Force-install libssl1.1 if MongoDB needed on Ubuntu >= 22.04 (for Sugarizer)

[holta]

Resolves:

• MongoDB 4.4, 5.0 & 6.0RC1 don't run on Ubuntu 22.04 (preventing Sugarizer install) [missing apt package libssl1.1 -> libssl3 ?] #3190

For those communities wanting Sugarizer on Ubuntu 22.04+

Tested on the latest daily build of Ubuntu 22.10 (server version not desktop version).

Refs:

• PR sugarizer/defaults/main.yml: 1.5.0 -> 1.6.0 #3099
• PR Stage 6/7 bypass of apps not yet compatible w/ Ubuntu 22.04 (Kolibri, Nextcloud, Moodle, Sugarizer) [ASIDE: Node.js 18.x works manually or using deb.nodesource.com install script] #3189
• PR WIP: Tighten up roles/mongodb — runs 'apt-mark hold mongodb-org mongodb-org-server' on 64-bit RPi if installing MongoDB >= 5.0 #3241
• PR Try 'skip_role_on_error: True' in default_vars.yml for more uninterrupted installs of IIAB Apps ['./iiab-install --risky' if you want to live on the wild side, forcing it too to use 'skip_role_on_error: True'] #3262
• PR 22.04 & Mint 21: Avoid Sugarizer+Moodle initially (TEMPORARY) #3265

[holta]

Also tested on Ubuntu 22.04 LTS (Jammy Jellyfish) itself.

Looks great ✔️

[jvonau]

This is sort of useless info for iiab,ini, only used to load the derived OS.yml file for ansible. Would not even get to this point if incorrect but might be better suited in create_iiab_ini.yml as the underling distro doesn't really change at runtime.

[jvonau]

What is with the "is_ubuntu and os_ver is version('ubuntu-2204', '>=')" in place of 'is_ubuntu_2204 or is_ubuntu_2210'?

https://docs.ansible.com/ansible/latest/user_guide/playbooks_tests.html

[holta]

What is with the "is_ubuntu and os_ver is version('ubuntu-2204', '>=')"

Ubuntu releases often.

e.g. Ubuntu 23.04 pre-release (weeks away) and 23.10 pre-releases will be circulating before we know it, and comparison operators (e.g. >=) provide a failsafe in the interim.

[jvonau]

Don't need os_ver for that use {{ ansible_distribution_version }} to future proof against ansible.module_utils.compat.version.StrictVersion becoming 'true' at some point in the future. Looks like version_type= is a interim step towards a full semver where mixed numeric+alpha characters are not used.

[holta]

Interesting. Ansible might clean up their ability to make very clear what exact OS/distro version is running in future. That'd be great.

Meantime IIAB's os_ver is an active part of IIAB, giving us exactly what's needed, arising from:

iiab/scripts/local_facts.fact

Lines 35 to 54 in e46e346

	# /etc/lsb-release could also be grep'd. But /etc/upstream-release/lsb-release
	# on Linux Mint 20 caused grep of /etc/*elease to fail (on directory not file)
	if tmp=$(grep ^ID= /etc/os-release); then
	OS=$(echo "$tmp" | cut -d= -f2)
	OS=${OS//\"/} # Remove all '"'
	fi
	if [ -f /etc/rpi-issue ]; then
	OS="raspbian" # For 64-bit Raspberry Pi OS which contains "ID=debian" as
	fi # of 2020: https://github.com/raspberrypi/Raspberry-Pi-OS-64bit/issues/6
	if tmp=$(grep ^VERSION_ID= /etc/os-release); then
	VERSION_ID=$(echo "$tmp" | cut -d= -f2)
	# https://gnu.org/software/bash/manual/bash.html#Shell-Parameter-Expansion
	VERSION_ID=${VERSION_ID//\"/} # Remove all '"'
	[[ $OS == "ubuntu" ]] && # e.g. '22.04' -> '2204'
	VERSION_ID=${VERSION_ID//\./} # Remove all '.'
	[[ $OS == "linuxmint" ]] && # e.g. '20.2' -> '20'
	VERSION_ID=${VERSION_ID%%.*} # Remove all '.' & stuff to the right
	fi
	OS_VER="$OS-$VERSION_ID"