# System configuration for Baserock OStree cache server.
#
# Tested against Fedora 26 base image.
---
- hosts: ostree
  gather_facts: false
  become: yes
  become_user: root
  tasks:
  # See: https://fedoramagazine.org/getting-ansible-working-fedora-23/
  - name: install Python2 and required deps for Ansible modules
    raw: dnf install -y python2 python2-dnf libselinux-python

  - name: enable persistant journal
    shell: mkdir /var/log/journal
    args:
      creates: /var/log/journal

  - name: ensure system up to date
    dnf: name=* state=latest

  - name: install lvm2 tools
    dnf: name=lvm2 state=latest

  - name: lighttpd installed
    dnf: name=lighttpd state=latest

  - name: ostree installed
    dnf: name=ostree state=latest

  # We only need BuildStream for the bst-artifact-receive hook, but it's
  # easiest to install all the deps
  - name: buildstream dep - bubblewrap
    dnf: name=bubblewrap state=latest
  - name: buildstream dep - git
    dnf: name=git state=latest
  - name: buildstream dep - python3-gobject
    dnf: name=python3-gobject state=latest
  - name: buildstream dep - python3-pip
    dnf: name=python3-pip state=latest

  - name: buildstream sources
    git: dest=/home/fedora/buildstream repo=https://gitlab.com/buildstream/buildstream version=bf8fc373d7711861129ab841a74ecf32b3d8b2dd
    become_user: fedora
    register: buildstream_source

  - name: buildstream installed
    command: /usr/bin/pip3 install .
    args:
      chdir: /home/fedora/buildstream
    when: buildstream_source.changed

  # We also install ostree-push/receive, which is used for pushing to the
  # releases/ repo.
  - name: ostree-push/receive sources
    git: dest=/home/fedora/ostree-push repo=https://github.com/ssssam/ostree-push version=9aa82b67325786a810653155b952a17b7ccc436a
    become_user: fedora

  - name: ostree-push/receive installed
    command: make PREFIX=/usr/ install
    args:
      chdir: /home/fedora/ostree-push
      creates: /usr/bin/ostree-receive

  - name: disable SELinux on subsequent boots
    selinux: state=disabled

  - name: disable SELinux on current boot
    command: setenforce 0