{"id":746,"sha1":"ed7bc67145990540226f62f81ac920770f322e3f","playbook":{"id":4,"items":{"plays":32,"tasks":1505,"results":1497,"hosts":12,"files":487,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":4,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-openstack.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:57:07.871967Z","ended":"2025-12-08T14:21:54.049657Z","duration":"00:24:46.177690","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.11","server_version":"1.7.4","status":"failed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2018, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n- name: Run apt install block\n  block:\n    - name: Run the apt package pinning role\n      ansible.builtin.include_role:\n        name: apt_package_pinning\n      vars:\n        apt_package_pinning_file_name: \"docker.pref\"\n        apt_package_pinning_priority: 999\n        apt_pinned_packages:\n          - package: \"docker-ce\"\n            version: \"{{ zun_docker_package_version }}\"\n            priority: 1000\n          - package: \"docker-ce-cli\"\n            version: \"{{ zun_docker_package_version }}\"\n            priority: 1000\n          - package: \"containerd.io\"\n            version: \"{{ zun_containerd_package_version }}\"\n            priority: 1000\n\n    - name: Validate repo config is deb822 format\n      vars:\n        _repo_check: \"{{ zun_docker_repo | selectattr('repo', 'defined') | map(attribute='repo') }}\"\n      ansible.builtin.assert:\n        that: _repo_check | length == 0\n        fail_msg: \"The following repository definitions must be updated to deb822 format {{ _repo_check }}\"\n\n    # NOTE(jrosser) remove this task for the 2025.2 release\n    - name: Clean up legacy repository config not in deb822 format\n      ansible.builtin.file:\n        path: \"/etc/apt/sources.list.d/docker-ce.list\"\n        state: absent\n      register: _cleanup_apt_repositories\n\n    - name: Ensure python3-debian package is available\n      ansible.builtin.apt:\n        name: python3-debian\n\n    - name: Manage apt repositories\n      ansible.builtin.deb822_repository:\n        allow_downgrade_to_insecure: \"{{ item.allow_downgrade_to_insecure | default(omit) }}\"\n        allow_insecure: \"{{ item.allow_insecure | default(omit) }}\"\n        allow_weak: \"{{ item.allow_weak | default(omit) }}\"\n        architectures: \"{{ item.architectures | default(omit) }}\"\n        by_hash: \"{{ item.by_hash | default(omit) }}\"\n        check_date: \"{{ item.check_date | default(omit) }}\"\n        check_valid_until: \"{{ item.check_valid_until | default(omit) }}\"\n        components: \"{{ item.components | default(omit) }}\"\n        date_max_future: \"{{ item.date_max_future | default(omit) }}\"\n        enabled: \"{{ item.enabled | default(omit) }}\"\n        inrelease_path: \"{{ item.inrelease_path | default(omit) }}\"\n        languages: \"{{ item.languages | default(omit) }}\"\n        mode: \"{{ item.mode | default(omit) }}\"\n        name: \"{{ item.name }}\"\n        pdiffs: \"{{ item.pdiffs | default(omit) }}\"\n        signed_by: \"{{ item.signed_by | default(omit) }}\"\n        state: \"{{ item.state | default(omit) }}\"\n        suites: \"{{ item.suites | default(omit) }}\"\n        targets: \"{{ item.targets | default(omit) }}\"\n        trusted: \"{{ item.trusted | default(omit) }}\"\n        types: \"{{ item.types | default(omit) }}\"\n        uris: \"{{ item.uris | default(omit) }}\"\n      loop: \"{{ zun_docker_repo }}\"\n      loop_control:\n        label: \"{{ loop_label | to_json }}\"\n      vars:\n        loop_label:\n          name: \"{{ item.name }}\"\n          uris: \"{{ item.uris | default('') }}\"\n          state: \"{{ item.state | default('present') }}\"\n          suites: \"{{ item.suites | default('') }}\"\n      register: add_nv_repos\n\n    - name: Update Apt cache\n      ansible.builtin.apt:\n        update_cache: true\n      when: (add_nv_repos is changed) or (_cleanup_apt_repositories is changed)\n      register: update_apt_cache\n      until: update_apt_cache is success\n      retries: 5\n      delay: 2\n\n  when:\n    - \"ansible_facts['pkg_mgr'] == 'apt'\"\n\n- name: Add docker repo\n  ansible.builtin.yum_repository:\n    name: \"{{ item.name }}\"\n    description: \"{{ item.description }}\"\n    baseurl: \"{{ item.repo }}\"\n    gpgkey: \"{{ item.gpgkey | default(omit) }}\"\n    gpgcheck: true\n    enabled: true\n    priority: 25\n  register: add_docker_repos\n  until: add_docker_repos is success\n  retries: 5\n  delay: 2\n  with_items: \"{{ zun_docker_repo }}\"\n  when:\n    - ansible_facts['pkg_mgr'] == 'dnf'\n\n- name: Enable module_hotfixes\n  ansible.builtin.lineinfile:\n    dest: \"/etc/yum.repos.d/{{ item.name }}.repo\"\n    line: \"module_hotfixes=1\"\n    regexp: \"^module_hotfixes\"\n    insertafter: \"^enabled\"\n  with_items: \"{{ zun_docker_repo }}\"\n  when:\n    - ansible_facts['os_family'] | lower == 'redhat'\n\n- name: Install compute distro packages\n  ansible.builtin.package:\n    name: \"{{ zun_distro_compute_packages }}\"\n    state: \"{{ zun_package_state }}\"\n    update_cache: \"{{ (ansible_facts['pkg_mgr'] == 'apt') | ternary('yes', omit) }}\"\n    cache_valid_time: \"{{ (ansible_facts['pkg_mgr'] == 'apt') | ternary(cache_timeout, omit) }}\"\n    enablerepo: \"{{ (ansible_facts['pkg_mgr'] == 'dnf') | ternary('extras', omit) }}\"\n\n- name: Install and configure katacontainers\n  when: zun_kata_enabled | bool\n  block:\n    - name: Download kata package\n      ansible.builtin.get_url:\n        url: \"{{ zun_kata_package_source }}\"\n        dest: \"/opt/{{ zun_kata_package_source | basename }}\"\n        mode: \"0440\"\n        checksum: \"{{ zun_kata_package_checksum_mapping.get(ansible_facts['architecture']) }}\"\n      register: _kata_downloaded\n\n    - name: Unpack package  # noqa: no-handler\n      ansible.builtin.unarchive:\n        src: \"/opt/{{ zun_kata_package_source | basename }}\"\n        dest: /opt/\n        remote_src: true\n        owner: root\n        group: root\n        extra_opts:\n          - --strip-components=2\n      when: _kata_downloaded is changed\n      notify:\n        - Restart containerd\n\n    - name: Symlink kata binaries to PATH\n      ansible.builtin.file:\n        src: \"{{ item.src }}\"\n        dest: \"{{ item.dest }}\"\n        state: link\n      with_items:\n        - src: /opt/kata/bin/containerd-shim-kata-v2\n          dest: /usr/local/bin/containerd-shim-kata-v2\n        - src: /opt/kata/bin/kata-collect-data.sh\n          dest: /usr/local/bin/kata-collect-data.sh\n        - src: /opt/kata/bin/kata-runtime\n          dest: /usr/local/bin/kata-runtime\n\n    - name: Ensure the containerd config directory exists\n      ansible.builtin.file:\n        path: \"/etc/containerd\"\n        state: \"directory\"\n        owner: \"root\"\n        group: \"root\"\n        mode: \"0755\"\n\n    - name: Configure containerd\n      ansible.builtin.template:\n        src: \"config.toml.j2\"\n        dest: \"/etc/containerd/config.toml\"\n        mode: \"0644\"\n        owner: \"root\"\n        group: \"root\"\n      notify:\n        - Restart containerd\n\n- name: Ensure the Docker config directory exists\n  ansible.builtin.file:\n    path: \"/etc/docker\"\n    state: \"directory\"\n    owner: \"root\"\n    group: \"root\"\n    mode: \"0755\"\n\n- name: Generate kuryr config\n  openstack.config_template.config_template:\n    content: |\n      {\n        \"live-restore\": true,\n        \"default-ipc-mode\": \"shareable\"\n      }\n    dest: \"/etc/docker/daemon.json\"\n    owner: \"root\"\n    group: \"root\"\n    mode: \"0644\"\n    config_overrides: \"{{ zun_docker_config_overrides }}\"\n    config_type: \"json\"\n  notify:\n    - Restart docker\n\n- name: Create the kuryr system group\n  ansible.builtin.group:\n    name: \"{{ zun_kuryr_system_group_name }}\"\n    gid: \"{{ zun_kuryr_system_group_gid | default(omit) }}\"\n    state: \"present\"\n    system: \"yes\"\n  tags:\n    - zun-kuryr-group\n\n- name: Create the kuryr system user\n  ansible.builtin.user:\n    name: \"{{ zun_kuryr_system_user_name }}\"\n    uid: \"{{ zun_kuryr_system_user_uid | default(omit) }}\"\n    group: \"{{ zun_kuryr_system_group_name }}\"\n    comment: \"{{ zun_kuryr_system_comment }}\"\n    shell: \"{{ zun_kuryr_system_shell }}\"\n    system: \"yes\"\n    createhome: \"yes\"\n    home: \"{{ zun_kuryr_system_home_folder }}\"\n  when: zun_kuryr_system_user_name != 'root'\n  tags:\n    - zun-kuryr-user\n\n- name: Create kuryr dir\n  ansible.builtin.file:\n    path: \"{{ item.path }}\"\n    state: directory\n    owner: \"{{ item.owner | default('root') }}\"\n    group: \"{{ item.group | default('root') }}\"\n    mode: \"{{ item.mode | default('0755') }}\"\n  with_items:\n    - path: \"/etc/kuryr\"\n      mode: \"0750\"\n      owner: \"{{ zun_kuryr_system_user_name }}\"\n      group: \"{{ zun_kuryr_system_group_name }}\"\n    - path: \"/etc/docker/plugins\"\n  tags:\n    - zun-kuryr-dirs\n\n- name: Generate kuryr config\n  openstack.config_template.config_template:\n    src: \"{{ item.src }}\"\n    dest: \"{{ item.dest }}\"\n    owner: \"{{ zun_kuryr_system_user_name }}\"\n    group: \"{{ zun_system_group_name }}\"\n    mode: \"0640\"\n    config_overrides: \"{{ item.config_overrides }}\"\n    config_type: \"{{ item.config_type }}\"\n  with_items:\n    - src: \"kuryr-libnetwork.conf.j2\"\n      dest: \"/etc/kuryr/kuryr.conf\"\n      config_overrides: \"{{ zun_kuryr_conf_overrides }}\"\n      config_type: \"ini\"\n  notify:\n    - Restart docker\n  tags:\n    - zun-config\n    - zun-post-install\n\n- name: Generate kuryr docker plugin config\n  openstack.config_template.config_template:\n    content: |\n      {\n        \"Name\": \"kuryr\",\n        \"Addr\": \"http://127.0.0.1:23750\"\n      }\n    dest: \"/etc/docker/plugins/kuryr.json\"\n    owner: \"root\"\n    group: \"root\"\n    mode: \"0644\"\n    config_overrides: \"{{ zun_kuryr_config_overrides }}\"\n    config_type: \"json\"\n  notify:\n    - Restart docker\n\n- name: Ensure docker users are added to the docker group\n  ansible.builtin.user:\n    name: \"{{ item }}\"\n    groups: \"{{ zun_docker_groupname }}\"\n    append: true\n  with_items: \"{{ zun_docker_users }}\"\n\n- name: Drop sudoers file\n  ansible.builtin.template:\n    src: \"sudoers.j2\"\n    dest: \"/etc/sudoers.d/{{ zun_system_user_name }}_sudoers\"\n    mode: \"0440\"\n    owner: \"root\"\n    group: \"root\"\n  tags:\n    - sudoers\n    - zun-sudoers\n\n- name: Configure multipathd (RedHat only)\n  ansible.builtin.command:\n    cmd: \"/sbin/mpathconf --enable\"\n    creates: \"/etc/multipath.conf\"\n  when: ansible_facts['os_family'] == \"RedHat\"\n\n- name: Enable multipathd service\n  ansible.builtin.systemd:\n    name: multipathd\n    state: started\n    enabled: true\n\n- name: Create script to clean up old Docker data\n  ansible.builtin.template:\n    src: \"zun-docker-cleanup.j2\"\n    dest: \"{{ zun_bin }}/zun-docker-cleanup\"\n    owner: \"root\"\n    group: \"root\"\n    mode: \"0755\"\n\n- name: Set state for timed data cleanup\n  ansible.builtin.file:\n    path: \"/var/tmp/zun-docker-cleanup.disabled\"\n    state: \"{{ zun_docker_prune_images | ternary('absent', 'touch') }}\"\n    mode: \"0644\"\n\n- name: Remove legacy systemd docker override\n  ansible.builtin.file:\n    path: \"/etc/systemd/system/docker.service.d/zun-docker.conf\"\n    state: absent\n","created":"2025-12-08T13:57:24.086564Z","updated":"2025-12-08T13:57:24.086576Z","path":"/etc/ansible/roles/os_zun/tasks/zun_compute.yml"}