8000 Add Squid proxy container with http support by Cypher-Miller · Pull Request #2773 · dell/omnia · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Add Squid proxy container with http support #2773

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 8 commits into
base: pub/new_architecture
Choose a base branch
from

Conversation

Cypher-Miller
Copy link

Description of the Solution

Added role to the prepare_oim.yml flow that will install and run a podman container with a squid proxy service on it.
Current implementation supports:

  • Creating needed squid directories and files in the omnia_share path
  • Creating a squid.conf file
    • Will find valid ip address from network_spec.yml
    • Will get port information from local_repo_config.yml and a variable in the role's vars file
  • Handles reloading squid when conf changes are made
  • Adds squid default ip to firewall

Suggested Reviewers

@jagadeeshnv @snarthan

@Omnia-svc
Copy link
Collaborator

Can one of the admins verify this patch?

- { url: "https://a2o.github.io/snoopy-packages/repo/centos/9/stable/", gpgkey: "" ,name: "snoopy"}
- { url: "https://xcat.org/files/xcat/repos/yum/2.17/xcat-core", gpgkey: "http://xcat.org/files/xcat/repos/yum/2.17/xcat-core/repodata/repomd.xml.key", name: "xcat-core" }
- { url: "https://xcat.org/files/xcat/repos/yum/2.17/xcat-dep/rh9/x86_64", gpgkey: "http://xcat.org/files/xcat/repos/yum/xcat-dep/rh9/x86_64/repodata/repomd.xml.key", name: "xcat-dep" }
- { url: "https://download.docker.com/linux/centos/9/x86_64/stable", gpgkey: "https://download.docker.com/linux/centos/gpg", name: "docker-ce-repo", port: 2225}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding this port necessary? can it be handled in the squid code for now?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

add this single port to squid_safe_ports

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It can. There are actually two sources to pass port information this is one and the other is adding them directly into the squid_safe_ports variable in the vars/main.yml

8000 Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So looks like this is the pulp port, get the port from the pulp and add it in safe_ports in one shot

shared_storage_path: "{{ oim_shared_path }}/omnia"
squid_shared_path: "{{ shared_storage_path }}/squid"
squid_logs_dir: "{{ shared_storage_path }}/log/squid"
squid_dir_permissions: "0777" #"0755"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

for a directory 755 is enough, Not working?

- { url: "https://a2o.github.io/snoopy-packages/repo/centos/9/stable/", gpgkey: "" ,name: "snoopy"}
- { url: "https://xcat.org/files/xcat/repos/yum/2.17/xcat-core", gpgkey: "http://xcat.org/files/xcat/repos/yum/2.17/xcat-core/repodata/repomd.xml.key", name: "xcat-core" }
- { url: "https://xcat.org/files/xcat/repos/yum/2.17/xcat-dep/rh9/x86_64", gpgkey: "http://xcat.org/files/xcat/repos/yum/xcat-dep/rh9/x86_64/repodata/repomd.xml.key", name: "xcat-dep" }
- { url: "https://download.docker.com/linux/centos/9/x86_64/stable", gpgkey: "https://download.docker.com/linux/centos/gpg", name: "docker-ce-repo", port: 2225}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

add this single port to squid_safe_ports

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants
0