mirror of
https://github.com/geerlingguy/ansible-role-docker.git
synced 2025-08-02 13:46:22 +02:00
Compare commits
No commits in common. "master" and "7.4.0" have entirely different histories.
18
README.md
18
README.md
@ -1,6 +1,6 @@
|
|||||||
# Ansible Role: Docker
|
# Ansible Role: Docker
|
||||||
|
|
||||||
[](https://github.com/geerlingguy/ansible-role-docker/actions/workflows/ci.yml)
|
[](https://github.com/geerlingguy/ansible-role-docker/actions?query=workflow%3ACI)
|
||||||
|
|
||||||
An Ansible Role that installs [Docker](https://www.docker.com) on Linux.
|
An Ansible Role that installs [Docker](https://www.docker.com) on Linux.
|
||||||
|
|
||||||
@ -34,19 +34,11 @@ docker_obsolete_packages:
|
|||||||
- docker
|
- docker
|
||||||
- docker.io
|
- docker.io
|
||||||
- docker-engine
|
- docker-engine
|
||||||
- docker-doc
|
|
||||||
- docker-compose
|
|
||||||
- docker-compose-v2
|
|
||||||
- podman-docker
|
- podman-docker
|
||||||
- containerd
|
- containerd
|
||||||
- runc
|
- runc
|
||||||
```
|
```
|
||||||
|
|
||||||
`docker_obsolete_packages` for different os-family:
|
|
||||||
|
|
||||||
- [`RedHat.yaml`](./vars/RedHat.yml)
|
|
||||||
- [`Debian.yaml`](./vars/Debian.yml)
|
|
||||||
|
|
||||||
A list of packages to be uninstalled prior to running this role. See [Docker's installation instructions](https://docs.docker.com/engine/install/debian/#uninstall-old-versions) for an up-to-date list of old packages that should be removed.
|
A list of packages to be uninstalled prior to running this role. See [Docker's installation instructions](https://docs.docker.com/engine/install/debian/#uninstall-old-versions) for an up-to-date list of old packages that should be removed.
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
@ -68,7 +60,7 @@ Docker Compose Plugin installation options. These differ from the below in that
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
docker_install_compose: false
|
docker_install_compose: false
|
||||||
docker_compose_version: "v2.32.1"
|
docker_compose_version: "2.11.1"
|
||||||
docker_compose_arch: "{{ ansible_architecture }}"
|
docker_compose_arch: "{{ ansible_architecture }}"
|
||||||
docker_compose_url: "https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-linux-{{ docker_compose_arch }}"
|
docker_compose_url: "https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-linux-{{ docker_compose_arch }}"
|
||||||
docker_compose_path: /usr/local/bin/docker-compose
|
docker_compose_path: /usr/local/bin/docker-compose
|
||||||
@ -91,7 +83,7 @@ The main Docker repo URL, common between Debian and RHEL systems.
|
|||||||
```yaml
|
```yaml
|
||||||
docker_apt_release_channel: stable
|
docker_apt_release_channel: stable
|
||||||
docker_apt_arch: "{{ 'arm64' if ansible_architecture == 'aarch64' else 'amd64' }}"
|
docker_apt_arch: "{{ 'arm64' if ansible_architecture == 'aarch64' else 'amd64' }}"
|
||||||
docker_apt_repository: "deb [arch={{ docker_apt_arch }}{{' signed-by=/etc/apt/keyrings/docker.asc' if add_repository_key is not failed}}] {{ docker_repo_url }}/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}"
|
docker_apt_repository: "deb [arch={{ docker_apt_arch }}] {{ docker_repo_url }}/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}"
|
||||||
docker_apt_ignore_key_error: True
|
docker_apt_ignore_key_error: True
|
||||||
docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg"
|
docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg"
|
||||||
docker_apt_filename: "docker"
|
docker_apt_filename: "docker"
|
||||||
@ -106,7 +98,7 @@ Usually in combination with changing `docker_apt_repository` as well. `docker_ap
|
|||||||
docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo"
|
docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo"
|
||||||
docker_yum_repo_enable_nightly: '0'
|
docker_yum_repo_enable_nightly: '0'
|
||||||
docker_yum_repo_enable_test: '0'
|
docker_yum_repo_enable_test: '0'
|
||||||
docker_yum_gpg_key: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora', 'centos') }}/gpg"
|
docker_yum_gpg_key: "{{ docker_repo_url }}/centos/gpg"
|
||||||
```
|
```
|
||||||
|
|
||||||
(Used only for RedHat/CentOS.) You can enable the Nightly or Test repo by setting the respective vars to `1`.
|
(Used only for RedHat/CentOS.) You can enable the Nightly or Test repo by setting the respective vars to `1`.
|
||||||
@ -124,7 +116,7 @@ A list of system users to be added to the `docker` group (so they can use Docker
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
docker_daemon_options:
|
docker_daemon_options:
|
||||||
storage-driver: "overlay2"
|
storage-driver: "devicemapper"
|
||||||
log-opts:
|
log-opts:
|
||||||
max-size: "100m"
|
max-size: "100m"
|
||||||
```
|
```
|
||||||
|
@ -12,9 +12,6 @@ docker_obsolete_packages:
|
|||||||
- docker
|
- docker
|
||||||
- docker.io
|
- docker.io
|
||||||
- docker-engine
|
- docker-engine
|
||||||
- docker-doc
|
|
||||||
- docker-compose
|
|
||||||
- docker-compose-v2
|
|
||||||
- podman-docker
|
- podman-docker
|
||||||
- containerd
|
- containerd
|
||||||
- runc
|
- runc
|
||||||
@ -32,7 +29,7 @@ docker_compose_package_state: present
|
|||||||
|
|
||||||
# Docker Compose options.
|
# Docker Compose options.
|
||||||
docker_install_compose: false
|
docker_install_compose: false
|
||||||
docker_compose_version: "v2.32.1"
|
docker_compose_version: "v2.11.1"
|
||||||
docker_compose_arch: "{{ ansible_architecture }}"
|
docker_compose_arch: "{{ ansible_architecture }}"
|
||||||
docker_compose_url: "https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-linux-{{ docker_compose_arch }}"
|
docker_compose_url: "https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-linux-{{ docker_compose_arch }}"
|
||||||
docker_compose_path: /usr/local/bin/docker-compose
|
docker_compose_path: /usr/local/bin/docker-compose
|
||||||
@ -59,7 +56,7 @@ docker_apt_filename: "docker"
|
|||||||
docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo"
|
docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo"
|
||||||
docker_yum_repo_enable_nightly: '0'
|
docker_yum_repo_enable_nightly: '0'
|
||||||
docker_yum_repo_enable_test: '0'
|
docker_yum_repo_enable_test: '0'
|
||||||
docker_yum_gpg_key: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora', 'centos') }}/gpg"
|
docker_yum_gpg_key: "{{ docker_repo_url }}/centos/gpg"
|
||||||
|
|
||||||
# A list of users who will be added to the docker group.
|
# A list of users who will be added to the docker group.
|
||||||
docker_users: []
|
docker_users: []
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: Converge
|
- name: Converge
|
||||||
hosts: all
|
hosts: all
|
||||||
# become: true
|
become: true
|
||||||
|
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: Update apt cache.
|
- name: Update apt cache.
|
||||||
|
@ -1,51 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Verify Docker Role
|
|
||||||
hosts: all
|
|
||||||
tasks:
|
|
||||||
- name: Verify Docker binary is available
|
|
||||||
command: docker version
|
|
||||||
register: docker_version_result
|
|
||||||
changed_when: false
|
|
||||||
failed_when: docker_version_result.rc != 0
|
|
||||||
|
|
||||||
- name: Show Docker version details
|
|
||||||
debug:
|
|
||||||
msg: >
|
|
||||||
Docker Version Output:
|
|
||||||
{{ docker_version_result.stdout_lines | join('\n') }}
|
|
||||||
|
|
||||||
- name: Verify Docker service is running
|
|
||||||
command: systemctl is-active docker
|
|
||||||
register: docker_service_status
|
|
||||||
when: ansible_service_mgr == 'systemd'
|
|
||||||
changed_when: false
|
|
||||||
failed_when: docker_service_status.stdout.strip() != "active"
|
|
||||||
|
|
||||||
- name: Display Docker service status
|
|
||||||
debug:
|
|
||||||
msg: "Docker service is {{ docker_service_status.stdout.strip() }}"
|
|
||||||
when: ansible_service_mgr == 'systemd'
|
|
||||||
|
|
||||||
- name: Pull the 'hello-world' image
|
|
||||||
command: docker pull hello-world
|
|
||||||
register: docker_pull_result
|
|
||||||
changed_when: true
|
|
||||||
failed_when: docker_pull_result.rc != 0
|
|
||||||
|
|
||||||
- name: Show result of pulling the 'hello-world' image
|
|
||||||
debug:
|
|
||||||
msg: >
|
|
||||||
Pulling 'hello-world' completed with output:
|
|
||||||
{{ docker_pull_result.stdout_lines | join('\n') }}
|
|
||||||
|
|
||||||
- name: Run a test container (hello-world)
|
|
||||||
command: docker run --rm hello-world
|
|
||||||
register: docker_run_result
|
|
||||||
changed_when: true
|
|
||||||
failed_when: docker_run_result.rc != 0
|
|
||||||
|
|
||||||
- name: Display test container output
|
|
||||||
debug:
|
|
||||||
msg: >
|
|
||||||
Running 'hello-world' container completed with output:
|
|
||||||
{{ docker_run_result.stdout_lines | join('\n') }}
|
|
@ -4,11 +4,6 @@
|
|||||||
path: /etc/apt/trusted.gpg.d/docker.asc
|
path: /etc/apt/trusted.gpg.d/docker.asc
|
||||||
state: absent
|
state: absent
|
||||||
|
|
||||||
- name: Ensure old apt source list is not present in /etc/apt/sources.list.d
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "/etc/apt/sources.list.d/download_docker_com_linux_{{ docker_apt_ansible_distribution | lower }}.list"
|
|
||||||
state: absent
|
|
||||||
|
|
||||||
- name: Ensure the repo referencing the previous trusted.gpg.d key is not present
|
- name: Ensure the repo referencing the previous trusted.gpg.d key is not present
|
||||||
apt_repository:
|
apt_repository:
|
||||||
repo: "deb [arch={{ docker_apt_arch }} signed-by=/etc/apt/trusted.gpg.d/docker.asc] {{ docker_repo_url }}/{{ docker_apt_ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}"
|
repo: "deb [arch={{ docker_apt_arch }} signed-by=/etc/apt/trusted.gpg.d/docker.asc] {{ docker_repo_url }}/{{ docker_apt_ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}"
|
||||||
@ -35,13 +30,13 @@
|
|||||||
file:
|
file:
|
||||||
path: /etc/apt/keyrings
|
path: /etc/apt/keyrings
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: '0755'
|
||||||
|
|
||||||
- name: Add Docker apt key.
|
- name: Add Docker apt key.
|
||||||
ansible.builtin.get_url:
|
ansible.builtin.get_url:
|
||||||
url: "{{ docker_apt_gpg_key }}"
|
url: "{{ docker_apt_gpg_key }}"
|
||||||
dest: /etc/apt/keyrings/docker.asc
|
dest: /etc/apt/keyrings/docker.asc
|
||||||
mode: "0644"
|
mode: '0644'
|
||||||
force: false
|
force: false
|
||||||
checksum: "{{ docker_apt_gpg_key_checksum | default(omit) }}"
|
checksum: "{{ docker_apt_gpg_key_checksum | default(omit) }}"
|
||||||
register: add_repository_key
|
register: add_repository_key
|
||||||
|
@ -1,7 +1,10 @@
|
|||||||
---
|
---
|
||||||
- name: Ensure old versions of Docker are not installed.
|
- name: Ensure old versions of Docker are not installed.
|
||||||
package:
|
package:
|
||||||
name: "{{ docker_obsolete_packages }}"
|
name:
|
||||||
|
- docker
|
||||||
|
- docker-common
|
||||||
|
- docker-engine
|
||||||
state: absent
|
state: absent
|
||||||
|
|
||||||
- name: Add Docker GPG key.
|
- name: Add Docker GPG key.
|
||||||
|
@ -1,3 +1,2 @@
|
|||||||
---
|
---
|
||||||
docker_packages: "docker"
|
docker_packages: "docker"
|
||||||
docker_compose_package: docker-cli-compose
|
|
||||||
|
@ -1,14 +0,0 @@
|
|||||||
---
|
|
||||||
# Used only for Debian/Ubuntu (Debian OS-Family)
|
|
||||||
# https://docs.docker.com/engine/install/debian/#uninstall-old-versions
|
|
||||||
|
|
||||||
docker_obsolete_packages:
|
|
||||||
- docker
|
|
||||||
- docker.io
|
|
||||||
- docker-engine
|
|
||||||
- docker-doc
|
|
||||||
- docker-compose
|
|
||||||
- docker-compose-v2
|
|
||||||
- podman-docker
|
|
||||||
- containerd
|
|
||||||
- runc
|
|
@ -1,14 +0,0 @@
|
|||||||
---
|
|
||||||
# Used only for Fedora/Rocky (RedHat OS-Family)
|
|
||||||
# https://docs.docker.com/engine/install/fedora/#uninstall-old-versions
|
|
||||||
# https://docs.docker.com/engine/install/centos/#uninstall-old-versions
|
|
||||||
|
|
||||||
docker_obsolete_packages:
|
|
||||||
- docker
|
|
||||||
- docker-client
|
|
||||||
- docker-client-latest
|
|
||||||
- docker-common
|
|
||||||
- docker-latest
|
|
||||||
- docker-latest-logrotate
|
|
||||||
- docker-logrotate
|
|
||||||
- docker-engine
|
|
Loading…
Reference in New Issue
Block a user