automation/ansible/roles/common/tasks/setup-Debian.yml

   1 ---
   2 - name: Add LTTng-CI PPA
   3   when: ansible_distribution == 'Ubuntu'
   4   block:
   5     - name: LTTng-CI PPA | apt key
   6       ansible.builtin.copy:
   7         src: efficios_ubuntu_ci.gpg
   8         dest: /etc/apt/trusted.gpg.d/efficios_ubuntu_ci.gpg
   9         owner: root
  10         group: root
  11         mode: '0644'
  12
  13     - name: LTTng-CI PPA | apt source
  14       ansible.builtin.apt_repository:
  15         repo: "deb [signed-by=/etc/apt/trusted.gpg.d/efficios_ubuntu_ci.gpg] http://ppa.launchpad.net/efficios/ci/ubuntu {{ ansible_distribution_release }} main"
  16         state: present
  17         filename: efficios-ubuntu-ci
  18
  19 - name: Update apt cache.
  20   apt: update_cache=yes cache_valid_time=86400
  21
  22 - name: Ensure common packages are installed.
  23   apt: "name={{ common_packages }} state=present"
  24
  25 - name: Install unattended upgrades
  26   apt:
  27     name: 'unattended-upgrades'
  28     state:  "{{(unattended_upgrades|bool)|ternary('present', 'absent')}}"
  29
  30 - name: Enable extra repos for unattended upgrades
  31   template:
  32     dest: /etc/apt/apt.conf.d/51unattended_upgrades_extra_repos.conf
  33     src: unattended_upgrades_extra_repos.conf.j2
  34   vars:
  35     repos_base:
  36       - "${distro_id}:${distro_codename}-updates"
  37       - "${distro_id}:${distro_codename}-backports"
  38     repos_Ubuntu:
  39       - "LP-PPA-efficios-ci:${distro_codename}"
  40     repose_Debian: []
  41     repos: "{{repos_base|union(lookup('vars', 'repos_' + ansible_distribution, default=[]))}}"
  42
  43 - name: Enable unattended upgrades
  44   block:
  45     - copy:
  46         dest: /etc/apt/apt.conf.d/20auto-upgrades
  47         content: "APT::Periodic::Update-Package-Lists \"1\";\nAPT::Periodic::Unattended-Upgrade \"1\";\n"
  48       when: unattended_upgrades | bool
  49     - file:
  50         path: /etc/apt/apt.conf.d/20auto-upgrades
  51         state: "{{(unattended_upgrades|bool)|ternary('file', 'absent')}}"
  52         owner: root
  53         group: root
  54         mode: '0644'
  55 - name: Install microcode for physical hosts
  56   when: ansible_virtualization_role == 'host'
  57   block:
  58     - name: Install AMD microcode
  59       when: "'AuthenticAMD' in ansible_processor"
  60       ansible.builtin.apt:
  61         name: amd64-microcode
  62       register: amd64_microcode
  63     - name: Install Intel microcode
  64       when: "'GenuineIntel' in ansible_processor"
  65       ansible.builtin.apt:
  66         name: intel-microcode
  67       register: intel_microcode
  68     - name: Update initramfs
  69       when: amd64_microcode.changed or intel_microcode.changed
  70       ansible.builtin.command:
  71         argv: ['update-initramfs', '-u', '-k', 'all']
  72     - name: Set reboot required
  73       when: amd64_microcode.changed or intel_microcode.changed
  74       ansible.builtin.copy:
  75         dest: /var/run/reboot-required
  76         content: '*** System restart required ***'
  77         owner: root
  78         group: root
  79         mode: '0644'
  80 - name: Install prometheus node exporter for physical hosts
  81   when: "'hosts' in group_names"
  82   ansible.builtin.apt:
  83     name:
  84       - prometheus-node-exporter
  85       - prometheus-node-exporter-collectors
  86
  87 - name: Work-around for git hanging during checkouts
  88   # @see https://support.efficios.com/issues/1532
  89   when: ansible_distribution_release == 'bookworm'
  90   block:
  91     - name: Add bookworm-backports pref
  92       ansible.builtin.copy:
  93         dest: /etc/apt/preferences.d/bookworm-backports.pref
  94         content: "Package: curl libcurl3* libcurl4*\nPin: release n=bookworm-backports\nPin-Priority: 600\n"
  95     - name: Enable bookworm backports
  96       ansible.builtin.apt_repository:
  97         repo: 'deb http://deb.debian.org/debian bookworm-backports main'
  98     - ansible.builtin.apt:
  99         upgrade: 'yes'
 100     - name: Use HTTP/1.1 with git HTTP operations
 101       community.general.git_config:
 102         file: '/etc/gitconfig'
 103         name: 'http.version'
 104         value: 'HTTP/1.1'