Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge https://github.com/cisagov/skeleton-ansible-role into lineage/s…
…keleton # Conflicts: # .github/dependabot.yml # meta/main.yml
- Loading branch information
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| --- | ||
| # This is in place to restore a destructive action in geerlingguy's Ansible | ||
| # Docker images that we use for testing. The change is fine for the intended | ||
| # purpose of the images but not for how we use them. | ||
| - name: Ensure Python is marked as externally managed if appropriate | ||
| hosts: all | ||
| become: true | ||
| become_method: ansible.builtin.sudo | ||
| tasks: | ||
| - name: Ensure Python is marked as externally managed | ||
| when: | ||
| - ansible_distribution in ["Debian", "Ubuntu"] | ||
| - ansible_distribution_release not in ["bullseye", "buster", "focal", "jammy"] | ||
| block: | ||
| - name: Gather package facts | ||
| ansible.builtin.package_facts: | ||
| manager: auto | ||
|
|
||
| - name: Ensure the EXTERNALLY-MANAGED file is present if Python 3 is installed | ||
| when: '"python3" in ansible_facts.packages' | ||
| block: | ||
| # This gets a unique list of installed Python packages in the form of major.minor | ||
| # by taking the list of installed Python packages and: | ||
| # 1. Extracting the version from each package's information | ||
| # 2. Removing any version information after the major.minor version | ||
| # 3. Ensuring there are no duplicates | ||
| # | ||
| # NOTE: | ||
| # Since the value of python_versions is a multiline string, the regex expressions used in | ||
| # the regex_replace filter must use single backslashes for special sequences. If the value | ||
| # of python_versions were to be changed from a multiline string, the special sequences | ||
| # must be modified to use double backslashes instead. This is due to how the YAML is | ||
| # processed when Ansible reads the playbook. | ||
| - name: Extract version information about installed Python packages | ||
| ansible.builtin.set_fact: | ||
| python_versions: >- | ||
| {{ | ||
| ansible_facts.packages["python3"] | ||
| | map(attribute="version") | ||
| | map("regex_replace", "^(\d+\.\d+)\.\d+.*$", "\1") | ||
| | unique | ||
| }} | ||
| - name: Restore EXTERNALLY-MANAGED file for Python | ||
| ansible.builtin.template: | ||
| dest: /usr/lib/python{{ item }}/EXTERNALLY-MANAGED | ||
| mode: 0644 | ||
| src: EXTERNALLY-MANAGED.j2 | ||
| loop: "{{ python_versions }}" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,6 @@ | ||
| --- | ||
| - name: Import upgrade playbook | ||
| ansible.builtin.import_playbook: upgrade.yml | ||
|
|
||
| - name: Import externally-managed-python playbook | ||
| ansible.builtin.import_playbook: externally-managed-python.yml |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,11 @@ | ||
| --- | ||
| # This is necessary to ensure a version of this collection that is compatible | ||
| # with version 2.32.0+ of the Python requests library. This should be removed when | ||
| # it is no longer required per https://github.com/cisagov/skeleton-ansible-role/issues/195 | ||
| collections: | ||
| - name: community.docker | ||
| version: ">=3.10.2" | ||
|
|
||
| roles: | ||
| - name: upgrade | ||
| src: https://github.com/cisagov/ansible-role-upgrade |
Oops, something went wrong.