Init

2024-03-03 05:37:23 +07:00
commit 1e742cb29c
88 changed files with 5051 additions and 0 deletions
@@ -0,0 +1,52 @@
+---
+
+- name: assert | Test bareos_repository_type
+  ansible.builtin.assert:
+    that:
+      - bareos_repository_type is defined
+      - bareos_repository_type in [ "community", "subscription" ]
+    quiet: yes
+
+- name: assert | Test bareos_repository_username
+  ansible.builtin.assert:
+    that:
+      - bareos_repository_username is defined
+      - bareos_repository_username is string
+      - bareos_repository_username != ""
+    quiet: yes
+  when:
+    - bareos_repository_type == "subscription"
+
+- name: assert | Test bareos_repository_password
+  ansible.builtin.assert:
+    that:
+      - bareos_repository_password is defined
+      - bareos_repository_password is string
+      - bareos_repository_password != ""
+    quiet: yes
+  when:
+    - bareos_repository_type == "subscription"
+
+- name: assert | Test bareos_repository_release
+  ansible.builtin.assert:
+    that:
+      - bareos_repository_release is defined
+      - bareos_repository_release in [ "current", "next", "release" ]
+    quiet: yes
+
+- name: assert | Test bareos_repository_version
+  ansible.builtin.assert:
+    that:
+      - bareos_repository_version is defined
+      - bareos_repository_version is number
+      - bareos_repository_version in [ 20, 21, 22, 23 ]
+    quiet: yes
+  when:
+    - bareos_repository_type == "subscription"
+
+- name: assert | Test bareos_repository_enable_tracebacks
+  ansible.builtin.assert:
+    that:
+      - bareos_repository_enable_tracebacks is defined
+      - bareos_repository_enable_tracebacks is boolean
+    quiet: yes
@@ -0,0 +1,150 @@
+---
+# tasks file for bareos_repository
+
+- name: Import assert.yml
+  ansible.builtin.import_tasks:
+    file: assert.yml
+  run_once: true
+  delegate_to: localhost
+
+- name: Add repository (rpm)
+  ansible.builtin.yum_repository:
+    name: "{{ item.name }}"
+    description: "{{ item.description }}"
+    baseurl: "{{ item.baseurl }}"
+    gpgcheck: yes
+    gpgkey: "{{ item.gpgkey }}"
+    username: "{{ item.username | default(omit) }}"
+    password: "{{ item.password | default(omit) }}"
+  no_log: true
+  loop: "{{ bareos_repository_list }}"
+  loop_control:
+    label: "{{ item.name }}"
+  when:
+    - ansible_pkg_mgr in [ "dnf", "yum" ]
+
+- name: Run tasks on apt based distributions
+  when:
+    - ansible_pkg_mgr in [ "apt" ]
+  block:
+    - name: Install CA certificates (apt)
+      ansible.builtin.package:
+        name: ca-certificates
+
+    - name: Download gpg key (apt)
+      ansible.builtin.get_url:
+        url: "{{ bareos_repository_gpg_key }}"
+        dest: /etc/apt/bareos.gpg
+        username: "{{ bareos_repository_username }}"
+        password: "{{ bareos_repository_password }}"
+        owner: root
+        group: root
+        mode: "0644"
+      no_log: true
+
+    - name: Place credentials file (apt)
+      ansible.builtin.copy:
+        content: |
+          machine download.bareos.com
+          login {{ bareos_repository_username }}
+          password {{ bareos_repository_password }}
+        dest: /etc/apt/auth.conf.d/download_bareos_com.conf
+        owner: root
+        group: root
+        mode: "0600"
+      no_log: true
+      when:
+        - bareos_repository_type == "subscription"
+
+    - name: Add repository (apt)
+      ansible.builtin.apt_repository:
+        repo: "{{ item.deb_repo }}"
+        state: present
+        filename: "{{ item.name }}"
+        update_cache: yes
+      no_log: true
+      loop: "{{ bareos_repository_list }}"
+      loop_control:
+        label: "{{ item.name }}"
+
+- name: Run tasks on zypper based distributions
+  when:
+    - ansible_pkg_mgr in [ "zypper" ]
+  block:
+    - name: Download gpg key (zypper)
+      ansible.builtin.get_url:
+        url: "{{ bareos_repository_gpg_key }}"
+        dest: /etc/gnupg/bareos.gpg
+        username: "{{ bareos_repository_username }}"
+        password: "{{ bareos_repository_password }}"
+        owner: root
+        group: root
+        mode: "0644"
+      no_log: true
+
+    - name: Import gpg key (zypper)
+      ansible.builtin.rpm_key:
+        key: /etc/gnupg/bareos.gpg
+
+    - name: Place credentials file (zypper)
+      ansible.builtin.copy:
+        content: |
+          username={{ bareos_repository_username }}
+          password={{ bareos_repository_password }}
+        dest: /etc/zypp/credentials.d/bareos
+        owner: root
+        group: root
+        mode: "0600"
+      no_log: true
+      when:
+        - bareos_repository_type == "subscription"
+
+    - name: Add repository (zypper)
+      community.general.zypper_repository:
+        name: "{{ item.name }}"
+        repo: "{{ item.repo }}"
+        state: present
+      loop: "{{ bareos_repository_list }}"
+      loop_control:
+        label: "{{ item.name }}"
+
+- name: Enable tracebacks
+  when:
+    - bareos_repository_enable_tracebacks
+  block:
+    - name: Add debuginfo repository (rpm)
+      ansible.builtin.yum_repository:
+        name: "{{ item.name }}"
+        description: "{{ item.description }}"
+        baseurl: "{{ item.baseurl }}"
+        gpgcheck: yes
+        gpgkey: "{{ item.gpgkey }}"
+        username: "{{ item.username | default(omit) }}"
+        password: "{{ item.password | default(omit) }}"
+      no_log: true
+      loop: "{{ bareos_repository_debug_list }}"
+      loop_control:
+        label: "{{ item.name }}"
+      when:
+        - ansible_pkg_mgr in [ "dnf", "yum" ]
+
+    - name: Add repository (zypper)
+      community.general.zypper_repository:
+        name: "{{ item.name }}"
+        repo: "{{ item.repo }}"
+        state: present
+      loop: "{{ bareos_repository_debug_list }}"
+      loop_control:
+        label: "{{ item.name }}"
+      when:
+        - ansible_pkg_mgr in [ "zypper" ]
+
+    - name: Install required packages
+      ansible.builtin.package:
+        name: "{{ bareos_repository_debug_required_packages }}"
+
+    - name: Disable ptrace_scope
+      ansible.posix.sysctl:
+        name: kernel.yama.ptrace_scope
+        value: "0"
+        sysctl_set: yes