v21.05: 更新tfe

roles/docker-env/files/daemon.json

@@ -0,0 +1 @@
+{"iptables":false,"bridge": "none"}

roles/docker-env/tasks/docker-ce.yml

@@ -30,6 +30,11 @@
       - /tmp/ansible_deploy/docker-ce/libsemanage-2.5-14.el7.x86_64.rpm
     state: present
 
+- name: "docker-ce: copy daemon.json to target"
+  copy:
+    src: '{{ role_path }}/files/daemon.json'
+    dest: /etc/docker/
+
 - name: "docker-ce: systemctl start docker and enabled docker"
   systemd:
     name: docker

roles/tfe/tasks/main.yml

@@ -13,8 +13,7 @@
 - name: "install tfe rpms from localhost"
   yum:
     name:
-      - /tmp/ansible_deploy/tfe-kmod-v1.0.5.20200408-1dkms.noarch.rpm
-      - /tmp/ansible_deploy/tfe-4.4.01.3e020b9-1.el7.x86_64.rpm
+      - /tmp/ansible_deploy/tfe-4.5.01.91facad-1.el7.x86_64.rpm
     state: present
 
 - name: "tfe:copy cert file to device"

roles/tfe/templates/tfe.conf.j2

@@ -1,7 +1,8 @@
 [system]
 nr_worker_threads={{ tfe.nr_threads }}
 enable_kni_v1=0
-enable_kni_v2=1
+enable_kni_v2=0
+enable_kni_v3=1
 
 # Only when (disable_coredump == 1 || (enable_breakpad == 1 && enable_breakpad_upload == 1)) is satisfied, the core will not be generated locally
 disable_coredump=0
@@ -19,6 +20,12 @@ cpu_affinity_mask=1-9
 # LEAST_CONN = 0; ROUND_ROBIN = 1
 load_balance=1
 
+[nfq]
+queue_id=1
+queue_maxlen=655350
+queue_rcvbufsiz=983025000
+queue_no_enobufs=1
+
 [kni]
 # kni v1
 #uxdomain=/var/run/.tfe_kni_acceptor_handler

roles/tfe/templates/tfe_kmod.conf.j2

@@ -1,2 +0,0 @@
-# load tfe_kmod at boot
-tfe_kmod