summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--docker-ce/files/etc/docker/daemon.json5
-rw-r--r--docker-ce/tasks/main.yml120
-rw-r--r--docker-nvidia/meta/main.yml3
-rw-r--r--docker-nvidia/tasks/main.yml19
4 files changed, 147 insertions, 0 deletions
diff --git a/docker-ce/files/etc/docker/daemon.json b/docker-ce/files/etc/docker/daemon.json
new file mode 100644
index 0000000..b887738
--- /dev/null
+++ b/docker-ce/files/etc/docker/daemon.json
@@ -0,0 +1,5 @@
+{
+ "data-root": "/tmp/virt/docker",
+ "storage-driver": "overlay2",
+ "userns-remap": "default"
+}
diff --git a/docker-ce/tasks/main.yml b/docker-ce/tasks/main.yml
new file mode 100644
index 0000000..0383f9c
--- /dev/null
+++ b/docker-ce/tasks/main.yml
@@ -0,0 +1,120 @@
+---
+- name: Install dependencies for apt key import
+ apt:
+ name: "{{ apt_key_deps }}"
+ vars:
+ apt_key_deps:
+ - ca-certificates
+ - curl
+ - gpg
+ - gnupg-agent
+ - software-properties-common
+ become: yes
+
+- name: Add docker apt key
+ apt_key:
+ url: https://download.docker.com/linux/ubuntu/gpg
+ id: 9DC858229FC7DD38854AE2D88D81803C0EBFCD88
+ state: present
+ become: yes
+
+- name: Add docker repo
+ apt_repository:
+ repo: "deb [arch=amd64] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable"
+ update_cache: yes
+ become: yes
+
+- name: Install Docker CE and containerd
+ apt:
+ name: "{{ pkgs }}"
+ environment:
+ RUNLEVEL: 1
+ vars:
+ pkgs:
+ - docker-ce
+ - docker-ce-cli
+ - containerd.io
+ become: yes
+
+- name: Add subuid/subgid ranges for dockremap
+ shell: >
+ awk -F: 'BEGIN {
+ max=0
+ found=0
+ } {
+ if ($1=="dockremap")
+ found=1
+ if ($2>max)
+ max=($2)
+ } END {
+ if (!found)
+ print "dockremap:"max+65536":65536"}' \
+ "/etc/{{ item }}" >> "/etc/{{ item }}"
+ with_items:
+ - subuid
+ - subgid
+ become: yes
+
+- name: Copy static files
+ copy:
+ src: files/
+ dest: /
+ become: yes
+
+- name: Disable automatic docker startup
+ systemd:
+ name: "{{ item }}"
+ enabled: no
+ with_items:
+ - docker.service
+ - containerd.service
+ become: yes
+
+- name: Enable docker socket activation
+ systemd:
+ name: docker.socket
+ enabled: yes
+ become: yes
+
+# Enable no-trivial-root authorization plugin
+- name: install
+ unarchive:
+ src: "https://github.com/ad-freiburg/docker-no-trivial-root/releases/download/v0.1.0/docker-no-trivial-root_{{ ansible_architecture }}.tar.bz2"
+ dest: "/tmp"
+ remote_src: yes
+
+- name: Copy over
+ copy:
+ src: "/tmp/docker-no-trivial-root_{{ ansible_architecture }}/docker-no-trivial-root"
+ dest: "/usr/sbin/docker-no-trivial-root"
+ mode: 0755
+ remote_src: yes
+ become: yes
+
+- name: systemd
+ copy:
+ src: "/tmp/docker-no-trivial-root_{{ ansible_architecture }}/systemd/docker-no-trivial-root.service"
+ dest: "/etc/systemd/system/docker-no-trivial-root.service"
+ remote_src: yes
+ become: yes
+
+- name: Enable service
+ systemd:
+ name: docker-no-trivial-root
+ enabled: yes
+ become: yes
+
+- name: Copy service to
+ copy:
+ src: /lib/systemd/system/docker.service
+ dest: /etc/systemd/system/docker.service
+ remote_src: yes
+ become: yes
+
+- name: Enable plugin via command line
+ lineinfile:
+ path: /etc/systemd/system/docker.service
+ regexp: '^(ExecStart=.*dockerd) (.*)$'
+ line: '\1 --authorization-plugin=no-trivial-root \2'
+ backrefs: yes
+ become: yes
diff --git a/docker-nvidia/meta/main.yml b/docker-nvidia/meta/main.yml
new file mode 100644
index 0000000..eec3550
--- /dev/null
+++ b/docker-nvidia/meta/main.yml
@@ -0,0 +1,3 @@
+---
+dependencies:
+ - { role: docker-ce }
diff --git a/docker-nvidia/tasks/main.yml b/docker-nvidia/tasks/main.yml
new file mode 100644
index 0000000..963e6bc
--- /dev/null
+++ b/docker-nvidia/tasks/main.yml
@@ -0,0 +1,19 @@
+---
+- name: Add nvidia-docker GPG apt-key
+ apt_key:
+ url: https://nvidia.github.io/nvidia-docker/gpgkey
+ id: C95B321B61E88C1809C4F759DDCAE044F796ECB0
+ become: yes
+
+- name: Add nvidia-docker repository in /etc/apt/sources.list.d
+ get_url:
+ url: "https://nvidia.github.io/nvidia-docker/{{ ansible_distribution | lower }}{{ ansible_distribution_version }}//nvidia-docker.list"
+ dest: /etc/apt/sources.list.d/nvidia-docker.list
+ checksum: sha256:1727985494fbd19e3b963880d15117487435cbabef4e295484111f003cf03d41
+ become: yes
+
+- name: Update and install nvidia-container-toolkit
+ apt:
+ name: nvidia-container-toolkit
+ update_cache: yes
+ become: yes