Kris Lamoureux
d2473533d5
- Upgrade base OS from Debian 11 to Rocky Linux 9 - Configure 100GB XFS filesystem with auto-expansion - Replace Docker with rootless Podman for improved security - Add nginx reverse proxy for non-privileged port handling - Move the Traefik dashboard from port 8443 to 9443 - Configure SELinux contexts for container operations
50 lines
1.1 KiB
YAML
50 lines
1.1 KiB
YAML
- name: Install Podman
|
|
ansible.builtin.dnf:
|
|
name: ["podman", "podman-docker", "podman-compose"]
|
|
state: present
|
|
|
|
- name: Create /etc/containers/nodocker to quiet CLI emulation notice
|
|
ansible.builtin.file:
|
|
path: /etc/containers/nodocker
|
|
state: touch
|
|
mode: "644"
|
|
|
|
- name: Create logind.conf.d directory
|
|
ansible.builtin.file:
|
|
path: /etc/systemd/logind.conf.d
|
|
state: directory
|
|
mode: "755"
|
|
|
|
- name: Create linger directory
|
|
ansible.builtin.file:
|
|
path: /var/lib/systemd/linger
|
|
state: directory
|
|
mode: "755"
|
|
|
|
- name: Enable lingering for oci user
|
|
ansible.builtin.file:
|
|
path: /var/lib/systemd/linger/oci
|
|
state: touch
|
|
mode: "644"
|
|
notify: Restart systemd-logind
|
|
|
|
- name: Force handler execution for user lingering
|
|
ansible.builtin.meta: flush_handlers
|
|
|
|
- name: Create user systemd directory
|
|
ansible.builtin.file:
|
|
path: "/home/oci/.config/systemd/user"
|
|
state: directory
|
|
mode: "755"
|
|
owner: oci
|
|
group: oci
|
|
|
|
- name: Enable oci's podman socket
|
|
ansible.builtin.systemd:
|
|
name: podman.socket
|
|
enabled: true
|
|
state: started
|
|
scope: user
|
|
become_user: oci
|
|
become: true
|