oswald-runner

ansible/plays/machine_setup/oswald-runner.yml

@@ -0,0 +1,85 @@
+---
+- name: Set up oswald-runner
+  hosts: oswald-runner
+  become: yes
+  tasks:
+    - name: default_packages
+      ansible.builtin.include_tasks: ../../templates/default_packages.yml
+
+    - name: create_user
+      ansible.builtin.include_tasks: ../../templates/create_user.yml
+      vars:
+        username: nick
+        github_user: Chewbaccalakis
+
+    - name: create runner user
+      ansible.builtin.user:
+        name: runner
+        shell: /bin/bash
+        create_home: yes
+
+    - name: Install Docker
+      block:
+
+        - name: Install Docker repository dependencies
+          ansible.builtin.apt:
+            name:
+              - ca-certificates
+              - curl
+            state: present
+            update_cache: true
+
+        - name: Create Docker keyrings directory
+          ansible.builtin.file:
+            path: /etc/apt/keyrings
+            state: directory
+            mode: "0755"
+
+        - name: Download Docker GPG key
+          ansible.builtin.get_url:
+            url: https://download.docker.com/linux/debian/gpg
+            dest: /etc/apt/keyrings/docker.asc
+            mode: "0644"
+
+        - name: Add Docker repository
+          ansible.builtin.deb822_repository:
+            name: docker
+            types: deb
+            uris: https://download.docker.com/linux/debian
+            suites: "{{ ansible_facts.distribution_release }}"
+            components:
+              - stable
+            architectures:
+              - "{{ ansible_facts.architecture }}"
+            signed_by: /etc/apt/keyrings/docker.asc
+            state: present
+            enabled: true
+
+        - name: Install Docker Engine
+          ansible.builtin.apt:
+            name:
+              - docker-ce
+              - docker-ce-cli
+              - containerd.io
+              - docker-buildx-plugin
+              - docker-compose-plugin
+            state: present
+            update_cache: true
+
+        - name: Ensure Docker is running
+          ansible.builtin.service:
+            name: docker
+            state: started
+            enabled: true
+
+        - name: Ensure docker group exists
+          ansible.builtin.group:
+            name: docker
+            state: present
+
+        - name: Add runner to docker group
+          ansible.builtin.user:
+            name: runner
+            groups:
+              - docker
+            append: true