Move OS dependent tasks to its own file

This commit is contained in:
Manuel Gutierrez 2019-11-11 15:02:09 +01:00
parent 75c6ee2ea9
commit 7316af3db1
3 changed files with 49 additions and 51 deletions

View File

@ -112,3 +112,15 @@
changed_when: false changed_when: false
tags: tags:
- config - config
- name: Debian/Ubuntu | Install wazuh-manager, wazuh-api
apt:
name: "{{ item }}={{ wazuh_manager_version }}"
state: present
cache_valid_time: 3600
with_items:
- wazuh-manager
- wazuh-api
register: wazuh_manager_main_packages_installed
until: wazuh_manager_main_packages_installed is succeeded
tags: init

View File

@ -137,3 +137,40 @@
cis_distribution_filename: cis_rhel7_linux_rcl.txt cis_distribution_filename: cis_rhel7_linux_rcl.txt
when: when:
- ansible_distribution == "Amazon" and ansible_distribution_major_version == "NA" - ansible_distribution == "Amazon" and ansible_distribution_major_version == "NA"
- name: CentOS/RedHat/Amazon | Install wazuh-manager, wazuh-api
package:
name: "{{ item }}-{{ wazuh_manager_version }}"
state: "{{ wazuh_manager_package_state }}"
with_items:
- wazuh-manager
- wazuh-api
register: wazuh_manager_main_packages_installed
until: wazuh_manager_main_packages_installed is succeeded
when:
- ansible_os_family|lower == "redhat"
tags:
- init
- name: CentOS/RedHat 6 | Enabling python2.7 and sqlite3
replace:
path: /etc/init.d/wazuh-manager
regexp: 'echo -n "Starting Wazuh-manager: "'
replace: 'echo -n "Starting Wazuh-manager (EL6): "; source /opt/rh/python27/enable; export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/var/ossec/framework/lib'
when:
- ansible_distribution in ['CentOS', 'RedHat', 'Amazon'] and ansible_distribution_major_version|int == 6
- wazuh_manager_config.cluster.disable != 'yes'
- name: Install expect (EL5)
package:
name: "{{ item }}"
state: "{{ wazuh_manager_package_state }}"
with_items:
- expect
register: wazuh_manager_main_packages_installed
until: wazuh_manager_main_packages_installed is succeeded
when:
- ansible_os_family|lower == "RedHat"
- ansible_distribution_major_version|int < 6
tags:
- init

View File

@ -13,34 +13,6 @@
- import_tasks: "Debian.yml" - import_tasks: "Debian.yml"
when: ansible_os_family == "Debian" when: ansible_os_family == "Debian"
- name: CentOS/RedHat/Amazon | Install wazuh-manager, wazuh-api
package:
name: "{{ item }}-{{ wazuh_manager_version }}"
state: "{{ wazuh_manager_package_state }}"
with_items:
- wazuh-manager
- wazuh-api
register: wazuh_manager_main_packages_installed
until: wazuh_manager_main_packages_installed is succeeded
when:
- ansible_os_family|lower == "redhat"
tags:
- init
- name: Debian/Ubuntu | Install wazuh-manager, wazuh-api
apt:
name: "{{ item }}={{ wazuh_manager_version }}"
state: present
cache_valid_time: 3600
with_items:
- wazuh-manager
- wazuh-api
register: wazuh_manager_main_packages_installed
until: wazuh_manager_main_packages_installed is succeeded
when:
- not (ansible_os_family|lower == "redhat")
tags: init
- name: Install expect - name: Install expect
package: package:
name: expect name: expect
@ -49,29 +21,6 @@
- not (ansible_os_family|lower == "redhat" and ansible_distribution_major_version|int < 6) - not (ansible_os_family|lower == "redhat" and ansible_distribution_major_version|int < 6)
tags: init tags: init
- name: CentOS/RedHat 6 | Enabling python2.7 and sqlite3
replace:
path: /etc/init.d/wazuh-manager
regexp: 'echo -n "Starting Wazuh-manager: "'
replace: 'echo -n "Starting Wazuh-manager (EL6): "; source /opt/rh/python27/enable; export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/var/ossec/framework/lib'
when:
- ansible_distribution in ['CentOS', 'RedHat', 'Amazon'] and ansible_distribution_major_version|int == 6
- wazuh_manager_config.cluster.disable != 'yes'
- name: Install expect (EL5)
package:
name: "{{ item }}"
state: "{{ wazuh_manager_package_state }}"
with_items:
- expect
register: wazuh_manager_main_packages_installed
until: wazuh_manager_main_packages_installed is succeeded
when:
- ansible_os_family|lower == "RedHat"
- ansible_distribution_major_version|int < 6
tags:
- init
- name: Generate SSL files for authd - name: Generate SSL files for authd
command: "openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:1825 -keyout sslmanager.key -out sslmanager.cert -subj /CN={{ wazuh_manager_fqdn }}/" command: "openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:1825 -keyout sslmanager.key -out sslmanager.cert -subj /CN={{ wazuh_manager_fqdn }}/"
args: args: