infra-nimbus/ansible/mainnet.yml

---
- name: 'Verify Ansible versions'
  hosts: all
  tags: always
  become: false
  run_once: true
  gather_facts: false
  tasks:
    - local_action: command ./roles.py --check
      changed_when: false

- name: Configure network mainnet bootnodes
  become: true
  serial: '{{ serial|default(1) }}'
  hosts: 'nimbus-mainnet-small'
  vars_files: layout/mainnet.yml
  vars:
    # WARNING: Since these are Eth 2 bootnodes we need to keep the keys and IPs unchanged.
    beacon_node_netkey: '{{lookup("bitwarden", "nimbus/netkey", field=hostname)}}'
  roles:
    - { role: infra-role-swap-file,         tags: [ swap-file ] }
    - { role: infra-role-open-ports,        tags: [ open-ports ] }    
    - { role: redirect-ports,               tags: [ redirect-ports ] }
    - { role: get-geth-api-urls,            tags: [ get-geth-api-urls, beacon-node ] }
  tasks:
    - include_role:
        name: infra-role-beacon-node-linux
        apply: { tags: always }
      tags: [ beacon-node ]
      with_items: '{{ nodes_layout[inventory_hostname] }}'
      loop_control:
        loop_var: node
        index_var: idx

- name: Deploy mainnet linux beacon nodes
  become: true
  serial: '{{ serial|default(1) }}'
  hosts: nimbus-mainnet-metal
  vars_files: layout/mainnet.yml
  vars:
    # FIXME: Use all Geth nodes available in the fleet until we resync.
    geth_node_api_fleet_names: ['nimbus.geth']
  roles:
    - { role: update-netplan,               tags: [ update-netplan ], when: ansible_system == 'Linux' }
    - { role: infra-role-swap-file,         tags: [ swap-file ] }
    - { role: infra-role-open-ports,        tags: [ open-ports ] }
    - { role: infra-role-smart-metrics,     tags: [ smart-metrics ] }
    - { role: redirect-ports,               tags: [ redirect-ports ] }
    - { role: infra-role-geth,              tags: [ infra-role-geth ] }
    - { role: infra-role-geth-exporter,     tags: [ infra-role-geth-exporter ] }
    - { role: get-geth-api-urls,            tags: [ get-geth-api-urls, beacon-node ] }
    - { role: nimbus-era-files,             tags: [ nimbus-era-files ] }
  tasks:
    - include_role:
        name: infra-role-beacon-node-linux
        apply: { tags: always }
      tags: [ beacon-node ]
      with_items: '{{ nodes_layout[inventory_hostname] }}'
      loop_control:
        loop_var: node
        index_var: idx
add configuration for nimbus.mainnet bootstrap nodes Signed-off-by: Jakub Sokołowski <jakub@status.im> 2020-11-25 14:58:44 +00:00			`---`
add versioncheck.py script to verify Ansible role versions Since Ansible or Ansible Galaxy doesn't actually check role versions itself, we have to do it ourselves. This script goes through contents of `ansible/requirements.txt` and verifies each role is installed and has correct version. It also checks the version of Ansible itself. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-04-09 06:18:59 +00:00			`- name: 'Verify Ansible versions'`
			`hosts: all`
			`tags: always`
ansible: add meta requirements target, add check to bootstrap Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-05-10 13:29:38 +00:00			`become: false`
			`run_once: true`
add versioncheck.py script to verify Ansible role versions Since Ansible or Ansible Galaxy doesn't actually check role versions itself, we have to do it ourselves. This script goes through contents of `ansible/requirements.txt` and verifies each role is installed and has correct version. It also checks the version of Ansible itself. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-04-09 06:18:59 +00:00			`gather_facts: false`
add configuration for nimbus.mainnet bootstrap nodes Signed-off-by: Jakub Sokołowski <jakub@status.im> 2020-11-25 14:58:44 +00:00			`tasks:`
ansible: add roles.py script to manage roles https://github.com/status-im/infra-template/pull/5 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-06-13 15:19:32 +00:00			`- local_action: command ./roles.py --check`
add versioncheck.py script to verify Ansible role versions Since Ansible or Ansible Galaxy doesn't actually check role versions itself, we have to do it ourselves. This script goes through contents of `ansible/requirements.txt` and verifies each role is installed and has correct version. It also checks the version of Ansible itself. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-04-09 06:18:59 +00:00			`changed_when: false`
add configuration for nimbus.mainnet bootstrap nodes Signed-off-by: Jakub Sokołowski <jakub@status.im> 2020-11-25 14:58:44 +00:00
Deploy mainnet beacon nodes on hetzner server This will run multiple mainnet beacon nodes on the hetzner server. It will use the `infra-role-beacon-node-linux` to build and run `stable`, `unstable` and `testing` on the machine. Signed-off-by: Arthur Koziel <arthur@arthurkoziel.com> Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-06-22 09:49:48 +00:00			`- name: Configure network mainnet bootnodes`
Add hetzner dedicated server (#56) add stable-metal-01.he-eu-hel1.nimbus.mainnet Signed-off-by: Arthur Koziel <arthur@arthurkoziel.com> 2021-05-19 10:04:12 +00:00			`become: true`
add serial variable to playbooks Signed-off-by: Jakub Sokołowski <jakub@status.im> 2022-06-14 09:40:18 +00:00			`serial: '{{ serial\|default(1) }}'`
Deploy mainnet beacon nodes on hetzner server This will run multiple mainnet beacon nodes on the hetzner server. It will use the `infra-role-beacon-node-linux` to build and run `stable`, `unstable` and `testing` on the machine. Signed-off-by: Arthur Koziel <arthur@arthurkoziel.com> Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-06-22 09:49:48 +00:00			`hosts: 'nimbus-mainnet-small'`
nimbus.mainnet: rename nodes to include bootstrap word This is additional precaution to avoid accidental destruction of these hosts as they are used by Ethereum clients to connect to the network. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-03-04 17:11:51 +00:00			`vars_files: layout/mainnet.yml`
nimbus.mainnet: deploy 6 nodes on new Hetzner hosts https://github.com/status-im/infra-nimbus/issues/66 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-04 10:07:32 +00:00			`vars:`
			`# WARNING: Since these are Eth 2 bootnodes we need to keep the keys and IPs unchanged.`
			`beacon_node_netkey: '{{lookup("bitwarden", "nimbus/netkey", field=hostname)}}'`
Add hetzner dedicated server (#56) add stable-metal-01.he-eu-hel1.nimbus.mainnet Signed-off-by: Arthur Koziel <arthur@arthurkoziel.com> 2021-05-19 10:04:12 +00:00			`roles:`
requirements: use full names for all roles Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-03-10 12:26:14 +00:00			`- { role: infra-role-swap-file, tags: [ swap-file ] }`
mainnet: switch to nftables 2024-09-25 07:57:15 +00:00			`- { role: infra-role-open-ports, tags: [ open-ports ] }`
nimbus.mainnet: add IPv6 addresses and netplan role https://github.com/status-im/infra-nimbus/issues/176 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-03-20 12:44:34 +00:00			`- { role: redirect-ports, tags: [ redirect-ports ] }`
mainnet,sepolia,holesky: add tags for include_role tasks By using `apply` argument we can make the `tags` work for `include_role` calls used together with `with_items`. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-06-20 14:01:14 +00:00			`- { role: get-geth-api-urls, tags: [ get-geth-api-urls, beacon-node ] }`
mainnet/prater: block libp2p ports for select nodes As part of experiment in how nodes behave in restrictive networks. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-05 15:48:01 +00:00			`tasks:`
mainnet,sepolia,holesky: add tags for include_role tasks By using `apply` argument we can make the `tags` work for `include_role` calls used together with `with_items`. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-06-20 14:01:14 +00:00			`- include_role:`
			`name: infra-role-beacon-node-linux`
			`apply: { tags: always }`
			`tags: [ beacon-node ]`
ansible: Change hostname to inventory_hostname Due to the change caused by updated terraform script, we need to change usage of variable `hostname` to `inventory_hostname`. Signed-off-by: markoburcul <marko@status.im> 2024-09-16 06:10:36 +00:00			`with_items: '{{ nodes_layout[inventory_hostname] }}'`
mainnet/prater: block libp2p ports for select nodes As part of experiment in how nodes behave in restrictive networks. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-05 15:48:01 +00:00			`loop_control:`
			`loop_var: node`
use idx instead of port_offset loop_var name Signed-off-by: Jakub Sokołowski <jakub@status.im> 2022-08-10 14:54:21 +00:00			`index_var: idx`
nimbus.mainnet: deploy 6 nodes on new Hetzner hosts https://github.com/status-im/infra-nimbus/issues/66 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-04 10:07:32 +00:00
			`- name: Deploy mainnet linux beacon nodes`
			`become: true`
add serial variable to playbooks Signed-off-by: Jakub Sokołowski <jakub@status.im> 2022-06-14 09:40:18 +00:00			`serial: '{{ serial\|default(1) }}'`
nimbus.mainnet: deploy 6 nodes on new Hetzner hosts https://github.com/status-im/infra-nimbus/issues/66 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-04 10:07:32 +00:00			`hosts: nimbus-mainnet-metal`
nimbus.mainnet: rename nodes to include bootstrap word This is additional precaution to avoid accidental destruction of these hosts as they are used by Ethereum clients to connect to the network. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-03-04 17:11:51 +00:00			`vars_files: layout/mainnet.yml`
nimbus.mainnet: use all geth nodes in the fleet To allow individual geth nodes to be re-synced gradually. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-01-09 08:40:14 +00:00			`vars:`
			`# FIXME: Use all Geth nodes available in the fleet until we resync.`
nimbus.mainnet: discover only EL nodes from nimbus.geth Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-01-11 13:32:39 +00:00			`geth_node_api_fleet_names: ['nimbus.geth']`
nimbus.mainnet: deploy 6 nodes on new Hetzner hosts https://github.com/status-im/infra-nimbus/issues/66 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-04 10:07:32 +00:00			`roles:`
nimbus.mainnet: add IPv6 addresses and netplan role https://github.com/status-im/infra-nimbus/issues/176 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-03-20 12:44:34 +00:00			`- { role: update-netplan, tags: [ update-netplan ], when: ansible_system == 'Linux' }`
requirements: use full names for all roles Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-03-10 12:26:14 +00:00			`- { role: infra-role-swap-file, tags: [ swap-file ] }`
			`- { role: infra-role-open-ports, tags: [ open-ports ] }`
			`- { role: infra-role-smart-metrics, tags: [ smart-metrics ] }`
nimbus.mainnet: add two public Beacon API endpoints These nodes are intended for testing by Community. https://ethereum.github.io/beacon-APIs/ https://github.com/status-im/infra-nimbus/issues/66 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-04 11:42:33 +00:00			`- { role: redirect-ports, tags: [ redirect-ports ] }`
nimbus.mainnet: deploy one Geth node on metal hosts https://github.com/status-im/infra-nimbus/issues/127 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2022-09-14 13:24:15 +00:00			`- { role: infra-role-geth, tags: [ infra-role-geth ] }`
			`- { role: infra-role-geth-exporter, tags: [ infra-role-geth-exporter ] }`
mainnet,sepolia,holesky: add tags for include_role tasks By using `apply` argument we can make the `tags` work for `include_role` calls used together with `with_items`. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-06-20 14:01:14 +00:00			`- { role: get-geth-api-urls, tags: [ get-geth-api-urls, beacon-node ] }`
nimbus-era-files: use --network flag to fix errors Changes to default runtime config have caused errors like this: ``` FAT Could not load head state, database corrupt? tid=3639597 file=blockchain_dag.nim:920 head=e7d4f3b7:4636671 tail=4d611d5b:0 genesis=4d611d5b:0 ``` Signed-off-by: Jakub Sokołowski <jakub@status.im> 2022-10-12 07:30:46 +00:00			`- { role: nimbus-era-files, tags: [ nimbus-era-files ] }`
nimbus.mainnet: deploy 6 nodes on new Hetzner hosts https://github.com/status-im/infra-nimbus/issues/66 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-04 10:07:32 +00:00			`tasks:`
mainnet,sepolia,holesky: add tags for include_role tasks By using `apply` argument we can make the `tags` work for `include_role` calls used together with `with_items`. Signed-off-by: Jakub Sokołowski <jakub@status.im> 2024-06-20 14:01:14 +00:00			`- include_role:`
			`name: infra-role-beacon-node-linux`
			`apply: { tags: always }`
			`tags: [ beacon-node ]`
ansible: Change hostname to inventory_hostname Due to the change caused by updated terraform script, we need to change usage of variable `hostname` to `inventory_hostname`. Signed-off-by: markoburcul <marko@status.im> 2024-09-16 06:10:36 +00:00			`with_items: '{{ nodes_layout[inventory_hostname] }}'`
nimbus.mainnet: deploy 6 nodes on new Hetzner hosts https://github.com/status-im/infra-nimbus/issues/66 Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-10-04 10:07:32 +00:00			`loop_control:`
			`loop_var: node`
use idx instead of port_offset loop_var name Signed-off-by: Jakub Sokołowski <jakub@status.im> 2022-08-10 14:54:21 +00:00			`index_var: idx`