329 lines
11 KiB
YAML
329 lines
11 KiB
YAML
---
|
|
- name: '[setup] gather facts if not already done'
|
|
setup:
|
|
gather_subset:
|
|
- distribution
|
|
- distribution_release
|
|
|
|
- name: '[home] get user account information'
|
|
ansible.builtin.getent:
|
|
database: passwd
|
|
key: "{{ custom_base_user_account }}"
|
|
split: ":"
|
|
changed_when: false
|
|
when: getent_passwd is undefined or custom_base_user_account not in getent_passwd
|
|
|
|
- name: '[apt] install dependencies and tools'
|
|
become: true
|
|
ansible.builtin.apt:
|
|
update_cache: true
|
|
force_apt_get: true
|
|
cache_valid_time: 3600
|
|
pkg:
|
|
- apt-transport-https # docker-ce
|
|
- autoconf
|
|
- automake
|
|
- bc
|
|
- build-essential
|
|
- ca-certificates # docker-ce
|
|
- curl
|
|
- g++
|
|
- gcc
|
|
- git
|
|
- git-lfs
|
|
- gnupg2 # docker-ce
|
|
- jq
|
|
- libasound2 # draw.io
|
|
- libatspi2.0-0 # draw.io
|
|
- libcairo2
|
|
- libcairo2-dev
|
|
- libcurl4-openssl-dev
|
|
- libffi-dev
|
|
- libgtk-3-0 # draw.io
|
|
- libnotify4 # draw.io
|
|
- libnss3 # draw.io
|
|
- libsecret-1-0 # draw.io
|
|
- libssl-dev
|
|
- libtool
|
|
- libxss1 # draw.io
|
|
- libxtst6 # draw.io
|
|
- make
|
|
- mariadb-client
|
|
- pipx
|
|
- postgresql-client
|
|
- python3-dev
|
|
- python3-pip
|
|
- python3-virtualenv
|
|
- shellcheck
|
|
- sqlite3
|
|
- valgrind
|
|
- xdg-utils # draw.io
|
|
state: present
|
|
|
|
- name: '[github] install tools'
|
|
become: true
|
|
nullified.infrastructure.github_artifact:
|
|
github_token: '{{ custom_github_token }}'
|
|
asset_name: "{{ item.asset_name | default('') }}"
|
|
asset_type: "{{ item.asset_type }}"
|
|
cmds: "{{ item.cmds | default([]) }}"
|
|
creates: "{{ item.creates | default('') }}"
|
|
repository: "{{ item.repository }}"
|
|
version: "{{ item.version | default('') }}"
|
|
loop:
|
|
- asset_name: kind-linux-amd64
|
|
asset_type: release
|
|
repository: kubernetes-sigs/kind
|
|
creates: /usr/local/bin/kind
|
|
cmds:
|
|
- install --group=root --owner=root --mode=755 {asset_dirname}/{asset_filename} /usr/local/bin/kind
|
|
- rm {asset_dirname}/{asset_filename}
|
|
- asset_name: dive_{version}_linux_amd64.deb
|
|
asset_type: release
|
|
repository: wagoodman/dive
|
|
creates: /usr/bin/dive
|
|
cmds:
|
|
- dpkg -i {asset_dirname}/{asset_filename}
|
|
- asset_name: kubeconform-linux-amd64.tar.gz
|
|
asset_type: release
|
|
repository: yannh/kubeconform
|
|
creates: /usr/local/bin/kubeconform
|
|
cmds:
|
|
- tar -zxf {asset_dirname}/{asset_filename}
|
|
- install --group=root --mode=755 --owner=root kubeconform /usr/local/bin
|
|
- asset_name: git-delta_{version}_amd64.deb
|
|
asset_type: release
|
|
repository: dandavison/delta
|
|
creates: /usr/bin/delta
|
|
cmds:
|
|
- dpkg -i {asset_dirname}/{asset_filename}
|
|
- asset_name: docker-compose-linux-x86_64
|
|
asset_type: release
|
|
repository: docker/compose
|
|
creates: /usr/local/bin/docker-compose
|
|
cmds:
|
|
- install --group=root --mode=755 --owner=root {asset_dirname}/{asset_filename} /usr/local/bin/docker-compose
|
|
- test -d /usr/local/lib/docker/cli-plugins && (rm /usr/local/lib/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/local/lib/docker/cli-plugins) || true
|
|
- test -d /usr/local/libexec/docker/cli-plugins && (rm /usr/local/libexec/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/local/libexec/docker/cli-plugins) || true
|
|
- test -d /usr/lib/docker/cli-plugins && (rm /usr/lib/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/lib/docker/cli-plugins) || true
|
|
- test -d /usr/libexec/docker/cli-plugins && (rm /usr/libexec/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/libexec/docker/cli-plugins) || true
|
|
- asset_name: buildx-{version}.linux-amd64
|
|
asset_type: release
|
|
repository: docker/buildx
|
|
creates: /usr/local/bin/docker-buildx
|
|
cmds:
|
|
- install --group=root --mode=755 --owner=root {asset_dirname}/{asset_filename} /usr/local/bin/docker-buildx
|
|
- test -d /usr/local/lib/docker/cli-plugins && (rm /usr/local/lib/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/local/lib/docker/cli-plugins) || true
|
|
- test -d /usr/local/libexec/docker/cli-plugins && (rm /usr/local/libexec/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/local/libexec/docker/cli-plugins) || true
|
|
- test -d /usr/lib/docker/cli-plugins && (rm /usr/lib/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/lib/docker/cli-plugins) || true
|
|
- test -d /usr/libexec/docker/cli-plugins && (rm /usr/libexec/docker/cli-plugins/docker-compose; ln -s /usr/local/bin/docker-compose /usr/libexec/docker/cli-plugins) || true
|
|
- asset_name: drawio-amd64-{version}.deb
|
|
asset_type: release
|
|
repository: jgraph/drawio-desktop
|
|
creates: /usr/bin/drawio
|
|
cmds:
|
|
- dpkg -i {asset_dirname}/{asset_filename}
|
|
- asset_name: OpenLens-{version}.amd64.deb
|
|
asset_type: release
|
|
repository: MuhammedKalkan/OpenLens
|
|
creates: /usr/bin/open-lens
|
|
cmds:
|
|
- dpkg -i {asset_dirname}/{asset_filename}
|
|
- asset_name: stern_{version}_linux_amd64.tar.gz
|
|
asset_type: release
|
|
repository: stern/stern
|
|
creates: /usr/local/bin/stern
|
|
cmds:
|
|
- tar -zxf {asset_dirname}/{asset_filename}
|
|
- install --group=root --mode=755 --owner=root stern /usr/local/bin
|
|
- asset_name: tofu_{version}_amd64.deb
|
|
asset_type: release
|
|
repository: opentofu/opentofu
|
|
creates: /usr/bin/tofu
|
|
cmds:
|
|
- dpkg -i {asset_dirname}/{asset_filename}
|
|
|
|
- name: '[custom] install latest kubectl'
|
|
become: true
|
|
block:
|
|
- name: '[kubectl] find latest version available'
|
|
ansible.builtin.command:
|
|
cmd: curl -L -s https://dl.k8s.io/release/stable.txt
|
|
register: latest_kube_version
|
|
changed_when: false
|
|
|
|
- name: '[kubectl] fetch binary'
|
|
ansible.builtin.get_url:
|
|
url: "https://dl.k8s.io/release/{{ latest_kube_version.stdout }}/bin/linux/amd64/kubectl"
|
|
dest: /usr/local/bin/kubectl
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: '[custom] install latest Helm'
|
|
become: true
|
|
block:
|
|
- name: '[helm] find latest version available'
|
|
ansible.builtin.shell: |-
|
|
curl -sSL https://api.github.com/repos/helm/helm/releases/latest | jq -r '.tag_name'
|
|
register: latest_helm_version
|
|
changed_when: false
|
|
|
|
- name: '[helm] find if binary is already installed'
|
|
ansible.builtin.file:
|
|
path: /usr/local/bin/helm
|
|
register: helm_stat
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: '[helm] setup temp directory'
|
|
ansible.builtin.file:
|
|
path: /tmp/helm-unarchive
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0700'
|
|
when: helm_stat.state is match("absent")
|
|
|
|
- name: '[helm] fetch archive'
|
|
ansible.builtin.unarchive:
|
|
remote_src: true
|
|
src: "https://get.helm.sh/helm-{{ latest_helm_version.stdout }}-linux-amd64.tar.gz"
|
|
dest: /tmp/helm-unarchive
|
|
when: helm_stat.state is match("absent")
|
|
|
|
- name: '[helm] install binary'
|
|
ansible.builtin.copy:
|
|
remote_src: true
|
|
src: /tmp/helm-unarchive/linux-amd64/helm
|
|
dest: /usr/local/bin/helm
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
when: helm_stat.state is match("absent")
|
|
|
|
- name: '[helm] cleanup'
|
|
ansible.builtin.file:
|
|
path: /tmp/helm-unarchive
|
|
state: absent
|
|
when: helm_stat.state is match("absent")
|
|
|
|
- name: '[custom] install Docker CE repository'
|
|
become: true
|
|
block:
|
|
- name: '[apt key] add docker key'
|
|
ansible.builtin.get_url:
|
|
url: "https://download.docker.com/linux/{{ ansible_distribution | lower }}/gpg"
|
|
dest: /etc/apt/trusted.gpg.d/docker.asc
|
|
mode: '0644'
|
|
|
|
- name: '[apt key] add source'
|
|
ansible.builtin.apt_repository:
|
|
repo: "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/docker.asc] https://download.docker.com/linux/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} stable"
|
|
state: present
|
|
filename: docker
|
|
update_cache: true
|
|
|
|
- name: '[apt] install Docker CE'
|
|
ansible.builtin.apt:
|
|
update_cache: true
|
|
force_apt_get: true
|
|
cache_valid_time: 3600
|
|
pkg:
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- containerd.io
|
|
state: present
|
|
|
|
- name: '[docker] update daemon configuration'
|
|
ansible.builtin.template:
|
|
src: ../templates/docker-ce/daemon.json.j2
|
|
dest: /etc/docker/daemon.json
|
|
mode: '0644'
|
|
notify:
|
|
- 'development : [docker] restart service'
|
|
|
|
- name: '[docker] add default user to docker group'
|
|
ansible.builtin.user:
|
|
name: "{{ development_docker_remap_user }}"
|
|
append: true
|
|
groups: docker
|
|
state: present
|
|
notify:
|
|
- 'development : [docker] restart service'
|
|
|
|
- name: '[python] install tools'
|
|
become: true
|
|
become_user: "{{ custom_base_user_account }}"
|
|
ansible.builtin.command:
|
|
cmd: "pipx install {{ item.cmd }}"
|
|
creates: "{{ getent_passwd[custom_base_user_account][4] }}/.local/bin/{{ item.creates }}"
|
|
loop:
|
|
- { "cmd": "black", "creates": "black" }
|
|
- { "cmd": "flake8", "creates": "flake8" }
|
|
|
|
- name: '[python] install pipx packages dependencies'
|
|
become: true
|
|
become_user: "{{ custom_base_user_account }}"
|
|
ansible.builtin.command:
|
|
cmd: "pipx inject {{ item.venv }} {{ item.extension }}"
|
|
creates:
|
|
"{{ getent_passwd[custom_base_user_account][4] }}/.local/pipx/venvs/{{ item.venv }}/lib/python3.11/site-packages/{{ item.creates }}"
|
|
loop:
|
|
- venv: "flake8"
|
|
extension: "flake8-annotations-complexity"
|
|
creates: "flake8_annotations_complexity"
|
|
- venv: "flake8"
|
|
extension: "flake8-bandit"
|
|
creates: "flake8_bandit.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-breakpoint"
|
|
creates: "flake8_breakpoint"
|
|
- venv: "flake8"
|
|
extension: "flake8-bugbear"
|
|
creates: "bugbear.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-builtins"
|
|
creates: "flake8_builtins.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-comprehensions"
|
|
creates: "flake8_comprehensions"
|
|
- venv: "flake8"
|
|
extension: "flake8-docstrings"
|
|
creates: "flake8_docstrings.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-eradicate"
|
|
creates: "flake8_eradicate.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-expression-complexity"
|
|
creates: "flake8_expression_complexity"
|
|
- venv: "flake8"
|
|
extension: "flake8-if-expr"
|
|
creates: "flake8_if_expr"
|
|
- venv: "flake8"
|
|
extension: "flake8-isort"
|
|
creates: "flake8_isort.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-logging-format"
|
|
creates: "logging_format"
|
|
- venv: "flake8"
|
|
extension: "flake8-print"
|
|
creates: "flake8_print.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-pytest"
|
|
creates: "flake8_pytest.py"
|
|
- venv: "flake8"
|
|
extension: "flake8-pytest-style"
|
|
creates: "flake8_pytest_style"
|
|
- venv: "flake8"
|
|
extension: "flake8-requirements"
|
|
creates: "flake8_requirements"
|
|
- venv: "flake8"
|
|
extension: "flake8-return"
|
|
creates: "flake8_return"
|
|
- venv: "flake8"
|
|
extension: "flake8-rst-docstrings"
|
|
creates: "flake8_rst_docstrings.py"
|
|
- venv: "flake8"
|
|
extension: "pep8-naming"
|
|
creates: "pep8ext_naming.py"
|