blob: 10ff89445b3b1c912982c293422bc3ea8e1082ee (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
- name: create zfs datasets for exports
zfs:
name: '{{ item.dataset }}'
state: present
extra_zfs_properties: '{{ item.zfs_properties if item.zfs_properties is defined else omit }}'
loop: "{{ nfs_exports | selectattr('dataset', 'defined') }}"
loop_control:
label: '{{ item.dataset }}'
- name: collect zfs mountpoints
shell: "zfs list -Hp -o name,mountpoint | sed 's/\t/: /'"
changed_when: False
register: zfs_list_mountpoints
- name: set zfs_mountpoints fact
set_fact:
zfs_mountpoints: '{{ zfs_list_mountpoints.stdout | from_yaml }}'
- name: set directory permissions for exports
file:
path: '{{ zfs_mountpoints[item.dataset] }}'
owner: '{{ item.owner | default(omit) }}'
group: '{{ item.group | default(omit) }}'
mode: "{{ '0%0o' % item.mode if item.mode is defined else omit }}"
setype: _default
state: directory
loop: '{{ nfs_exports }}'
loop_control:
label: '{{ item.dataset }}'
- name: set directory ACLs for exports
acl:
path: '{{ zfs_mountpoints[item.0.dataset] }}'
default: '{{ item.1.default | default(omit) }}'
entity: '{{ item.1.entity }}'
etype: '{{ item.1.etype }}'
permissions: '{{ item.1.permissions }}'
recalculate_mask: mask
state: present
loop: "{{ nfs_exports | selectattr('acl', 'defined') | subelements('acl') }}"
loop_control:
label: '{{ item.0.dataset }}: {{ item.1 }}'
- name: for exports with a "default" ACL, ensure the ACL is set on the directory itself
acl:
path: '{{ zfs_mountpoints[item.0.dataset] }}'
default: no
entity: '{{ item.1.entity }}'
etype: '{{ item.1.etype }}'
permissions: '{{ item.1.permissions }}'
recalculate_mask: mask
state: present
loop: "{{ nfs_exports | selectattr('acl', 'defined') | subelements('acl') | selectattr('1.default', 'defined') | selectattr('1.default', 'equalto', True) }}"
loop_control:
label: '{{ item.0.dataset }}: {{ item.1 }}'
|
