mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
612b60766e
Currently, upstream CI test documentation against different Ansible versions, but playbook tests are only executed with Ansible 2.9 series. This patch add support for running playbook tests against Ansible 2.9, ansible-core 2.11, and against latest version of Ansible. As running all the tests for every PR would take too long, the tests for every PR use only Anisble 2.9, and are executed on Fedora-latest and CentOS 7 and 8. A new pipeline for nightly tests was added, which runs the tests in the same distros, using Ansible 2.9, latest and Ansible-core 2.11.
34 lines
908 B
YAML
34 lines
908 B
YAML
---
|
|
# IPA depends on IPv6 and without it dirsrv service won't start.
|
|
- name: Ensure IPv6 is ENABLED
|
|
ansible.posix.sysctl:
|
|
name: "{{ item.name }}"
|
|
value: "{{ item.value }}"
|
|
sysctl_set: yes
|
|
state: present
|
|
reload: yes
|
|
with_items:
|
|
- name: net.ipv6.conf.all.disable_ipv6
|
|
value: 0
|
|
- name: net.ipv6.conf.lo.disable_ipv6
|
|
value: 0
|
|
- name: net.ipv6.conf.eth0.disable_ipv6
|
|
value: 1
|
|
|
|
# Set fs.protected_regular to 0
|
|
# This is needed in some IPA versions in order to get KRA enabled.
|
|
# See https://pagure.io/freeipa/issue/7906 for more information.
|
|
- name: stat protected_regular
|
|
ansible.builtin.stat:
|
|
path: /proc/sys/fs/protected_regular
|
|
register: result
|
|
|
|
- name: Ensure fs.protected_regular is disabled
|
|
ansible.posix.sysctl:
|
|
name: fs.protected_regular
|
|
value: 0
|
|
sysctl_set: yes
|
|
state: present
|
|
reload: yes
|
|
when: result.stat.exists
|