roles_timesync/timesync.yml
2020-12-03 16:10:48 +01:00

159 lines
3.4 KiB
YAML

---
### Create groups
- hosts: all
pre_tasks:
- name: Group hosts by virt role
group_by:
key: "virt_{{ ansible_virtualization_role }}"
- name: See if timesync service should be forced
set_fact:
timesync_force: timesync_servers is defined or timesync_pools is defined
roles:
- role: timesync-disabled
when: timesync_force_clean|default(False)
- hosts: virt_guest
gather_facts: no
tasks:
- name: Group virt guests by virt type
group_by:
key: "virtguest_{{ ansible_virtualization_type }}"
### Hosts: Install/Configure NTP
- hosts:
- virt_NA
- virt_host
gather_facts: no
roles:
- timesync-enabled
### Container-Guests: Disable timesync!
- hosts:
- virtguest_docker
- virtguest_openvz
- virtguest_linuxvserver
- virtguest_lxc
- virtguest_lxc-libvirt
- virtguest_rkt
- virtguest_uml
- virtguest_systemd-nspawn
- virtguest_container-other
gather_facts: no
roles:
- role: timesync-disabled
when: not timesync_development|default(False)
- role: timesync-enabled
when: timesync_development|default(False)
### KVM-Guests:
# https://s19n.net/articles/2011/kvm_clock.html
- hosts:
- virtguest_kvm
gather_facts: no
pre_tasks:
- command: cat /sys/devices/system/clocksource/clocksource0/current_clocksource
register: timesync_clocksource
changed_when: False
roles:
- role: timesync-disabled
when: timesync_clocksource.stdout == "kvm-clock" and not timesync_force
- role: timesync-enabled
when: timesync_clocksource.stdout != "kvm-clock" or timesync_force
### VMware-Guests:
# Open-VM-Tools: https://blogs.vmware.com/vsphere/2015/09/open-vm-tools-ovt-the-future-of-vmware-tools-for-linux.html
- hosts:
- virtguest_VMware
gather_facts: no
pre_tasks:
- name: Check for vmware-toolbox-cmd
stat:
path: /usr/bin/vmware-toolbox-cmd
register: vmwtbcmd
- name: Install Open-VM-Tools
package:
name: open-vm-tools
state: present
when: vmwtbcmd.stat.exists == False
- name: Get timesync status
shell: 'vmware-toolbox-cmd timesync status || true'
changed_when: False
register: vmwtbcmd_timesync
- assert:
that:
- vmwtbcmd_timesync.stdout in ["Enabled", "Disabled"]
roles:
- role: timesync-disabled
when: vmwtbcmd_timesync.stdout == "Enabled" and not timesync_force
- role: timesync-enabled
when: vmwtbcmd_timesync.stdout == "Disabled" or timesync_force
### Xen-Guests:
# Old: https://wiki.xen.org/wiki/Xen_FAQ_DomU#How_can_i_synchronize_a_dom0_clock.3F
# New: /sys/devices/system/clocksource/clocksource0/current_clocksource → "xen"
- hosts:
- virtguest_xen
gather_facts: no
pre_tasks:
- shell: 'cat /proc/sys/xen/independent_wallclock || cat /sys/devices/system/clocksource/clocksource0/current_clocksource'
changed_when: False
register: timesync_clocksource
roles:
- role: timesync-disabled
when: timesync_clocksource.stdout in ["1", "xen"] and not timesync_force
- role: timesync-enabled
when: timesync_clocksource.stdout not in ["1", "xen"] or timesync_force
### FIXME
- hosts:
- virtguest_RHEV
- virtguest_virtualbox
- virtguest_VirtualPC
- virtguest_parallels
- virtguest_powervm_lx86
- "virtguest_PR/SM_LPAR"
- virtguest_ibm_systemz
gather_facts: no
tasks:
- fail:
msg: "Not yet implemented"