Add 'roles/ensure_podman/' from commit 'f1fc80e5dec185363d9a4cc630e8c61769fbf766'

git-subtree-dir: roles/ensure_podman
git-subtree-mainline: 60a96a7c97
git-subtree-split: f1fc80e5de

roles/ensure_podman/tasks/main.yml

@@ -0,0 +1,86 @@
+---
+# tasks file for ensure_podman
+- name: 'include variables'
+  when:
+    - ansible_facts["system"] == 'Linux'
+  include_vars:
+    file: '{{ lookup("first_found", findme ) }}'
+    name: 'ensure_podman'
+  vars:
+    findme:
+      files:
+        - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
+        - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
+        - '{{ ansible_facts["distribution"] }}-default.yml'
+        - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
+        - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
+        - '{{ ansible_facts["os_family"] }}-default.yml'
+        - 'default.yml'
+      paths:
+        - '../vars/'
+      errors: 'ignore'
+- name: 'package discovery'
+  when:
+    - ansible_facts["system"] == 'Linux'
+    - ansible_facts["packages"] is not defined
+  ansible.builtin.package_facts:
+- name: 'service discovery'
+  when:
+    - ansible_facts["system"] == 'Linux'
+    - ansible_facts["services"] is not defined
+  ansible.builtin.service_facts:
+- name: 'ensure packages'
+  when:
+    - ansible_facts["system"] == 'Linux'
+    - ensure_podman is defined
+    - ensure_podman.package_list is defined
+    - ensure_podman.package_list is iterable
+  ansible.builtin.package:
+    name: '{{ item.name }}'
+    state: '{{ item.state }}'
+  loop: '{{ ensure_podman.package_list }}'
+  loop_control:
+    label: '{{ item.name }} will be {{ item.state }}'
+  notify:
+    - 'ensure_podman.package_facts'
+    - 'ensure_podman.service_facts'
+- name: 'ensure services'
+  when:
+    - ansible_facts["system"] == 'Linux'
+    - ensure_podman is defined
+    - ensure_podman.service_list is defined
+    - ensure_podman.service_list is iterable
+  ansible.builtin.service:
+    enabled: '{{ item.enabled }}'
+    name: '{{ item.name }}'
+    state: '{{ item.state }}'
+  loop: '{{ ensure_podman.service_list }}'
+  loop_control:
+    label: '{{ item.name }} will be {{ item.state }}'
+  notify:
+    - 'ensure_podman.package_facts'
+    - 'ensure_podman.service_facts'
+- name: 'Ensure cgroup v2 have not been disabled'
+  when:
+    - ansible_facts["system"] == 'Linux'
+    - ensure_podman is defined
+    - ansible_facts["distribution"] == 'Fedora'
+    - ansible_facts["distribution_major_version"] is version('32', '>=')
+    - ansible_cmdline is defined
+    - ansible_cmdline['systemd.unified_cgroup_hierarchy'] is defined
+  shell:
+    cmd: |
+      grubby --update-kernel=ALL --remove-args=systemd.unified_cgroup_hierarchy=0
+- name: 'Reboot to disable cgroups v1'
+  when:
+    - ansible_facts["system"] == 'Linux'
+    - ensure_podman is defined
+    - ansible_facts["distribution"] == 'Fedora'
+    - ansible_facts["distribution_major_version"] is version('32', '>=')
+    - ansible_cmdline is defined
+    - ansible_cmdline['systemd.unified_cgroup_hierarchy'] is defined
+  reboot:
+- name: 'flush handlers'
+  meta: 'flush_handlers'
+...
+