mirror of
https://github.com/geerlingguy/ansible-role-docker.git
synced 2025-08-06 13:47:47 +02:00
fix ansible-lint
This commit is contained in:
parent
67e50e9af0
commit
cd44a7c077
@ -40,7 +40,7 @@ docker_apt_ignore_key_error: true
|
|||||||
docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg"
|
docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg"
|
||||||
|
|
||||||
# Used only for RedHat/CentOS/Fedora.
|
# Used only for RedHat/CentOS/Fedora.
|
||||||
docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo"
|
docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora', 'centos') }}/docker-{{ docker_edition }}.repo"
|
||||||
docker_yum_repo_enable_nightly: '0'
|
docker_yum_repo_enable_nightly: '0'
|
||||||
docker_yum_repo_enable_test: '0'
|
docker_yum_repo_enable_test: '0'
|
||||||
docker_yum_gpg_key: "{{ docker_repo_url }}/centos/gpg"
|
docker_yum_gpg_key: "{{ docker_repo_url }}/centos/gpg"
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
- name: restart docker
|
- name: Restart docker
|
||||||
service:
|
ansible.builtin.service:
|
||||||
name: docker
|
name: docker
|
||||||
state: "{{ docker_restart_handler_state }}"
|
state: "{{ docker_restart_handler_state }}"
|
||||||
ignore_errors: "{{ ansible_check_mode }}"
|
ignore_errors: "{{ ansible_check_mode }}"
|
||||||
|
@ -7,12 +7,12 @@ galaxy_info:
|
|||||||
description: Docker for Linux.
|
description: Docker for Linux.
|
||||||
company: "Midwestern Mac, LLC"
|
company: "Midwestern Mac, LLC"
|
||||||
license: "license (BSD, MIT)"
|
license: "license (BSD, MIT)"
|
||||||
min_ansible_version: 2.4
|
min_ansible_version: '2.4'
|
||||||
platforms:
|
platforms:
|
||||||
- name: EL
|
- name: EL
|
||||||
versions:
|
versions:
|
||||||
- 7
|
- '7'
|
||||||
- 8
|
- '8'
|
||||||
- name: Fedora
|
- name: Fedora
|
||||||
versions:
|
versions:
|
||||||
- all
|
- all
|
||||||
|
@ -5,11 +5,13 @@
|
|||||||
|
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: Update apt cache.
|
- name: Update apt cache.
|
||||||
apt: update_cache=yes cache_valid_time=600
|
ansible.builtin.apt:
|
||||||
|
update_cache: yes
|
||||||
|
cache_valid_time: 600
|
||||||
when: ansible_os_family == 'Debian'
|
when: ansible_os_family == 'Debian'
|
||||||
|
|
||||||
- name: Wait for systemd to complete initialization. # noqa 303
|
- name: Wait for systemd to complete initialization. # noqa command-instead-of-module
|
||||||
command: systemctl is-system-running
|
ansible.builtin.command: systemctl is-system-running
|
||||||
register: systemctl_status
|
register: systemctl_status
|
||||||
until: >
|
until: >
|
||||||
'running' in systemctl_status.stdout or
|
'running' in systemctl_status.stdout or
|
||||||
|
@ -1,19 +1,20 @@
|
|||||||
---
|
---
|
||||||
- name: Check current docker-compose version.
|
- name: Check current docker-compose version.
|
||||||
command: "{{ docker_compose_path }} --version"
|
ansible.builtin.command: "{{ docker_compose_path }} --version"
|
||||||
register: docker_compose_vsn
|
register: docker_compose_vsn
|
||||||
check_mode: false
|
check_mode: false
|
||||||
changed_when: false
|
changed_when: false
|
||||||
failed_when: false
|
failed_when: false
|
||||||
|
|
||||||
- set_fact:
|
- name: Set fact docker_compose_current_version
|
||||||
|
ansible.builtin.set_fact:
|
||||||
docker_compose_current_version: "{{ docker_compose_vsn.stdout | regex_search('(\\d+(\\.\\d+)+)') }}"
|
docker_compose_current_version: "{{ docker_compose_vsn.stdout | regex_search('(\\d+(\\.\\d+)+)') }}"
|
||||||
when: >
|
when: >
|
||||||
docker_compose_vsn.stdout is defined
|
docker_compose_vsn.stdout is defined
|
||||||
and (docker_compose_vsn.stdout | length > 0)
|
and (docker_compose_vsn.stdout | length > 0)
|
||||||
|
|
||||||
- name: Delete existing docker-compose version if it's different.
|
- name: Delete existing docker-compose version if it's different.
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "{{ docker_compose_path }}"
|
path: "{{ docker_compose_path }}"
|
||||||
state: absent
|
state: absent
|
||||||
when: >
|
when: >
|
||||||
@ -21,7 +22,7 @@
|
|||||||
and (docker_compose_version | regex_replace('v', '')) not in docker_compose_current_version
|
and (docker_compose_version | regex_replace('v', '')) not in docker_compose_current_version
|
||||||
|
|
||||||
- name: Install Docker Compose (if configured).
|
- name: Install Docker Compose (if configured).
|
||||||
get_url:
|
ansible.builtin.get_url:
|
||||||
url: "{{ docker_compose_url }}"
|
url: "{{ docker_compose_url }}"
|
||||||
dest: "{{ docker_compose_path }}"
|
dest: "{{ docker_compose_path }}"
|
||||||
mode: 0755
|
mode: 0755
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
---
|
---
|
||||||
- name: Ensure docker users are added to the docker group.
|
- name: Ensure docker users are added to the docker group.
|
||||||
user:
|
ansible.builtin.user:
|
||||||
name: "{{ item }}"
|
name: "{{ item }}"
|
||||||
groups: docker
|
groups: docker
|
||||||
append: true
|
append: true
|
||||||
with_items: "{{ docker_users }}"
|
with_items: "{{ docker_users }}"
|
||||||
|
|
||||||
- name: Reset ssh connection to apply user changes.
|
- name: Reset ssh connection to apply user changes.
|
||||||
meta: reset_connection
|
ansible.builtin.meta: reset_connection
|
||||||
|
@ -1,72 +1,79 @@
|
|||||||
---
|
---
|
||||||
- name: Load OS-specific vars.
|
- name: Load OS-specific vars.
|
||||||
include_vars: "{{ lookup('first_found', params) }}"
|
ansible.builtin.include_vars: "{{ lookup('first_found', params) }}"
|
||||||
vars:
|
vars:
|
||||||
params:
|
params:
|
||||||
files:
|
files:
|
||||||
- '{{ansible_distribution}}.yml'
|
- '{{ ansible_distribution }}.yml'
|
||||||
- '{{ansible_os_family}}.yml'
|
- '{{ ansible_os_family }}.yml'
|
||||||
- main.yml
|
- main.yml
|
||||||
paths:
|
paths:
|
||||||
- 'vars'
|
- 'vars'
|
||||||
|
|
||||||
- include_tasks: setup-RedHat.yml
|
- name: Include setup-RedHat
|
||||||
|
ansible.builtin.include_tasks: setup-RedHat.yml
|
||||||
when: ansible_os_family == 'RedHat'
|
when: ansible_os_family == 'RedHat'
|
||||||
|
|
||||||
- include_tasks: setup-Debian.yml
|
- name: Include setup-Debian
|
||||||
|
ansible.builtin.include_tasks: setup-Debian.yml
|
||||||
when: ansible_os_family == 'Debian'
|
when: ansible_os_family == 'Debian'
|
||||||
|
|
||||||
- name: Install Docker packages.
|
- name: Install Docker packages.
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_packages }}"
|
name: "{{ docker_packages }}"
|
||||||
state: "{{ docker_packages_state }}"
|
state: "{{ docker_packages_state }}"
|
||||||
notify: restart docker
|
notify: Restart docker
|
||||||
ignore_errors: "{{ ansible_check_mode }}"
|
ignore_errors: "{{ ansible_check_mode }}"
|
||||||
when: "ansible_version.full is version_compare('2.12', '<') or ansible_os_family not in ['RedHat', 'Debian']"
|
when: "ansible_version.full is version_compare('2.12', '<') or ansible_os_family not in ['RedHat', 'Debian']"
|
||||||
|
|
||||||
- name: Install Docker packages (with downgrade option).
|
- name: Install Docker packages (with downgrade option).
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_packages }}"
|
name: "{{ docker_packages }}"
|
||||||
state: "{{ docker_packages_state }}"
|
state: "{{ docker_packages_state }}"
|
||||||
allow_downgrade: true
|
allow_downgrade: true
|
||||||
notify: restart docker
|
notify: Restart docker
|
||||||
ignore_errors: "{{ ansible_check_mode }}"
|
ignore_errors: "{{ ansible_check_mode }}"
|
||||||
when: "ansible_version.full is version_compare('2.12', '>=') and ansible_os_family in ['RedHat', 'Debian']"
|
when: "ansible_version.full is version_compare('2.12', '>=') and ansible_os_family in ['RedHat', 'Debian']"
|
||||||
|
|
||||||
- name: Install docker-compose plugin.
|
- name: Install docker-compose plugin.
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_compose_package }}"
|
name: "{{ docker_compose_package }}"
|
||||||
state: "{{ docker_compose_package_state }}"
|
state: "{{ docker_compose_package_state }}"
|
||||||
notify: restart docker
|
notify: Restart docker
|
||||||
ignore_errors: "{{ ansible_check_mode }}"
|
ignore_errors: "{{ ansible_check_mode }}"
|
||||||
when: "docker_install_compose_plugin | bool == true and (ansible_version.full is version_compare('2.12', '<') or ansible_os_family not in ['RedHat', 'Debian'])"
|
when:
|
||||||
|
- docker_install_compose_plugin | bool
|
||||||
|
- (ansible_version.full is version_compare('2.12', '<') or ansible_os_family not in ['RedHat', 'Debian'])
|
||||||
|
|
||||||
- name: Install docker-compose-plugin (with downgrade option).
|
- name: Install docker-compose-plugin (with downgrade option).
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_compose_package }}"
|
name: "{{ docker_compose_package }}"
|
||||||
state: "{{ docker_compose_package_state }}"
|
state: "{{ docker_compose_package_state }}"
|
||||||
allow_downgrade: true
|
allow_downgrade: true
|
||||||
notify: restart docker
|
notify: Restart docker
|
||||||
ignore_errors: "{{ ansible_check_mode }}"
|
ignore_errors: "{{ ansible_check_mode }}"
|
||||||
when: "docker_install_compose_plugin | bool == true and ansible_version.full is version_compare('2.12', '>=') and ansible_os_family in ['RedHat', 'Debian']"
|
when:
|
||||||
|
- docker_install_compose_plugin | bool
|
||||||
|
- ansible_version.full is version_compare('2.12', '>=')
|
||||||
|
- ansible_os_family in ['RedHat', 'Debian']
|
||||||
|
|
||||||
- name: Ensure /etc/docker/ directory exists.
|
- name: Ensure /etc/docker/ directory exists.
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/docker
|
path: /etc/docker
|
||||||
state: directory
|
state: directory
|
||||||
mode: 0755
|
mode: 0755
|
||||||
when: docker_daemon_options.keys() | length > 0
|
when: docker_daemon_options.keys() | length > 0
|
||||||
|
|
||||||
- name: Configure Docker daemon options.
|
- name: Configure Docker daemon options.
|
||||||
copy:
|
ansible.builtin.copy:
|
||||||
content: "{{ docker_daemon_options | to_nice_json }}"
|
content: "{{ docker_daemon_options | to_nice_json }}"
|
||||||
dest: /etc/docker/daemon.json
|
dest: /etc/docker/daemon.json
|
||||||
mode: 0644
|
mode: 0644
|
||||||
when: docker_daemon_options.keys() | length > 0
|
when: docker_daemon_options.keys() | length > 0
|
||||||
notify: restart docker
|
notify: Restart docker
|
||||||
|
|
||||||
- name: Ensure Docker is started and enabled at boot.
|
- name: Ensure Docker is started and enabled at boot.
|
||||||
service:
|
ansible.builtin.service:
|
||||||
name: docker
|
name: docker
|
||||||
state: "{{ docker_service_state }}"
|
state: "{{ docker_service_state }}"
|
||||||
enabled: "{{ docker_service_enabled }}"
|
enabled: "{{ docker_service_enabled }}"
|
||||||
@ -74,25 +81,27 @@
|
|||||||
when: docker_service_manage | bool
|
when: docker_service_manage | bool
|
||||||
|
|
||||||
- name: Ensure handlers are notified now to avoid firewall conflicts.
|
- name: Ensure handlers are notified now to avoid firewall conflicts.
|
||||||
meta: flush_handlers
|
ansible.builtin.meta: flush_handlers
|
||||||
|
|
||||||
- include_tasks: docker-compose.yml
|
- name: Include docker-compose
|
||||||
|
ansible.builtin.include_tasks: docker-compose.yml
|
||||||
when: docker_install_compose | bool
|
when: docker_install_compose | bool
|
||||||
|
|
||||||
- name: Get docker group info using getent.
|
- name: Get docker group info using getent.
|
||||||
getent:
|
ansible.builtin.getent:
|
||||||
database: group
|
database: group
|
||||||
key: docker
|
key: docker
|
||||||
split: ':'
|
split: ':'
|
||||||
when: docker_users | length > 0
|
when: docker_users | length > 0
|
||||||
|
|
||||||
- name: Check if there are any users to add to the docker group.
|
- name: Check if there are any users to add to the docker group.
|
||||||
set_fact:
|
ansible.builtin.set_fact:
|
||||||
at_least_one_user_to_modify: true
|
at_least_one_user_to_modify: true
|
||||||
when:
|
when:
|
||||||
- docker_users | length > 0
|
- docker_users | length > 0
|
||||||
- item not in ansible_facts.getent_group["docker"][2]
|
- item not in ansible_facts.getent_group["docker"][2]
|
||||||
with_items: "{{ docker_users }}"
|
with_items: "{{ docker_users }}"
|
||||||
|
|
||||||
- include_tasks: docker-users.yml
|
- name: Include docker-users
|
||||||
|
ansible.builtin.include_tasks: docker-users.yml
|
||||||
when: at_least_one_user_to_modify is defined
|
when: at_least_one_user_to_modify is defined
|
||||||
|
@ -1,13 +1,13 @@
|
|||||||
---
|
---
|
||||||
- name: Ensure old versions of Docker are not installed.
|
- name: Ensure old versions of Docker are not installed.
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name:
|
name:
|
||||||
- docker
|
- docker
|
||||||
- docker-engine
|
- docker-engine
|
||||||
state: absent
|
state: absent
|
||||||
|
|
||||||
- name: Ensure dependencies are installed.
|
- name: Ensure dependencies are installed.
|
||||||
apt:
|
ansible.builtin.apt:
|
||||||
name:
|
name:
|
||||||
- apt-transport-https
|
- apt-transport-https
|
||||||
- ca-certificates
|
- ca-certificates
|
||||||
@ -15,13 +15,13 @@
|
|||||||
when: docker_add_repo | bool
|
when: docker_add_repo | bool
|
||||||
|
|
||||||
- name: Ensure additional dependencies are installed (on Ubuntu < 20.04 and any other systems).
|
- name: Ensure additional dependencies are installed (on Ubuntu < 20.04 and any other systems).
|
||||||
apt:
|
ansible.builtin.apt:
|
||||||
name: gnupg2
|
name: gnupg2
|
||||||
state: present
|
state: present
|
||||||
when: ansible_distribution != 'Ubuntu' or ansible_distribution_version is version('20.04', '<')
|
when: ansible_distribution != 'Ubuntu' or ansible_distribution_version is version('20.04', '<')
|
||||||
|
|
||||||
- name: Ensure additional dependencies are installed (on Ubuntu >= 20.04).
|
- name: Ensure additional dependencies are installed (on Ubuntu >= 20.04).
|
||||||
apt:
|
ansible.builtin.apt:
|
||||||
name: gnupg
|
name: gnupg
|
||||||
state: present
|
state: present
|
||||||
when: ansible_distribution == 'Ubuntu' and ansible_distribution_version is version('20.04', '>=')
|
when: ansible_distribution == 'Ubuntu' and ansible_distribution_version is version('20.04', '>=')
|
||||||
@ -37,16 +37,18 @@
|
|||||||
when: docker_add_repo | bool
|
when: docker_add_repo | bool
|
||||||
|
|
||||||
- name: Ensure curl is present (on older systems without SNI).
|
- name: Ensure curl is present (on older systems without SNI).
|
||||||
package: name=curl state=present
|
ansible.builtin.package:
|
||||||
|
name: curl
|
||||||
|
state: present
|
||||||
when: add_repository_key is failed and docker_add_repo | bool
|
when: add_repository_key is failed and docker_add_repo | bool
|
||||||
|
|
||||||
- name: Add Docker apt key (alternative for older systems without SNI).
|
- name: Add Docker apt key (alternative for older systems without SNI). # noqa command-instead-of-module
|
||||||
shell: >
|
ansible.builtin.shell: >
|
||||||
curl -sSL {{ docker_apt_gpg_key }} | apt-key add -
|
curl -sSL {{ docker_apt_gpg_key }} | apt-key add -
|
||||||
when: add_repository_key is failed and docker_add_repo | bool
|
when: add_repository_key is failed and docker_add_repo | bool
|
||||||
|
|
||||||
- name: Add Docker repository.
|
- name: Add Docker repository.
|
||||||
apt_repository:
|
ansible.builtin.apt_repository:
|
||||||
repo: "{{ docker_apt_repository }}"
|
repo: "{{ docker_apt_repository }}"
|
||||||
state: present
|
state: present
|
||||||
update_cache: true
|
update_cache: true
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
- name: Ensure old versions of Docker are not installed.
|
- name: Ensure old versions of Docker are not installed.
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name:
|
name:
|
||||||
- docker
|
- docker
|
||||||
- docker-common
|
- docker-common
|
||||||
@ -8,13 +8,13 @@
|
|||||||
state: absent
|
state: absent
|
||||||
|
|
||||||
- name: Add Docker GPG key.
|
- name: Add Docker GPG key.
|
||||||
rpm_key:
|
ansible.builtin.rpm_key:
|
||||||
key: "{{ docker_yum_gpg_key }}"
|
key: "{{ docker_yum_gpg_key }}"
|
||||||
state: present
|
state: present
|
||||||
when: docker_add_repo | bool
|
when: docker_add_repo | bool
|
||||||
|
|
||||||
- name: Add Docker repository.
|
- name: Add Docker repository.
|
||||||
get_url:
|
ansible.builtin.get_url:
|
||||||
url: "{{ docker_yum_repo_url }}"
|
url: "{{ docker_yum_repo_url }}"
|
||||||
dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo'
|
dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo'
|
||||||
owner: root
|
owner: root
|
||||||
@ -23,7 +23,7 @@
|
|||||||
when: docker_add_repo | bool
|
when: docker_add_repo | bool
|
||||||
|
|
||||||
- name: Configure Docker Nightly repo.
|
- name: Configure Docker Nightly repo.
|
||||||
ini_file:
|
community.general.ini_file:
|
||||||
dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo'
|
dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo'
|
||||||
section: 'docker-{{ docker_edition }}-nightly'
|
section: 'docker-{{ docker_edition }}-nightly'
|
||||||
option: enabled
|
option: enabled
|
||||||
@ -33,7 +33,7 @@
|
|||||||
when: docker_add_repo | bool
|
when: docker_add_repo | bool
|
||||||
|
|
||||||
- name: Configure Docker Test repo.
|
- name: Configure Docker Test repo.
|
||||||
ini_file:
|
community.general.ini_file:
|
||||||
dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo'
|
dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo'
|
||||||
section: 'docker-{{ docker_edition }}-test'
|
section: 'docker-{{ docker_edition }}-test'
|
||||||
option: enabled
|
option: enabled
|
||||||
@ -43,14 +43,14 @@
|
|||||||
when: docker_add_repo | bool
|
when: docker_add_repo | bool
|
||||||
|
|
||||||
- name: Configure containerd on RHEL 8.
|
- name: Configure containerd on RHEL 8.
|
||||||
|
when: ansible_distribution_major_version | int == 8
|
||||||
block:
|
block:
|
||||||
- name: Ensure container-selinux is installed.
|
- name: Ensure container-selinux is installed.
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: container-selinux
|
name: container-selinux
|
||||||
state: present
|
state: present
|
||||||
|
|
||||||
- name: Ensure containerd.io is installed.
|
- name: Ensure containerd.io is installed.
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: containerd.io
|
name: containerd.io
|
||||||
state: present
|
state: present
|
||||||
when: ansible_distribution_major_version | int == 8
|
|
||||||
|
Loading…
Reference in New Issue
Block a user