docker-tools/ansible/roles/docker_node/defaults/main.yml at 17f1d57fc17d0e4fadaa90788003faa5eb4dd58e · instantlinux/docker-tools · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
---
# defaults

docker_defaults:
  apt_repo:
    key: 9DC858229FC7DD38854AE2D88D81803C0EBFCD88
    package_name: docker-ce
    package_ver: 5:29.2.0-1~ubuntu.24.04~noble
    repo: deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable
    url: https://download.docker.com/linux/ubuntu/gpg
  certs:
    ca_root: ca-root.pem
    path: /root/certs
  cli_opts: --containerd=/run/containerd/containerd.sock
  compose:
    sha256: acfa66dba77dac9635ff9b195ccea81768eb009ce9c9f1181c000eb95effb963
    version: 1.15.0
  local_volumes: /var/lib/docker/volumes
  thinpool:
    autoextend_percent: 20
    autoextend_threshold: 80
    meta_size: 100
    size: 5000
  options:
    hosts:
    - tcp://0.0.0.0:2376
    - unix:///var/run/docker.sock
    log-driver: json-file
    log-opts:
      max-size: 50m
      max-file: "3"
    min-api-version: "1.43"
    storage-driver: overlay2
    # storage-opts:
    # - dm.thinpooldev=/dev/mapper/{{ thinpool_vg_alt }}-thinpool
    # - dm.use_deferred_removal=false
    # - dm.use_deferred_deletion=false
    tls: True
    tlscacert: /root/certs/ca-root.pem
    tlscert: /root/certs/docker-tls-cert.pem
    tlskey: /root/certs/docker-tls-key.pem
    tlsverify: True

docker_override: {}
docker: "{{ docker_defaults | combine(docker_override, recursive=True) }}"

docker_volumewait: /var/lib/docker

# Set non_stock to True to override your distro's kernel
kernel:
  long_ver: 4.15.0-041500.201802011154
  origin: http://kernel.ubuntu.com/~kernel-ppa/mainline
  short_ver: "041500"
  version: 4.15.0
  non_stock: False

sysctl:
  fs.inotify.max_user_instances: 256
  fs.inotify.max_user_watches: 131072

system_paths:
  ca_certs: /usr/local/share/ca-certificates

system_certs:
  - ca-root.pem
  - registry-cert.pem

ubuntu_packages:
  - bash-completion
  - jq
  - libpam-google-authenticator
  - rsync
  - snmpd
  - thin-provisioning-tools
  - uuid-runtime

ubuntu_repo_uri: http://archive.ubuntu.com/ubuntu/

ubuntu_repos:
  - deb {{ ubuntu_repo_uri }} {{ ansible_distribution_release }} main restricted universe multiverse
  - deb {{ ubuntu_repo_uri }} {{ ansible_distribution_release }}-updates main restricted universe multiverse
  - deb {{ ubuntu_repo_uri }} {{ ansible_distribution_release }}-backports main restricted universe multiverse
  - deb {{ ubuntu_repo_uri }} {{ ansible_distribution_release }}-security main restricted universe multiverse

ubuntu_package_additions: []