Files
fedora-infra_ansible/roles/copr/backend/tasks/copr-ping.yml
Ryan Lerch 47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00

96 lines
2.3 KiB
YAML

---
- set_fact:
ping_user: copr-ping
ping_homedir: /home/copr-ping
ping_log: /var/log/copr-ping.log
ping_script: copr-ping-script.sh
tags: copr_ping
- stat: path={{ ping_log }}
register: ping_log_check
tags: copr_ping
- name: Create the user ping user
user: name={{ ping_user }}
tags: copr_ping
- name: Pre-create ping log file
ansible.builtin.file:
path: "{{ ping_log }}"
owner: "{{ ping_user }}"
group: nagios
mode: '0644'
state: touch
register: ping_log_created
when: not ping_log_check.stat.exists
tags: copr_ping
- name: Install copr-cli package
dnf: name=copr-cli state=latest
tags: copr_ping
- name: Install the ping script
ansible.builtin.template:
dest: "{{ ping_homedir }}/{{ ping_script }}"
src: "{{ ping_script }}.j2"
owner: "{{ ping_user }}"
group: "{{ ping_user }}"
mode: "0700"
tags: copr_ping
- name: Install the check script
ansible.builtin.template:
dest: "/usr/bin/copr-ping-check.py"
src: "copr-ping-check.py.j2"
owner: "{{ ping_user }}"
group: "nagios"
mode: "0750"
tags: copr_ping
- name: Selinux - allow nrpe_t to read ping_log
sefcontext:
target: "{{ ping_log }}"
setype: nrpe_var_run_t
state: present
register: semanage_run
tags: copr_ping
- name: Restorecon ping_log
ansible.builtin.shell: restorecon -irv "{{ ping_log }}"
when: semanage_run.changed or ping_log_created.changed
tags: copr_ping
- name: Create home/.config dir
ansible.builtin.file:
path: "{{ ping_homedir }}/.config"
owner: "{{ ping_user }}"
group: "{{ ping_user }}"
mode: "0755"
state: directory
tags: copr_ping
- name: Install the Copr API token
ansible.builtin.copy:
content: |
[copr-cli]
login = {{ copr_ping_bot_login }}
username = bot-copr-ping
token = {{ copr_ping_bot_token }}
copr_url = https://copr.fedorainfracloud.org
dest: "{{ ping_homedir }}/.config/copr"
mode: "0600"
owner: "{{ ping_user }}"
group: "{{ ping_user }}"
tags: copr_ping
when: not devel
- name: Rebuild the copr-ping package periodically
ansible.builtin.cron:
# NOTE: sync with CRON_PERIOD in roles/copr/backend/templates/copr-ping-check.py.j2
name: build the ping package
minute: "0,30"
hour: "*"
user: copr-ping
job: "{{ ping_homedir }}/{{ ping_script }}"
tags: copr_ping