carsongee

- name: Apply Upgrade for bash vulnerability in Ubuntu
  hosts: all
  sudo: yes
  tasks:

    - name: Check if we are vulnerable
      shell: executable=/bin/bash chdir=/tmp foo='() { echo vulnerable; }' bash -c foo
      register: test_vuln
      ignore_errors: yes

carsongee

from .devstack import * # pylint: disable=wildcard-import, unused-wildcard-import
from .common import INSTALLED_APPS, MIDDLEWARE_CLASSES

FEATURES['ENABLE_SYSADMIN_DASHBOARD'] = True

MODULESTORE = {
    'default': {
        'ENGINE': 'xmodule.modulestore.mongo.MongoModuleStore',
        'OPTIONS': {
            "collection": "modulestore", 

carsongee

import os
import yaml


BASE_DIR = os.path.dirname(os.path.dirname(__file__))

# Setup variables for loading yaml settings
CONFIG_DEFAULT = os.path.abspath(os.path.join(BASE_DIR, '../etc'))
CONFIG_ROOT = os.environ.get('CONFIG_ROOT', CONFIG_DEFAULT)

carsongee

# Creates Networks, subnets, security groups, etc.
- name: Create networks
  hosts: localhost
  gather_facts: False
  pre_tasks:
    - include_vars: "{{ playbook_dir }}/environments/{{ env }}.yml"
    - name: Create network
      local_action:
        module: quantum_network
        auth_url: "{{ os_auth_url }}"

carsongee

- name: Apply common configration to all nodes
  hosts: all:&tag_org_mitx:&tag_status_production:&tag_env_{{ env }}
  sudo: yes
  vars_files: 
    - $playbook_dir/environments/{{ env }}.yml
  roles:
     - mitx-common

- name: Apply backup configuration
  hosts: tag_group_backup:&tag_org_mitx:&tag_status_production:&tag_env_{{ env }}

carsongee

---
# Patches openssl problem and restarts needed services
- name: Apply common configration to all nodes
  hosts: all
  sudo: yes
  # Uncomment to apply update one server at a time
  # serial: 1
  tasks:

    - name: "Install packages and update cache"