2ab88e6990
Use the modern deb822 format [1] for Apt repositories on Ubuntu the same way as in OpenStack Kolla projects, for example in Kayobe [2]. Also this change refactor usage of the deprecated [3] apt-key tool. [1] https://manpages.ubuntu.com/manpages/jammy/en/man5/sources.list.5.html#deb822-style%20format [2] I3f821937b0930a0ac9341178de7ae5123d82b957 [3] https://manpages.ubuntu.com/manpages/jammy/en/man8/apt-key.8.html#deprecation Change-Id: Ic3dd0ce30a8436406a451276bbd94cb5f6f33f9d Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
69 lines
2.5 KiB
YAML
69 lines
2.5 KiB
YAML
---
|
|
# APT cache TTL in seconds.
|
|
apt_cache_valid_time: 3600
|
|
|
|
# Whether to enable a package repository for Docker.
|
|
enable_docker_repo: "{% if ansible_facts.distribution == 'openEuler' %}false{% else %}true{% endif %}"
|
|
|
|
# Docker APT repository configuration.
|
|
docker_apt_url: "https://download.docker.com/linux/{{ ansible_facts.distribution | lower }}"
|
|
docker_apt_key_file: "gpg"
|
|
docker_apt_package: "docker-ce"
|
|
docker_apt_package_pin: ""
|
|
|
|
# Docker Yum repository configuration.
|
|
docker_yum_url: "https://download.docker.com/linux/centos"
|
|
docker_yum_baseurl: "{{ docker_yum_url }}/$releasever/$basearch/stable"
|
|
docker_yum_gpgkey: "{{ docker_yum_url }}/gpg"
|
|
docker_yum_gpgcheck: true
|
|
docker_yum_package: "{% if ansible_facts.distribution == 'openEuler' %}docker{{ '-' + docker_yum_package_pin if (docker_yum_package_pin | length > 0) else '' }}{% else %}docker-ce{{ '-' + docker_yum_package_pin if (docker_yum_package_pin | length > 0) else '' }}{% endif %}"
|
|
docker_yum_package_pin: ""
|
|
|
|
# List of packages to install.
|
|
docker_packages:
|
|
- "{{ docker_apt_package if ansible_facts.os_family == 'Debian' else docker_yum_package }}"
|
|
- "{% if ansible_facts.os_family == 'Debian' %}apparmor{% endif %}"
|
|
- "{% if not docker_disable_default_iptables_rules | bool %}iptables{% endif %}"
|
|
|
|
docker_storage_driver: ""
|
|
docker_custom_config: "{% if ansible_facts.distribution == 'openEuler' %}{\"exec-opts\": [\"native.umask=normal\"]}{% else %}{}{% endif %}"
|
|
|
|
docker_http_proxy: ""
|
|
docker_https_proxy: ""
|
|
docker_no_proxy: ""
|
|
|
|
docker_log_max_file: "5"
|
|
docker_log_max_size: "50m"
|
|
|
|
# Docker networking options
|
|
docker_disable_default_iptables_rules: "yes"
|
|
docker_disable_default_network: "{{ docker_disable_default_iptables_rules }}"
|
|
docker_disable_ip_forward: "{{ docker_disable_default_iptables_rules }}"
|
|
|
|
docker_runtime_directory: ""
|
|
|
|
# NOTE(mnasiadka): Lower 1073741816 nofile limit on EL9 (RHEL9/CentOS Stream 9/Rocky Linux 9)
|
|
docker_ulimit_nofile: "{{ ansible_facts.os_family == 'RedHat' and ansible_facts.distribution_major_version == '9' }}"
|
|
docker_ulimit_nofile_hard: 1048576
|
|
docker_ulimit_nofile_soft: 1048576
|
|
|
|
# URL of docker registry
|
|
docker_registry:
|
|
docker_registry_insecure: false
|
|
|
|
# Path to a CA file for Docker registry
|
|
docker_registry_ca:
|
|
|
|
# URL of docker registry mirror
|
|
docker_registry_mirrors: []
|
|
|
|
# Whether to configure Docker and containerd for Zun.
|
|
docker_configure_for_zun: false
|
|
containerd_configure_for_zun: "{{ docker_configure_for_zun | bool }}"
|
|
|
|
# Whether to restart docker systemd unit or reload
|
|
docker_systemd_reload: false
|
|
|
|
# Whether to enable debug logging
|
|
docker_debug: false
|