Yi-Ting Shih
46b2e1d4b1
All checks were successful
Ansible Playbook lint / ansible-lint (push) Successful in 16s
143 lines
3.3 KiB
YAML
143 lines
3.3 KiB
YAML
---
|
|
- name: Run ./configure
|
|
tags: [make]
|
|
ansible.builtin.command: >-
|
|
./configure
|
|
--with-baseurl={{ domserver_url }}
|
|
--prefix={{ domjudge_base_dir }}
|
|
args:
|
|
chdir: "{{ domjudge_base_dir }}"
|
|
become: true
|
|
become_user: domjudge
|
|
changed_when: true
|
|
register: debug
|
|
- name: Debug
|
|
tags: [make]
|
|
ansible.builtin.debug:
|
|
var: debug.stdout_lines
|
|
|
|
- name: Run make judgehost
|
|
tags: [make]
|
|
ansible.builtin.command: |
|
|
make judgehost
|
|
args:
|
|
chdir: "{{ domjudge_base_dir }}"
|
|
become: true
|
|
become_user: domjudge
|
|
changed_when: true
|
|
register: debug
|
|
- name: Debug
|
|
tags: [make]
|
|
ansible.builtin.debug:
|
|
var: debug.stdout_lines
|
|
|
|
- name: Run make install-judgehost
|
|
tags: [make]
|
|
ansible.builtin.command: |
|
|
make install-judgehost
|
|
args:
|
|
chdir: "{{ domjudge_base_dir }}"
|
|
notify:
|
|
- Systemd daemon-reload
|
|
changed_when: true
|
|
register: debug
|
|
- name: Debug
|
|
tags: [make]
|
|
ansible.builtin.debug:
|
|
var: debug.stdout_lines
|
|
|
|
- name: Create domjudge-run group
|
|
tags: [make]
|
|
ansible.builtin.group:
|
|
name: domjudge-run
|
|
|
|
- name: Add domjudge-run user
|
|
tags: [make]
|
|
ansible.builtin.user:
|
|
name: domjudge-run
|
|
home: /nonexistent
|
|
group: domjudge-run
|
|
shell: /bin/false
|
|
|
|
- name: Add domjudge-run-0 user
|
|
tags: [make]
|
|
ansible.builtin.user:
|
|
name: domjudge-run-0
|
|
home: /nonexistent
|
|
group: domjudge-run
|
|
shell: /bin/false
|
|
|
|
- name: Copy sudoers-domjudge
|
|
tags: [make]
|
|
ansible.builtin.copy:
|
|
src: "{{ domjudge_base_dir }}/etc/sudoers-domjudge"
|
|
dest: /etc/sudoers.d/sudoers-domjudge
|
|
remote_src: true
|
|
mode: '0440'
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Run misc-tools/dj_make_chroot
|
|
tags: [chroot]
|
|
ansible.builtin.command: |
|
|
./misc-tools/dj_make_chroot -i kotlin
|
|
args:
|
|
chdir: "{{ domjudge_base_dir }}"
|
|
creates: /chroot/domjudge
|
|
|
|
- name: Modify boot options
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/default/grub
|
|
regexp: '^GRUB_CMDLINE_LINUX_DEFAULT='
|
|
line: >-
|
|
GRUB_CMDLINE_LINUX_DEFAULT="quiet
|
|
cgroup_enable=memory swapaccount=1 isolcpus=0
|
|
systemd.unified_cgroup_hierarchy=0"
|
|
notify:
|
|
- Update grub
|
|
- Reboot
|
|
- name: Flush handlers
|
|
ansible.builtin.meta: flush_handlers
|
|
|
|
- name: Fetch judgehost password
|
|
tags: [make]
|
|
community.docker.docker_compose_v2_exec:
|
|
project_src: "{{ domjudge_base_dir }}"
|
|
service: domserver
|
|
command: >-
|
|
sed -nr 's/^.*\W+judgehost\W+(.+)$/\1/p'
|
|
/opt/domjudge/domserver/etc/restapi.secret
|
|
delegate_to: "{{ groups['domserver'] | first }}"
|
|
run_once: true
|
|
register: fetch_reg
|
|
- name: Set judgehost facts
|
|
tags: [make]
|
|
ansible.builtin.set_fact:
|
|
domserver_url: "{{ domserver_url }}"
|
|
judgehost_password: "{{ fetch_reg['stdout'] }}"
|
|
run_once: true
|
|
- name: Show judgehost password
|
|
tags: [make]
|
|
ansible.builtin.debug:
|
|
var: judgehost_password
|
|
- name: Install restapi.secret
|
|
tags: [make]
|
|
ansible.builtin.copy:
|
|
content: >-
|
|
default {{ domserver_url }}/api judgehost {{ judgehost_password }}
|
|
dest: "{{ domjudge_base_dir }}/judgehost/etc/restapi.secret"
|
|
mode: '0640'
|
|
owner: domjudge
|
|
group: domjudge
|
|
|
|
- name: Flush handlers
|
|
tags: [make]
|
|
ansible.builtin.meta: flush_handlers
|
|
|
|
- name: Enable and start domjudge-judgehost.target
|
|
tags: [make]
|
|
ansible.builtin.systemd_service:
|
|
name: domjudge-judgehost.target
|
|
state: started
|
|
enabled: true
|