dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

jenkins0: Bind Samba to real interface only 

Because *jenkins0.pyrocufflink.blue* runs Docker, it has an extra
virtual interface and IP address, for container communication. By
default, Samba registers all IP addresses in DNS, and cannot
differentiate between the actual interface and the Docker bridge. This
can cause other hosts to attempt to contact *jenkins0.pyrocufflink.blue*
using the wrong address.

The `samba_interfaces` variable controls the value of the `interfaces`
global configuration option for Samba. One of the things this option
controls is which addresses to register in DNS. By setting it to the
network address of the *pyrocufflink.blue* network, we can prevent the
virtual address from being used at all.
jenkins-master
Dustin 2019-01-06 12:20:27 -06:00
parent 4ccab4bd40
commit 284e3817e0
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
host_vars/jenkins0.pyrocufflink.blue Normal file
View File

@ -0,0 +1,2 @@
samba_interfaces:
- '{{ dch_networks.blue.ipv4_address }}'