mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 10:13:58 +00:00
abc458260c
Provisions the docker engine on [build_hosts] (gandalf) for the native arm64 daily knoe-db image build → registry.knoe.dev, run via a remote buildx builder. gandalf is also a k3s_agent, so the role holds iptables FORWARD=ACCEPT to protect k3s pod networking (docker's containerd coexists with k3s's on separate sockets). Verified idempotent: --check against gandalf = ok=5, changed=0. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
11 lines
437 B
YAML
11 lines
437 B
YAML
---
|
|
# Provision docker on the arm64 build host(s) — the native arm64 daily-image lane.
|
|
# ansible-playbook infrastructure/playbooks/docker_build_host.yml
|
|
# Targets the [build_hosts] inventory group (gandalf). Idempotent: re-running re-asserts
|
|
# docker + the FORWARD-policy guard, so the build host survives re-imaging.
|
|
- name: Provision docker on arm64 build hosts
|
|
hosts: build_hosts
|
|
become: true
|
|
roles:
|
|
- docker_build_host
|