Enable cvuqdisk install on FIPS systems

Author: Thilo Solbrig

changelogs/fragments/cvuqdisk-on-fips.yml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - "oraswgi_install: ansible.builtin.yum fails installing cvuqdisk on FIPS-enabled hosts due to missing package digest"

roles/oraswgi_install/tasks/12.1.0.1.yml

@@ -25,13 +25,8 @@
   when: oracle_home_gi not in checkgiinstall.stdout and oracle_install_version_gi == item.version and not oracle_sw_copy and oracle_sw_unpack
 
 - name: install_home_gi | Install cvuqdisk rpm
-  # noqa ignore-errors
-  ansible.builtin.yum:  # noqa fqcn[action-core]
-    name: "{{ oracle_stage_install }}/{{ oracle_install_version_gi }}/grid/rpm/{{ cvuqdisk_rpm }}"
-    state: present
-  when: _oraswgi_meta_configure_cluster
+  ansible.builtin.include_tasks: "install_cvuqdisk.yml"
   tags: cvuqdisk
-  ignore_errors: true
 
 - name: install_home_gi | Setup response file for install (GI)
   ansible.builtin.template:

roles/oraswgi_install/tasks/12.1.0.2.yml

@@ -27,13 +27,8 @@
   when: oracle_home_gi not in checkgiinstall.stdout and oracle_install_version_gi == item.version and not oracle_sw_copy and oracle_sw_unpack
 
 - name: install_home_gi | Install cvuqdisk rpm
-  ansible.builtin.yum:  # noqa fqcn[action-core]
-    name: "{{ oracle_stage_install }}/{{ oracle_install_version_gi }}/grid/rpm/{{ cvuqdisk_rpm }}"
-    state: present
-  # noqa ignore-errors
-  when: _oraswgi_meta_configure_cluster
+  ansible.builtin.include_tasks: "install_cvuqdisk.yml"
   tags: cvuqdisk
-  ignore_errors: true
 
 - name: install_home_gi | Setup response file for install (GI)
   ansible.builtin.template:

roles/oraswgi_install/tasks/12.2.0.1.yml

@@ -49,13 +49,8 @@
     - _orasw_meta_primary_node | bool
 
 - name: install_home_gi | Install cvuqdisk rpm
-  ansible.builtin.yum:  # noqa fqcn[action-core]
-    name: "{{ oracle_home_gi }}/cv/rpm/{{ cvuqdisk_rpm }}"
-    state: present
-  # noqa ignore-errors
-  when: _oraswgi_meta_configure_cluster
+  ansible.builtin.include_tasks: "install_cvuqdisk.yml"
   tags: cvuqdisk
-  ignore_errors: true
 
 - name: install_home_gi | Recreate ORACLE_HOME (gi) on other nodes
   ansible.builtin.file:

roles/oraswgi_install/tasks/18.3.0.0.yml

@@ -53,13 +53,8 @@
     - _orasw_meta_primary_node | bool
 
 - name: install_home_gi | Install cvuqdisk rpm
-  ansible.builtin.yum:  # noqa fqcn[action-core]
-    name: "{{ oracle_home_gi }}/cv/rpm/{{ cvuqdisk_rpm }}"
-    state: present
-  # noqa ignore-errors
-  when: _oraswgi_meta_configure_cluster
+  ansible.builtin.include_tasks: "install_cvuqdisk.yml"
   tags: cvuqdisk
-  ignore_errors: true
 
 - name: install_home_gi | Recreate ORACLE_HOME (gi) on other nodes
   ansible.builtin.file:

roles/oraswgi_install/tasks/19.3.0.0.yml

@@ -98,10 +98,7 @@
       tags: cvuqdisk
 
     - name: include 19c/21c | Install cvuqdisk rpm
-      ansible.builtin.yum:  # noqa fqcn[action-core]
-        name: "{{ oracle_rsp_stage }}/{{ cvuqdisk_rpm }}"
-        state: present
-        disable_gpg_check: true
+      ansible.builtin.include_tasks: "install_cvuqdisk.yml"
       tags: cvuqdisk
 
 # @todo information: add selectattr to asm_diskgroups

roles/oraswgi_install/tasks/install_cvuqdisk.yml

@@ -0,0 +1,23 @@
+---
+- name: install_home_gi | Install cvuqdisk rpm
+  # noqa ignore-errors
+  when:
+    - _oraswgi_meta_configure_cluster
+  tags: cvuqdisk
+  ignore_errors: true
+  block:
+    - name: install_home_gi | Install cvuqdisk rpm (non-FIPS)
+      ansible.builtin.yum:  # noqa fqcn[action-core]
+        name: "{{ oracle_home_gi }}/cv/rpm/{{ cvuqdisk_rpm }}"
+        state: present
+      when:
+        - not ansible_fips
+
+    - name: install_home_gi | Install cvuqdisk rpm (FIPS)
+      # noqa command-instead-of-module
+      ansible.builtin.command:
+        "rpm --upgrade --nodigest --nofiledigest {{ oracle_rsp_stage }}/{{ cvuqdisk_rpm }}"
+      register: _oraswgi_install_cvuqdisk_result
+      changed_when: _oraswgi_install_cvuqdisk_result.rc == 0
+      when:
+        - ansible_fips

roles/oraswgi_install/tasks/runcluvfy.yml

@@ -61,6 +61,7 @@
       environment: "{{ oracle_script_env }}"
       when:
         - not _oraswgi_meta_configure_cluster
+        - not gi_ignoreprereq | bool
 
     - ansible.builtin.debug:  # noqa name[missing]
         var: cmdruncluvfy.stdout_lines