X-Git-Url: https://gerrit.fd.io/r/gitweb?p=csit.git;a=blobdiff_plain;f=fdio.infra.ansible%2Froles%2Fvpp_device%2Ftasks%2Fmain.yaml;h=0114b05a40ea48217c5842d92d90fcb2b356df20;hp=33b551715ff3e63ccdb6fb115bd48cb078649a01;hb=d41a5490f30a161561c39c4f1b08add17b9cf6f7;hpb=df5672b3d9c29b51397f4770eb992c9f3f3955ce diff --git a/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml b/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml index 33b551715f..0114b05a40 100644 --- a/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml +++ b/fdio.infra.ansible/roles/vpp_device/tasks/main.yaml @@ -8,10 +8,12 @@ line: "{{ item }}" with_items: - "vfio-pci" + when: + - cpu_microarchitecture == "thunderx2" tags: - load-kernel-modules -- name: VPP_device - Disable ipv6 router advertisement +- name: Disable IPv6 Router Advertisement sysctl: name: "net.ipv6.conf.default.accept_ra" value: "0" @@ -21,7 +23,7 @@ tags: - set-sysctl -- name: VPP_device - Disable ipv6 router advertisement +- name: Disable IPv6 Router Advertisement sysctl: name: "net.ipv6.conf.all.accept_ra" value: "0" @@ -31,45 +33,85 @@ tags: - set-sysctl -- name: VPP_device - Copy csit-initialize-vfs.sh +- name: Disable IPv6 MLDv1 interval + sysctl: + name: "net.ipv6.conf.all.mldv1_unsolicited_report_interval" + value: "0" + state: "present" + sysctl_file: "/etc/sysctl.d/90-csit.conf" + reload: "yes" + tags: + - set-sysctl + +- name: Disable IPv6 MLDv2 interval + sysctl: + name: "net.ipv6.conf.all.mldv2_unsolicited_report_interval" + value: "0" + state: "present" + sysctl_file: "/etc/sysctl.d/90-csit.conf" + reload: "yes" + tags: + - set-sysctl + +- name: Disable IPv6 Autoconf + sysctl: + name: "net.ipv6.conf.all.autoconf" + value: "0" + state: "present" + sysctl_file: "/etc/sysctl.d/90-csit.conf" + reload: "yes" + tags: + - set-sysctl + +- name: Disable IPv6 MC Forwarding + sysctl: + name: "net.ipv6.conf.all.mc_forwarding" + value: "0" + state: "present" + sysctl_file: "/etc/sysctl.d/90-csit.conf" + reload: "yes" + tags: + - set-sysctl + +- name: Copy csit-initialize-vfs.sh copy: - src: "files/csit-initialize-vfs.sh" - dest: "/usr/local/bin/" - owner: "root" - group: "root" - mode: "744" + src: "files/csit-initialize-vfs.sh" + dest: "/usr/local/bin/" + owner: "root" + group: "root" + mode: 0744 tags: - copy-vf-script -- name: VPP_device - Copy csit-initialize-vfs-data.sh +- name: Copy csit-initialize-vfs-data.sh copy: - src: "files/{{ vfs_data_file }}" - dest: "/usr/local/bin/csit-initialize-vfs-data.sh" - owner: "root" - group: "root" - mode: "744" + src: "files/{{ vfs_data_file }}" + dest: "/usr/local/bin/csit-initialize-vfs-data.sh" + owner: "root" + group: "root" + mode: 0744 tags: copy-vf-data-script when: - vfs_data_file is defined -- name: VPP_device - Copy default csit-initialize-vfs-data.sh +- name: Copy Default csit-initialize-vfs-data.sh copy: - src: "files/csit-initialize-vfs-default.sh" - dest: "/usr/local/bin/csit-initialize-vfs-data.sh" - owner: "root" - group: "root" - mode: "744" + src: "files/csit-initialize-vfs-default.sh" + dest: "/usr/local/bin/csit-initialize-vfs-data.sh" + owner: "root" + group: "root" + mode: 0744 tags: copy-vf-data-script when: - vfs_data_file is not defined -- name: VPP_device - Start csit-initialize-vfs.service +- name: Start csit-initialize-vfs.service copy: - src: "files/csit-initialize-vfs.service" - dest: "/etc/systemd/system/" - owner: "root" - group: "root" - mode: "644" + src: "files/csit-initialize-vfs.service" + dest: "/etc/systemd/system/" + owner: "root" + group: "root" + mode: 0644 notify: - "Start csit-initialize-vfs.service" tags: @@ -77,7 +119,7 @@ - meta: flush_handlers -- name: VPP_device - Set hugepages in GRUB +- name: Set Hugepages In GRUB lineinfile: path: "/etc/default/grub" state: "present" @@ -85,8 +127,14 @@ line: "GRUB_CMDLINE_LINUX=\"{% for key, value in grub.items() %}{% if value %}{{key}}={{value}} {% else %}{{key}} {% endif %}{% endfor %}\"" notify: - "Update GRUB" - - "Reboot server" tags: - set-grub -- meta: flush_handlers +- name: Configure unsafe noiommu + lineinfile: + path: "/etc/modprobe.d/vfio-noiommu.conf" + state: "present" + line: "options vfio enable_unsafe_noiommu_mode=1" + create: "yes" + tags: + - configure-unsafe-noiommu