2018-08-10 01:53:11 +08:00
|
|
|
---
|
2020-03-18 05:31:27 +08:00
|
|
|
- name: check if fedora coreos
|
2020-03-17 18:12:21 +08:00
|
|
|
stat:
|
|
|
|
path: /run/ostree-booted
|
2021-02-10 21:36:59 +08:00
|
|
|
get_attributes: no
|
|
|
|
get_checksum: no
|
|
|
|
get_mime: no
|
2020-03-17 18:12:21 +08:00
|
|
|
register: ostree
|
|
|
|
|
|
|
|
- name: set is_ostree
|
|
|
|
set_fact:
|
|
|
|
is_ostree: "{{ ostree.stat.exists }}"
|
|
|
|
|
2018-08-28 19:48:37 +08:00
|
|
|
- name: gather os specific variables
|
|
|
|
include_vars: "{{ item }}"
|
|
|
|
with_first_found:
|
|
|
|
- files:
|
|
|
|
- "{{ ansible_distribution|lower }}-{{ ansible_distribution_version|lower|replace('/', '_') }}.yml"
|
|
|
|
- "{{ ansible_distribution|lower }}-{{ ansible_distribution_release }}.yml"
|
|
|
|
- "{{ ansible_distribution|lower }}-{{ ansible_distribution_major_version|lower|replace('/', '_') }}.yml"
|
|
|
|
- "{{ ansible_distribution|lower }}.yml"
|
|
|
|
- "{{ ansible_os_family|lower }}-{{ ansible_architecture }}.yml"
|
|
|
|
- "{{ ansible_os_family|lower }}.yml"
|
|
|
|
- defaults.yml
|
|
|
|
paths:
|
|
|
|
- ../vars
|
|
|
|
skip: true
|
|
|
|
tags:
|
|
|
|
- facts
|
|
|
|
|
2020-11-02 22:32:53 +08:00
|
|
|
- name: disable unified_cgroup_hierarchy in Fedora 31+
|
|
|
|
command: grubby --update-kernel=ALL --args="systemd.unified_cgroup_hierarchy=0"
|
|
|
|
when:
|
|
|
|
- ansible_distribution == "Fedora"
|
|
|
|
- (ansible_distribution_major_version | int) >= 31
|
|
|
|
- ansible_proc_cmdline['systemd.unified_cgroup_hierarchy'] is not defined or ansible_proc_cmdline['systemd.unified_cgroup_hierarchy'] != '0'
|
2021-07-15 15:00:48 +08:00
|
|
|
- not is_ostree
|
2020-11-02 22:32:53 +08:00
|
|
|
|
|
|
|
- name: reboot in Fedora 31+
|
|
|
|
reboot:
|
|
|
|
when:
|
|
|
|
- ansible_distribution == "Fedora"
|
|
|
|
- (ansible_distribution_major_version | int) >= 31
|
|
|
|
- ansible_proc_cmdline['systemd.unified_cgroup_hierarchy'] is not defined or ansible_proc_cmdline['systemd.unified_cgroup_hierarchy'] != '0'
|
2021-07-15 15:00:48 +08:00
|
|
|
- not is_ostree
|
2020-11-02 22:32:53 +08:00
|
|
|
|
2020-11-29 00:38:47 +08:00
|
|
|
- name: import crio repo
|
|
|
|
import_tasks: "crio_repo.yml"
|
|
|
|
when: crio_add_repos
|
2018-08-10 01:53:11 +08:00
|
|
|
|
2021-07-12 15:00:47 +08:00
|
|
|
- include_role: # noqa unnamed-task
|
2020-12-06 01:43:25 +08:00
|
|
|
name: container-engine/crictl
|
2019-08-22 18:54:31 +08:00
|
|
|
|
2020-12-02 03:00:50 +08:00
|
|
|
- name: Build a list of crio runtimes with Katacontainers runtimes
|
2020-10-23 18:07:46 +08:00
|
|
|
set_fact:
|
|
|
|
crio_runtimes: "{{ crio_runtimes + kata_runtimes }}"
|
|
|
|
when:
|
|
|
|
- kata_containers_enabled
|
|
|
|
|
2020-12-02 03:00:50 +08:00
|
|
|
- name: Build a list of crio runtimes with crun runtime
|
|
|
|
set_fact:
|
|
|
|
crio_runtimes: "{{ crio_runtimes + [crun_runtime] }}"
|
|
|
|
when:
|
|
|
|
- crun_enabled
|
|
|
|
|
2018-12-18 17:39:25 +08:00
|
|
|
- name: Make sure needed folders exist in the system
|
|
|
|
with_items:
|
|
|
|
- /etc/crio
|
|
|
|
- /etc/containers
|
2020-04-21 19:12:55 +08:00
|
|
|
- /etc/systemd/system/crio.service.d
|
2018-12-18 17:39:25 +08:00
|
|
|
file:
|
|
|
|
path: "{{ item }}"
|
|
|
|
state: directory
|
2021-07-12 15:00:47 +08:00
|
|
|
mode: 0755
|
2018-12-18 17:39:25 +08:00
|
|
|
|
2020-11-04 00:54:03 +08:00
|
|
|
- name: Install cri-o config
|
|
|
|
template:
|
|
|
|
src: crio.conf.j2
|
|
|
|
dest: /etc/crio/crio.conf
|
2021-07-12 15:00:47 +08:00
|
|
|
mode: 0644
|
2020-11-04 00:54:03 +08:00
|
|
|
register: config_install
|
|
|
|
|
2021-09-02 01:20:59 +08:00
|
|
|
- name: Install config.json
|
|
|
|
template:
|
|
|
|
src: config.json.j2
|
|
|
|
dest: /etc/crio/config.json
|
|
|
|
register: reg_auth_install
|
|
|
|
|
2020-12-21 17:54:25 +08:00
|
|
|
- name: Add skopeo pkg to install
|
|
|
|
set_fact:
|
|
|
|
crio_packages: "{{ crio_packages + skopeo_packages }}"
|
|
|
|
when:
|
|
|
|
- not skip_downloads|default(false)
|
|
|
|
- download_run_once
|
|
|
|
|
2021-07-23 22:07:16 +08:00
|
|
|
- name: Add libseccomp2 package from Debian Backports to install
|
|
|
|
set_fact:
|
|
|
|
crio_packages: "{{ crio_debian_buster_backports_packages + crio_packages }}"
|
|
|
|
when:
|
|
|
|
- ansible_distribution == "Debian"
|
|
|
|
- ansible_distribution_version == "10"
|
|
|
|
|
2018-08-28 19:48:37 +08:00
|
|
|
- name: Install cri-o packages
|
2018-08-10 01:53:11 +08:00
|
|
|
package:
|
|
|
|
name: "{{ item }}"
|
|
|
|
state: present
|
2020-03-17 18:12:21 +08:00
|
|
|
when: not is_ostree
|
2018-08-28 19:48:37 +08:00
|
|
|
with_items: "{{ crio_packages }}"
|
2020-07-08 03:32:01 +08:00
|
|
|
register: package_install
|
|
|
|
until: package_install is succeeded
|
|
|
|
retries: 4
|
|
|
|
delay: "{{ retry_stagger | d(3) }}"
|
2018-08-10 01:53:11 +08:00
|
|
|
|
2020-03-17 18:12:21 +08:00
|
|
|
- name: Check if already installed
|
|
|
|
stat:
|
|
|
|
path: "/bin/crio"
|
2021-02-10 21:36:59 +08:00
|
|
|
get_attributes: no
|
|
|
|
get_checksum: no
|
|
|
|
get_mime: no
|
2020-03-17 18:12:21 +08:00
|
|
|
register: need_bootstrap_crio
|
|
|
|
when: is_ostree
|
|
|
|
|
|
|
|
- name: Install cri-o packages with osttree
|
2020-04-11 14:51:47 +08:00
|
|
|
command: "rpm-ostree install {{ crio_packages|join(' ') }}"
|
|
|
|
when:
|
|
|
|
- is_ostree
|
|
|
|
- not need_bootstrap_crio.stat.exists
|
2020-03-17 18:12:21 +08:00
|
|
|
become: true
|
|
|
|
|
|
|
|
- name: Reboot immediately for updated ostree
|
|
|
|
reboot:
|
|
|
|
become: true
|
2020-04-11 14:51:47 +08:00
|
|
|
when:
|
|
|
|
- is_ostree
|
|
|
|
- not need_bootstrap_crio.stat.exists
|
2020-03-17 18:12:21 +08:00
|
|
|
|
2020-04-22 21:09:52 +08:00
|
|
|
- name: Remove example CNI configs
|
|
|
|
file:
|
|
|
|
path: "/etc/cni/net.d/{{ item }}"
|
|
|
|
state: absent
|
|
|
|
loop:
|
|
|
|
- 100-crio-bridge.conf
|
|
|
|
- 200-loopback.conf
|
|
|
|
|
2018-08-10 01:53:11 +08:00
|
|
|
- name: Copy mounts.conf
|
2018-08-28 19:48:37 +08:00
|
|
|
copy:
|
|
|
|
src: mounts.conf
|
|
|
|
dest: /etc/containers/mounts.conf
|
2021-07-12 15:00:47 +08:00
|
|
|
mode: 0644
|
2018-08-28 19:48:37 +08:00
|
|
|
when:
|
|
|
|
- ansible_os_family == 'RedHat'
|
2020-04-21 19:12:55 +08:00
|
|
|
notify: restart crio
|
2018-08-10 01:53:11 +08:00
|
|
|
|
|
|
|
- name: Create directory for oci hooks
|
|
|
|
file:
|
|
|
|
path: /etc/containers/oci/hooks.d
|
|
|
|
state: directory
|
|
|
|
owner: root
|
|
|
|
mode: 0755
|
|
|
|
|
2021-02-16 12:51:07 +08:00
|
|
|
# metacopy=on is available since 4.19 and was backported to RHEL 4.18 kernel
|
|
|
|
- name: Set metacopy mount options correctly
|
2020-04-24 16:18:07 +08:00
|
|
|
ini_file:
|
|
|
|
dest: /etc/containers/storage.conf
|
|
|
|
section: storage.options.overlay
|
|
|
|
option: mountopt
|
2021-02-16 12:51:07 +08:00
|
|
|
value: '{{ ''"nodev"'' if ansible_kernel is version_compare(("4.18" if ansible_os_family == "RedHat" else "4.19"), "<") else ''"nodev,metacopy=on"'' }}'
|
2021-07-12 15:00:47 +08:00
|
|
|
mode: 0644
|
2020-04-24 16:18:07 +08:00
|
|
|
|
2020-12-04 05:57:25 +08:00
|
|
|
- name: Create directory registries configs
|
|
|
|
file:
|
|
|
|
path: /etc/containers/registries.conf.d
|
|
|
|
state: directory
|
|
|
|
owner: root
|
|
|
|
mode: 0755
|
|
|
|
|
|
|
|
- name: Write registries mirror configs
|
|
|
|
template:
|
|
|
|
src: registry-mirror.conf.j2
|
|
|
|
dest: "/etc/containers/registries.conf.d/{{ item.prefix }}.conf"
|
2021-07-12 15:00:47 +08:00
|
|
|
mode: 0644
|
2020-12-04 05:57:25 +08:00
|
|
|
loop: "{{ crio_registries_mirrors }}"
|
|
|
|
notify: restart crio
|
|
|
|
|
2020-04-21 19:12:55 +08:00
|
|
|
- name: Write cri-o proxy drop-in
|
|
|
|
template:
|
|
|
|
src: http-proxy.conf.j2
|
|
|
|
dest: /etc/systemd/system/crio.service.d/http-proxy.conf
|
2021-07-12 15:00:47 +08:00
|
|
|
mode: 0644
|
2020-04-21 19:12:55 +08:00
|
|
|
notify: restart crio
|
2020-04-24 16:18:07 +08:00
|
|
|
when: http_proxy is defined or https_proxy is defined
|
2020-10-07 15:10:42 +08:00
|
|
|
|
|
|
|
- name: Ensure crio service is started and enabled
|
|
|
|
service:
|
|
|
|
name: crio
|
|
|
|
daemon_reload: true
|
|
|
|
enabled: true
|
|
|
|
state: started
|
2020-11-04 00:54:03 +08:00
|
|
|
register: service_start
|
|
|
|
|
|
|
|
- name: Trigger service restart only when needed
|
|
|
|
service: # noqa 503
|
|
|
|
name: crio
|
|
|
|
state: restarted
|
|
|
|
when:
|
|
|
|
- config_install.changed
|
2021-09-02 01:20:59 +08:00
|
|
|
- reg_auth_install.changed
|
2020-11-04 00:54:03 +08:00
|
|
|
- not package_install.changed
|
|
|
|
- not service_start.changed
|
2020-10-07 15:10:42 +08:00
|
|
|
|
|
|
|
- name: Verify that crio is running
|
|
|
|
command: "crio-status info"
|
|
|
|
register: get_crio_info
|
|
|
|
until: get_crio_info is succeeded
|
|
|
|
changed_when: false
|
|
|
|
retries: 5
|
|
|
|
delay: "{{ retry_stagger | random + 3 }}"
|