lisenet / homelab-ansible

Ansible playbooks to build my KVM-based homelab.
https://www.lisenet.com/2021/install-a-multi-master-kubernetes-cluster-with-ansible/
BSD 3-Clause "New" or "Revised" License
46 stars 18 forks source link

Migrate Admin hosts from Rocky 8 to Rocky 9 #56

Open lisenet opened 1 year ago

lisenet commented 1 year ago

The emphasis is to migrate to Rocky 9 completely. Update Ansible configuration where required.

lisenet commented 1 year ago

Things to look into.

Named

  1. /etc/named.conf:45: option 'dnssec-enable' is obsolete and should be removed.
  2. none:90: 'max-cache-size 90%' - setting to 867MB (out of 963MB).

DHCPd

  1. ldap_gssapi_principal is not set,GSSAPI Authentication for LDAP will not be used.

Keepalived

  1. vrrp_garp_interval '0' is invalid.
  2. vrrp_gna_interval '0' is invalid.
  3. SELinux is preventing /usr/sbin/keepalived from setattr access on the file killall.
  4. WARNING - script killall resolved by path search to /usr/bin/killall. Please specify full path.
  5. SECURITY VIOLATION - scripts are being executed but script_security not enabled.
  6. WARNING - default user 'keepalived_script' for script execution does not exist - please create.
  7. (/etc/keepalived/keepalived.conf: Line 37) Truncating auth_pass to 8 characters.