feat: add setup for IBMSP backup client including chack-backup script and necessary deploy key

tasks/configure_ssh_keys.yml

@@ -7,3 +7,14 @@
     key: "{{ item.key }}"
     state: "{{ item.state | default('present') }}"
   loop: "{{ vault_authorized_keys | flatten(levels=1) }}"
+
+- name: copy deploykey files to managed servers
+  copy:
+    src: "{{ role_path }}/../ansible_vaults/{{ role_name }}/{{ item }}"
+    dest: "~/.ssh/{{ item }}"
+    owner: "root"
+    group: "root"
+    mode: 0400
+  loop:
+    - "id_ed25519_deploykey"
+    - "id_ed25519_deploykey.pub"

tasks/install_ibmsp_client.yml

@@ -15,7 +15,7 @@
       'tivsm-bacit',
       # TSM ONTAP Bibliothek (Support für NetApp Speicher)
       'tivsm-bahdw',
-      'tivsm-jbb',
+      #'tivsm-jbb',
     ]
     state: latest
 
@@ -58,3 +58,33 @@
     dest: "/opt/tivoli/tsm/client/ba/bin/{{ item }}"
   loop:
     - "dsm.opt"
+    - "dsm.sys"
+
+- name: install check-backup scripts
+  block:
+    - name: check out check-backup Git repo
+      git:
+        repo: "git@git.slub-dresden.de:slub-referat-2-3/check-backup.git"
+        dest: "/tmp/check-backup/"
+        key_file: "~/.ssh/id_ed25519_deploykey"
+        accept_hostkey: true
+        force: true
+    - name: copy binaries and config to the system
+      copy:
+        src: "/tmp/check-backup/Linux{{ item }}"
+        dest: "{{ item.name }}"
+        mode: "{{ item.mode }}"
+      loop:
+        - name: "/etc/logrotate.d/dsmcad"
+          mode: 0444
+        - name: "/usr/share/doc/check-backup.man"
+          mode: 0444
+        - name: "/usr/local/bin/check-backup.sh"
+          mode: 0555
+    - name: template script config
+      template:
+        src: "etc/check-backup.cfg"
+        dest: "/etc/check-backup.cfg"
+        owner: "root"
+        group: "root"
+        mode: 0644

tasks/main.yml

@@ -18,7 +18,7 @@
 
 ### SSH-KEYS VERWALTEN ###
 - name: configure SSH PublicKeys
-  import_tasks: "configure-ssh-publickeys.yml"
+  import_tasks: "configure_ssh_keys.yml"
   tags: [ssh]
 
 ### SFTP SERVER KONFIGURIEREN ###

templates/etc/check-backup.cfg.j2

+#####################################
+#                                   #
+#  CONFIG FILE FOR check-backup.sh  #
+#                                   #
+#####################################
+
+### HELP
+
+# Use this file to set custom configurations for check-backup.sh. These settings
+# will overwrite the defaults that are encoded in the script.
+# As check-backup.sh includes this file, you have to use valid Bash syntax.
+
+
+### CONFIGURATION
+
+## DSM Logs
+# search this path to find logs written by TSM Client
+# Default: DSMLOGS_PATH="/var/log/"
+DSMLOGS_PATH="/var/log/"
+# array of log file names
+# Default: DSMLOGS=("dsmsched.log" "dsmerror.log")
+DSMLOGS=("dsmsched.log" "dsmerror.log")
+
+## Log rotation
+# general log directory on the system
+# Default: BACKUP_FOLDER_PATH="/var/log/"
+BACKUP_FOLDER_PATH="/var/log/"
+# save rotated logs to this directory
+# Default: LOG_BACKUP_FOLDER="${BACKUP_FOLDER_PATH}/tsm_logs_archive/"
+LOG_BACKUP_FOLDER="${BACKUP_FOLDER_PATH}/tsm_logs_archive/"
+# save this many generations of rotated logs
+# Default: LOG_RETENTION_COUNT=5
+LOG_RETENTION_COUNT=5
+
+## Error capture
+# Regex to search for error messages
+# Default: REGEX="ANS[0-9]{4}[ES]"
+REGEX="ANS[0-9]{4}[ES]"
+
+## E-Mail settings
+# name of TSM node
+# Default: NODENAME="sdvazubitest"
+NODENAME="{{ ansible_hostname }}"
+# email recipient
+# Default: EMAIL_TO="randy.schoelzel@slub-dresden.de"
+EMAIL_TO="{{ vault_ibmsp_mail_to }}"
+# email carbon copy recipients
+# EMAIL_CC="~c Vorname.Nachname@slub-dresden.de,root@${HOSTNAME}"		# example
+# Default: EMAIL_CC=""
+EMAIL_CC="{{ vault_ibmsp_mail_cc }}"
+# email sender
+# Default: EMAIL_FROM="TSM-Backup-PostSchedCmd@${HOSTNAME}"
+EMAIL_FROM="TSM-Backup-PostSchedCmd@${HOSTNAME}"