Define task to load docker containers from archive

Author: Kevinjil

provision-contest/ansible/README.md

@@ -44,6 +44,7 @@ There are a few places where additional files should/can be added:
 * Machine/group specific local packages under `roles/base_packages/files/install-*/`.
 * Judgehost chroot local packages under `roles/judgedaemon/files/install-chroot/`.
 * The vendor dependencies under `roles/domjudge_checkout/files/vendor.tgz`.
+* Machine/group specific docker containers under `roles/docker/files/containers-*/`.
 
 ## TODO
 

provision-contest/ansible/group_vars/onprem/secret.yml.example

@@ -70,5 +70,5 @@ PRESCLIENT_CONTEST: nwerc18
 # Sentry DSN URL
 # SENTRY_DSN:
 
-# Glitchtip
+# GlitchTip
 # GLITCHTIP_SECRET: {some-strong-glitchtip-password}

provision-contest/ansible/roles/docker/files/README.md

@@ -0,0 +1,5 @@
+# Loading containers from archives
+Any container `.tar` files placed in a `containers-<host_type>` directory will be loaded as a container for the said host type.
+The container will be tagged  with the relative path starting from `containers-<host_type>`, without the `.tar` file extension.
+For example, the file `containers-glitchtip/glitchtip/glitchtip:v4.1.3.tar` will be loaded as a container tagged `glitchtip/glitchtip:v4.1.3` for the `glitchtip` host type.
+Note that a nested directory structure is needed to tag containers which have both an organization and a container name.

provision-contest/ansible/roles/docker/files/containers-glitchtip/.gitignore

@@ -0,0 +1 @@
+*.tar

provision-contest/ansible/roles/docker/files/containers-glitchtip/glitchtip/.gitignore

@@ -0,0 +1,33 @@
+---
+- block:
+  - name: Check for existing container
+    community.docker.docker_image_info:
+      name: "{{ img_name }}"
+    register: result
+
+  - block:
+    - name: Create temp container directory
+      file:
+        path: /tmp/dj_ansible
+        state: directory
+        owner: root
+        group: root
+        mode: 0700
+
+    - name: Transfer container archive
+      copy:
+        src: "{{ item.src }}"
+        dest: "{{ img_path }}"
+        owner: root
+        group: root
+        mode: 0700
+
+    - name: Import container from archive
+      community.docker.docker_image:
+        name: "{{ img_name }}"
+        load_path: "{{ img_path }}"
+        source: load
+    when: not result.images
+  vars:
+    img_name: "{{ item.path | splitext | first }}"
+    img_path: "/tmp/dj_ansible/{{ item.path | basename }}"

provision-contest/ansible/roles/docker/tasks/load-container.yml

@@ -24,3 +24,9 @@
 - name: Install Docker module for Python
   pip:
     name: docker
+
+- name: Load container archives
+  include_tasks: load-container.yml
+  with_filetree:
+    - files/containers-{{ host_type }}/
+  when: item.state == 'file' and (item.path | splitext | last) == ".tar"

provision-contest/ansible/roles/docker/tasks/main.yml

@@ -1,5 +1,7 @@
 ---
-- name: Restart Glitchtip
+- name: Restart GlitchTip
   community.docker.docker_compose_v2:
     project_src: /opt/glitchtip
+    files:
+    - docker-compose.yaml
     state: restarted

provision-contest/ansible/roles/glitchtip/handlers/main.yml

@@ -10,7 +10,7 @@
     src: templates/docker-compose.yaml.j2
     dest: /opt/glitchtip/docker-compose.yaml
 
-- name: Deploy Glitchtip compose stack
+- name: Deploy GlitchTip compose stack
   community.docker.docker_compose_v2:
     project_src: /opt/glitchtip
     files:

provision-contest/ansible/roles/glitchtip/tasks/main.yml

@@ -6,8 +6,8 @@ x-environment:
   SECRET_KEY: {{GLITCHTIP_SECRET}}
   PORT: {{glitchtip_port}}
   EMAIL_URL: consolemail://
-  GLITCHTIP_DOMAIN: http://glitchtip.domjudge
-  DEFAULT_FROM_EMAIL: email@glitchtip.domjudge
+  GLITCHTIP_DOMAIN: http://glitchtip:{{glitchtip_port}}
+  DEFAULT_FROM_EMAIL: email@glitchtip
   CELERY_WORKER_AUTOSCALE: "1,1"
   CELERY_WORKER_MAX_TASKS_PER_CHILD: "1000"
 
@@ -31,7 +31,7 @@ services:
     image: glitchtip/glitchtip:v4.1.3
     depends_on: *default-depends_on
     ports:
-      - {{glitchtip_port}}:8000
+      - {{glitchtip_port}}:{{glitchtip_port}}
     environment: *default-environment
     restart: unless-stopped
     volumes: