X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;f=fdio.infra.ansible%2Froles%2Fvpp_device%2Ftasks%2Fmain.yaml;h=91916456af62280d1ebdcdd287f46de73de15f09;hb=HEAD;hp=33b551715ff3e63ccdb6fb115bd48cb078649a01;hpb=df5672b3d9c29b51397f4770eb992c9f3f3955ce;p=csit.git

diff --git a/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml b/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml
index 33b551715f..91916456af 100644
--- a/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml
+++ b/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml
@@ -1,8 +1,8 @@
 ---
-# file: roles/vpp_device/tasks/main.yaml
+# file: tasks/main.yaml
 
-- name: VPP_device - Load Kernel Modules By Default
-  lineinfile:
+- name: "Load Kernel Modules On Startup (vfio-pci)"
+  ansible.builtin.lineinfile:
     path: "/etc/modules"
     state: "present"
     line: "{{ item }}"
@@ -11,8 +11,8 @@
   tags:
     - load-kernel-modules
 
-- name: VPP_device - Disable ipv6 router advertisement
-  sysctl:
+- name: "Disable IPv6 Router Advertisement"
+  ansible.builtin.sysctl:
     name: "net.ipv6.conf.default.accept_ra"
     value: "0"
     state: "present"
@@ -21,9 +21,9 @@
   tags:
     - set-sysctl
 
-- name: VPP_device - Disable ipv6 router advertisement
-  sysctl:
-    name: "net.ipv6.conf.all.accept_ra"
+- name: "Disable IPv6 MLDv1 interval"
+  ansible.builtin.sysctl:
+    name: "net.ipv6.conf.default.mldv1_unsolicited_report_interval"
     value: "0"
     state: "present"
     sysctl_file: "/etc/sysctl.d/90-csit.conf"
@@ -31,62 +31,109 @@
   tags:
     - set-sysctl
 
-- name: VPP_device - Copy csit-initialize-vfs.sh
-  copy:
-   src: "files/csit-initialize-vfs.sh"
-   dest: "/usr/local/bin/"
-   owner: "root"
-   group: "root"
-   mode: "744"
+- name: "Disable IPv6 MLDv2 interval"
+  ansible.builtin.sysctl:
+    name: "net.ipv6.conf.default.mldv2_unsolicited_report_interval"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: "Disable IPv6 Autoconf"
+  ansible.builtin.sysctl:
+    name: "net.ipv6.conf.default.autoconf"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: "Disable IPv6 MC Forwarding"
+  ansible.builtin.sysctl:
+    name: "net.ipv6.conf.default.mc_forwarding"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: "Disable IPv4 IGMPv2 interval"
+  ansible.builtin.sysctl:
+    name: "net.ipv4.conf.default.igmpv2_unsolicited_report_interval"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: "Disable IPv4 IGMPv3 interval"
+  ansible.builtin.sysctl:
+    name: "net.ipv4.conf.default.igmpv3_unsolicited_report_interval"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: "Copy csit-initialize-vfs.sh"
+  ansible.builtin.copy:
+    src: "files/csit-initialize-vfs.sh"
+    dest: "/usr/local/bin/"
+    owner: "root"
+    group: "root"
+    mode: 0744
   tags:
     - copy-vf-script
 
-- name: VPP_device - Copy csit-initialize-vfs-data.sh
-  copy:
-   src: "files/{{ vfs_data_file }}"
-   dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
-   owner: "root"
-   group: "root"
-   mode: "744"
+- name: "Copy csit-initialize-vfs-data.sh"
+  ansible.builtin.copy:
+    src: "files/{{ vfs_data_file }}"
+    dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
+    owner: "root"
+    group: "root"
+    mode: 0744
   tags: copy-vf-data-script
   when:
     - vfs_data_file is defined
 
-- name: VPP_device - Copy default csit-initialize-vfs-data.sh
-  copy:
-   src: "files/csit-initialize-vfs-default.sh"
-   dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
-   owner: "root"
-   group: "root"
-   mode: "744"
+- name: "Copy Default csit-initialize-vfs-data.sh"
+  ansible.builtin.copy:
+    src: "files/csit-initialize-vfs-default.sh"
+    dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
+    owner: "root"
+    group: "root"
+    mode: 0744
   tags: copy-vf-data-script
   when:
     - vfs_data_file is not defined
 
-- name: VPP_device - Start csit-initialize-vfs.service
-  copy:
-   src: "files/csit-initialize-vfs.service"
-   dest: "/etc/systemd/system/"
-   owner: "root"
-   group: "root"
-   mode: "644"
+- name: "Start csit-initialize-vfs.service"
+  ansible.builtin.copy:
+    src: "files/csit-initialize-vfs.service"
+    dest: "/etc/systemd/system/"
+    owner: "root"
+    group: "root"
+    mode: 0644
   notify:
     - "Start csit-initialize-vfs.service"
   tags:
     - start-vf-service
 
-- meta: flush_handlers
+- ansible.builtin.meta: "flush_handlers"
 
-- name: VPP_device - Set hugepages in GRUB
-  lineinfile:
+- name: "Set Hugepages In GRUB"
+  ansible.builtin.lineinfile:
     path: "/etc/default/grub"
     state: "present"
     regexp: "^GRUB_CMDLINE_LINUX="
     line: "GRUB_CMDLINE_LINUX=\"{% for key, value in grub.items() %}{% if value %}{{key}}={{value}} {% else %}{{key}} {% endif %}{% endfor %}\""
   notify:
     - "Update GRUB"
-    - "Reboot server"
   tags:
     - set-grub
-
-- meta: flush_handlers