You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+39-22Lines changed: 39 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,13 +23,18 @@ To increase security for access to the system in QEMU, you can specify a whiteli
23
23
## Requirements
24
24
25
25
Linux system Debian or CentOS.
26
-
Installed packages:
26
+
Installed packages on target hosts:
27
27
- python3
28
28
- python3-apt
29
+
30
+
Installed packages on the control node (Ansible):
31
+
- rsync
32
+
- sshpass
33
+
If you use password login to target hosts via `ssh`
29
34
30
35
## Variables
31
36
32
-
See the `defaults/main.yml` and examples in vars:
37
+
See the [`defaults/main.yml`](defaults/main.yml) and examples in vars:
33
38
34
39
lisoq_qemu_enable: false
35
40
Do I need to use and run QEMU. Without this option, the role can download the ISO image and configure the firewall.
@@ -83,10 +88,20 @@ You can specify your own list of block devices:
83
88
<br>
84
89
85
90
lisoq_qemu_exclude_disk:
86
-
- 'fd0'
87
-
- 'sr0'
91
+
- 'fd0'
92
+
- 'sr0'
88
93
89
94
List of block disk devices to be excluded from the `lisoq_qemu_disk` list. The exclusion list usually contains FDD and CD-ROM devices.
95
+
You can override the variable yourself and add your own block devices to the exclusion list.
96
+
97
+
lisoq_qemu_exclude_disk_regular_list:
98
+
- 'fd'
99
+
- 'sr'
100
+
- 'dm-'
101
+
- 'loop'
102
+
103
+
A list of block devices without a numeric suffix to be excluded from the list for intra-OS connection in QEMU.
104
+
Based on the `lisoq_qemu_exclude_disk_regular_list` variable inside the role, a regular expression will be generated.
90
105
91
106
lisoq_qemu_boot_cd: true
92
107
Whether to boot QEMU from CD-ROM (from our downloaded ISO image file `lisoq_iso_file_...` ).
@@ -112,24 +127,27 @@ Sshd port that accepts connections _inside_ ISO image.
112
127
lisoq_ramdisk_enable: false
113
128
Use (and create) RAM-disk partitions on the target system (before running QEMU).
114
129
115
-
lisoq_ramdisk_location: '/mnt'
130
+
lisoq_ramdisk_path: '/mnt'
116
131
The preferred path for the RAM-disk partition.
117
132
118
-
lisoq_ramdisk_another_location: '/tmp'
133
+
lisoq_ramdisk_another_path: '/tmp'
119
134
The alternative path for a RAM-disk partition if it is already in use internally. Subsequently, we will expand it to the desired size.
120
135
121
-
lisoq_ramdisk_existed: false
122
-
Detect flag if RAM-disk partition is already in use. Service (local) variable.
123
-
124
-
lisoq_ramdisk_mounted: false
125
-
Detect flag if RAM-disk partition is already in mounted. Service (local) variable.
126
-
127
-
lisoq_ramdisk_size: '300'
136
+
lisoq_ramdisk_size: '250'
128
137
The size of the RAM-disk partition in MiB (mebibytes).
129
138
130
-
lisoq_total_need_ram: "( {{ lisoq_ramdisk_size | int + lisoq_qemu_ram | int }} | default('300') )"
139
+
lisoq_total_need_ram: '' # (lisoq_ramdisk_size + lisoq_qemu_ram) or min 250MiB - autodetect
131
140
The minimum amount of RAM on the target system in MiB (mebibytes). The sum of two components - `lisoq_ramdisk_size` and `lisoq_qemu_ram`.
132
141
142
+
lisoq_ramdisk_package_enable: false
143
+
Create a RAM disk to store packages on the system in directory `/var/cache/yum` or `/var/cache/apt`. Not all LiveCD systems have extra 200-400 MB to store the package base, that's why we use RAM-disk.
144
+
145
+
lisoq_ramdisk_package_size: '' # in MiB (mebibyte) - autodetect
146
+
The amount of MB of RAM that we can allocate for the correct installation of packages on the system. Empirically, it was found that you need a minimum of 300 MB. Afterwards, we can clean up this directory.
147
+
148
+
lisoq_ramdisk_package_purge: false
149
+
Clean up the packages directory. Use this option very carefully if you have to install additional packages to the system after completing the role.
150
+
133
151
lisoq_firewall_acl_enable: false
134
152
Allow ACLs to whitelist IP's/net's and some listening ports (for example, `{{ lisoq_qemu_args_port_ssh }}` and `{{ lisoq_qemu_args_port_vnc }}`). Connections from other IPs to these ports are dropped. Whitelists are separate for IPv4 and IPv6 networks.
135
153
@@ -141,12 +159,6 @@ Default white list for IPv4 networks.
0 commit comments