Skip to content
Snippets Groups Projects
Select Git revision
  • ec708a876d2466a231852324b9d518ad1640dd7b
  • master default protected
  • archivematica_support
  • extended_maintenance
  • fix_autocomplete
5 results

prepare.yml

Blame
  • prepare.yml 4.05 KiB
    ---
    - name: Prepare
      hosts: "*"
      pre_tasks:
        - name: configure additional package repositories for Debian
          when: ansible_os_family == "Debian"
          block:
            - name: install GPG
              ansible.builtin.apt:
                name: "gnupg"
                state: latest
                update_cache: true
              become: true
            - name: modify package repo config
              ansible.builtin.deb822_repository:
                architectures: "amd64"
                components: "{{ item.components | default('main') }}"
                enabled: "{{ item.enabled | default(true) }}"
                name: "{{ item.name }}"
                pdiffs: true
                signed_by: "{{ item.signed_by }}"
                suites: "{{ item.suites | default(ansible_lsb.codename) }}"
                uris: "{{ item.uris }}"
              loop:
                # PC @steidl with local Debian repo for SubAp tests
                - name: "bdv141"
                  signed_by: "http://bdv141.slub-dresden.de/deb-repository/pub.gpg.key"
                  suites: "lza-testing"
                  uris: "http://bdv141.slub-dresden.de/deb-repository"
                # on-prem Debian Repo
                - name: "slub"
                  signed_by: "https://sdvdebianrepo.slub-dresden.de/deb-repository/pub.gpg.key"
                  uris: "https://sdvdebianrepo.slub-dresden.de/deb-repository"
                # add non-free repos to be able to install libmath-random-perl from official Debian public repo
                - name: "debian"
                  components: ["main", "non-free"]
                  signed_by: "/usr/share/keyrings/debian-archive-keyring.gpg"
                  suites: ["{{ ansible_lsb.codename }}", "{{ ansible_lsb.codename }}-updates"]
                  uris: "http://deb.debian.org/debian"
              notify: update package cache
              become: true
    
        - name: configure additional package repositories for RedHat
          when: ansible_os_family == "RedHat"
          block:
            - name: add custom repositories
              ansible.builtin.yum_repository:
                name: "{{ item.name }}"
                description: "{{ item.description }}"
                baseurl: "{{ item.baseurl }}"
                gpgcheck: "{{ item.gpgcheck | default('true') }}"
                gpgkey: "{{ item.gpgkey | default(omit) }}"
              loop:
                - name: "epel"
                  description: EPEL YUM repo
                  baseurl: "https://download.fedoraproject.org/pub/epel/{{ ansible_distribution_major_version }}/x86_64/"
                  gpgkey: "https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-{{ ansible_distribution_major_version }}"
                - name: "slub"
                  description: SLUB YUM repo
                  baseurl: "https://sdvrhelrepo.slub-dresden.de/"
                  gpgcheck: "false"
              notify: update package cache
            - name: remove legacy repo configuration to avoid double configuration for SLUB repo
              ansible.builtin.file:
                path: "/etc/yum.repos.d/SLUB.repo"
                state: absent
              notify: update package cache
    
        # Ansible roles can install a multitude of firewall rules, some of which
        # will lock us out of our Molecule test VM if we don't take precautions.