feat: Remove Fedora server as supported OS (#774)

This commit is contained in:
Devin Buhl authored and GitHub committed 2023-06-05 11:15:34 -04:00
1 parent 3e12b90829
commit 4ae51b0db8
3 files changed
+10 -59

No files matched your search

+4 -4
View File
@@ -48,7 +48,7 @@ With that out of the way please continue on if you are still interested...
### 💻 Systems
- One or more nodes with a fresh install of [Fedora Server 37+](https://getfedora.org/en/server/download/) or [Ubuntu 22.04 Server](https://ubuntu.com/download/server) (not minimal).
- One or more nodes with a fresh install of [Ubuntu 22.04 Server](https://ubuntu.com/download/server) (not minimal / not raspi edition).
- These nodes can be ARM64/AMD64 bare metal or VMs.
- An odd number of control plane nodes, greater than or equal to 3 is required if deploying more than one control plane node.
- A [Cloudflare](https://www.cloudflare.com/) account with a domain, this will be managed by external-dns. You can [register new domains](https://www.cloudflare.com/products/registrar/) directly thru Cloudflare.
@@ -198,9 +198,9 @@ In order to expose services to the internet you will need to create a [Cloudflar
task configure
```
### ⚡ Preparing Fedora or Ubuntu Server with Ansible
### ⚡ Preparing Ubuntu Server with Ansible
📍 Here we will be running a Ansible Playbook to prepare Fedora or Ubuntu Server for running a Kubernetes cluster.
📍 Here we will be running an Ansible Playbook to prepare Ubuntu server for running a Kubernetes cluster.
📍 Nodes are not security hardened by default, you can do this with [dev-sec/ansible-collection-hardening](https://github.com/dev-sec/ansible-collection-hardening) or similar if supported. This is an advanced configuration and generally not recommended unless you want to [DevSecOps](https://www.ibm.com/topics/devsecops) your cluster and nodes.
@@ -226,7 +226,7 @@ In order to expose services to the internet you will need to create a [Cloudflar
task ansible:ping
```
5. Run the Fedora/Ubuntu Server Ansible prepare playbook
5. Run the Ansible prepare playbook
```sh
task ansible:prepare
@@ -2,21 +2,6 @@
# ssh_authorized_keys: []
fedora:
packages:
- dnf-plugin-system-upgrade
- dnf-utils
- hdparm
- htop
- ipvsadm
- lm_sensors
- nano
- nvme-cli
- socat
- python3-kubernetes
- python3-libselinux
- python3-pyyaml
ubuntu:
packages:
- hdparm
+6 -40
View File
@@ -21,25 +21,13 @@
- name: Networking | Set hostname to inventory hostname
ansible.builtin.hostname:
name: "{{ inventory_hostname }}"
- name: Networking | Update /etc/hosts to include inventory hostname
- name: Networking | Update hosts file to include inventory hostname
ansible.builtin.blockinfile:
path: /etc/hosts
block: |
127.0.1.1 {{ inventory_hostname }}
- name: Packages | Fedora
block:
- name: Packages | Install required packages
ansible.builtin.dnf:
name: "{{ fedora.packages | default([]) }}"
state: present
update_cache: true
- name: Packages | Remove leaf packages
ansible.builtin.dnf:
autoremove: true
when: ansible_facts['distribution'] == 'Fedora'
- name: Packages | Ubuntu
- name: Packages
block:
- name: Packages | Install required packages
ansible.builtin.apt:
@@ -55,7 +43,6 @@
install_recommends: false
notify: Reboot
when: "'raspi' in ansible_kernel"
when: ansible_facts['distribution'] == 'Ubuntu'
- name: Packages | Cilium CLI
ansible.builtin.include_role:
@@ -78,20 +65,12 @@
- name: System Configuration (1)
block:
- name: System Configuration (1) | Disable firewalld | Fedora
ansible.builtin.systemd:
service: firewalld.service
enabled: false
masked: true
state: stopped
when: ansible_facts['distribution'] == 'Fedora'
- name: System Configuration (1) | Disable ufw | Ubuntu
- name: System Configuration (1) | Disable ufw
ansible.builtin.systemd:
service: ufw.service
enabled: false
masked: true
state: stopped
when: ansible_facts['distribution'] == 'Ubuntu'
- name: System Configuration (1) | Enable fstrim
ansible.builtin.systemd:
service: fstrim.timer
@@ -128,28 +107,15 @@
net.bridge.bridge-nf-call-ip6tables: 1
fs.inotify.max_user_watches: 524288
fs.inotify.max_user_instances: 512
- name: System Configuration (2) | Disable swap | Fedora
ansible.builtin.dnf:
name: zram-generator-defaults
state: absent
when: ansible_facts['distribution'] == 'Fedora'
- name: System Configuration (2) | Disable swap at runtime | Ubuntu
- name: System Configuration (2) | Disable swap at runtime
ansible.builtin.command: swapoff -a
when:
- ansible_facts['distribution'] == 'Ubuntu'
- ansible_swaptotal_mb > 0
- name: System Configuration (2) | Disable swap at boot | Ubuntu
when: ansible_swaptotal_mb > 0
- name: System Configuration (2) | Disable swap at boot
ansible.posix.mount:
name: "{{ item }}"
fstype: swap
state: absent
loop: ["none", "swap"]
when: ansible_facts['distribution'] == 'Ubuntu'
- name: System Configuration (2) | Permissive SELinux | Fedora
ansible.posix.selinux:
state: permissive
policy: targeted
when: ansible_facts['distribution'] == 'Fedora'
notify: Reboot
handlers: