217 lines
6.6 KiB
YAML
Executable File
217 lines
6.6 KiB
YAML
Executable File
# Fichier de paramètres
|
|
---
|
|
#----------------------------------------------------------------------
|
|
# paramètres généraux
|
|
#----------------------------------------------------------------------
|
|
|
|
linux_version: "{{ ansible_distribution_major_version }}"
|
|
|
|
disable_numa_boot: true
|
|
disable_selinux: true
|
|
|
|
secure_configuration: false # faire une configuration securisee du system d exploitation
|
|
|
|
disable_numa_boot: true
|
|
configure_cluster: false
|
|
install_os_packages: true
|
|
disable_selinux: true
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
# Groupes et utilisateurs
|
|
#----------------------------------------------------------------------
|
|
|
|
oracle_groups:
|
|
- { group: oinstall, gid: 1000}
|
|
- { group: dba, gid: 1001 }
|
|
- { group: oper, gid: 1002 }
|
|
- { group: asmadmin, gid: 1003 }
|
|
- { group: asmdba, gid: 1004 }
|
|
- { group: asmoper, gid: 1005 }
|
|
- { group: backupdba, gid: 1006 }
|
|
- { group: dgdba, gid: 1007 }
|
|
- { group: kmdba, gid: 1008 }
|
|
|
|
|
|
oracle_users: # Passwd :Oracle123
|
|
- { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" }
|
|
|
|
grid_users:
|
|
- { username: grid, uid: 1000, primgroup: oinstall, othergroups: "asmadmin,asmdba,asmoper,dba", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0" }
|
|
|
|
#----------------------------------------------------------------------
|
|
# ajouter les comptes oracle et grid au sudoers
|
|
#----------------------------------------------------------------------
|
|
configure_oracle_sudo: true
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
# paramètres du noyeau pour une installation Oracle
|
|
#----------------------------------------------------------------------
|
|
oracle_sysconfig:
|
|
- { name: kernel.shmall, value: "{{ ((0.4 * ansible_memtotal_mb)*1024*1024)|round|int }}" }
|
|
- { name: kernel.shmmax, value: "{{ ((0.5 * ansible_memtotal_mb)*1024*1024)|round|int }}" }
|
|
- { name: kernel.shmmni, value: 4096 }
|
|
- { name: kernel.sem, value: "250 32000 100 128" }
|
|
- { name: fs.file-max, value: 6815744 }
|
|
- { name: fs.aio-max-nr, value: 1048576 }
|
|
- { name: net.ipv4.ip_local_port_range, value: "9000 65500" }
|
|
- { name: net.core.rmem_default, value: 262144 }
|
|
- { name: net.core.rmem_max, value: 4194304 }
|
|
- { name: net.core.wmem_default, value: 262144 }
|
|
- { name: net.core.wmem_max, value: 1048576 }
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
# paramètres security limits pour une installation Oracle
|
|
#----------------------------------------------------------------------
|
|
oracle_seclimits:
|
|
- "* soft nproc 2047"
|
|
- "* hard nproc 16384"
|
|
- "* soft nofile 1024"
|
|
- "* hard nofile 65536"
|
|
- "* soft memlock {{ ((0.9 * ansible_memtotal_mb)*1024*1024)|round|int }}"
|
|
- "* hard memlock {{ ((0.9 * ansible_memtotal_mb)*1024*1024)|round|int }}"
|
|
- "* soft stack 10240"
|
|
- "* hard stack 32768"
|
|
- "* soft core unlimited"
|
|
- "* hard core unlimited"
|
|
|
|
# services Linux à désactiver :
|
|
linux_services:
|
|
- bluetooth
|
|
- cups
|
|
- gpm
|
|
- hidd
|
|
- hplip
|
|
- isdn
|
|
- sendmail
|
|
- smartd
|
|
- avahi-daemon
|
|
- rhnsd
|
|
- firstboot
|
|
- chronyd
|
|
- ip6tables
|
|
- iptables
|
|
- firewalld
|
|
|
|
# pramètres de configuation sécurisée :
|
|
linux_secure_config:
|
|
- { name: net.ipv4.conf.all.accept_redirects, value: 0 }
|
|
- { name: net.ipv4.conf.default.accept_redirects, value: 0 }
|
|
- { name: net.ipv4.conf.all.secure_redirects, value: 0 }
|
|
- { name: net.ipv4.conf.default.secure_redirects, value: 0 }
|
|
- { name: net.ipv4.ip_forward, value: 0 }
|
|
- { name: net.ipv6.conf.all.accept_redirects, value: 0 }
|
|
- { name: net.ipv6.conf.default.accept_redirects, value: 0 }
|
|
- { name: net.ipv4.conf.default.accept_source_route, value: 0 }
|
|
- { name: net.ipv4.conf.all.accept_source_route, value: 0 }
|
|
- { name: net.ipv6.conf.default.accept_source_route, value: 0 }
|
|
- { name: net.ipv6.conf.all.accept_source_route, value: 0 }
|
|
- { name: net.ipv4.conf.all.log_martians, value: 1 }
|
|
- { name: net.ipv4.conf.default.log_martians, value: 1 }
|
|
- { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 }
|
|
- { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 }
|
|
- { name: net.ipv6.conf.all.accept_ra, value: 0 }
|
|
- { name: net.ipv6.conf.default.accept_ra, value: 0 }
|
|
|
|
#----------------------------------------------------------------------
|
|
# packages linux necessaires avant d'installer Oracle
|
|
#----------------------------------------------------------------------
|
|
oracle_packages:
|
|
- bind-utils
|
|
- binutils
|
|
- btrfs-progs
|
|
- cloog-ppl
|
|
- compat-libcap1
|
|
- compat-libstdc++*i686
|
|
- compat-libstdc++-33
|
|
- cpp
|
|
- ethtool
|
|
- gcc
|
|
- gcc-c++
|
|
- glibc
|
|
- glibc*i686
|
|
- glibc-devel
|
|
- glibc-headers
|
|
- kernel-headers
|
|
- kmod-oracleasm
|
|
- ksh
|
|
- libX11
|
|
- libX11*i686
|
|
- libXau
|
|
- libXau*i686
|
|
- libXext
|
|
- libXi
|
|
- libXp
|
|
- libXt
|
|
- libXtst
|
|
- libaio
|
|
- libaio*i686
|
|
- libaio-devel
|
|
- libaio-devel*i686
|
|
- libgcc
|
|
- libselinux-python
|
|
- libstdc++
|
|
- libstdc++*i686
|
|
- libstdc++-devel
|
|
- libstdc++-devel*i686
|
|
- libtool-ltdl
|
|
- libxcb
|
|
- libxcb*i686
|
|
- make
|
|
- module-init-tools
|
|
- mpfr
|
|
- ncurses-devel
|
|
- ncurses-libs
|
|
- nfs-utils
|
|
- nscd
|
|
- ntp
|
|
- openssh-clients
|
|
- oracleasm-support
|
|
- parted
|
|
- ppl
|
|
- procps
|
|
- readline
|
|
- readline-devel
|
|
- sysstat
|
|
- twm
|
|
- unixODBC
|
|
- util-linux-ng
|
|
- vim-enhanced
|
|
- xdpyinfo
|
|
- xfsprogs
|
|
- xorg-x11-utils
|
|
- xorg-x11-xauth
|
|
- xorg-x11-xinit
|
|
- xsetroot
|
|
- xterm
|
|
# - binutils
|
|
# - compat-libcap1
|
|
# - gcc
|
|
# - gcc-c++
|
|
# - glibc
|
|
# - glibc-devel
|
|
# - libaio
|
|
# - libaio-devel
|
|
# - libgcc
|
|
# - libstdc++
|
|
# - libstdc++-devel
|
|
# - libXi
|
|
# - libXtst
|
|
# - make
|
|
# - sysstat
|
|
# - ksh
|
|
# - libXi*i686
|
|
# - libXtst*i686
|
|
# - libstdc++-devel*i686
|
|
# - libaio-devel*i686
|
|
# - libstdc++*i686
|
|
# - libgcc
|
|
# - libgcc*i686
|
|
# - libaio*i686
|
|
# - glibc-devel*i686
|
|
# - glibc*i686
|
|
# - unixODBC
|
|
|