new vagrantbox example beginner_patching

Rendanic · Rendanic · commit 4a52eec0ccb0 · 2023-08-14T20:20:13.000+02:00
The new example shows how to install with patching.
The documentation is planned for a later PR.
diff --git a/changelogs/fragments/beginner_patching.yml b/changelogs/fragments/beginner_patching.yml
@@ -0,0 +1,3 @@
+---
+minor_changes:
+  - "new vagrantbox example beginner_patching (oravirt#370)"
diff --git a/example/beginner_patching/ansible/ansible-navigator.yml b/example/beginner_patching/ansible/ansible-navigator.yml
@@ -0,0 +1,21 @@
+---
+ansible-navigator:
+  # ansible-runner:
+  #   artifact-dir: navigator
+  #   rotate-artifacts-count: 20
+  execution-environment:
+    enabled: false
+    environment-variables:
+      set:
+        ANSIBLE_CONFIG: ansible.cfg
+    volume-mounts:
+      - src: "/vagrant"
+        dest: "/vagrant"
+        options: "Z"
+  logging:
+    level: warning
+  mode: stdout
+  playbook-artifact:
+    enable: true
+    replay: "{playbook_dir}/../navigator/replay/{playbook_name}-{time_stamp}.json"
+    save-as: "{playbook_dir}/../navigator/replay/{playbook_name}-{time_stamp}.json"
diff --git a/example/beginner_patching/ansible/ansible.cfg b/example/beginner_patching/ansible/ansible.cfg
@@ -0,0 +1,23 @@
+[defaults]
+
+# following entries are only needed when working with ansible < 2.9
+# roles_path    = ${PWD}/../ansible-oracle/roles/
+# library    = ${PWD}/../ansible-oracle/library/, ${PWD}/../ansible-oracle/plugins/modules
+
+host_key_checking = False
+display_skipped_hosts = false
+duplicate_dict_key = ignore
+
+nocolor = 1
+retry_files_enabled = False
+
+interpreter_python = auto_legacy_silent
+
+callbacks_enabled = timer
+stdout_callback=yaml
+
+[ssh_connection]
+pipelining = True
+
+# needed for devsec ssh-role
+scp_if_ssh = True
diff --git a/example/beginner_patching/ansible/inventory/group_vars/all/db-homes.yml b/example/beginner_patching/ansible/inventory/group_vars/all/db-homes.yml
@@ -0,0 +1,82 @@
+---
+apply_patches_db: true
+db_homes_config:
+
+  db1919_si_se2: &db1919_si_se2
+    version: 19.3.0.0
+    oracle_home: /u01/app/oracle/product/19/db1919-si-se2
+    edition: SE2
+    opatch_minversion: 12.2.0.1.36
+    state: present
+    opatchauto: []
+    opatch:
+      - patchid: 35042068
+        # Database Release Update 19.19.0.0.230418
+        patchversion: 19.19.0.0.230418
+        stop_processes: true
+        state: present
+      - patchid: 35050341
+        # Oracle JavaVM Component Release Update (OJVM RU) 19.19.0.0.230418
+        stop_processes: true
+        state: present
+      - patchid: 35261302
+        # DATAPUMP BUNDLE PATCH 19.19.0.0.0
+        stop_processes: true
+        state: present
+
+  db1918_si_se2: &db1918_si_se2
+    version: 19.3.0.0
+    oracle_home: /u01/app/oracle/product/19/db1918-si-se2
+    edition: SE2
+    opatch_minversion: 12.2.0.1.36
+    opatch:
+      - patchid: 34765931
+        # Database Release Update 19.18.0.0.230117
+        patchversion: 19.18.0.0.230117
+        stop_processes: true
+        state: present
+        path: 19.18.0.0.230117/dbru/34765931/34765931/
+      - patchid: 34786990
+        # Oracle JavaVM Component Release Update (OJVM RU) 19.18.0.0.230117
+        stop_processes: true
+        state: present
+        path: 19.18.0.0.230117/ojvm/p34786990_190000_Linux-x86-64.zip
+
+  # golden is used for building the golden image only
+  # Current Mapping of ORACLE_HOMEs
+  # use this mapping for fast change between the Release Updates
+  # <<: * => merge values from alias and overwrite oracle_home + home
+  #
+  # => Base for imagename at later stage
+  db19_si_se2_golden:
+    <<: *db1919_si_se2
+    # imagename: db_home_19.18.zip
+    oracle_home: /u01/app/oracle/product/19/db1
+    oracle_home_name: db19_si_se2
+    readonly_home: true
+
+  db19_si_se2:
+    <<: *db1919_si_se2
+    # imagename: db_home_19.19.zip
+    oracle_home: /u01/app/oracle/product/19/db1
+    oracle_home_name: db19_si_se2
+    readonly_home: true
+
+oracle_sw_patches:
+  - filename: p35042068_190000_Linux-x86-64.zip
+    patchid: 35042068
+    version: 19.3.0.0
+    description: DBRU 19.19
+    creates: 35042068/README.txt
+  - filename: p35050341_190000_Linux-x86-64.zip
+    patchid: 35050341
+    version: 19.3.0.0
+    description: OJVM 19.19
+    creates: 35050341/README.txt
+  - filename: p35261302_1919000DBRU_Generic.zip
+    patchid: 35261302
+    version: 19.3.0.0
+    description: DATAPUMP BUNDLE PATCH 19.19.0.0.0
+    creates: 35261302/README.txt
+
+# oracle_sw_patches: []
diff --git a/example/beginner_patching/ansible/inventory/group_vars/all/db-profiles.yml b/example/beginner_patching/ansible/inventory/group_vars/all/db-profiles.yml
@@ -0,0 +1,15 @@
+---
+# global Defaults for Database-Profiles
+
+oracle_default_profiles:
+  - name: DEFAULT
+    state: present
+    attributes:
+      - {name: password_life_time, value: unlimited}
+  - name: PW_UNLIMIT
+    state: present
+    attributes:
+      - {name: password_life_time, value: "UNLIMITED"}
+      - {name: password_grace_time, value: 7}
+      - {name: password_lock_time, value: 1}
+      - {name: password_verify_function, value: "null"}
diff --git a/example/beginner_patching/ansible/inventory/group_vars/all/dev-sec.yml b/example/beginner_patching/ansible/inventory/group_vars/all/dev-sec.yml
@@ -0,0 +1,21 @@
+---
+# Oracle gets problems, when root processes are not visible
+hidepid_option: 0
+
+os_security_kernel_enable_module_loading: true
+
+sysctl_overwrite:
+  network_ipv6_enable: false
+  fs.protected_regular: 0  # needed for opatchauto ...
+  # Needed for Docker on Ansible-host
+  net.ipv4.ip_forward: 1
+
+# ssh settings
+ssh_print_last_log: true
+ssh_allow_agent_forwarding: true
+ssh_permit_tunnel: false
+# tcp_forwarding for VSCode
+ssh_allow_tcp_forwarding: 'yes'
+ssh_max_auth_retries: 3
+
+ssh_allow_users: vagrant
diff --git a/example/beginner_patching/ansible/inventory/group_vars/all/host.yml b/example/beginner_patching/ansible/inventory/group_vars/all/host.yml
@@ -0,0 +1,24 @@
+---
+configure_public_yum_repo: false
+configure_motd: false
+
+autostartup_service: true
+
+configure_hugepages_by: memory
+
+# disable hugepages on small systems
+# don't forget to enable use_large_pages in oracle parameter
+# size_in_gb_hugepages: 2
+size_in_gb_hugepages: 0
+
+
+configure_host_disks: true
+
+host_fs_layout:
+  - vgname: vgora
+    state: present
+    filesystem:
+      - {mntp: /u01, lvname: lvorabase, lvsize: 25G, fstype: xfs}
+      - {mntp: /u02, lvname: lvoradata, lvsize: 25G, fstype: xfs, fsopts: "-m reflink=1 -m crc=1"}
+    disk:
+      - {device: /dev/sdb, pvname: /dev/sdb1}
diff --git a/example/beginner_patching/ansible/inventory/group_vars/all/mos_login.yml b/example/beginner_patching/ansible/inventory/group_vars/all/mos_login.yml
@@ -0,0 +1,3 @@
+---
+mos_login:
+mos_password:
diff --git a/example/beginner_patching/ansible/inventory/group_vars/all/software_src.yml b/example/beginner_patching/ansible/inventory/group_vars/all/software_src.yml
@@ -0,0 +1,19 @@
+---
+is_sw_source_local: true
+oracle_sw_copy: false
+oracle_sw_unpack: true
+
+# directory for patch download
+oracle_sw_source_local: /vagrant
+
+# Directory for Installation-Media
+oracle_stage_remote: /vagrant
+
+# Directory for response files, extraceted patches etc.
+oracle_stage: /u01/stage
+
+# Example for Remote NFS
+# install_from_nfs: true          # Mount NFS-Share?
+# nfs_server_sw: 192.168.56.99    # NFS-Server
+# nfs_server_sw_path: /sw         # NFS-Share
+# oracle_stage_remote: /u01/se    # local mount point for NFS share
diff --git a/example/beginner_patching/ansible/inventory/host_vars/beginner-dbfs-patching-151-192-168-56-162.nip.io/ansible.yml b/example/beginner_patching/ansible/inventory/host_vars/beginner-dbfs-patching-151-192-168-56-162.nip.io/ansible.yml
@@ -0,0 +1,8 @@
+---
+# make sure that python3 is installed before playbook execution
+# => needed for selinux module of Ansible
+ansible_python_interpreter: /usr/bin/python3.6
+
+# Use /var/tmp instead of /tmp in Ansible for temporaray files on target host
+# => /var has more free space then /tmp for yum repositories
+ansible_remote_tmp: /var/tmp
diff --git a/example/beginner_patching/ansible/inventory/host_vars/beginner-dbfs-patching-151-192-168-56-162.nip.io/databases.yml b/example/beginner_patching/ansible/inventory/host_vars/beginner-dbfs-patching-151-192-168-56-162.nip.io/databases.yml
@@ -0,0 +1,140 @@
+---
+#
+# db_name anpassen
+# pdb_name anpassen
+#
+# IMPORTANT!!!
+# db_config_home is only vlalid in this file
+#
+db_homes_installed:
+  - home: &db_config_home db19_si_se2
+    apply_patches: true
+    state: present
+
+
+oracle_listeners_config:
+  LISTENER:
+    home: *db_config_home
+    address:
+      - host: "{{ ansible_hostname }}"
+        protocol: TCP
+        port: 1521
+
+listener_installed:
+  - home: *db_config_home
+    listener_name: LISTENER
+    state: present
+
+oracle_databases:
+  - home: *db_config_home
+    oracle_db_name: &oracle_db_name DB1
+    oracle_db_type: SI                                   # Type of database (RAC,RACONENODE,SI)
+    is_container: true
+    # characterset:
+    # Example custom DBCA-Template, usable for CDB and nonCDB
+    # dbca_templatename: 19c_custom_dbca.dbt
+    storage_type: FS
+    oracle_db_mem_totalmb: 2048  # this value is only valid during dbca - init.ora-parameters are used afterwards.
+    oracle_database_type: MULTIPURPOSE
+    redolog_size: 50M
+    redolog_groups: 3
+    datafile_dest: /u02/oradata
+    recoveryfile_dest: /u02/fra
+    listener_name: LISTENER
+    listener_port: &cdb_listener_port 1521
+    # *local_listener is used in initparam as an anchor
+    archivelog: false
+    force_logging: true
+    state: present
+    statspack:
+      purgedays: 14
+      snaplevel: 5
+      state: present
+    tablespaces:
+      - {name: system, size: 10M, autoextend: true, next: 50M, maxsize: 4G, content: permanent, state: present, bigfile: false}
+      - {name: sysaux, size: 10M, autoextend: true, next: 50M, maxsize: 4G, content: permanent, state: present, bigfile: false}
+      - {name: undotbs1, size: 10M, autoextend: true, next: 50M, maxsize: 8G, content: permanent, state: present, bigfile: false}
+      - {name: users, size: 10M, autoextend: true, next: 50M, maxsize: 2G, content: permanent, state: present, bigfile: false}
+      - {name: temp, size: 10M, autoextend: true, next: 50M, maxsize: 8G, content: permanent, state: present, bigfile: false}
+    init_parameters:
+      - {name: audit_trail, value: 'NONE', scope: spfile, state: present}
+      - {name: processes, value: '800', scope: spfile, state: present, dbca: false}
+      - {name: archive_lag_target, value: '900', scope: both, state: present}
+      - {name: control_management_pack_access, value: 'NONE', scope: both, state: present}
+      - {name: control_file_record_keep_time, value: '30', scope: both, state: present}
+      - {name: db_files, value: '200', scope: spfile, state: present}
+      # - {name: db_domain, value: 'local', scope: both, state: present}
+      - {name: deferred_segment_creation, value: 'false', scope: both, state: present}
+      - {name: filesystemio_options, value: 'setall', scope: spfile, state: present}
+      - {name: job_queue_processes, value: '10', scope: both, state: present}
+      # Disable forcing hugepages on really small systems
+      #  - {name: use_large_pages ,value: 'ONLY', scope: spfile, state: present}
+      - {name: log_archive_dest_1, value: 'location=USE_DB_RECOVERY_FILE_DEST', scope: both, state: present}
+      - {name: log_buffer, value: '64M', scope: spfile, state: present}
+      # - {name: pga_aggregate_target, value: '1024M', scope: both, state: present, dbca: false}
+      - {name: pga_aggregate_target, value: '1G', scope: both, state: present, dbca: false}
+      - {name: sga_target, value: '3096M', scope: spfile, state: present, dbca: false}
+      - {name: recyclebin, value: 'off', scope: spfile, state: present}
+      - {name: streams_pool_size, value: '152M', scope: spfile, state: present}
+      # "_cursor_obsolete_threshold" for 12.2+
+      - {name: "_cursor_obsolete_threshold", value: '1024', scope: spfile, state: present}
+      - {name: max_pdbs, value: '3', scope: both, state: present}
+      - {name: db_create_file_dest, value: '/u02/oradata', scope: both, state: present}
+      - {name: db_create_online_log_dest_1, value: '/u02/oradata', scope: both, state: present}
+      # - {name: db_create_online_log_dest_2, value: '/u02/fra', scope: both, state: present}
+      # file_dest_size in bytes in 12.1.0.2 due to bug in DBCA
+      - {name: db_recovery_file_dest_size, value: '100G', scope: both, state: present, dbca: false}
+      - {name: open_cursors, value: '20000', scope: both, state: present, dbca: false}
+      - {name: diagnostic_dest, value: '/u01/app/oracle', scope: both, state: present}
+
+    profiles:
+      - name: DEFAULT
+        state: present
+        attributes:
+          # - {name: password_life_time, value: "UNLIMITED"}
+          - {name: password_life_time, value: unlimited}
+
+    users:
+      - schema: dbsnmp
+        state: unlocked
+        update_password: always
+
+#    rman_jobs:
+#      - {name: parameter}
+#      - {name: offline_level0, disabled: false, weekday: "0", hour: "01", minute: "10", day: "*"}
+
+oracle_pdbs:
+  - home: *db_config_home
+    listener_port: *cdb_listener_port
+    cdb: *oracle_db_name
+    pdb_name: PDB1
+    state: present
+    profiles: "{{ oracle_default_profiles }}"
+    statspack:
+      purgedays: 14
+      snaplevel: 7
+      state: present
+
+    tablespaces:
+      - {name: system, size: 10M, autoextend: true, next: 50M, maxsize: 4G, content: permanent, state: present, bigfile: false}
+      - {name: sysaux, size: 10M, autoextend: true, next: 50M, maxsize: 4G, content: permanent, state: present, bigfile: false}
+      - {name: undotbs1, size: 10M, autoextend: true, next: 50M, maxsize: 8G, content: permanent, state: present, bigfile: false}
+      - {name: users, size: 10M, autoextend: true, next: 50M, maxsize: 2G, content: permanent, state: present, bigfile: false}
+      - {name: temp, size: 10M, autoextend: true, next: 50M, maxsize: 24G, content: permanent, state: present, bigfile: false}
+
+oracle_tnsnames_config: "{{ _tnsnames_config_pdb_helper | items2dict }}"
+
+# creating a temporary dict entry for _tnsnames_config
+# Do not modify this for new databases
+_tnsnames_config_pdb_helper:
+  - key: "{{ oracle_pdbs[0]['pdb_name'] }}"
+    value:
+      connect:
+        service_name: "{{ oracle_pdbs[0]['pdb_name'] }}"
+      address:
+        - host: "{{ ansible_hostname }}"
+
+tnsnames_installed:
+  - tnsname: "{{ oracle_pdbs[0]['pdb_name'] }}"
+    home: *db_config_home
+    state: present
diff --git a/example/beginner_patching/ansible/inventory/hosts.yml b/example/beginner_patching/ansible/inventory/hosts.yml
@@ -0,0 +1,6 @@
+---
+all:
+  children:
+    dbfs:
+      hosts:
+        beginner-dbfs-patching-151-192-168-56-162.nip.io:
diff --git a/example/beginner_patching/ansible/navigator/replay/.gitkeep b/example/beginner_patching/ansible/navigator/replay/.gitkeep
diff --git a/example/beginner_patching/ansible/playbooks b/example/beginner_patching/ansible/playbooks
@@ -0,0 +1 @@
+../../../playbooks
diff --git a/example/beginner_patching/ansible/requirements.yml b/example/beginner_patching/ansible/requirements.yml
@@ -0,0 +1,6 @@
+---
+collections:
+  - name: devsec.hardening
+    version: 8.8.0
+  - name: opitzconsulting.ansible_oracle
+    version: 3.11.0
diff --git a/example/beginner_patching/vagrant/Vagrantfile b/example/beginner_patching/vagrant/Vagrantfile
diff --git a/example/beginner_patching/vscode/beginner_patching.code-workspace b/example/beginner_patching/vscode/beginner_patching.code-workspace
diff --git a/playbooks/patch_download.yml b/playbooks/patch_download.yml
diff --git a/roles/orasw_download_patches/tasks/main.yml b/roles/orasw_download_patches/tasks/main.yml
diff --git a/tools/ansible/install_ansible.sh b/tools/ansible/install_ansible.sh
diff --git a/tools/ansible/requirements_ansible.txt b/tools/ansible/requirements_ansible.txt

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+---`
	`2`	`+minor_changes:`
	`3`	`+ - "new vagrantbox example beginner_patching (oravirt#370)"`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+---`
	`2`	`+mos_login:`
	`3`	`+mos_password:`