Seal

This role helps seal (secure) the configuration of virtual machines on the following operating systems:

• RedHat / CentOS
• Ubuntu / Debian

Requirements

You must enable ControlMaster in the ansible configuration file under the [ssh_connection] section.
The default settings ssh_args = -o ControlMaster=auto -o ControlPersist=60s will work fine.

Role Variables

• seal_run_containerized

  This option lets the seal role run inside a container. The default is set to false.

  A known issue is with the /etc/hostname file, which cannot be renamed because it is being bind-mounted.

Dependencies

None

Available Tags

You can skip certain sealing steps by using the --skip-tags option.

• reset_hostname

  This tag is for tasks that reset the hostname.

• delete_logs

  This tag is for tasks that clear the /var/log/ directory.

• poweroff

  This tag is for the task that shuts down the sealed machine.

Example Playbook

---
- hosts: all
  remote_user: root
  roles:
    - { role: rhevm-qe-automation.ansible-role-seal }

Author Information

Katerina Koukiou
kkoukiou@redhat.com