Compare commits
2 Commits
8a1e996808
...
17a87b6083
Author | SHA1 | Date | |
---|---|---|---|
17a87b6083 | |||
1bfabcde5e |
@ -1,6 +1,6 @@
|
||||
---
|
||||
podman_version_check: true
|
||||
podman_version: "4.6.0"
|
||||
podman_version: "v4.6.2"
|
||||
podman_netavark_version: "v1.7.0"
|
||||
podman_conmon_version: "v2.1.7"
|
||||
podman_aardvark_dns_version: "v1.7.0"
|
||||
@ -13,7 +13,7 @@ podman_crun_buildpath: "{{ podman_buildpath }}/crun"
|
||||
podman_podman_buildpath: "{{ podman_buildpath }}/podman"
|
||||
podman_netavark_buildpath: "{{ podman_buildpath }}/netavark"
|
||||
|
||||
podman_containers_config: "/etc/containers"
|
||||
podman_containers_config: "/usr/share/containers/"
|
||||
|
||||
podman_netavark_repopath: "https://github.com/containers/netavark.git"
|
||||
podman_aardvark_dns_repopath: "https://github.com/containers/aardvark-dns.git"
|
||||
|
@ -2,39 +2,65 @@
|
||||
file:
|
||||
path: "{{ podman_containers_config }}"
|
||||
state: directory
|
||||
mode: 'u=rwx,g=rx,o='
|
||||
mode: '755'
|
||||
|
||||
- name: "Create conatiners folder"
|
||||
file:
|
||||
path: "/etc/containers"
|
||||
state: directory
|
||||
mode: '755'
|
||||
|
||||
|
||||
- name: "Create config and data directory"
|
||||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: '755'
|
||||
with_items:
|
||||
- "{{ podman_containers_config }}"
|
||||
- "{{ podman_containers_config }}/registries.conf.d"
|
||||
- "/etc/containers/registries.conf.d"
|
||||
|
||||
- name: Copy policy.json
|
||||
ansible.builtin.template:
|
||||
src: policy.json
|
||||
dest: "{{ podman_containers_config }}/policy.json"
|
||||
mode: 0600
|
||||
dest: "/etc/containers/policy.json"
|
||||
mode: '755'
|
||||
|
||||
- name: Copy registries.json
|
||||
ansible.builtin.template:
|
||||
src: registries.conf
|
||||
dest: "{{ podman_containers_config }}/registries.conf"
|
||||
mode: 0600
|
||||
dest: "/etc/containers/registries.conf"
|
||||
mode: '755'
|
||||
|
||||
- name: "Create registries.conf.d folder"
|
||||
file:
|
||||
path: "{{ podman_containers_config }}/registries.conf.d"
|
||||
state: directory
|
||||
mode: 'u=rwx,g=rx,o='
|
||||
- name: Copy containers.conf
|
||||
ansible.builtin.template:
|
||||
src: containers.conf
|
||||
dest: "{{ podman_containers_config }}/containers.conf"
|
||||
mode: '755'
|
||||
|
||||
- name: Copy storage.conf
|
||||
ansible.builtin.template:
|
||||
src: storage.conf
|
||||
dest: "{{ podman_containers_config }}/storage.conf"
|
||||
mode: '755'
|
||||
|
||||
- name: Copy registries.json
|
||||
ansible.builtin.template:
|
||||
src: registries.conf.d/shortnames.conf
|
||||
dest: "{{ podman_containers_config }}/registries.conf.d/shortnames.conf"
|
||||
mode: 0600
|
||||
dest: "/etc/containers/registries.conf.d/shortnames.conf"
|
||||
mode: '755'
|
||||
|
||||
- name: set ping group range permissions
|
||||
ansible.builtin.lineinfile:
|
||||
path: "/etc/sysctl.d/podman_ping_group.conf"
|
||||
line: "net.ipv4.ping_group_range=0 2000000"
|
||||
create: true
|
||||
|
||||
- name: Add podman folder to $PATH
|
||||
ansible.builtin.copy:
|
||||
dest: /etc/profile.d/podman.sh
|
||||
content: 'PATH=$PATH:/usr/libexec/podman'
|
||||
|
||||
- name: Exec lingur
|
||||
shell: loginctl enable-linger 1000
|
||||
|
@ -6,3 +6,9 @@
|
||||
- include_tasks: install_netavark.yml
|
||||
|
||||
- include_tasks: install_aardvark_dns.yml
|
||||
|
||||
- include_tasks: install_crun.yml
|
||||
|
||||
- include_tasks: configure.yml
|
||||
|
||||
- include_tasks: install_podman.yml
|
||||
|
@ -5,6 +5,7 @@
|
||||
clone: yes
|
||||
update: yes
|
||||
version: "{{ podman_aardvark_dns_version }}"
|
||||
force: true
|
||||
|
||||
- name: Build 'all' target with extra arguments
|
||||
make:
|
||||
@ -15,7 +16,7 @@
|
||||
file:
|
||||
path: "/usr/libexec/podman"
|
||||
state: directory
|
||||
mode: 'u=rwx,g=rx,o='
|
||||
mode: '755'
|
||||
|
||||
- name: Copy aardvark-dns file
|
||||
ansible.builtin.copy:
|
||||
@ -23,4 +24,4 @@
|
||||
dest: "/usr/libexec/podman/aardvark-dns"
|
||||
force: true
|
||||
remote_src: true
|
||||
|
||||
mode: u=rx,g=rx,o=rx
|
||||
|
@ -5,6 +5,7 @@
|
||||
clone: yes
|
||||
update: yes
|
||||
version: "{{ podman_conmon_version }}"
|
||||
force: true
|
||||
|
||||
- name: Build 'all' target with extra arguments
|
||||
make:
|
||||
|
@ -5,6 +5,7 @@
|
||||
clone: yes
|
||||
update: yes
|
||||
version: "{{ podman_crun_version }}"
|
||||
force: true
|
||||
|
||||
- name: Execute autogen.sh
|
||||
shell:
|
||||
|
@ -5,6 +5,7 @@
|
||||
clone: yes
|
||||
update: yes
|
||||
version: "{{ podman_netavark_version }}"
|
||||
force: true
|
||||
|
||||
- name: Build 'all' target with extra arguments
|
||||
make:
|
||||
@ -18,7 +19,7 @@
|
||||
file:
|
||||
path: "/usr/libexec/podman"
|
||||
state: directory
|
||||
mode: 'u=rwx,g=rx,o='
|
||||
mode: '755'
|
||||
|
||||
- name: Copy netavark file
|
||||
ansible.builtin.copy:
|
||||
@ -26,3 +27,4 @@
|
||||
dest: "/usr/libexec/podman/netavark"
|
||||
force: true
|
||||
remote_src: true
|
||||
mode: u=rx,g=rx,o=rx
|
||||
|
@ -5,6 +5,7 @@
|
||||
clone: yes
|
||||
update: yes
|
||||
version: "{{ podman_version }}"
|
||||
force: true
|
||||
|
||||
- name: Build 'all' target with extra arguments
|
||||
make:
|
||||
@ -17,8 +18,6 @@
|
||||
make:
|
||||
chdir: "{{ podman_podman_buildpath }}"
|
||||
target: install
|
||||
params:
|
||||
PREFIX: "/usr"
|
||||
|
||||
- name: Setup systemd service
|
||||
ansible.builtin.template:
|
||||
|
@ -4,4 +4,4 @@
|
||||
|
||||
- include_tasks: install.yml
|
||||
|
||||
- include_tasks: configure.yml
|
||||
- include_tasks: systemd-services.yml
|
||||
|
14
tasks/systemd-services.yml
Normal file
14
tasks/systemd-services.yml
Normal file
@ -0,0 +1,14 @@
|
||||
- name: Setup podman-docker service
|
||||
systemd_service:
|
||||
enabled: true
|
||||
state: started
|
||||
daemon_reload: true
|
||||
name: podman-docker
|
||||
|
||||
- name: Setup podman.sock
|
||||
remote_user: alphyron
|
||||
systemd_service:
|
||||
enabled: true
|
||||
name: podman.sock
|
||||
state: started
|
||||
scope: "user"
|
2
templates/containers.conf
Normal file
2
templates/containers.conf
Normal file
@ -0,0 +1,2 @@
|
||||
[network]
|
||||
network_backend="netavark"
|
5
templates/storage.conf
Normal file
5
templates/storage.conf
Normal file
@ -0,0 +1,5 @@
|
||||
[storage]
|
||||
driver = "overlay"
|
||||
|
||||
[storage.options.overlay]
|
||||
mount_program = "/usr/bin/fuse-overlayfs"
|
@ -6,7 +6,7 @@ podman_build_deps:
|
||||
- pkg-config
|
||||
- btrfs-progs
|
||||
- go-md2man
|
||||
#- iptables
|
||||
- iptables
|
||||
- libassuan-dev
|
||||
- libbtrfs-dev
|
||||
- libc6-dev
|
||||
@ -22,6 +22,8 @@ podman_build_deps:
|
||||
- libselinux1-dev
|
||||
- libapparmor-dev
|
||||
- protobuf-compiler
|
||||
- slirp4netns
|
||||
- fuse-overlayfs
|
||||
|
||||
crun_build_deps:
|
||||
- build-essential
|
||||
|
Loading…
Reference in New Issue
Block a user