Skip to content

Instantly share code, notes, and snippets.

View flyemsafe's full-sized avatar

Rodrique Heron flyemsafe

  • Red Hat, Inc
  • Orlando, Fl
View GitHub Profile

Vars for my defaults/main.yml

postfix_conf:
  relayhost: 'smtp.mailgun.org:587'
  smtp_tls_security_level: 'encrypt'
  smtp_tls_note_starttls_offer: 'yes'
  smtp_sasl_auth_enable: 'yes'
  smtp_sasl_password_maps: "static:{{ mailgun_ssmtp_user }}:{{ mailgun_ssmtp_pass }}"
  smtp_sasl_security_options: 'noanonymous'
@flyemsafe
flyemsafe / ansible-tower.md
Last active August 3, 2020 18:09
ansible-tower

Tower Repos

[ansible-tower]
name=Ansible Tower Repository - $releasever $basearch
baseurl=http://releases.ansible.com/ansible-tower/rpm/epel-7-$basearch
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

[ansible-tower-dependencies]
@flyemsafe
flyemsafe / openscap-with-satellite-6_6.md
Last active January 23, 2020 22:01
Adding SCAP profiles to Satellite

Download the latest SCAP profile

This was done on the Satellite server.

current_dir=$(pwd)
cac_release=0.1.48
scap_guide="scap-security-guide-${cac_release}"
wget https://github.com/ComplianceAsCode/content/releases/download/v${cac_release}/scap-security-guide-${cac_release}.zip
unzip scap-security-guide-${cac_release}.zip
@flyemsafe
flyemsafe / satellite-server-install.md
Last active November 5, 2019 03:06
satellite_server
- name: PLAY| install satellite server
  hosts: satellite
  gather_facts: yes
  become: yes
  vars_files:
    - vars/all.yml
    - vars/vault.yml
    - vars/satellite_server.yml
@flyemsafe
flyemsafe / ocp42.xml
Created October 29, 2019 21:21
libvirt nat example
[admin@lunchbox01 openshift-home-lab]$ sudo virsh net-dumpxml ocp42
<network>
<name>ocp42</name>
<uuid>c6bcc01b-8dec-4801-a053-7b87a84c2bbd</uuid>
<forward mode='nat'>
<nat>
<port start='1024' end='65535'/>
</nat>
</forward>
<bridge name='virbr1' stp='on' delay='0'/>

Configure USB device

  • Ensure all required packages are installed
dnf install grub2-efi shim gdisk grub2-efi-modules grub2-efi-x64-modules
  • Define USB device varaible
sudo cat /etc/sysconfig/network-scripts/ifcfg-eno1
DEVICE=eno1
NAME=VMBR0SLAVE
TYPE=Ethernet
HWADDR=ac:1f:6b:7b:30:06
BOOTPROTO=none
ONBOOT=yes
BRIDGE=vmbr0
ZONE=public
@flyemsafe
flyemsafe / gist:8be5a767f011955f49c4887928817d4b
Last active November 12, 2020 07:34
Setup OpenShift 3.11 Satellite
  • Set Environment Variables
ARCH="x86_64"
TYPE="app"
LC_ENVS="Testing Production"
ORG=ACME
SAT_VER="6.4"
CV_PRODUCT="openshift"
CV="cv-${TYPE}-${CV_PRODUCT}"
@flyemsafe
flyemsafe / gist:dbfad51459de7c90871a1e1a01ada305
Created January 24, 2019 16:11
Example playbook to bootstrap windows
- name: Provision VMware Instances
vmware_guest:
validate_certs: no
hostname: "{{ esxi_hostname }}"
username: "{{ esxi_username }}"
password: "{{ esxi_password }}"
esxi_hostname: "{{ esxi_target_hostname | default(esxi_hostname) }}"
datacenter: "{{ esxi_datacenter | default('ha-datacenter') }}"
name: "{{ item }}"
folder: "/{{ esxi_datacenter | default('ha-datacenter') }}/{{ esxi_folder | default('vm') }}"
@flyemsafe
flyemsafe / gist:603b4c9d897b18038b7bf80a1c2d776e
Last active November 15, 2019 15:49
Satellite 6 Product with OpenShift container repos
## Create Red Hat Container Catalog
### Helper Function
```
sync_container_repos () {
REPOS_LIST=$1
CONTAINER_REPOS="$(mktemp)"