mirror of
https://codeberg.org/scottslowe/learning-tools.git
synced 2026-03-11 09:04:37 +00:00
f77e9928b5
Update etcd-backed Docker Swarm environment with Ubuntu and Photon. Switch from shell provisioning to Ansible. Update Vagrantfile to use new techniques pioneered in other environments. Switch away from meta-data/user-data for Photon customization, use Ansible instead. Signed-off-by: Scott S. Lowe <scott.lowe@scottlowe.org>
60 lines
1.3 KiB
YAML
60 lines
1.3 KiB
YAML
---
|
|
- hosts: "all"
|
|
become: "yes"
|
|
remote_user: "vagrant"
|
|
|
|
tasks:
|
|
- name: "Copy Docker TCP socket file"
|
|
copy:
|
|
src: "docker-tcp.socket"
|
|
dest: "/etc/systemd/system/docker-tcp.socket"
|
|
owner: "root"
|
|
group: "root"
|
|
mode: "0644"
|
|
|
|
- name: "Copy Docker socket file"
|
|
copy:
|
|
src: "docker.socket"
|
|
dest: "/lib/systemd/system/docker.socket"
|
|
owner: "root"
|
|
group: "root"
|
|
mode: "0644"
|
|
|
|
- name: "Copy Docker TCP socket file"
|
|
copy:
|
|
src: "docker.service"
|
|
dest: "/lib/systemd/system/docker.service"
|
|
owner: "root"
|
|
group: "root"
|
|
mode: "0644"
|
|
|
|
- name: "Enable Docker TCP socket"
|
|
service:
|
|
name: "docker-tcp.socket"
|
|
enabled: "yes"
|
|
state: "started"
|
|
|
|
- name: "Enable Docker socket"
|
|
service:
|
|
name: "docker.socket"
|
|
enabled: "yes"
|
|
state: "started"
|
|
|
|
- name: "Configure iptables to allow ICMP"
|
|
iptables:
|
|
chain: "INPUT"
|
|
source: "192.168.100.0/24"
|
|
protocol: "icmp"
|
|
jump: "ACCEPT"
|
|
|
|
- name: "Configure iptables to allow Docker traffic"
|
|
iptables:
|
|
chain: "INPUT"
|
|
source: "192.168.100.0/24"
|
|
protocol: "tcp"
|
|
match: "tcp"
|
|
destination_port: "{{ item }}"
|
|
jump: "ACCEPT"
|
|
with_items:
|
|
- "2375"
|
|
- "4000"
|