diff --git a/CHANGELOG.md b/CHANGELOG.md index 88e45d00..66f33653 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -20,6 +20,12 @@ The **patch** part changes is incremented if multiple releases happen the same m ### Security +## [22.06.3] 2022-06-17 + +### Changed + +* evolinux-base: blacklist and do not install megaclisas-status package on incompatible servers + ## [22.06.2] 2022-06-10 ### Added diff --git a/evolinux-base/tasks/hardware.yml b/evolinux-base/tasks/hardware.yml index 2e68cc36..fefb8177 100644 --- a/evolinux-base/tasks/hardware.yml +++ b/evolinux-base/tasks/hardware.yml @@ -157,6 +157,43 @@ - "'Hewlett-Packard Company Smart Array' in raidmodel.stdout" - evolinux_packages_hardware_raid | bool +## LSI MegaRAID 12GSAS/PCIe Secure SAS39xx +# This is still incompatible with Debian + +- name: Check if PERC HBA11 device is present + shell: "lspci | grep -qE 'MegaRAID.*SAS39xx'" + check_mode: no + register: perc_hba11_search + failed_when: False + changed_when: False + tags: + - packages + +- name: MegaCLI SAS package must not be installed if PERC HBA11 is present + block: + - name: Disable harware RAID tasks + set_fact: + evolinux_packages_hardware_raid: False + + - name: blacklist mageclisas-status package + blockinfile: + dest: /etc/apt/preferences.d/0-blacklist + create: yes + marker: "## {mark} MEGACLISAS-STATUS BLACKLIST" + block: | + # DO NOT INSTALL THESE PACKAGES ON THIS SERVER + Package: megacli megaclisas-status + Pin: version * + Pin-Priority: -100 + + - name: Remove MegaCLI packages + apt: + name: + - megacli + - megaclisas-status + state: absent + when: perc_hba11_search.rc == 0 + - name: MegaCLI SAS package is present block: - name: HWRaid embedded GPG key is absent