From 56a1c65d4baf6a857742ac37a9b696c039a2f253 Mon Sep 17 00:00:00 2001 From: ReYo Date: Wed, 28 Aug 2024 15:56:40 +0000 Subject: [PATCH] upload --- README.md | 5 +++ roles/start/tasks/cpu_configuration.yml | 43 +++++++++++++++++++++ roles/start/tasks/encrypt_disks.yml | 27 +++++++++++++ roles/start/tasks/main.yml | 4 ++ roles/start/tasks/network_configuration.yml | 9 +++++ start.yml | 15 +++++++ 6 files changed, 103 insertions(+) create mode 100644 README.md create mode 100644 roles/start/tasks/cpu_configuration.yml create mode 100644 roles/start/tasks/encrypt_disks.yml create mode 100644 roles/start/tasks/main.yml create mode 100644 roles/start/tasks/network_configuration.yml create mode 100644 start.yml diff --git a/README.md b/README.md new file mode 100644 index 0000000..83cb3dd --- /dev/null +++ b/README.md @@ -0,0 +1,5 @@ +#inventory +[test] +192.168.251.104 ansible_connection=ssh ansible_ssh_user=one ansible_ssh_pass=wimark ansible_sudo_pass=wimark second_disk=sdb adjacent_partition=sda + + diff --git a/roles/start/tasks/cpu_configuration.yml b/roles/start/tasks/cpu_configuration.yml new file mode 100644 index 0000000..181d45d --- /dev/null +++ b/roles/start/tasks/cpu_configuration.yml @@ -0,0 +1,43 @@ +- name: Disable C-state for all CPUs + command: | + echo 'options processor max_cstate=1' >> /etc/default/grub + register: disable_cstate_result + ignore_errors: true # Игнорируем ошибки, чтобы продолжить выполнение + changed_when: disable_cstate_result.rc == 0 # Установка состояния измененного, если код возврата 0 + +- name: Check result of disabling C-state + debug: + msg: "Disable C-state command executed successfully." + when: disable_cstate_result.rc == 0 + +- name: Check for errors in disabling C-state + debug: + msg: "Error disabling C-state: {{ disable_cstate_result.stderr }}" + when: disable_cstate_result.rc != 0 + +- name: Update grub configuration + command: update-grub + register: update_grub_result + ignore_errors: true # Игнорируем ошибки, чтобы продолжить выполнение + +- name: Check result of updating grub + debug: + msg: "Grub updated successfully." + when: update_grub_result.rc == 0 + +- name: Check for errors in updating grub + debug: + msg: "Error updating grub: {{ update_grub_result.stderr }}" + when: update_grub_result.rc != 0 + +- name: Switch CPU operation to performance mode + ansible.builtin.shell: | + for cpu in /sys/devices/system/cpu/cpu*/cpufreq/scaling_governor; do + echo "performance" > "$cpu"; + done + register: switch_cpu_mode + failed_when: switch_cpu_mode.rc != 0 + when: switch_cpu_mode is not skipped + changed_when: switch_cpu_mode.rc == 0 + ignore_errors: true + diff --git a/roles/start/tasks/encrypt_disks.yml b/roles/start/tasks/encrypt_disks.yml new file mode 100644 index 0000000..4045959 --- /dev/null +++ b/roles/start/tasks/encrypt_disks.yml @@ -0,0 +1,27 @@ +--- +- name: Encrypt second disk + ansible.builtin.shell: | + echo -n "your_passphrase" | cryptsetup luksFormat /dev/{{ second_disk }} --key-file=- + ignore_errors: true + +- name: Open encrypted second disk + ansible.builtin.shell: | + echo -n "your_passphrase" | cryptsetup luksOpen /dev/{{ second_disk }} crypt_second_disk --key-file=- + ignore_errors: true + register: second_disk_status + +- name: Format the encrypted second disk + command: mkfs.ext4 /dev/mapper/crypt_second_disk + when: second_disk_status.rc == 0 + +- name: Ensure the mount point exists + file: + path: /mnt/encrypted_disk + state: directory + +- name: Mount the encrypted second disk + mount: + path: /mnt/encrypted_disk + src: /dev/mapper/crypt_second_disk + fstype: ext4 + state: mounted diff --git a/roles/start/tasks/main.yml b/roles/start/tasks/main.yml new file mode 100644 index 0000000..219fb65 --- /dev/null +++ b/roles/start/tasks/main.yml @@ -0,0 +1,4 @@ +- include_tasks: encrypt_disks.yml +- include_tasks: cpu_configuration.yml +- include_tasks: network_configuration.yml + diff --git a/roles/start/tasks/network_configuration.yml b/roles/start/tasks/network_configuration.yml new file mode 100644 index 0000000..998584b --- /dev/null +++ b/roles/start/tasks/network_configuration.yml @@ -0,0 +1,9 @@ +- name: Rename network interface to net0 + ansible.builtin.shell: ip link set dev {{ ansible_default_ipv4.interface }} name net0; netplan apply + register: rename_interface + failed_when: rename_interface.rc != 0 + +- name: Display renamed network interface + ansible.builtin.debug: + msg: "Renamed network interface: net0" + diff --git a/start.yml b/start.yml new file mode 100644 index 0000000..05d1abc --- /dev/null +++ b/start.yml @@ -0,0 +1,15 @@ +- name: StartOperation + hosts: test + become: yes + + roles: + - start + + tasks: + - name: Display CPU Information + command: lscpu + register: cpu_info + + - name: Display CPU Information + debug: + var: cpu_info.stdout_lines