build/ansible/roles/docker/tasks/main.yml at 4274bc396d2ce17849cfcb232e7e8d9760f53b63 · JaneaSystems/build · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
---

#
# common tasks suitable for all machines
#

- name: gather facts
  setup:

- name: set hostname
  hostname:
    name: "{{ inventory_hostname|replace('_', '-') }}"

- name: disable sftp
  notify: restart sshd
  lineinfile:
    state: absent
    dest: "{{ ssh_config }}"
    regexp: ^Subsystem(\s+)sftp

- name: add os-specific repos
  include: "{{ repos_include }}"
  loop_control:
    loop_var: repos_include
  with_first_found:
    - files:
        - "{{ role_path }}/tasks/partials/repo/{{ os }}.yml"
        - "{{ role_path }}/tasks/partials/repo/{{ os|stripversion }}.yml"
      skip: true

- name: install packages
  package:
    name: "{{ package }}"
    state: present
  loop_control:
    loop_var: package
  with_items:
    # ansible doesn't like empty lists
    - "{{ packages[os]|default('[]') }}"
    - "{{ packages[os|stripversion]|default('[]') }}"
    - "{{ common_packages|default('[]') }}"

- name: remove fortune from login shells
  when: os|stripversion == 'freebsd'
  lineinfile:
    dest: "/home/{{ server_user }}/{{ login_item }}"
    state: absent
    regexp: fortune freebsd
  loop_control:
    loop_var: login_item
  with_items: [ '.login', '.profile' ]

- name: set up ntp
  include: "{{ ntp_include }}"
  loop_control:
    loop_var: ntp_include
  with_first_found:
    - files:
        - "{{ role_path }}/../baselayout/tasks/partials/ntp/{{ os }}.yml"
        - "{{ role_path }}/../baselayout/tasks/partials/ntp/{{ os|stripversion }}.yml"
        - "{{ role_path }}/../baselayout/tasks/partials/ntp/{{ os|match_key(ntp_service, raise_error=False) }}.yml"
      skip: true

- name: create group
  group:
    name: "{{ server_user }}"

- name: create user
  user:
    name: "{{ server_user }}"
    group: "{{ server_user }}"

- name: add ::1 to /etc/hosts for ipv6 compat
  lineinfile:
    dest: /etc/hosts
    state: present
    line: ::1 localhost.localdomain localhost

- name: create worker directory
  file:
    path: "/home/{{ server_user }}/{{ item.name }}/"
    state: directory
    owner: "{{ server_user }}"
    group: "{{ server_user }}"
    mode: 0755
  with_items:
    - "{{ containers }}"

- name: create NODE_TEST_DIR directory
  file:
    path: "/home/{{ server_user }}/{{ item.name }}/tmp"
    state: directory
    owner: "{{ server_user }}"
    group: "{{ server_user }}"
    mode: 0755
  with_items:
    - "{{ containers }}"

- name: create worker ccache directory
  file:
    path: "/home/{{ server_user }}/.ccache/"
    state: directory
    owner: "{{ server_user }}"
    group: "{{ server_user }}"
    mode: 0755

- name: generate ccache config
  template:
    src: "{{ role_path }}/templates/ccache_config.j2"
    dest: "/home/{{ server_user }}/.ccache/ccache.conf"
    owner: "{{ server_user }}"
    group: "{{ server_user }}"
    mode: "0644"

- name: register {{ server_user }} GID
  raw: "grep ^{{ server_user }} /etc/group | awk -F: '{print $3}'"
  register: server_user_gid

- name: register {{ server_user }} UID
  raw: "grep ^{{ server_user }} /etc/passwd | awk -F: '{print $4}'"
  register: server_user_uid

- name: "docker : make build directory"
  file:
    path: /root/docker-container-{{ item.name }}
    state: directory
  with_items:
    - "{{ containers }}"

- name: "docker : generate Dockerfile"
  template:
    src: "{{ role_path }}/templates/{{ item.os }}.Dockerfile.j2"
    dest: /root/docker-container-{{ item.name }}/Dockerfile
    mode: "0644"
  with_items:
    - "{{ containers }}"

- name: "docker : build image"
  command: docker build -t node-ci:{{ item.name }} /root/docker-container-{{ item.name }}/
  with_items:
    - "{{ containers }}"

- name: "docker : generate and copy init script"
  template:
    src: "{{ role_path }}/templates/jenkins.service.j2"
    dest: "/lib/systemd/system/jenkins-{{ item.name }}.service"
  with_items:
    - "{{ containers }}"

- name: reload systemd
  systemd:
    daemon_reload: yes

- name: "docker : start Jenkins"
  service:
    name: "jenkins-{{ item.name }}"
    state: started
    enabled: yes
  with_items:
    - "{{ containers }}"