cf1566e8ed
* replace removed repo with kubic repository for centos 7 * add crio configuration for centos8 * add crio configurations for debian * use correct crio version for fedora * simplify calulation of required crio version - gives possibility to overwrite * change default path for runc * change default for seccomp path * change default for conmon
130 lines
3.3 KiB
YAML
130 lines
3.3 KiB
YAML
---
|
|
|
|
- name: check if fedora coreos
|
|
stat:
|
|
path: /run/ostree-booted
|
|
register: ostree
|
|
|
|
- name: set is_ostree
|
|
set_fact:
|
|
is_ostree: "{{ ostree.stat.exists }}"
|
|
|
|
|
|
- name: gather os specific variables
|
|
include_vars: "{{ item }}"
|
|
with_first_found:
|
|
- files:
|
|
- "{{ ansible_distribution|lower }}-{{ ansible_distribution_version|lower|replace('/', '_') }}.yml"
|
|
- "{{ ansible_distribution|lower }}-{{ ansible_distribution_release }}.yml"
|
|
- "{{ ansible_distribution|lower }}-{{ ansible_distribution_major_version|lower|replace('/', '_') }}.yml"
|
|
- "{{ ansible_distribution|lower }}.yml"
|
|
- "{{ ansible_os_family|lower }}-{{ ansible_architecture }}.yml"
|
|
- "{{ ansible_os_family|lower }}.yml"
|
|
- defaults.yml
|
|
paths:
|
|
- ../vars
|
|
skip: true
|
|
tags:
|
|
- facts
|
|
|
|
- import_tasks: "crio_repo.yml"
|
|
|
|
- import_tasks: "crictl.yml"
|
|
|
|
- name: Make sure needed folders exist in the system
|
|
with_items:
|
|
- /etc/crio
|
|
- /etc/containers
|
|
- /etc/systemd/system/crio.service.d
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
|
|
- name: Install cri-o packages
|
|
package:
|
|
name: "{{ item }}"
|
|
state: present
|
|
when: not is_ostree
|
|
with_items: "{{ crio_packages }}"
|
|
notify: restart crio
|
|
|
|
- name: Gather the rpm package facts
|
|
package_facts:
|
|
manager: auto
|
|
when:
|
|
- ansible_distribution == "CentOS"
|
|
- ansible_distribution_major_version == "8"
|
|
|
|
- name: Ensure latest version of libseccom installed
|
|
command: "yum update -y libseccomp"
|
|
when:
|
|
- ansible_distribution == "CentOS"
|
|
- ansible_distribution_major_version == "8"
|
|
- ansible_facts.packages['libseccomp'] | map(attribute='version') | map('regex_replace','^(?P<major>\\d+).(?P<minor>\\d+).(?P<patch>\\d+)$', '\\g<major>.\\g<minor>') | list | first == '2.3'
|
|
notify: restart crio
|
|
|
|
- name: Check if already installed
|
|
stat:
|
|
path: "/bin/crio"
|
|
register: need_bootstrap_crio
|
|
when: is_ostree
|
|
|
|
- name: Install cri-o packages with osttree
|
|
command: "rpm-ostree install {{ crio_packages|join(' ') }}"
|
|
when:
|
|
- is_ostree
|
|
- not need_bootstrap_crio.stat.exists
|
|
become: true
|
|
|
|
- name: Reboot immediately for updated ostree
|
|
reboot:
|
|
become: true
|
|
when:
|
|
- is_ostree
|
|
- not need_bootstrap_crio.stat.exists
|
|
|
|
- name: Remove example CNI configs
|
|
file:
|
|
path: "/etc/cni/net.d/{{ item }}"
|
|
state: absent
|
|
loop:
|
|
- 100-crio-bridge.conf
|
|
- 200-loopback.conf
|
|
|
|
- name: Install cri-o config
|
|
template:
|
|
src: crio.conf.j2
|
|
dest: /etc/crio/crio.conf
|
|
|
|
- name: Copy mounts.conf
|
|
copy:
|
|
src: mounts.conf
|
|
dest: /etc/containers/mounts.conf
|
|
when:
|
|
- ansible_os_family == 'RedHat'
|
|
notify: restart crio
|
|
|
|
- name: Create directory for oci hooks
|
|
file:
|
|
path: /etc/containers/oci/hooks.d
|
|
state: directory
|
|
owner: root
|
|
mode: 0755
|
|
|
|
- name: Remove metacopy mount options for older kernels
|
|
ini_file:
|
|
dest: /etc/containers/storage.conf
|
|
section: storage.options.overlay
|
|
option: mountopt
|
|
value: "\"nodev\""
|
|
when:
|
|
- ansible_distribution == "CentOS"
|
|
- ansible_distribution_major_version == "7"
|
|
|
|
|
|
- name: Write cri-o proxy drop-in
|
|
template:
|
|
src: http-proxy.conf.j2
|
|
dest: /etc/systemd/system/crio.service.d/http-proxy.conf
|
|
notify: restart crio
|
|
when: http_proxy is defined or https_proxy is defined
|