alexandre.pires
25d3eafa5b
- Implemented tasks for managing Ubuntu containers using Podman, including inspection, creation, starting, and SSH setup. - Added verification tasks for WSL and Podman installation, machine existence, and NSSM service status. - Created PowerShell scripts for Podman auto-start on Windows boot. - Introduced Prometheus role with default configurations and installation tasks. - Updated Windows SSH role to improve authorized_keys management and permissions handling. - Modified inventory to include Windows containers host. - Updated Grafana datasource configurations with direct IP addresses for Prometheus instances.
101 lines
4.5 KiB
YAML
101 lines
4.5 KiB
YAML
---
|
|
# ── WSL verification ─────────────────────────────────────────────────────
|
|
|
|
- name: Verify WSL is operational
|
|
ansible.windows.win_shell: wsl.exe --status --default
|
|
register: __wsl_verify
|
|
changed_when: false
|
|
failed_when: __wsl_verify.rc != 0
|
|
tags:
|
|
- roles::windows_containers::verify
|
|
|
|
# ── Podman verification ──────────────────────────────────────────────────
|
|
|
|
- name: Verify Podman is installed
|
|
ansible.windows.win_shell: podman version
|
|
register: __podman_version
|
|
changed_when: false
|
|
tags:
|
|
- roles::windows_containers::verify
|
|
|
|
- name: Verify Podman machine exists
|
|
ansible.windows.win_shell: |
|
|
$machinesJson = (podman machine ls --format json 2>$null | Out-String).Trim()
|
|
if (-not $machinesJson) {
|
|
Write-Error "No Podman machines found"
|
|
exit 1
|
|
}
|
|
$machines = $machinesJson | ConvertFrom-Json
|
|
$machine = $machines | Where-Object { $_.Name -eq "{{ windows_containers_machine_name }}" } | Select-Object -First 1
|
|
if (-not $machine) {
|
|
Write-Error "Podman machine {{ windows_containers_machine_name }} not found"
|
|
exit 1
|
|
}
|
|
Write-Output "__PODMAN_MACHINE_EXISTS__"
|
|
register: __podman_machine_ls
|
|
changed_when: false
|
|
failed_when: "'__PODMAN_MACHINE_EXISTS__' not in (__podman_machine_ls.stdout + __podman_machine_ls.stderr)"
|
|
tags:
|
|
- roles::windows_containers::verify
|
|
|
|
# ── NSSM service verification ────────────────────────────────────────────
|
|
|
|
- name: Verify NSSM Podman machine service is installed and running
|
|
ansible.windows.win_shell: |
|
|
$svc = (Get-Service -Name "{{ windows_containers_service_name }}" -ErrorAction SilentlyContinue)
|
|
if (-not $svc) { Write-Error "Service {{ windows_containers_service_name }} not found"; exit 1 }
|
|
if ($svc.StartType -ne 'Automatic') { Write-Error "Service {{ windows_containers_service_name }} is not Automatic"; exit 1 }
|
|
Write-Output "Service: $($svc.DisplayName) | Status: $($svc.Status) | StartType: $($svc.StartType)"
|
|
Write-Output "__NSSM_SERVICE_OK__"
|
|
register: __nssm_verify
|
|
changed_when: false
|
|
failed_when: "__NSSM_SERVICE_OK__ not in (__nssm_verify.stdout + __nssm_verify.stderr)"
|
|
tags:
|
|
- roles::windows_containers::verify
|
|
|
|
- name: Verify NSSM service runs as dedicated podman user
|
|
ansible.windows.win_shell: |
|
|
$svc = Get-CimInstance -ClassName Win32_Service -Filter "Name='{{ windows_containers_service_name }}'"
|
|
$owner = $svc.StartName
|
|
if ($owner -eq ".\\{{ windows_containers_service_user }}" -or $owner -eq "{{ windows_containers_service_user }}") {
|
|
Write-Output "Service runs as $owner"
|
|
Write-Output "__NSSM_USER_OK__"
|
|
} else {
|
|
Write-Error "Expected service to run as .\\{{ windows_containers_service_user }}, got $owner"
|
|
exit 1
|
|
}
|
|
register: __nssm_user_verify
|
|
changed_when: false
|
|
failed_when: "__NSSM_USER_OK__ not in (__nssm_user_verify.stdout + __nssm_user_verify.stderr)"
|
|
tags:
|
|
- roles::windows_containers::verify
|
|
|
|
# ── Container verification ───────────────────────────────────────────────
|
|
|
|
- name: Verify Ubuntu container is running
|
|
ansible.windows.win_shell: podman inspect --format "{{ '{{.State.Running}}' }}" {{ windows_containers_container_name }}
|
|
register: __container_status
|
|
changed_when: false
|
|
failed_when: __container_status.rc != 0 or __container_status.stdout | trim != 'true'
|
|
tags:
|
|
- roles::windows_containers::verify
|
|
|
|
- name: Verify SSH access to Ubuntu container
|
|
ansible.windows.win_shell: podman exec {{ windows_containers_container_name }} id {{ windows_containers_user }}
|
|
register: __user_check
|
|
changed_when: false
|
|
failed_when: __user_check.rc != 0
|
|
tags:
|
|
- roles::windows_containers::verify
|
|
|
|
- name: Report SSH connection details
|
|
ansible.windows.win_shell: |
|
|
Write-Output "Podman is installed"
|
|
Write-Output "WSL version: wsl.exe --version"
|
|
Write-Output "NSSM service: {{ windows_containers_service_name }}"
|
|
Write-Output "Ubuntu container: {{ windows_containers_container_name }}"
|
|
Write-Output "SSH access: ssh {{ windows_containers_user }}@localhost -p {{ windows_containers_container_port }}"
|
|
changed_when: false
|
|
tags:
|
|
- roles::windows_containers::verify
|