restart docker service on iptables reloads, and set docker to not restart containers on service restarts

roles/base/handlers/main.yml

@@ -9,6 +9,9 @@
 - name: restart iptables
   service: name=iptables state=restarted
 
+- name: restart docker
+  command: systemctl try-restart docker
+
 - name: restart ip6tables
   service: name=ip6tables state=restarted
 

roles/base/tasks/main.yml

@@ -196,6 +196,7 @@
   notify:
   - restart iptables
   - reload libvirtd
+  - restart docker
   tags:
   - iptables
   - config

roles/mirrormanager/mirrorlist_proxy/files/daemon.json

@@ -0,0 +1,3 @@
+{
+"live-restore": true
+}

roles/mirrormanager/mirrorlist_proxy/tasks/main.yml

@@ -54,6 +54,11 @@
   tags:
   - mirrorlist_proxy
 
+- name: setup daemon.json to not restart containers on docker service restarts
+  copy: src=daemon.json dest=/etc/docker/daemon.json
+  tags:
+  - mirrorlist_proxy
+
 - name: Run docker
   service: name=docker state=started enabled=yes
   tags: