feat: lock VM to RHEL9.6 and enable EUS channels (#31)

* lock VM to RHEL9.6 and enable EUS channels

By default, RHEL 9 follows general RHEL 9 streams
It means that after RHEL 9.7 is out, running dnf update on RHEL 9.6 pulls
packages from RHEL 9.7 repositories.
This change makes system install packages from RHEL 9.6.z instead of RHEL
9.7 repositories

https://learn.microsoft.com/en-us/azure/virtual-machines/workloads/redhat/redhat-rhui

* Change to use config file, add README

Author: spetrosi

README.md

@@ -22,6 +22,20 @@ from external collections.  Please use the following command to install them:
 ansible-galaxy collection install -vv -r meta/collection-requirements.yml
 ```
 
+## Variables for Controlling Repositories
+
+### hpc_enable_eus_repo
+
+Whether to disable the default `rhui-azure-rhel${major_version}` repository and enable the EUS `rhui-azure-rhel${major_version}-eus` repository.
+
+This is required to continue getting updates for your minor version.
+For example, when on RHEL 9.6, once RHEL 9.7 is released, your system will install packages from RHEL 9.7 repositories.
+Setting this variable to `true` locks the version to RHEL 9.6 so that you get packages from RHEL 9.6.z repositories.
+
+Default: `true`
+
+Type: `bool`
+
 ## Variables for Controlling Packages to Install
 
 These variables control what packages the role installs.

defaults/main.yml

@@ -25,3 +25,5 @@ hpc_tuning: true
 
 hpc_update_kernel: true
 hpc_update_all_packages: false
+
+hpc_enable_eus_repo: true

tasks/main.yml

@@ -51,6 +51,56 @@
     - "{{ __hpc_nvidia_cuda_repo }}"
     - "{{ __hpc_microsoft_prod_repo }}"
 
+- name: Replace default RHUI Azure repository with the EUS repository
+  when: hpc_enable_eus_repo
+  block:
+    - name: Get list of installed repositories
+      command: dnf repolist
+      changed_when: false
+      register: __hpc_dnf_repolist
+
+    - name: Ensure that the non-EUS RHUI Azure repository is not installed
+      package:
+        name: rhui-azure-rhel{{ ansible_distribution_major_version }}
+        state: absent
+        use: "{{ (__hpc_server_is_ostree | d(false)) |
+          ternary('ansible.posix.rhel_rpm_ostree', omit) }}"
+
+    - name: Enable the RHUI Azure EUS repository
+      when: >-
+        'rhui-microsoft-azure-rhel' + ansible_distribution_major_version
+        + '-eus ' not in __hpc_dnf_repolist.stdout
+      block:
+        - name: Create a temp file for the EUS repository configuration
+          tempfile:
+            state: file
+            prefix: rhel{{ ansible_distribution_major_version }}-eus
+            suffix: .config
+          register: __hpc_euc_config
+
+        - name: Generate the repository configuration template
+          template:
+            src: rhel-ver-eus.config
+            dest: "{{ __hpc_euc_config.path }}"
+            mode: "0644"
+            owner: root
+            group: root
+
+        - name: Add EUS repository
+          command: >-
+            dnf --config {{ __hpc_euc_config.path }} install
+            rhui-azure-rhel{{ ansible_distribution_major_version }}-eus
+            --assumeyes
+          changed_when: true
+
+        - name: Lock the RHEL minor release to the current minor release
+          copy:
+            content: "{{ ansible_distribution_version }}"
+            dest: /etc/dnf/vars/releasever
+            mode: "0644"
+            owner: root
+            group: root
+
 - name: Configure firewall to use trusted zone as default
   when: hpc_manage_firewall
   include_role:

templates/rhel-ver-eus.config

@@ -0,0 +1,7 @@
+[rhui-microsoft-azure-rhel{{ ansible_distribution_major_version }}]
+name=Microsoft Azure RPMs for Red Hat Enterprise Linux {{ ansible_distribution_major_version }} (rhel{{ ansible_distribution_major_version }}-eus)
+baseurl=https://rhui4-1.microsoft.com/pulp/repos/unprotected/microsoft-azure-rhel{{ ansible_distribution_major_version }}-eus
+enabled=1
+gpgcheck=1
+sslverify=1
+gpgkey=/etc/pki/rpm-gpg/RPM-GPG-KEY-microsoft-azure-release

tests/tests_default.yml

@@ -14,6 +14,7 @@
     hpc_install_rdma: false
     hpc_install_system_openmpi: false
     hpc_build_openmpi_w_nvidia_gpu_support: false
+    hpc_enable_eus_repo: false
   tasks:
     - name: Skip unsupported architectures
       include_tasks: tasks/skip_unsupported_archs.yml

tests/tests_include_vars_from_parent.yml

@@ -59,6 +59,7 @@
             hpc_install_rdma: false
             hpc_install_system_openmpi: false
             hpc_build_openmpi_w_nvidia_gpu_support: false
+            hpc_enable_eus_repo: false
 
         - name: Cleanup
           file:

tests/tests_skip_toolkit.yml

@@ -16,6 +16,7 @@
     hpc_install_system_openmpi: false
     hpc_build_openmpi_w_nvidia_gpu_support: false
     hpc_reboot_ok: true
+    hpc_enable_eus_repo: false
   tags:
     - tests::reboot
   tasks:

vars/RedHat_9.yml

@@ -16,6 +16,11 @@ __hpc_microsoft_prod_repo:
   description: Microsoft Production repository
   key: https://packages.microsoft.com/keys/microsoft.asc
   baseurl: https://packages.microsoft.com/rhel/9/prod/
+__hpc_rhui_azure_rhel_9_eus_repo:
+  name: rhui-microsoft-azure-rhel9-eus
+  description: Microsoft Azure RPMs for Red Hat Enterprise Linux 9 EUS
+  key: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-microsoft-azure-release
+  baseurl: https://rhui4-1.microsoft.com/pulp/repos/unprotected/microsoft-azure-rhel9-eus
 
 # Vars related to RPMs
 __hpc_nvidia_driver_module: nvidia-driver:575-dkms