Closed sjpb closed 3 months ago
Fat image build: https://github.com/stackhpc/ansible-slurm-appliance/actions/runs/8192527716
Edit: succeeded, openhpc-240307-1747-b47ff153
Canceled workflow, rebuilding image for safety: https://github.com/stackhpc/ansible-slurm-appliance/actions/runs/8201785642: openhpc-240308-1011-0f0291c0
Uses extravars instead of a workaround in
fatimage.yml
to ensure firewalld service is not enabled on all nodes, to minimise differences/changes of error between fatimage.yml and site.ymlBackground for future reference:
ansible/bootstrap.yml
is run by bothsite.yml
andfatimage.yml
This runs thefirewalld
role which dnf-installs firewalld . On install, the firewalld service is enabled so after a reboot it starts running. Hence by default firewalld ends up running on all nodes created with a fatimage, even though its only wanted on the login node(s) running fail2ban. Before this PR there was a workaround in fatimage.yml to explicitly disable it on build.Requires new image build.