blob: 8b43393cbc4d8d62a61688650d5f2f81e2983af6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
|
---
# If docker_options are provided we should fail. We should not install docker and ignore
# the users configuration. NOTE: docker_options == inventory:openshift_docker_options
- name: Fail quickly if openshift_docker_options are set
assert:
that:
- docker_options is defined
- docker_options != ""
msg: |
Docker via System Container does not allow for the use of the openshift_docker_options
variable. If you want to use openshift_docker_options you will need to use the
traditional docker package install. Otherwise, comment out openshift_docker_options
in your inventory file.
- name: Ensure container-selinux is installed
package:
name: container-selinux
state: present
when: not openshift.common.is_atomic | bool
# Used to pull and install the system container
- name: Ensure atomic is installed
package:
name: atomic
state: present
when: not openshift.common.is_atomic | bool
# At the time of writing the atomic command requires runc for it's own use. This
# task is here in the even that the atomic package ever removes the dependency.
- name: Ensure runc is installed
package:
name: runc
state: present
when: not openshift.common.is_atomic | bool
# Make sure Docker is installed so we are able to use the client
- name: Install Docker so we can use the client
package: name=docker{{ '-' + docker_version if docker_version is defined else '' }} state=present
when: not openshift.common.is_atomic | bool
# Make sure docker is disabled. Errors are ignored.
- name: Disable Docker
systemd:
name: docker
enabled: no
state: stopped
daemon_reload: yes
ignore_errors: True
register: r_docker_systemcontainer_docker_stop_result
until: not r_docker_systemcontainer_docker_stop_result | failed
retries: 3
delay: 30
# Set http_proxy, https_proxy, and no_proxy in /etc/atomic.conf
# regexp: the line starts with or without #, followed by the string
# http_proxy, then either : or =
- block:
- name: Add http_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?http_proxy[:=]{1}"
line: "http_proxy: {{ openshift.common.http_proxy | default('') }}"
when:
- openshift.common.http_proxy is defined
- openshift.common.http_proxy != ''
- name: Add https_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?https_proxy[:=]{1}"
line: "https_proxy: {{ openshift.common.https_proxy | default('') }}"
when:
- openshift.common.https_proxy is defined
- openshift.common.https_proxy != ''
- name: Add no_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?no_proxy[:=]{1}"
line: "no_proxy: {{ openshift.common.no_proxy | default('') }}"
when:
- openshift.common.no_proxy is defined
- openshift.common.no_proxy != ''
- block:
- name: Set to default prepend
set_fact:
l_docker_image_prepend: "gscrivano"
- name: Use Red Hat Registry for image when distribution is Red Hat
set_fact:
l_docker_image_prepend: "registry.access.redhat.com/openshift3"
when: ansible_distribution == 'RedHat'
- name: Use Fedora Registry for image when distribution is Fedora
set_fact:
l_docker_image_prepend: "registry.fedoraproject.org/f25"
when: ansible_distribution == 'Fedora'
- name: Set the full image name
set_fact:
l_docker_image: "{{ l_docker_image_prepend }}/{{ openshift.docker.service_name }}:latest"
# For https://github.com/openshift/openshift-ansible/pull/5354#issuecomment-328552959
- name: Use a specific image if requested
set_fact:
l_docker_image: "{{ openshift_docker_systemcontainer_image_override }}"
when:
- openshift_docker_systemcontainer_image_override is defined
- openshift_docker_systemcontainer_image_override != ""
# Be nice and let the user see the variable result
- debug:
var: l_docker_image
# NOTE: no_proxy added as a workaround until https://github.com/projectatomic/atomic/pull/999 is released
- name: Pre-pull Container Engine System Container image
command: "atomic pull --storage ostree {{ l_docker_image }}"
changed_when: false
environment:
NO_PROXY: "{{ openshift.common.no_proxy | default('') }}"
- name: Ensure container-engine.service.d directory exists
file:
path: "{{ container_engine_systemd_dir }}"
state: directory
- name: Ensure /etc/docker directory exists
file:
path: "{{ docker_conf_dir }}"
state: directory
- name: Install Container Engine System Container
oc_atomic_container:
name: "{{ openshift.docker.service_name }}"
image: "{{ l_docker_image }}"
state: latest
- name: Configure Container Engine Service File
template:
dest: "{{ container_engine_systemd_dir }}/custom.conf"
src: systemcontainercustom.conf.j2
# Set local versions of facts that must be in json format for container-daemon.json
# NOTE: When jinja2.9+ is used the container-daemon.json file can move to using tojson
- set_fact:
l_docker_insecure_registries: "{{ l2_docker_insecure_registries | default([]) | to_json }}"
l_docker_log_options: "{{ docker_log_options | default({}) | to_json }}"
l_docker_additional_registries: "{{ l2_docker_additional_registries | default([]) | to_json }}"
l_docker_blocked_registries: "{{ l2_docker_blocked_registries | default([]) | to_json }}"
l_docker_selinux_enabled: "{{ docker_selinux_enabled | default(true) | to_json }}"
# Configure container-engine using the container-daemon.json file
# NOTE: daemon.json and container-daemon.json have been seperated to avoid
# collision.
- name: Configure Container Engine
template:
dest: "{{ docker_conf_dir }}/container-daemon.json"
src: daemon.json
# Enable and start the container-engine service
- name: Start the Container Engine service
systemd:
name: "{{ openshift.docker.service_name }}"
enabled: yes
state: started
daemon_reload: yes
register: r_docker_systemcontainer_docker_start_result
until: not r_docker_systemcontainer_docker_start_result | failed
retries: 3
delay: 30
- set_fact:
docker_service_status_changed: "{{ r_docker_systemcontainer_docker_start_result | changed }}"
- meta: flush_handlers
|