stackhpc / ansible-slurm-appliance

A Slurm-based HPC workload management environment, driven by Ansible.
36 stars 15 forks source link

Remove special-case for firewalld in builder #364

Closed sjpb closed 3 months ago

sjpb commented 4 months ago

Uses extravars instead of a workaround in fatimage.yml to ensure firewalld service is not enabled on all nodes, to minimise differences/changes of error between fatimage.yml and site.yml

Background for future reference: ansible/bootstrap.yml is run by both site.yml and fatimage.yml This runs the firewalld role which dnf-installs firewalld . On install, the firewalld service is enabled so after a reboot it starts running. Hence by default firewalld ends up running on all nodes created with a fatimage, even though its only wanted on the login node(s) running fail2ban. Before this PR there was a workaround in fatimage.yml to explicitly disable it on build.

Requires new image build.

sjpb commented 3 months ago

Fat image build: https://github.com/stackhpc/ansible-slurm-appliance/actions/runs/8192527716

Edit: succeeded, openhpc-240307-1747-b47ff153

sjpb commented 3 months ago

Canceled workflow, rebuilding image for safety: https://github.com/stackhpc/ansible-slurm-appliance/actions/runs/8201785642: openhpc-240308-1011-0f0291c0