Signed-off-by: Marc Ahlgrim <marc@onemarcfifty.com>
This commit is contained in:
Marc Ahlgrim 2022-09-18 15:37:32 +02:00
parent 47d56593ed
commit 160bc51832
2 changed files with 15 additions and 3 deletions

View File

@ -14,14 +14,23 @@ RUN apt-get -y update && \
wget \
curl \
git \
nmap
nmap \
sshpass
# let's install ansible using pip as root
# this will give a fat red warning at runtime but is intended this way.
RUN pip install --upgrade pip
RUN pip install ansible
# we download the debian package for vscode server from the coder github repo
# and install it with apt
RUN wget https://github.com/coder/code-server/releases/download/v4.6.0/code-server_4.6.0_amd64.deb
RUN apt -y install ./code-server_4.6.0_amd64.deb
# for compatibility with the non-docker version we just link the
# /var/lib/rundeck directory to the /home/rundeck directory
RUN ln -s /home/rundeck /var/lib/rundeck
USER rundeck
# now make sure the vscode server gets started at runtime
@ -32,7 +41,7 @@ RUN chmod 755 docker-lib/includes/120_vscode.sh
# make sure we can write to the ansible volume
RUN echo 'sudo chown rundeck:root ansible' >docker-lib/includes/110_volume.sh
RUN echo '/bin/touch ~/ansible/ansible.cfg' >>docker-lib/includes/110_volume.sh
RUN if [ ! -e ~/.ansible.cfg ] ; then ln -s ~/ansible/ansible.cfg ~.ansible.cfg ; fi
RUN if [ ! -e ~/.ansible.cfg ] ; then ln -s ~/ansible/ansible.cfg ~/.ansible.cfg ; fi
RUN chmod 755 docker-lib/includes/110_volume.sh
#VOLUME ["/home/rundeck/server/data"]

View File

@ -53,9 +53,12 @@
dest: "/etc/sudoers.d/ansiblessh"
content: "ansiblessh ALL=(ALL) NOPASSWD: ALL"
# now we deploy the ssh key. For this we just copy the id_rsa.pub file
# to the host
- name: Deploy SSH Key
authorized_key: user=ansiblessh
key="{{ lookup('id_rsa', '/var/lib/rundeck/.ssh') }}"
key="{{ lookup('file', '/var/lib/rundeck/.ssh/id_rsa.pub') }}"
state=present