Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr-builders: simplify prep/start ansible conditions

Browse source
This commit is contained in:
Pavel Raiskup 2024-02-28 14:03:15 +01:00
parent 8e4e28c339
commit e5516210e1
1 changed files with 34 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

62
roles/copr/backend/files/provision/provision_builder_tasks.yml
View file

@ -1,8 +1,14 @@
--- ---
- name: define helper facts
set_fact:
starting_builder: prepare_base_image is not defined
preparing_image: prepare_base_image is defined
tags: always
- name: disable zram SWAP on builders, it is too small, issue 2077 - name: disable zram SWAP on builders, it is too small, issue 2077
package: name=zram-generator-defaults state=absent package: name=zram-generator-defaults state=absent
when: when:
- prepare_base_image is defined - preparing_image
- name: drop extremely slow libvirt resolver - name: drop extremely slow libvirt resolver
lineinfile: lineinfile:
@ -10,23 +16,23 @@
regexp: 'nameserver 192.168.122.1' regexp: 'nameserver 192.168.122.1'
state: 'absent' state: 'absent'
when: when:
- prepare_base_image is not defined - starting_builder
- "'osuosl' in lookup('env', 'RESALLOC_NAME')" - "'osuosl' in lookup('env', 'RESALLOC_NAME')"
- name: setup the hostname so we can easily identify the box - name: setup the hostname so we can easily identify the box
hostname: name="{{ lookup('env', 'RESALLOC_NAME', default='unknown-builder') | replace('_', '-') }}" hostname: name="{{ lookup('env', 'RESALLOC_NAME', default='unknown-builder') | replace('_', '-') }}"
when: prepare_base_image is not defined when: starting_builder
- name: put infra repos into yum.repos.d - name: put infra repos into yum.repos.d
copy: src=files/dnf/infra-tags.repo dest=/etc/yum.repos.d copy: src=files/dnf/infra-tags.repo dest=/etc/yum.repos.d
#when: # when:
#- prepare_base_image is defined # - preparing_image
- name: put infra stg repos into yum.repos.d if staging - name: put infra stg repos into yum.repos.d if staging
copy: src=files/dnf/infra-tags-stg.repo dest=/etc/yum.repos.d copy: src=files/dnf/infra-tags-stg.repo dest=/etc/yum.repos.d
when: when:
- devel - devel
- prepare_base_image is not defined - starting_builder
- name: disable updates-testing - name: disable updates-testing
file: file:
@ -42,7 +48,7 @@
# This is important for the AWS images only. Other images (like libvirt, # This is important for the AWS images only. Other images (like libvirt,
# IBM Cloud, etc.) are already updated. # IBM Cloud, etc.) are already updated.
- kernel-core - kernel-core
when: prepare_base_image is defined when: preparing_image
register: system_updated register: system_updated
- name: disable updates-testing, could be restored after update - name: disable updates-testing, could be restored after update
@ -60,23 +66,23 @@
# # - "@copr/copr-dev" # # - "@copr/copr-dev"
# when: # when:
# - devel # - devel
# - prepare_base_image is not defined # - starting_builder
- name: clean dnf cache before checking for updated packages - name: clean dnf cache before checking for updated packages
shell: dnf clean all shell: dnf clean all
when: when:
- prepare_base_image is defined - preparing_image
- name: set lower metadata expire time to enforce download - name: set lower metadata expire time to enforce download
ini_file: dest=/etc/dnf/dnf.conf section=main option=metadata_expire value=1h ini_file: dest=/etc/dnf/dnf.conf section=main option=metadata_expire value=1h
when: when:
- prepare_base_image is defined - preparing_image
# https://fedoraproject.org/wiki/Changes/StrongCryptoSettings # https://fedoraproject.org/wiki/Changes/StrongCryptoSettings
- name: fallback to the legacy crypto policies - name: fallback to the legacy crypto policies
command: update-crypto-policies --set DEFAULT:SHA1 command: update-crypto-policies --set DEFAULT:SHA1
when: when:
- prepare_base_image is defined - preparing_image
# NetworkManager-wait-online takes too long on VMS on our hypervisors. And we # NetworkManager-wait-online takes too long on VMS on our hypervisors. And we
# don't seem to need hcn-init service triggering that. # don't seem to need hcn-init service triggering that.
@ -86,12 +92,12 @@
state: stopped state: stopped
enabled: no enabled: no
failed_when: false failed_when: false
when: prepare_base_image is defined when: preparing_image
- name: install subscription-manager - name: install subscription-manager
package: name=subscription-manager state=present package: name=subscription-manager state=present
when: when:
- prepare_base_image is defined - preparing_image
- name: install the subscription-manager script - name: install the subscription-manager script
copy: copy:
@ -99,7 +105,7 @@
dest: /usr/local/bin/copr-rh-subscribe.sh dest: /usr/local/bin/copr-rh-subscribe.sh
mode: 0755 mode: 0755
when: when:
- prepare_base_image is defined - preparing_image
- name: Activate Red Hat Subscription - name: Activate Red Hat Subscription
shell: shell:
@ -110,7 +116,7 @@
--pass "{{ copr_red_hat_subscription_password }}" --pass "{{ copr_red_hat_subscription_password }}"
--system "{{ lookup('env', 'RESALLOC_NAME', default='unknown-builder') | replace('_', '-') }}" --system "{{ lookup('env', 'RESALLOC_NAME', default='unknown-builder') | replace('_', '-') }}"
no_log: true no_log: true
when: prepare_base_image is not defined when: starting_builder
- name: stop and disable systemd-oomd, rhbz 2051154 - name: stop and disable systemd-oomd, rhbz 2051154
service: service:
@ -125,7 +131,7 @@
value: 0 value: 0
state: present state: present
when: when:
- prepare_base_image is not defined - starting_builder
- name: install copr-builder and other latest packages - name: install copr-builder and other latest packages
dnf: state=latest pkg={{ packages }} dnf: state=latest pkg={{ packages }}
@ -151,7 +157,7 @@
# conditional, per https://pagure.io/copr/copr/issue/1189 - as we don't want # conditional, per https://pagure.io/copr/copr/issue/1189 - as we don't want
# to bake broken mock configuration into the image. # to bake broken mock configuration into the image.
when: when:
- prepare_base_image is not defined - starting_builder
- name: run /bin/copr-update-builder from copr-builder package - name: run /bin/copr-update-builder from copr-builder package
shell: /usr/bin/copr-update-builder shell: /usr/bin/copr-update-builder
@ -172,17 +178,17 @@
copy: src=files/main.ini dest=/etc/copr-rpmbuild/main.ini copy: src=files/main.ini dest=/etc/copr-rpmbuild/main.ini
when: when:
# TODO: use the default main.ini provided by copr-rpmbuild # TODO: use the default main.ini provided by copr-rpmbuild
- prepare_base_image is not defined - starting_builder
- name: mockbuilder user - name: mockbuilder user
user: name=mockbuilder groups=mock user: name=mockbuilder groups=mock
when: when:
- prepare_base_image is defined - preparing_image
- name: mockbuilder .ssh - name: mockbuilder .ssh
file: state=directory path=/home/mockbuilder/.ssh mode=0700 owner=mockbuilder group=mockbuilder file: state=directory path=/home/mockbuilder/.ssh mode=0700 owner=mockbuilder group=mockbuilder
when: when:
- prepare_base_image is defined - preparing_image
- name: mockbuilder authorized_keys - name: mockbuilder authorized_keys
authorized_key: user=mockbuilder key='{{ lookup('file', 'files/buildsys.pub') }}' authorized_key: user=mockbuilder key='{{ lookup('file', 'files/buildsys.pub') }}'
@ -200,12 +206,12 @@
group: root group: root
mode: 0644 mode: 0644
when: when:
- prepare_base_image is defined - preparing_image
- name: disable core dumps - name: disable core dumps
ini_file: dest=/etc/systemd/coredump.conf section=Coredump option=Storage value=none ini_file: dest=/etc/systemd/coredump.conf section=Coredump option=Storage value=none
when: when:
- prepare_base_image is defined - preparing_image
- name: 'Remove %_install_langs from /etc/rpm/macros.image-language-conf' - name: 'Remove %_install_langs from /etc/rpm/macros.image-language-conf'
lineinfile: lineinfile:
@ -213,7 +219,7 @@
regexp: '^%_install_lang.*' regexp: '^%_install_lang.*'
state: 'absent' state: 'absent'
when: when:
- prepare_base_image is defined - preparing_image
- name: Disable DNF makecache timer - name: Disable DNF makecache timer
systemd: systemd:
@ -221,7 +227,7 @@
state: stopped state: stopped
enabled: no enabled: no
when: when:
- prepare_base_image is defined - preparing_image
- name: Disable DNF makecache service - name: Disable DNF makecache service
systemd: systemd:
@ -229,7 +235,7 @@
state: stopped state: stopped
enabled: no enabled: no
when: when:
- prepare_base_image is defined - preparing_image
- name: mount cache filesystem on /var/cache/mock - name: mount cache filesystem on /var/cache/mock
mount: path=/var/cache/mock state=mounted src=mock_cache_tmpfs fstype=tmpfs opts="size=32G" mount: path=/var/cache/mock state=mounted src=mock_cache_tmpfs fstype=tmpfs opts="size=32G"
@ -246,7 +252,7 @@
fail_msg: "Not enough memory+swap, the builder is unusable: {{ ansible_memory_mb.swap.free }} MB SWAP and {{ ansible_memory_mb.real.free }} MB RAM" fail_msg: "Not enough memory+swap, the builder is unusable: {{ ansible_memory_mb.swap.free }} MB SWAP and {{ ansible_memory_mb.real.free }} MB RAM"
success_msg: "Builder has enough memory/swap!" success_msg: "Builder has enough memory/swap!"
when: when:
- prepare_base_image is not defined - starting_builder
- name: check disk space - name: check disk space
include_tasks: include_tasks:
@ -258,7 +264,7 @@
- path: /var/lib/copr-rpmbuild - path: /var/lib/copr-rpmbuild
size: 15000000 size: 15000000
when: when:
- prepare_base_image is not defined - starting_builder
- name: detect package versions - name: detect package versions
@ -279,7 +285,7 @@
src: "files/{{ item }}" src: "files/{{ item }}"
dest: "/etc/copr-rpmbuild/{{ item }}" dest: "/etc/copr-rpmbuild/{{ item }}"
when: when:
- prepare_base_image is not defined - starting_builder
loop: loop:
- mock-custom-build.cfg.j2 - mock-custom-build.cfg.j2
- mock.cfg.j2 - mock.cfg.j2