This commit is contained in:
2025-11-16 22:14:53 -05:00
parent 6c3aa6d257
commit 90ef1bbba2
11 changed files with 420 additions and 19 deletions

View File

@@ -1,14 +1,15 @@
- name: Install Podman
- name: Install Podman with Docker CLI tools
ansible.builtin.apt:
name: ["podman", "podman-compose", "podman-docker"]
name: ["podman", "docker-cli", "docker-compose"]
state: present
- name: Get user info for namespace users
- name: Get podman user info for user namespace configuration
ansible.builtin.getent:
database: passwd
key: "{{ item }}"
loop: "{{ user_namespaces }}"
loop: "{{ podman_compose.keys() | list }}"
register: user_info
when: podman_compose is defined
- name: Configure /etc/subuid for rootless users
ansible.builtin.lineinfile:
@@ -36,13 +37,26 @@
mode: "0644"
loop: "{{ user_info.results }}"
- name: Create nodocker file to disable Docker CLI emulation message
ansible.builtin.file:
path: /etc/containers/nodocker
state: touch
owner: root
group: root
mode: "0644"
- name: Enable lingering for podman compose user
ansible.builtin.command:
cmd: "loginctl enable-linger {{ item.item }}"
changed_when: false
loop: "{{ user_info.results }}"
- name: Start and enable the Podman socket
ansible.builtin.systemd:
name: podman.socket
state: started
enabled: true
scope: user
vars:
uid: "{{ item.ansible_facts.getent_passwd[item.item][1] }}"
environment:
XDG_RUNTIME_DIR: "/run/user/{{ uid }}"
DBUS_SESSION_BUS_ADDRESS: "unix:path=/run/user/{{ uid }}/bus"
become: true
become_user: "{{ item.item }}"
loop: "{{ user_info.results }}"
- name: Create global containers config directory
ansible.builtin.file:
@@ -58,5 +72,29 @@
events_logger = "journald"
runtime = "crun"
dest: /etc/containers/containers.conf
mode: "0644"
backup: true
mode: "0644"
- name: Configure Docker CLI to use rootless Podman socket
ansible.builtin.copy:
src: files/docker-host.sh
dest: /etc/profile.d/docker-host.sh
owner: root
group: root
mode: '0755'
- name: Install git for repository cloning
ansible.builtin.apt:
name: git
state: present
when: podman_compose is defined
- name: Deploy Podman compose projects for each user
ansible.builtin.include_tasks: deploy.yml
vars:
podman_user: "{{ compose_user.key }}"
podman_compose_config: "{{ compose_user.value }}"
loop: "{{ podman_compose | dict2items }}"
loop_control:
loop_var: compose_user
when: podman_compose is defined