mirror of
https://github.com/ben-grande/qusal.git
synced 2024-12-25 15:39:38 -05:00
9c280689d8
- Document preferred method for socket use depending on use case; - Fix Github web-flow key; - Standardize naming of services; - Use sys-ssh in ansible formula; - Start services conditionally with Qubes Service and evaluated by systemd ConditionPathExists= instead of installing on a per qube basis with rc.local scripts; - Change Qusal services to "qusal-" prefix instead of "qubes-" prefix. Fixes: https://github.com/ben-grande/qusal/issues/80 Fixes: https://github.com/ben-grande/qusal/issues/79
74 lines
1.7 KiB
Plaintext
74 lines
1.7 KiB
Plaintext
{#
|
|
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#}
|
|
|
|
{% if grains['nodename'] != 'dom0' -%}
|
|
|
|
include:
|
|
- docker.install-repo
|
|
- utils.tools.common.update
|
|
|
|
{% set pkg = {
|
|
'Debian': {
|
|
'pkg_removed': ['docker.io', 'docker-doc', 'docker-compose',
|
|
'podman-docker', 'containerd', 'runc'],
|
|
},
|
|
'RedHat': {
|
|
'pkg_removed': ['docker', 'docker-client', 'docker-client-latest',
|
|
'docker-common', 'docker-latest',
|
|
'docker-latest-logrotate', 'docker-logrotate',
|
|
'docker-selinux', 'docker-engine-selinux',
|
|
'docker-engine'],
|
|
},
|
|
}.get(grains.os_family) -%}
|
|
|
|
{#
|
|
"{{ slsdotpath }}-removed-os-specific":
|
|
pkg.removed:
|
|
- pkgs: {{ pkg.pkg_removed|sequence|yaml }}
|
|
#}
|
|
|
|
"{{ slsdotpath }}-installed":
|
|
pkg.installed:
|
|
- require:
|
|
- sls: {{ slsdotpath }}.install-repo
|
|
- sls: utils.tools.common.update
|
|
- install_recommends: False
|
|
- skip_suggestions: True
|
|
- pkgs:
|
|
- qubes-core-agent-networking
|
|
- man-db
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- containerd.io
|
|
- docker-buildx-plugin
|
|
- docker-compose-plugin
|
|
|
|
"{{ slsdotpath }}-add-user-to-docker-group":
|
|
group.present:
|
|
- name: docker
|
|
- addusers:
|
|
- user
|
|
|
|
"{{ slsdotpath }}-systemd":
|
|
file.recurse:
|
|
- name: /usr/lib/systemd/system/
|
|
- source: salt://{{ slsdotpath }}/files/client/systemd/
|
|
- dir_mode: '0755'
|
|
- file_mode: '0644'
|
|
- user: root
|
|
- group: root
|
|
- makedirs: True
|
|
|
|
"{{ slsdotpath }}-unmask-docker":
|
|
service.unmasked:
|
|
- name: docker
|
|
|
|
"{{ slsdotpath }}-enable-docker":
|
|
service.enabled:
|
|
- name: docker
|
|
|
|
{% endif -%}
|