dirty workaround to make aaa lab passing
Change-Id: I82e26f1e4a5a5bf2bbe5e4d64a72b3e6e3b60309
diff --git a/classes/cluster/aaa-ha-freeipa/aaa/init.yml b/classes/cluster/aaa-ha-freeipa/aaa/init.yml
index 463b8d2..8da6aee 100644
--- a/classes/cluster/aaa-ha-freeipa/aaa/init.yml
+++ b/classes/cluster/aaa-ha-freeipa/aaa/init.yml
@@ -1,6 +1,10 @@
classes:
#- cluster.aaa-ha-freeipa.aaa
-- system.linux.system.single
+
+# FIXME: Workaround linux.system.single rhel
+#- system.linux.system.single
+- cluster.aaa-ha-freeipa.aaa.linux-system-single
+
- system.openssh.server.team.lab
- system.openssh.server.team.tcpcloud
- system.openssh.server.team.mcp_qa
diff --git a/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/debian.yml b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/debian.yml
new file mode 100644
index 0000000..b6d0b2b
--- /dev/null
+++ b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/debian.yml
@@ -0,0 +1,10 @@
+classes:
+- system.linux.system.single
+
+# DEBIAN family overrides
+parameters:
+ linux:
+ system:
+ package:
+ python-msgpack:
+ version: latest
diff --git a/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/init.yml b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/init.yml
new file mode 100644
index 0000000..1e68380
--- /dev/null
+++ b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/init.yml
@@ -0,0 +1,73 @@
+classes:
+- service.linux.system
+- service.salt.minion.master
+- system.openssh.server.single
+- system.ntp.client.single
+parameters:
+ _param:
+ local_package_repos: false
+ linux:
+ system:
+ local_package_repos: ${_param:local_package_repos}
+ user:
+ root:
+ enabled: true
+ name: root
+ home: /root
+ package:
+ cloud-init:
+ version: purged
+ unattended-updates:
+ version: purged
+ mcelog:
+ version: latest
+ kernel:
+ modules:
+ - nf_conntrack
+ sysctl:
+ net.ipv4.tcp_keepalive_intvl: 3
+ net.ipv4.tcp_keepalive_time: 30
+ net.ipv4.tcp_keepalive_probes: 8
+ fs.file-max: 124165
+ net.core.somaxconn: 4096
+ vm.swappiness: 10
+ net.nf_conntrack_max: 1048576
+ net.ipv4.tcp_retries2: 5
+ net.ipv4.tcp_max_syn_backlog: 8192
+ net.ipv4.neigh.default.gc_thresh1: 4096
+ net.ipv4.neigh.default.gc_thresh2: 8192
+ net.ipv4.neigh.default.gc_thresh3: 16384
+ net.core.netdev_max_backlog: 261144
+ net.ipv4.tcp_tw_reuse: 1
+ kernel.panic: 60
+ cpu:
+ governor: performance
+ timezone: UTC
+ locale:
+ en_US.UTF-8:
+ enabled: true
+ default: true
+ cs_CZ.UTF-8:
+ enabled: true
+ limit:
+ default:
+ enabled: true
+ domain: "*"
+ limits:
+ - type: hard
+ item: nofile
+ value: 307200
+ - type: soft
+ item: nofile
+ value: 307200
+ - type: soft
+ item: nproc
+ value: 307200
+ - type: hard
+ item: nproc
+ value: 307200
+ systemd:
+ system:
+ Manager:
+ DefaultLimitNOFILE: 307200
+ DefaultLimitNPROC: 307200
diff --git a/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/rhel.yml b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/rhel.yml
new file mode 100644
index 0000000..38dba03
--- /dev/null
+++ b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/rhel.yml
@@ -0,0 +1,4 @@
+classes:
+- system.linux.system.single
+
+# RHEL family overrides