doc

README.md

@@ -1,9 +1,10 @@
 # vagrant
 
-le 2023-01-29
+le 2023-05-04 11h46 - ps
 
-Ce dépôt héberge des **Vagrantfile** dont
+Ce dépôt héberge des **Vagrantfile** dont : 
   * **dns** : Vagrantfile pour 2 serveurs **Bind9** (1 maitre et un esclave), tests **goss** chainés  
+  * **divers/logs** : Vagrantfile pour serveur et client **rsyslog**  sans journald  
   * **docker**
   * **docker-wordpress**
   * **docker-glpi**
@@ -13,8 +14,11 @@ Ce dépôt héberge des **Vagrantfile** dont
   * **docker-traefik-nginx**
   * **docker-elk**
   * **devstack**
+  * **dvlpt** : Vagrantfile pour VM Debian 11 LAMP + phpmyadmin
+  * **glpi** : Vagrantfile pour VM Debian 11 GLPI 10.0.7
   * **guacamole** : Vagrantfile pour Apache Guacamole dockerise sans frontal
   * **k8s** : kubernetes 1.26.00 + playbook pour master **k8s-master** et 2 noeuds **node-1** et **node-2**
+  * **k3s-awx** : Vagrantfile + script **inst-awx** pour installation  **Ansible AWX** sur **k3s** avec **awx-on-k3s**
   * **minione**
   * **rundeck** : Vagrantfile + playbook pour installation avec Mariadb
   * **wp-lb** : Wordpress web1 et web2, lb HaProxy, nfs, db Mariadb - Vagrantfile + playbooks

divers/logs/Vagrantfile

@@ -0,0 +1,28 @@
+Vagrant.configure("2") do |config|
+  config.vm.define 'srv' do |config|
+	  config.vm.box = "debian/bullseye64"
+	  config.vm.hostname = "srv"
+	  config.vm.network "private_network", ip: "192.168.56.10"
+	  config.vm.provision "shell", inline:<<-SHELL
+#	    apt-get update
+#	    apt-get install -y vim curl wget 
+	    sed -i 's/^#module\(load="imudp"\)/module(load="imudp")/' /etc/rsyslog.conf
+	    sed -i 's/^#input\(type="imudp" port="514"\)/input(type="imudp" port="514")/' /etc/rsyslog.conf
+	    systemctl restart syslog
+	    ss -lnu 
+	  SHELL
+	end
+
+  config.vm.define 'cli' do |config| 
+	  config.vm.box = "debian/bullseye64"
+	  config.vm.hostname = "cli"
+	  config.vm.network "private_network", ip: "192.168.56.11"
+	  config.vm.provision "shell", inline:<<-SHELL
+#	    apt-get update
+#	    apt-get install -y vim curl wget 
+	    echo "*.* @192.168.56.10" >> /etc/rsyslog.conf
+	    systemctl restart syslog
+	    logger salut 
+	  SHELL
+	end
+end

dvlpt/README.md

@@ -0,0 +1,25 @@
+# dvlpt
+
+**dvlpt** est une VM Debian 11 avec :
+  * **apache2**
+  * **php** (7.4)
+  * **mariadb-server**
+  * **phpmyadmin**
+
+## Installation
+
+  vagrant up
+
+
+## Utilisation
+
+**Acces SSH** :  vagrant ssh
+
+**Acces web** : http://localhost:2080
+
+**Acces phpmyadmin** : http://localhost:2080/phpmyadmin
+
+**Acces ssh** : ssh root@localhost -p 2022
+
+le 2023-05-04
+

dvlpt/Vagrantfile

@@ -0,0 +1,83 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bullseye64"
+  config.vm.hostname = "dvlpt"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine. In the example below,
+  # accessing "localhost:8080" will access port 80 on the guest machine.
+  # NOTE: This will enable public access to the opened port
+   config.vm.network "forwarded_port", guest: 22, host: 2022
+   config.vm.network "forwarded_port", guest: 80, host: 2080
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine and only allow access
+  # via 127.0.0.1 to disable public access
+  # config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
+
+  # Create a private network, which allows host-only access to the machine
+  # using a specific IP.
+  # config.vm.network "private_network", ip: "192.168.33.10"
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  # config.vm.network "public_network"
+
+  # Share an additional folder to the guest VM. The first argument is
+  # the path on the host to the actual folder. The second argument is
+  # the path on the guest to mount the folder. And the optional third
+  # argument is a set of non-required options.
+  # config.vm.synced_folder "../data", "/vagrant_data"
+
+  # Provider-specific configuration so you can fine-tune various
+  # backing providers for Vagrant. These expose provider-specific options.
+  # Example for VirtualBox:
+  #
+   config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+     vb.memory = "1024"
+   end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+     timedatectl set-timezone Europe/Paris
+     apt-get update
+     export DEBIAN_FRONTEND=noninteractive
+     apt-get install -y vim wget curl git apache2 php php-mysql php-gd php-xml mariadb-server phpmyadmin
+     cp /etc/phpmyadmin/apache.conf /etc/apache2/sites-available/phpmyadmin.conf
+     a2ensite phpmyadmin.conf
+     systemctl restart apache2
+     echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
+     systemctl restart ssh
+     echo 'connexion SSH avec vagrant : vagrant ssh'
+     echo 'connexion SSH : ssh root@localhost -p 2022'
+     echo 'connexion web : http://localhost:2080'
+     echo 'connexion phpmyadmin : http://localhost:2080/phpmyadmin'
+   SHELL
+end

glpi/README.md

@@ -0,0 +1,34 @@
+# GLPI
+
+**glpi**  installe une VM Debian 11 avec :
+  * **apache2**
+  * **php** (7.4) et les paquets associés
+  * **mariadb-server**
+  * **GLPI** 10.0.7
+
+## Installation
+
+  vagrant up
+
+### se connecter à la VM :
+  vagrant ssh
+
+
+  sudo mysql_secure_administration
+
+### avec un navigateur :
+
+se connecter à l'URL http://loclahost:2080/glpi  
+
+lancer l'installation de **GLPI**
+
+## Utilisation
+
+**Acces SSH** :  vagrant ssh
+
+**Acces web** : http://localhost:2080
+
+**Acces ssh** : ssh root@localhost -p 2022
+
+le 2023-05-04
+

glpi/Vagrantfile

@@ -0,0 +1,91 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bullseye64"
+  config.vm.hostname = "glpi"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine. In the example below,
+  # accessing "localhost:8080" will access port 80 on the guest machine.
+  # NOTE: This will enable public access to the opened port
+   config.vm.network "forwarded_port", guest: 22, host: 2022
+   config.vm.network "forwarded_port", guest: 80, host: 2080
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine and only allow access
+  # via 127.0.0.1 to disable public access
+  # config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
+
+  # Create a private network, which allows host-only access to the machine
+  # using a specific IP.
+  # config.vm.network "private_network", ip: "192.168.33.10"
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  # config.vm.network "public_network"
+
+  # Share an additional folder to the guest VM. The first argument is
+  # the path on the host to the actual folder. The second argument is
+  # the path on the guest to mount the folder. And the optional third
+  # argument is a set of non-required options.
+  # config.vm.synced_folder "../data", "/vagrant_data"
+
+  # Provider-specific configuration so you can fine-tune various
+  # backing providers for Vagrant. These expose provider-specific options.
+  # Example for VirtualBox:
+  #
+   config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+     vb.memory = "1024"
+   end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+#     export http_proxy=http://10.121.38.1:8080
+#     export https_proxy=http://10.121.38.1:8080
+     timedatectl set-timezone Europe/Paris
+     apt-get update
+     export DEBIAN_FRONTEND=noninteractive
+     apt-get install -y vim wget curl git apache2 php php-mysql php-ldap php-gd php-intl php-xml php-curl php-zip mariadb-server
+     ( cd /var/www/html 
+     wget https://github.com/glpi-project/glpi/releases/download/10.0.7/glpi-10.0.7.tgz
+     tar xvfz glpi-10.0.7.tgz 
+     chown -R root:root glpi
+     cd glpi
+     chown -R www-data:www-data files config 
+      )
+
+#     systemctl restart apache2
+     echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
+     systemctl restart ssh
+     echo 'connexion SSH avec vagrant : vagrant ssh'
+     echo 'connexion SSH : ssh root@localhost -p 2022'
+     echo 'connexion web : http://localhost:2080'
+     echo 'connexion phpmyadmin : http://localhost:2080/glpi'
+   SHELL
+end

k3s-awx/Vagrantfile

@@ -0,0 +1,72 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bullseye64"
+  config.vm.hostname = "k3s-awx"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine. In the example below,
+  # accessing "localhost:8080" will access port 80 on the guest machine.
+  # NOTE: This will enable public access to the opened port
+  # config.vm.network "forwarded_port", guest: 80, host: 8080
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine and only allow access
+  # via 127.0.0.1 to disable public access
+  # config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
+
+  # Create a private network, which allows host-only access to the machine
+  # using a specific IP.
+  config.vm.network "private_network", ip: "192.168.56.10"
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  # config.vm.network "public_network"
+
+  # Share an additional folder to the guest VM. The first argument is
+  # the path on the host to the actual folder. The second argument is
+  # the path on the guest to mount the folder. And the optional third
+  # argument is a set of non-required options.
+  # config.vm.synced_folder "../data", "/vagrant_data"
+
+  # Provider-specific configuration so you can fine-tune various
+  # backing providers for Vagrant. These expose provider-specific options.
+  # Example for VirtualBox:
+  #
+   config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+     vb.memory = "3072"
+   end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+     apt-get update
+     apt-get install -y curl vim git make
+   SHELL
+end
+

k3s-awx/inst-awx

@@ -0,0 +1,36 @@
+#!/bin/bash
+# installation awx sur k3s
+export NAMESPACE=awx
+AWX_HOST="awx.sio.lan"
+REL="2.0.1"
+[ -x /usr/local/bin/k3s-uninstall.sh ] &&  /usr/local/bin/k3s-uninstall.sh
+sudo rm -rf /data
+sudo rm -rf awx*
+export NAMESPACE=awx
+#export http_proxy=http://10.121.38.1:8080
+#export https_proxy=http://10.121.38.1:8080
+
+curl -sfL https://get.k3s.io | sh -s - --write-kubeconfig-mode 644
+cd ~
+git clone https://github.com/ansible/awx-operator.git
+cd awx-operator
+git checkout "${REL}"
+export NAMESPACE=awx
+make deploy
+kubectl -n awx get all
+
+cd ~
+git clone https://github.com/kurokobo/awx-on-k3s.git
+cd awx-on-k3s
+git checkout "${REL}"
+#AWX_HOST="awx.sio.lan"
+openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -out ./base/tls.crt -keyout ./base/tls.key -subj "/CN=${AWX_HOST}/O=${AWX_HOST}" -addext "subjectAltName = DNS:${AWX_HOST}"
+sed -i "s/awx.example.com/${AWX_HOST}/"   base/awx.yaml 
+sudo mkdir -p /data/postgres-13
+sudo mkdir -p /data/projects
+sudo chmod 755 /data/postgres-13
+sudo chown 1000:0 /data/projects
+kubectl apply -k base
+kubectl -n awx logs -f deployments/awx-operator-controller-manager
+kubectl -n awx get awx,all,ingress,secrets
+