--- - hosts: localhost gather_facts: false vars: # Получаем preset из переменной окружения или используем default preset_name: "{{ lookup('env', 'MOLECULE_PRESET') | default('default') }}" preset_file: "/workspace/molecule/presets/{{ preset_name }}.yml" # Fallback значения если preset файл не найден docker_network: labnet generated_inventory: "{{ molecule_ephemeral_directory }}/inventory/hosts.ini" images: alt9: "inecs/ansible-lab:alt9-latest" alt10: "inecs/ansible-lab:alt10-latest" astra: "inecs/ansible-lab:astra-linux-latest" rhel: "inecs/ansible-lab:rhel-latest" centos: "inecs/ansible-lab:centos-latest" alma: "inecs/ansible-lab:alma-latest" rocky: "inecs/ansible-lab:rocky-latest" redos: "inecs/ansible-lab:redos-latest" ubuntu: "inecs/ansible-lab:ubuntu-latest" debian: "inecs/ansible-lab:debian-latest" systemd_defaults: privileged: true command: "/sbin/init" volumes: - "/sys/fs/cgroup:/sys/fs/cgroup:rw" tmpfs: ["/run", "/run/lock"] capabilities: ["SYS_ADMIN"] hosts: - name: u1 family: debian groups: [test] tasks: # - name: Install required collections # command: ansible-galaxy collection install -r /workspace/requirements.yml # delegate_to: localhost # ignore_errors: true # register: collections_install # changed_when: false # run_once: true # become: true # vars: # ansible_python_interpreter: /usr/bin/python3 # environment: # ANSIBLE_COLLECTIONS_PATH: /usr/share/ansible/collections # Определяем архитектуру системы для корректной загрузки образов - name: Detect system architecture shell: | arch=$(uname -m) case $arch in x86_64) echo "linux/amd64" ;; aarch64|arm64) echo "linux/arm64" ;; armv7l) echo "linux/arm/v7" ;; *) echo "linux/amd64" ;; esac register: detected_platform changed_when: false - name: Set ansible_architecture variable set_fact: ansible_architecture: "{{ detected_platform.stdout }}" - name: Load preset configuration include_vars: "{{ preset_file }}" when: preset_file is file ignore_errors: true # Фильтрация хостов по поддерживаемым платформам - name: Filter hosts by supported platforms set_fact: filtered_hosts: "{{ filtered_hosts | default([]) + [item] }}" loop: "{{ hosts }}" when: | item.supported_platforms is not defined or ansible_architecture in item.supported_platforms - name: Update hosts list with filtered results set_fact: hosts: "{{ filtered_hosts | default(hosts) }}" - name: Display filtered hosts debug: msg: "Platform {{ ansible_architecture }}: {{ hosts | length }} hosts will be deployed" - name: Ensure network exists community.docker.docker_network: name: "{{ docker_network }}" state: present # SYSTEMD nodes - name: Pull systemd images with correct platform command: "docker pull --platform {{ ansible_architecture }} {{ images[item.family] }}" loop: "{{ hosts | selectattr('type','undefined') | list }}" loop_control: { label: "{{ item.name }}" } when: item.family is defined and images[item.family] is defined register: pull_result ignore_errors: yes - name: Display pull results debug: msg: "Pulled {{ item.item.name }}: {{ 'OK' if (item.rc is defined and item.rc == 0) else 'SKIPPED (not available for this platform)' }}" loop: "{{ pull_result.results | default([]) }}" loop_control: label: "{{ item.item.name }}" - name: Start systemd nodes community.docker.docker_container: name: "{{ item.name }}" image: "{{ images[item.family] }}" networks: - name: "{{ docker_network }}" privileged: "{{ systemd_defaults.privileged }}" command: "{{ systemd_defaults.command }}" volumes: "{{ systemd_defaults.volumes | default([]) + (item.volumes | default([])) }}" tmpfs: "{{ systemd_defaults.tmpfs | default([]) }}" capabilities: "{{ systemd_defaults.capabilities | default([]) }}" published_ports: "{{ item.publish | default([]) }}" env: "{{ item.env | default({}) }}" # Специальные настройки для Astra Linux и RedOS (для совместимости с amd64 базовыми образами) security_opts: "{{ ['seccomp=unconfined', 'apparmor=unconfined'] if item.family in ['astra', 'redos'] else [] }}" platform: "{{ 'linux/amd64' if item.family in ['astra', 'redos'] else omit }}" state: started restart_policy: unless-stopped loop: "{{ hosts | selectattr('type','undefined') | list }}" loop_control: { label: "{{ item.name }}" } when: item.family is defined and images[item.family] is defined # Ожидание стабилизации контейнеров - name: Wait for containers to be ready pause: seconds: 5 when: hosts | length > 0 # Создание tmp директории в контейнерах - name: Create Ansible tmp directory in containers community.docker.docker_container_exec: container: "{{ item.name }}" command: "mkdir -p /tmp/.ansible-tmp && chmod 755 /tmp/.ansible-tmp" loop: "{{ hosts | selectattr('type','undefined') | list }}" loop_control: { label: "{{ item.name }}" } when: item.family is defined and images[item.family] is defined ignore_errors: true retries: 3 delay: 2 # DinD nodes - name: Start DinD nodes (docker:27-dind) community.docker.docker_container: name: "{{ item.name }}" image: "docker:27-dind" networks: - name: "{{ docker_network }}" privileged: true env: DOCKER_TLS_CERTDIR: "" published_ports: "{{ item.publish | default([]) }}" volumes: "{{ (item.volumes | default([])) + [item.name + '-docker:/var/lib/docker'] }}" state: started restart_policy: unless-stopped loop: "{{ hosts | selectattr('type','defined') | selectattr('type','equalto','dind') | list }}" loop_control: { label: "{{ item.name }}" } # DOoD nodes (mount docker.sock) - name: Start DOoD nodes (systemd + docker.sock mount) community.docker.docker_container: name: "{{ item.name }}" image: "{{ images[item.family] }}" networks: - name: "{{ docker_network }}" privileged: "{{ systemd_defaults.privileged }}" command: "{{ systemd_defaults.command }}" volumes: "{{ (systemd_defaults.volumes | default([])) + ['/var/run/docker.sock:/var/run/docker.sock'] + (item.volumes | default([])) }}" tmpfs: "{{ systemd_defaults.tmpfs | default([]) }}" capabilities: "{{ systemd_defaults.capabilities | default([]) }}" published_ports: "{{ item.publish | default([]) }}" env: "{{ item.env | default({}) }}" state: started restart_policy: unless-stopped loop: "{{ hosts | selectattr('type','defined') | selectattr('type','equalto','dood') | list }}" loop_control: { label: "{{ item.name }}" } when: item.family is defined and images[item.family] is defined # Build groups map - name: Initialize groups map set_fact: groups_map: {} - name: Append hosts to groups set_fact: groups_map: "{{ groups_map | combine({ item_group: (groups_map[item_group] | default([])) + [item_name] }) }}" loop: "{{ hosts | subelements('groups', skip_missing=True) }}" loop_control: label: "{{ item.0.name }}" vars: item_name: "{{ item.0.name }}" item_group: "{{ item.1 }}" # Render inventory - name: Render inventory ini set_fact: inv_content: | [all:vars] ansible_connection=community.docker.docker ansible_remote_tmp=/tmp/.ansible-tmp {% for group, members in (groups_map | dictsort) %} [{{ group }}] {% for h in members %}{{ h }} {% endfor %} {% endfor %} [all] {% for h in hosts %}{{ h.name }} {% endfor %} {# Группа с Debian-based системами (Debian, Ubuntu, Alt) - используем /usr/bin/python3 #} {% set debian_hosts = [] %} {% for h in hosts %} {% if h.family in ['ubuntu', 'debian', 'alt'] %} {% set _ = debian_hosts.append(h.name) %} {% endif %} {% endfor %} {% if debian_hosts %} [debian_family:vars] ansible_python_interpreter=/usr/bin/python3 [debian_family] {% for h in debian_hosts %}{{ h }} {% endfor %} {% endif %} {# Группа с RHEL-based системами (RHEL, CentOS, Alma, Rocky, RedOS) #} {% set rhel_hosts = [] %} {% for h in hosts %} {% if h.family in ['rhel', 'centos', 'alma', 'rocky', 'redos'] %} {% set _ = rhel_hosts.append(h.name) %} {% endif %} {% endfor %} {% if rhel_hosts %} [rhel_family:vars] ansible_python_interpreter=/usr/bin/python3 [rhel_family] {% for h in rhel_hosts %}{{ h }} {% endfor %} {% endif %} {# Astra Linux - используем /usr/bin/python3 #} {% set astra_hosts = [] %} {% for h in hosts %} {% if h.family == 'astra' %} {% set _ = astra_hosts.append(h.name) %} {% endif %} {% endfor %} {% if astra_hosts %} [astra_family:vars] ansible_python_interpreter=/usr/bin/python3 [astra_family] {% for h in astra_hosts %}{{ h }} {% endfor %} {% endif %} {# Глобальный fallback для остальных хостов #} [unmatched_hosts:vars] ansible_python_interpreter=auto_silent - name: Write inventory file copy: dest: "{{ generated_inventory }}" content: "{{ inv_content }}" mode: "0644" - name: Display inventory summary debug: msg: | 📋 Inventory Summary: - Total hosts: {{ hosts | length }} - Groups: {{ groups_map.keys() | list | join(', ') }} - Systemd nodes: {{ hosts | selectattr('type','undefined') | list | length }} - DinD nodes: {{ hosts | selectattr('type','defined') | selectattr('type','equalto','dind') | list | length }} - DOoD nodes: {{ hosts | selectattr('type','defined') | selectattr('type','equalto','dood') | list | length }}