boinc.yml

---
- name: Setup BOINC World Community Grid Compute node
  hosts: boinc
  tasks:
    - name: install some basic packages
      yum:
        name:
          - tmux
          - git
          - vim-enhanced
          - python3
          - python3-pip
          - tuned
          - tuned-utils
          - setools-console
          - policycoreutils-python-utils
          - setroubleshoot-server
          - pcp-system-tools
          - wpa_supplicant
          - NetworkManager
          - NetworkManager-tui
          - NetworkManager-wifi
          - nodejs

    - name: Ensure SELinux Enforcing
      selinux:
        policy: targeted
        state: enforcing

    - name: enable journald persistent storage
      file:
        path: /var/log/journal
        state: directory

    - name: Get tuned profile
      slurp:
        src: /etc/tuned/active_profile
      register: tuned_active_profile

    - debug:
        msg: "{{ tuned_active_profile['content'] | b64decode | trim }}"

    - name: tuned-adm set throughput-performance
      shell: /usr/sbin/tuned-adm profile throughput-performance
      when: "tuned_active_profile['content'] | b64decode | trim != 'throughput-performance'"

    - name: ensure logind ignores lidswitch for laptops
      lineinfile:
        path: /etc/systemd/logind.conf
        regexp: '^HandleLidSwitch='
        line: HandleLidSwitch=ignore
        insertafter: '^\[Login\]'
      when: ansible_form_factor in mobile_form_factors
      notify: restart logind

    - name: don't allow password based ssh
      lineinfile:
        path: /etc/ssh/sshd_config
        regexp: '^PasswordAuthentication'
        line: "PasswordAuthentication no"
      notify: restart sshd

    - name: run the boinc role
      import_role:
        name: worldcommunitygrid

  handlers:
    - name: restart logind
      service:
        name: systemd-logind
        state: restarted

    - name: restart sshd
      service:
        name: sshd
        state: restarted