gadmin/gsb2023
0
0
Fork 1
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

recup

Browse Source 
Merge branch 'main' of https://gitea.lyc-lecastel.fr/gadmin/gsb2023
This commit is contained in:
Anas Bouzbakh 2023-01-12 09:38:13 +01:00
commit 073c529f19
9 changed files with 56 additions and 52 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
README.md
View File

@ -1,9 +1,14 @@
# gsb2023 # gsb2023
2023-01-06
Environnement et playbooks ansible pour le projet GSB 2023 Environnement et playbooks ansible pour le projet GSB 2023
## Quickstart ## Quickstart
prérequis : une machine Debian Bullseye prérequis :
* une machine Debian Bullseye
* VirtualBox
## Les machines ## Les machines
@ -20,7 +25,7 @@ prérequis : une machine Debian Bullseye
## Installation ## Installation
On utilisera l'image de machine virtuelle suivante : On utilisera l'image de machine virtuelle suivante :
* **debian-bullseye-2023a.ova** (2022-05-07) * **debian-bullseye-2023a.ova** (2023-01-06)
* Debian Bullseye 11 - 2 cartes - 1 Go - stockage 20 Go * Debian Bullseye 11 - 2 cartes - 1 Go - stockage 20 Go
@ -35,7 +40,7 @@ On utilisera l'image de machine virtuelle suivante :
bash inst-depl bash inst-depl
cd /var/www/html/gsbstore cd /var/www/html/gsbstore
bash getall bash getall
cd /root/tools/ansible/gsb022/pre cd /root/tools/ansible/gsb023/pre
bash gsbboot bash gsbboot
cd .. ; bash pull-config cd .. ; bash pull-config
``` ```
@ -51,7 +56,7 @@ On utilisera l'image de machine virtuelle suivante :
- cloner le dépot : - cloner le dépot :
```shell ```shell
mkdir -p tools/ansible ; cd tools/ansible mkdir -p tools/ansible ; cd tools/ansible
git clone https://gitea.lyc-lecastel.fr/gadmin/gsb2022.git git clone https://gitea.lyc-lecastel.fr/gadmin/gsb2023.git
cd gsb2023/pre cd gsb2023/pre
export DEPL=192.168.99.99 export DEPL=192.168.99.99
bash gsbboot bash gsbboot

2
goss/r-ext.yaml
View File

@ -34,8 +34,6 @@ interface:
- 192.168.100.254/24 - 192.168.100.254/24
enp0s9: enp0s9:
exists: true exists: true
addrs:
- 192.168.0.38/24
enp0s16: enp0s16:
exists: true exists: true
addrs: addrs:

8
goss/s-adm.yaml
View File

@ -16,10 +16,6 @@ port:
listening: true listening: true
ip: ip:
- '::' - '::'
tcp6:8080:
listening: true
ip:
- '::'
udp:53: udp:53:
listening: true listening: true
ip: ip:
@ -45,7 +41,6 @@ service:
user: user:
dnsmasq: dnsmasq:
exists: true exists: true
uid: 109
gid: 65534 gid: 65534
groups: groups:
- nogroup - nogroup
@ -54,7 +49,6 @@ user:
group: group:
ssh: ssh:
exists: true exists: true
gid: 111
command: command:
/sbin/sysctl net.ipv4.ip_forward: /sbin/sysctl net.ipv4.ip_forward:
exit-status: 0 exit-status: 0
@ -65,8 +59,6 @@ command:
dns: dns:
depl.sio.lan: depl.sio.lan:
resolveable: true resolveable: true
addrs:
- 10.121.38.10
timeout: 500 timeout: 500
process: process:
dnsmasq: dnsmasq:

27
goss/s-mon.yaml
View File

@ -1,26 +1,27 @@
file: file:
/etc/icinga/htpasswd.users: /etc/nagios4/htdigest.users:
exists: true exists: true
mode: "0644" mode: "0640"
size: 26 owner: nagios
owner: root group: www-data
group: root
filetype: file filetype: file
contains: [] contains: [nagiosadmin]
package: package:
apache2: apache2:
installed: true installed: true
nagios-snmp-plugins: nagios-snmp-plugins:
installed: true installed: true
icinga: nagios4:
installed: true installed: true
snmp: snmp:
installed: true installed: true
python3-passlib:
installed: true
port: port:
tcp6:80: tcp:80:
listening: true listening: true
ip: ip:
- '::' - 0.0.0.0
udp:514: udp:514:
listening: true listening: true
ip: ip:
@ -29,7 +30,7 @@ service:
apache2: apache2:
enabled: true enabled: true
running: true running: true
icinga: nagios4:
enabled: true enabled: true
running: true running: true
command: command:
@ -42,19 +43,19 @@ command:
process: process:
apache2: apache2:
running: true running: true
icinga: nagios4:
running: true running: true
interface: interface:
enp0s3: enp0s3:
exists: true exists: true
addrs: addrs:
- 192.168.99.8/24 - 192.168.99.104/24
enp0s8: enp0s8:
exists: true exists: true
addrs: addrs:
- 172.16.0.8/24 - 172.16.0.8/24
http: http:
http://localhost/icinga: http://localhost/nagios4:
status: 401 status: 401
allow-insecure: false allow-insecure: false
no-follow-redirects: false no-follow-redirects: false

2
pull-config
View File

@ -1,7 +1,7 @@
#!/bin/bash #!/bin/bash
if [ -z ${UREP+x} ]; then if [ -z ${UREP+x} ]; then
UREP=https://gitea.lyc-lecastel.fr/gadmin/gsb2022.git UREP=https://gitea.lyc-lecastel.fr/gadmin/gsb2023.git
fi fi
dir=/root/tools/ansible dir=/root/tools/ansible

6
roles/goss/tasks/main.yml
View File

@ -6,10 +6,10 @@
- name: install goss sur machine standard - name: install goss sur machine standard
get_url: get_url:
url: "{{ depl_url }}/{{ depl_goss }}" url: "{{ depl_url }}/{{ depl_goss }}"
dest: /usr/local/bin/{{ depl_goss }} dest: /usr/local/bin/{{ depl_goss }}
mode: 0755 mode: 0755
when: gossbin.stat.exists == False and ansible_hostname != "s-adm" when: gossbin.stat.exists == false and ansible_hostname != "s-adm"
- name: install goss sur s-adm - name: install goss sur s-adm
copy: copy:
@ -17,5 +17,5 @@
dest: /usr/local/bin/{{ depl_goss }} dest: /usr/local/bin/{{ depl_goss }}
mode: 0755 mode: 0755
remote_src: yes remote_src: yes
when: gossbin.stat.exists == False and ansible_hostname == "s-adm" when: gossbin.stat.exists == false and ansible_hostname == "s-adm"

4
roles/post/files/interfaces.s-mon
View File

@ -1,7 +1,7 @@
# This file describes the network interfaces available on your system # This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5). # and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/* #source /etc/network/interfaces.d/*
# The loopback network interface # The loopback network interface
auto lo auto lo
@ -10,7 +10,7 @@ iface lo inet loopback
# cote n-adm # cote n-adm
allow-hotplug enp0s3 allow-hotplug enp0s3
iface enp0s3 inet static iface enp0s3 inet static
address 192.168.99.104/24 address 192.168.99.8/24
gateway 192.168.99.99 gateway 192.168.99.99
# Cote n-infra # Cote n-infra

2
roles/post/files/interfaces.s-nas
View File

@ -1,4 +1,4 @@
source /etc/network/interfaces.d/* #source /etc/network/interfaces.d/*
# The loopback network interface # The loopback network interface
auto lo auto lo

32
scripts/mkvm
View File

@ -1,7 +1,9 @@
#!/bin/bash #!/bin/bash
ovarelease="2023a" ovarelease="2023a"
ovafogrelease="2023a"
ovafile="$HOME/Téléchargements/debian-bullseye-gsb-${ovarelease}.ova" ovafile="$HOME/Téléchargements/debian-bullseye-gsb-${ovarelease}.ova"
ovafilefog="$HOME/Téléchargements/debian-buster-gsb-${ovafogrelease}.ova"
usage () { usage () {
@ -12,27 +14,31 @@ usage () {
} }
create_vm () { create_vm () {
nom=$1 nom="$1"
if [[ ! -r "${ovafile}" ]]; then nomova=${ovafile}
echo "$0 : erreur ouverture fichier ${ovafile} ..." if [[ "${nom}" == "s-fog" ]] ; then
nomova="${ovafilefog}"
fi
if [[ ! -r "${nomova}" ]]; then
echo "$0 : erreur ouverture fichier ${nomova} ..."
exit 3 exit 3
fi fi
vboxmanage import "${ovafile}" --vsys 0 --vmname "${nom}" vboxmanage import "${nomova}" --vsys 0 --vmname "${nom}"
} }
setif () { setif () {
VBoxManage modifyvm $1 --nic${2} intnet VBoxManage modifyvm "$1" --nic"${2}" intnet
VBoxManage modifyvm $1 --intnet${2} $3 VBoxManage modifyvm "$1" --intnet"${2}" "$3"
VBoxManage modifyvm $1 --nictype${2} 82540EM VBoxManage modifyvm "$1" --nictype"${2}" 82540EM
VBoxManage modifyvm $1 --cableconnected${2} on VBoxManage modifyvm "$1" --cableconnected"${2}" on
VBoxManage modifyvm $1 --nicpromisc${2} allow-all VBoxManage modifyvm "$1" --nicpromisc"${2}" allow-all
} }
create_if () { create_if () {
# enp0s3 # enp0s3
setif $1 1 $2 setif "$1" 1 "$2"
setif $1 2 $3 setif "$1" 2 "$3"
#(enp0s8) #(enp0s8)
} }
@ -41,7 +47,7 @@ if [[ $# != 1 ]] ; then
usage usage
fi fi
vm=$1 vm="$1"
create_vm "${vm}" create_vm "${vm}"
if [[ "${vm}" == "s-infra" ]] ; then if [[ "${vm}" == "s-infra" ]] ; then
@ -74,6 +80,8 @@ elif [[ "${vm}" == "s-DNS-ext" ]] ; then
create_if "${vm}" "n-adm" "n-dmz" create_if "${vm}" "n-adm" "n-dmz"
elif [[ "${vm}" == "s-web-ext" ]] ; then elif [[ "${vm}" == "s-web-ext" ]] ; then
create_if "${vm}" "n-adm" "n-dmz" create_if "${vm}" "n-adm" "n-dmz"
elif [[ "${vm}" == "s-nxc" ]] ; then
create_if "${vm}" "n-adm" "n-infra"
elif [[ "${vm}" == "s-lb" ]] ; then elif [[ "${vm}" == "s-lb" ]] ; then
create_if "${vm}" "n-adm" "n-dmz" "n-dmz-lb" create_if "${vm}" "n-adm" "n-dmz" "n-dmz-lb"
elif [[ "${vm}" == "s-web1" ]] ; then elif [[ "${vm}" == "s-web1" ]] ; then