTP configuration (ajout du flag -x) + lineinfile: dest=/etc/sysconfig/ntpd + regexp='^OPTIONS=' + line='OPTIONS="-x -u ntp:ntp -p /var/run/ntpd.pid -g"' + state=present + create=yes + + - name: restart ntpd + service: name=ntpd state=started enabled=yes + + # --------------------------------------------------- + # configuration Linux : Selinux + # --------------------------------------------------- + - name: Disactiver Selinux (de façon permanente) + selinux: state=disabled + when: disable_selinux + tags: selinux + register: selinux + + - name: Disactiver Selinux (runtime) + shell: setenforce 0 + when: disable_selinux + tags: selinux + ignore_errors: true + + # --------------------------------------------------- + # configuration Linux : les services + # --------------------------------------------------- + - name: arrêter et désactiver les services inutils + with_items: + - bluetooth + - cups + - gpm + - hidd + - hplip + - isdn + - sendmail + - smartd + - avahi-daemon + - NetworkManager + - rhnsd + - firstboot + - chronyd + - ip6tables + - iptables + - firewalld + service: name={{ item }} state=stopped enabled=no + tags: linuxservices + ignore_errors: true + diff --git a/configure-host-oel6/tasks/secure_configuration.yml b/configure-host-oel6/tasks/secure_configuration.yml new file mode 100755 index 0000000..8d18ed2 --- /dev/null +++ b/configure-host-oel6/tasks/secure_configuration.yml @@ -0,0 +1,34 @@ +--- + # --------------------------------------------------- + # configuration Linux : Sécurisation + # --------------------------------------------------- + - name: Ajout du soft reboot + lineinfile: dest=/etc/rc.local state=present line='/sbin/ctrlaltdel soft' + tags: softreboot + + - name: Sécurisation du vidage mémoire + copy: src="00-vidage.conf" dest="/etc/security/limits.d/00-vidage.conf" + + - name: Application des paramètres de configuration sécurisée + sysctl: name="{{ item.name }}" value="{{ item.value }}" state=present reload=yes ignoreerrors=yes + when: secure_configuration + with_items: + - { name: net.ipv4.conf.all.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.all.secure_redirects, value: 0 } + - { name: net.ipv4.conf.default.secure_redirects, value: 0 } + - { name: net.ipv4.ip_forward, value: 0 } + - { name: net.ipv6.conf.all.accept_redirects, value: 0 } + - { name: net.ipv6.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.accept_source_route, value: 0 } + - { name: net.ipv6.conf.default.accept_source_route, value: 0 } + - { name: net.ipv6.conf.all.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.log_martians, value: 1 } + - { name: net.ipv4.conf.default.log_martians, value: 1 } + - { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 } + - { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 } + - { name: net.ipv6.conf.all.accept_ra, value: 0 } + - { name: net.ipv6.conf.default.accept_ra, value: 0 } + tags: secure_config + diff --git a/configure-host-oel6/tasks/users_configuration.yml b/configure-host-oel6/tasks/users_configuration.yml new file mode 100755 index 0000000..02d84c1 --- /dev/null +++ b/configure-host-oel6/tasks/users_configuration.yml @@ -0,0 +1,34 @@ +--- + # --------------------------------------------------- + # configuration Linux : Utilisateurs et groupes + # --------------------------------------------------- + + - name: Création des groupes + group: name={{ item.group }} gid={{ item.gid }} state=present + with_items: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + tags: group + + - name: Création du compte Oracle + user: name={{ item.username }} group={{ item.primgroup }} groups={{ item.othergroups }} uid={{ item.uid }} generate_ssh_key=yes append=yes state=present password={{ item.passwd }} + with_items: + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + tags: user + + - name: Ajout du compte oracle et grid au sudoers + template: src=sudoers.j2 dest=/etc/sudoers.d/{{ item }} owner=root mode=0600 + with_items: + - oracle + - grid + when: configure_oracle_sudo + tags: sudoadd + diff --git a/configure-host-oel6/templates/motd.j2 b/configure-host-oel6/templates/motd.j2 new file mode 100755 index 0000000..4cc1c96 --- /dev/null +++ b/configure-host-oel6/templates/motd.j2 @@ -0,0 +1,12 @@ +--------------------------------------- +Welcome to {{ ansible_fqdn }} +{{ ansible_distribution }} {{ ansible_distribution_version }} {{ ansible_userspace_architecture }} + +FQDN: {{ ansible_fqdn }} +IP: {{ ansible_default_ipv4.address }} + +#cpu's: {{ ansible_processor_vcpus }} +mem: {{ ansible_memtotal_mb }} MB +Kernel: {{ ansible_kernel }} + +--------------------------------------- diff --git a/configure-host-oel6/templates/oracleasm-configure.expect.j2 b/configure-host-oel6/templates/oracleasm-configure.expect.j2 new file mode 100755 index 0000000..3cec7ea --- /dev/null +++ b/configure-host-oel6/templates/oracleasm-configure.expect.j2 @@ -0,0 +1,50 @@ +#!/usr/bin/expect -f + +spawn service oracleasm configure +{% if role_separation==True %} +expect { + "Default user to own the driver interface*:" + { + send "{{ grid_install_user }}\r" + exp_continue + } + "Default group to own the driver interface*:" + { + send "{{ asmdba_group }}\r" + exp_continue + } + "Start Oracle ASM library driver on boot*:" + { + send "y\r" + exp_continue + } + "Scan for Oracle ASM disks on boot*:" + { + send "y\r" + exp_continue + } +} +{% else %} +expect { + "Default user to own the driver interface*:" + { + send "{{ oracle_user }}\r" + exp_continue + } + "Default group to own the driver interface*:" + { + send "{{ dba_group }}\r" + exp_continue + } + "Start Oracle ASM library driver on boot*:" + { + send "y\r" + exp_continue + } + "Scan for Oracle ASM disks on boot*:" + { + send "y\r" + exp_continue + } +} +{% endif %} diff --git a/configure-host-oel6/templates/sudoers.j2 b/configure-host-oel6/templates/sudoers.j2 new file mode 100755 index 0000000..0ffe793 --- /dev/null +++ b/configure-host-oel6/templates/sudoers.j2 @@ -0,0 +1 @@ +{{ default_user }} ALL=(ALL) NOPASSWD: ALL diff --git a/configure-host-oel6/vars/linux_settings.yml b/configure-host-oel6/vars/linux_settings.yml new file mode 100755 index 0000000..9ecff8c --- /dev/null +++ b/configure-host-oel6/vars/linux_settings.yml @@ -0,0 +1,110 @@ +# Fichier de paramètres +--- + + master_node: true + os_family_supported: "RedHat" + os_min_supported_version: "6.4" + os_supported_version: "6" + disable_numa_boot: true + disable_selinux: true + + internet_connection: false + epel_rpm: "http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm" + configure_epel_repo: true + secure_configuration: true # faire une configuration securisee du system d exploitation + + + + asmlib_rpm: "http://download.oracle.com/otn_software/asmlib/oracleasmlib-2.0.4-1.el6.x86_64.rpm" + ol6_repo_file: public-yum-ol6.repo + repo_dir: /etc/yum.repos.d/ + + disable_numa_boot: true + percent_hugepages: 50 + configure_interconnect: false + configure_ssh: false + configure_host_disks: false + configure_etc_hosts: false + configure_cluster: false + device_persistence: asmlib + install_os_packages: false + disable_selinux: true + + +# pramètres de configuation sécurisée : + linux_secure_config: + - { name: net.ipv4.conf.all.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.all.secure_redirects, value: 0 } + - { name: net.ipv4.conf.default.secure_redirects, value: 0 } + - { name: net.ipv4.ip_forward, value: 0 } + - { name: net.ipv6.conf.all.accept_redirects, value: 0 } + - { name: net.ipv6.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.accept_source_route, value: 0 } + - { name: net.ipv6.conf.default.accept_source_route, value: 0 } + - { name: net.ipv6.conf.all.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.log_martians, value: 1 } + - { name: net.ipv4.conf.default.log_martians, value: 1 } + - { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 } + - { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 } + - { name: net.ipv6.conf.all.accept_ra, value: 0 } + - { name: net.ipv6.conf.default.accept_ra, value: 0 } + + +# packages à installer pour Linux + common_packages: + - bc + - bind-utils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - ethtool + - expect + - git + - htop + - lvm2 + - make + - module-init-tools + - mpfr + - multitail + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - nss-softokn-freebl + - ntp + - openssh-clients + - ppl + - procps + - readline + - rlwrap + - screen + - sysstat + - system-config-lvm + - tigervnc-server + - tree + - twm + - unzip + - wget + - vim + - xfsprogs + +# services Linux à désactiver : + linux_services: + - bluetooth + - cups + - gpm + - hidd + - hplip + - isdn + - sendmail + - smartd + - avahi-daemon + - NetworkManager + - rhnsd + - firstboot + - chronyd + - ip6tables + - iptables + - firewalld diff --git a/configure-host-oel6/vars/main.yml b/configure-host-oel6/vars/main.yml new file mode 100755 index 0000000..335d0f3 --- /dev/null +++ b/configure-host-oel6/vars/main.yml @@ -0,0 +1,279 @@ +# Fichier de paramètres +--- + + master_node: true + os_family_supported: "RedHat" + os_min_supported_version: "6.4" + os_supported_version: "6" + os_min_kernel_version: "2.6.32" + disable_numa_boot: true + disable_selinux: true + + internet_connection: true + epel_rpm: "http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm" + configure_epel_repo: true + secure_configuration: true # faire une configuration securisee du system d exploitation + + +# Groupes et utilisateurs + + oracle_groups: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + + + oracle_users: # Passwd :Oracle123 + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + grid_users: + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + role_separation: true + oracle_user: oracle + grid_user: grid + configure_oracle_sudo: false + + oracle_user_home: "/home/{{ oracle_user }}" + grid_user_home: "/home/{{ grid_user }}" + oracle_group: oinstall + oper_group: oper + dba_group: dba + asmoper_group: asmoper + asmdba_group: asmdba + asmadmin_group: asmadmin + +# les répertoires pour l'installation Oracle + oracle_stage: /u01/stage + oracle_rsp_stage: "{{ oracle_stage }}/rsp" + oracle_version_db: 12.1.0.2 + oracle_base: /u01/app/oracle + home: dbhome_1 + oracle_home: "{{ oracle_base }}/product/{{ oracle_version_db }}/{{ home }}" + + ssh_keys: + - /tmp/id_rsa + - /tmp/id_rsa.pub + - /tmp/authorized_keys + + keyfile: /tmp/known_hosts + + asmlib_rpm: "http://download.oracle.com/otn_software/asmlib/oracleasmlib-2.0.4-1.el6.x86_64.rpm" + ol6_repo_file: public-yum-ol6.repo + repo_dir: /etc/yum.repos.d/ + + disable_numa_boot: true + percent_hugepages: 50 + configure_interconnect: false + oracle_ic_net: 3.3.3.{{ ansible_all_ipv4_addresses[0].split(".")[-1] }} + configure_ssh: false + configure_host_disks: false + configure_etc_hosts: false + configure_cluster: false + device_persistence: asmlib + install_os_packages: true + disable_selinux: true + +# paramètres du noyau + oracle_sysconfig: + - { name: kernel.shmall, value: "{{ ((0.4 * ansible_memtotal_mb)*1024*1024)|round|int }}" } + - { name: kernel.shmmax, value: "{{ ((0.5 * ansible_memtotal_mb)*1024*1024)|round|int }}" } + - { name: kernel.shmmni, value: 4096 } + - { name: kernel.sem, value: "250 32000 100 128" } + - { name: fs.file-max, value: 6815744 } + - { name: fs.aio-max-nr, value: 1048576 } + - { name: net.ipv4.ip_local_port_range, value: "9000 65500" } + - { name: net.core.rmem_default, value: 262144 } + - { name: net.core.rmem_max, value: 4194304 } + - { name: net.core.wmem_default, value: 262144 } + - { name: net.core.wmem_max, value: 1048576 } + - { name: vm.nr_hugepages, value: "{{ (((percent_hugepages/100) * ansible_memtotal_mb)/2)|round|int }}" } + +# Security limits + oracle_seclimits: + - "* soft nproc 2047" + - "* hard nproc 16384" + - "* soft nofile 1024" + - "* hard nofile 65536" + - "* soft memlock {{ ((0.9 * ansible_memtotal_mb)*1024*1024)|round|int }}" + - "* hard memlock {{ ((0.9 * ansible_memtotal_mb)*1024*1024)|round|int }}" + - "* soft stack 10240" + - "* hard stack 32768" + - "* soft core unlimited" + - "* hard core unlimited" + +# pramètres de configuation sécurisée : + linux_secure_config: + - { name: net.ipv4.conf.all.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.all.secure_redirects, value: 0 } + - { name: net.ipv4.conf.default.secure_redirects, value: 0 } + - { name: net.ipv4.ip_forward, value: 0 } + - { name: net.ipv6.conf.all.accept_redirects, value: 0 } + - { name: net.ipv6.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.accept_source_route, value: 0 } + - { name: net.ipv6.conf.default.accept_source_route, value: 0 } + - { name: net.ipv6.conf.all.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.log_martians, value: 1 } + - { name: net.ipv4.conf.default.log_martians, value: 1 } + - { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 } + - { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 } + - { name: net.ipv6.conf.all.accept_ra, value: 0 } + - { name: net.ipv6.conf.default.accept_ra, value: 0 } + + +# Sets up filesystem on host. If storage_type=FS under oracle_databases, this is where the mapping between device/fs is described + host_fs_layout: + u01: + {mntp: /u01, device: /dev/sdb, vgname: vgora, pvname: /dev/sdb1, lvname: lvora, fstype: ext4} + +# ASM Diskgroups used for DB-storage. Should map to dict asm_storage_layout. + asm_diskgroups: # ASM Diskgroups used for DB-storage. Should map to dict asm_storage_layout. + - crs + - data + - fra + +# Mapping between device & ASMlib label. If storage_type=ASM under oracle_databases, +# this is where the mapping between device/asm-disk is described + asm_storage_layout: + crs: + - {device: /dev/sdc, asmlabel: CRS01} + data: + - {device: /dev/sdd, asmlabel: DATA01} + fra: + - {device: /dev/sde, asmlabel: FRA01 } + +# packages à installer pour Linux + common_packages: + - bc + - bind-utils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - ethtool + - expect + - git + - htop + - lvm2 + - make + - module-init-tools + - mpfr + - multitail + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - nss-softokn-freebl + - ntp + - openssh-clients + - ppl + - procps + - readline + - rlwrap + - screen + - sysstat + - system-config-lvm + - tigervnc-server + - tree + - twm + - unzip + - wget + - vim + - xfsprogs + +# services Linux à désactiver : + linux_services: + - bluetooth + - cups + - gpm + - hidd + - hplip + - isdn + - sendmail + - smartd + - avahi-daemon + - NetworkManager + - rhnsd + - firstboot + - chronyd + - ip6tables + - iptables + - firewalld + +# Fichier de paramètres : packages ORACLE + + oracle_packages: + - bind-utils + - binutils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - compat-libstdc++-33*i686 + - compat-libstdc++-33 + - cpp + - ethtool + - gcc + - gcc-c++ + - glibc + - glibc*i686 + - glibc-devel + - glibc-headers + - kernel-headers + - kmod-oracleasm + - ksh + - libX11 + - libX11*i686 + - libXau + - libXau*i686 + - libXext + - libXi + - libXp + - libXt + - libXtst + - libaio + - libaio*i686 + - libaio-devel + - libaio-devel*i686 + - libgcc + - libselinux-python + - libstdc++ + - libstdc++*i686 + - libstdc++-devel + - libstdc++-devel*i686 + - libtool-ltdl + - libxcb + - libxcb*i686 + - make + - module-init-tools + - mpfr + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - ntp + - openssh-clients + - oracleasm-support + - parted + - ppl + - procps + - readline + - readline-devel + - sysstat + - twm + - unixODBC + - util-linux-ng + - vim-enhanced + - xdpyinfo + - xfsprogs + - xorg-x11-utils + - xorg-x11-xauth + - xorg-x11-xinit + - xsetroot + - xterm diff --git a/configure-host-oel6/vars/main.yml.court b/configure-host-oel6/vars/main.yml.court new file mode 100755 index 0000000..5aae3ab --- /dev/null +++ b/configure-host-oel6/vars/main.yml.court @@ -0,0 +1,7 @@ +# Fichier de paramètres +--- + + vars_files: + - linux_settings.yml # tous les parametres de configuration pour Linux + - oracle_users.yml # les comptes et groupes Oracle + - oracle_settings.yml # les parametres kernel et packages Oracle à installer diff --git a/configure-host-oel6/vars/oracle_settings.yml b/configure-host-oel6/vars/oracle_settings.yml new file mode 100755 index 0000000..b281ad7 --- /dev/null +++ b/configure-host-oel6/vars/oracle_settings.yml @@ -0,0 +1,112 @@ +# Fichier de paramètres +--- + + +# les répertoires pour l'installation Oracle + oracle_stage: /u01/stage + oracle_rsp_stage: "{{ oracle_stage }}/rsp" + oracle_version_db: 12.1.0.2 + oracle_base: /u01/app/oracle + home: dbhome_1 + oracle_home: "{{ oracle_base }}/product/{{ oracle_version_db }}/{{ home }}" + + +# paramètres du noyau + oracle_sysconfig: + - { name: kernel.shmall, value: "{{ ((0.4 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmax, value: "{{ ((0.5 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmni, value: 4096 } + - { name: kernel.sem, value: "250 32000 100 128" } + - { name: fs.file-max, value: 6815744 } + - { name: fs.aio-max-nr, value: 1048576 } + - { name: net.ipv4.ip_local_port_range, value: "9000 65500" } + - { name: net.core.rmem_default, value: 262144 } + - { name: net.core.rmem_max, value: 4194304 } + - { name: net.core.wmem_default, value: 262144 } + - { name: net.core.wmem_max, value: 1048576 } + - { name: vm.nr_hugepages, value: "{{ (((percent_hugepages/100) * ansible_memtotal_mb)/2)|round|int }}" } + +# Security limits + oracle_seclimits: + - "* soft nproc 2047" + - "* hard nproc 16384" + - "* soft nofile 1024" + - "* hard nofile 65536" + - "* soft memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* hard memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* soft stack 10240" + - "* hard stack 32768" + - "* soft core unlimited" + - "* hard core unlimited" + + +# Fichier de paramètres : packages ORACLE + + oracle_packages: + - bind-utils + - binutils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - compat-libstdc++*i686 + - compat-libstdc++-33 + - cpp + - ethtool + - gcc + - gcc-c++ + - glibc + - glibc*i686 + - glibc-devel + - glibc-headers + - kernel-headers + - kmod-oracleasm + - ksh + - libX11 + - libX11*i686 + - libXau + - libXau*i686 + - libXext + - libXi + - libXp + - libXt + - libXtst + - libaio + - libaio*i686 + - libaio-devel + - libaio-devel*i686 + - libgcc + - libselinux-python + - libstdc++ + - libstdc++*i686 + - libstdc++-devel + - libstdc++-devel*i686 + - libtool-ltdl + - libxcb + - libxcb*i686 + - make + - module-init-tools + - mpfr + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - ntp + - openssh-clients + - oracleasm-support + - parted + - ppl + - procps + - readline + - readline-devel + - sysstat + - twm + - unixODBC + - util-linux-ng + - vim-enhanced + - xdpyinfo + - xfsprogs + - xorg-x11-utils + - xorg-x11-xauth + - xorg-x11-xinit + - xsetroot + - xterm diff --git a/configure-host-oel6/vars/oracle_users.yml b/configure-host-oel6/vars/oracle_users.yml new file mode 100755 index 0000000..dff07ef --- /dev/null +++ b/configure-host-oel6/vars/oracle_users.yml @@ -0,0 +1,37 @@ +# Fichier de paramètres : les comptes Oracle +--- + +# Groupes et utilisateurs + + oracle_groups: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + + + oracle_users: # Passwd :Oracle123 + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + grid_users: + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + role_separation: true + oracle_user: oracle + grid_user: grid + configure_oracle_sudo: false + + oracle_user_home: "/home/{{ oracle_user }}" + grid_user_home: "/home/{{ grid_user }}" + oracle_group: oinstall + oper_group: oper + dba_group: dba + asmoper_group: asmoper + asmdba_group: asmdba + asmadmin_group: asmadmin + diff --git a/configure-host-oel6/vars/original.main b/configure-host-oel6/vars/original.main new file mode 100755 index 0000000..6804f77 --- /dev/null +++ b/configure-host-oel6/vars/original.main @@ -0,0 +1,278 @@ +# Fichier de paramètres +--- + + master_node: true + os_family_supported: "RedHat" + os_min_supported_version: "6.4" + os_supported_version: "6" + disable_numa_boot: true + disable_selinux: true + + internet_connection: false + epel_rpm: "http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm" + configure_epel_repo: true + secure_configuration: true # faire une configuration securisee du system d exploitation + + +# Groupes et utilisateurs + + oracle_groups: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + + + oracle_users: # Passwd :Oracle123 + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + grid_users: + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + role_separation: true + oracle_user: oracle + grid_user: grid + configure_oracle_sudo: false + + oracle_user_home: "/home/{{ oracle_user }}" + grid_user_home: "/home/{{ grid_user }}" + oracle_group: oinstall + oper_group: oper + dba_group: dba + asmoper_group: asmoper + asmdba_group: asmdba + asmadmin_group: asmadmin + +# les répertoires pour l'installation Oracle + oracle_stage: /u01/stage + oracle_rsp_stage: "{{ oracle_stage }}/rsp" + oracle_version_db: 12.1.0.2 + oracle_base: /u01/app/oracle + home: dbhome_1 + oracle_home: "{{ oracle_base }}/product/{{ oracle_version_db }}/{{ home }}" + + ssh_keys: + - /tmp/id_rsa + - /tmp/id_rsa.pub + - /tmp/authorized_keys + + keyfile: /tmp/known_hosts + + asmlib_rpm: "http://download.oracle.com/otn_software/asmlib/oracleasmlib-2.0.4-1.el6.x86_64.rpm" + ol6_repo_file: public-yum-ol6.repo + repo_dir: /etc/yum.repos.d/ + + disable_numa_boot: true + percent_hugepages: 50 + configure_interconnect: false + oracle_ic_net: 3.3.3.{{ ansible_all_ipv4_addresses[0].split(".")[-1] }} + configure_ssh: false + configure_host_disks: false + configure_etc_hosts: false + configure_cluster: false + device_persistence: asmlib + install_os_packages: false + disable_selinux: true + +# paramètres du noyau + oracle_sysconfig: + - { name: kernel.shmall, value: "{{ ((0.4 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmax, value: "{{ ((0.5 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmni, value: 4096 } + - { name: kernel.sem, value: "250 32000 100 128" } + - { name: fs.file-max, value: 6815744 } + - { name: fs.aio-max-nr, value: 1048576 } + - { name: net.ipv4.ip_local_port_range, value: "9000 65500" } + - { name: net.core.rmem_default, value: 262144 } + - { name: net.core.rmem_max, value: 4194304 } + - { name: net.core.wmem_default, value: 262144 } + - { name: net.core.wmem_max, value: 1048576 } + - { name: vm.nr_hugepages, value: "{{ (((percent_hugepages/100) * ansible_memtotal_mb)/2)|round|int }}" } + +# Security limits + oracle_seclimits: + - "* soft nproc 2047" + - "* hard nproc 16384" + - "* soft nofile 1024" + - "* hard nofile 65536" + - "* soft memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* hard memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* soft stack 10240" + - "* hard stack 32768" + - "* soft core unlimited" + - "* hard core unlimited" + +# pramètres de configuation sécurisée : + linux_secure_config: + - { name: net.ipv4.conf.all.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.all.secure_redirects, value: 0 } + - { name: net.ipv4.conf.default.secure_redirects, value: 0 } + - { name: net.ipv4.ip_forward, value: 0 } + - { name: net.ipv6.conf.all.accept_redirects, value: 0 } + - { name: net.ipv6.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.accept_source_route, value: 0 } + - { name: net.ipv6.conf.default.accept_source_route, value: 0 } + - { name: net.ipv6.conf.all.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.log_martians, value: 1 } + - { name: net.ipv4.conf.default.log_martians, value: 1 } + - { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 } + - { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 } + - { name: net.ipv6.conf.all.accept_ra, value: 0 } + - { name: net.ipv6.conf.default.accept_ra, value: 0 } + + +# Sets up filesystem on host. If storage_type=FS under oracle_databases, this is where the mapping between device/fs is described + host_fs_layout: + u01: + {mntp: /u01, device: /dev/sdb, vgname: vgora, pvname: /dev/sdb1, lvname: lvora, fstype: ext4} + +# ASM Diskgroups used for DB-storage. Should map to dict asm_storage_layout. + asm_diskgroups: # ASM Diskgroups used for DB-storage. Should map to dict asm_storage_layout. + - crs + - data + - fra + +# Mapping between device & ASMlib label. If storage_type=ASM under oracle_databases, +# this is where the mapping between device/asm-disk is described + asm_storage_layout: + crs: + - {device: /dev/sdc, asmlabel: CRS01} + data: + - {device: /dev/sdd, asmlabel: DATA01} + fra: + - {device: /dev/sde, asmlabel: FRA01 } + +# packages à installer pour Linux + common_packages: + - bc + - bind-utils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - ethtool + - expect + - git + - htop + - lvm2 + - make + - module-init-tools + - mpfr + - multitail + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - nss-softokn-freebl + - ntp + - openssh-clients + - ppl + - procps + - readline + - rlwrap + - screen + - sysstat + - system-config-lvm + - tigervnc-server + - tree + - twm + - unzip + - wget + - vim + - xfsprogs + +# services Linux à désactiver : + linux_services: + - bluetooth + - cups + - gpm + - hidd + - hplip + - isdn + - sendmail + - smartd + - avahi-daemon + - NetworkManager + - rhnsd + - firstboot + - chronyd + - ip6tables + - iptables + - firewalld + +# Fichier de paramètres : packages ORACLE + + oracle_packages: + - bind-utils + - binutils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - compat-libstdc++*i686 + - compat-libstdc++-33 + - cpp + - ethtool + - gcc + - gcc-c++ + - glibc + - glibc*i686 + - glibc-devel + - glibc-headers + - kernel-headers + - kmod-oracleasm + - ksh + - libX11 + - libX11*i686 + - libXau + - libXau*i686 + - libXext + - libXi + - libXp + - libXt + - libXtst + - libaio + - libaio*i686 + - libaio-devel + - libaio-devel*i686 + - libgcc + - libselinux-python + - libstdc++ + - libstdc++*i686 + - libstdc++-devel + - libstdc++-devel*i686 + - libtool-ltdl + - libxcb + - libxcb*i686 + - make + - module-init-tools + - mpfr + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - ntp + - openssh-clients + - oracleasm-support + - parted + - ppl + - procps + - readline + - readline-devel + - sysstat + - twm + - unixODBC + - util-linux-ng + - vim-enhanced + - xdpyinfo + - xfsprogs + - xorg-x11-utils + - xorg-x11-xauth + - xorg-x11-xinit + - xsetroot + - xterm diff --git a/configure-host-oel7/README.md b/configure-host-oel7/README.md new file mode 100755 index 0000000..225dd44 --- /dev/null +++ b/configure-host-oel7/README.md @@ -0,0 +1,38 @@ +Role Name +========= + +A brief description of the role goes here. + +Requirements +------------ + +Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required. + +Role Variables +-------------- + +A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well. + +Dependencies +------------ + +A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles. + +Example Playbook +---------------- + +Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: + + - hosts: servers + roles: + - { role: username.rolename, x: 42 } + +License +------- + +BSD + +Author Information +------------------ + +An optional section for the role authors to include contact information, or a website (HTML is not allowed). diff --git a/configure-host-oel7/defaults/main.yml b/configure-host-oel7/defaults/main.yml new file mode 100755 index 0000000..a7162f6 --- /dev/null +++ b/configure-host-oel7/defaults/main.yml @@ -0,0 +1,2 @@ +--- +# defaults file for configure-host-oel7 diff --git a/configure-host-oel7/files/00-vidage.conf b/configure-host-oel7/files/00-vidage.conf new file mode 100755 index 0000000..c3567b8 --- /dev/null +++ b/configure-host-oel7/files/00-vidage.conf @@ -0,0 +1,2 @@ +# Sécurisation du vidage mémoire +* hard core 0 diff --git a/configure-host-oel7/files/desactivation_ipv6.conf b/configure-host-oel7/files/desactivation_ipv6.conf new file mode 100755 index 0000000..c8e7546 --- /dev/null +++ b/configure-host-oel7/files/desactivation_ipv6.conf @@ -0,0 +1,2 @@ +options ipv6 disable=1 + diff --git a/configure-host-oel7/files/epel.repo b/configure-host-oel7/files/epel.repo new file mode 100755 index 0000000..2b61395 --- /dev/null +++ b/configure-host-oel7/files/epel.repo @@ -0,0 +1,26 @@ +[epel] +name=Extra Packages for Enterprise Linux 6 - $basearch +#baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch +mirrorlist=http://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch +failovermethod=priority +enabled=1 +gpgcheck=1 +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6 + +[epel-debuginfo] +name=Extra Packages for Enterprise Linux 6 - $basearch - Debug +#baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch/debug +mirrorlist=http://mirrors.fedoraproject.org/metalink?repo=epel-debug-6&arch=$basearch +failovermethod=priority +enabled=0 +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6 +gpgcheck=1 + +[epel-source] +name=Extra Packages for Enterprise Linux 6 - $basearch - Source +#baseurl=http://download.fedoraproject.org/pub/epel/6/SRPMS +mirrorlist=http://mirrors.fedoraproject.org/metalink?repo=epel-source-6&arch=$basearch +failovermethod=priority +enabled=0 +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6 +gpgcheck=1 diff --git a/configure-host-oel7/files/libselinux-2.0.94-5.8.el6.x86_64.rpm b/configure-host-oel7/files/libselinux-2.0.94-5.8.el6.x86_64.rpm new file mode 100755 index 0000000..e69de29 diff --git a/configure-host-oel7/files/libselinux-python-2.0.94-5.8.el6.x86_64.rpm b/configure-host-oel7/files/libselinux-python-2.0.94-5.8.el6.x86_64.rpm new file mode 100755 index 0000000..df90aba Binary files /dev/null and b/configure-host-oel7/files/libselinux-python-2.0.94-5.8.el6.x86_64.rpm differ diff --git a/configure-host-oel7/files/public-yum-ol6.repo b/configure-host-oel7/files/public-yum-ol6.repo new file mode 100755 index 0000000..d003ace --- /dev/null +++ b/configure-host-oel7/files/public-yum-ol6.repo @@ -0,0 +1,69 @@ +[public_ol6_latest] +name=Oracle Linux $releasever Latest ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/latest/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=1 + +[public_ol6_ga_base] +name=Oracle Linux $releasever GA installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/0/base/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=0 + +[public_ol6_u1_base] +name=Oracle Linux $releasever Update 1 installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/1/base/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=0 + +[public_ol6_u2_base] +name=Oracle Linux $releasever Update 2 installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/2/base/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=0 + +[public_ol6_u3_base] +name=Oracle Linux $releasever Update 3 installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/3/base/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=0 + +[public_ol6_u4_base] +name=Oracle Linux $releasever Update 4 installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/4/base/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=0 + +[public_ol6_u5_base] +name=Oracle Linux $releasever Update 5 installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/5/base/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=0 + +[public_ol6_UEK_latest] +name=Latest Unbreakable Enterprise Kernel for Oracle Linux $releasever ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/UEK/latest/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=$uek + +[public_ol6_UEKR3_latest] +name=Unbreakable Enterprise Kernel Release 3 for Oracle Linux $releasever ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/UEKR3/latest/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=$uekr3 + +[public_ol6_UEK_base] +name=Unbreakable Enterprise Kernel for Oracle Linux $releasever ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/UEK/base/$basearch/ +gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6 +gpgcheck=1 +enabled=0 diff --git a/configure-host-oel7/files/public-yum-ol7.repo b/configure-host-oel7/files/public-yum-ol7.repo new file mode 100755 index 0000000..2a2da48 --- /dev/null +++ b/configure-host-oel7/files/public-yum-ol7.repo @@ -0,0 +1,72 @@ +[ol7_latest] +name=Oracle Linux $releasever Latest ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/latest/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=1 + +[ol7_u0_base] +name=Oracle Linux $releasever GA installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/0/base/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 + +[ol7_u1_base] +name=Oracle Linux $releasever Update 1 installation media copy ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/1/base/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 + +[ol7_UEKR3] +name=Latest Unbreakable Enterprise Kernel Release 3 for Oracle Linux $releasever ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/UEKR3/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=1 + +[ol7_optional_latest] +name=Oracle Linux $releasever Optional Latest ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/optional/latest/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 + +[ol7_addons] +name=Oracle Linux $releasever Add ons ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/addons/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 + +[ol7_UEKR3_OFED20] +name=OFED supporting tool packages for Unbreakable Enterprise Kernel on Oracle Linux 7 ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/UEKR3_OFED20/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 +priority=20 + +[ol7_MySQL56] +name=MySQL 5.6 for Oracle Linux 7 ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/MySQL56/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 + +[ol7_MySQL55] +name=MySQL 5.5 for Oracle Linux 7 ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/MySQL55/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 + + +[ol7_spacewalk22_client] +name=Spacewalk Client 2.2 for Oracle Linux 7 ($basearch) +baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL7/spacewalk22/client/$basearch/ +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle +gpgcheck=1 +enabled=0 + diff --git a/configure-host-oel7/files/z_oracle.sh b/configure-host-oel7/files/z_oracle.sh new file mode 100755 index 0000000..658c011 --- /dev/null +++ b/configure-host-oel7/files/z_oracle.sh @@ -0,0 +1,291 @@ +## Fichier de configuration d'environnement Oracle +## Pour infrastructure cluster ou standalone. +## Versions testees: 12.1, 11.2 GI et SA, flex/normal +## +## 20140813 YOM Correction de l'emplacement des journaux cluster vers ADR en 12c +## 20140813 YOM Correction concernant la détection Restart en 12c (olsnodes réponds...) +## 20140820 YOM Correction des alias crsstat et crsstati pour implémenter les variables ORA_CRS car elles ne doivent pas être laissées dans l'environnement +## 20141202 YOM Correction du prompt par défaut +## 20141203 YOM Suppression des alias crsstat et crsstati pour les transformer en scripts +## 20141204 YOM Ajout de l'alias OH pour un « cd $ORACLE_HOME » +## 20150121 YOM Test si le terminal est interractif pour éviter les erreurs TPUT en v7 +## Activation des echo pour DEBUG si mis à 1 +DEBUG=0 + +## Contexte +APP_CTX=z_oracle.sh +HOSTNAME_SIMPLE=`hostname -s` +## Shell interactif ou non ? +fd=0 +if [[ $- = *i* ]] +then + INTERACTIF=OUI +else + INTERACTIF=NON +fi + +## Ajustement des limites (préconisations Oracle) +function ajustement_limites () { + decho fonction ajustement limites + if [ $SHELL = "/bin/ksh" ] ; then + ulimit -p 16384 + ulimit -n 65536 + ulimit -s 32768 + else + ulimit -u 16384 -n 65536 -s 32768 + fi +} + +## Affichage des messages de sortie de debug +function decho () { + if [ $DEBUG -eq 1 ] ; then + echo $APP_CTX: $* + fi +} + +decho "Terminal en mode interactif: $INTERACTIF" + +## On entre seulement pour certains utilisateurs. +## root een fait partie pour la composante cluster, crsctl, ... +if [ $USER = "oracle" ] || [ $USER = "grid" ] || [ $USER = "root" ] ; then + + decho $USER login profile + + # Certaines operations ne sont pas a realiser pour root + # les limites sont laissees par defaut + # ainsi que le masque de creation de fichier ou le stty break. + if [ $USER != "root" ] ; then + ajustement_limites + + decho umask et stty break + # Masque de création des fichiers + umask 022 + + # Pour prévention SSH + if [ -t 0 ]; then + stty intr ^C + fi + fi + + # préparation pour l'inventaire + # Si l'installation a ete realisee, on a un inventaire accessible que l'on peut traiter + OLR_LOC=/etc/oracle/olr.loc + ORA_INVENTORY_CFFILE=/etc/oraInst.loc + decho OLR: $OLR_LOC + decho Inventaire: $ORA_INVENTORY_CFFILE + + # Si l'installation n'est pas faite... on ignore cette partie + if [ -f $ORA_INVENTORY_CFFILE ] ; then + decho Installation trouvee + # On recupere les informations de l'inventaire, pour traitement eventuel + ORA_INVENTORY=`grep inventory_loc $ORA_INVENTORY_CFFILE | cut -d= -f2` + ORA_INVENTORY_XMLFILE=$ORA_INVENTORY/ContentsXML/inventory.xml + + # Recuperation de l'emplacement du répertoire prive de l'utilisateur premier oracle + ORA_USER_HOME=`egrep '^SED_PREMIER_COMPTE_ORACLE__:.*' /etc/passwd | cut -d: -f 6` + ORA_EXPL_DIR=$ORA_USER_HOME/expl + ORA_EXPL_BIN=$ORA_EXPL_DIR/bin + ORA_EXPL_SQL=$ORA_EXPL_DIR/sql + ORA_EXPL_TMP=$ORA_EXPL_DIR/tmp + + # Test pour savoir si GI installée + if [ -f $OLR_LOC ] ; then + decho GI installee + # Mise en place du pointeur de racine CRS + export ORA_CRS_HOME=`grep crs_home /etc/oracle/olr.loc|cut -d= -f2` + decho ORA_CRS_HOME = $ORA_CRS_HOME + + # On utilise olsnodes qui "sors" rapidement pour aussi valider que la couche est UP + # sinon on perds un temps phénoménal pour rien avec les timeout crsctl + NODE_INFO=`$ORA_CRS_HOME/bin/olsnodes -l -n -a` + if [ $? -ne 0 ] ; then + # En cluster 11, on n'a pas de -a (mode cluster flex/normal) + NODE_INFO=`$ORA_CRS_HOME/bin/olsnodes -l -n` + fi + + + if [ $? -eq 0 ] ; then + # C'est UP, on peut traiter. + export ORA_CRS_NODE_NUM=`echo $NODE_INFO | awk '{print $2}'` + export ORA_CRS_NODE_TYPE=`echo $NODE_INFO | awk '{print $3}'` + decho ORA_CRS_NODE_NUM = $ORA_CRS_NODE_NUM + decho ORA_CRS_NODE_TYPE = $ORA_CRS_NODE_TYPE + export ORA_CRS_CLUSTER_NAME=`$ORA_CRS_HOME/bin/olsnodes -c` + decho ORA_CRS_CLUSTER_NAME=$ORA_CRS_CLUSTER_NAME + + # Si le cluster n'a pas de nom, c'est que nous sommes en Oracle Restart. Donc pas de query activeversion! + if [ "$ORA_CRS_CLUSTER_NAME" != "" ] ; then + export ORA_CRS_ACTIVEVERSION=`$ORA_CRS_HOME/bin/crsctl query crs activeversion | cut -d[ -f2 | cut -d. -f1` + if [ "$ORA_CRS_ACTIVEVERSION" -eq "12" ] ; then + # On peut attendre un cluster flex ou non + export ORA_CRS_CLUSTERMODE=`$ORA_CRS_HOME/bin/crsctl get cluster mode config |cut -d\" -f2` + # On raccourcis "standard" en "std" si besoin + if [ "$ORA_CRS_CLUSTERMODE" = "standard" ] ; then + export ORA_CRS_CLUSTERMODE=std + fi + else + export ORA_CRS_CLUSTERMODE=std + fi + else + ORA_CRS_CLUSTERMODE=rst + fi + decho Mode: $ORA_CRS_CLUSTERMODE + + + else + decho Clusterware OFFLINE. + # Est-on en RESTART ???!!! + if [ `cat /etc/oracle/ocr.loc | grep "local_only=TRUE" |wc -l` -eq 1 ] ; then + decho certainement GI standalone pour RESTART + ORA_CRS_CLUSTERMODE=rst + fi + fi + + # Alias manipulation + if [ $USER = "SED_ORACLE_TARGET__" ] ; then + # pointeur facile pour crsctl... + decho Alias crsctl cree + alias crsctl='$ORA_CRS_HOME/bin/crsctl' + elif [ $USER = "root" ] ; then + decho Ajustement path user root + # On ajoute le chemin du cluster dans le PATH + export PATH=$ORA_CRS_HOME/bin:$ORA_USER_HOME/expl/bin:$PATH + elif [ $USER = "SED_GRID_TARGET__" ] ; then + decho environnement GI + export ORACLE_HOME=$ORA_CRS_HOME + export ORACLE_BASE=`$ORACLE_HOME/bin/orabase` + export SQLPATH=$ORA_EXPL_SQL + export PATH=$ORA_CRS_HOME/bin:$ORA_USER_HOME/expl/bin:$PATH + if [ `ps -ef | grep -E 'pmon.*\+A' | grep -v grep | cut -d_ -f3- | wc -l` -gt 0 ] ; then + export ORACLE_SID=`ps -ef | grep -E 'pmon.*\+A' | grep -v grep | cut -d_ -f3- | sort | tail -1` + fi + fi + ## Accès direct aux logs + if [ "$INTERACTIF" = "OUI" ] ; then + DRT_LI=`tput lines` + else + DRT_LI=100 + fi + ## On teste la présence de fichiers "11" hors ADR. + if [ -r $ORA_CRS_HOME/log/$HOSTNAME_SIMPLE/ohasd/ohasd.log ] ; then + ## Configuration ancienne + OHASD_LOG=$ORA_CRS_HOME/log/$HOSTNAME_SIMPLE/ohasd/ohasd.log + CSSD_LOG=$ORA_CRS_HOME/log/$HOSTNAME_SIMPLE/cssd/ocssd.log + CRSD_LOG=$ORA_CRS_HOME/log/$HOSTNAME_SIMPLE/crsd/crsd.log + ALERT_LOG=$ORA_CRS_HOME/log/$HOSTNAME_SIMPLE/alert$HOSTNAME_SIMPLE.log + else + ## Configuration nouvelle ADR pour les journaux cluster + OB=`ORACLE_HOME=$ORA_CRS_HOME ${ORA_CRS_HOME}/bin/orabase` + OHASD_LOG=$OB/diag/crs/$HOSTNAME_SIMPLE/crs/trace/ohasd.trc + CSSD_LOG=$OB/diag/crs/$HOSTNAME_SIMPLE/crs/trace/ocssd.trc + CRSD_LOG=$OB/diag/crs/$HOSTNAME_SIMPLE/crs/trace/crsd.trc + ALERT_LOG=$OB/diag/crs/$HOSTNAME_SIMPLE/crs/trace/alert.log + fi + ## Cluster Alert log + alias alertgen="tail -${DRT_LI}f $ALERT_LOG" + ## LOG - OHASD + alias ohasd="tail -${DRT_LI}f $OHASD_LOG" + ## LOG - CSSD + alias cssd="tail -${DRT_LI}f $CSSD_LOG" + ## LOG - CRSD + alias crsd="tail -${DRT_LI}f $CRSD_LOG" + ## Alert global watch + + ## Aucun intérêt dans un terminal non interactif + if [ "$INTERACTIF" = "OUI" ] ; then + DRT_LI=`expr $DRT_LI / 10 - 1` + DRT_LI2=`expr $DRT_LI \* 3` + DRT_LI6=`expr $DRT_LI \* 6` + NORMAL=$(tput sgr0) + ROUGE=$(tput setaf 1) + alias alert="while :; do clear ; echo -e \"${ROUGE}ALERT********${NORMAL}\" ; tail -$DRT_LI $ALERT_LOG ; echo -e \"${ROUGE}CRSD*********${NORMAL}\" ; tail -$DRT_LI2 $CRSD_LOG ; echo -e \"${ROUGE}OCSSD********${NORMAL}\" ; tail -$DRT_LI6 $CSSD_LOG ; echo -e \"${ROUGE}OHASD********${NORMAL}\" ; tail -$DRT_LI $OHASD_LOG ; sleep 1; done" + fi + else + decho GI non installee + ORA_CRS_CLUSTERMODE=sa + fi + + # Env oracle avec ou hors GI + if [ $USER = "oracle" ] ; then + export SQLPATH=$ORA_EXPL_SQL + # Si 1 seul OH dans l'inventaire, on set. Non déterminable si GI non cluster (manque le CRS=true pour identifier) + if [ `grep '= '3.8.13' +# tags: oscheck + + # --------------------------------------------------- + # configuration des packages necessaires pour Linux + # --------------------------------------------------- + - include: os_configuration.yml + + # --------------------------------------------------- + # configuration réseau + # --------------------------------------------------- + - include: network_configuration.yml + + # --------------------------------------------------- + # configuration Linux : Utilisateurs et groupes + # --------------------------------------------------- + - include: users_configuration.yml + + # --------------------------------------------------- + # configuration Linux : Paramètres du kernel + # --------------------------------------------------- + - include: kernel_configuration.yml + + # --------------------------------------------------- + # configuration Linux : grub + # --------------------------------------------------- + - include: grub_configuration.yml + + # --------------------------------------------------- + # configuration Linux : Personnalisation + # --------------------------------------------------- + - name: Ajout du fichier z_oracle dans /etc/profile.d + copy: src=z_oracle.sh dest=/etc/profile.d/z_oracle.sh owner=root mode=644 + tags: z_oracle + + # --------------------------------------------------- + # configuration Linux : Sécurisation + # --------------------------------------------------- +# - include: secure_configuration.yml + + # --------------------------------------------------- + # configuration des packages necessaires pour Oracle + # --------------------------------------------------- + - name: Installation des packages pour Oracle + yum: name={{ packages }} state=installed skip_broken=true +# with_items: + vars: + packages: + - binutils + - compat-libcap1 + - compat-libstdc++*i686 + - compat-libstdc++-33 + - elfutils-libelf-devel + - gcc + - gcc-c++ + - glibc + - glibc*i686 + - glibc-devel + - glibc-devel*i686 + - kernel-headers + - ksh + - libaio + - libaio*i686 + - libaio-devel + - libaio-devel*i686 + - libgcc*i686 + - libgcc*x86_64 + - libstdc++ + - libstdc++*i686 + - libstdc++-devel + - libstdc++-devel*i686 + - libXi + - libXi*i686 + - libXtst + - libXtst*i686 + - make + - mksh + - smartmontools + - sysstat + - unixODBC + tags: os_packages +# when: install_os_packages and internet_connection + + # --------------------------------------------------- + # configuration Linux : Création des répertoires Oracle + # --------------------------------------------------- +# - include: creation_repertoire.yml + + # --------------------------------------------------- + # Securisation de cron + # --------------------------------------------------- + - name: Desactivation de la commande crontab -r + lineinfile: dest=/etc/profile.d/you.sh + line='crontab () { [[ $@ =~ -[iel]*r ]] && echo "option -r (remove) not allowed" || command crontab "$@" ;}' + state=present + create=yes + diff --git a/configure-host-oel7/tasks/network_configuration.yml b/configure-host-oel7/tasks/network_configuration.yml new file mode 100755 index 0000000..8e33739 --- /dev/null +++ b/configure-host-oel7/tasks/network_configuration.yml @@ -0,0 +1,33 @@ +--- + # --------------------------------------------------- + # configuration réseau + # --------------------------------------------------- + + - name: Vérification de l enregistrement DNS + command: nslookup {{ ansible_hostname }} + register: ns + ignore_errors: True + tags: etchosts + + - name: Ajout du host dans /etc/hosts si absent + lineinfile: dest=/etc/hosts regexp='.*{{ ansible_fqdn }}$' + line="{{ ansible_default_ipv4.address }} {{ ansible_hostname }} {{ ansible_fqdn }}" + state=present + # when: "'find {{ ansible_hostname }}: NXDOMAIN' in ns.stdout" + tags: etchosts + + - name: Modification resolv.conf pour ajouter attempts et timeout + lineinfile: dest=/etc/resolv.conf line="{{ item.line }}" + with_items: + - { line: "options attempts:2" } + - { line: "options timeout:1" } + + - name: Desactivation de IP v6 et ZeroConf (Doc ID 1161144.1) + lineinfile: dest=/etc/sysconfig/network line="{{ item.line }}" + with_items: + - { line: "NETWORKING_IPV6=no" } + - { line: "IPV6INIT=no" } + - { line: "NOZEROCONF=yes" } + + - name: desactivation permanente de ipv6 + copy: src=desactivation_ipv6.conf dest=/etc/modprobe.d/desactivation_ipv6.conf diff --git a/configure-host-oel7/tasks/os_configuration.yml b/configure-host-oel7/tasks/os_configuration.yml new file mode 100755 index 0000000..b5eb5a5 --- /dev/null +++ b/configure-host-oel7/tasks/os_configuration.yml @@ -0,0 +1,103 @@ +--- + # --------------------------------------------------- + # configuration des packages necessaires pour Linux + # --------------------------------------------------- + - name: Installation du packet libselinux-python + yum: name="libselinux-python" state=installed + +# - name: Installation du RPM EPEL Repo pour Linux 7 +# yum: name="{{ epel_rpm }}" state=installed +# tags: epelrepo + +# - name: Copie du fichier repository public-yum si absent +# copy: src=public-yum-ol7.repo dest=/etc/yum.repos.d/public-yum-ol7.repo +# tags: publicyumrepo + + - name: Installation des packages communs pour Linux + yum: name={{ item }} state=installed + tags: commonpackages + with_items: + - bind-utils + - xdpyinfo + - xauth + - net-tools + - ethtool + - nscd + - ntp + - sysstat + - tree + - unzip + - wget + - vim +# - htop +# - rlwrap + - lvm2 + - ncurses + - nfs-utils + - readline + - xfsprogs + - system-storage-manager + + - name: Configuratio du mode panic sur perte du / + shell: free_form="tune2fs -e panic `df -P / |tail -1 | awk '{print $1}'`" + + - name: Configuratio du mode panic sur bug du kernel + sysctl: name=kernel.panic_on_oops value=1 state=present reload=yes ignoreerrors=yes + + # --------------------------------------------------- + # configuration du serveur NTPD + # --------------------------------------------------- + - name: Modification de la configuration NTP configuration (ajout du flag -x) + lineinfile: dest=/etc/sysconfig/ntpd + regexp='^OPTIONS=' + line='OPTIONS="-x -u ntp:ntp -p /var/run/ntpd.pid -g"' + state=present + create=yes + + - name: restart ntpd + service: name=ntpd state=started enabled=yes + + # --------------------------------------------------- + # configuration Linux : Selinux + # --------------------------------------------------- + - name: Disactiver Selinux (de façon permanente) + selinux: state=disabled + tags: selinux + register: selinux + + - name: Disactiver Selinux (runtime) + shell: setenforce 0 + tags: selinux + ignore_errors: true + + # --------------------------------------------------- + # configuration Linux : les services + # --------------------------------------------------- + - name: arrêter et désactiver les services inutils + service: name={{ item }} state=stopped enabled=no + tags: linuxservices + ignore_errors: true + with_items: + - bluetooth + - cups + - gpm + - hidd + - hplip + - isdn + - sendmail + - smartd + - avahi-daemon + - NetworkManager + - rhnsd + - firstboot + - chronyd + - ip6tables + - iptables + - firewalld + + # --------------------------------------------------- + # configuration du démarrage en mode 3 par défaut + # --------------------------------------------------- + - name: configuration du démarrage en mode 3 par défaut + command: systemctl set-default multi-user.target + diff --git a/configure-host-oel7/tasks/secure_configuration.yml b/configure-host-oel7/tasks/secure_configuration.yml new file mode 100755 index 0000000..ac8784d --- /dev/null +++ b/configure-host-oel7/tasks/secure_configuration.yml @@ -0,0 +1,21 @@ +--- + # --------------------------------------------------- + # configuration Linux : Sécurisation + # --------------------------------------------------- + - name: Ajout du soft reboot + lineinfile: dest=/etc/rc.local state=present line='/sbin/ctrlaltdel soft' + tags: softreboot + + - name: Sécurisation du vidage mémoire + copy: src="00-vidage.conf" dest="/etc/security/limits.d/00-vidage.conf" + + - name: Application des paramètres de configuration sécurisée + sysctl: name="{{ item.name }}" + value="{{ item.value }}" + state=present + reload=yes + ignoreerrors=yes + sysctl_file=/etc/sysctl.d/98-oracle.conf + when: secure_configuration + with_items: linux_secure_config + tags: secure_config diff --git a/configure-host-oel7/tasks/users_configuration.yml b/configure-host-oel7/tasks/users_configuration.yml new file mode 100755 index 0000000..826cae8 --- /dev/null +++ b/configure-host-oel7/tasks/users_configuration.yml @@ -0,0 +1,34 @@ +--- + # --------------------------------------------------- + # configuration Linux : Utilisateurs et groupes + # --------------------------------------------------- + + - name: Creation des groupes + group: name={{ item.group }} gid={{ item.gid }} state=present + with_items: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + tags: group + + - name: Creation du compte Oracle + user: name={{ item.username }} group={{ item.primgroup }} groups={{ item.othergroups }} uid={{ item.uid }} generate_ssh_key=yes append=yes state=present password={{ item.passwd }} + with_items: + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + tags: user + + - name: Ajout du compte oracle et grid au sudoers + template: src=sudoers.j2 dest=/etc/sudoers.d/{{ item }} owner=root mode=0600 + with_items: + - oracle + - grid + when: configure_oracle_sudo + tags: sudoadd + diff --git a/configure-host-oel7/templates/motd.j2 b/configure-host-oel7/templates/motd.j2 new file mode 100755 index 0000000..4cc1c96 --- /dev/null +++ b/configure-host-oel7/templates/motd.j2 @@ -0,0 +1,12 @@ +--------------------------------------- +Welcome to {{ ansible_fqdn }} +{{ ansible_distribution }} {{ ansible_distribution_version }} {{ ansible_userspace_architecture }} + +FQDN: {{ ansible_fqdn }} +IP: {{ ansible_default_ipv4.address }} + +#cpu's: {{ ansible_processor_vcpus }} +mem: {{ ansible_memtotal_mb }} MB +Kernel: {{ ansible_kernel }} + +--------------------------------------- diff --git a/configure-host-oel7/templates/oracleasm-configure.expect.j2 b/configure-host-oel7/templates/oracleasm-configure.expect.j2 new file mode 100755 index 0000000..3cec7ea --- /dev/null +++ b/configure-host-oel7/templates/oracleasm-configure.expect.j2 @@ -0,0 +1,50 @@ +#!/usr/bin/expect -f + +spawn service oracleasm configure +{% if role_separation==True %} +expect { + "Default user to own the driver interface*:" + { + send "{{ grid_install_user }}\r" + exp_continue + } + "Default group to own the driver interface*:" + { + send "{{ asmdba_group }}\r" + exp_continue + } + "Start Oracle ASM library driver on boot*:" + { + send "y\r" + exp_continue + } + "Scan for Oracle ASM disks on boot*:" + { + send "y\r" + exp_continue + } +} +{% else %} +expect { + "Default user to own the driver interface*:" + { + send "{{ oracle_user }}\r" + exp_continue + } + "Default group to own the driver interface*:" + { + send "{{ dba_group }}\r" + exp_continue + } + "Start Oracle ASM library driver on boot*:" + { + send "y\r" + exp_continue + } + "Scan for Oracle ASM disks on boot*:" + { + send "y\r" + exp_continue + } +} +{% endif %} diff --git a/configure-host-oel7/templates/sudoers.j2 b/configure-host-oel7/templates/sudoers.j2 new file mode 100755 index 0000000..43a250a --- /dev/null +++ b/configure-host-oel7/templates/sudoers.j2 @@ -0,0 +1 @@ +{{ item }} ALL=(ALL) NOPASSWD: ALL diff --git a/configure-host-oel7/vars/linux_settings.yml b/configure-host-oel7/vars/linux_settings.yml new file mode 100755 index 0000000..fc0f608 --- /dev/null +++ b/configure-host-oel7/vars/linux_settings.yml @@ -0,0 +1,110 @@ +# Fichier de paramètres +--- + + master_node: true + os_family_supported: "RedHat" + os_min_supported_version: "6.4" + os_supported_version: "6" + disable_numa_boot: true + disable_selinux: true + + internet_connection: true + epel_rpm: "http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm" + configure_epel_repo: false + secure_configuration: false # faire une configuration securisee du system d exploitation + + + + asmlib_rpm: "http://download.oracle.com/otn_software/asmlib/oracleasmlib-2.0.4-1.el6.x86_64.rpm" + ol6_repo_file: public-yum-ol6.repo + repo_dir: /etc/yum.repos.d/ + + disable_numa_boot: true + percent_hugepages: 50 + configure_interconnect: false + configure_ssh: false + configure_host_disks: false + configure_etc_hosts: false + configure_cluster: false + device_persistence: asmlib + install_os_packages: false + disable_selinux: true + + +# pramètres de configuation sécurisée : + linux_secure_config: + - { name: net.ipv4.conf.all.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.all.secure_redirects, value: 0 } + - { name: net.ipv4.conf.default.secure_redirects, value: 0 } + - { name: net.ipv4.ip_forward, value: 0 } + - { name: net.ipv6.conf.all.accept_redirects, value: 0 } + - { name: net.ipv6.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.accept_source_route, value: 0 } + - { name: net.ipv6.conf.default.accept_source_route, value: 0 } + - { name: net.ipv6.conf.all.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.log_martians, value: 1 } + - { name: net.ipv4.conf.default.log_martians, value: 1 } + - { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 } + - { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 } + - { name: net.ipv6.conf.all.accept_ra, value: 0 } + - { name: net.ipv6.conf.default.accept_ra, value: 0 } + + +# packages à installer pour Linux + common_packages: + - bc + - bind-utils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - ethtool + - expect + - git + - htop + - lvm2 + - make + - module-init-tools + - mpfr + - multitail + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - nss-softokn-freebl + - ntp + - openssh-clients + - ppl + - procps + - readline + - rlwrap + - screen + - sysstat + - system-config-lvm + - tigervnc-server + - tree + - twm + - unzip + - wget + - vim + - xfsprogs + +# services Linux à désactiver : + linux_services: + - bluetooth + - cups + - gpm + - hidd + - hplip + - isdn + - sendmail + - smartd + - avahi-daemon + - NetworkManager + - rhnsd + - firstboot + - chronyd + - ip6tables + - iptables + - firewalld diff --git a/configure-host-oel7/vars/main.yml b/configure-host-oel7/vars/main.yml new file mode 100755 index 0000000..7d1156a --- /dev/null +++ b/configure-host-oel7/vars/main.yml @@ -0,0 +1,102 @@ +# Fichier de paramètres +--- + #---------------------------------------------------------------------- + # paramètres généraux + #---------------------------------------------------------------------- + internet_connection: true + configure_epel_repo: true + epel_rpm: "http://mirrors.ircam.fr/pub/fedora/epel/7/x86_64/Packages/e/epel-release-7-11.noarch.rpm" + + linux_version: "{{ ansible_distribution_major_version }}" + + #---------------------------------------------------------------------- + # Groupes et utilisateurs + #---------------------------------------------------------------------- + + oracle_groups: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + + + oracle_users: # Passwd :Oracle123 + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + grid_users: + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + #---------------------------------------------------------------------- + # ajouter les comptes oracle et grid au sudoers + #---------------------------------------------------------------------- + configure_oracle_sudo: true + + + #---------------------------------------------------------------------- + # paramètres du noyeau pour une installation Oracle + #---------------------------------------------------------------------- + oracle_sysconfig: + - { name: kernel.shmall, value: "{{ ((0.4 * ansible_memtotal_mb)*1024*1024)|round|int }}" } + - { name: kernel.shmmax, value: "{{ ((0.5 * ansible_memtotal_mb)*1024*1024)|round|int }}" } + - { name: kernel.shmmni, value: 4096 } + - { name: kernel.sem, value: "250 32000 100 128" } + - { name: fs.file-max, value: 6815744 } + - { name: fs.aio-max-nr, value: 1048576 } + - { name: net.ipv4.ip_local_port_range, value: "9000 65500" } + - { name: net.core.rmem_default, value: 262144 } + - { name: net.core.rmem_max, value: 4194304 } + - { name: net.core.wmem_default, value: 262144 } + - { name: net.core.wmem_max, value: 1048576 } + + + #---------------------------------------------------------------------- + # paramètres security limits pour une installation Oracle + #---------------------------------------------------------------------- + oracle_seclimits: + - "* soft nproc 2047" + - "* hard nproc 16384" + - "* soft nofile 1024" + - "* hard nofile 65536" + - "* soft memlock {{ ((0.9 * ansible_memtotal_mb)*1024*1024)|round|int }}" + - "* hard memlock {{ ((0.9 * ansible_memtotal_mb)*1024*1024)|round|int }}" + - "* soft stack 10240" + - "* hard stack 32768" + - "* soft core unlimited" + - "* hard core unlimited" + + #---------------------------------------------------------------------- + # packages linux necessaires avant d'installer Oracle + #---------------------------------------------------------------------- + oracle_packages: + - binutils + - compat-libcap1 + - gcc + - gcc-c++ + - glibc + - glibc-devel + - libaio + - libaio-devel + - libgcc + - libstdc++ + - libstdc++-devel + - libXi + - libXtst + - make + - sysstat + - ksh + - libXi*i686 + - libXtst*i686 + - libstdc++-devel*i686 + - libaio-devel*i686 + - libstdc++*i686 + - libgcc*i686 + - libaio*i686 + - glibc-devel*i686 + - glibc*i686 + - unixODBC + diff --git a/configure-host-oel7/vars/main.yml.court b/configure-host-oel7/vars/main.yml.court new file mode 100755 index 0000000..5aae3ab --- /dev/null +++ b/configure-host-oel7/vars/main.yml.court @@ -0,0 +1,7 @@ +# Fichier de paramètres +--- + + vars_files: + - linux_settings.yml # tous les parametres de configuration pour Linux + - oracle_users.yml # les comptes et groupes Oracle + - oracle_settings.yml # les parametres kernel et packages Oracle à installer diff --git a/configure-host-oel7/vars/oracle_settings.yml b/configure-host-oel7/vars/oracle_settings.yml new file mode 100755 index 0000000..b281ad7 --- /dev/null +++ b/configure-host-oel7/vars/oracle_settings.yml @@ -0,0 +1,112 @@ +# Fichier de paramètres +--- + + +# les répertoires pour l'installation Oracle + oracle_stage: /u01/stage + oracle_rsp_stage: "{{ oracle_stage }}/rsp" + oracle_version_db: 12.1.0.2 + oracle_base: /u01/app/oracle + home: dbhome_1 + oracle_home: "{{ oracle_base }}/product/{{ oracle_version_db }}/{{ home }}" + + +# paramètres du noyau + oracle_sysconfig: + - { name: kernel.shmall, value: "{{ ((0.4 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmax, value: "{{ ((0.5 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmni, value: 4096 } + - { name: kernel.sem, value: "250 32000 100 128" } + - { name: fs.file-max, value: 6815744 } + - { name: fs.aio-max-nr, value: 1048576 } + - { name: net.ipv4.ip_local_port_range, value: "9000 65500" } + - { name: net.core.rmem_default, value: 262144 } + - { name: net.core.rmem_max, value: 4194304 } + - { name: net.core.wmem_default, value: 262144 } + - { name: net.core.wmem_max, value: 1048576 } + - { name: vm.nr_hugepages, value: "{{ (((percent_hugepages/100) * ansible_memtotal_mb)/2)|round|int }}" } + +# Security limits + oracle_seclimits: + - "* soft nproc 2047" + - "* hard nproc 16384" + - "* soft nofile 1024" + - "* hard nofile 65536" + - "* soft memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* hard memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* soft stack 10240" + - "* hard stack 32768" + - "* soft core unlimited" + - "* hard core unlimited" + + +# Fichier de paramètres : packages ORACLE + + oracle_packages: + - bind-utils + - binutils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - compat-libstdc++*i686 + - compat-libstdc++-33 + - cpp + - ethtool + - gcc + - gcc-c++ + - glibc + - glibc*i686 + - glibc-devel + - glibc-headers + - kernel-headers + - kmod-oracleasm + - ksh + - libX11 + - libX11*i686 + - libXau + - libXau*i686 + - libXext + - libXi + - libXp + - libXt + - libXtst + - libaio + - libaio*i686 + - libaio-devel + - libaio-devel*i686 + - libgcc + - libselinux-python + - libstdc++ + - libstdc++*i686 + - libstdc++-devel + - libstdc++-devel*i686 + - libtool-ltdl + - libxcb + - libxcb*i686 + - make + - module-init-tools + - mpfr + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - ntp + - openssh-clients + - oracleasm-support + - parted + - ppl + - procps + - readline + - readline-devel + - sysstat + - twm + - unixODBC + - util-linux-ng + - vim-enhanced + - xdpyinfo + - xfsprogs + - xorg-x11-utils + - xorg-x11-xauth + - xorg-x11-xinit + - xsetroot + - xterm diff --git a/configure-host-oel7/vars/oracle_users.yml b/configure-host-oel7/vars/oracle_users.yml new file mode 100755 index 0000000..dff07ef --- /dev/null +++ b/configure-host-oel7/vars/oracle_users.yml @@ -0,0 +1,37 @@ +# Fichier de paramètres : les comptes Oracle +--- + +# Groupes et utilisateurs + + oracle_groups: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + + + oracle_users: # Passwd :Oracle123 + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + grid_users: + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + role_separation: true + oracle_user: oracle + grid_user: grid + configure_oracle_sudo: false + + oracle_user_home: "/home/{{ oracle_user }}" + grid_user_home: "/home/{{ grid_user }}" + oracle_group: oinstall + oper_group: oper + dba_group: dba + asmoper_group: asmoper + asmdba_group: asmdba + asmadmin_group: asmadmin + diff --git a/configure-host-oel7/vars/original.main b/configure-host-oel7/vars/original.main new file mode 100755 index 0000000..6804f77 --- /dev/null +++ b/configure-host-oel7/vars/original.main @@ -0,0 +1,278 @@ +# Fichier de paramètres +--- + + master_node: true + os_family_supported: "RedHat" + os_min_supported_version: "6.4" + os_supported_version: "6" + disable_numa_boot: true + disable_selinux: true + + internet_connection: false + epel_rpm: "http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm" + configure_epel_repo: true + secure_configuration: true # faire une configuration securisee du system d exploitation + + +# Groupes et utilisateurs + + oracle_groups: + - { group: asmdba, gid: 1004 } + - { group: asmoper, gid: 1005 } + - { group: asmadmin, gid: 1003 } + - { group: oinstall, gid: 1000} + - { group: dba, gid: 1001 } + - { group: backupdba, gid: 1006 } + - { group: oper, gid: 1002 } + - { group: dgdba, gid: 1007 } + - { group: kmdba, gid: 1008 } + + + oracle_users: # Passwd :Oracle123 + - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + grid_users: + - { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" } + + role_separation: true + oracle_user: oracle + grid_user: grid + configure_oracle_sudo: false + + oracle_user_home: "/home/{{ oracle_user }}" + grid_user_home: "/home/{{ grid_user }}" + oracle_group: oinstall + oper_group: oper + dba_group: dba + asmoper_group: asmoper + asmdba_group: asmdba + asmadmin_group: asmadmin + +# les répertoires pour l'installation Oracle + oracle_stage: /u01/stage + oracle_rsp_stage: "{{ oracle_stage }}/rsp" + oracle_version_db: 12.1.0.2 + oracle_base: /u01/app/oracle + home: dbhome_1 + oracle_home: "{{ oracle_base }}/product/{{ oracle_version_db }}/{{ home }}" + + ssh_keys: + - /tmp/id_rsa + - /tmp/id_rsa.pub + - /tmp/authorized_keys + + keyfile: /tmp/known_hosts + + asmlib_rpm: "http://download.oracle.com/otn_software/asmlib/oracleasmlib-2.0.4-1.el6.x86_64.rpm" + ol6_repo_file: public-yum-ol6.repo + repo_dir: /etc/yum.repos.d/ + + disable_numa_boot: true + percent_hugepages: 50 + configure_interconnect: false + oracle_ic_net: 3.3.3.{{ ansible_all_ipv4_addresses[0].split(".")[-1] }} + configure_ssh: false + configure_host_disks: false + configure_etc_hosts: false + configure_cluster: false + device_persistence: asmlib + install_os_packages: false + disable_selinux: true + +# paramètres du noyau + oracle_sysconfig: + - { name: kernel.shmall, value: "{{ ((0.4 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmax, value: "{{ ((0.5 * ansible_memtotal_mb)*1024)|round|int }}" } + - { name: kernel.shmmni, value: 4096 } + - { name: kernel.sem, value: "250 32000 100 128" } + - { name: fs.file-max, value: 6815744 } + - { name: fs.aio-max-nr, value: 1048576 } + - { name: net.ipv4.ip_local_port_range, value: "9000 65500" } + - { name: net.core.rmem_default, value: 262144 } + - { name: net.core.rmem_max, value: 4194304 } + - { name: net.core.wmem_default, value: 262144 } + - { name: net.core.wmem_max, value: 1048576 } + - { name: vm.nr_hugepages, value: "{{ (((percent_hugepages/100) * ansible_memtotal_mb)/2)|round|int }}" } + +# Security limits + oracle_seclimits: + - "* soft nproc 2047" + - "* hard nproc 16384" + - "* soft nofile 1024" + - "* hard nofile 65536" + - "* soft memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* hard memlock {{ ((0.9 * ansible_memtotal_mb)*1024)|round|int }}" + - "* soft stack 10240" + - "* hard stack 32768" + - "* soft core unlimited" + - "* hard core unlimited" + +# pramètres de configuation sécurisée : + linux_secure_config: + - { name: net.ipv4.conf.all.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.all.secure_redirects, value: 0 } + - { name: net.ipv4.conf.default.secure_redirects, value: 0 } + - { name: net.ipv4.ip_forward, value: 0 } + - { name: net.ipv6.conf.all.accept_redirects, value: 0 } + - { name: net.ipv6.conf.default.accept_redirects, value: 0 } + - { name: net.ipv4.conf.default.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.accept_source_route, value: 0 } + - { name: net.ipv6.conf.default.accept_source_route, value: 0 } + - { name: net.ipv6.conf.all.accept_source_route, value: 0 } + - { name: net.ipv4.conf.all.log_martians, value: 1 } + - { name: net.ipv4.conf.default.log_martians, value: 1 } + - { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 } + - { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 } + - { name: net.ipv6.conf.all.accept_ra, value: 0 } + - { name: net.ipv6.conf.default.accept_ra, value: 0 } + + +# Sets up filesystem on host. If storage_type=FS under oracle_databases, this is where the mapping between device/fs is described + host_fs_layout: + u01: + {mntp: /u01, device: /dev/sdb, vgname: vgora, pvname: /dev/sdb1, lvname: lvora, fstype: ext4} + +# ASM Diskgroups used for DB-storage. Should map to dict asm_storage_layout. + asm_diskgroups: # ASM Diskgroups used for DB-storage. Should map to dict asm_storage_layout. + - crs + - data + - fra + +# Mapping between device & ASMlib label. If storage_type=ASM under oracle_databases, +# this is where the mapping between device/asm-disk is described + asm_storage_layout: + crs: + - {device: /dev/sdc, asmlabel: CRS01} + data: + - {device: /dev/sdd, asmlabel: DATA01} + fra: + - {device: /dev/sde, asmlabel: FRA01 } + +# packages à installer pour Linux + common_packages: + - bc + - bind-utils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - ethtool + - expect + - git + - htop + - lvm2 + - make + - module-init-tools + - mpfr + - multitail + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - nss-softokn-freebl + - ntp + - openssh-clients + - ppl + - procps + - readline + - rlwrap + - screen + - sysstat + - system-config-lvm + - tigervnc-server + - tree + - twm + - unzip + - wget + - vim + - xfsprogs + +# services Linux à désactiver : + linux_services: + - bluetooth + - cups + - gpm + - hidd + - hplip + - isdn + - sendmail + - smartd + - avahi-daemon + - NetworkManager + - rhnsd + - firstboot + - chronyd + - ip6tables + - iptables + - firewalld + +# Fichier de paramètres : packages ORACLE + + oracle_packages: + - bind-utils + - binutils + - btrfs-progs + - cloog-ppl + - compat-libcap1 + - compat-libstdc++*i686 + - compat-libstdc++-33 + - cpp + - ethtool + - gcc + - gcc-c++ + - glibc + - glibc*i686 + - glibc-devel + - glibc-headers + - kernel-headers + - kmod-oracleasm + - ksh + - libX11 + - libX11*i686 + - libXau + - libXau*i686 + - libXext + - libXi + - libXp + - libXt + - libXtst + - libaio + - libaio*i686 + - libaio-devel + - libaio-devel*i686 + - libgcc + - libselinux-python + - libstdc++ + - libstdc++*i686 + - libstdc++-devel + - libstdc++-devel*i686 + - libtool-ltdl + - libxcb + - libxcb*i686 + - make + - module-init-tools + - mpfr + - ncurses-devel + - ncurses-libs + - nfs-utils + - nscd + - ntp + - openssh-clients + - oracleasm-support + - parted + - ppl + - procps + - readline + - readline-devel + - sysstat + - twm + - unixODBC + - util-linux-ng + - vim-enhanced + - xdpyinfo + - xfsprogs + - xorg-x11-utils + - xorg-x11-xauth + - xorg-x11-xinit + - xsetroot + - xterm diff --git a/hosts.oracle b/hosts.oracle new file mode 100644 index 0000000..13cfabe --- /dev/null +++ b/hosts.oracle @@ -0,0 +1,2 @@ +[local] +localhost ansible_connection=local diff --git a/readme.txt b/readme.txt new file mode 100644 index 0000000..cac7f49 --- /dev/null +++ b/readme.txt @@ -0,0 +1,26 @@ +ansible sur le poste à configurer +s'inspirer de l'exemple screen ! + +=== + +yum install -y wget bzip2 + +wget https://github.com/ownport/portable-ansible/releases/download/v0.4.2/portable-ansible-v0.4.2-py2.tar.bz2 +tar xvfj portable-ansible-v0.4.2-py2.tar.bz2 + +ln -s ansible ansible-playbook + +creer un fichier hosts.oracle avec le contenu suivant + +[local] +localhost ansible_connection=local + +scp mes playbooks dans /root + +merlin@Dell-E7440:~/scripts/configure_oracle $ scp -r * root@192.168.1.241:/root + +ou rsync : +merlin@Dell-E7440:~/scripts/configure_oracle $ rsync -av * root@192.168.1.241:/root + +python ansible-playbook book-config-oel-6-7.yml -i hosts.oracle +