Implement 'setup'-tag to re-setup the containers.
This commit is contained in:
Andreas B. Mundt
Andreas B. Mundt
parent
0ed4230794
commit
2c0a1c5392
3 changed files with 152 additions and 137 deletions
|
|
@ -16,6 +16,7 @@
|
||||||
## --tags=stop stop all containers
|
## --tags=stop stop all containers
|
||||||
## --tags=reset reset all containers to the initial image
|
## --tags=reset reset all containers to the initial image
|
||||||
## --tags=purge purge all containers
|
## --tags=purge purge all containers
|
||||||
|
## --tags=setup purge all containers and setup again
|
||||||
##
|
##
|
||||||
|
|
||||||
- name: apply configuration to the edubox
|
- name: apply configuration to the edubox
|
||||||
|
|
|
||||||
|
|
@ -19,6 +19,7 @@
|
||||||
- stop
|
- stop
|
||||||
- reset
|
- reset
|
||||||
- purge
|
- purge
|
||||||
|
- setup
|
||||||
|
|
||||||
- name: purge all containers
|
- name: purge all containers
|
||||||
command:
|
command:
|
||||||
|
|
@ -28,6 +29,7 @@
|
||||||
tags:
|
tags:
|
||||||
- never
|
- never
|
||||||
- purge
|
- purge
|
||||||
|
- setup
|
||||||
|
|
||||||
- name: remove container overlay
|
- name: remove container overlay
|
||||||
file:
|
file:
|
||||||
|
|
@ -38,6 +40,7 @@
|
||||||
- never
|
- never
|
||||||
- reset
|
- reset
|
||||||
- purge
|
- purge
|
||||||
|
- setup
|
||||||
|
|
||||||
- name: start all containers
|
- name: start all containers
|
||||||
systemd:
|
systemd:
|
||||||
|
|
@ -51,142 +54,12 @@
|
||||||
|
|
||||||
###########
|
###########
|
||||||
|
|
||||||
- name: install packages
|
- name: import setup.yml tasks
|
||||||
apt:
|
import_tasks: setup.yml
|
||||||
name:
|
tags:
|
||||||
- systemd-container
|
- never
|
||||||
- debootstrap
|
- setup
|
||||||
state: latest
|
|
||||||
|
|
||||||
- name: debootstrap base system
|
- name: import setup.yml tasks
|
||||||
command:
|
import_tasks: setup.yml
|
||||||
cmd: >
|
|
||||||
debootstrap
|
|
||||||
--include={{ cont_packages | union(cont_packages_extra) | join(',') }}
|
|
||||||
--components=main,contrib,non-free stable
|
|
||||||
{{ contname }}00 http://deb.debian.org/debian
|
|
||||||
args:
|
|
||||||
chdir: /var/lib/machines/
|
|
||||||
creates: /var/lib/machines/{{ contname }}00
|
|
||||||
environment:
|
|
||||||
http_proxy: http://localhost:3142
|
|
||||||
notify: enable and restart containers
|
|
||||||
|
|
||||||
- name: provide complete apt sources
|
|
||||||
copy:
|
|
||||||
src: /etc/apt/sources.list
|
|
||||||
dest: /var/lib/machines/{{ contname }}00/etc/apt/sources.list
|
|
||||||
remote_src: yes
|
|
||||||
|
|
||||||
- name: configure locale
|
|
||||||
lineinfile:
|
|
||||||
path: /var/lib/machines/{{ contname }}00/etc/profile
|
|
||||||
line: 'export LANG=C'
|
|
||||||
|
|
||||||
- name: upgrade container
|
|
||||||
command:
|
|
||||||
cmd: >
|
|
||||||
chroot . sh -c '/usr/bin/apt-get update &&
|
|
||||||
/usr/bin/apt-get full-upgrade --yes'
|
|
||||||
args:
|
|
||||||
chdir: /var/lib/machines/{{ contname }}00
|
|
||||||
|
|
||||||
- name: provide {{ contuser }} user account
|
|
||||||
command:
|
|
||||||
cmd: >
|
|
||||||
chroot . sh -c '/usr/sbin/useradd -m -s /bin/bash
|
|
||||||
-c "User {{ contuser }},,," -G sudo {{ contuser }}'
|
|
||||||
args:
|
|
||||||
chdir: /var/lib/machines/{{ contname }}00
|
|
||||||
creates: /var/lib/machines/{{ contname }}00/home/{{ contuser }}
|
|
||||||
register: user_account
|
|
||||||
|
|
||||||
- name: provide empty password for {{ contuser }} user
|
|
||||||
command:
|
|
||||||
cmd: chroot . sh -c "passwd -d {{ contuser }}"
|
|
||||||
args:
|
|
||||||
chdir: /var/lib/machines/{{ contname }}00
|
|
||||||
when: user_account.changed | default(false) and contpwd | length == 0
|
|
||||||
|
|
||||||
- name: provide password for container {{ contuser }} user
|
|
||||||
command:
|
|
||||||
cmd: chroot . sh -c "echo {{ contuser }}:{{ contpwd }} | chpasswd"
|
|
||||||
args:
|
|
||||||
chdir: /var/lib/machines/{{ contname }}00
|
|
||||||
when: user_account.changed | default(true) and contpwd | length > 0
|
|
||||||
|
|
||||||
- name: allow empty passwords in ssh
|
|
||||||
lineinfile:
|
|
||||||
path: /var/lib/machines/{{ contname }}00/etc/ssh/sshd_config
|
|
||||||
insertafter: '#PermitEmptyPasswords no'
|
|
||||||
line: 'PermitEmptyPasswords yes'
|
|
||||||
when: user_account.changed | default(false) and contpwd | length == 0
|
|
||||||
|
|
||||||
- name: prepare directories
|
|
||||||
file:
|
|
||||||
path: /var/lib/machines/{{ contname }}00/etc/systemd/system/{{ item }}
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- multi-user.target.wants
|
|
||||||
- sockets.target.wants
|
|
||||||
- network-online.target.wants
|
|
||||||
notify: enable and restart containers
|
|
||||||
|
|
||||||
- name: enable systemd-networkd service
|
|
||||||
file:
|
|
||||||
src: /lib/systemd/system/{{ item.src }}
|
|
||||||
dest: /var/lib/machines/{{ contname }}00/etc/systemd/system/{{ item.dest }}
|
|
||||||
state: link
|
|
||||||
force: yes
|
|
||||||
loop:
|
|
||||||
- { src: systemd-networkd.service, dest: dbus-org.freedesktop.network1.service }
|
|
||||||
- { src: systemd-networkd.service, dest: multi-user.target.wants/systemd-networkd.service }
|
|
||||||
- { src: systemd-networkd.socket, dest: sockets.target.wants/systemd-networkd.socket }
|
|
||||||
- { src: systemd-networkd-wait-online.service, dest: network-online.target.wants/systemd-networkd-wait-online.service }
|
|
||||||
notify: enable and restart containers
|
|
||||||
|
|
||||||
########
|
|
||||||
- name: prepare sysctl configuration
|
|
||||||
file:
|
|
||||||
path: /etc/sysctl.d/inotify.conf
|
|
||||||
state: touch
|
|
||||||
|
|
||||||
- name: fix too many open files error
|
|
||||||
sysctl:
|
|
||||||
name: fs.inotify.max_user_instances
|
|
||||||
value: '1024'
|
|
||||||
sysctl_file: /etc/sysctl.d/inotify.conf
|
|
||||||
|
|
||||||
- name: generate links to the initial container
|
|
||||||
file:
|
|
||||||
src: "{{ contname }}00"
|
|
||||||
dest: /var/lib/machines/{{ contname }}{{ "%02d" | format(item|int) }}
|
|
||||||
state: link
|
|
||||||
loop: "{{ containers[1:] }}"
|
|
||||||
notify: enable and restart containers
|
|
||||||
|
|
||||||
- name: prepare nspawn config directory
|
|
||||||
file:
|
|
||||||
path: /etc/systemd/nspawn
|
|
||||||
state: directory
|
|
||||||
|
|
||||||
- name: provide container configuration
|
|
||||||
template:
|
|
||||||
src: contcfg.nspawn.j2
|
|
||||||
dest: /etc/systemd/nspawn/{{ contname}}{{ "%02d" | format(item|int) }}.nspawn
|
|
||||||
loop: "{{ containers }}"
|
|
||||||
notify: enable and restart containers
|
|
||||||
|
|
||||||
- name: provide container hostname file
|
|
||||||
template:
|
|
||||||
src: hostname.j2
|
|
||||||
dest: /var/lib/machines/{{ contname }}{{ "%02d" | format(item|int) }}.hostname
|
|
||||||
loop: "{{ containers }}"
|
|
||||||
notify: enable and restart containers
|
|
||||||
|
|
||||||
- name: provide container hosts file
|
|
||||||
template:
|
|
||||||
src: hosts.j2
|
|
||||||
dest: /var/lib/machines/{{ contname }}{{ "%02d" | format(item|int) }}.hosts
|
|
||||||
loop: "{{ containers }}"
|
|
||||||
notify: enable and restart containers
|
|
||||||
|
|
|
||||||
141
roles/educontainer/tasks/setup.yml
Normal file
141
roles/educontainer/tasks/setup.yml
Normal file
|
|
@ -0,0 +1,141 @@
|
||||||
|
---
|
||||||
|
|
||||||
|
- name: install packages
|
||||||
|
apt:
|
||||||
|
name:
|
||||||
|
- systemd-container
|
||||||
|
- debootstrap
|
||||||
|
state: latest
|
||||||
|
|
||||||
|
- name: debootstrap base system
|
||||||
|
command:
|
||||||
|
cmd: >
|
||||||
|
debootstrap
|
||||||
|
--include={{ cont_packages | union(cont_packages_extra) | join(',') }}
|
||||||
|
--components=main,contrib,non-free stable
|
||||||
|
{{ contname }}00 http://deb.debian.org/debian
|
||||||
|
args:
|
||||||
|
chdir: /var/lib/machines/
|
||||||
|
creates: /var/lib/machines/{{ contname }}00
|
||||||
|
environment:
|
||||||
|
http_proxy: http://localhost:3142
|
||||||
|
notify: enable and restart containers
|
||||||
|
|
||||||
|
- name: provide complete apt sources
|
||||||
|
copy:
|
||||||
|
src: /etc/apt/sources.list
|
||||||
|
dest: /var/lib/machines/{{ contname }}00/etc/apt/sources.list
|
||||||
|
remote_src: yes
|
||||||
|
|
||||||
|
- name: configure locale
|
||||||
|
lineinfile:
|
||||||
|
path: /var/lib/machines/{{ contname }}00/etc/profile
|
||||||
|
line: 'export LANG=C'
|
||||||
|
|
||||||
|
- name: upgrade container
|
||||||
|
command:
|
||||||
|
cmd: >
|
||||||
|
chroot . sh -c '/usr/bin/apt-get update &&
|
||||||
|
/usr/bin/apt-get full-upgrade --yes'
|
||||||
|
args:
|
||||||
|
chdir: /var/lib/machines/{{ contname }}00
|
||||||
|
|
||||||
|
- name: provide {{ contuser }} user account
|
||||||
|
command:
|
||||||
|
cmd: >
|
||||||
|
chroot . sh -c '/usr/sbin/useradd -m -s /bin/bash
|
||||||
|
-c "User {{ contuser }},,," -G sudo {{ contuser }}'
|
||||||
|
args:
|
||||||
|
chdir: /var/lib/machines/{{ contname }}00
|
||||||
|
creates: /var/lib/machines/{{ contname }}00/home/{{ contuser }}
|
||||||
|
register: user_account
|
||||||
|
|
||||||
|
- name: provide empty password for {{ contuser }} user
|
||||||
|
command:
|
||||||
|
cmd: chroot . sh -c "passwd -d {{ contuser }}"
|
||||||
|
args:
|
||||||
|
chdir: /var/lib/machines/{{ contname }}00
|
||||||
|
when: user_account.changed | default(false) and contpwd | length == 0
|
||||||
|
|
||||||
|
- name: provide password for container {{ contuser }} user
|
||||||
|
command:
|
||||||
|
cmd: chroot . sh -c "echo {{ contuser }}:{{ contpwd }} | chpasswd"
|
||||||
|
args:
|
||||||
|
chdir: /var/lib/machines/{{ contname }}00
|
||||||
|
when: user_account.changed | default(true) and contpwd | length > 0
|
||||||
|
|
||||||
|
- name: allow empty passwords in ssh
|
||||||
|
lineinfile:
|
||||||
|
path: /var/lib/machines/{{ contname }}00/etc/ssh/sshd_config
|
||||||
|
insertafter: '#PermitEmptyPasswords no'
|
||||||
|
line: 'PermitEmptyPasswords yes'
|
||||||
|
when: user_account.changed | default(false) and contpwd | length == 0
|
||||||
|
|
||||||
|
- name: prepare directories
|
||||||
|
file:
|
||||||
|
path: /var/lib/machines/{{ contname }}00/etc/systemd/system/{{ item }}
|
||||||
|
state: directory
|
||||||
|
loop:
|
||||||
|
- multi-user.target.wants
|
||||||
|
- sockets.target.wants
|
||||||
|
- network-online.target.wants
|
||||||
|
notify: enable and restart containers
|
||||||
|
|
||||||
|
- name: enable systemd-networkd service
|
||||||
|
file:
|
||||||
|
src: /lib/systemd/system/{{ item.src }}
|
||||||
|
dest: /var/lib/machines/{{ contname }}00/etc/systemd/system/{{ item.dest }}
|
||||||
|
state: link
|
||||||
|
force: yes
|
||||||
|
loop:
|
||||||
|
- { src: systemd-networkd.service, dest: dbus-org.freedesktop.network1.service }
|
||||||
|
- { src: systemd-networkd.service, dest: multi-user.target.wants/systemd-networkd.service }
|
||||||
|
- { src: systemd-networkd.socket, dest: sockets.target.wants/systemd-networkd.socket }
|
||||||
|
- { src: systemd-networkd-wait-online.service, dest: network-online.target.wants/systemd-networkd-wait-online.service }
|
||||||
|
notify: enable and restart containers
|
||||||
|
|
||||||
|
########
|
||||||
|
- name: prepare sysctl configuration
|
||||||
|
file:
|
||||||
|
path: /etc/sysctl.d/inotify.conf
|
||||||
|
state: touch
|
||||||
|
|
||||||
|
- name: fix too many open files error
|
||||||
|
sysctl:
|
||||||
|
name: fs.inotify.max_user_instances
|
||||||
|
value: '1024'
|
||||||
|
sysctl_file: /etc/sysctl.d/inotify.conf
|
||||||
|
|
||||||
|
- name: generate links to the initial container
|
||||||
|
file:
|
||||||
|
src: "{{ contname }}00"
|
||||||
|
dest: /var/lib/machines/{{ contname }}{{ "%02d" | format(item|int) }}
|
||||||
|
state: link
|
||||||
|
loop: "{{ containers[1:] }}"
|
||||||
|
notify: enable and restart containers
|
||||||
|
|
||||||
|
- name: prepare nspawn config directory
|
||||||
|
file:
|
||||||
|
path: /etc/systemd/nspawn
|
||||||
|
state: directory
|
||||||
|
|
||||||
|
- name: provide container configuration
|
||||||
|
template:
|
||||||
|
src: contcfg.nspawn.j2
|
||||||
|
dest: /etc/systemd/nspawn/{{ contname}}{{ "%02d" | format(item|int) }}.nspawn
|
||||||
|
loop: "{{ containers }}"
|
||||||
|
notify: enable and restart containers
|
||||||
|
|
||||||
|
- name: provide container hostname file
|
||||||
|
template:
|
||||||
|
src: hostname.j2
|
||||||
|
dest: /var/lib/machines/{{ contname }}{{ "%02d" | format(item|int) }}.hostname
|
||||||
|
loop: "{{ containers }}"
|
||||||
|
notify: enable and restart containers
|
||||||
|
|
||||||
|
- name: provide container hosts file
|
||||||
|
template:
|
||||||
|
src: hosts.j2
|
||||||
|
dest: /var/lib/machines/{{ contname }}{{ "%02d" | format(item|int) }}.hosts
|
||||||
|
loop: "{{ containers }}"
|
||||||
|
notify: enable and restart containers
|
||||||
Loading…
Add table
Reference in a new issue