mariadb: initial commit

tasks/main.yml

@@ -0,0 +1,134 @@
+---
+  - name: OS vars
+    include_vars: "{{ ansible_distribution|lower }}.yml"
+  - name: install prerequisite
+    package:
+      name: "{{ packages_list }}"
+      state: present
+
+  - name: set some vars
+    set_fact:
+      mariadb_root_password: "{{ lookup( 'keepass', '{{ group_names[0]}}/{{ inventory_hostname }}_mysql', 'password' ) }}"
+
+  - name: install on CentOS
+    block:
+    - name: install repo 1
+      get_url:
+        url: https://downloads.mariadb.com/MariaDB/mariadb_repo_setup
+        dest: /tmp/configure_mariadb_repo
+        mode: 0700
+
+    - name: install repo 2
+      command: /tmp/configure_mariadb_repo --os-type=rhel --os-version=7 --skip-maxscale
+
+    - name: install mariadb server package
+      yum:
+        name:
+        - "mariadb"
+        - mariadb-server
+        state: present
+
+    - name: create datadir
+      file:
+        path: "{{ mariadb_data_dir }}"
+        state: directory
+        mode: 0700
+        owner: "{{ mariadb_user }}"
+        setype: mysqld_db_t
+    when: ansible_distribution == "CentOS"
+
+
+  - name: initialize data dir
+    become: true
+    become_user: mysql
+    command: "/usr/bin/mysql_install_db --datadir={{ mariadb_data_dir }} --user={{ mariadb_user }}"
+    args:
+      creates: "{{ mariadb_data_dir }}/mysql"
+  - name: setup logging
+    file:
+      path: "{{ mariadb_server_log }}"
+      state: touch
+      owner: mysql
+      group: "{{ admin_group }}"
+      mode: 0640
+
+  - name: setup logfile rotation
+    template:
+      src: mysql_logrotate
+      dest: /etc/logrotate.d/mysql.conf
+
+  - name: configure mariadb
+    ini_file:
+      path: /etc/my.cnf.d/server.cnf
+      section: mysqld
+      option: "{{ item.option }}"
+      value: "{{ item.value}}"
+      state: present
+    loop:
+      "{{ mariadb_server_settings }}"
+    notify: restart mysql
+
+
+  - name: activate and start mariadb service
+    systemd: name=mariadb enabled=true state=started
+
+#Below tasks "stolen" from https://github.com/geerlingguy/ansible-role-mysql/
+  - name: Get list of hosts for the root user.
+    command: mysql -NBe "SELECT Host FROM mysql.user WHERE User = '{{ mariadb_root_username }}' ORDER BY (Host='localhost') ASC"
+    register: mariadb_root_hosts
+    changed_when: false
+    check_mode: no
+
+  - name: Update MySQL root password for localhost root account (5.7.x).
+    shell: >
+      mysql -u root -NBe
+      'ALTER USER "{{ mariadb_root_username }}"@"{{ item }}" IDENTIFIED BY "{{ mariadb_root_password }}";'
+    with_items: "{{ mariadb_root_hosts.stdout_lines|default([]) }}"
+
+# Has to be after the root password assignment, for idempotency.
+  - name: Copy .my.cnf file with root password credentials.
+    template:
+      src: "root-my.cnf.j2"
+      dest: "{{ mariadb_root_home }}/.my.cnf"
+      owner: root
+      group: root
+      mode: 0600
+
+  - name: Disallow root login remotely and anonymous access
+    command: 'mysql -NBe "{{ item }}"'
+    with_items:
+      - DELETE FROM mysql.user WHERE User=''
+      - DELETE FROM mysql.user WHERE User='{{ mariadb_root_username }}' AND Host NOT IN ('localhost', '127.0.0.1', '::1')
+    changed_when: false
+
+  - name: create root bin and backup dirs
+    file:
+      path: "{{ item }}"
+      state: directory
+      owner: root
+      group: root
+      mode: 0700
+    loop:
+    - "{{ mariadb_backup_dir }}"
+    - /root/bin
+
+  - name: deploy backup script
+    copy:
+      src: /home/tom/Documents/Opendoor/Developpement/Scripts/MySQL/mysql_backup.sh
+      dest: /root/bin
+      mode: 0700
+
+  - name: backup script cron
+    cron:
+      name: mysql_backup
+      cron_file: mysql_backup
+      user: root
+      hour: "01"
+      minute: "00"
+      job: "/root/bin/mysql_backup.sh {{ mariadb_backup_dir }}"
+
+  - name: install percona toolkit
+    yum:
+      name: https://www.percona.com/downloads/percona-toolkit/3.1.0/binary/redhat/7/x86_64/percona-toolkit-3.1.0-2.el7.x86_64.rpm
+      state: present
+    when: ansible_distribution == 'CentOS'