CentOS/RHEL compatibility for Ansible roles

- Setting IPv4 & IPv6 forwarding
- Setting `sysctl:net.bridge.bridge-nf-call-iptables` and `bridge-nf-call-ip6tables` to enabled since it is disabled by default on some CentOS systems
This commit is contained in:
Matthias Riegler
2019-09-29 00:19:18 +02:00
parent 830a191af9
commit 2b10d43fa1
3 changed files with 37 additions and 1 deletions

View File

@@ -0,0 +1,35 @@
---
- name: Set SELinux to disabled state
selinux:
state: disabled
when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'
- name: Enable IPv4 forwarding
sysctl:
name: net.ipv4.ip_forward
value: "1"
state: present
reload: yes
- name: Enable IPv6 forwarding
sysctl:
name: net.ipv6.conf.all.forwarding
value: "1"
state: present
reload: yes
- name: Set bridge-nf-call-iptables (just to be sure)
sysctl:
name: net.bridge.bridge-nf-call-iptables
value: "1"
state: present
reload: yes
when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'
- name: Set bridge-nf-call-ip6tables (just to be sure)
sysctl:
name: net.bridge.bridge-nf-call-iptables
value: "1"
state: present
reload: yes
when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'