pez-infra/ansible/roles/docker/tasks/main.yml
Rasmus "Pez" Wejlgaard 431c65065a
Add Docker official apt repo to docker role (#24)
* Add Docker official apt repo to docker role

The docker role was installing docker-compose-plugin which is only
available from Docker's official apt repository. helsinki-a had it
configured manually, but london-b and copenhagen-a did not, causing
deploy failures.

Now the role:
- Adds Docker's GPG key and apt repo (handles both Debian and Ubuntu)
- Installs docker-ce, docker-ce-cli, containerd.io, docker-compose-plugin
- Removes conflicting stock packages (docker.io, docker-compose)

* fix: resolve yamllint violations in docker role

- Remove standalone comment blocks that caused indentation errors
- Collapse multiline repo string to single line
- Ensure document start marker is present

* fix: keep all lines under 160 chars for yamllint

Use set_fact to build the Docker repo line in parts instead of
one long inline string.

* fix: resolve yamllint errors in london-b host_vars and promtail config

- Remove trailing blank line in inventory/host_vars/london-b.yml
- Add missing document start marker to promtail config
- Fix indentation in promtail scrape_configs (indent list items under key)

* Remove ansible-lint on push, keep PR-only

Lint already runs on pull_request — no need to double up on push to main.
2026-03-29 21:11:33 +01:00

93 lines
2.5 KiB
YAML

---
# Set up Docker's official apt repository and install Docker + Compose plugin.
- name: Install prerequisites for Docker repo (Debian/Ubuntu)
ansible.builtin.apt:
name:
- ca-certificates
- curl
- gnupg
state: present
update_cache: true
when: ansible_facts["os_family"] == "Debian"
- name: Create keyrings directory
ansible.builtin.file:
path: /etc/apt/keyrings
state: directory
mode: '0755'
when: ansible_facts["os_family"] == "Debian"
- name: Set Docker repo variables
ansible.builtin.set_fact:
docker_distro: >-
{{ 'ubuntu' if ansible_facts['distribution'] == 'Ubuntu' else 'debian' }}
docker_arch: >-
{{ ansible_facts['architecture']
| regex_replace('x86_64', 'amd64')
| regex_replace('aarch64', 'arm64') }}
when: ansible_facts["os_family"] == "Debian"
- name: Build Docker repo line
ansible.builtin.set_fact:
docker_repo: >-
deb [arch={{ docker_arch }}
signed-by=/etc/apt/keyrings/docker.asc]
https://download.docker.com/linux/{{ docker_distro }}
{{ ansible_facts['distribution_release'] }} stable
when: ansible_facts["os_family"] == "Debian"
- name: Add Docker GPG key
ansible.builtin.get_url:
url: "https://download.docker.com/linux/{{ docker_distro }}/gpg"
dest: /etc/apt/keyrings/docker.asc
mode: '0644'
force: false
when: ansible_facts["os_family"] == "Debian"
- name: Add Docker apt repository
ansible.builtin.apt_repository:
repo: "{{ docker_repo }}"
filename: docker
state: present
update_cache: true
when: ansible_facts["os_family"] == "Debian"
- name: Install Docker (Debian/Ubuntu)
ansible.builtin.apt:
name:
- docker-ce
- docker-ce-cli
- containerd.io
- docker-compose-plugin
state: present
when: ansible_facts["os_family"] == "Debian"
- name: Remove old docker packages (Debian/Ubuntu)
ansible.builtin.apt:
name:
- docker.io
- docker-compose
state: absent
when: ansible_facts["os_family"] == "Debian"
- name: Install Docker (Alpine)
community.general.apk:
name:
- docker
- docker-cli-compose
state: present
when: ansible_facts["os_family"] == "Alpine"
- name: Enable and start Docker
ansible.builtin.service:
name: docker
state: started
enabled: true
- name: Create docker compose project directories
ansible.builtin.file:
path: "/opt/docker/{{ item }}"
state: directory
mode: '0755'
loop: "{{ docker_services | default([]) }}"