auth-openvpn: port to python3 for new gw server, futures

I chose to keep everything in binary throughout.  One could also
choose string, but this seemed safer for international characters.

Signed-off-by: Dan Mick <dmick@redhat.com>

Merge pull request #713 from ceph/wip-cpan-fix

Installing cpanminus on apt systems

Installing cpanminus on apt systems

Fixes: http://pulpito.front.sepia.ceph.com/yuriw-2023-01-01_20:02:51-krbd-pacific_16.2.11_RC4-testing-default-smithi/7130439/
Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #712 from ceph/wip-cpanm

Using the cpanm ansible module

Using the cpanm ansible module

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #711 from wolaidajiangyou/main

testnode: fix umount condition match error

testnode: fix umount condition match error

Signed-off-by: Sun Junnan <sunjunnan_yewu@cmss.chinamobile.com>
Signed-off-by: Yang Honggang <yanghonggang_yewu@cmss.chinamobile.com>

Merge pull request #710 from ceph/named-acme-os

nameserver: Updates to enable ACME on OpenShift

nameserver: New zones don't need to be frozen

Signed-off-by: Zack Cerza <zack@redhat.com>

named.conf.j2: Make key algorithm configurable

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #708 from ceph/no-rh-register

cobbler: Do not use redhat_register snippet

Merge pull request #707 from ceph/rhel9-oops

cobbler: CentOS 9 packages on CentOS 9 only

cobbler: Do not use redhat_register snippet

We already run `subscription-manager` manually in kickstart so we don't need this snippet.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: CentOS 9 packages on CentOS 9 only

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #706 from ceph/cobbler-pw

cobbler-access: Update script to support Cobbler v3

cobbler-access: Update script to support Cobbler v3

See https://cobbler.readthedocs.io/en/v3.2.2/user-guide/web-interface.html#managing-users-digest

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #705 from ceph/c9-selinux

common: NRPE works on CentOS 9 now

common: NRPE works on CentOS 9 now

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #704 from ceph/jenkins-builder-disk

tools: Add jenkins-builder-disk

Merge pull request #703 from ceph/c9-hacks

More CentOS 9 hacks

tools: Add jenkins-builder-disk

Used to wipe the larger/faster non-root drive on Jenkins builders and mount the disk at /home/jenkins-build or /var/lib/libvirt/images (whichever is appropriate).

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Hacks for CentOS 9 on braggi disks

During anaconda/kickstart, the smaller root drive shows up as sdb but then helpfully becomes sda after the OS is installed.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Update packages for CentOS 9

Do not install subscription-manager because it's not RHEL...
Do install python3-pip so the container-host role can run during the post install trigger.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler_profile: kernel_options for CentOS 9 Stream

inst.stage2 is required and just `ks` doesn't work anymore and needs `inst.ks`.

This will probably need to be reverted when Sepia gets Cobbler 3 since it will automatically use `inst.*` parameters for CentOS/RHEL9.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler_profile: Use a newer CentOS9 ISO

Has a lot of fixes in it like actually leaves appstream and baseos repos on the server after install

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Do not do CentOS to Stream conversion hack on CentOS9

It's not necessary and breaks profile import.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Don't run repos tag on CentOS9 during trigger

No longer needed as latest CentOS9 ISO fixed this problem.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Revert "cobbler: Put CentOS9 Stream repos in place during kickstart"

This reverts commit 9d277d66e9e96bd2fe5d5490018536ebe0db8140.

This hack isn't needed with a newer CentOS 9 Stream ISO.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #702 from ceph/not-on-centos9

cobbler: Don't install NetworkManager-initscripts-updown on CentOS9

Merge pull request #701 from ceph/fix-c9-missing-repos

cobbler: Put CentOS9 Stream repos in place during kickstart

cobbler: Don't install NetworkManager-initscripts-updown on CentOS9

It's not available.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Put CentOS9 Stream repos in place during kickstart

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #700 from ceph/el9

testnode: RHEL9 ceph_dependency_packages_to_remove

testnode: Modify ceph_deps_pkgs_to_remove

Removing python-requests removed subscription-manager which understandably causes a massive problem.

This task/list of packages may not even be necessary anyway since it's a relic from the days we didn't reimage testnodes before every job.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #699 from ceph/cobbler-module

Fixes to support Cobbler 3

cobbler: Install ansible from epel on RHEL9

This used to be in pip_packages but the distro-provided one is new enough

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Fix conditional

Not always defined

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define a ks_dir

Cobbler2: /var/lib/cobbler/kickstarts
Cobbler3: /var/lib/cobbler/templates

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define autoinstall flag based on version

Cobbler2: --kickstart
Cobbler3: --autoinstall

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define kernel options flag based on version

Cobbler2: --kopts
Cobbler3: --kernel-options

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Convert var to int

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define settings file path based on version

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Support RHEL8 when importing tasks and vars

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Enable Cobbler 3 Stream on RHEL8

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #698 from ceph/wip-ifupdown

ifup and ifdown has been deprecated replaced by ip link set $device u…

Adding the NetworkManager-initscripts-updown package to rhel9

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #697 from ceph/el9

RHEL9 support

testnode: RHEL9 vars/templates

Signed-off-by: David Galloway <dgallowa@redhat.com>

common: No more lsb!

Signed-off-by: David Galloway <dgallowa@redhat.com>

common: vars for rhel9

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #696 from ceph/jammy-pdev

testnode: Move python-dev to distro-specific vars files

testnode: Move python-dev to distro-specific vars files

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #695 from ceph/sdc

cobbler: Install on sdc for cali systems

cobbler: Install on sdc for cali systems

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #694 from ceph/seriously

cobbler_systems: Set default_profile to a newer distro

cobbler_systems: Set default_profile to a newer distro

I just chose RHEL8.6 because it's available in both Sepia and Octo labs.  Ubuntu and CentOS aren't.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #693 from ceph/jammy2

testnode: Ubuntu Jammy vars

testnode: Ubuntu Jammy vars

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #692 from ceph/incerta

tools: Playbook to configure incerta back NIC

tools: Playbook to configure incerta back NIC

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #673 from ceph/secondary-nic

Move secondary NIC tasks to common role

Merge pull request #691 from ceph/containerized-testnodes

testnode: Skip stopping apache2 in containers

testnode: Skip stopping apache2 in containers

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #690 from ceph/irvingi

container-host: s/slaves/builders

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #689 from ceph/fix-satellite

Reinstall Satellite CA Cert

common: Remove, clean up, and reinstall Satellite CA cert

This reverts commit ed59d0bb3f6470ecf62fc6af19663d0f674dd84e.

This was originally added because if one upgrades the Satellite server, the katello-ca-consumer-latest RPM actually gets an incremented version number and conflicts with an already installed katello-ca RPM.  `rpm --reinstall` was not sufficient to "upgrade" the package.

We won't ever be upgrading the Satellite server again and the proper way to "reinstall" the Satellite's CA Cert is to remove it, subscription-manager clean, then reinstall as per https://access.redhat.com/solutions/3336921.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #688 from ceph/fix-docs

README: Make doc more specific/clear

README: Make doc more specific/clear

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #687 from ceph/zap-rhel

testnode: No pkg tasks before repos are set up

Newer versions of RHEL8 don't like having yum called if they don't have repos setup.

When a RHEL8 machine gets provisioned via Cobbler, we zap the disks before we register the server to Satellite (or CDN).

We don't really need to check if gdisk and device-mapper are installed during a Cobbler install because we know they're installed in https://github.com/ceph/ceph-cm-ansible/blob/main/roles/cobbler/templates/snippets/cephlab_packages_rhel

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #685 from ceph/curl

common: Install Satellite RPM via rpm command

Merge pull request #686 from ceph/scripts

tools: Add a couple workstation scripts

tools: Add a couple workstation scripts

Signed-off-by: David Galloway <dgallowa@redhat.com>

common: Install Satellite RPM via rpm command

Seriously... https://access.redhat.com/solutions/6438061

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #683 from ceph/zap_disks_paren

testnode: Add missing parenthesis to conditional

Merge pull request #684 from ceph/fqdn

common: RHSM register w/ full hostname

common: RHSM register w/ full hostname

For some reason, sometimes hosts try to register with their short hostname.  Sometimes with the FQDN.

As of Satellite 6.5, the service won't let you register two different hostnames with the same UUID (https://access.redhat.com/solutions/4207781).

This change makes sure all hosts register with the FQDN so there's no more conflicts.

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode: Add missing parenthesis to conditional

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #682 from ceph/rhel86

cobbler: RHEL8.6

Merge pull request #681 from ceph/true2

cobbler: RHEL8.6

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode: Fix jinja2 conditional

https://docs.ansible.com/ansible/latest/dev_guide/testing/sanity/no-tests-as-filters.html

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #680 from ceph/wip-adding-rhel9

Adding rhel9 to sepia cobbler

Adding rhel9 to sepia cobbler

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #679 from ceph/inclusive-language

Inclusive language update

Inclusive language update

Issues not addressed here:
- FOG still uses master
- lots of gitbuilder URLs in yaml files and docs referencing master
- named uses 'master zones'

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #678 from ceph/mirrorsbroken

Work around rare CentOS infra mirror mismatch

testnode: Work around rare CentOS infra mirror mismatch

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode: Fix BaseOS repo name

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #677 from ceph/nginx-yaml

teuthology: Serve yaml files as text/plain

teuthology: Serve yaml files as text/plain

So browers display them rather than download.

Signed-off-by: Zack Cerza <zack@cerza.org>

Merge pull request #676 from ceph/dedupe

testnode: Remove duplicated common_yum_repos

Reviewed-by: Ilya Dryomov <idryomov@gmail.com>

testnode: make it clearer that centos_8.yml and centos_8_stream.yml get combined

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>

testnode: Remove duplicated common_yum_repos

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #675 from ceph/gcc-stream

testnode: Fix CentOS 8 Stream packages list

testnode: Fix CentOS 8 Stream packages list

I guess we were relying on a bug for the past few months. What would happen is centos_8.yml would get pulled in and the `packages` list got populated. Then later when we detect this is CentOS Stream, centos_8_stream.yml would get pulled in which overrode the original `packages` list.

Fixes: https://tracker.ceph.com/issues/55177
Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #674 from ceph/failover

common: failovermethod is deprecated

common: failovermethod is deprecated

Signed-off-by: David Galloway <dgallowa@redhat.com>

common: Document secondary_nic_mtu var

Signed-off-by: David Galloway <dgallowa@redhat.com>