FIX: disable kdump service

The kernel dump service has issues with kptr_restrict set to 2,
and that's breaking our installs.  We'll just disable kdump as
it doesn't really make sense for our intended deployments anyway.

Signed-off-by: dave kormann    <davek@research.att.com>
Change-Id: I3ddd55f1af92d4485021c2c212960e7c9f3cfbae

diff --git a/infra-ansible.spec b/infra-ansible.spec
index 488b4ed..b873d1a 100644 (file)
--- a/infra-ansible.spec
+++ b/infra-ansible.spec
@@ -101,7 +101,6 @@ ln -sf %{_playbooks_path}/disable-old-node-rsyslog.yml                %{buildroo
 ln -sf %{_playbooks_path}/enablecmagent.yml                           %{buildroot}/%{_postconfig_path}
 ln -sf %{_playbooks_path}/haproxy-install.yml                         %{buildroot}/%{_postconfig_path}
 ln -sf %{_playbooks_path}/ipv6-config.yml                             %{buildroot}/%{_postconfig_path}
-ln -sf %{_playbooks_path}/kernel-core-handling.yml                    %{buildroot}/%{_postconfig_path}
 ln -sf %{_playbooks_path}/motd.yml                                    %{buildroot}/%{_postconfig_path}
 ln -sf %{_playbooks_path}/hostcli.yml                                 %{buildroot}/%{_postconfig_path}
 ln -sf %{_playbooks_path}/oom.yml                                     %{buildroot}/%{_postconfig_path}

diff --git a/playbooks/kernel-core-handling.yml b/playbooks/kernel-core-handling.yml
deleted file mode 100644 (file)
index 89c507c..0000000
--- a/playbooks/kernel-core-handling.yml
+++ /dev/null
@@ -1,20 +0,0 @@
-# Copyright 2019 Nokia
-
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# cmframework.requires: provisioning_done.yml
-- name: Configure core file handling
-  hosts: all:!localhost
-  roles:
-      - kernel-core-handling-config
-

diff --git a/roles/kernel-core-handling-config/handlers/main.yml b/roles/kernel-core-handling-config/handlers/main.yml
deleted file mode 100644 (file)
index b38aea6..0000000
--- a/roles/kernel-core-handling-config/handlers/main.yml
+++ /dev/null
@@ -1,20 +0,0 @@
----
-
-# Copyright 2019 Nokia
-
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-- name: Restart kdump
-  systemd:
-    name: "kdump"
-    state: "restarted"

diff --git a/roles/kernel-core-handling-config/tasks/main.yml b/roles/kernel-core-handling-config/tasks/main.yml
deleted file mode 100644 (file)
index b481b46..0000000
--- a/roles/kernel-core-handling-config/tasks/main.yml
+++ /dev/null
@@ -1,27 +0,0 @@
----
-
-# Copyright 2019 Nokia
-
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-- name: Check if crashkernel is defined
-  shell: cat /proc/cmdline
-  register: cmdline
-
-- name: Remove restriction of used cpus (not compatible with our own options)
-  replace:
-    path: /etc/sysconfig/kdump
-    regexp: '^(KDUMP_COMMANDLINE_APPEND=.*["\s])nr_cpus=1(["\s].*)$'
-    replace: '\1nr_cpus=0\2'
-  changed_when: cmdline.stdout.find('crashkernel') != -1
-  notify: Restart kdump

diff --git a/roles/ops-hardening/tasks/main.yaml b/roles/ops-hardening/tasks/main.yaml
index 90a57a2..24e52c1 100644 (file)
--- a/roles/ops-hardening/tasks/main.yaml
+++ b/roles/ops-hardening/tasks/main.yaml
@@ -330,6 +330,13 @@
     line: 'Storage=none'
 
 #
+# Confingure kernel dump
+- name: "Disable kernel dump service"
+  shell: systemctl stop kdump.service
+
+- name: "Disable kernel dump service"
+  shell: systemctl disable kdump.service
+
 # Configure syslog
 #
 - name: "Stop rsyslog Service"