cockpit.yml

#!/usr/bin/env ansible-playbook
---
- hosts: rhel_hosts,fedora_hosts
  tasks:
  - name: cockpit main packages
    yum:
      name:
        - cockpit
        - cockpit-ws
        - cockpit-packagekit
        - cockpit-storaged
        - cockpit-composer
        - cockpit-system
        - cockpit-pcp
        - cockpit-bridge
        - cockpit-shell
      state: latest

  - name: firewalld
    firewalld:
      service: cockpit
      state: enabled
      permanent: yes
      immediate: yes

  - name: cockpit service socket
    service:
      name: cockpit.socket
      state: started
      enabled: true

  - name: cockpit store metrics
    service:
      name: "{{ item }}"
      state: started
      enabled: true
    loop:
    - pmcd
    - pmlogger

  - name: disable_timeout
    ini_file:
      path: /etc/cockpit/cockpit.conf
      section: Session
      option: IdleTimeout
      value: "0"

- hosts: rhel_hosts
  tasks:
  - name: cockpit on RHEL packages
    yum:
      name:
        - subscription-manager-cockpit

  - name: cockpit on RHEL8 packages
    yum:
      name:
        - cockpit-session-recording
    when: ansible_distribution_major_version|int >=8

- hosts: fedora_hosts
  tasks:
  - name: cockpit on Fedora packages
    yum:
      name:
#        - cockpit-machines-ovirt
        - cockpit-podman
        - cockpit-session-recording
        - tlog

- hosts: kvm_hosts
  tasks:
  - name: cockpit VM management packages
    yum:
      name:
        - cockpit-machines
      state: latest

- hosts: rhv_hosts
  tasks:
  - name: cockpit RHV management packages
    yum:
      name:
        - cockpit-ovirt-dashboard
        - cockpit-machines-ovirt
      state: latest

- hosts: ubuntu_hosts
  tasks:
  - name: cockpit package
    apt:
      name:
        - cockpit
      state: latest

- hosts: sat6
  name: cockpit_on_different_port
  tasks:
  - name: cockpit_config
    copy:
      src: sat6/cockpit.listen.conf
      dest: /etc/systemd/system/cockpit.socket.d/
    notify:
    - restart_cockpit
    - reload_systemd

  - name: selinux_mgmt_packages
    yum:
      name:
        - libsemanage-python
        - policycoreutils-python

  - name: SElinux_port_change
    seport:
      ports: 9091
      proto: tcp
      setype: websm_port_t

  - name: firewalld_port
    firewalld:
      port: 9091/tcp
      state: enabled
      permanent: yes
      immediate: yes

  handlers:
    - name: reload_systemd
      systemd:
        daemon_reload: yes
    - name: restart_cockpit
      service:
        name: cockpit.socket
        state: restarted
...