Compare commits
10 Commits
cd242ebeed
...
b8dad01b8a
| Author | SHA1 | Date | |
|---|---|---|---|
| b8dad01b8a | |||
| 047ed81832 | |||
| 1ba38b0d9e | |||
| 5468d0e518 | |||
| e57d04fe77 | |||
| b854c0a348 | |||
| 5150dfd27a | |||
| 9f05069e59 | |||
| 9bf4504bfd | |||
| 3d0338f48c |
6
delete_installation.yml
Normal file
6
delete_installation.yml
Normal file
@@ -0,0 +1,6 @@
|
||||
- hosts: all
|
||||
gather_facts: true
|
||||
become:
|
||||
true
|
||||
roles:
|
||||
- delete_installation
|
||||
@@ -1,12 +0,0 @@
|
||||
- hosts: servers
|
||||
gather_facts: true
|
||||
become:
|
||||
true
|
||||
become_method:
|
||||
sudo
|
||||
become_user:
|
||||
root
|
||||
remote_user:
|
||||
marker
|
||||
roles:
|
||||
- delete_klnagent
|
||||
31
group_vars/all/kaspersky.yml
Normal file
31
group_vars/all/kaspersky.yml
Normal file
@@ -0,0 +1,31 @@
|
||||
### KLNAGENT vars as defined at https://support.kaspersky.com/KSC/14.2/ru-RU/199693.htm
|
||||
KLNAGENT_SERVER: "" #* Input KSC to connect
|
||||
KLNAGENT_AUTOINSTALL: "1" #*
|
||||
EULA_ACCEPTED: "1" #*
|
||||
KLNAGENT_PROXY_USE: "0"
|
||||
KLNAGENT_PROXY_ADDR: ""
|
||||
KLNAGENT_PROXY_LOGIN: ""
|
||||
KLNAGENT_PROXY_PASSWORD: ""
|
||||
KLNAGENT_VM_VDI: ""
|
||||
KLNAGENT_VM_OPTIMIZE: ""
|
||||
KLNAGENT_TAGS: ""
|
||||
KLNAGENT_UDP_PORT: "15000"
|
||||
KLNAGENT_PORT: "14000"
|
||||
KLNAGENT_SSLPORT: "13000"
|
||||
KLNAGENT_USESSL: "1"
|
||||
KLNAGENT_GW_MODE: "1"
|
||||
KLNAGENT_GW_ADDRESS: ""
|
||||
|
||||
### KESL vars as defined at https://support.kaspersky.com/help/KES4Linux/11.4.0/en-US/236945.htm
|
||||
EULA_AGREED: "yes" #*
|
||||
PRIVACY_POLICY_AGREED: "yes" #*
|
||||
USE_KSN: "no" #*
|
||||
LOCALE: ""
|
||||
INSTALL_LICENSE: "" # IMPORTANT to change this
|
||||
UPDATER_SOURCE: "KLServers"
|
||||
PROXY_SERVER: ""
|
||||
UPDATE_EXECUTE: ""
|
||||
KERNEL_SRCS_INSTALL: ""
|
||||
ADMIN_USER: ""
|
||||
CONFIGURE_SELINUX: ""
|
||||
USE_GUI: "no"
|
||||
@@ -1,6 +0,0 @@
|
||||
KLNAGENT_SERVER: "192.168.103.20"
|
||||
KLNAGENT_PORT: "14000"
|
||||
KLNAGENT_SSLPORT: "13000"
|
||||
KLNAGENT_USESSL: "1"
|
||||
KLNAGENT_GW_MODE: "1"
|
||||
default_klnagent_bin_path: "/opt/kaspersky/klnagent64/lib/bin"
|
||||
26
hosts.yaml
26
hosts.yaml
@@ -1,7 +1,21 @@
|
||||
servers:
|
||||
hosts:
|
||||
10.124.5.[72:78]:
|
||||
# 192.168.103.22:
|
||||
# 192.168.103.23:
|
||||
all:
|
||||
vars:
|
||||
ansible_user: srvadmin
|
||||
ansible_user: marker
|
||||
#ansible_become_password:
|
||||
children:
|
||||
debian:
|
||||
hosts:
|
||||
debian_host1:
|
||||
ansible_host: 192.168.103.100
|
||||
# debian_host2:
|
||||
# ansible_host: 192.168.1.102
|
||||
vars:
|
||||
ansible_become_method: sudo
|
||||
rhel:
|
||||
hosts:
|
||||
rhel_host1:
|
||||
ansible_host: 192.168.103.101
|
||||
# rhel_host2:
|
||||
# ansible_host: 192.168.1.103
|
||||
vars:
|
||||
ansible_become_method: su
|
||||
@@ -1,12 +1,6 @@
|
||||
- hosts: servers
|
||||
- hosts: all
|
||||
gather_facts: true
|
||||
become:
|
||||
true
|
||||
become_method:
|
||||
sudo
|
||||
become_user:
|
||||
root
|
||||
remote_user:
|
||||
srvadmin
|
||||
roles:
|
||||
- kesl
|
||||
|
||||
@@ -2,11 +2,5 @@
|
||||
gather_facts: true
|
||||
become:
|
||||
true
|
||||
become_method:
|
||||
sudo
|
||||
become_user:
|
||||
root
|
||||
remote_user:
|
||||
srvadmin
|
||||
roles:
|
||||
- klnagent
|
||||
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
41
roles/delete_installation/tasks/main.yml
Normal file
41
roles/delete_installation/tasks/main.yml
Normal file
@@ -0,0 +1,41 @@
|
||||
- name: Debian delete pkgs
|
||||
block:
|
||||
- name: "Remove previous agent installations"
|
||||
apt:
|
||||
name: klnagent64
|
||||
state: absent
|
||||
|
||||
- name: "Remove previous kesl installations"
|
||||
apt:
|
||||
name: kesl
|
||||
state: absent
|
||||
when: ansible_facts['os_family'] == 'Debian'
|
||||
|
||||
- name: RHEL delete pkgs
|
||||
block:
|
||||
- name: "Remove previous agent installations"
|
||||
dnf:
|
||||
name: klnagent64
|
||||
state: absent
|
||||
|
||||
- name: "Remove previous kesl installations"
|
||||
dnf:
|
||||
name: kesl
|
||||
state: absent
|
||||
when: ansible_facts['os_family'] == 'RED' or ansible_facts['os_family'] == 'RedHat'
|
||||
|
||||
- name: "Deleting previous configs from agent"
|
||||
file:
|
||||
path: "/opt/kaspersky/klnagent64"
|
||||
state: absent
|
||||
- file:
|
||||
path: "/var/opt/kasperksy/klnagent64"
|
||||
state: absent
|
||||
|
||||
- name: "Deleting previous configs from kesl"
|
||||
file:
|
||||
path: "/opt/kaspersky/kesl"
|
||||
state: absent
|
||||
- file:
|
||||
path: "/var/opt/kaspersky/kesl"
|
||||
state: absent
|
||||
@@ -1,18 +0,0 @@
|
||||
- block:
|
||||
- name: "Remove previous agent installations"
|
||||
apt:
|
||||
name: klnagent64
|
||||
state: absent
|
||||
|
||||
- name: "Deleting previous distros from tmp"
|
||||
file:
|
||||
path: "/tmp/klnagent"
|
||||
state: absent
|
||||
|
||||
- name: "Deleting previous configs from agent"
|
||||
file:
|
||||
path: "/opt/kaspersky/klnagent64"
|
||||
state: absent
|
||||
file:
|
||||
path: "/var/opt/kasperksy/klnagent64"
|
||||
state: absent
|
||||
@@ -1,19 +1,9 @@
|
||||
- name: reload klnagent #
|
||||
service:
|
||||
name: "klnagent64"
|
||||
state: reloaded
|
||||
|
||||
- name: restart klnagent #
|
||||
service:
|
||||
name: "klnagent64"
|
||||
state: restarted
|
||||
|
||||
- name: reload klnagent #
|
||||
- name: reload kesl #
|
||||
service:
|
||||
name: "kesl"
|
||||
state: reloaded
|
||||
|
||||
- name: restart klnagent #
|
||||
- name: restart kesl #
|
||||
service:
|
||||
name: "kesl"
|
||||
state: restarted
|
||||
@@ -1,57 +1,56 @@
|
||||
- block:
|
||||
- name: "Remove previous agent installations"
|
||||
apt:
|
||||
name: klnagent64
|
||||
state: absent
|
||||
|
||||
- name: "Deleting previous distros from tmp"
|
||||
file:
|
||||
path: "/tmp/klnagent"
|
||||
state: absent
|
||||
|
||||
- name: "Deleting previous configs from agent"
|
||||
file:
|
||||
path: "/opt/kaspersky/klnagent64"
|
||||
state: absent
|
||||
file:
|
||||
path: "/var/opt/kasperksy/klnagent64"
|
||||
state: absent
|
||||
|
||||
- name: "Getting klnagent install package to temporary folder"
|
||||
- name: Install KESL to RedHat like OS
|
||||
block:
|
||||
- name: "Getting kesl install package to temporary folder"
|
||||
copy:
|
||||
src: "/tmp/klnagent"
|
||||
src: "/tmp/kesl_red.rpm"
|
||||
dest: "/tmp"
|
||||
mode: 0755
|
||||
|
||||
- name: "Installing klnagent package"
|
||||
apt:
|
||||
deb: /tmp/klnagent/klnagent64_11.0.0-38_amd64.deb
|
||||
|
||||
- name: "Installing perl-File-Copy package"
|
||||
yum:
|
||||
name: perl-File-Copy
|
||||
- name: "Installing kesl package"
|
||||
yum:
|
||||
name: /tmp/kesl_red.rpm
|
||||
disable_gpg_check: true
|
||||
- name: "Deleting distros"
|
||||
file:
|
||||
path: "/tmp/klnagent"
|
||||
path: "/tmp/klnagent_red.rpm"
|
||||
state: absent
|
||||
when: ansible_facts['os_family'] == 'RED' or ansible_facts['os_family'] == 'RedHat'
|
||||
|
||||
- name: Install KESL to Debian like OS
|
||||
block:
|
||||
- name: "Getting kesl install package to temporary folder"
|
||||
copy:
|
||||
src: "/tmp/kesl_deb.deb"
|
||||
dest: "/tmp"
|
||||
mode: 0755
|
||||
- name: "Installing kesl package"
|
||||
apt:
|
||||
deb: /tmp/kesl_deb.deb
|
||||
- name: "Deleting distros"
|
||||
file:
|
||||
path: "/tmp/kesl_deb.deb"
|
||||
state: absent
|
||||
when: ansible_facts['os_family'] == 'Debian'
|
||||
|
||||
|
||||
- block:
|
||||
- name: "Creating answer file for klnagent"
|
||||
become: yes
|
||||
- name: "Creating answer file for kesl"
|
||||
become: true
|
||||
template:
|
||||
src: klnagent.j2
|
||||
dest: /tmp/klnagent.ini
|
||||
src: kesl.11.4.j2
|
||||
dest: /tmp/kesl.ini
|
||||
mode: 0644
|
||||
|
||||
- name: "Run configuring klnagent"
|
||||
become: yes
|
||||
shell: "{{ default_klnagent_bin_path }}/setup/postinstall.pl"
|
||||
args:
|
||||
executable: /bin/bash
|
||||
environment:
|
||||
KLAUTOANSWERS: /tmp/klnagent.ini
|
||||
notify: restart klnagent
|
||||
- name: "Run configuring kesl"
|
||||
become: true
|
||||
shell: "/opt/kaspersky/kesl/bin/kesl-setup.pl --autoinstall=/tmp/kesl.ini"
|
||||
notify: restart kesl
|
||||
|
||||
- name: "Ensure klnagent service is enabled"
|
||||
become: yes
|
||||
- name: "Ensure kesl service is enabled"
|
||||
become: true
|
||||
service:
|
||||
name: klnagent64
|
||||
name: kesl
|
||||
enabled: yes
|
||||
state: started
|
||||
24
roles/kesl/templates/kesl.11.4.j2
Normal file
24
roles/kesl/templates/kesl.11.4.j2
Normal file
@@ -0,0 +1,24 @@
|
||||
{% if EULA_AGREED %}EULA_AGREED={{ EULA_AGREED }}{% endif %}
|
||||
|
||||
{% if PRIVACY_POLICY_AGREED %}PRIVACY_POLICY_AGREED={{ PRIVACY_POLICY_AGREED }}{% endif %}
|
||||
|
||||
{% if USE_KSN %}USE_KSN={{ USE_KSN }}{% endif %}
|
||||
|
||||
{% if LOCALE %}LOCALE={{ LOCALE }}{% endif %}
|
||||
|
||||
{% if INSTALL_LICENSE %}INSTALL_LICENSE={{ INSTALL_LICENSE }}{% endif %}
|
||||
|
||||
{% if UPDATER_SOURCE %}UPDATER_SOURCE={{ UPDATER_SOURCE }}{% endif %}
|
||||
|
||||
{% if PROXY_SERVER %}PROXY_SERVER={{ PROXY_SERVER }}{% endif %}
|
||||
|
||||
{% if UPDATE_EXECUTE %}UPDATE_EXECUTE={{ UPDATE_EXECUTE }}{% endif %}
|
||||
|
||||
{% if KERNEL_SRCS_INSTALL %}KERNEL_SRCS_INSTALL={{ KERNEL_SRCS_INSTALL }}{% endif %}
|
||||
|
||||
{% if ADMIN_USER %}ADMIN_USER={{ ADMIN_USER }}{% endif %}
|
||||
|
||||
{% if CONFIGURE_SELINUX %}CONFIGURE_SELINUX={{ CONFIGURE_SELINUX }}{% endif %}
|
||||
|
||||
{% if USE_GUI %}USE_GUI={{ USE_GUI }}{% endif %}
|
||||
|
||||
@@ -1,5 +0,0 @@
|
||||
KLNAGENT_SERVER={{ KLNAGENT_SERVER }}
|
||||
KLNAGENT_PORT={{ KLNAGENT_PORT }}
|
||||
KLNAGENT_SSLPORT={{ KLNAGENT_SSLPORT }}
|
||||
KLNAGENT_USESSL={{ KLNAGENT_USESSL }}
|
||||
KLNAGENT_GW_MODE={{ KLNAGENT_GW_MODE }}
|
||||
@@ -13,7 +13,7 @@
|
||||
file:
|
||||
path: "/opt/kaspersky/klnagent64"
|
||||
state: absent
|
||||
file:
|
||||
- file:
|
||||
path: "/var/opt/kasperksy/klnagent64"
|
||||
state: absent
|
||||
|
||||
@@ -34,15 +34,15 @@
|
||||
|
||||
- block:
|
||||
- name: "Creating answer file for klnagent"
|
||||
become: yes
|
||||
become: true
|
||||
template:
|
||||
src: klnagent.j2
|
||||
dest: /tmp/klnagent.ini
|
||||
mode: 0644
|
||||
|
||||
- name: "Run configuring klnagent"
|
||||
become: yes
|
||||
shell: "{{ default_klnagent_bin_path }}/setup/postinstall.pl"
|
||||
become: true
|
||||
shell: "/opt/kaspersky/klnagent64/lib/bin/setup/postinstall.pl"
|
||||
args:
|
||||
executable: /bin/bash
|
||||
environment:
|
||||
@@ -50,7 +50,7 @@
|
||||
notify: restart klnagent
|
||||
|
||||
- name: "Ensure klnagent service is enabled"
|
||||
become: yes
|
||||
become: true
|
||||
service:
|
||||
name: klnagent64
|
||||
enabled: yes
|
||||
|
||||
@@ -1,5 +1,31 @@
|
||||
KLNAGENT_SERVER={{ KLNAGENT_SERVER }}
|
||||
KLNAGENT_PORT={{ KLNAGENT_PORT }}
|
||||
KLNAGENT_SSLPORT={{ KLNAGENT_SSLPORT }}
|
||||
KLNAGENT_USESSL={{ KLNAGENT_USESSL }}
|
||||
KLNAGENT_GW_MODE={{ KLNAGENT_GW_MODE }}
|
||||
{% if KLNAGENT_SERVER %}KLNAGENT_SERVER={{ KLNAGENT_SERVER }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_AUTOINSTALL %}KLNAGENT_AUTOINSTALL={{ KLNAGENT_AUTOINSTALL }}{% endif %}
|
||||
|
||||
{% if EULA_ACCEPTED %}EULA_ACCEPTED={{ EULA_ACCEPTED }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_PROXY_USE %}KLNAGENT_PROXY_USE={{ KLNAGENT_PROXY_USE }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_PROXY_ADDRESS %}KLNAGENT_PROXY_ADDRESS={{ KLNAGENT_PROXY_ADDRESS }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_PROXY_LOGIN %}KLNAGENT_PROXY_LOGIN={{ KLNAGENT_PROXY_LOGIN }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_PROXY_PASSWORD %}KLNAGENT_PROXY_PASSWORD={{ KLNAGENT_PROXY_PASSWORD }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_VM_VDI %}KLNAGENT_VM_VDI={{ KLNAGENT_VM_VDI }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_VM_OPTIMIZE %}KLNAGENT_VM_OPTIMIZE={{ KLNAGENT_VM_OPTIMIZE }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_TAGS %}KLNAGENT_TAGS={{ KLNAGENT_TAGS }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_UDP_PORT %}KLNAGENT_UDP_PORT={{ KLNAGENT_UDP_PORT }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_PORT %}KLNAGENT_PORT={{ KLNAGENT_PORT }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_SSLPORT %}KLNAGENT_SSLPORT={{ KLNAGENT_SSLPORT }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_USESSL %}KLNAGENT_USESSL={{ KLNAGENT_USESSL }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_GW_MODE %}KLNAGENT_GW_MODE={{ KLNAGENT_GW_MODE }}{% endif %}
|
||||
|
||||
{% if KLNAGENT_GW_ADDRESS %}KLNAGENT_GW_ADDRESS={{ KLNAGENT_GW_ADDRESS }}{% endif %}
|
||||
|
||||
Reference in New Issue
Block a user