update playbooks

ansible/playbooks/check_upgrade_desktop.yml

+---
+- hosts: desktop
+  gather_facts: no
+  tasks:
+
+  - name: drop temp repo
+    shell: epm rr tasks
+
+  - name: update
+    shell: epm update
+
+
+  - name: upgrade
+    shell: epm upgrade --auto
+

ansible/playbooks/clean_desktop1.yml

+---
+- hosts: desktop
+  gather_facts: no
+  tasks:
+
+  - name: update repositories
+    shell: epm update
+    register: epmu
+
+  - name: clean files
+    shell: epmi systemd-settings-disable-dumpcore systemd-settings-enable-log-to-tty12 systemd-settings-enable-showstatus
+

ansible/playbooks/control_sudo_weelonly.yml

+---
+- hosts: test2
+  gather_facts: no
+  tasks:
+
+  - name: update repositories
+    shell:epm upgrade 
+    register: epm
+
+# TODO: сначала смотреть, что там удаляется
+  - name: control sudo weelonly
+    shell: control sudo weelonly

ansible/playbooks/forZabbix/force_zabbix.yml

+---
+- hosts: smartmon
+  gather_facts: no
+  tasks:
+  
+  - name: copy script
+    copy: src=/var/tmp/check_smartmon dest=/usr/lib/nagios/plugins
+    become: true
+
+#  - name: copy script
+#    copy: src=/usr/local/sbin/script.sh dest=/usr/local/sbin
+#    become: true
+#
+#  - name: copy second script
+#    copy: src=/usr/local/sbin/for_zabbix.sh dest=/usr/local/sbin
+#    become: true
+# 
+#  - name: start script
+#    shell: bash /usr/local/sbin/script.sh
+#    become: true
+

ansible/playbooks/forZabbix/iostat.yml

+---
+- hosts: testZABBIX1
+  gather_facts: no
+  tasks:
+  - name: update repositories
+    shell: epm update
+
+  - name: install iostat
+    shell: epm --auto install sysstat
+
+  - name: install hddtemp
+    shell: epm --auto install hddtemp
+
+  - name: copy script
+    copy: src=/usr/local/sbin/iostat.sh dest=/usr/local/sbin
+
+  - name: start script
+    shell: bash /usr/local/sbin/iostat.sh
+
+  - name: Add monitoting disk util with iostat.
+    cron:
+      name: 'iostat output'
+      job: 'DATA=$(S_TIME_FORMAT=ISO /usr/bin/iostat -yxdt -o JSON 59 1) ; echo "$DATA" >/tmp/iostat-cron.out'
+      state: present
+    tags: cronjob
\ No newline at end of file

ansible/playbooks/forZabbix/update_package.yml

+---
+- hosts: testZABBIX1
+  gather_facts: no
+  tasks:
+  
+  - name: copy script
+    copy: src=/usr/local/sbin/del_agent.sh dest=/usr/local/sbin
+  
+  - name: start script
+    shell: bash /usr/local/sbin/del_agent.sh
\ No newline at end of file

ansible/playbooks/gluster_update_from_task.yml

@@ -5,12 +5,12 @@
   tasks:
 
   - name: add repo
-    shell: epm addrepo 198327
+    shell: epm addrepo 245562
   - name: update repo
     shell: epm update || true
   - name: update gluster
-    shell: epm install glusterfs3 --auto
+    shell: epm install glusterfs7-server --auto
   - name: restart gluster
     shell: serv glusterd restart
   - name: remove repo
-    shell: epm removerepo 198327
+    shell: epm removerepo 245562

ansible/playbooks/install-eterban-fail2ban.yml

+---
+- hosts: test
+  gather_facts: no
+  tasks:
+
+  - name: install eterban-fail2ban
+    shell: epm update

ansible/playbooks/lm-sensors.yml

+---
+- hosts: lm-sensors
+  gather_facts: no
+  tasks:
+
+  - name: update repositories
+    shell: epm update
+
+  - name: install sensors
+    shell: epm --auto install lm_sensors
+
+

ansible/playbooks/netdata-disable-email.yml

+---
+- hosts: poweroff
+  gather_facts: no
+  tasks:
+
+  - name: disable email netdata
+    lineinfile:
+      dest: /etc/netdata/health_alarm_notify.conf
+      regexp: '^SEND_EMAIL="YES"'
+      line: 'SEND_EMAIL="NO"'
+      state: present
+
+  - name: restart netdata
+    shell: serv netdata restart
+    register: restart-netdata

ansible/playbooks/touch_40-ipv6.yml

+---
+- hosts: desktop
+  gather_facts: no
+  tasks:
+
+  - name: create file
+    copy:
+      dest: "/etc/sysctl.d/40-ipv6.conf"
+      content: |
+        # Enable IPv6 Privacy Extensions
+        net.ipv6.conf.all.use_tempaddr = 2
+        net.ipv6.conf.default.use_tempaddr = 2
+

ansible/playbooks/tune_chromium.yml

+---
+- hosts: desktop
+  gather_facts: no
+  tasks:
+
+#  - name: update repositories
+#    shell: epm update
+#    register: epmu
+
+#  - name: upgrade --no-remove
+#    shell: epm upgrade --auto --no-remove
+
+  - name: mkdir
+    shell: mkdir -p /etc/chromium/policies/recommended
+  - name: create file
+    copy:
+      dest: "/etc/chromium/policies/recommended/etersoft-kerberos.json"
+      content: |
+        {
+        "AuthServerWhitelist": "*.etersoft.ru,*.eterhost.ru",
+        "AuthNegotiateDelegateWhitelist": "*.etersoft.ru,*.eterhost.ru"
+        }

ansible/playbooks/upgrade_desktop.yml

@@ -5,12 +5,16 @@
 
   - name: update repositories
     shell: epm update
-    register: epmu
+
+  - name: upgrade epm
+    shell: epm upgrade --auto
 
 #  - name: upgrade --no-remove
 #    shell: epm upgrade --auto --no-remove
 
-# TODO: сначала смотреть, что там удаляется
-  - name: upgrade
-    shell: epm upgrade --auto
+#  TODO: сначала смотреть, что там удаляется
+#   - name: upgrade
+#     shell: epm upgrade --auto
 
+#  - name: upgrade internal
+#    shell: epmi /var/ftp/tmp/lav/etersoft-devel-utils-1.8.11-alt1.noarch.rpm

ansible/playbooks/upgrade_eepm.yml

+---
+- hosts: desktop
+  gather_facts: no
+  tasks:
+
+  - name: upgrade epm
+    shell: epm upgrade 267583
+

ansible/playbooks/upgrade_openssl.yml

+---
+- hosts: sudoupgrade
+  gather_facts: no
+  tasks:
+
+  - name: update repositories
+    shell: epm update
+    register: epmu
+
+#  - name: upgrade --no-remove
+#    shell: epm upgrade --auto --no-remove
+
+# TODO: сначала смотреть, что там удаляется
+  - name: upgrade openssl
+    shell: epm --auto install openssl
\ No newline at end of file

ansible/playbooks/upgrade_openssl_cont.yml

+---
+- hosts: sudoupgradeconteiners
+  gather_facts: no
+  tasks:
+
+  - name: check version openssl
+    shell: evz exec all "epmq openssl"
+
+  - name: update repositoris
+    shell: evz exec all "epm update"
+
+  - name: install new openssl
+    shell: evz exec all "epmi openssl </dev/null --auto" 
\ No newline at end of file

ansible/playbooks/upgrade_sudo.yml

+---
+- hosts: sudoupgrade
+  gather_facts: no
+  tasks:
+
+  - name: update repositories
+    shell: epm update
+    register: epmu
+
+#  - name: upgrade --no-remove
+#    shell: epm upgrade --auto --no-remove
+
+# TODO: сначала смотреть, что там удаляется
+  - name: install new sudo
+    shell: epm --auto install sudo
+
+#  - name: drop temp repo
+#    shell: epm rr 248002

ansible/playbooks/upgrade_sudo_conteiners.yml

+---
+- hosts: sudoupgradeconteiners
+  gather_facts: no
+  tasks:
+
+  - name: check version sudo 
+    shell: evz exec "epmqp sudo" all
+
+  - name: update repositoris
+    shell: evz exec "epm update" all
+
+  - name: install new sudo
+    shell: evz exec "epmi sudo" all
+

ansible/playbooks/upgrade_telegram.yml

+---
+- hosts: desktop
+  gather_facts: no
+  tasks:
+
+#  - name: update repositories
+#    shell: epm ar 248002 ; epm update
+#    register: epmu
+
+#  - name: upgrade --no-remove
+#    shell: epm upgrade --auto --no-remove
+
+# TODO: сначала смотреть, что там удаляется
+#  - name: install new telegram
+#    shell: epm --auto install telegram-desktop
+
+  - name: drop temp repo
+    shell: epm rr 248002
+