vgcn/ansible/jenkins.yml at ddb42b0998c3957040561e211522a4a656a91701 · usegalaxy-eu/vgcn · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
---
- hosts: jenkins
  vars_files:
    - "group_vars/all.yml"
    - "group_vars/java.yml"
    - "group_vars/jenkins.yml"

  pre_tasks:
    - name: system update
      ansible.builtin.dnf:
        name: '*'
        state: latest
    - name: Install dependencies
      package:
        name:
          - git
          - virtualenv
          - python3
          - rsync
      become: true
      when: ansible_os_family == 'Debian'
    - name: Install dependencies
      package:
        name:
          - git
          - python3-virtualenv
          - python3
          - rsync
        state: present
      become: true
      when: ansible_os_family == 'RedHat' and ansible_distribution_major_version | int == 8
    - name: Install dependencies
      package:
        name:
          - git
          - libcurl-devel
          - python-devel
          - rsync
          - java-17-openjdk
          - python3.9
        state: present
      become: true
      when: ansible_os_family == 'RedHat' and ansible_distribution_major_version | int == 9
    - name: Set default version of Python
      ansible.builtin.alternatives:
        name: python
        path: /usr/bin/python3
        link: /usr/bin/python
    - name: Get Java version name
      ansible.builtin.find:
        path: /usr/lib/jvm
        recurse: false
        pattern: 'java-17-openjdk-17*'
      register: java17
    - name: Create a symbolic link for Java for Jenkins
      ansible.builtin.file:
        src: "{{ java17.files[0].path }}"
        dest: /usr/lib/jvm/java-17-openjdk
        owner: root
        group: root
        state: link
    - name: Ensure SELinux is set to enforcing mode
      ansible.builtin.lineinfile:
        path: /etc/selinux/config
        regexp: '^SELINUX='
        line: SELINUX=enforcing

  post_tasks:
    - name: Set default version of Java
      ansible.builtin.alternatives:
        name: java
        link: /usr/bin/java
        path: /usr/lib/jvm/java-17-openjdk/bin/java

    - name: Download packer
      ansible.builtin.command: yum-config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo

    - name: Extract packer
      ansible.builtin.yum:
        name: packer

    - name: Adding existing user centos to group kvm
      ansible.builtin.user:
        name: centos
        groups: kvm
        append: yes

    - name: Set authorized key taken from var
      ansible.posix.authorized_key:
        user: centos
        state: present
        key: "{{ jenkins_public_ssh_key }}"
    - name: DNF Autoremove
      ansible.builtin.dnf:
        autoremove: yes
        enablerepo: "*"
      when: ansible_os_family == 'RedHat'

  roles:
    - role: usegalaxy_eu.handy.os_setup
      vars:
        enable_powertools: true
        enable_install_software: true
        enable_grub: true
        enable_kernel_5: true

    - geerlingguy.repo-epel # Install EPEL
    - usegalaxy-eu.autoupdates  # keep all of our packages up to date
    - usegalaxy-eu.dynmotd
    - geerlingguy.java
    - geerlingguy.docker
    - influxdata.chrony
    - usegalaxy-eu.telegraf
    - galaxyproject.miniconda