Modified to fit GSI hypervisor setup

credentials.yml

-http_proxy: 172.16.0.100:8080
+http_proxy: lxproxy01.gsi.de
+http_port: 8080
 xrootd_interface: http #http or xrootd
 xrootd_port: 80 # This is the same always. It's a bug

playbook.yml

@@ -17,7 +17,7 @@
    - common
 
 - hosts: proxies
-  user: centos
+  user: root
   sudo: true
   vars_files:
     - credentials.yml
@@ -26,7 +26,7 @@
    - proxy
 
 - hosts: dynafed
-  user: centos
+  user: root
   vars:
     endpoints: "{{ lookup('file','dynafedInstances.json')|from_json }}"
   sudo: true

readme.md

-# XRootD HTTP Server
-
-## Description
-A Vagrant XRootD setup utilising the following protocol option
-```xrd.protocol http:80 /usr/lib/alice-xrootd/libXrdHttp.so
-```
- to expose internal files via http, right now only the data server can expose its files.
-Internally it uses Ansible to provision the vagrant virtual machines
-##Usage
--git clone https://git.gsi.de/dc/XRootD-Reps/xrootd-disk-cache-local-access.git --recursive
--cd roles/common/files/alice-xrootd-builder-docker-container/
--sudo ./start.sh
--cd ../../../..
--vagrant up
--vagrant ssh client
+# Datalake Local Access Point Setup

roles/proxy/files/yum.repos.d/os-mirror.repo

+[os-mirror]
+name = os-mirror
+baseurl = http://mirror.gsi.de/centos/7/os/x86_64
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+proxy=_none_

roles/proxy/files/yum.repos.d/update-mirror.repo

+[update-mirror]
+name = update-mirror
+baseurl = http://mirror.gsi.de/centos/7/updates/x86_64
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+proxy=_none_

roles/proxy/tasks/configureSquid.yml

@@ -8,3 +8,12 @@
        src: squid.conf.j2
        dest: /etc/squid/squid.conf
        mode: 0644
+
+  - name: copy squid.service
+    copy:
+      src: files/squid.service
+      dest: /usr/lib/systemd/system/squid.service
+      mode: '0744'
+    notify: restart squid
+    tags:
+      - config

roles/proxy/tasks/proxySetup.yml

@@ -4,6 +4,18 @@
     src: yum.conf.j2
     dest: /etc/yum.conf
 
+# - name: copy os-mirror.repo
+#   copy:
+#     src: files/yum.repos.d/os-mirror.repo
+#     dest: /etc/yum.repos.d/os-mirror.repo
+#     mode: '0744'
+
+ #- name: copy update-mirror.repo
+#   copy:
+#     src: files/yum.repos.d/update-mirror.repo
+#     dest: /etc/yum.repos.d/update-mirror.repo
+#     mode: '0744'
+
  - name: overwrite /etc/yum.repos.d/epel.repo
    copy:
     src: epel.repo
@@ -134,14 +146,6 @@
    tags:
      - config
 
- - name: copy squid.service
-   copy:
-     src: files/squid.service
-     dest: /usr/lib/systemd/system/squid.service
-     mode: '0744'
-   notify: restart squid
-   tags:
-     - config
 
  - name: Change file ownership, group and permissions
    file:

roles/proxy/templates/squid.conf.j2

@@ -28,8 +28,8 @@ cache_peer {{ dynafedInstance }} parent 80 0 proxy-only name=dynafed_1
 #
 
 # Only allow cachemgr access from localhost
-http_access allow localhost manager
-http_access allow all
+#http_access allow localhost manager
+http_access deny all
 
 #Enable ECAP adapter that resolves 30x redirections to the target from the proxies side
 ecap_enable on

roles/proxy/templates/yum.conf.j2

 [main]
-proxy=http://{{ http_proxy }}
+proxy=http://{{ http_proxy }}:{{ http_port }}