xoxys.docker_engine/tasks/config.yml
Robert Kaussow a793449afa
All checks were successful
continuous-integration/drone/push Build is passing
fix: fix loop control
2022-01-28 11:49:18 +01:00

88 lines
2.9 KiB
YAML

---
- block:
- name: Add docker group
group:
name: docker
state: present
notify: __docker_restart
when: dockerengine_docker_group_enabled | bool
- name: Deploy config files to setup environment
template:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
owner: root
group: root
mode: 0644
loop:
- src: "etc/sysconfig/docker.j2"
dest: "/etc/sysconfig/{{ dockerengine_service }}"
- src: "etc/sysconfig/docker-storage-setup.j2"
dest: "/etc/sysconfig/{{ dockerengine_service }}-storage-setup"
- src: "etc/containers/registries.conf.j2"
dest: "/etc/containers/registries.conf"
loop_control:
label: "{{ item.dest }}"
notify: __docker_restart
- name: Add namespace group
group:
name: "{{ dockerengine_nsremap_user }}"
state: present
when: dockerengine_usernamespace_enabled | bool
- name: Setup namespace user
user:
name: "{{ dockerengine_nsremap_user }}"
group: "{{ dockerengine_nsremap_user }}"
shell: /sbin/nologin
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
- name: Remove namespace group
group:
name: "{{ dockerengine_nsremap_user }}"
state: absent
when: not dockerengine_usernamespace_enabled | bool
- name: Configure namespace id range
lineinfile:
dest: "{{ item }}"
regexp: "^{{ dockerengine_nsremap_user }}:"
line: "{{ dockerengine_nsremap_user }}:{{ dockerengine_nsremap_range_start }}:{{ dockerengine_nsremap_range_length }}"
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
loop:
- /etc/subuid
- /etc/subgid
- name: Ensure docker engine is up and running
service:
name: "{{ dockerengine_service }}"
enabled: True
state: started
- name: Handle registry logins
docker_login:
registry: "{{ item.url | default(omit) }}"
username: "{{ item.username }}"
password: "{{ item.password }}"
reauthorize: "{{ item.reauthorize | default(False) }}"
state: '{{ item.state | default("present") }}'
loop: "{{ dockerengine_registries }}"
loop_control:
label: "{{ item.url | default('DockerHub') }}"
- name: Create docker networks
docker_network:
name: "{{ item.name }}"
driver: "{{ item.driver | default('bridge') }}"
enable_ipv6: "{{ item.enable_ipv6 | default(False) }}"
ipam_config: "{{ item.ipam_config | default(omit) }}"
force: "{{ item.force | default(omit) }}"
state: "{{ item.state | default('present') }}"
loop: "{{ dockerengine_networks + dockerengine_networks_extra }}"
loop_control:
label: "{{ item.name }}"
notify: __docker_restart
become: True
become_user: root