/ansible-role-seal

Performs sealing of Red Hat Enterprise Linux machine

GNU General Public License v3.0GPL-3.0

Build Status

Seal

This role performs sealing steps for following operating systems:

Requirements

You need to have enabled ControlMaster under [ssh_connection] header in ansible configuration file.
The defaults ssh_args = -o ControlMaster=auto -o ControlPersist=60s will work.

Role Variables

  • seal_run_containerized

    This option allows seal role run inside of container, default=false.

    Problem is with /etc/hostname file which can not be renamed because it is being bind-mounted.

Dependencies

None

Available tags

You can skip following sealing steps using --skip-tags option.

  • reset_hostname

    Tag is assigned to tasks which reset hostname.

  • delete_logs

    Tag is assigned to tasks which wipe out /var/log/ directory.

  • poweroff

    Tag is assigned to task which shutdown sealed machine.

Example Playbook

---
- hosts: all
  remote_user: root
  roles:
    - { role: rhevm-qe-automation.ansible-role-seal }

Author Information

Katerina Koukiou kkoukiou@redhat.com