gfwleak/solutions-tsg-scripts
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

功能端部署剧本升级，适配20.04版本

Browse Source
This commit is contained in:
zhangzhihan
2020-04-26 02:06:47 +08:00
parent 9cad585759
commit 633624c5a5
61 changed files with 111 additions and 622 deletions
Download Patch File Download Diff File Expand all files Collapse all files

85
roles/firewall/tasks/main.yml
View File

@@ -4,86 +4,41 @@
src: "{{ role_path }}/files/"
dest: /tmp/ansible_deploy/
- name: "install dns-debug rpms from localhost"
- name: "install firewall packages"
yum:
name:
name: "{{ fw_packages }}"
state: present
vars:
fw_packages:
- /tmp/ansible_deploy/dns-debug-1.0.0.-1.el7.x86_64.rpm
state: present
when: install_dns_debug == "yes"
- name: "install ftp-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/ftp-debug-1.0.0.-1.el7.x86_64.rpm
state: present
when: install_ftp_debug == "yes"
- name: "install http-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/http-debug-1.0.0.-1.el7.x86_64.rpm
state: present
when: install_http_debug == "yes"
- name: "install mail-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/mail-debug-1.0.0.-1.el7.x86_64.rpm
state: present
when: install_mail_debug == "yes"
- name: "install ssl-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/ssl-debug-1.0.0.-1.el7.x86_64.rpm
state: present
when: install_ssl_debug == "yes"
- /tmp/ansible_deploy/tsg_conn_record-1.0.0.2155660-1.el7.centos.x86_64.rpm
- /tmp/ansible_deploy/fw_dns_plug-debug-1.0.3.ea8e0f6-1.el7.centos.x86_64.rpm
- /tmp/ansible_deploy/fw_ftp_plug-debug-1.0.1.a5c1e05-1.el7.centos.x86_64.rpm
- /tmp/ansible_deploy/fw_http_plug-debug-1.0.6.7b34485-1.el7.centos.x86_64.rpm
- /tmp/ansible_deploy/fw_mail_plug-debug-1.0.2.f513698-1.el7.centos.x86_64.rpm
- /tmp/ansible_deploy/fw_ssl_plug-1.0.1.d232f96-1.el7.centos.x86_64.rpm
- /tmp/ansible_deploy/capture_packet_plug-debug-1.0.0.-1.el7.x86_64.rpm
- /tmp/ansible_deploy/clotho-debug-1.0.0.-1.el7.x86_64.rpm
- name: "install fw_dns_plug-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/fw_dns_plug-debug-1.0.2.1c9d36d-1.el7.centos.x86_64.rpm
state: present
when: install_fw_dns_plug_debug == "yes"
- name: "install fw_ftp_plug-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/fw_ftp_plug-debug-1.0.0.bd656e4-1.el7.centos.x86_64.rpm
state: present
when: install_fw_ftp_plug_debug == "yes"
- name: "install fw_http_plug-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/fw_http_plug-debug-1.0.3.3c95e78-1.el7.centos.x86_64.rpm
state: present
when: install_fw_http_plug_debug == "yes"
- name: "install fw_mail_plug-debug rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/fw_mail_plug-debug-1.0.1.8792ed8-1.el7.centos.x86_64.rpm
state: present
when: install_fw_mail_plug_debug == "yes"
- name: "install tsg-master rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/tsg_master-debug-1.0.1.f624b67-1.el7.centos.x86_64.rpm
state: present
when: install_tsg_master == "yes"
- name: Template the tsgconf/main.conf
- name: "Template the tsgconf/main.conf"
template:
src: "{{ role_path }}/templates/main.conf.j2"
dest: /home/mesasoft/sapp_run/tsgconf/main.conf
tags: template
- name: Template the tsgconf/maat.conf
- name: "Template the tsgconf/maat.conf"
template:
src: "{{ role_path }}/templates/maat.conf.j2"
dest: /home/mesasoft/sapp_run/tsgconf/maat.conf
tags: template
- name: "Template the conf/capture_packet_plug.conf.j2"
template:
src: "{{ role_path }}/templates/capture_packet_plug.conf.j2"
dest: /home/mesasoft/sapp_run/conf/capture_packet_plug.conf
tags: template