xoxys.docker_engine/tasks/config.yml

---
- block:
    - name: Add docker group
      group:
        name: docker
        state: present
      notify: __docker_restart
      when: dockerengine_docker_group_enabled | bool

    - name: Deploy config files to setup environment
      template:
        src: "{{ item.src }}"
        dest: "{{ item.dest }}"
        owner: root
        group: root
        mode: 0644
      loop:
        - src: "etc/sysconfig/docker.j2"
          dest: "/etc/sysconfig/{{ dockerengine_service }}"
        - src: "etc/sysconfig/docker-storage-setup.j2"
          dest: "/etc/sysconfig/{{ dockerengine_service }}-storage-setup"
        - src: "etc/containers/registries.conf.j2"
          dest: "/etc/containers/registries.conf"
      loop_control:
        label: "{{ item.dest }}"
      notify: __docker_restart

    - name: Add namespace group
      group:
        name: "{{ dockerengine_nsremap_user }}"
        state: present
      when: dockerengine_usernamespace_enabled | bool

    - name: Setup namespace user
      user:
        name: "{{ dockerengine_nsremap_user }}"
        group: "{{ dockerengine_nsremap_user }}"
        shell: /sbin/nologin
        state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"

    - name: Remove namespace group
      group:
        name: "{{ dockerengine_nsremap_user }}"
        state: absent
      when: not dockerengine_usernamespace_enabled | bool

    - name: Configure namespace id range
      lineinfile:
        dest: "{{ item }}"
        regexp: "^{{ dockerengine_nsremap_user }}:"
        line: "{{ dockerengine_nsremap_user }}:{{ dockerengine_nsremap_range_start }}:{{ dockerengine_nsremap_range_length }}"
        state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
      loop:
        - /etc/subuid
        - /etc/subgid

    - name: Ensure docker engine is up and running
      service:
        name: "{{ dockerengine_service }}"
        enabled: True
        state: started

    - name: Handle registry logins
      docker_login:
        registry: "{{ item.url | default(omit) }}"
        username: "{{ item.username }}"
        password: "{{ item.password }}"
        reauthorize: "{{ item.reauthorize | default(False) }}"
        state: '{{ item.state | default("present") }}'
      loop: "{{ dockerengine_registries }}"
      loop_control:
        label: "{{ item.url | default('DockerHub') }}"

    - name: Create docker networks
      docker_network:
        name: "{{ item.name }}"
        driver: "{{ item.driver | default('bridge') }}"
        enable_ipv6: "{{ item.enable_ipv6 | default(False) }}"
        ipam_config: "{{ item.ipam_config | default(omit) }}"
        force: "{{ item.force | default(omit) }}"
        state: "{{ item.state | default('present') }}"
      loop: "{{ dockerengine_networks + dockerengine_networks_extra }}"
      loop_control:
        label: "{{ item.name }}"
      notify: __docker_restart
  become: True
  become_user: root