Create RedHat_9.yml
This commit is contained in:
Yacine31
194
roles/oracle-db-preinstall/vars/RedHat_9.yml
Normal file
194
roles/oracle-db-preinstall/vars/RedHat_9.yml
Normal file
@@ -0,0 +1,194 @@
|
||||
# Fichier de paramètres pour Oracle Linux 9
|
||||
---
|
||||
|
||||
#----------------------------------------------------------------------
|
||||
# packages linux nécessaires pour travailler
|
||||
#----------------------------------------------------------------------
|
||||
linux_packages:
|
||||
- bc
|
||||
- bind-libs
|
||||
- bind-libs-lite
|
||||
- bind-license
|
||||
- bind-utils
|
||||
- binutils
|
||||
- chrony
|
||||
- compat-openssl11
|
||||
- elfutils-libelf
|
||||
- elfutils-libelf-devel
|
||||
- fontconfig
|
||||
- fontconfig-devel
|
||||
- fstrm
|
||||
- gcc
|
||||
- glibc
|
||||
- glibc-devel
|
||||
- glibc-devel.i686
|
||||
- glibc-headers
|
||||
- gssproxy
|
||||
- kernel-headers
|
||||
- keyutils
|
||||
- ksh
|
||||
- libaio
|
||||
- libaio-devel
|
||||
- libaio-devel.i686
|
||||
- libaio.i686
|
||||
- libasan
|
||||
- libdmx
|
||||
- libgcc
|
||||
- libgcc.i686
|
||||
- libibverbs
|
||||
- libICE
|
||||
- liblsan
|
||||
- libmaxminddb
|
||||
- libnsl
|
||||
- libpkgconf
|
||||
- librdmacm
|
||||
- libSM
|
||||
- libstdc++
|
||||
- libstdc++-devel
|
||||
- libstdc++-devel.i686
|
||||
- libstdc++.i686
|
||||
- libvirt-libs
|
||||
- libX11
|
||||
- libX11-common
|
||||
- libX11-xcb
|
||||
- libXau
|
||||
- libxcb
|
||||
- libXcomposite
|
||||
- libxcrypt-compat
|
||||
- libxcrypt-devel
|
||||
- libXext
|
||||
- libXi
|
||||
- libXi.i686
|
||||
- libXinerama
|
||||
- libXmu
|
||||
- libXrandr
|
||||
- libXrender
|
||||
- libXt
|
||||
- libXtst
|
||||
- libXtst.i686
|
||||
- libXv
|
||||
- libXxf86dga
|
||||
- libXxf86vm
|
||||
- lm_sensors-libs
|
||||
- make
|
||||
- mlocate
|
||||
- net-snmp
|
||||
- net-tools
|
||||
- nfs-utils
|
||||
- nscd
|
||||
- numactl
|
||||
- perl
|
||||
- pkgconf
|
||||
- pkgconf-m4
|
||||
- pkgconf-pkg-config
|
||||
- policycoreutils
|
||||
- policycoreutils-python-utils
|
||||
- protobuf-c
|
||||
- psmisc
|
||||
- python3-bind
|
||||
- python3-pyyaml
|
||||
- quota
|
||||
- quota-nls
|
||||
- rpcbind
|
||||
- rsync
|
||||
- rsyslog
|
||||
- smartmontools
|
||||
- sysstat
|
||||
- tar
|
||||
- tmux
|
||||
- tree
|
||||
- unixODBC
|
||||
- unzip
|
||||
- vim
|
||||
- vim-enhanced
|
||||
- wget
|
||||
- xorg-x11-utils
|
||||
- xorg-x11-xauth
|
||||
# - htop
|
||||
# - libverto-libevent
|
||||
# - libXxf86misc
|
||||
# - rlwrap
|
||||
# - unixODBC-devel
|
||||
|
||||
|
||||
#----------------------------------------------------------------------
|
||||
# paramètres du noyeau pour une installation Oracle
|
||||
#----------------------------------------------------------------------
|
||||
oracle_sysconfig:
|
||||
# shmall = 50% de la RAM pour les SGA Oracle, divisé par PAGE_SIZE (getconf PAGE_SIZE = 4096)
|
||||
# on suppose que 60% de la RAM sera affectée aux SGA
|
||||
- { name: fs.file-max, value: 6815744 }
|
||||
- { name: fs.aio-max-nr, value: 1048576 }
|
||||
- { name: kernel.sem, value: "250 32000 100 128" }
|
||||
- { name: kernel.shmmni, value: 4096 }
|
||||
# setting for kernel.shmall is 1073741824 on x86_64
|
||||
- { name: kernel.shmall, value: 1073741824 }
|
||||
# - { name: kernel.shmall, value: "{{ ((0.6 * ansible_memtotal_mb)*1024*1024/4096)|round|int }}" }
|
||||
# setting for kernel.shmmax is 4398046511104 on x86_64
|
||||
- { name: kernel.shmmax, value: 4398046511104 }
|
||||
# - { name: kernel.shmmax, value: "{{ ((0.8 * ansible_memtotal_mb)*1024*1024)|round|int }}" }
|
||||
- { name: net.core.rmem_default, value: 262144 }
|
||||
- { name: net.core.rmem_max, value: 4194304 }
|
||||
- { name: net.core.wmem_default, value: 262144 }
|
||||
- { name: net.core.wmem_max, value: 1048576 }
|
||||
- { name: net.ipv4.conf.all.rp_filter, value: 2 }
|
||||
- { name: net.ipv4.conf.default.rp_filter, value: 2 }
|
||||
- { name: net.ipv4.ip_local_port_range, value: "9000 65500" }
|
||||
- { name: vm.swappiness, value: 10 }
|
||||
# vm.min_free_kbytes value (Kb) MAX(1GB * number_numa_nodes, 0.5% * total_memory)
|
||||
- { name: vm.min_free_kbytes, value: "{{ ((1048576, ((0.5/100 * ansible_memtotal_mb)*1024)|round|int) | max) }}" }
|
||||
# - { name: vm.min_free_kbytes, value: 1048576 }
|
||||
- { name: vm.hugetlb_shm_group, value: 1001 }
|
||||
# - { name: vm.nr_hugepages, value: "{{ (((percent_hugepages/100) * ansible_memtotal_mb)/2)|round|int }}" }
|
||||
# Orabug 19212317
|
||||
- { name: kernel.panic_on_oops, value: 1 }
|
||||
|
||||
#----------------------------------------------------------------------
|
||||
# paramètres security limits pour une installation Oracle
|
||||
#----------------------------------------------------------------------
|
||||
oracle_seclimits:
|
||||
# setting for nofile soft limit is 1024
|
||||
- "* soft nofile 1024"
|
||||
# setting for nofile hard limit is 65536
|
||||
- "* hard nofile 65536"
|
||||
# setting for nproc soft limit is 16384
|
||||
- "* soft nproc 16384"
|
||||
# setting for nproc hard limit is 16384
|
||||
- "* hard nproc 16384"
|
||||
# setting for memlock soft limit is maximum of 128GB on x86_64 or 3GB on x86 OR 90% of RAM
|
||||
# - "* soft memlock 134217728"
|
||||
- "* soft memlock {{ [((0.9 * ansible_memtotal_mb)*1024)|round|int,134217728] | max }}"
|
||||
# setting for memlock hard limit is maximum of 128GB on x86_64 or 3GB on x86 OR 90% of RAM
|
||||
# - "* hard memlock 134217728"
|
||||
- "* hard memlock {{ [((0.9 * ansible_memtotal_mb)*1024)|round|int,134217728] | max }}"
|
||||
# setting for stack soft limit is 10240KB
|
||||
- "* soft stack 10240"
|
||||
# setting for stack hard limit is 32768KB
|
||||
- "* hard stack 32768"
|
||||
- "* soft data unlimited"
|
||||
- "* hard data unlimited"
|
||||
- "* soft core unlimited"
|
||||
- "* hard core unlimited"
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# pramètres de configuation sécurisée :
|
||||
#---------------------------------------------------------------------
|
||||
linux_secure_config:
|
||||
- { name: net.ipv4.conf.all.accept_redirects, value: 0 }
|
||||
- { name: net.ipv4.conf.all.accept_source_route, value: 0 }
|
||||
- { name: net.ipv4.conf.all.log_martians, value: 1 }
|
||||
- { name: net.ipv4.conf.all.secure_redirects, value: 0 }
|
||||
- { name: net.ipv4.conf.default.accept_redirects, value: 0 }
|
||||
- { name: net.ipv4.conf.default.accept_source_route, value: 0 }
|
||||
- { name: net.ipv4.conf.default.log_martians, value: 1 }
|
||||
- { name: net.ipv4.conf.default.secure_redirects, value: 0 }
|
||||
- { name: net.ipv4.icmp_echo_ignore_broadcasts, value: 1 }
|
||||
- { name: net.ipv4.icmp_ignore_bogus_error_responses, value: 1 }
|
||||
- { name: net.ipv4.ip_forward, value: 0 }
|
||||
- { name: net.ipv6.conf.all.accept_ra, value: 0 }
|
||||
- { name: net.ipv6.conf.all.accept_redirects, value: 0 }
|
||||
- { name: net.ipv6.conf.all.accept_source_route, value: 0 }
|
||||
- { name: net.ipv6.conf.default.accept_ra, value: 0 }
|
||||
- { name: net.ipv6.conf.default.accept_redirects, value: 0 }
|
||||
- { name: net.ipv6.conf.default.accept_source_route, value: 0 }
|
||||
|
||||
Reference in New Issue
Block a user