feat(docker): add ansible role (WIP)

galaxy.yml

@@ -18,4 +18,3 @@ tags:
   - minio
   - nginx
   - restic
-  - docker

playbooks/bootstrap.yml

@@ -1,40 +0,0 @@
----
-- name: Bootstrap everything needed for an ansible connection
-  hosts: "{{ target_hosts | default('all', true) }}"
-  become: "{{ target_host_become | default(true, false) }}"
-  gather_facts: false
-  pre_tasks:
-    - name: Gather information about the target system
-      ansible.builtin.raw: "cat /etc/os-release | grep '^ID=' | cut -d '=' -f2"
-      register: target_host_os_info
-      check_mode: false
-      changed_when: false
-    - name: Set /etc/os-release system id
-      ansible.builtin.set_fact:
-        target_host_system_id: "{{ target_host_os_info.stdout_lines | first | trim }}"
-      delegate_to: localhost
-  tasks:
-    - name: Ensure apt bootstrap packages are installed
-      ansible.builtin.raw: "apt install {{ apt_bootstrap_packages | join(' ') }}"
-      register: target_host_apt_info
-      when: target_host_system_id in targets_using_apt
-      changed_when:
-        - "'0 upgraded' not in target_host_apt_info.stdout_lines | last"
-        - "'0 newly installed' not in target_host_apt_info.stdout_lines | last"
-    - name: Sort hosts into os-specific groups
-      ansible.builtin.group_by:
-        key: >-2
-          {{ (os_group_prefix
-             | default(false, true)
-             | ternary(os_group_prefix | default('') + (os_group_seperator | default('_')), ''))
-             + target_host_system_id }}
-      when: target_hosts_sort_into_system_ids | default(false, true)
-      changed_when: false
-      delegate_to: localhost
-  vars:
-    targets_using_apt:
-      - debian
-      - ubuntu
-    apt_bootstrap_packages:
-      - python3
-      - python3-apt

playbooks/docker.yml

@@ -1,6 +0,0 @@
----
-- name: Install and configure docker daemon
-  hosts: "{{ docker_hosts | default('docker', true) }}"
-  become: "{{ docker_become | default(false, true) }}"
-  roles:
-    - role: finallycoffee.base.docker

playbooks/packages.yml

@@ -1,15 +0,0 @@
----
-- name: Install system packages on the remote
-  hosts: "{{ target_hosts | default('all', true) }}"
-  become: "{{ target_host_become | default(true, true) }}"
-  gather_facts: "{{ target_host_gather_facts | default(true, true) }}"
-  tasks:
-    - name: Install packages (apt)
-      ansible.builtin.apt:
-        package: "{{ package.name }}"
-        state: "{{ package.state | default('present') }}"
-      loop: "{{ system_packages | default([], true) }}"
-      loop_control:
-        loop_var: package
-        label: "{{ package.name }}"
-      when: ansible_facts['pkg_mgr'] == 'apt'

roles/docker/README.md

@@ -1,13 +0,0 @@
-# `finallycoffee.base.docker` ansible role
-
-Install and configure the docker daemon.
-
-## Configuration
-
-- `docker_daemon_config` - configuration for the docker daemon
-- `docker_remove_legacy_packages` - clean up old versions of docker (see https://docs.docker.com/engine/install/debian/#uninstall-old-versions)
-
-## Plugins
-
-- `docker_plugin_buildx_enable` - enable the buildx plugin
-- `docker_plugin_compose_enable` - enable docker compose

roles/docker/defaults/main.yml

@@ -1,13 +1,7 @@
 ---
 docker_state: "present"
-
+docker_daemon_config: ~
-docker_daemon_config: {}
 docker_daemon_config_file: "/etc/docker/daemon.json"
 docker_daemon_config_file_mode: "0644"
 docker_daemon_config_owner: root
 docker_daemon_config_group: "{{ docker_daemon_config_owner }}"
-
-docker_plugin_buildx_enable: false
-docker_plugin_compose_enable: false
-
-docker_remove_legacy_packages: true

roles/docker/defaults/main/debian.yml

@@ -1,31 +0,0 @@
----
-docker_apt_key_url: "https://download.docker.com/linux/debian/gpg"
-docker_apt_key_id: "9DC858229FC7DD38854AE2D88D81803C0EBFCD88"
-
-docker_apt_arch: amd64
-docker_apt_release_channel: stable
-docker_apt_repository_url: "https://download.docker.com/linux/debian"
-docker_apt_repository: >-2
-  deb [arch={{ docker_apt_arch }}] {{ docker_apt_repository_url }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}
-docker_apt_cli_package: "docker-ce-cli"
-docker_apt_plugin_buildx_package: "docker-buildx-plugin"
-docker_apt_plugin_compose_package: "docker-compose-plugin"
-docker_apt_base_packages:
-  - "docker-ce"
-  - "docker-ce-cli"
-  - "containerd.io"
-docker_apt_packages: >-2
-  {{
-    docker_apt_base_packages
-    + (docker_plugin_buildx_enable | default(false)
-      | ternary([ docker_apt_plugin_buildx_package ], []))
-    + (docker_plugin_compose_enable | default(false)
-      | ternary([ docker_apt_plugin_compose_package ], []))
-  }}
-docker_apt_legacy_packages:
-  - "docker.io"
-  - "docker-compose"
-  - "docker-doc"
-  - "podman-docker"
-  - "containerd"
-  - "runc"

roles/docker/tasks/install-debian.yml

@@ -1,30 +0,0 @@
----
-- name: Ensure legacy docker packages are removed
-  ansible.builtin.apt:
-    name: "{{ docker_apt_legacy_packages }}"
-    state: absent
-  when: docker_remove_legacy_packages
-
-- name: Add apt key for docker repository
-  ansible.builtin.apt_key:
-    id: "{{ docker_apt_key_id }}"
-    url: "{{ docker_apt_key_url }}"
-    state: "{{ docker_state }}"
-
-- name: Add apt repository for docker
-  ansible.builtin.apt_repository:
-    repo: "{{ docker_apt_repository }}"
-    state: "{{ docker_state }}"
-  register: docker_apt_repository_info
-
-- name: Update apt cache if repository was newly added
-  ansible.builtin.apt:
-    update_cache: true
-  when:
-    - docker_state == 'present'
-    - docker_apt_repository_info.changed
-
-- name: Install apt packages for docker
-  ansible.builtin.apt:
-    name: "{{ docker_apt_packages }}"
-    state: "{{ docker_state }}"