Infra: Ansible yaml lint cleanup

[csit.git] / fdio.infra.ansible / roles / vpp_device / tasks / main.yaml

diff --git a/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml b/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml
index 33b5517..0114b05 100644 (file)
--- a/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml
+++ b/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml
@@ -8,10 +8,12 @@
     line: "{{ item }}"
   with_items:
     - "vfio-pci"
+  when:
+    - cpu_microarchitecture == "thunderx2"
   tags:
     - load-kernel-modules
 
-- name: VPP_device - Disable ipv6 router advertisement
+- name: Disable IPv6 Router Advertisement
   sysctl:
     name: "net.ipv6.conf.default.accept_ra"
     value: "0"
@@ -21,7 +23,7 @@
   tags:
     - set-sysctl
 
-- name: VPP_device - Disable ipv6 router advertisement
+- name: Disable IPv6 Router Advertisement
   sysctl:
     name: "net.ipv6.conf.all.accept_ra"
     value: "0"
@@ -31,45 +33,85 @@
   tags:
     - set-sysctl
 
-- name: VPP_device - Copy csit-initialize-vfs.sh
+- name: Disable IPv6 MLDv1 interval
+  sysctl:
+    name: "net.ipv6.conf.all.mldv1_unsolicited_report_interval"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: Disable IPv6 MLDv2 interval
+  sysctl:
+    name: "net.ipv6.conf.all.mldv2_unsolicited_report_interval"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: Disable IPv6 Autoconf
+  sysctl:
+    name: "net.ipv6.conf.all.autoconf"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: Disable IPv6 MC Forwarding
+  sysctl:
+    name: "net.ipv6.conf.all.mc_forwarding"
+    value: "0"
+    state: "present"
+    sysctl_file: "/etc/sysctl.d/90-csit.conf"
+    reload: "yes"
+  tags:
+    - set-sysctl
+
+- name: Copy csit-initialize-vfs.sh
   copy:
-   src: "files/csit-initialize-vfs.sh"
-   dest: "/usr/local/bin/"
-   owner: "root"
-   group: "root"
-   mode: "744"
+    src: "files/csit-initialize-vfs.sh"
+    dest: "/usr/local/bin/"
+    owner: "root"
+    group: "root"
+    mode: 0744
   tags:
     - copy-vf-script
 
-- name: VPP_device - Copy csit-initialize-vfs-data.sh
+- name: Copy csit-initialize-vfs-data.sh
   copy:
-   src: "files/{{ vfs_data_file }}"
-   dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
-   owner: "root"
-   group: "root"
-   mode: "744"
+    src: "files/{{ vfs_data_file }}"
+    dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
+    owner: "root"
+    group: "root"
+    mode: 0744
   tags: copy-vf-data-script
   when:
     - vfs_data_file is defined
 
-- name: VPP_device - Copy default csit-initialize-vfs-data.sh
+- name: Copy Default csit-initialize-vfs-data.sh
   copy:
-   src: "files/csit-initialize-vfs-default.sh"
-   dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
-   owner: "root"
-   group: "root"
-   mode: "744"
+    src: "files/csit-initialize-vfs-default.sh"
+    dest: "/usr/local/bin/csit-initialize-vfs-data.sh"
+    owner: "root"
+    group: "root"
+    mode: 0744
   tags: copy-vf-data-script
   when:
     - vfs_data_file is not defined
 
-- name: VPP_device - Start csit-initialize-vfs.service
+- name: Start csit-initialize-vfs.service
   copy:
-   src: "files/csit-initialize-vfs.service"
-   dest: "/etc/systemd/system/"
-   owner: "root"
-   group: "root"
-   mode: "644"
+    src: "files/csit-initialize-vfs.service"
+    dest: "/etc/systemd/system/"
+    owner: "root"
+    group: "root"
+    mode: 0644
   notify:
     - "Start csit-initialize-vfs.service"
   tags:
@@ -77,7 +119,7 @@
 
 - meta: flush_handlers
 
-- name: VPP_device - Set hugepages in GRUB
+- name: Set Hugepages In GRUB
   lineinfile:
     path: "/etc/default/grub"
     state: "present"
@@ -85,8 +127,14 @@
     line: "GRUB_CMDLINE_LINUX=\"{% for key, value in grub.items() %}{% if value %}{{key}}={{value}} {% else %}{{key}} {% endif %}{% endfor %}\""
   notify:
     - "Update GRUB"
-    - "Reboot server"
   tags:
     - set-grub
 
-- meta: flush_handlers
+- name: Configure unsafe noiommu
+  lineinfile:
+    path: "/etc/modprobe.d/vfio-noiommu.conf"
+    state: "present"
+    line: "options vfio enable_unsafe_noiommu_mode=1"
+    create: "yes"
+  tags:
+    - configure-unsafe-noiommu