Skip to content

Commit

Permalink
debug 7.2
Browse files Browse the repository at this point in the history
  • Loading branch information
khaledk2 committed Dec 1, 2024
1 parent ded9be7 commit bb38c5c
Showing 1 changed file with 8 additions and 46 deletions.
54 changes: 8 additions & 46 deletions ansible/idr-omero-readonly.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,14 @@
path: /data/idr-metadata
state: directory
mode: 0755
# Lock down the read-write node in the read-only cluster
- name: Display nfs-server status
command: systemctl status nfs-server
register: command_output

- name: Print to console
debug:
msg: "{{command_output.stdout}}"

roles:

Expand All @@ -32,54 +40,8 @@

# Include restart handlers
- role: ome.omero_common
- role: ome.selinux_utils

tasks:
# Lock down the read-write node in the read-only cluster
- name: Display nfs config contents
command: cat /etc/exports
register: command_output

- name: Print to console
debug:
msg: "{{command_output.stdout}}"

- name: install checkpolicy
become: true
ansible.builtin.dnf:
update_cache: true
name:
- checkpolicy
- policycoreutils
- ipa-selinux
- python3-policycoreutils
- python3-libselinux

- name: Enable SELinux
ansible.posix.selinux:
policy: targeted
state: enforcing

- name: Set selinux vars for nfs
ansible.posix.seboolean:
name:
- nfs_export_all_ro
- nfs_export_all_rw
state: true
persistent: true



- name: check selinux
debug:
msg: "SELinux is enabled or permissive"
when: selinux_enabled

- name: check not installed
debug:
msg: "SELinux is NOT enabled or permissive"
when: selinux_enabled

- name: OMERO.server prevent external access
become: yes
copy:
Expand Down

0 comments on commit bb38c5c

Please sign in to comment.