111 lines
3 KiB
YAML
111 lines
3 KiB
YAML
- name: Configure golden image
|
|
hosts: myhosts
|
|
tasks:
|
|
- name: Set authorized key taken from file
|
|
ansible.posix.authorized_key:
|
|
user: root
|
|
key: "{{ lookup('file', '../config/id_ed25519.pub') }}"
|
|
- name: Copy over SSHD config file
|
|
ansible.builtin.copy:
|
|
src: ../config/sshd_config
|
|
dest: /etc/ssh/sshd_config
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|
|
- name: Restart SSHD
|
|
ansible.builtin.systemd_service:
|
|
name: sshd
|
|
state: reloaded
|
|
- name: Upgrade all packages
|
|
ansible.builtin.dnf:
|
|
name: "*"
|
|
state: latest
|
|
- name: Install wireguard-tools and qemu-guest-agent
|
|
ansible.builtin.dnf:
|
|
name:
|
|
- wireguard-tools
|
|
- qemu-guest-agent
|
|
state: latest
|
|
- name: Uninstall cockpit
|
|
ansible.builtin.dnf:
|
|
name: cockpit
|
|
state: absent
|
|
autoremove: yes
|
|
- name: Enable QEMU guest agent service
|
|
ansible.builtin.systemd_service:
|
|
name: qemu-guest-agent
|
|
enabled: true
|
|
state: started
|
|
|
|
- name: Download gvisor
|
|
ansible.builtin.get_url:
|
|
url: https://storage.googleapis.com/gvisor/releases/release/latest/x86_64/runsc
|
|
dest: /usr/local/bin/runsc
|
|
force: yes
|
|
mode: a+x
|
|
|
|
- name: Download gvisor containerd-shim
|
|
ansible.builtin.get_url:
|
|
url: https://storage.googleapis.com/gvisor/releases/release/latest/x86_64/containerd-shim-runsc-v1
|
|
dest: /usr/local/bin/containerd-shim-runsc-v1
|
|
force: yes
|
|
mode: a+x
|
|
|
|
|
|
- name: check if docker repo is installed
|
|
stat:
|
|
path: "/etc/yum.repos.d/docker-ce.repo"
|
|
register: docker_repo
|
|
- name: debug_msg
|
|
debug:
|
|
msg: "Docker repo already present"
|
|
when: docker_repo.stat.exists
|
|
- name: Ensure distro docker is not installed
|
|
ansible.builtin.dnf:
|
|
name:
|
|
- docker
|
|
- docker-client
|
|
- docker-client-latest
|
|
- docker-common
|
|
- docker-latest
|
|
- docker-latest-logrotate
|
|
- docker-logrotate
|
|
- docker-selinux
|
|
- docker-engine-selinux
|
|
- docker-engine
|
|
state: absent
|
|
when: not docker_repo.stat.exists
|
|
- name: Install dnf-plugins-core
|
|
ansible.builtin.dnf:
|
|
name: dnf-plugins-core
|
|
state: latest
|
|
- name: Download Docker dnf repo
|
|
ansible.builtin.get_url:
|
|
url: https://download.docker.com/linux/fedora/docker-ce.repo
|
|
dest: /etc/yum.repos.d/docker-ce.repo
|
|
mode: 0644
|
|
force: yes
|
|
- name: Install Docker packages
|
|
ansible.builtin.dnf:
|
|
name:
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- containerd.io
|
|
- docker-buildx-plugin
|
|
- docker-compose-plugin
|
|
|
|
|
|
- name: Copy over docker daemon.json config file
|
|
ansible.builtin.copy:
|
|
src: ../config/daemon.json
|
|
dest: /etc/docker/daemon.json
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
force: true
|
|
|
|
- name: Enable Docker systemd service
|
|
ansible.builtin.systemd_service:
|
|
name: docker
|
|
enabled: true
|
|
state: reloaded
|