|
 |
2a62bc |
diff --git a/README.md b/README.md
|
|
|
2a62bc |
index 61caab5..efb60f1 100644
|
|
|
2a62bc |
--- a/README.md
|
|
|
2a62bc |
+++ b/README.md
|
|
|
2a62bc |
@@ -89,6 +89,7 @@ sap_hana_preconfigure_2292690_[01...07,09,10], example: sap_hana_preconfigure_22
|
|
|
2a62bc |
sap_hana_preconfigure_2009879_3_9
|
|
|
2a62bc |
sap_hana_preconfigure_2009879_3_13
|
|
|
2a62bc |
sap_hana_preconfigure_2009879_3_14_[1...4]
|
|
|
2a62bc |
+sap_hana_preconfigure_2009879_3_15
|
|
|
2a62bc |
sap_hana_preconfigure_2382421
|
|
|
2a62bc |
```
|
|
|
2a62bc |
|
|
|
2a62bc |
diff --git a/tasks/RedHat/configuration.yml b/tasks/RedHat/configuration.yml
|
|
|
2a62bc |
index 0216a99..f0bcbd4 100644
|
|
|
2a62bc |
--- a/tasks/RedHat/configuration.yml
|
|
|
2a62bc |
+++ b/tasks/RedHat/configuration.yml
|
|
|
2a62bc |
@@ -8,6 +8,11 @@
|
|
|
2a62bc |
debug:
|
|
|
2a62bc |
var: __sap_hana_preconfigure_sapnotes | difference([''])
|
|
|
2a62bc |
|
|
|
2a62bc |
+# We want to disable firewalld, so we need to check if firewalld is installed
|
|
|
2a62bc |
+- name: Gather facts about installed packages
|
|
|
2a62bc |
+ package_facts:
|
|
|
2a62bc |
+ manager: auto
|
|
|
2a62bc |
+
|
|
|
2a62bc |
- name: include configuration actions for required sapnotes
|
|
|
2a62bc |
include_tasks: "sapnote/{{ item }}.yml"
|
|
|
2a62bc |
with_items: "{{ __sap_hana_preconfigure_sapnotes | difference(['']) }}"
|
|
|
2a62bc |
diff --git a/tasks/RedHat/generic/configure-epb.yml b/tasks/RedHat/generic/configure-epb.yml
|
|
|
2a62bc |
index 71d8b91..f74ec7f 100644
|
|
|
2a62bc |
--- a/tasks/RedHat/generic/configure-epb.yml
|
|
|
2a62bc |
+++ b/tasks/RedHat/generic/configure-epb.yml
|
|
|
2a62bc |
@@ -21,7 +21,7 @@
|
|
|
2a62bc |
file:
|
|
|
2a62bc |
path: /etc/init.d/boot.local
|
|
|
2a62bc |
state: touch
|
|
|
2a62bc |
- mode: 0644
|
|
|
2a62bc |
+ mode: 0755
|
|
|
2a62bc |
|
|
|
2a62bc |
- name: Configure EPB at boot time
|
|
|
2a62bc |
lineinfile:
|
|
|
2a62bc |
diff --git a/tasks/RedHat/generic/disable-firewall.yml b/tasks/RedHat/generic/disable-firewall.yml
|
|
|
2a62bc |
index 151d045..1bc6596 100644
|
|
|
2a62bc |
--- a/tasks/RedHat/generic/disable-firewall.yml
|
|
|
2a62bc |
+++ b/tasks/RedHat/generic/disable-firewall.yml
|
|
|
2a62bc |
@@ -1,16 +1,14 @@
|
|
|
2a62bc |
---
|
|
|
2a62bc |
-- name: Gathering service facts
|
|
|
2a62bc |
- service_facts:
|
|
|
2a62bc |
- register: services_state
|
|
|
2a62bc |
+
|
|
|
2a62bc |
+- debug:
|
|
|
2a62bc |
+ msg: "imported RedHat/generic/configure-firewall.yml"
|
|
|
2a62bc |
|
|
|
2a62bc |
- name: Stop and disable service firewalld
|
|
|
2a62bc |
systemd:
|
|
|
2a62bc |
name: firewalld
|
|
|
2a62bc |
state: stopped
|
|
|
2a62bc |
enabled: no
|
|
|
2a62bc |
- when: services_state.ansible_facts.services["firewalld.service"].state is defined
|
|
|
2a62bc |
-
|
|
|
2a62bc |
-- debug: var=services_state.ansible_facts.services["firewalld.service"].state
|
|
|
2a62bc |
+ when: "'firewalld' in ansible_facts.packages"
|
|
|
2a62bc |
|
|
|
2a62bc |
- name: Get status of firewalld
|
|
|
2a62bc |
command: bash -lc "systemctl status firewalld"
|
|
|
2a62bc |
diff --git a/tasks/sapnote/2009879_7.yml b/tasks/sapnote/2009879_7.yml
|
|
|
2a62bc |
index 793b921..c86b364 100644
|
|
|
2a62bc |
--- a/tasks/sapnote/2009879_7.yml
|
|
|
2a62bc |
+++ b/tasks/sapnote/2009879_7.yml
|
|
|
2a62bc |
@@ -96,10 +96,7 @@
|
|
|
2a62bc |
### NYI: Set proper firewall rules if SID/instance number is known
|
|
|
2a62bc |
###
|
|
|
2a62bc |
- include_tasks: ../RedHat/generic/disable-firewall.yml
|
|
|
2a62bc |
-# - name: 3.15 Ensure firewall is disabled when instance ID unknown
|
|
|
2a62bc |
-# service: name=firewalld state=stopped enabled=no
|
|
|
2a62bc |
-# ignore_errors: True
|
|
|
2a62bc |
-
|
|
|
2a62bc |
+ when: sap_hana_preconfigure_config_all|d(true) or sap_hana_preconfigure_2009879_3_15|d(false)
|
|
|
2a62bc |
|
|
|
2a62bc |
### Firewall Calculation for SID=xx
|
|
|
2a62bc |
##################################################################
|