Merge pull request #836 from ceph/1001

maas: Use 1001 for cm user

maas: Use 1001 for cm user

teuthology's ubuntu user expects UID 1000

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #788 from ceph/wip-maas-apt

Create role to deploy and configure MAAS

Merge pull request #835 from ceph/short

prep-fog-capture: Set short hostname on boot

prep-fog-capture: Set short hostname on boot

Setting FQDN via `hostname` is not best practice

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #834 from ceph/fix-nameserver-for-deb

Fix nameserver for deb

nameserver: Fix vars for Debian

Signed-off-by: David Galloway <david.galloway@ibm.com>

nameserver: named.conf is in /etc/bind on Debian

Signed-off-by: Dan Mick <dmick@ibm.com>

nameserver: don't create /etc/<X>/named if it doesn't exist

It should exist.  This would have caught the error that
X is sysconfig on el systems and default on deb systems.

Signed-off-by: Dan Mick <dmick@ibm.com>

roles/nameserver: allow defaults file to vary

deb: /etc/default/named
el: /etc/sysconfig/named

Signed-off-by: Dan Mick <dmick@ibm.com>

Merge pull request #832 from ceph/ansible_user

testnode: Add iozone to path

testnode: Ensure iozone is in path

Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: Default ansible_ssh_user to cm_user, then nothing

Ansible, in their infinite wisdom, have deprecated yet another magic variable breaking backwards compatibility.

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #831 from dmick/rocky10-iozone

testnode: add iozone to rocky_10.yml

testnode: add iozone to rocky_10.yml

I built the RPM and installed it on the apt-mirror service
(on the POK lab Openshift)

Fixes: https://tracker.ceph.com/issues/75381
Signed-off-by: Dan Mick <dan.mick@redhat.com>

Enhance install_grub script for ARM deployment and RHEL 10 support

Merge pull request #821 from ceph/prepfog-v2

prep-fog-capture: Refactor, split, re-add cobbler-provided hacks

Merge pull request #830 from ceph/nameserver-apt

Nameserver role updates

Merge pull request #828 from ceph/builder-disk-uuid

jenkins-builder-disk: Use UUID instead of disk name

nameserver: Optionally disable DNSSEC

Signed-off-by: David Galloway <david.galloway@ibm.com>

nameserver: Disable ipv6 for now

Signed-off-by: David Galloway <david.galloway@ibm.com>

nameserver: Support Ubuntu

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #829 from ceph/force-ntp

tools: Playbook to force time sync

Merge pull request #827 from ceph/fix-forward

nameserver: Match A records to reverse[] in named_domains

Merge pull request #826 from ceph/fix-ntp

ntp-server: Overhaul role

jenkins-builder-disk: Support disk flipping on adami too

Signed-off-by: David Galloway <david.galloway@ibm.com>

tools: Playbook to force time sync

Useful during our emergency bring-up of the POK lab.

We were using the RHV hypervisor hosts as the NTP servers but who knows when they will be accessible again.  For now, NTP server is on soko02

Signed-off-by: David Galloway <david.galloway@ibm.com>

jenkins-builder-disk: Use UUID instead of disk name

Avoids disk renaming tomfoolery during boot

Signed-off-by: David Galloway <david.galloway@ibm.com>

ntp-server: Overhaul role

 - Get rid of netaddr. Modern ntpd supports CIDRs
 - Make OS agnostic
 - Support ufw, don't blow up if no firewall in use

Signed-off-by: David Galloway <david.galloway@ibm.com>

nameserver: Match A records to reverse[] in named_domains

This will let multiple subnets/domains use the same ipvar

For example, bath and infra-compute can both have a if_25Gb_ip
```
bath14.front.sepia.ceph.com if_25Gb_ip=10.20.192.44
infra-compute-01.os.sepia.ceph.com if_25Gb_1_ip=172.16.53.11

  front.sepia.ceph.com:
    forward: front.sepia.ceph.com
    ipvars:
      - ip
      - if_25Gb_1_ip
    dynamic: true
    ddns_hostname_prefixes:
      - ovh
    reverse:
      - 10.20.192
      - 10.20.193
  os.sepia.ceph.com:
    forward: os.sepia.ceph.com
    ipvar: if_25Gb_1_ip
    dynamic: false
    reverse:
      - 172.16.53
      - 172.16.54

```

`bath14 IN A` will get written to front.sepia.ceph.com
`infra-compute-01 IN A` will get written to os.sepia.ceph.com

Signed-off-by: David Galloway <david.galloway@ibm.com>

Refactor MAAS configuration tasks to use ansible.builtin.stat instead of shell commands for improved reliability and clarity

Merge pull request #801 from ceph/playbook-sync

Sync playbooks from David's repo

Sync playbooks from other @David's repo

amend

Removed updated tools/jenkins-builder-disk.yml

prep-fog-capture: Refactor, split, re-add cobbler-provided hacks

- Using systemd instead of rc.local:
  - Configure netplan on boot for Ubuntu
  - Configure NetworkManager on boot for CentOS/Rocky
  - Set hostname
  - Update packages and reboot

Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: Stop rewriting /etc/hosts

We handle this in prep-fog-capture now by writing /etc/hosts from scratch.

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #825 from ceph/bindutils

testnode: bind-utils for dig

testnode: bind-utils for dig

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #824 from ceph/deps

testnode: semanage and bzip2 for el9/10

testnode: semanage and bzip2 for el9/10

Fixes: https://tracker.ceph.com/issues/74570
Fixes: https://tracker.ceph.com/issues/71624
Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #820 from deepssin/centos9-perl-test-harness

Fix pjd failure: prove - command not available

Fix pjd failure: prove - command not available

Signed-off-by: deepssin <deepssin@redhat.com>

Merge pull request #819 from ceph/c9-fuse

testnode: fuse and net-tools for CentOS 9

testnode: fuse and net-tools for CentOS 9

centos_9_stream.yml isn't actually pulled in

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #817 from ceph/apt-https

common: s/http/https in apt sources as outbound port 80 is blocked in…

Merge pull request #818 from ceph/openssl-rocky

testnode: Install openssl on Rocky

testnode: Install openssl on Rocky

Fixes: https://tracker.ceph.com/issues/74766
Signed-off-by: David Galloway <david.galloway@ibm.com>

common: s/http/https in apt sources as outbound port 80 is blocked in Sepia

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #816 from ceph/rocky-packages

Let's fix some teuthology tests

testnode: Fuse for centos9

Fixes: https://tracker.ceph.com/issues/73630
Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: net-tools for centos9

Fixes: https://tracker.ceph.com/issues/74589
Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: Additional missing Rocky packages

Fixes: https://tracker.ceph.com/issues/73630
Fixes: https://tracker.ceph.com/issues/74572
Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #815 from ceph/wget-r10

testnode: Install wget on Rocky 10

testnode: Install wget on Rocky 10

Same as in commit ab478050c523 ("testnode: Install wget on CentOS 9").

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>

Merge pull request #814 from ceph/define-rocky-mirrors

Define rocky repo mirrors

testnode: Specify a few mirrors for Rocky 10

As was the case with EPEL mirrors, hitting the mirrorlist.rockylinux.org endpoint frequently fails and causes jobs to die.  We'll just specify a few mirrors manually.

DNF's behavior is to try them in order when multiple baseurls are defined.

Fixes: https://tracker.ceph.com/issues/74620
Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: Support for yum_repos_to_remove

A follow up commit will put specific repo files we want back in place.

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #813 from ceph/retry-mirrorlists

testnode: Try to work around flaky rocky mirrorlists

testnode: Try to work around flaky rocky mirrorlists

```
[root@trial052 ~]# cat /etc/yum.repos.d/rocky.repo

[baseos]
name=Rocky Linux $releasever - BaseOS
mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever$rltype
gpgcheck=1
enabled=1
countme=1
metadata_expire=6h
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-10
```

Fixes: https://tracker.ceph.com/issues/74563
Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #811 from ceph/wget-c9

testnode: Install wget on CentOS 9

testnode: Install wget on CentOS 9

We were doing this in kickstart via cobbler.

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #809 from ceph/fog-fixes

Fog fixes

Update the documentation in the README file to include some missing things and things that were added with the latest tasks.

Signed-off-by: Fernando <fernando.alcocer.ochoa@ibm.com>

Merge pull request #810 from ceph/https

testnode: More s/http/https

testnode: More s/http/https

Signed-off-by: David Galloway <david.galloway@ibm.com>

prep-fog-capture: systemd unit to generate host ssh keys

Ubuntu does not automatically regenerate SSH host keys after image-based
deployments. When keys are removed prior to FOG capture, sshd fails to
start on redeploy.

Add a one-shot systemd service to regenerate host keys on first boot and
disable itself after running.

Signed-off-by: David Galloway <david.galloway@ibm.com>

prep-fog-capture: install ntp if missing

Signed-off-by: David Galloway <david.galloway@ibm.com>

fog-server: Clone as fog user

Avoids 'dubious ownership' git error

Signed-off-by: David Galloway <david.galloway@ibm.com>

fog-server: primary branch is now 'stable'

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #808 from dmick/teuthology-conserver-client

teuthology: add conserver-client as package dependency

teuthology: add conserver-client as package dependency

left aside leap because I believe that code is dead and I don't
have systems to verify the package name

Signed-off-by: Dan Mick <dan.mick@redhat.com>

Merge pull request #806 from deepssin/update_lab_extras

testnode: Switch lab-extras repository URLs to HTTPS

testnode: Switch lab-extras repository URLs to HTTPS

Signed-off-by: deepssin <deepssin@redhat.com>

Merge pull request #805 from ceph/zap-again

Refactor Zap again

testnode: Refactor zap again...

We should be systematically tearing down any LVM we find.  LVs, VGs, then PVs, then device mapper.

Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: Support NVMe partitions in pvs output

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #804 from ceph/xattrs

testnode: Refactor xattrs tasks

testnode: Refactor xattrs tasks

This was failing on lvm-backed root filesystems and isn't required for xfs anyway.

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #798 from ceph/cm-oops

ansible-managed: Don't create user if he exists

Merge pull request #803 from ceph/lvm-by-disksize

testnode: Updates to support trial nodes in MaaS

testnode: Refactor lvm tag and support new dict

Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: Refactor zap to support existing LVM and NVMe root drives

Feeding "nvme0n1" to `root_disk: "{{ item.device|regex_replace('[0-9]+', '') }}" came out "nvmen"

MaaS also provisions root disks using lvm by default so we need some logic to wipe out device mapper devices from OSD disks but not the root disk.

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #802 from ceph/trial-noble

Adjustments to run ceph-cm-ansible on Noble on new "trial" testnodes

testnode: Strip partitions from root_disk

Signed-off-by: David Galloway <david.galloway@ibm.com>

testnode: Don't zap snap partitions

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #800 from ceph/nameserver-multiple-ipvars

nameserver: Support multiple ipvars

nameserver: Support multiple ipvars

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #799 from ceph/wip-xfs-v4-revert

roles/testnode: don't insist on creating XFS V4 filesystem

roles/testnode: don't insist on creating XFS V4 filesystem

The V4 format has been deprecated since 2020 and as of 6.18 kernel no
longer compiled in by default.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>

Merge pull request #786 from kshtsk/wip-rocky-9

roles/testnode: add rocky 9

roles/testnode: add sshd config template for rocky 9

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@clyso.com>

roles/testnode: add rocky 9 vars

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@clyso.com>

testnode/vars: add lvm2 to centos 9

The nvme-loop tests rely on lvm.

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@clyso.com>

roles/testnodes: add centos 9 stream specific vars

Looks like noone added the subj. yet.

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@clyso.com>

ansible-managed: Don't create user if he exists

When manually installing hosts, we use the cm user sometimes.  Don't clobber it or try to create when it exists already.

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #797 from dmick/fix-make-dnsmasq-conf

tools/make-dnsmasq-conf: fix up some outstanding issues

tools/make-dnsmasq-conf: fix up some outstanding issues

1) hack domain_tag calculation for pok, suggest a better approach
2) fully-qualify the ip manipulation module names
3) host-record instead of host-address
4) create host-record in canonical order to avoid anyone worrying

Signed-off-by: Dan Mick <dmick@ibm.com>

Merge pull request #796 from ceph/toko-disk

tools: Add bath and toko to jenkins-builder-disk

tools: Add bath and toko to jenkins-builder-disk

Signed-off-by: David Galloway <david.galloway@ibm.com>

Merge pull request #792 from dmick/fix-set-bmc-static

tools/set-bmc-static.yml: update for Tucson lab/Supermicro

tools/set-bmc-static.yml: update for Tucson lab/Supermicro

1) set to 'all' hosts, enabling --limit on playbook invocation
2) set power_uid to 3; newer Supermicros use 2 for their factory user
3) enable dhcp mode by default
4) introduce "only_lan_access" to avoid trying to ssh or even test it
5) add tasks to test initial_* and power_* creds and display the results
6) halt the playbook if neither set of creds works
7) add a "test_user" tag to allow just testing the creds and stopping
8) bugfix: use 'initial_*' for first 'user set password' for power_user
9) also add 'user enable' because it seems like Supermicro needs it

Signed-off-by: Dan Mick <dmick@ibm.com>