mirror of
https://github.com/k3s-io/k3s-ansible.git
synced 2024-09-29 04:07:30 +02:00
Add /usr/local/bin to secure_path, Add br_netfilter on centos
Signed-off-by: Julien DOCHE <julien.doche@gmail.com>
This commit is contained in:
parent
1af4255e8f
commit
12aad6598a
@ -18,6 +18,18 @@
|
|||||||
state: present
|
state: present
|
||||||
reload: yes
|
reload: yes
|
||||||
|
|
||||||
|
- name: Add br_netfilter to /etc/modules-load.d/
|
||||||
|
copy:
|
||||||
|
content: "br_netfilter"
|
||||||
|
dest: /etc/modules-load.d/br_netfilter.conf
|
||||||
|
when: ansible_distribution in ['CentOS', 'Red Hat Enterprise Linux']
|
||||||
|
|
||||||
|
- name: Load br_netfilter
|
||||||
|
modprobe:
|
||||||
|
name: br_netfilter
|
||||||
|
state: present
|
||||||
|
when: ansible_distribution in ['CentOS', 'Red Hat Enterprise Linux']
|
||||||
|
|
||||||
- name: Set bridge-nf-call-iptables (just to be sure)
|
- name: Set bridge-nf-call-iptables (just to be sure)
|
||||||
sysctl:
|
sysctl:
|
||||||
name: "{{ items }}"
|
name: "{{ items }}"
|
||||||
@ -28,3 +40,13 @@
|
|||||||
loop:
|
loop:
|
||||||
- net.bridge.bridge-nf-call-iptables
|
- net.bridge.bridge-nf-call-iptables
|
||||||
- net.bridge.bridge-nf-call-ip6tables
|
- net.bridge.bridge-nf-call-ip6tables
|
||||||
|
|
||||||
|
- name: Add /usr/local/bin to sudo secure_path
|
||||||
|
lineinfile:
|
||||||
|
line: 'Defaults secure_path = /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin'
|
||||||
|
regexp: "Defaults(\\s)*secure_path(\\s)*="
|
||||||
|
state: present
|
||||||
|
insertafter: EOF
|
||||||
|
path: /etc/sudoers
|
||||||
|
validate: 'visudo -cf %s'
|
||||||
|
when: ansible_distribution in ['CentOS', 'Red Hat Enterprise Linux']
|
||||||
|
Loading…
Reference in New Issue
Block a user