diff --git a/ansible/idr-omero-readonly.yml b/ansible/idr-omero-readonly.yml index d31d33b2..318c90c1 100644 --- a/ansible/idr-omero-readonly.yml +++ b/ansible/idr-omero-readonly.yml @@ -14,6 +14,14 @@ path: /data/idr-metadata state: directory mode: 0755 + # Lock down the read-write node in the read-only cluster + - name: Display nfs-server status + command: systemctl status nfs-server + register: command_output + + - name: Print to console + debug: + msg: "{{command_output.stdout}}" roles: @@ -32,54 +40,8 @@ # Include restart handlers - role: ome.omero_common - - role: ome.selinux_utils tasks: - # Lock down the read-write node in the read-only cluster - - name: Display nfs config contents - command: cat /etc/exports - register: command_output - - - name: Print to console - debug: - msg: "{{command_output.stdout}}" - - - name: install checkpolicy - become: true - ansible.builtin.dnf: - update_cache: true - name: - - checkpolicy - - policycoreutils - - ipa-selinux - - python3-policycoreutils - - python3-libselinux - - - name: Enable SELinux - ansible.posix.selinux: - policy: targeted - state: enforcing - - - name: Set selinux vars for nfs - ansible.posix.seboolean: - name: - - nfs_export_all_ro - - nfs_export_all_rw - state: true - persistent: true - - - - - name: check selinux - debug: - msg: "SELinux is enabled or permissive" - when: selinux_enabled - - - name: check not installed - debug: - msg: "SELinux is NOT enabled or permissive" - when: selinux_enabled - - name: OMERO.server prevent external access become: yes copy: