stuttgart-things/deploy-podman-conatiner

deploys podman container (w/ option for permanent) on a target. all requirements will be installed (if not exists).

Role Requirements / Dependencies

sudo cat <<EOF > /tmp/requirements.yaml
roles:
- src: https://github.com/stuttgart-things/install-configure-podman.git
  scm: git
- src: https://github.com/stuttgart-things/install-configure-vault.git
  scm: git
- src: https://github.com/stuttgart-things/deploy-podman-container.git
  scm: git
- src: https://github.com/stuttgart-things/install-requirements.git
  scm: git
- src: https://github.com/stuttgart-things/generate-selfsigned-certs.git
  scm: git
collections:
- name: containers.podman
  version: 1.2.0
- name: community.general 
  version: 1.3.4
- name: ansible.posix
  version: 1.1.1

EOF
ansible-galaxy install -r /tmp/requirements.yaml --force && ansible-galaxy collection install -r /tmp/requirements.yaml -f

Example Playbook + vars profile for deploying a minio container

cat <<EOF > ./deploy-podman-container.yaml
---
- hosts: "{{ target_host | default('all') }}"
  gather_facts: true
  become: true
  vars_files:
    - "./{{ container }}.yaml"

  roles:
    - role: deploy-podman-container
EOF

cat <<EOF > ./minio.yaml
---
container_name: minio
permanent: true
container_image: minio/minio:latest
container_run_args: >-
    -d
container_cmd_args: >-
    server /data
mounts:
  data:
    host: "/podman/pv/{{ container_name }}/data/"  
    container: /data:z
  config:
    host: "/podman/pv/{{ container_name }}/config/"
    container: /config:z
  certs:
    host: "/podman/pv/{{ container_name }}/certs/"
    container: /root/.minio/certs:z

env_vars:
  ACCESS_KEY:
    key: MINIO_ACCESS_KEY
    value: admin
  SECRET_KEY:
    key: MINIO_SECRET_KEY
    value: jackhammer
ports:
  minio:
    host: 9000
    container: 9000
EOF

Playbook execution

ansible-playbook -i ../my_inventory_file \
-e target_host=srv-minio
-e container=minio \
deploy-podman-container.yaml \
-vv

Role history

date	who	changelog
2020-07-08	Patrick Hermann	intial commit for this role in codehub
2020-10-12	Patrick Hermann	Updated for using of ansible collections, fixed role structure, added ability of generation self signed certs

License

BSD

Author Information

Patrick Hermann (patrick.hermann@sva.de), Stuttgart-Things, 07/2020.

this role is heavily influenced by podman-container-systemd - we didnt like the style of the role and for a better understanding for podman from a technology side, we're still in the process to rewrite/implement a similar role.