Commit Graph

73 Commits

Author SHA1 Message Date
William Hirigoyen 41897f4c62 bind: improve reload script
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2670|2|2668|2|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/442//ansiblelint">Evolix » ansible-roles » unstable #442</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-12-29 12:12:39 +01:00
David Prevot 95610e16be bind: allow bullseye and bookworm
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2667|0|2667|0|:zzz: Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-12-12 17:11:47 +01:00
David Prevot 066a66eb4b [minor] drop extra line
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2653|5|2648|6|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/415//ansiblelint">Evolix » ansible-roles » unstable #415</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-11-30 16:45:08 +01:00
David Prevot 33d22b2614 bind: Bind mount for Bookworm 2023-11-21 11:21:31 +01:00
David Prevot 3bd87906ce bind: Adapt chroot-bind for Bookworm 2023-11-21 09:04:57 +01:00
David Prevot 9cedf84dae bind: Group accessibility for /var/chroot-bind 2023-11-21 09:04:57 +01:00
David Prevot 7ad55027da bind: Adapt apparmor rules as in https://wiki.debian.org/Bind9 2023-11-21 09:04:57 +01:00
David Prevot c71521acc3 bind: Adapt chroot-bind for Buster 2023-11-21 09:04:57 +01:00
David Prevot 8993242b2c bind: /etc/default/bind9 has been renamed as /etc/default/named
Since Bullseye (Debian 11)
2023-11-21 09:04:57 +01:00
William Hirigoyen 6cd4048a0c bind: add todo to reload-zone script
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2647|5|2642|4|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/354//ansiblelint">Evolix » ansible-roles » unstable #354</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-09-20 14:28:54 +02:00
William Hirigoyen ef642e564e bind: Add reload-zone helper
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2598|2|2596|4|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/300//ansiblelint">Evolix » ansible-roles » unstable #300</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-07-21 16:19:26 +02:00
Jérémy Lecour 00fe225a3c
force: [yes,no] → force [true,false]
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2615|7|2608|177|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/278//ansiblelint">Evolix » ansible-roles » unstable #278</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-06-28 13:25:30 +02:00
Jérémy Lecour ee21973371 Use FQCN
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2777|524|2253|2462|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/223//ansiblelint">Evolix » ansible-roles » unstable #223</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
Fully Qualified Collection Name
2023-03-20 23:33:19 +01:00
Jérémy Lecour d366683acc bind: jinja syntax
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-02-28 10:12:38 +01:00
Jérémy Lecour b2c215eef0 formatting 2023-02-26 21:32:51 +01:00
Jérémy Lecour 8cbe837147 bind: refactor role
gitea/ansible-roles/pipeline/head This commit looks good Details
* queries log can be enabled or disabled
* split tasks
* check if AppArmor is present
* don't install Munin plugin whose data file is not present
* remove example ACL in authoritative configuration
2023-02-21 19:01:01 +01:00
William Hirigoyen cd8a812288 bind: fix fail in check mode
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-02-21 15:14:05 +01:00
Jérémy Lecour 21a4f76330 bind: use systemd module 2023-02-21 15:08:02 +01:00
Jérémy Lecour 7a0e0d81d6 Proper jinja spacing
gitea/ansible-roles/pipeline/head This commit looks good Details
2022-12-28 09:03:37 +01:00
Jérémy Lecour 8eae5bba63 Use systemd module instead of command 2022-12-28 09:02:17 +01:00
Jérémy Lecour 0fe0244116 Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
Jérémy Lecour 7dc6f0b849 remove trailing whitespaces 2021-05-13 15:23:39 +02:00
Jérémy Lecour 2ed77c60f0 Improve Ansible syntax
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Patrick Marchand e5511eafc6 Revert changes to bind log path from apparmor fix
continuous-integration/drone/push Build is passing Details
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand 7da22e243e Changed log directory for bind9
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Patrick Marchand d5731f90e0 Merge branch 'bind9_evocheck_fix' into unstable
continuous-integration/drone/push Build is passing Details
2020-03-10 13:48:52 -04:00
Patrick Marchand 131004136e Fix mistake in bind logrotate template name
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is failing Details
Just a minor typo, but stops it from running.
2020-01-14 15:15:58 +01:00
Jérémy Lecour e04d881988 replace "with_items" in apt modules 2019-12-31 16:18:56 +01:00
Patrick Marchand cf8cca745e hardcode chrooted bind variables
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is failing Details
The current chroot-bind.sh is legacy code that cannot be migrated
without a proper understanding of it's historical context. This
context might still apply and this script is still used on a variety
of new and old machines. By hardcoding the paths when the user
requests a chroot, we limit possible breakage.
2019-11-26 17:17:48 -05:00
Patrick Marchand 5008b79ef5 Remove remaining hardcoded log paths from bind role
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is failing Details
We had variables for the log paths, but these were not being used
by all templates.
2019-11-26 14:04:20 -05:00
Patrick Marchand 7728f5f0c5 Made sure munin and logrotate use the proper path for bind logs
Not all code paths made sure that the chroot was taken into account.
2019-11-26 14:02:28 -05:00
Patrick Marchand b7a223dbdd use yes / no instead of True / False for certain flags in bind role
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is failing Details
2019-11-26 11:58:42 -05:00
Patrick Marchand 3ede484242 Standardization of booleans for bind role
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is failing Details
2019-11-26 11:53:05 -05:00
Patrick Marchand 839db42c81 Revert "yaml lint and quoting standardisation for bind role"
This reverts commit 6118dda7c9.
2019-11-26 11:48:21 -05:00
Patrick Marchand 6118dda7c9 yaml lint and quoting standardisation for bind role
continuous-integration/drone/push Build encountered an error Details
continuous-integration/drone/pr Build encountered an error Details
2019-10-09 12:15:55 -04:00
Patrick Marchand 2bbebded9e Migrated bind role to python booleans 2019-10-09 12:07:14 -04:00
Patrick Marchand c6804e73e7 Adapted the bind role to respect the evocheck warnings
The required munin plugins and the logging necessary for them to work is
now activated depending on the type of resolver and the logrotate file is
changed from bind to bind9.
2019-10-09 11:54:30 -04:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Jérémy Lecour 77aeb60544 bind: chroot-bind.sh must not be executed in check mode 2018-08-21 18:46:16 +02:00
Jérémy Lecour 215d83f0b4 bind: keep 52 weeks of logs 2017-12-28 11:27:36 +01:00
Gregory Colpart 3b78613b2e Big review of role Bind, sync with https://wiki.evolix.org/HowtoBind 2017-07-22 18:40:00 +02:00
Jérémy Lecour 8505bb9d3c … so the backup is not needed anymore 2017-07-18 19:43:28 +02:00
Jérémy Lecour 20c575ee1e named.conf.options is managed by ansible 2017-07-18 19:42:54 +02:00
Jérémy Lecour 0c2170cf5c Remove some backups, again 2017-07-18 19:38:03 +02:00
Jérémy Lecour 639a4baf75 Bind: use the chroot variable for Munin 2017-07-17 14:45:36 +02:00
Gabriel Periard-Tremblay 87ebadcadd Kitchen: Change base image to evolix/ansible 2017-06-02 08:38:08 -04:00
Jérémy Lecour 2413539529 bind: fix rights for named.conf.options 2017-04-20 13:54:35 +02:00
Jérémy Lecour 33314828b1 Change Ansible version used by ansible-kitchen 2017-04-19 17:48:02 +02:00
Tristan PILAT e864718c1e Add bind's munin plugin configuration option file 2017-04-13 17:26:51 +02:00