# SPDX-FileCopyrightText: 2023 - 2024 MDAD project contributors # SPDX-FileCopyrightText: 2023 Catalan Lover # SPDX-FileCopyrightText: 2024 David Mehren # SPDX-FileCopyrightText: 2024 Slavi Pantaleev # SPDX-FileCopyrightText: 2024 Suguru Hirahara # # SPDX-License-Identifier: AGPL-3.0-or-later --- - ansible.builtin.set_fact: matrix_bot_draupnir_migration_requires_restart: false - name: Ensure matrix-bot-draupnir paths exist ansible.builtin.file: path: "{{ item.path }}" state: directory mode: '0750' owner: "{{ matrix_user_name }}" group: "{{ matrix_group_name }}" with_items: - {path: "{{ matrix_bot_draupnir_base_path }}", when: true} - {path: "{{ matrix_bot_draupnir_config_path }}", when: true} - {path: "{{ matrix_bot_draupnir_data_path }}", when: true} - {path: "{{ matrix_bot_draupnir_container_src_files_path }}", when: "{{ matrix_bot_draupnir_container_image_self_build }}"} when: "item.when | bool" - name: Ensure matrix-bot-draupnir support files installed ansible.builtin.template: src: "{{ item.src }}" dest: "{{ item.dest }}" owner: "{{ matrix_user_name }}" group: "{{ matrix_group_name }}" mode: '0644' with_items: - src: "{{ role_path }}/templates/labels.j2" dest: "{{ matrix_bot_draupnir_base_path }}/labels" register: matrix_bot_draupnir_support_files_result - name: Ensure Draupnir Docker image is pulled community.docker.docker_image_pull: name: "{{ matrix_bot_draupnir_container_image }}" pull: always when: "not matrix_bot_draupnir_container_image_self_build | bool" register: matrix_bot_draupnir_container_image_pull_result retries: "{{ devture_playbook_help_container_retries_count }}" delay: "{{ devture_playbook_help_container_retries_delay }}" until: matrix_bot_draupnir_container_image_pull_result is not failed - name: Ensure Draupnir repository is present on self-build ansible.builtin.git: repo: "{{ matrix_bot_draupnir_container_image_self_build_repo }}" dest: "{{ matrix_bot_draupnir_container_src_files_path }}" version: "{{ matrix_bot_draupnir_container_image.split(':')[1] }}" force: "yes" become: true become_user: "{{ matrix_user_name }}" register: matrix_bot_draupnir_git_pull_results when: "matrix_bot_draupnir_container_image_self_build | bool" - name: Ensure Draupnir Docker image is built # Using docker_image_build with BuildKit for modern, efficient builds. # Rebuild when the git checkout advanced to a new commit; otherwise keep the build idempotent. # Technically the idempotency of rebuilds is more that if a build has already been executed for that name:tag # then we won't rebuild while in idempotent mode even if git moved. That's what the force rebuild logic is for. community.docker.docker_image_build: name: "{{ matrix_bot_draupnir_container_image }}" dockerfile: Dockerfile path: "{{ matrix_bot_draupnir_container_src_files_path }}" pull: true rebuild: "{{ 'always' if matrix_bot_draupnir_git_pull_results.changed | bool else 'never' }}" when: "matrix_bot_draupnir_container_image_self_build | bool" register: matrix_bot_draupnir_container_image_build_result - name: Ensure matrix-bot-draupnir config installed ansible.builtin.copy: content: "{{ matrix_bot_draupnir_configuration | to_nice_yaml(indent=2, width=999999) }}" dest: "{{ matrix_bot_draupnir_config_path }}/production.yaml" mode: '0644' owner: "{{ matrix_user_name }}" group: "{{ matrix_group_name }}" register: matrix_bot_draupnir_config_result - name: Ensure matrix-bot-draupnir container network is created community.general.docker_network: enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}" name: "{{ matrix_bot_draupnir_container_network }}" driver: bridge driver_options: "{{ devture_systemd_docker_base_container_networks_driver_options }}" - name: Ensure matrix-bot-draupnir.service installed ansible.builtin.template: src: "{{ role_path }}/templates/systemd/matrix-bot-draupnir.service.j2" dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-bot-draupnir.service" mode: '0644' register: matrix_bot_draupnir_systemd_service_result # matrix-bot-draupnir and matrix-appservice-draupnir-for-all share the # same upstream container image. When both are enabled and force-pull is # on, the second role to run sees the image as already up-to-date (the # first role just pulled it), so its pull_result.changed is false and # conditional restart would skip it. To avoid that, we also treat # force-pull itself as a restart trigger for this role. The downside is # that both Draupnir services restart on every run when force-pull is # enabled (e.g. with rolling tags like `latest` or `main`), even when the # upstream image has not moved. That is wasteful but acceptable. # See: https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/5186 - name: Determine whether Draupnir needs a restart ansible.builtin.set_fact: matrix_bot_draupnir_restart_necessary: >- {{ matrix_bot_draupnir_migration_requires_restart | default(false) or matrix_bot_draupnir_support_files_result.changed | default(false) or matrix_bot_draupnir_config_result.changed | default(false) or matrix_bot_draupnir_systemd_service_result.changed | default(false) or matrix_bot_draupnir_container_image_pull_result.changed | default(false) or matrix_bot_draupnir_container_image_build_result.changed | default(false) or matrix_bot_draupnir_force_restart | bool }} - name: Ensure matrix-bot-draupnir.service restarted, if necessary ansible.builtin.service: name: "matrix-bot-draupnir.service" state: restarted daemon_reload: true when: "matrix_bot_draupnir_migration_requires_restart | bool"