From ee448d34dbe1b2087f7c64c6c15e3d9d0a84f6f5 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Sat, 22 Aug 2020 20:35:11 +0200 Subject: finalize chaos-at-home/fileserver --- roles/chaos-at-home/fileserver/defaults/main.yml | 21 ++++++-- roles/chaos-at-home/fileserver/tasks/main.yml | 67 +++++++++++++++++++----- 2 files changed, 71 insertions(+), 17 deletions(-) (limited to 'roles') diff --git a/roles/chaos-at-home/fileserver/defaults/main.yml b/roles/chaos-at-home/fileserver/defaults/main.yml index 8a4452ce..aa9ee94b 100644 --- a/roles/chaos-at-home/fileserver/defaults/main.yml +++ b/roles/chaos-at-home/fileserver/defaults/main.yml @@ -1,21 +1,24 @@ --- # fileserver_zfs_default_pool: tank # fileserver_zfs_filesystems: -# foo: +# - name: foo # pool: bar # properties: # quota: 100G +# owner: root +# group: users +# mode: "02775" # export_as: bar # export_to: # - dest: 192.0.2.3/32 # opts: # - ro # - async -# private: +# - name: private # properties: # quota: 100G # export: no -# public: +# - name: public: # properties: # quota: 100G @@ -28,6 +31,7 @@ fileserver_zfs_common_properties: # - ro # - sync # - root_squash +# - crossmnt # fileserver_nfs_default_destinations: # - dest: 192.0.2.0/24 # - dest: 192.0.2.128/29 @@ -35,3 +39,14 @@ fileserver_zfs_common_properties: # - rw # - sync # - root_squash + +# fileserver_group_ids: +# foo: 10000 + +# fileserver_users: +# hugo: +# id: 1000 +# groups: +# - users +# seppi: +# id: 1001 diff --git a/roles/chaos-at-home/fileserver/tasks/main.yml b/roles/chaos-at-home/fileserver/tasks/main.yml index 9cc20853..2a780d26 100644 --- a/roles/chaos-at-home/fileserver/tasks/main.yml +++ b/roles/chaos-at-home/fileserver/tasks/main.yml @@ -1,12 +1,12 @@ --- - name: create zfs filesystems - loop: "{{ fileserver_zfs_filesystems | dict2items }}" + loop: "{{ fileserver_zfs_filesystems }}" loop_control: - label: "{{ item.value.pool | default(fileserver_zfs_default_pool) }}/{{ item.key }}" + label: "{{ item.pool | default(fileserver_zfs_default_pool) }}/{{ item.name }}" zfs: - name: "{{ item.value.pool | default(fileserver_zfs_default_pool) }}/{{ item.key }}" + name: "{{ item.pool | default(fileserver_zfs_default_pool) }}/{{ item.name }}" state: present - extra_zfs_properties: "{{ fileserver_zfs_common_properties | combine(item.value.properties | default({})) }}" + extra_zfs_properties: "{{ fileserver_zfs_common_properties | combine(item.properties | default({})) }}" - name: install nfs-server apt: @@ -35,13 +35,13 @@ state: directory - name: create bind mounts for all filesystems to be exported - loop: "{{ fileserver_zfs_filesystems | dict2items }}" + loop: "{{ fileserver_zfs_filesystems }}" loop_control: - label: "{{ item.value.export_as | default(item.key) }}" - when: (item.value.export is not defined) or (item.value.export | bool) + label: "{{ item.export_as | default(item.name) }}" + when: (item.export is not defined) or (item.export | bool) mount: - src: "{{ zfs_zpools[(item.value.pool | default(fileserver_zfs_default_pool))].mountpoint }}/{{ item.key }}" - path: "{{ fileserver_nfs_root }}/{{ item.value.export_as | default(item.key) }}" + src: "{{ zfs_zpools[(item.pool | default(fileserver_zfs_default_pool))].mountpoint }}/{{ item.name }}" + path: "{{ fileserver_nfs_root }}/{{ item.export_as | default(item.name) }}" fstype: none opts: defaults,bind,x-systemd.automount,nofail state: mounted @@ -49,16 +49,55 @@ - name: generate list of all export destinations set_fact: - filesearver_nfs_all_destinations: "{{ fileserver_nfs_default_destinations | map(attribute='dest') | list | union(fileserver_zfs_filesystems | dict2items | selectattr('value.export_to', 'defined') | map(attribute='value.export_to') | flatten | map(attribute='dest') | list) | cidr_merge }}" + filesearver_nfs_all_destinations: "{{ fileserver_nfs_default_destinations | map(attribute='dest') | list | union(fileserver_zfs_filesystems | selectattr('export_to', 'defined') | map(attribute='export_to') | flatten | map(attribute='dest') | list) | cidr_merge }}" - name: export filesystems blockinfile: path: /etc/exports block: | - {{ fileserver_nfs_root }} {% for dest in filesearver_nfs_all_destinations %} {{ dest }}(ro,fsid=0,sync){% endfor %}{{ '' }} - {% for fs in (fileserver_zfs_filesystems | dict2items) %} - {% if (fs.value.export is not defined) or (fs.value.export | bool) %} - {{ fileserver_nfs_root }}/{{ fs.value.export_as | default(fs.key) }} {% for d in fs.value.export_to | default(fileserver_nfs_default_destinations) %} {{ d.dest }}({{ d.opts | default(fileserver_nfs_default_options) | join(',') }}){% endfor %}{{ '' }} + {{ fileserver_nfs_root }} {% for dest in filesearver_nfs_all_destinations %} {{ dest }}(ro,fsid=0,sync,crossmnt){% endfor %}{{ '' }} + {% for fs in fileserver_zfs_filesystems %} + {% if (fs.export is not defined) or (fs.export | bool) %} + {{ fileserver_nfs_root }}/{{ fs.export_as | default(fs.name) }} {% for d in fs.export_to | default(fileserver_nfs_default_destinations) %} {{ d.dest }}({{ d.opts | default(fileserver_nfs_default_options) | join(',') }}){% endfor %}{{ '' }} {% endif %} {% endfor %} notify: restart nfs-server + +- name: create fileserver groups + loop: "{{ fileserver_group_ids | default({}) | dict2items }}" + loop_control: + label: "{{ item.key }}" + group: + name: "{{ item.key }}" + gid: "{{ item.value }}" + +- name: create conanical groups for fileserver users + loop: "{{ fileserver_users | default({}) | dict2items }}" + loop_control: + label: "{{ item.key }}" + group: + name: "{{ item.key }}" + gid: "{{ item.value.id | default(omit) }}" + state: present + +- name: create fileserver users + loop: "{{ fileserver_users | default({}) | dict2items }}" + loop_control: + label: "{{ item.key }}" + user: + name: "{{ item.key }}" + uid: "{{ item.value.id | default(omit) }}" + state: present + group: "{{ item.key }}" + groups: "{{ item.value.groups | default(omit) }}" + +- name: set filesystem root-dir permissions + loop: "{{ fileserver_zfs_filesystems }}" + loop_control: + label: "{{ item.pool | default(fileserver_zfs_default_pool) }}/{{ item.name }}" + when: item.owner is defined or item.group is defined or item.mode is defined + file: + path: "{{ zfs_zpools[(item.pool | default(fileserver_zfs_default_pool))].mountpoint }}/{{ item.name }}" + owner: "{{ item.owner | default(omit) }}" + group: "{{ item.group | default(omit) }}" + mode: "{{ item.mode | default(omit) }}" -- cgit v1.2.3