Ansible Role repo_baseos

This role deploys the BaseOS repositories, which can be used to set a custom mirror server.

Available since LFOps 2.0.0.

Tags

repo_baseos

  • Deploys the BaseOS repositories.

  • Triggers: none.

Optional Role Variables

repo_baseos__basic_auth_login

  • Use HTTP basic auth to login to the repository. Only takes effect together with a custom mirror URL; the default public repositories do not use basic auth. Defaults to lfops__repo_basic_auth_login, making it easy to set this for all repo_* roles.

  • Type: String.

  • Default: '{{ lfops__repo_basic_auth_login | default("") }}'

repo_baseos__crb_repo_enabled__host_var / repo_baseos__crb_repo_enabled__group_var

  • Whether the CRB repository should be enabled or not.

  • Type: Bool.

  • Default: false

repo_baseos__mirror_url

  • Set the URL to a custom mirror server providing the repository. Defaults to lfops__repo_mirror_url to allow easily setting the same URL for all repo_* roles. If lfops__repo_mirror_url is not set, the default mirrors of the repo are used.

  • Type: String.

  • Default: '{{ lfops__repo_mirror_url | default("") }}'

repo_baseos__security_repo_enabled__host_var / repo_baseos__security_repo_enabled__group_var

  • Whether the Rocky Linux security repository should be enabled. This repository delivers critical CVE fixes and is enabled by default in LFOPS (Rocky ships it disabled). Set to false to opt out on a specific host or group.

  • Type: Bool.

  • Default: true

repo_baseos__security_repo_use_upstream

  • Whether the Rocky Linux security repository always points at the upstream mirrorlist, even when repo_baseos__mirror_url is set. This keeps critical CVE fixes coming straight from upstream instead of a potentially lagging custom mirror. Set to false to make the security repository follow repo_baseos__mirror_url like the other repositories.

  • Type: Bool.

  • Default: true

Example:

# optional
repo_baseos__basic_auth_login:
  username: 'my-username'
  password: 'linuxfabrik'
repo_baseos__crb_repo_enabled__host_var: true
repo_baseos__mirror_url: 'https://mirror.example.com'
repo_baseos__security_repo_enabled__host_var: false
repo_baseos__security_repo_use_upstream: false

License

The Unlicense

Author Information

Linuxfabrik GmbH, Zurich