open-build-service

Installs and configures the Open Build Service (OBS).

Requirements

This role is written for OpenSUSE, and is currently tested on OpenSUSE Leap 15.1. It makes use of the zypper and zypper_repository modules, so you need to install the python-xml package. Due to the use of the firewalld module, you must use Python 3 for your ansible_python_interpreter.

Role Variables

obs_version

The version of OBS to install. Only 2.10 is tested. The default is 2.10.

obs_opensuse_version

The version of OpenSUSE OBS is being installed on. The default is 15.1.

obs_fqdn

The fully qualified domain name for this OBS instance. The default is "obs.internal".

obs_cert_domains

The domains to use when generating a self-signed certificate. The default is ["{{ obs_fqdn }}", "obs", "localhost"].

obs_xdelta1_compat

Enable compatibility with xdelta1. openSUSE now packages xdelta3 in a way where it pretends to be xdelta1, but not very well. This causes an issue for pristine-tar, which is sometimes used in Debian packaging, when xdelta1 was used. Setting this to true will replace the xdelta symlink from the xdelta3 package with an actual xdelta1 binary. The default is false.

obs_xdelta_rpm_filename

The filename of the xdelta rpm if using xdelta1 compatibility. The default is "xdelta-1.1.4-193.d_t.3.x86_64.rpm".

obs_sign_server

Address of the signing server to use. By default this is 127.0.0.1, meaning that the local signing server set up as part of the OBS server will be used. Change this if you are using a detached signing server.

obs_sign_user

The user to use for signing. Note that this corresponds to the email address of the GPG key that should be used. By default this is defaultkey@localobs, and this is the address that will be used for the key generated for the local signer created by this role. If you are using a detached signing server, it is recommended that you use a different email address for the GPG key on that machine and set this variable to it.

obs_cert_path

Path to a certificate for the web server to use. Disables self-signed certificate generation when set.

obs_key_path

Path to a key for the web server to use.

obs_src_address

Address of the source server. Defaults to localhost.

obs_repo_address

Address of the repository server. Defaults to localhost.

obs_service_address

Address of the service server. Defaults to localhost.

obs_cloudupload_address

Address of the cloudupload server. Defaults to localhost.

obs_workersrc_address

Address of the worker source server. Defaults to localhost.

obs_workerrepo_address

Address of the worker repository server. Defaults to localhost.

Dependencies

A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

- hosts: servers
  roles:
     - { role: username.rolename, x: 42 }

Development

The easiest way to test your changes is using Vagrant. Once you have installed Vagrant, you can create and provision a VM like this:

$ cd open-build-service
$ vagrant up

After making changes, you can run Ansible again like this:

$ vagrant provision

Once you're finished, you can destroy the VM like this:

$ vagrant destroy

License

BSD 3-Clause

Author Information

An optional section for the role authors to include contact information, or a website (HTML is not allowed).