Commit 12aad659 authored by Julien DOCHE's avatar Julien DOCHE
Browse files

Add /usr/local/bin to secure_path, Add br_netfilter on centos 



Signed-off-by: default avatarJulien DOCHE <julien.doche@gmail.com>
parent 1af4255e

roles/prereq/tasks/main.yml

+22 −0
Original line number Diff line number Diff line
@@ -18,6 +18,18 @@ 
    state: present

    reload: yes



- name: Add br_netfilter to /etc/modules-load.d/

  copy:

    content: "br_netfilter"

    dest: /etc/modules-load.d/br_netfilter.conf

  when: ansible_distribution in ['CentOS', 'Red Hat Enterprise Linux']



- name: Load br_netfilter

  modprobe:

    name: br_netfilter

    state: present

  when: ansible_distribution in ['CentOS', 'Red Hat Enterprise Linux']



- name: Set bridge-nf-call-iptables (just to be sure)

  sysctl:

    name: "{{ items }}"
@@ -28,3 +40,13 @@ 
  loop:

    - net.bridge.bridge-nf-call-iptables

    - net.bridge.bridge-nf-call-ip6tables



- name: Add /usr/local/bin to sudo secure_path

  lineinfile:

    line: 'Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin'

    regexp: "Defaults(\\s)*secure_path(\\s)*="

    state: present

    insertafter: EOF

    path: /etc/sudoers

    validate: 'visudo -cf %s'

  when: ansible_distribution in ['CentOS', 'Red Hat Enterprise Linux']