---
- block:
    - name: Install docker engine
      package:
        name: "{{ dockerengine_package }}"
        state: present

    - name: Install dependencies
      package:
        name: "{{ item }}"
        state: present
      loop: "{{ dockerengine_packages_extra }}"

    - name: Install python requirements
      pip:
        name: "{{ item.name }}"
        executable: "{{ item.exec | default(omit) }}" 
        state: present
      loop: "{{ __docker_python_requirements }}"

    - name: Add docker group
      group:
        name: docker
        state: present
      notify: __docker_restart
      when: dockerengine_docker_group_enabled | bool

    - name: Deploy config files to setup environment
      template:
        src: "{{ item.src }}"
        dest: "{{ item.dest }}"
        owner: root
        group: root
        mode: 0644
      loop:
        - { src: 'etc/sysconfig/docker.j2', dest: '/etc/sysconfig/{{ dockerengine_package }}' }
        - { src: 'etc/sysconfig/docker-storage-setup.j2', dest: '/etc/sysconfig/{{ dockerengine_package }}-storage-setup' }
        - { src: 'etc/containers/registries.conf.j2', dest: '/etc/containers/registries.conf' }
      loop_control:
        label: "{{ item.dest }}"
      notify: __docker_restart

    - name: Add namespace group
      group:
        name: "{{ dockerengine_nsremap_user }}"
        state: present
      when: dockerengine_usernamespace_enabled | bool

    - name: Setup namespace user
      user:
        name: "{{ dockerengine_nsremap_user }}"
        group: "{{ dockerengine_nsremap_user }}"
        shell: /sbin/nologin
        state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"

    - name: Remove namespace group
      group:
        name: "{{ dockerengine_nsremap_user }}"
        state: absent
      when: not dockerengine_usernamespace_enabled | bool

    - name: Configure namespace id range
      lineinfile:
        dest: "{{ item }}"
        regexp: "^{{ dockerengine_nsremap_user }}:"
        line: "{{ dockerengine_nsremap_user }}:{{ dockerengine_nsremap_range_start }}:{{ dockerengine_nsremap_range_length }}"
        state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
      loop:
        - /etc/subuid
        - /etc/subgid

    - name: Ensure docker engine is up and running
      service:
        name: "{{ dockerengine_package }}"
        enabled: True
        state: started
  become: True
  become_user: root