5eed874199
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/716 This patch makes us use more fully-qualified container image names (either prefixed with docker.io/ or with localhost/). The latter happens when self-building is enabled. We've recently had issues where if an image was removed manually and the service was restarted (making `docker run` fetch it from Docker Hub, etc.), we'd end up with a pulled image, even though we're aiming for a self-built one. Re-running the playbook would then not do a rebuild, because: - the image with that name already exists (even though it's something else) - we sometimes had conditional logic where we'd build only if the git repo changed By explicitly changing the name of the images (prefixing with localhost/), we avoid such confusion and the possibility that we'd automatically pul something which is not what we expect. Also, I've removed that condition where building would happen on git changes only. We now always build (unless an image with that name already exists). We just force-build when the git repo changes.
152 lines
5.6 KiB
YAML
152 lines
5.6 KiB
YAML
---
|
|
|
|
#
|
|
# Tasks related to setting up ma1sd
|
|
#
|
|
|
|
- name: Ensure ma1sd paths exist
|
|
file:
|
|
path: "{{ item.path }}"
|
|
state: directory
|
|
mode: 0750
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_groupname }}"
|
|
with_items:
|
|
- { path: "{{ matrix_ma1sd_config_path }}", when: true }
|
|
- { path: "{{ matrix_ma1sd_data_path }}", when: true }
|
|
- { path: "{{ matrix_ma1sd_docker_src_files_path }}", when: "{{ matrix_ma1sd_container_image_self_build }}"}
|
|
when: matrix_ma1sd_enabled|bool and item.when
|
|
|
|
- import_tasks: "{{ role_path }}/tasks/migrate_mxisd.yml"
|
|
when: matrix_ma1sd_enabled|bool
|
|
|
|
- name: Ensure ma1sd image is pulled
|
|
docker_image:
|
|
name: "{{ matrix_ma1sd_docker_image }}"
|
|
source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"
|
|
force_source: "{{ matrix_ma1sd_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
|
|
force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_ma1sd_docker_image_force_pull }}"
|
|
when: matrix_ma1sd_enabled|bool and not matrix_ma1sd_container_image_self_build
|
|
|
|
- block:
|
|
- name: Ensure gradle is installed for self-building (Debian)
|
|
apt:
|
|
name:
|
|
- gradle
|
|
state: present
|
|
update_cache: yes
|
|
when: (ansible_os_family == 'Debian')
|
|
|
|
- name: Ensure gradle is installed for self-building (CentOS)
|
|
fail:
|
|
msg: "Installing gradle on CentOS is currently not supported, so self-building ma1sd cannot happen at this time"
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Ensure gradle is installed for self-building (Archlinux)
|
|
pacman:
|
|
name:
|
|
- gradle
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution == 'Archlinux'
|
|
|
|
- name: Ensure ma1sd repository is present on self-build
|
|
git:
|
|
repo: https://github.com/ma1uta/ma1sd.git
|
|
dest: "{{ matrix_ma1sd_docker_src_files_path }}"
|
|
version: "{{ matrix_ma1sd_docker_image.split(':')[1].split('-')[0] }}"
|
|
force: "yes"
|
|
register: matrix_ma1sd_git_pull_results
|
|
|
|
- name: Ensure ma1sd Docker image is built
|
|
shell: "./gradlew dockerBuild"
|
|
args:
|
|
chdir: "{{ matrix_ma1sd_docker_src_files_path }}"
|
|
|
|
- name: Ensure ma1sd Docker image is tagged correctly
|
|
docker_image:
|
|
# The build script always tags the image with something like `ma1uta/ma1sd:2.4.0`.
|
|
# Remove the `-{{ matrix_ma1sd_architecture }}` suffix and our `localhost/` prefix (applied when self-building)
|
|
# to get to what has actually been built, so we can retag it as `{{ matrix_ma1sd_docker_image }}`.
|
|
name: "{{ matrix_ma1sd_docker_image.split('-')[0].replace('localhost/', '') }}"
|
|
repository: "{{ matrix_ma1sd_docker_image }}"
|
|
force_tag: yes
|
|
source: local
|
|
when: "matrix_ma1sd_enabled|bool and matrix_ma1sd_container_image_self_build"
|
|
|
|
- name: Ensure ma1sd config installed
|
|
copy:
|
|
content: "{{ matrix_ma1sd_configuration|to_nice_yaml }}"
|
|
dest: "{{ matrix_ma1sd_config_path }}/ma1sd.yaml"
|
|
mode: 0644
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_groupname }}"
|
|
when: matrix_ma1sd_enabled|bool
|
|
|
|
- name: Ensure custom templates are installed if any
|
|
copy:
|
|
content: "{{ item.value }}"
|
|
dest: "{{ matrix_ma1sd_data_path }}/{{ item.location }}"
|
|
mode: 0644
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_groupname }}"
|
|
with_items:
|
|
- {value: "{{ matrix_ma1sd_threepid_medium_email_custom_invite_template }}", location: 'invite-template.eml'}
|
|
- {value: "{{ matrix_ma1sd_threepid_medium_email_custom_session_validation_template }}", location: 'validate-template.eml'}
|
|
- {value: "{{ matrix_ma1sd_threepid_medium_email_custom_unbind_fraudulent_template }}", location: 'unbind-fraudulent.eml'}
|
|
- {value: "{{ matrix_ma1sd_threepid_medium_email_custom_matrixid_template }}", location: 'mxid-template.eml'}
|
|
when: "matrix_ma1sd_enabled|bool and matrix_ma1sd_threepid_medium_email_custom_templates_enabled|bool and item.value"
|
|
|
|
- name: Ensure matrix-ma1sd.service installed
|
|
template:
|
|
src: "{{ role_path }}/templates/systemd/matrix-ma1sd.service.j2"
|
|
dest: "{{ matrix_systemd_path }}/matrix-ma1sd.service"
|
|
mode: 0644
|
|
register: matrix_ma1sd_systemd_service_result
|
|
when: matrix_ma1sd_enabled|bool
|
|
|
|
- name: Ensure systemd reloaded after matrix-ma1sd.service installation
|
|
service:
|
|
daemon_reload: yes
|
|
when: "matrix_ma1sd_enabled|bool and matrix_ma1sd_systemd_service_result.changed"
|
|
|
|
#
|
|
# Tasks related to getting rid of ma1sd (if it was previously enabled)
|
|
#
|
|
|
|
- name: Check existence of matrix-ma1sd service
|
|
stat:
|
|
path: "{{ matrix_systemd_path }}/matrix-ma1sd.service"
|
|
register: matrix_ma1sd_service_stat
|
|
|
|
- name: Ensure matrix-ma1sd is stopped
|
|
service:
|
|
name: matrix-ma1sd
|
|
state: stopped
|
|
daemon_reload: yes
|
|
register: stopping_result
|
|
when: "not matrix_ma1sd_enabled|bool and matrix_ma1sd_service_stat.stat.exists"
|
|
|
|
- name: Ensure matrix-ma1sd.service doesn't exist
|
|
file:
|
|
path: "{{ matrix_systemd_path }}/matrix-ma1sd.service"
|
|
state: absent
|
|
when: "not matrix_ma1sd_enabled|bool and matrix_ma1sd_service_stat.stat.exists"
|
|
|
|
- name: Ensure systemd reloaded after matrix-ma1sd.service removal
|
|
service:
|
|
daemon_reload: yes
|
|
when: "not matrix_ma1sd_enabled|bool and matrix_ma1sd_service_stat.stat.exists"
|
|
|
|
- name: Ensure Matrix ma1sd paths don't exist
|
|
file:
|
|
path: "{{ matrix_ma1sd_base_path }}"
|
|
state: absent
|
|
when: "not matrix_ma1sd_enabled|bool"
|
|
|
|
- name: Ensure ma1sd Docker image doesn't exist
|
|
docker_image:
|
|
name: "{{ matrix_ma1sd_docker_image }}"
|
|
state: absent
|
|
when: "not matrix_ma1sd_enabled|bool"
|