Issue #660: Update nss package in CentOS 7.9 to enable ipa installation

Signed-off-by: DeepikaKrishnaiah <deepika_k2@dell.com>

control_plane/roles/control_plane_sm/files/Dockerfile

@@ -6,7 +6,7 @@ RUN dnf install -y epel-release
 
 RUN dnf groupinstall "Infiniband Support" -y
 
-RUN dnf install -y opensm-3.3.23
+RUN dnf install -y opensm
 
 COPY opensm.conf /etc/rdma/opensm.conf
 
@@ -14,4 +14,4 @@ COPY start.sh /
 
 RUN chmod +x /start.sh
 
-ENTRYPOINT ["/start.sh"]
+ENTRYPOINT ["/start.sh"]

docs/README.md

@@ -80,7 +80,7 @@ MariaDB	|	GPL 2.0	|	5.5.68	|	Relational database used by Slurm
 Slurm	|	GNU General Public	|	20.11.7	|	HPC Workload Manager
 Docker CE	|	Apache-2.0	|	20.10.2	|	Docker Service
 FreeIPA	|	GNU General Public License v3	|	4.6.8	|	Authentication system used in the login node
-OpenSM	|	GNU General Public License 2	|	3.3.21	|	-
+OpenSM	|	GNU General Public License 2	|	3.3.24	|	-
 NVIDIA container runtime	|	Apache-2.0	|	3.4.2	|	Nvidia container runtime library
 Python PIP	|	MIT License	|	21.1.2	|	Python Package
 Python3	|	-	|	3.6.8	|	-

roles/login_common/tasks/main.yml

@@ -19,4 +19,8 @@
 
 - name: Enable module idm in Rocky or Centos >= 8.0
   include_tasks: enable_dnf_module.yml
+  when: hostvars['127.0.0.1']['login_node_required']
+
+- name: Update Packages
+  include_tasks: update_package.yml
   when: hostvars['127.0.0.1']['login_node_required']

roles/login_common/tasks/update_package.yml

@@ -0,0 +1,23 @@
+#  Copyright 2021 Dell Inc. or its subsidiaries. All Rights Reserved.
+#
+#  Licensed under the Apache License, Version 2.0 (the "License");
+#  you may not use this file except in compliance with the License.
+#  You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+---
+
+- name: Update nss package to install ipa server/client
+  command: yum update nss -y
+  changed_when: false
+  args:
+    warn: false
+  when:
+    - ( ansible_distribution | lower == os_centos )
+    - ( ansible_distribution_version < os_version )