Dear all,
our server automatisation is now on release 20.02. There have been no changes to productive systems in this release with the exception of
- xIBE postgresql servers
- new CentOS8 systems which have been deployed so far
All ansible roles have been extended to support CentOS8 - this has been a big pile of work which is down now. Major defaults in our CentOS8 are:
- new kernel 5.6
- httpd 2.4, PHP 7.4, postgresql12, mariadb server 10.3
- all data is now placed on one partition (/srv)
- /srv data partition is compressed btrfs by default
- deployment of web roots, vhost configs, logrotate files as „deployment“ user with new filesystem permission logic
The ongoing development covers monitoring and backup integration and inventory improvement
Kind regards
Gunnar
Details:
The release history can be reviewed
in Gitlab (for those permitted to watch this repository). In short:
Release 20.02 (2020-05-12)
Main topics: centos8, kernel update, httpd, php, postgresql role
Systems
Hotfix list
Added
- support for tmpfs or partition mount on /tmp per config option list
disk: - zstd-compressed btrfs /srv partition by default
- httpd role: apache with modules and php-fpm with opcache
- postgresql-plv8 role: plv8 extension for postgresql xIBE
Changed
- centos elrepo kernel 5.6
- centos8 as default system for bootstrap
- roles migrated to centos8
vimrc: *.md files now recognised as markdown, not modula-2- bash: borrowed some useful aliases from oh-my-zsh for productivity improvement
- vm.overcomit 2 100 - no overcommit for processes anymore
Dropped ideas
- tmpfs noexec by default - some important applications fail (e.g. docker)
Ansible
- added more servers to plays
ansible.cfg: facts/cache/retry files under ~/.ansible (per-user)