From 46f0063c72386e676c093bb4edaa1cb6ee721639 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Sun, 30 Dec 2018 03:05:44 +0100 Subject: added dolmetsch-ctl (WIP) --- dan/ele-dolmetsch-ctl.yml | 6 ++ inventory/group_vars/dolmetsch-ctl/main.yml | 133 ++++++++++++++++++++++++ inventory/group_vars/ele-dolmetsch-ctl/main.yml | 3 + inventory/group_vars/elevate-festival/main.yml | 4 + inventory/hosts.ini | 9 ++ 5 files changed, 155 insertions(+) create mode 100644 dan/ele-dolmetsch-ctl.yml create mode 100644 inventory/group_vars/dolmetsch-ctl/main.yml create mode 100644 inventory/group_vars/ele-dolmetsch-ctl/main.yml diff --git a/dan/ele-dolmetsch-ctl.yml b/dan/ele-dolmetsch-ctl.yml new file mode 100644 index 00000000..d16cfbdb --- /dev/null +++ b/dan/ele-dolmetsch-ctl.yml @@ -0,0 +1,6 @@ +--- +- hosts: ele-dolmetsch-ctl + connection: local + roles: + - role: openwrt/image + delegate_to: localhost diff --git a/inventory/group_vars/dolmetsch-ctl/main.yml b/inventory/group_vars/dolmetsch-ctl/main.yml new file mode 100644 index 00000000..d2b8b2c1 --- /dev/null +++ b/inventory/group_vars/dolmetsch-ctl/main.yml @@ -0,0 +1,133 @@ +--- +openwrt_variant: lede +openwrt_release: 17.01.6 +openwrt_arch: ar71xx +openwrt_target: generic +openwrt_profile: tl-wr710n-v2 +openwrt_output_image_suffixes: + - "generic-{{ openwrt_profile }}-squashfs-sysupgrade.bin" + +openwrt_packages_remove: + - kmod-gpio-button-hotplug + - kmod-ath9k + - wpad-mini + - ppp + - ppp-mod-pppoe + - dnsmasq + - firewall + - odhcpd + - odhcpd-ipv6only +openwrt_packages_add: + - haveged + - htop + - ip + - less + - nano + - tcpdump-mini + - kmod-usb-audio + - alsa-lib + + +openwrt_mixin: + /etc/sysctl.conf: + content: | + # Defaults are configured in /etc/sysctl.d/* and can be customized in this file + # + # disable IP forwarding, we don't need it since we are no router + net.ipv4.conf.default.forwarding=0 + net.ipv4.conf.all.forwarding=0 + net.ipv4.ip_forward=0 + net.ipv6.conf.default.forwarding=0 + net.ipv6.conf.all.forwarding=0 + + /etc/dropbear/authorized_keys: + content: "{{ ssh_keys_root | join('\n') }}\n" + + /etc/htoprc: + file: "{{ global_files_dir }}/common/htoprc" + + /etc/rc.d/S22network-fw: + link: "../init.d/network-fw" + + /etc/rc.d/K91network-fw: + link: "../init.d/network-fw" + + /etc/init.d/network-fw: + mode: "0755" + content: | + #!/bin/sh /etc/rc.common + + START=22 + STOP=91 + + MGMT_IF=$(uci get network.mgmt.ifname) + MGMT_IPADDR=$(uci get network.mgmt.ipaddr) + MGMT_NETMASK=$(uci get network.mgmt.netmask) + + start() { + iptables -A INPUT -i lo -j ACCEPT + iptables -A INPUT -i "$MGMT_IF" -s "$MGMT_IPADDR/$MGMT_NETMASK" -j ACCEPT + iptables -P INPUT DROP + } + + stop() { + iptables -P INPUT ACCEPT + iptables -F INPUT + } + + +openwrt_uci: + system: + - name: system + options: + hostname: '{{ inventory_hostname }}' + timezone: 'CET-1CEST,M3.5.0,M10.5.0/3' + ttylogin: '0' + log_size: '64' + urandom_seed: '0' + + - name: timeserver 'ntp' + options: + enabled: '1' + enable_server: '0' + server: + - '0.lede.pool.ntp.org' + - '1.lede.pool.ntp.org' + - '2.lede.pool.ntp.org' + - '3.lede.pool.ntp.org' + + dropbear: + - name: dropbear + options: + PasswordAuth: 'off' + RootPasswordAuth: 'off' + Port: '22000' + + network: + - name: globals 'globals' + options: + ula_prefix: "fc{{ '%02x:%04x:%04x' | format((255 | random(seed=inventory_hostname + '0')), (65535 | random(seed=inventory_hostname + '1')), (65535 | random(seed=inventory_hostname + '2'))) }}::/48" + + - name: interface 'loopback' + options: + ifname: lo + proto: static + ipaddr: 127.0.0.1 + netmask: 255.0.0.0 + + - name: interface 'mgmt' + options: + ifname: "eth0.{{ network_mgmt_zone.vlan }}" + accept_ra: 0 + proto: static + ipaddr: "{{ network_mgmt_zone.prefix | ipaddr(network_mgmt_zone.offsets[inventory_hostname]) | ipaddr('address') }}" + netmask: "{{ network_mgmt_zone.prefix | ipaddr('netmask') }}" + + - name: interface 'mixer' + options: + type: bridge + ifname: "eth0.{{ network_mixer_zone.vlan }} eth1" + accept_ra: 0 + proto: static + ipaddr: "{{ network_mixer_zone.prefix | ipaddr(network_mixer_zone.offsets[inventory_hostname]) | ipaddr('address') }}" + netmask: "{{ network_mixer_zone.prefix | ipaddr('netmask') }}" diff --git a/inventory/group_vars/ele-dolmetsch-ctl/main.yml b/inventory/group_vars/ele-dolmetsch-ctl/main.yml new file mode 100644 index 00000000..a69d45ee --- /dev/null +++ b/inventory/group_vars/ele-dolmetsch-ctl/main.yml @@ -0,0 +1,3 @@ +--- +network_mgmt_zone: "{{ network_zones.mgmt }}" +network_mixer_zone: "{{ network_zones.mixer }}" diff --git a/inventory/group_vars/elevate-festival/main.yml b/inventory/group_vars/elevate-festival/main.yml index 82d8d4d1..0927a977 100644 --- a/inventory/group_vars/elevate-festival/main.yml +++ b/inventory/group_vars/elevate-festival/main.yml @@ -38,6 +38,8 @@ network_zones: ele-ap-dom0: 120 ele-ap-kunsthaus0: 130 ele-ap-orpheum0: 140 + ele-dol-mixer: 200 + ele-dol-translator: 201 ele-router: 254 mixer: @@ -45,6 +47,8 @@ network_zones: prefix: 192.168.48.0/24 offsets: kuschelbaer: 48 + ele-dol-mixer: 100 + ele-dol-translator: 101 atem: 208 x32core: 216 diff --git a/inventory/hosts.ini b/inventory/hosts.ini index 45529565..a3a27c7f 100644 --- a/inventory/hosts.ini +++ b/inventory/hosts.ini @@ -80,6 +80,10 @@ ele-ap-dom0 ele-ap-kunsthaus0 #ele-ap-orpheum0 +[ele-dolmetsch-ctl] +ele-dol-mixer +ele-dol-translator + [elevate:vars] host_domain=elevate.at env_group=dan @@ -90,6 +94,7 @@ ele-router [elevate:children] ele-ap +ele-dolmetsch-ctl ############################### @@ -126,6 +131,10 @@ scaleway-kernel ele-ap +[dolmetsch-ctl:children] +ele-dolmetsch-ctl + + ### kubernetes cluster: emc [k8s-emc-encoder] #dione -- cgit v1.2.3