Артемий Зайцев (Все сообщения пользователя)

git config --global user.name "user name"
git config --global user.email "user email"

ansible-galaxy collection install community.general:==8.5.0
ansible-galaxy collection install community.mysql:==3.9.0
ansible-galaxy collection install community.rabbitmq:==1.3.0

FAILED! => {"changed": false, "cmd": "/usr/bin/git clone --origin origin https://github.com/lukas2511/dehydrated.git /home/bitrix/dehydrated",
"msg": "Cloning into '/home/bitrix/dehydrated'...\nfatal: unable to access 'https://github.com/lukas2511/dehydrated.git/': 
OpenSSL SSL_connect: SSL_ERROR_ZERO_RETURN in connection to github.com:443", "rc": 128, 
"stderr": "Cloning into '/home/bitrix/dehydrated'...\nfatal: unable to access 'https://github.com/lukas2511/dehydrated.git/':
OpenSSL SSL_connect: SSL_ERROR_ZERO_RETURN in connection to github.com:443 \n",
"stderr_lines": ["Cloning into '/home/bitrix/dehydrated'...", "fatal: unable to access 'https://github.com/lukas2511/dehydrated.git/':
OpenSSL SSL_connect: SSL_ERROR_ZERO_RETURN in connection to github.com:443 "], "stdout": "", "stdout_lines": []}

ansible [core 2.14.2]
  config file = /etc/ansible/ansible.cfg
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share                                                                                                                                                             /ansible/plugins/modules']
  ansible python module location = /usr/lib/python3.11/site-packages/ansible
  ansible collection location = /root/.ansible/collections
  executable location = /usr/bin/ansible
  python version = 3.11.11 (main, Feb 10 2025, 00:00:00) [GCC 11.5.0 20240719 (R                                                                                                                                                             ed Hat 11.5.0-5)] (/usr/bin/python3.11)
  jinja version = 3.1.2
  libyaml = True

PLAY [bitrix-hosts] ************************************************************

TASK [Gathering ERROR! couldn't resolve module/action 'community.general.git_config'. This often indicates a misspelling, missing collection, or incorrect module path.

The error appears to be in '/etc/ansible/roles/web/tasks/configure_le.yml': line 40, column 3, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

cat /etc/ansible/roles/web/tasks/configure_le.yml
---
# configure Let's Encrypt certificates
# dns_names: - array for domain names
# email: email address
# site_name: - bitrix site names

- include_tasks: sites-gathering_facts_site_names.yml

- debug:
    msg: "{{ bx_sites_info }}"

- name: set cluster mark to disabled state
  set_fact:
    is_cluster: "disable"

- name: change cluster mark if web cluster configured
  set_fact:
    is_cluster: "enable"
  when: "cluster_web_configure == 'enable'"

- name: download dehydrated
  git:
    repo: "https://github.com/lukas2511/dehydrated.git"
    dest: /home/bitrix/dehydrated
    clone: yes
    update: yes

- name: create directories
  file:
    path: "{{ item }}"
    state: directory
    owner: bitrix
    group: bitrix
    force: yes
    recurse: yes
  with_items:
    - /home/bitrix/dehydrated
    - /var/www/dehydrated

- name: add dehydrated dir as safe directory global git option in .gitconfig
  community.general.git_config:
    repo: "https://github.com/lukas2511/dehydrated.git"
    state: present
    scope: global
    name: safe.directory
    value: "/home/bitrix/dehydrated"

- name: create nginx LE config
  template:
    src: nginx/letsencrypt-challenge-tokens.conf.j2
    dest: /etc/nginx/bx/conf/letsencrypt-challenge-tokens.conf

- name: create nginx SSL options config
  template:
    src: nginx/ssl_options.conf.j2
    dest: /etc/nginx/bx/conf/ssl_options.conf

- include_tasks: configure_le_location_per_site.yml
  when: is_cluster == 'disable' and sites_cnt > 0

- include_tasks: configure_le_location_on_balancer.yml
  when: is_cluster == 'enable' and sites_cnt > 0

- name: restart nginx
  service:
    name: nginx
    state: restarted

- include_tasks: dehydrated.yml
  vars:
    dehydrated_type: "prod"

- include_tasks: configure_le_certificates_per_site.yml
  when: sites_cnt > 0

#- include_tasks: configure_nginx_push_server.yml
#  when: push_server is defined and push_server > 0

- name: reload nginx
  service:
    name: nginx
    state: reloaded

- name: reload httpd
  service:
    name: httpd
    state: reloaded

[Bitrix\Main\DB\SqlQueryException]
Mysql query error: (1227) Access denied; you need (at least one of) the SYSTEM_VARIABLES_ADMIN or SESSION_VARIABLES_ADMIN privilege(s) for this operation (400)
SET innodb_strict_mode=0
/home/bitrix/www/bitrix/modules/main/lib/db/mysqliconnection.php:153
#0: Bitrix\Main\DB\MysqliConnection->queryInternal
    /home/bitrix/www/bitrix/modules/main/lib/db/connection.php:327
#1: Bitrix\Main\DB\Connection->query
    /home/bitrix/www/bitrix/modules/main/lib/db/connection.php:376
#2: Bitrix\Main\DB\Connection->queryExecute
    /home/bitrix/www/bitrix/php_interface/after_connect_d7.php:5
#3: include(string)
    /home/bitrix/www/bitrix/modules/main/lib/db/connection.php:1024
#4: Bitrix\Main\DB\Connection->afterConnected
    /home/bitrix/www/bitrix/modules/main/lib/db/mysqliconnection.php:107
#5: Bitrix\Main\DB\MysqliConnection->connectInternal
    /home/bitrix/www/bitrix/modules/main/lib/data/connection.php:53
#6: Bitrix\Main\Data\Connection->getResource
    /home/bitrix/www/bitrix/modules/main/lib/db/mysqlisqlhelper.php:21
#7: Bitrix\Main\DB\MysqliSqlHelper->forSql
    /home/bitrix/www/bitrix/modules/main/lib/config/option.php:206
#8: Bitrix\Main\Config\Option::load
    /home/bitrix/www/bitrix/modules/main/lib/config/option.php:83
#9: Bitrix\Main\Config\Option::getRealValue
    /home/bitrix/www/bitrix/modules/main/lib/config/option.php:32
#10: Bitrix\Main\Config\Option::get
    /home/bitrix/www/bitrix/modules/main/lib/httprequest.php:420
#11: Bitrix\Main\HttpRequest->prepareCookie
    /home/bitrix/www/bitrix/modules/main/lib/httprequest.php:77
#12: Bitrix\Main\HttpRequest->__construct
    /home/bitrix/www/bitrix/modules/main/lib/httpapplication.php:44
#13: Bitrix\Main\HttpApplication->initializeContext
    /home/bitrix/www/bitrix/modules/main/lib/application.php:133
#14: Bitrix\Main\Application->initializeExtendedKernel
    /home/bitrix/www/bitrix/modules/main/include.php:23
#15: require_once(string)
    /home/bitrix/www/bitrix/modules/main/include/prolog_before.php:19
#16: require_once(string)
    /home/bitrix/www/bitrix/modules/main/include/prolog.php:10
#17: require_once(string)
    /home/bitrix/www/bitrix/header.php:1
#18: require(string)
    /home/bitrix/www/index.php:3

#- name: delete old kernels
# shell: package-cleanup --oldkernels --count=3 -y
# when: inventory_hostname == common_server or common_server == 'NOT_DEFINED' and ansible_distribution == "CentOS" and ansible_distribution_major_version == "7"

TASK [common : delete old kernels] *********************************************
fatal: [labs.askaron.com]: FAILED! => {"changed": true, "cmd": "package-cleanup --oldkernels --count=3 -y", "delta": "0:00:00.251145", "end": "2024-11-06 18:44:11.700192", "msg": "non-zero return code", "rc": 1, "start": "2024-11-06 18:4

PLAY RECAP *********************************************************************
labs.askaron.com           : ok=10   changed=2    unreachable=0    failed=1    skipped=6    rescued=0    ignored=0.

Команда
package-cleanup --oldkernels --count=3 -y

Ответ
package-cleanup has to be executed with one of the options: --dupes, --leaves, --orphans, --problems or --cleandupes

2020-06-17 17:50:56 1jlZOy-0002yR-Iw Tainted filename '/etc/exim/dkim/naturbine.ru.key'
2020-06-17 17:50:56 1jlZOy-0002yR-Iw unable to open file for reading: /etc/exim/dkim/naturbine.ru.key

Создадим закрытый ключ для подписи:

[root@srv01 ~]# mkdir /etc/exim/dkim
[root@srv01 ~]# cd /etc/exim/dkim
[root@srv01 dkim]# openssl genrsa -out naturbine.ru.key 1024

Создаем публичный ключ и меняем права на файл закрытого ключа:

[root@srv01 dkim]# openssl rsa -in naturbine.ru.key -pubout > naturbine.ru.pub
[root@srv01 dkim]# chown exim:exim naturbine.ru.key
[root@srv01 dkim]# chmod 640 naturbine.ru.key

Отправляю себе письма 
mail -s "test" test@yandex.ru 
 
 


2020-06-10 16:31:18 exim 4.93 daemon started: pid=20243, -q1h, listening
 for SMTP on port 25 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for 
SMTPS on port 465 (IPv6 and IPv4) 
2020-06-10 16:31:18 Start queue run: pid=20245 
2020-06-10 16:31:18 End queue run: pid=20245 
2020-06-10 16:31:37 1jj0pN-0005Gj-P0 <= root@mysite.ru U=root 
P=local S=491 T="test" 
2020-06-10 16:31:37 1jj0pN-0005Gj-P0 H=mx.yandex.ru [2a02:6b8::89] 
Broken pipe 
2020-06-10 16:31:37 1jj0pN-0005Gj-P0 H=mx.yandex.ru [213.180.193.89] 
Broken pipe 
2020-06-10 16:31:37 1jj0pN-0005Gj-P0 H=mx.yandex.ru [213.180.204.89] 
Broken pipe 
2020-06-10 16:31:37 1jj0pN-0005Gj-P0 H=mx.yandex.ru [77.88.21.89] Broken
 pipe 
2020-06-10 16:31:37 1jj0pN-0005Gj-P0 H=mx.yandex.ru [87.250.250.89] 
Broken pipe 
2020-06-10 16:31:37 1jj0pN-0005Gj-P0 == test@yandex.ru R=dnslookup 
T=remote_smtp defer (32): Broken pipe 
2020-06-10 16:34:33 1jj0sD-0005J8-3W <= bitrix@mysite.ru U=bitrix 
P=local S=795 
T="\320\242\320\265\321\201\321\202\320\276\320\262\320\276\320\265 
\321\201\320\276\320\276\320\261\321\211\320\265\320\275\320\270\320\265"
 
2020-06-10 16:34:33 1jj0sD-0005J8-3W H=mx.yandex.ru [93.158.134.89] 
Broken pipe 
2020-06-10 16:34:33 1jj0sD-0005J8-3W == test@yandex.ru R=dnslookup 
T=remote_smtp defer (32): Broken pipe 
2020-06-10 16:37:40 exim 4.93 daemon started: pid=20583, -q1h, listening
 for SMTP on port 25 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for 
SMTPS on port 465 (IPv6 and IPv4) 
2020-06-10 16:37:40 Start queue run: pid=20585 
2020-06-10 16:37:40 1jj0sD-0005J8-3W == test@yandex.ru R=dnslookup 
T=remote_smtp defer (-53): retry time not reached for any host for 
'yandex.ru' 
2020-06-10 16:37:40 1jj0pN-0005Gj-P0 == test@yandex.ru R=dnslookup 
T=remote_smtp defer (-53): retry time not reached for any host for 
'yandex.ru'