116 lines
2.9 KiB
YAML
116 lines
2.9 KiB
YAML
# This role installs the docker daemon
|
|
---
|
|
- name: Remove older docker packages
|
|
ansible.builtin.apt:
|
|
name:
|
|
- docker
|
|
- docker-engine
|
|
- docker.io
|
|
state: absent
|
|
|
|
- name: Install source requirements
|
|
ansible.builtin.apt:
|
|
name:
|
|
- ca-certificates
|
|
- gnupg2
|
|
state: present
|
|
|
|
- name: Install apt-transport-https (Debian <10)
|
|
ansible.builtin.apt:
|
|
name:
|
|
- apt-transport-https
|
|
state: present
|
|
when: ansible_distribution_major_version is version('10', '<')
|
|
|
|
- name: Add Docker's official GPG key
|
|
ansible.builtin.copy:
|
|
src: docker-debian.asc
|
|
dest: "{{ apt_keyring_dir }}/docker-debian.asc"
|
|
force: yes
|
|
mode: "0644"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Add Docker repository (Debian <12)
|
|
ansible.builtin.apt_repository:
|
|
repo: 'deb [signed-by={{ apt_keyring_dir }}/docker-debian.asc] https://download.docker.com/linux/debian {{ ansible_distribution_release }} stable'
|
|
filename: docker
|
|
state: present
|
|
update_cache: yes
|
|
when: ansible_distribution_major_version is version('12', '<')
|
|
|
|
- name: Add Docker repository (Debian >=12)
|
|
ansible.builtin.template:
|
|
src: docker.sources.j2
|
|
dest: /etc/apt/sources.list.d/docker.sources
|
|
state: present
|
|
register: docker_sources
|
|
when: ansible_distribution_major_version is version('12', '>=')
|
|
|
|
- name: Update APT cache
|
|
ansible.builtin.apt:
|
|
update_cache: yes
|
|
when: docker_sources is changed
|
|
|
|
- name: Install Docker
|
|
ansible.builtin.apt:
|
|
name:
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- containerd.io
|
|
|
|
- name: python-docker is installed
|
|
ansible.builtin.apt:
|
|
name: python-docker
|
|
state: present
|
|
when: ansible_python_version is version('3', '<')
|
|
|
|
- name: python3-docker is installed
|
|
ansible.builtin.apt:
|
|
name: python3-docker
|
|
state: present
|
|
when: ansible_python_version is version('3', '>=')
|
|
|
|
- name: Copy Docker daemon configuration file
|
|
ansible.builtin.template:
|
|
src: daemon.json.j2
|
|
dest: /etc/docker/daemon.json
|
|
notify: restart docker
|
|
|
|
- name: Creating Docker tmp directory
|
|
ansible.builtin.file:
|
|
path: "{{ docker_tmpdir }}"
|
|
state: directory
|
|
mode: "0644"
|
|
owner: root
|
|
|
|
- name: Creating Docker TLS directory
|
|
ansible.builtin.file:
|
|
path: "{{ docker_tls_path }}"
|
|
state: directory
|
|
mode: "0644"
|
|
owner: root
|
|
when: docker_tls_enabled | bool
|
|
|
|
- name: Copy shellpki utility to Docker TLS directory
|
|
ansible.builtin.template:
|
|
src: "{{ item }}.j2"
|
|
dest: "{{ docker_tls_path }}/{{ item }}"
|
|
mode: "0744"
|
|
loop:
|
|
- shellpki.sh
|
|
- openssl.cnf
|
|
when: docker_tls_enabled | bool
|
|
|
|
- name: Check if certs are already created
|
|
ansible.builtin.stat:
|
|
path: "{{ docker_tls_path }}/certs"
|
|
register: tls_certs_stat
|
|
|
|
- name: Creating a CA, server key
|
|
ansible.builtin.command:
|
|
cmd: "{{ docker_tls_path }}/shellpki.sh init"
|
|
when:
|
|
- docker_tls_enabled | bool
|
|
- not tls_certs_stat.stat.isdir
|