[copr] using new role-based approach for backend-stg

This commit is contained in:
Valentin Gologuzov 2014-10-10 14:38:41 +02:00
parent 7eb2956b42
commit 8a27994f22

View file

@ -1,155 +1,32 @@
- name: check/create instance
hosts: copr-be-dev.cloud.fedoraproject.org
#hosts: copr-back:copr-back-stg
hosts: copr-back-stg
user: root
gather_facts: False
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "{{ private }}/vars.yml"
# Roles are run first, before tasks, regardless of where you place them here.
roles:
- fedmsg/base
tasks:
- include: "{{ tasks }}/persistent_cloud.yml"
- include: "{{ tasks }}/growroot_cloud.yml"
- include: "{{ tasks }}/common_scripts.yml"
handlers:
- include: "{{ handlers }}/restart_services.yml"
- name: provision instance
hosts: copr-be-dev.cloud.fedoraproject.org
#hosts: copr-back:copr-back-stg
hosts: copr-back-stg
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "{{ private }}/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
tasks:
- include: "{{ tasks }}/cloud_setup_basic.yml"
- include: "{{ tasks }}/iptables.yml"
# Roles are run first, before tasks, regardless of where you place them here.
roles:
- base
- fedmsg/base
- copr/backend
- name: copy copr.repo
action: copy src="{{ files }}/copr/fe/yum/copr.repo" dest=/etc/yum.repos.d/copr.repo
- name: set the hostname
shell: hostname copr-be-dev.cloud.fedoraproject.org
# packages needed
- name: add packages for copr-be
action: yum state=present name={{ item }}
with_items:
- copr-selinux
- copr-backend
- git
- screen
- name: make copr dirs
file: state=directory path={{ item }}
with_items:
- /var/lib/copr/jobs
- /var/lib/copr/public_html/results
- name: Umask results
action: command /usr/bin/umask 0000
- name: setup dirs there
action: file state=directory path="/home/copr/{{ item }}" owner=copr group=copr mode=0700
with_items:
- cloud
- .ssh
- name: add copr-buildsys keys to copr user path
action: copy src={{ item }} dest=/home/copr/cloud/ owner=copr group=copr mode=0600
with_fileglob:
- "{{ private }}/files/openstack/copr-copr/*"
- name: setup privkey for copr user
action: copy src="{{ private }}/files/copr/buildsys.priv" dest=/home/copr/.ssh/id_rsa owner=copr group=copr mode=600
- name: setup copr user ssh config file
action: copy src="{{ files }}/copr/ssh_config" dest=/home/copr/.ssh/config owner=copr group=copr mode=600
- name: create empty known_hosts
action: copy src=/dev/null dest=/home/copr/.ssh/known_hosts owner=copr group=copr mode=600
- name: replace bashrc for copr user
action: copy src="{{ files }}/copr/copr_bashrc" dest=/home/copr/.bashrc owner=copr group=copr mode=600
- name: auth_key so we can login to localhost as the copr user from the copr user
action: authorized_key user=copr key="{{ item }}"
with_file:
- "{{ files }}/copr/provision/files/buildsys.pub"
- name: copy .boto file
action: copy src="{{ files }}/copr/boto" dest=/home/copr/.boto owner=copr group=copr
# setup webserver
- name: add config for copr-repo path
action: copy src="{{ files }}/copr/lighttpd/lighttpd.conf" dest=/etc/lighttpd/lighttpd.conf owner=root group=root mode=0644
notify:
- restart lighttpd
# mime default to text/plain and enable dirlisting for indexes
- name: update lighttpd configs
action: copy src="{{ files }}/copr/lighttpd/{{ item }}" dest="/etc/lighttpd/conf.d/{{ item }}" owner=root group=root mode=0644
with_items:
- dirlisting.conf
- mime.conf
notify:
- restart lighttpd
- name: start webserver
action: service state=running enabled=yes name=lighttpd
# setup dirs for the ansible execution off of provisioning
- name: dirs from provision
action: file state=directory path="/home/copr/provision/{{ item }}" owner=copr group=copr
with_items:
- action_plugins
- library
- files
- files/mock
tags:
- provision_config
- name: put ansible.cfg for all this into /etc/ansible/ on the system
action: copy src="{{ files }}/copr/provision/ansible.cfg" dest=/etc/ansible/ansible.cfg
tags:
- provision_config
- name: put some files into the provision subdir
action: copy src="{{ files }}/copr/provision/{{ item }}" dest="/home/copr/provision/{{ item }}"
with_items:
- inventory
- builderpb.yml
- terminatepb.yml
tags:
- provision_config
- name: put files into the files subdir off of provisioning
action: copy src={{ item }} dest=/home/copr/provision/files/
with_fileglob:
- "{{ files }}/copr/provision/files/*"
tags:
- provision_config
# ansible lacks a recurse - so we need this until then
- name: put files into the files/mock subdir off of provisioning
action: copy src={{ item }} dest=/home/copr/provision/files/mock
with_fileglob:
- "{{ files }}/copr/provision/files/mock/*"
tags:
- provision_config
- name: copy copr-be.conf
action: copy src="{{ files }}/copr/copr-be.conf-dev" dest=/etc/copr/copr-be.conf
handlers:
- include: "{{ handlers }}/restart_services.yml"