Saved searches
Use saved searches to filter your results more quickly
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.
Configure network interfaces on a target host
archf/ansible-network
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Name already in use
A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Sign In Required
Please sign in to use Codespaces.
Launching GitHub Desktop
If nothing happens, download GitHub Desktop and try again.
Launching GitHub Desktop
If nothing happens, download GitHub Desktop and try again.
Launching Xcode
If nothing happens, download Xcode and try again.
Launching Visual Studio Code
Your codespace will open once ready.
There was a problem preparing your codespace, please try again.
Latest commit
Git stats
Files
Failed to load latest commit information.
README.md
Configure network devices on a target host.
Minimum required ansible version is 2.0.
For real devices, you must know your devices’ names beforehand. You also need to have python-netaddr on your control machine.
sudo pip install python-netaddr
Configure network devices on a target host. This roles aims to provide a seemless rhel or debian derivatives configuration experience.
- Redhat_routes.j2 -> routes-* configuration files
- Redhat_device.j2 -> ifcfg-* device files in /etc/sysconfig/network-scripts/
- Debian_interfaces.j2 -> main file /etc/network/interfaces
- Debian_devices.j2 -> device file that goes in /etc/network/interfaces.d/
List of variables to describing a device
| variable | description | value | type | |---------------|----------------------------------------------------|---------------------|------| | device | device name | | dict | | type | device type | see type table | dict | | stp | on by default, force stp off when device == bridge | on,off | dict | | bridge | specify bridge to attach device to | | dict | | bootproto | specify boot protocol | static or none,dhcp | dict | | onboot | bring up at boot time | yes,no | dict | | gw | gateway list of ipv4 and ipv6 cidr | | dict | | ips | list of ipv4 and ipv6 cidr | cidr | list | | delay | wait time for bridge to join network | | dict | | peerdns | use dns from option 6 (will overwite resolv.conf | yes,no | dict | | dns | list of dns to override resolv.conf with | see example | list | | linkdelay | wait time for ethernet, (stp converence) | | dict | | routes | list of static routes to add | see routes table | list | | ipv6_init | enable ipv6 | yes,no | dict | | ipv6_fatal | disable device on failure | yes,no | dict | | ipv4_fatal | disable device on failure | yes,no | dict | | ipv6_autoconf | stateless configuration | yes,no | dict | | ipv6_router | node is an ipv6 router (enables ipv6 forwarding) | yes,no | dict | - type=ovsbridge is supported
- stp is always enabled for bridge devices unless you explicitly turn it off
- bootproto defaults to ‘dhcp’ if ommited
- gw is also used by ip route to set the gateway
- if list contains multiple ips, secondary ips will be add
- if and ipv6 addr is not in cidr notation, will default to a /64 prefix.
- ipv6 is always enabled.
| value | description | |-----------|-------------------------------| | Ethernet | real physical ethernet device | | Bridge | built-in linux bridge | | ovsbridge | openvswitch bridge | | bond | bond several devices together | | 6to4 | 6to4 tunnel | - bond support not yet implemented
- to detrunk a vlan, simply create a device using . as device name
| Variables | description | value | type | |-----------|--------------|---------------------------------------------|------| | to | route target | cidr ip (or any value accepted by ip route) | dict | | gw | gw device | /32 ip address* | dict | - if no specific gw is provided, it will default to the device gateway
- to avoid duplicate default gateway, routes are defined for each devices based on subnet and subnet mask
¡This sections needs a cleanup!
List all fedora|rhel|centos usable device options.
cd /etc/sysconfig/network-scripts && grep -r -E -o '\<[a-zA-Z0-9]+\>' | grep -E -i -I -v 'device|1|2|down|ppp|down' | uniq -u
# quick nating using nftables wip sudo nft add table nat sudo nft add chain nat prerouting < type nat hook prerouting priority 0 \; > sudo nft add rule nat postrouting masquerade
Replace vars with according to your needs.
LXC_BRIDGE=lxcbr0 LXC_NETWORK=192.168.0.1 use_iptables_lock="-w" echo 1 > /proc/sys/net/ipv4/ip_forward iptables $use_iptables_lock -I INPUT -i $ -p udp --dport 67 -j ACCEPT iptables $use_iptables_lock -I INPUT -i $ -p tcp --dport 67 -j ACCEPT iptables $use_iptables_lock -I INPUT -i $ -p udp --dport 53 -j ACCEPT iptables $use_iptables_lock -I INPUT -i $ -p tcp --dport 53 -j ACCEPT iptables $use_iptables_lock -I FORWARD -i $ -j ACCEPT iptables $use_iptables_lock -I FORWARD -o $ -j ACCEPT iptables $use_iptables_lock -t nat -A POSTROUTING -s $ ! -d $ -j MASQUERADE iptables $use_iptables_lock -t mangle -A POSTROUTING -o $ -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
enable ipv6 forwarding on bridge
LXC_BRIDGE=lxcbr0 echo 1 > /proc/sys/net/ipv6/conf/all/forwarding echo 2 > /proc/sys/net/ipv6/conf/all/accept_ra echo 1 > /proc/sys/net/ipv6/conf/all/accept_ra_from_local s sysctl -w net.ipv6.conf.all.accept_ra_from_local=1 s sysctl -w net.ipv6.conf.all.accept_ra_defrtr=1 echo 1 > /proc/sys/net/ipv6/conf/$ /forwarding echo 2 > /proc/sys/net/ipv6/conf/$ /accept_ra s sysctl -w net.ipv6.conf.lxcbr0.accept_ra_from_local=1 echo 0 > /proc/sys/net/ipv6/conf/$ /autoconf echo 0 \> /proc/sys/net/ipv6/conf/\$\_BRIDGE>/accept\_dad || true LXC_BRIDGE=lxcbr0 LXC_IPV6_NETWORK=fd56:db20:4808:25ae::/64 use_iptables_lock="-w" ip6tables $use_iptables_lock -I INPUT -i $ -p udp --dport 67 -j ACCEPT ip6tables $use_iptables_lock -I INPUT -i $ -p tcp --dport 67 -j ACCEPT ip6tables $use_iptables_lock -I INPUT -i $ -p udp --dport 53 -j ACCEPT ip6tables $use_iptables_lock -I INPUT -i $ -p tcp --dport 53 -j ACCEPT ip6tables $use_iptables_lock -I FORWARD -i $ -j ACCEPT ip6tables $use_iptables_lock -I FORWARD -o $ -j ACCEPT ip6tables $use_iptables_lock -t nat -A POSTROUTING -s $ ! -d $ -j MASQUERADE
Variables conditionally loaded
Those variables from vars/*. are loaded dynamically during task runtime using the include_vars module.
Variables loaded from vars/main.yml .
Variables loaded from vars/Debian.yml .
network_pkgs: - bridge-utils - ifenslave network_ovs_service: openvswitch-nonetwork.service network_ovs_pkg: openvswitch-switch network_conf_path: "/etc/network/interfaces.d" network_device_file_prefix: ''
Variables loaded from vars/RedHat.yml .
network_pkgs: - libselinux-python - bridge-utils - iputils network_ovs_service: openvswitch.service network_ovs_pkg: openvswitch network_conf_path: "/etc/sysconfig/network-scripts" network_device_file_prefix: "ifcfg-"
Defaults from defaults/main.yml .
# defaults file for network network_pkg_state: latest # device defaults network_onboot: 'yes' network_peerdns: 'no' network_device_type: Ethernet # ethernet defaults network_ethernet_linkdelay: 1 # bridge defaults network_bridge_delay: 1 # ipv4 defaults network_ipv4_fatal: 'no' # RHEL ipv6 defaults network_ipv6_init: 'yes' network_ipv6_fatal: 'no' network_ipv6_autoconf: 'no' network_ipv6_router: 'no' network_ipv6_forwarding: 'no' # Debian ifupdown ipv6 defaults # see http://manpages.ubuntu.com/manpages/wily/en/man5/interfaces.5.html # accept_ra default value differ according to method # dhcp -> 1 # static -> 2 # auto -> 2 network_accept_ra: 1 # (0=off, 1=on, 2=on+forwarding) network_dhcp: 0 # auto method -> use stateless DHCPv6 (0=off, 1=on) network_autoconf: 0 # Perform stateless autoconfiguration (0=off, 1=on) network_dad_attempts: 60 # Number of attempts to settle DAD (0 to disable) network_dad_interval: 0.1 # DAD state polling interval in seconds # prevent deletion on cleanup network_unmanaged_devices: - lo - ovs-system - vboxnet0 - vibr0
Install with Ansible Galaxy
ansible-galaxy install archf.network