Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/ansibleguy/infra_docker_minimal
Ansible Role to provision Docker
https://github.com/ansibleguy/infra_docker_minimal
ansible ansible-role automation docker iac infrastructure-as-code
Last synced: about 1 month ago
JSON representation
Ansible Role to provision Docker
- Host: GitHub
- URL: https://github.com/ansibleguy/infra_docker_minimal
- Owner: ansibleguy
- License: other
- Created: 2021-10-05T21:02:23.000Z (over 3 years ago)
- Default Branch: latest
- Last Pushed: 2024-08-18T12:50:57.000Z (6 months ago)
- Last Synced: 2024-08-18T13:57:51.230Z (6 months ago)
- Topics: ansible, ansible-role, automation, docker, iac, infrastructure-as-code
- Homepage:
- Size: 65.4 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE.txt
Awesome Lists containing this project
README
# Ansible Role - Docker Setup
Ansible Role to deploy a basic docker installation on a linux server.
[](https://github.com/ansibleguy/_meta_cicd/blob/latest/templates/usr/local/bin/cicd/molecule.sh.j2)
[](https://github.com/ansibleguy/_meta_cicd/blob/latest/templates/usr/local/bin/cicd/yamllint.sh.j2)
[](https://github.com/ansibleguy/_meta_cicd/blob/latest/templates/usr/local/bin/cicd/pylint.sh.j2)
[](https://github.com/ansibleguy/_meta_cicd/blob/latest/templates/usr/local/bin/cicd/ansiblelint.sh.j2)
[](https://galaxy.ansible.com/ui/standalone/roles/ansibleguy/infra_docker_minimal)
**Tested:**
* Debian 11
* Debian 12
----
## Install
```bash
# latest
ansible-galaxy role install git+https://github.com/ansibleguy/infra_docker_minimal
# from galaxy
ansible-galaxy install ansibleguy.infra_docker_minimal
# or to custom role-path
ansible-galaxy install ansibleguy.infra_docker_minimal --roles-path ./roles
```
----
## Advertisement
* Need **professional support** using Ansible or Docker? Contact us:
E-Mail: [[email protected]](mailto:[email protected])
Tel: [+43 3115 40 900 0](tel:+433115409000)
Web: [EN](https://www.o-x-l.com) | [DE](https://www.oxl.at)
Language: German or English
* You want a simple **Ansible GUI**?
Check-out this [Ansible WebUI](https://github.com/ansibleguy/webui)
----
## Usage
### Config
You can configure docker using the 'docker' variable/dictionary.
```yaml
docker:
tcp:
enable: true # enable docker-service listening on tcp
bind: '0.0.0.0'
compose:
enable: true # install docker-compose
plugin: true # default; install docker-compose-plugin ('docker compose' instead of 'docker-compose')
tls:
enable: true
cert: '/etc/ssl/certs/docker.crt'
key: '/etc/ssl/private/docker.pem'
# ca: '/etc/ssl/certs/docker.ca.crt'
# verify_client: true
nftables:
clean: true # set bridge_none, disable_iptables and reload to true
bridge_none: false # set bridge=none argument on docker-startup
disable_iptables: false # set iptables=false argument on docker-startup
reload: false # reload nftables after a docker.service restart to remove its auto-added iptables-rules
```
### Execution
Run the playbook:
```bash
ansible-playbook -K -D -i inventory/hosts.yml playbook.yml
```
----
## Functionality
To keep it short => it will set-up docker like described [here](https://docs.docker.com/engine/install/debian/).
There is also an option to install docker-compose on the target host.
* **Package installation**
* Docker prerequisites
* Docker base-packages
* **Default opt-outs**:
* docker-compose
* **Default opt-ins**:
* docker server component (_else only client will be installed_)
----
## Info
* **Note:** This role currently only supports debian-based systems
* **Note:** If you are using [NFTables](https://netfilter.org/projects/nftables/index.html) you will have problems running docker.
Docker does not support NFTables natively. The 'docker-ce'/'docker-ce-cli' package has IPTables set as its dependency.
One CAN keep the NFTables ruleset clean when running docker with the parameter 'iptables=false'. It is even cleaner if 'bridge=none' is set!
After that only a few IPTables rules are added. To completely eliminate this docker-ruleset one needs to reload NFTables whenever docker is restarted.
This Ansible role lets you configure this behaviour as can be seen in the example below!
If you use NFTables you might also want to look into the [ansibleguy.infra_nftables](https://github.com/ansibleguy/infra_nftables) role!