79 lines
1.8 KiB
YAML
79 lines
1.8 KiB
YAML
- name: ensure packages are installed
|
|
package:
|
|
name=koji-builder
|
|
state=present
|
|
tags:
|
|
- install
|
|
|
|
- name: ensure kojid certificate is installed
|
|
copy:
|
|
src={{ item }}
|
|
dest=/etc/kojid/kojid.pem
|
|
mode=0400
|
|
owner=root
|
|
group=root
|
|
with_fileglob:
|
|
- certs/koji/{{ inventory_hostname }}/kojid.pem
|
|
notify: restart kojid
|
|
- name: ensure kojid ca certificates are installed
|
|
copy:
|
|
src={{ item }}
|
|
dest=/etc/kojid/{{ item|basename }}
|
|
mode=0644
|
|
with_fileglob:
|
|
- certs/koji/{{ inventory_hostname }}/*.crt
|
|
- name: ensure koji hub server ca certificate is trusted
|
|
copy:
|
|
src={{ item }}
|
|
dest=/etc/pki/ca-trust/source/anchors/koji-hub.crt
|
|
mode=0644
|
|
with_fileglob:
|
|
- certs/koji/{{ inventory_hostname }}/serverca.crt
|
|
notify: update ca trust
|
|
- name: ensure kojid is configured
|
|
template:
|
|
src=kojid.conf.j2
|
|
dest=/etc/kojid/kojid.conf
|
|
notify: restart kojid
|
|
|
|
- name: ensure kojid unit extension directory exists
|
|
file:
|
|
path=/etc/systemd/system/kojid.service.d
|
|
mode=0755
|
|
state=directory
|
|
- name: ensure http proxy is configured for kojid
|
|
template:
|
|
src=http_proxy.conf.j2
|
|
dest=/etc/systemd/system/kojid.service.d/http_proxy.conf
|
|
mode=0644
|
|
notify:
|
|
- reload systemd
|
|
- restart kojid
|
|
|
|
- name: ensure mock is configured
|
|
template:
|
|
src=site-defaults.mock.cfg.j2
|
|
dest=/etc/mock/site-defaults.cfg
|
|
mode=0644
|
|
|
|
- name: ensure kojid starts at boot
|
|
service:
|
|
name=kojid
|
|
enabled=yes
|
|
- meta: flush_handlers
|
|
- name: ensure kojid is running
|
|
service:
|
|
name=kojid
|
|
state=started
|
|
|
|
- name: ensure root has an ssh key
|
|
user:
|
|
name=root
|
|
generate_ssh_key=yes
|
|
ssh_key_type=rsa
|
|
ssh_key_bits=4096
|
|
register: root_user
|
|
- name: display ssh public key for root
|
|
debug:
|
|
var=root_user.ssh_public_key
|